last executing test programs: 1.350143788s ago: executing program 1 (id=4740): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6e", 0x50}], 0x1}, 0x60044084) socketpair(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8912, &(0x7f0000000080)) 1.32837316s ago: executing program 1 (id=4741): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x8}, 0x18) 1.311591181s ago: executing program 4 (id=4742): syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000080)={[{@nobh}, {@usrquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@usrjquota}, {@barrier}, {@acl}, {@noload}]}, 0x0, 0x48f, &(0x7f0000000a00)="$eJzs289rHGUfAPDvTLJJ+/ZH8vbtq7ZWjRYhKCZNWrUHL0oFkYqCHuoxJtsSum2kiWJrsamIJ0EKehaPon+BJ0UQ9SR49eRJCkV7aespMpOZZLPd/KDZZNPu5wMz+zwzz+w8333mx7Pz7AbQsQayWRKxMyJ+j4i++ezSAgPzLzevXxy/df3ieBJzc6//leTlbly/OF4WLbfbUWQG04j0o6TYyVLT5y+cHqvVqueK/PDMmbeHp89feOrdM2OnqqeqZ0ePHj1yeOTZZ0afbkmcWVw39n8wdWDfS29eeWX8xJW3fv4mq+/OYn19HK0ykAX+91yucd3jrd5Zm+3K5735POluc2VYs66IyJqrkp//fdEVi43XFy9+2NbKARsquzf1Lr96dg64hyWx1pKVumsGcPcrb/TZ999y2oRux5Zx7fn5L0BZ3DeLaX5Nd6RFmcrC99vWG4iIE7P/fJFNsUHPIQAA6n0y/vnxnuiN9299/XLW9+hbWJPGffnrH/l8dzGG0h8R/42IPRHxv4jYGxH/j8jL3h8RD6yzPrf3f9Kr63zLFWX9v+eKsa2l/b+y9xf9XUVuVx5/JTk5WaseKj6Twaj0ZvmRFfbx/bHfPl1uXX3/L5uy/Zd9waIeV7sbHtBNjM2MRWU9US+6djlif3ez+JOFkYAkIvZFxP6FrdY0wLO7TEw+8dWB5QqtHv8KWjDONPdlFt5sFv9sNMRfSurHJydvG58c3ha16qHh8qi43S+/fvzacvtfV/wtcK06/1rX/o1F+pP68drp1u7/Do//tCd5Ix9n7inGHN8bm5k5NxLRkxzP898VzZcvH13ctsyX5bPjf/Bg8/N/T7FN9lYPRkR2ED8UEQ9HxCNF3R+NiMci4uAKMf70wurxR9qm9r8cMdH0+rdw/De0//kLp8tL4+KSFRNdp3/8drn9r639j+SpwWJJfv1bRbPqdDep8p1+bgAAAHA3SfPfwCfp0EI6TYeG5n/Dvzf+k9ampmeePDn1ztmJ+d/K90clLZ909RXPQ2uTtepIMlu8YyU5FrXqaPGsuHxeerh4bvxZ1/Y8PzQ+VZtoc+zQ6XYsc/5n/uxqd+2ADba96dLRnk2vCNAGjePo6dLspVfDxQDuVf6vDZ1rlfM/3ax6AJvP/R86V7Pz/1JD3lgA3Jvc/6FzOf+hQ6U/tLsGQBu5/0NHWvXP++1JbKtf0rNy4Z4tUueWJbZqo+SJiDKRbon6SGxQot1XJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNb4NwAA//9vGdqJ") setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), &(0x7f0000000b40), 0xfe1c, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 1.275058433s ago: executing program 1 (id=4743): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0xfeff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 1.166716681s ago: executing program 1 (id=4746): bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r0, &(0x7f0000000440)=[{&(0x7f0000000080)=""/121, 0x900}], 0x1, &(0x7f0000000500)=[{&(0x7f0000001700)=""/4095, 0xfffffeb6}], 0x1, 0x0) 1.083781266s ago: executing program 1 (id=4748): r0 = socket$can_raw(0x1d, 0x3, 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) 1.082967716s ago: executing program 4 (id=4750): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000134000000140a0b000000000000000000020000000900010073797a300000000008000340000000010900020073797a31"], 0x98}}, 0x0) 1.006077832s ago: executing program 1 (id=4753): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x4000) 970.565144ms ago: executing program 4 (id=4755): setuid(0xee00) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r0, 0x8955, 0x0) 935.024077ms ago: executing program 2 (id=4756): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) fremovexattr(0xffffffffffffffff, &(0x7f0000000000)=@known='system.posix_acl_default\x00') 928.320667ms ago: executing program 4 (id=4758): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x10, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0x6}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="09000000180000000800000040"], 0x48) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001600)={r0, 0x0, 0x0}, 0x20) 819.450254ms ago: executing program 4 (id=4760): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}}, 0x0) 749.099419ms ago: executing program 4 (id=4762): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/73, 0xfffffd8d}], 0x1) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1) 623.648988ms ago: executing program 0 (id=4765): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}], 0x20) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) 611.647959ms ago: executing program 0 (id=4766): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c799dbe888a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 475.215758ms ago: executing program 2 (id=4768): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 392.525423ms ago: executing program 2 (id=4769): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x32) 360.371266ms ago: executing program 3 (id=4771): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x470, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@helper={{0x48}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4d0) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@multicast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\a\x00', 0x14, 0x2c, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, {[], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}}, 0x0) 346.132487ms ago: executing program 0 (id=4772): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x4048800) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) 285.325141ms ago: executing program 2 (id=4773): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000060900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014500000000c0a010300000000000000000a0000060900020073797a31000000000900010073797a31000000002400038020000080040001800c000440000000000000000f0c0005400013"], 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000050) 273.968132ms ago: executing program 3 (id=4774): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c) 223.114735ms ago: executing program 0 (id=4775): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r0, 0x0) recvfrom$inet(r0, &(0x7f0000000e00)=""/4096, 0x1000, 0x1, 0x0, 0x0) 221.898175ms ago: executing program 3 (id=4776): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5, 0x0, 0xc022}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@ipv6_getroute={0x30, 0x1a, 0x101, 0x0, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x5, 0x800}, [@RTA_GATEWAY={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x37}}]}, 0x30}}, 0x0) 168.461539ms ago: executing program 0 (id=4777): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x2004db, &(0x7f0000000300), 0x12, 0x52c, &(0x7f0000000980)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0, 0x1) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 144.101471ms ago: executing program 3 (id=4778): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000700)={@local, @local, @void, {@ipv6={0x86dd, @dccp_packet={0xa, 0x6, "9781a6", 0x10, 0x21, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, @local, {[], {{0x4e23, 0x4e23, 0x4, 0x1, 0x4, 0x0, 0x0, 0x3, 0x7, "970e14", 0x2, "21d383"}}}}}}}, 0x0) 97.062694ms ago: executing program 3 (id=4779): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x30, r1, 0x2cb3b0415539fbbb, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xfffffbff}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x90) 96.922244ms ago: executing program 2 (id=4780): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96854305", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 66.025556ms ago: executing program 0 (id=4781): syz_mount_image$ext4(&(0x7f0000000200)='ext2\x00', &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$eJzs3M1vVFUfAODfvf3gffmsigpItEqMjR8tLags3Gg0cYFRowvUVW0LIRRqaE0sIVCNwY2JIdG1ujTxL3DnxqgrExNXujckRNmAxsWYe+demE47dFqnM4V5nmSYc+acO+ecOffMPfccpgF0rcHsnyRia0T8GhE7qtHFGQarT9eunJ3468rZiSQqldf+SPJ8V6+cnSizlsdtKSJDaUT6YVIUstjs/JkT49PTU6eL+MjcyXdGZufPPHH85PixqWNTp8YOHTp4YPTpp8aebEk7s3Zd3XNuZu/uF9+4+NLEkYtv//B1Vt+tRXptO9akf+lLg1nD/6zk6tMejv//p+I2mm014aS3gxVhVXoiIuuuvmz8VyqV8zVpO+KFD1Y4fMs6Vw9YR9m1adMyrxfXxYVKQ8lNU4FbQRKdrgHQGeX1Prv/LR9tnH503OVnqzdAWbuvFY9qSm+kRZ6+uvvbVhqMiCMLf3+ePaIV6xAAACv4eOKzw/H4cvO/NO6pybe92EMZiIg7IuLOiLgrInZGxN0Red57I2JXM4XWbBDUbw0tnf+kl+qytHR3IZv/PVPsbS2e/5WzvxjoKWLb8vb3JUePT0/tLz6ToejblMVHb1LGt8///EmjtNr5X/bIyi/ngkU9LvXWLdBNjs+N55PSFrj8fsSe3vinUqnUtT+5/kEnEbE7Ivas7q23l4Hjj361t1Gmldu/5O1uaMGZUPky4pFq/y9EXftLydL9yf5tN/YnR/4X01P7R8qzYqkff7rwSqPym2//+sj6f/Pi879I+WK+CAy8VbtfOxsNdi63Nizjwm8fNbynWev535+8nn8flduu743PzZ0ejehPDufxRa+P3Ti2jJf5s/YP7ctSyvaXR6b5d1wU/X9fROwt9svuj4gHiro/GBEPRcS+hq2P+P65xmkbof8na/o/ifrzf9e56nPZ//OrDvSc+O6bRuU31/8H89BQ8Ur+/beCZiu49k8OAAAAbh1pvnKTpMPXw2k6PFz9j707Y3M6PTM799jRmXdPTVZXeAaiLy1XunbUrIeOJgvFO1bjY8VacZl+oFg3/rQn8vjwxMz0ZIfbDt1uS4Pxn/m9p9O1A9bdcvtoY8v8oA24/dSP/3Rx9PzL7awM0FZ+rw3da4Xxn7arHkD7uf5D91pu/J+vi9sLgNuT6z90L+MfupfxD92rbvz3xC+dqgnQRmv4Ob/Ahgm8OryaozZFK0uPdIN8CE0Emv97EOsdeHNjVKOJQKe/mQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFrj3wAAAP//dNXrDA==") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) futex(&(0x7f0000000200)=0x1, 0x88, 0x2, 0x0, 0x0, 0x1) 430.19µs ago: executing program 2 (id=4782): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet6_udp_encap(r0, 0x11, 0x68, &(0x7f0000000000)=0x5, 0x4) 0s ago: executing program 3 (id=4783): pipe2$9p(0x0, 0x980) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x75fd, &(0x7f0000000040)={0x0, 0x8002ce0, 0xc000, 0xa, 0x20002f7}) kernel console output (not intermixed with test programs): rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 71.774951][ T8952] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 71.845533][ T8998] netlink: 'syz.4.2191': attribute type 3 has an invalid length. [ 71.868159][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.878178][ T8998] netlink: 'syz.4.2191': attribute type 3 has an invalid length. [ 71.887164][ T8998] __nla_validate_parse: 2 callbacks suppressed [ 71.887184][ T8998] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2191'. [ 71.962653][ T9016] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 71.991014][ T9027] netlink: 'syz.1.2202': attribute type 33 has an invalid length. [ 72.023220][ T9027] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2202'. [ 72.078794][ T9044] netdevsim netdevsim1: Firmware load for './file0/file0/..' refused, path contains '..' component [ 72.159161][ T9063] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2215'. [ 72.250504][ T9086] loop4: detected capacity change from 0 to 256 [ 72.347998][ T9108] netlink: 'syz.0.2231': attribute type 21 has an invalid length. [ 72.374625][ T9108] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2231'. [ 72.421358][ T9122] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2236'. [ 72.453034][ T9129] deleting an unspecified loop device is not supported. [ 72.461457][ T9122] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2236'. [ 72.462232][ T9133] netlink: 'syz.1.2240': attribute type 4 has an invalid length. [ 72.486547][ T9122] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2236'. [ 72.493426][ T9133] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2240'. [ 72.512001][ T9125] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 72.654758][ T9168] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2252'. [ 72.679628][ T9168] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 72.876354][ T9215] Driver unsupported XDP return value 0 on prog (id 67) dev N/A, expect packet loss! [ 73.238249][ T9280] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 73.341055][ T9302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2296'. [ 73.476484][ T9340] netlink: 'syz.0.2307': attribute type 10 has an invalid length. [ 73.545600][ T9349] loop0: detected capacity change from 0 to 2048 [ 73.597682][ T9349] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.626314][ T28] kauditd_printk_skb: 94 callbacks suppressed [ 73.626332][ T28] audit: type=1400 audit(1775359494.222:609): avc: denied { write } for pid=9344 comm="syz.0.2312" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 73.664668][ T28] audit: type=1400 audit(1775359494.252:610): avc: denied { open } for pid=9344 comm="syz.0.2312" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 73.694088][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.769176][ T9390] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 73.846581][ T9402] veth2: entered allmulticast mode [ 74.045678][ T9461] loop2: detected capacity change from 0 to 136 [ 74.058986][ T28] audit: type=1400 audit(1775359494.652:611): avc: denied { mounton } for pid=9457 comm="syz.2.2344" path="/490/file0" dev="tmpfs" ino=2491 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 74.156781][ T9488] loop2: detected capacity change from 0 to 512 [ 74.180163][ T9488] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 74.417617][ T9546] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 74.436257][ T9554] netlink: 'syz.3.2373': attribute type 17 has an invalid length. [ 74.456391][ T9546] gretap2: entered allmulticast mode [ 74.564803][ T28] audit: type=1326 audit(1775359495.152:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9578 comm="syz.0.2382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f487db1c819 code=0x50000 [ 74.594412][ T28] audit: type=1326 audit(1775359495.152:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9578 comm="syz.0.2382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f487db1c819 code=0x50000 [ 74.634662][ T28] audit: type=1326 audit(1775359495.152:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9578 comm="syz.0.2382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f487db1c819 code=0x50000 [ 74.673321][ T28] audit: type=1326 audit(1775359495.152:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9578 comm="syz.0.2382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f487db1c819 code=0x50000 [ 74.701013][ T28] audit: type=1326 audit(1775359495.152:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9578 comm="syz.0.2382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f487db1c819 code=0x50000 [ 74.731187][ T28] audit: type=1326 audit(1775359495.152:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9578 comm="syz.0.2382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f487db1c819 code=0x50000 [ 74.757697][ T9598] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 74.762796][ T28] audit: type=1326 audit(1775359495.152:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9578 comm="syz.0.2382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f487db1c819 code=0x50000 [ 74.954619][ T9632] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 74.974518][ T9640] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 74.981136][ T9640] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 74.989327][ T9632] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 75.020758][ T9640] vhci_hcd vhci_hcd.0: Device attached [ 75.042800][ T9649] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 75.049456][ T9649] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 75.092552][ T9658] xt_hashlimit: max too large, truncated to 1048576 [ 75.099846][ T9649] vhci_hcd vhci_hcd.0: Device attached [ 75.108447][ T9650] vhci_hcd: connection closed [ 75.110368][ T1993] vhci_hcd vhci_hcd.3: stop threads [ 75.121256][ T1993] vhci_hcd vhci_hcd.3: release socket [ 75.131999][ T9641] vhci_hcd: connection closed [ 75.140495][ T1993] vhci_hcd vhci_hcd.3: disconnect device [ 75.166057][ T1993] vhci_hcd vhci_hcd.3: stop threads [ 75.171322][ T1993] vhci_hcd vhci_hcd.3: release socket [ 75.203235][ T1033] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 75.216157][ T1993] vhci_hcd vhci_hcd.3: disconnect device [ 75.263263][ T1033] usb 7-1: new full-speed USB device number 2 using vhci_hcd [ 75.283183][ T1033] usb 7-1: enqueue for inactive port 0 [ 75.288679][ T1033] usb 7-1: enqueue for inactive port 0 [ 75.306367][ T9687] loop4: detected capacity change from 0 to 2048 [ 75.317757][ T1033] usb 7-1: enqueue for inactive port 0 [ 75.363467][ T3301] loop4: p1 < > p3 < > p4 < > [ 75.368352][ T3301] loop4: partition table partially beyond EOD, truncated [ 75.398553][ T3301] loop4: p1 start 3405774849 is beyond EOD, truncated [ 75.410116][ T3301] loop4: p3 start 2304 is beyond EOD, truncated [ 75.415844][ T1033] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 75.426345][ T9687] loop4: p1 < > p3 < > p4 < > [ 75.452231][ T9687] loop4: partition table partially beyond EOD, truncated [ 75.474943][ T9687] loop4: p1 start 3405774849 is beyond EOD, truncated [ 75.481918][ T9687] loop4: p3 start 2304 is beyond EOD, truncated [ 75.514269][ T9719] netlink: 'syz.2.2426': attribute type 1 has an invalid length. [ 75.539169][ T9724] netlink: 'syz.1.2427': attribute type 10 has an invalid length. [ 75.562453][ T9724] bridge0: port 3(netdevsim1) entered blocking state [ 75.582232][ T9724] bridge0: port 3(netdevsim1) entered disabled state [ 75.592460][ T9724] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 75.599161][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 75.611444][ T9724] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 75.653780][ T9724] bridge0: port 3(netdevsim1) entered blocking state [ 75.661077][ T9724] bridge0: port 3(netdevsim1) entered forwarding state [ 75.719117][ T9751] loop2: detected capacity change from 0 to 512 [ 75.743951][ T9751] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 75.840507][ T9770] netlink: 'syz.3.2440': attribute type 9 has an invalid length. [ 75.848680][ T9770] netlink: 'syz.3.2440': attribute type 7 has an invalid length. [ 75.857228][ T9770] netlink: 'syz.3.2440': attribute type 8 has an invalid length. [ 75.863356][ T9751] ------------[ cut here ]------------ [ 75.871970][ T9751] EA inode 11 i_nlink=2 [ 75.871984][ T9751] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.2.2435/9751 [ 75.887147][ T9751] Modules linked in: [ 75.891162][ T9751] CPU: 1 UID: 0 PID: 9751 Comm: syz.2.2435 Not tainted syzkaller #0 PREEMPT(full) [ 75.900639][ T9751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 75.911020][ T9751] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 75.918176][ T9751] Code: 14 34 99 ff 4c 8d 2d 7d a0 5d 05 49 8d 7e 40 e8 54 cd b5 ff 49 8b 6e 40 4c 89 e7 e8 88 c8 b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 ff d2 dd 03 66 66 66 66 66 66 2e [ 75.938142][ T9751] RSP: 0018:ffffc90000f7b778 EFLAGS: 00010246 [ 75.944590][ T9751] RAX: ffff888102642c48 RBX: ffff888106987a88 RCX: ffffffff81c02c98 [ 75.952707][ T9751] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871dcd00 [ 75.961519][ T9751] RBP: 000000000000000b R08: 0001888106987a3b R09: 0000000000000000 [ 75.969518][ T9751] R10: ffffc90000f7b6a8 R11: 0001c90000f7b6a8 R12: ffff888106987a38 [ 75.977699][ T9751] R13: ffffffff871dcd00 R14: ffff8881069879f0 R15: 0000000000000001 [ 75.986214][ T9751] FS: 00007f23cd2f76c0(0000) GS:ffff8882ae9d7000(0000) knlGS:0000000000000000 [ 75.995484][ T9751] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.002198][ T9751] CR2: 00007f1ea8ff56b8 CR3: 000000013b3b8000 CR4: 00000000003506f0 [ 76.010520][ T9751] Call Trace: [ 76.013921][ T9751] [ 76.016897][ T9751] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 76.022919][ T9751] ? errseq_check+0x2c/0x50 [ 76.027601][ T9751] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 76.033592][ T9751] ? ext4_truncate+0x92b/0xb00 [ 76.038418][ T9751] ext4_evict_inode+0xac1/0xe40 [ 76.043370][ T9751] ? __pfx_ext4_evict_inode+0x10/0x10 [ 76.048841][ T9751] evict+0x2af/0x510 [ 76.052905][ T9751] ? __dquot_initialize+0x146/0x7c0 [ 76.058267][ T9751] iput+0x41a/0x580 [ 76.062136][ T9751] ext4_process_orphan+0x1a9/0x1c0 [ 76.067320][ T9751] ext4_orphan_cleanup+0x6a8/0xa00 [ 76.072493][ T9751] ext4_fill_super+0x3414/0x37c0 [ 76.077546][ T9751] ? set_blocksize+0x14c/0x270 [ 76.082446][ T9751] ? setup_bdev_super+0x30e/0x370 [ 76.087546][ T9751] ? __pfx_ext4_fill_super+0x10/0x10 [ 76.092861][ T9751] get_tree_bdev_flags+0x291/0x300 [ 76.098216][ T9751] ? __pfx_ext4_fill_super+0x10/0x10 [ 76.103632][ T9751] get_tree_bdev+0x1f/0x30 [ 76.108179][ T9751] ext4_get_tree+0x1c/0x30 [ 76.112919][ T9751] vfs_get_tree+0x57/0x1d0 [ 76.117488][ T9751] do_new_mount+0x288/0x8d0 [ 76.122026][ T9751] path_mount+0x4d0/0xbc0 [ 76.126444][ T9751] __se_sys_mount+0x28c/0x2e0 [ 76.131246][ T9751] __x64_sys_mount+0x67/0x80 [ 76.135964][ T9751] x64_sys_call+0x2d61/0x3020 [ 76.140789][ T9751] do_syscall_64+0x12c/0x370 [ 76.145882][ T9751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.151825][ T9751] RIP: 0033:0x7f23ce89da8a [ 76.156680][ T9751] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.177118][ T9751] RSP: 002b:00007f23cd2f6e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 76.185771][ T9751] RAX: ffffffffffffffda RBX: 00007f23cd2f6ee0 RCX: 00007f23ce89da8a [ 76.194014][ T9751] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f23cd2f6ea0 [ 76.202215][ T9751] RBP: 00002000000009c0 R08: 00007f23cd2f6ee0 R09: 0000000000800718 [ 76.210840][ T9751] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 76.219061][ T9751] R13: 00007f23cd2f6ea0 R14: 000000000000048d R15: 0000200000000200 [ 76.227299][ T9751] [ 76.230417][ T9751] ---[ end trace 0000000000000000 ]--- [ 76.242214][ T9751] EXT4-fs (loop2): 1 orphan inode deleted [ 76.242693][ T9751] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.367395][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.851476][ T9929] loop4: detected capacity change from 0 to 764 [ 77.015931][ T9964] loop1: detected capacity change from 0 to 512 [ 77.036527][ T9964] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 77.069855][ T9964] EXT4-fs (loop1): 1 orphan inode deleted [ 77.115394][ T9964] EXT4-fs (loop1): 1 truncate cleaned up [ 77.121507][ T9964] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.214890][ T9964] EXT4-fs error (device loop1): ext4_search_dir:1474: inode #12: block 7: comm syz.1.2493: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 77.288809][ T9964] EXT4-fs (loop1): Remounting filesystem read-only [ 77.318641][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.626025][T10044] __nla_validate_parse: 5 callbacks suppressed [ 77.626043][T10044] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2518'. [ 77.667092][T10044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2518'. [ 78.052524][T10138] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2549'. [ 78.108817][T10150] netlink: 'syz.1.2554': attribute type 6 has an invalid length. [ 78.409044][T10209] netlink: 'syz.0.2575': attribute type 1 has an invalid length. [ 78.438346][T10215] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 78.444996][T10215] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 78.470456][T10225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2579'. [ 78.479594][T10215] vhci_hcd vhci_hcd.0: Device attached [ 78.490535][T10217] vhci_hcd: connection closed [ 78.490758][ T141] vhci_hcd vhci_hcd.4: stop threads [ 78.505367][ T141] vhci_hcd vhci_hcd.4: release socket [ 78.521306][ T141] vhci_hcd vhci_hcd.4: disconnect device [ 78.590414][T10250] batman_adv: batadv0: Interface deactivated: macvlan0 [ 78.605811][T10250] batman_adv: batadv0: Removing interface: macvlan0 [ 78.669228][T10273] SELinux: syz.0.2591 (10273) set checkreqprot to 1. This is no longer supported. [ 78.837514][T10311] netlink: 'syz.1.2605': attribute type 8 has an invalid length. [ 78.858636][T10316] loop0: detected capacity change from 0 to 512 [ 78.879893][T10316] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 78.886382][ T28] kauditd_printk_skb: 7917 callbacks suppressed [ 78.886397][ T28] audit: type=1400 audit(1775359499.482:8533): avc: denied { connect } for pid=10320 comm="syz.3.2608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 78.888335][T10316] EXT4-fs (loop0): orphan cleanup on readonly fs [ 78.924620][T10316] EXT4-fs warning (device loop0): ext4_enable_quotas:7261: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 78.940704][T10316] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 78.953762][T10316] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #13: comm syz.0.2606: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 78.972558][T10316] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 78.972704][T10316] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.2606: couldn't read orphan inode 13 (err -117) [ 78.982309][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 78.982332][ C0] EXT4-fs (loop0): last error at time 1775359499: ext4_ext_check_inode:521: inode 13 [ 79.016327][T10316] loop0: lost filesystem error report for type 5 error -117 [ 79.016876][T10316] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 79.069324][T10316] EXT4-fs error (device loop0): ext4_lookup:1785: comm syz.0.2606: inode #15: comm syz.0.2606: iget: illegal inode # [ 79.133355][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.159554][T10354] ip6erspan0: entered allmulticast mode [ 79.385585][T10414] vti0: entered allmulticast mode [ 79.542537][T10453] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2650'. [ 79.670183][T10488] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2660'. [ 79.773263][T10508] netlink: 'syz.3.2665': attribute type 4 has an invalid length. [ 79.781505][T10508] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2665'. [ 79.808721][T10508] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 80.063436][T10724] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2677'. [ 80.365332][T11089] loop4: detected capacity change from 0 to 4096 [ 80.381188][T11089] EXT4-fs: Ignoring removed bh option [ 80.421835][T11089] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.446681][ T28] audit: type=1400 audit(1775359501.042:8534): avc: denied { setopt } for pid=11115 comm="syz.3.2706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 80.517206][ T28] audit: type=1400 audit(1775359501.112:8535): avc: denied { add_name } for pid=11088 comm="syz.4.2695" name="file3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.541543][T11089] Quota error (device loop4): find_block_dqentry: Quota for id 0 referenced but not present [ 80.553493][T11089] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 80.570804][T11089] EXT4-fs error (device loop4): ext4_acquire_dquot:7026: comm syz.4.2695: Failed to acquire dquot type 0 [ 80.623470][T11089] EXT4-fs (loop4): Remounting filesystem read-only [ 80.679986][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.694595][T11161] xt_cgroup: path and classid specified [ 80.796386][T11181] bond2: option fail_over_mac: invalid value (127) [ 80.817125][T11181] bond2 (unregistering): Released all slaves [ 80.910067][T11273] delete_channel: no stack [ 80.986138][T11293] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2738'. [ 81.010173][T11293] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2738'. [ 81.152267][T11332] netlink: 'syz.1.2751': attribute type 1 has an invalid length. [ 81.171579][T11332] netlink: 'syz.1.2751': attribute type 2 has an invalid length. [ 81.419701][ T28] audit: type=1326 audit(1775359502.012:8536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11384 comm="syz.0.2769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f487db1c819 code=0x7ffc0000 [ 81.487425][ T28] audit: type=1326 audit(1775359502.012:8537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11384 comm="syz.0.2769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f487db1c819 code=0x7ffc0000 [ 81.522866][ T28] audit: type=1326 audit(1775359502.042:8538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11384 comm="syz.0.2769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f487db1c819 code=0x7ffc0000 [ 81.574410][ T28] audit: type=1326 audit(1775359502.042:8539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11384 comm="syz.0.2769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f487db1c819 code=0x7ffc0000 [ 81.621555][T11404] bond0: option fail_over_mac: invalid value (127) [ 81.631488][ T28] audit: type=1326 audit(1775359502.042:8540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11384 comm="syz.0.2769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f487db1c819 code=0x7ffc0000 [ 81.657025][T11404] bond0 (unregistering): Released all slaves [ 81.805324][T11479] netlink: 'syz.3.2779': attribute type 21 has an invalid length. [ 81.834165][T11479] netlink: 'syz.3.2779': attribute type 4 has an invalid length. [ 81.853163][T11479] netlink: 'syz.3.2779': attribute type 5 has an invalid length. [ 82.474540][T11628] netlink: 'syz.4.2828': attribute type 39 has an invalid length. [ 82.654133][T11674] xt_TCPMSS: Only works on TCP SYN packets [ 82.727967][T11690] __nla_validate_parse: 5 callbacks suppressed [ 82.728023][T11690] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2846'. [ 82.748755][T11693] netlink: 'syz.3.2848': attribute type 2 has an invalid length. [ 82.814060][T11709] netlink: 'syz.3.2852': attribute type 46 has an invalid length. [ 82.836728][T11712] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2854'. [ 82.900448][T11828] SELinux: policydb version 0 does not match my version range 15-35 [ 82.909786][T11828] SELinux: failed to load policy [ 83.168292][T12253] IPv6: NLM_F_REPLACE set, but no existing node found! [ 83.193945][T12258] netlink: 'syz.2.2872': attribute type 12 has an invalid length. [ 83.224570][T12258] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2872'. [ 83.420383][T12371] netlink: 'syz.1.2887': attribute type 1 has an invalid length. [ 83.579047][T12420] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2888'. [ 84.037209][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 84.037227][ T28] audit: type=1400 audit(1775359504.632:8553): avc: denied { ioctl } for pid=12935 comm="syz.2.2921" path="socket:[24296]" dev="sockfs" ino=24296 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 84.157869][ T28] audit: type=1400 audit(1775359504.752:8554): avc: denied { write } for pid=12963 comm="syz.4.2927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 84.225001][ T28] audit: type=1400 audit(1775359504.812:8555): avc: denied { ioctl } for pid=12976 comm="syz.4.2932" path="socket:[24352]" dev="sockfs" ino=24352 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 84.321411][T12996] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2938'. [ 84.348425][ T28] audit: type=1326 audit(1775359504.902:8556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12988 comm="syz.4.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5d6ec819 code=0x7ffc0000 [ 84.405187][ T28] audit: type=1326 audit(1775359504.902:8557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12988 comm="syz.4.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5d6ec819 code=0x7ffc0000 [ 84.430380][ T28] audit: type=1326 audit(1775359504.902:8558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12988 comm="syz.4.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0c5d6ec819 code=0x7ffc0000 [ 84.509929][ T28] audit: type=1326 audit(1775359504.902:8559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12988 comm="syz.4.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f0c5d6ec819 code=0x7ffc0000 [ 84.665443][T13275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2953'. [ 84.675641][T13275] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2953'. [ 84.850069][T13548] xt_CT: No such helper "snmp_trap" [ 84.940705][T13553] bond0: entered promiscuous mode [ 84.974732][T13553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.984843][T13596] loop0: detected capacity change from 0 to 512 [ 85.035153][T13596] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.057171][T13596] ext4 filesystem being mounted at /466/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.084897][T13596] EXT4-fs error (device loop0): __ext4_remount:6829: comm syz.0.2965: Abort forced by user [ 85.088626][T13604] bond2: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 85.108063][T13604] bond2 (unregistering): Released all slaves [ 85.121916][T13596] EXT4-fs (loop0): Remounting filesystem read-only [ 85.129049][T13596] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 85.176447][T13690] loop2: detected capacity change from 0 to 256 [ 85.194135][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.247497][T13703] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2974'. [ 85.252524][T13690] FAT-fs (loop2): Directory bread(block 64) failed [ 85.303320][T13690] FAT-fs (loop2): Directory bread(block 65) failed [ 85.309926][T13690] FAT-fs (loop2): Directory bread(block 66) failed [ 85.341469][T13690] FAT-fs (loop2): Directory bread(block 67) failed [ 85.345236][T13714] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2980'. [ 85.357208][ T28] audit: type=1400 audit(1775359505.952:8560): avc: denied { ioctl } for pid=13715 comm="syz.4.2979" path="/dev/mISDNtimer" dev="devtmpfs" ino=250 ioctlcmd=0x4941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 85.386368][T13690] FAT-fs (loop2): Directory bread(block 68) failed [ 85.393083][T13690] FAT-fs (loop2): Directory bread(block 69) failed [ 85.416769][T13690] FAT-fs (loop2): Directory bread(block 70) failed [ 85.431856][T13690] FAT-fs (loop2): Directory bread(block 71) failed [ 85.460283][T13690] FAT-fs (loop2): Directory bread(block 72) failed [ 85.473261][T13690] FAT-fs (loop2): Directory bread(block 73) failed [ 85.542263][T13752] loop0: detected capacity change from 0 to 256 [ 85.666646][T13770] loop3: detected capacity change from 0 to 512 [ 85.749615][T13770] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.782498][T13770] ext4 filesystem being mounted at /618/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.890715][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.937011][ T28] audit: type=1400 audit(1775359506.532:8561): avc: denied { audit_write } for pid=13818 comm="syz.1.3011" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 85.996208][ T28] audit: type=1107 audit(1775359506.552:8562): pid=13818 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='P' [ 86.086726][T13845] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 86.421872][T13917] IPv6: NLM_F_CREATE should be specified when creating new route [ 86.721082][T13984] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1280 sclass=netlink_tcpdiag_socket pid=13984 comm=syz.2.3064 [ 86.742996][T13988] validate_nla: 3 callbacks suppressed [ 86.743013][T13988] netlink: 'syz.3.3065': attribute type 3 has an invalid length. [ 87.163648][T14083] loop4: detected capacity change from 0 to 512 [ 87.204822][T14083] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.225227][T14083] ext4 filesystem being mounted at /687/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.277150][T14083] EXT4-fs error (device loop4): __ext4_remount:6829: comm syz.4.3096: Abort forced by user [ 87.309265][T14083] EXT4-fs (loop4): Remounting filesystem read-only [ 87.316120][T14083] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 87.333739][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.824695][T14126] loop1: detected capacity change from 0 to 256 [ 87.850063][T14206] netlink: 'syz.0.3115': attribute type 2 has an invalid length. [ 87.932722][T14361] loop0: detected capacity change from 0 to 1024 [ 87.946605][T14361] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 87.974175][T14361] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c841e018, mo2=0000] [ 88.003692][T14361] EXT4-fs error (device loop0): ext4_map_blocks:786: inode #3: block 2: comm syz.0.3110: lblock 2 mapped to illegal pblock 2 (length 1) [ 88.004755][T14518] netlink: 'syz.1.3112': attribute type 1 has an invalid length. [ 88.020353][T14361] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 88.028519][T14361] EXT4-fs error (device loop0): ext4_map_blocks:786: inode #3: block 48: comm syz.0.3110: lblock 0 mapped to illegal pblock 48 (length 1) [ 88.038373][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 88.038394][ C1] EXT4-fs (loop0): initial error at time 1775359508: ext4_map_blocks:786: inode 3: block 2 [ 88.038426][ C1] EXT4-fs (loop0): last error at time 1775359508: ext4_map_blocks:786: inode 3: block 2 [ 88.099116][T14361] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 88.099665][T14361] EXT4-fs error (device loop0): ext4_acquire_dquot:7026: comm syz.0.3110: Failed to acquire dquot type 0 [ 88.129791][T14361] loop0: lost filesystem error report for type 5 error -117 [ 88.139345][T14361] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 88.150148][T14361] loop0: lost filesystem error report for type 5 error -117 [ 88.150303][T14361] EXT4-fs error (device loop0): ext4_evict_inode:265: inode #11: comm syz.0.3110: mark_inode_dirty error [ 88.171327][T14361] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 88.173353][T14361] EXT4-fs warning (device loop0): ext4_evict_inode:268: couldn't mark inode dirty (err -117) [ 88.205295][T14361] EXT4-fs (loop0): 1 orphan inode deleted [ 88.226192][ T1670] EXT4-fs error (device loop0): ext4_map_blocks:786: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 88.252962][T14361] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.277082][ T1670] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 88.284219][ T1670] EXT4-fs error (device loop0): ext4_release_dquot:7062: comm kworker/u8:7: Failed to release dquot type 0 [ 88.317080][T14361] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.327285][T14361] EXT4-fs error (device loop0): __ext4_get_inode_loc:4797: comm syz.0.3110: Invalid inode table block 1 in block_group 0 [ 88.375094][T14361] loop0: lost filesystem error report for type 5 error -117 [ 88.375253][T14361] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 88.391874][T14673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3128'. [ 88.404307][T14361] loop0: lost filesystem error report for type 5 error -117 [ 88.404451][T14361] EXT4-fs error (device loop0): ext4_quota_off:7310: inode #3: comm syz.0.3110: mark_inode_dirty error [ 88.427471][T14678] ipt_REJECT: TCP_RESET invalid for non-tcp [ 88.429990][T14673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.466326][T14361] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 88.591837][T14720] mmap: syz.0.3142 (14720) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 88.631780][T14724] x_tables: unsorted underflow at hook 2 [ 88.657357][T14731] vlan0: entered promiscuous mode [ 88.693433][T14737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3148'. [ 88.762811][T14751] loop4: detected capacity change from 0 to 256 [ 88.771699][T14754] SET target dimension over the limit! [ 88.793811][T14751] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 88.829409][T14751] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 88.846509][T14766] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3156'. [ 89.060156][T14914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3163'. [ 89.114396][T15291] xt_nat: multiple ranges no longer supported [ 89.174338][T15302] netlink: 'syz.4.3174': attribute type 15 has an invalid length. [ 89.212274][T15302] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3174'. [ 89.341654][T15324] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3184'. [ 89.382478][T15328] netlink: 'syz.1.3185': attribute type 21 has an invalid length. [ 89.419485][T15328] IPv6: NLM_F_CREATE should be specified when creating new route [ 89.420101][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 89.420115][ T28] audit: type=1400 audit(1775359510.012:8571): avc: denied { shutdown } for pid=15336 comm="syz.0.3188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 89.439188][T15328] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 89.462251][T15328] IPv6: NLM_F_CREATE should be set when creating new route [ 89.469752][T15328] IPv6: NLM_F_CREATE should be set when creating new route [ 89.477444][T15328] IPv6: NLM_F_CREATE should be set when creating new route [ 89.515217][T15347] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3190'. [ 89.516029][T15349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3191'. [ 89.585327][T15349] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 89.609510][ T28] audit: type=1400 audit(1775359510.202:8572): avc: denied { bind } for pid=15361 comm="syz.4.3196" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 89.673249][T15367] netlink: 572 bytes leftover after parsing attributes in process `syz.1.3198'. [ 89.678190][ T28] audit: type=1400 audit(1775359510.202:8573): avc: denied { name_bind } for pid=15361 comm="syz.4.3196" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 89.724151][ T28] audit: type=1400 audit(1775359510.202:8574): avc: denied { node_bind } for pid=15361 comm="syz.4.3196" saddr=172.20.20.187 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 89.744912][T15367] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3198'. [ 89.875561][T15397] 8021q: adding VLAN 0 to HW filter on device bond2 [ 89.925352][ T28] audit: type=1400 audit(1775359510.512:8575): avc: denied { read } for pid=15448 comm="syz.1.3214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 89.986745][T15464] loop4: detected capacity change from 0 to 512 [ 90.071599][T15464] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #12: comm syz.4.3216: missing EA_INODE flag [ 90.089298][T15464] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 90.093149][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 90.109383][ C0] EXT4-fs (loop4): initial error at time 1775359510: ext4_xattr_inode_iget:441: inode 12 [ 90.119542][ C0] EXT4-fs (loop4): last error at time 1775359510: ext4_xattr_inode_iget:441: inode 12 [ 90.130191][T15464] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.3216: error while reading EA inode 12 err=-117 [ 90.157963][T15464] loop4: lost filesystem error report for type 5 error -117 [ 90.158373][T15464] EXT4-fs (loop4): 1 orphan inode deleted [ 90.172681][T15464] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.213595][ T28] audit: type=1400 audit(1775359510.802:8576): avc: denied { create } for pid=15463 comm="syz.4.3216" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 90.281057][ T28] audit: type=1400 audit(1775359510.842:8577): avc: denied { setopt } for pid=15514 comm="syz.2.3238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 90.306295][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.524622][T15574] netlink: 'syz.3.3256': attribute type 2 has an invalid length. [ 90.828719][ T28] audit: type=1400 audit(1775359511.422:8578): avc: denied { bind } for pid=15645 comm="syz.1.3277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 91.196564][T16179] bond2: down delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 91.222174][T16179] 8021q: adding VLAN 0 to HW filter on device bond2 [ 91.293786][T16236] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 91.357517][T16250] bond0: left promiscuous mode [ 91.400452][T16260] SET target dimension over the limit! [ 91.593054][T16300] team0: entered allmulticast mode [ 91.615722][T16300] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 91.638260][T16304] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 91.654666][T16304] bond1 (unregistering): Released all slaves [ 91.673448][T16306] netlink: 'syz.1.3326': attribute type 12 has an invalid length. [ 91.687479][T16310] geneve3: entered allmulticast mode [ 91.865034][T16411] netlink: 'syz.3.3337': attribute type 1 has an invalid length. [ 91.873448][T16411] netlink: 'syz.3.3337': attribute type 3 has an invalid length. [ 91.881508][T16414] xt_TCPMSS: Only works on TCP SYN packets [ 91.902467][ T28] audit: type=1326 audit(1775359512.492:8579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16417 comm="syz.0.3342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f487db1c819 code=0x7ffc0000 [ 91.933980][ T28] audit: type=1326 audit(1775359512.492:8580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16417 comm="syz.0.3342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f487db1c819 code=0x7ffc0000 [ 91.977840][T16390] infiniband syz0: set down [ 91.995818][T16390] infiniband syz0: added bond_slave_0 [ 92.017292][T16390] RDS/IB: syz0: added [ 92.021857][T16390] smc: adding ib device syz0 with port count 1 [ 92.037944][T16390] smc: ib device syz0 port 1 has no pnetid [ 92.483593][T16527] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 92.608652][T16554] loop4: detected capacity change from 0 to 512 [ 92.833193][T16613] sctp: [Deprecated]: syz.3.3401 (pid 16613) Use of int in max_burst socket option. [ 92.833193][T16613] Use struct sctp_assoc_value instead [ 93.179106][T16689] netlink: 'syz.2.3430': attribute type 21 has an invalid length. [ 93.442913][T16730] __nla_validate_parse: 9 callbacks suppressed [ 93.442933][T16730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3445'. [ 93.582949][T16781] netlink: 'syz.1.3453': attribute type 58 has an invalid length. [ 93.600024][T16781] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3453'. [ 93.758753][T16812] loop2: detected capacity change from 0 to 512 [ 93.763482][T16814] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3463'. [ 93.784231][T16814] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3463'. [ 93.827746][T16812] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 93.837079][T16812] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 93.852828][T16812] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 93.900723][T16812] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 93.909990][T16812] System zones: 0-2, 18-18, 34-34 [ 93.931243][T16812] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.3462: bad orphan inode 15 [ 93.938502][T16849] netlink: 'syz.0.3476': attribute type 1 has an invalid length. [ 93.943095][T16812] loop2: lost filesystem error report for type 5 error -117 [ 93.951086][T16812] ext4_test_bit(bit=14, block=18) = 1 [ 93.952614][T16850] usb usb1: usbfs: process 16850 (syz.3.3474) did not claim interface 0 before use [ 93.958709][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 93.958730][ C0] EXT4-fs (loop2): initial error at time 1775359514: ext4_orphan_get:1423 [ 93.958757][ C0] EXT4-fs (loop2): last error at time 1775359514: ext4_orphan_get:1423 [ 93.958807][T16812] is_bad_inode(inode)=0 [ 94.002522][T16812] NEXT_ORPHAN(inode)=2264924160 [ 94.008060][T16812] max_ino=32 [ 94.011292][T16812] i_nlink=0 [ 94.014934][T16812] EXT4-fs error (device loop2): ext4_do_update_inode:5602: inode #15: comm syz.2.3462: corrupted inode contents [ 94.027800][T16812] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 94.033341][T16812] EXT4-fs error (device loop2): ext4_dirty_inode:6495: inode #15: comm syz.2.3462: mark_inode_dirty error [ 94.057438][T16812] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 94.057958][T16812] EXT4-fs error (device loop2): ext4_do_update_inode:5602: inode #15: comm syz.2.3462: corrupted inode contents [ 94.089594][T16812] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 94.089757][T16812] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm syz.2.3462: mark_inode_dirty error [ 94.117664][T16812] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 94.117873][T16812] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3002: inode #15: comm syz.2.3462: mark inode dirty (error -117) [ 94.141742][T16812] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 94.141933][T16812] EXT4-fs warning (device loop2): ext4_evict_inode:285: xattr delete (err -117) [ 94.162769][T16812] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.212814][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.228887][T16879] loop3: detected capacity change from 0 to 512 [ 94.238540][T16880] loop4: detected capacity change from 0 to 512 [ 94.254217][T16880] EXT4-fs: Ignoring removed bh option [ 94.260678][T16879] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.3485: Directory hole found for htree index block 0 [ 94.281124][T16880] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 94.283260][T16879] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 94.293534][T16894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3487'. [ 94.302861][T16891] loop2: detected capacity change from 0 to 2048 [ 94.318295][T16879] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 94.323549][T16880] EXT4-fs error (device loop4): ext4_iget_extra_inode:5040: inode #15: comm syz.4.3484: corrupted in-inode xattr: e_value size too large [ 94.326681][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 94.341269][T16880] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 94.347445][ C1] EXT4-fs (loop3): initial error at time 1775359514: dx_probe:791: inode 2 [ 94.363292][T16894] Zero length message leads to an empty skb [ 94.365482][ C1] EXT4-fs (loop3): last error at time 1775359514: dx_probe:791: inode 2 [ 94.380554][T16879] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.400501][T16880] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.3484: couldn't read orphan inode 15 (err -117) [ 94.412945][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 94.412969][ C0] EXT4-fs (loop4): initial error at time 1775359514: ext4_iget_extra_inode:5040: inode 15 [ 94.413003][ C0] EXT4-fs (loop4): last error at time 1775359514: ext4_iget_extra_inode:5040: inode 15 [ 94.442357][T16880] loop4: lost filesystem error report for type 5 error -117 [ 94.442807][ T3301] Alternate GPT is invalid, using primary GPT. [ 94.444140][T16880] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.452477][ T3301] loop2: p1 p2 p3 [ 94.478508][T16879] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 94.494353][T16879] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 94.518464][T16879] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 94.523207][T16891] Alternate GPT is invalid, using primary GPT. [ 94.533996][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.546817][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.556543][T16891] loop2: p1 p2 p3 [ 94.570563][T16917] ucma_write: process 1189 (syz.0.3492) changed security contexts after opening file descriptor, this is not allowed. [ 94.675123][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 94.692357][ T9911] udevd[9911]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 94.704586][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 94.776479][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 94.787730][ T9911] udevd[9911]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 94.789360][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 94.896798][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 94.896814][ T28] audit: type=1400 audit(1775359515.492:8610): avc: denied { connect } for pid=16982 comm="syz.4.3509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 94.966483][ T28] audit: type=1400 audit(1775359515.522:8611): avc: denied { connect } for pid=16985 comm="syz.0.3510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 95.028549][T16995] ipip0: entered promiscuous mode [ 95.041553][ T28] audit: type=1400 audit(1775359515.522:8612): avc: denied { shutdown } for pid=16985 comm="syz.0.3510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 95.147711][T17032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3524'. [ 95.234024][ T28] audit: type=1326 audit(1775359515.832:8613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17051 comm="syz.2.3532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ce89c819 code=0x7ffc0000 [ 95.244328][T17047] can0: slcan on ttyS3. [ 95.308446][ T28] audit: type=1326 audit(1775359515.852:8614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17051 comm="syz.2.3532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ce89c819 code=0x7ffc0000 [ 95.340520][ T28] audit: type=1326 audit(1775359515.852:8615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17051 comm="syz.2.3532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ce89c819 code=0x7ffc0000 [ 95.365426][ T28] audit: type=1326 audit(1775359515.852:8616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17050 comm="syz.4.3531" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0c5d6ec819 code=0x0 [ 95.427526][ T28] audit: type=1326 audit(1775359515.862:8617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17051 comm="syz.2.3532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f23ce89c819 code=0x7ffc0000 [ 95.459874][ T28] audit: type=1326 audit(1775359515.862:8618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17051 comm="syz.2.3532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ce89c819 code=0x7ffc0000 [ 95.483806][T17047] can0 (unregistered): slcan off ttyS3. [ 95.491280][ T28] audit: type=1326 audit(1775359515.862:8619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17051 comm="syz.2.3532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ce89c819 code=0x7ffc0000 [ 95.597885][T17110] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3542'. [ 95.667163][T17128] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3548'. [ 95.679902][T17125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3547'. [ 95.696789][T17125] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3547'. [ 95.721264][T17136] xt_policy: too many policy elements [ 95.894740][T17172] loop1: detected capacity change from 0 to 512 [ 95.901536][T17166] loop0: detected capacity change from 0 to 2048 [ 95.917040][T17172] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 95.937247][T17182] sch_tbf: burst 0 is lower than device sit0 mtu (1480) ! [ 95.961501][T17172] EXT4-fs (loop1): 1 truncate cleaned up [ 95.968138][T17172] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.989851][T17166] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.008940][T17191] loop2: detected capacity change from 0 to 512 [ 96.032482][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.051783][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.055261][T17191] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.153296][T17191] ext4 filesystem being mounted at /726/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.241504][T17191] EXT4-fs error (device loop2): ext4_add_entry:2415: inode #12: comm syz.2.3562: Directory hole found for htree leaf block 0 [ 96.325216][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.588030][T17290] loop4: detected capacity change from 0 to 256 [ 96.604972][T17290] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 96.749483][T17312] loop3: detected capacity change from 0 to 512 [ 96.762435][T17312] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.841861][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.001366][T17336] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.3604: bad orphan inode 13 [ 97.020000][T17336] loop4: lost filesystem error report for type 5 error -117 [ 97.020170][T17336] ext4_test_bit(bit=12, block=4) = 1 [ 97.027923][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 97.027947][ C1] EXT4-fs (loop4): initial error at time 1775359517: ext4_orphan_get:1423 [ 97.027973][ C1] EXT4-fs (loop4): last error at time 1775359517: ext4_orphan_get:1423 [ 97.067443][T17336] is_bad_inode(inode)=0 [ 97.071714][T17336] NEXT_ORPHAN(inode)=0 [ 97.076270][T17336] max_ino=32 [ 97.079738][T17336] i_nlink=1 [ 97.083332][T17336] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.277677][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.707290][T17414] set_capacity_and_notify: 3 callbacks suppressed [ 97.707309][T17414] loop3: detected capacity change from 0 to 512 [ 97.787699][T17421] vlan2: entered allmulticast mode [ 97.791747][T17414] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.806372][T17414] ext4 filesystem being mounted at /751/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.817295][T17421] macsec0: entered allmulticast mode [ 97.822703][T17421] veth1_macvtap: entered allmulticast mode [ 97.872366][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.974781][T17444] loop1: detected capacity change from 0 to 256 [ 98.005782][T17444] process 'syz.1.3642' launched './file2' with NULL argv: empty string added [ 98.018416][T17444] syz.1.3642: attempt to access beyond end of device [ 98.018416][T17444] loop1: rw=8912896, sector=256, nr_sectors = 20 limit=256 [ 98.034681][T17444] syz.1.3642: attempt to access beyond end of device [ 98.034681][T17444] loop1: rw=8388608, sector=256, nr_sectors = 8 limit=256 [ 98.089050][T17455] loop3: detected capacity change from 0 to 128 [ 98.104056][T17455] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 98.157160][T17455] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 98.392537][T17493] loop4: detected capacity change from 0 to 512 [ 98.421627][T17492] loop2: detected capacity change from 0 to 4096 [ 98.445312][T17493] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 98.453633][T17493] EXT4-fs error (device loop4): ext4_iget_extra_inode:5040: inode #15: comm syz.4.3647: corrupted in-inode xattr: e_value size too large [ 98.468548][T17493] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 98.468788][T17493] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.3647: couldn't read orphan inode 15 (err -117) [ 98.478838][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 98.478861][ C0] EXT4-fs (loop4): initial error at time 1775359519: ext4_iget_extra_inode:5040: inode 15 [ 98.478893][ C0] EXT4-fs (loop4): last error at time 1775359519: ext4_iget_extra_inode:5040: inode 15 [ 98.479580][T17492] EXT4-fs: Ignoring removed bh option [ 98.491928][T17493] loop4: lost filesystem error report for type 5 error -117 [ 98.529597][T17493] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.558186][T17510] loop1: detected capacity change from 0 to 256 [ 98.580645][T17510] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 98.604579][T17492] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.681658][T17492] EXT4-fs error (device loop2): ext4_get_first_dir_block:3547: inode #12: block 80: comm syz.2.3646: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 98.712358][T17492] EXT4-fs (loop2): Remounting filesystem read-only [ 98.725072][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.747149][T17537] loop1: detected capacity change from 0 to 512 [ 98.754270][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.830114][T17537] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 98.852805][T17537] System zones: 0-2, 18-18, 34-34 [ 98.867908][T17537] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 98.882664][T17537] EXT4-fs (loop1): Remounting filesystem read-only [ 98.889414][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 98.889438][ C1] EXT4-fs (loop1): initial error at time 1775359519: ext4_mb_generate_buddy:1317 [ 98.889474][ C1] EXT4-fs (loop1): last error at time 1775359519: ext4_mb_generate_buddy:1317 [ 98.921262][T17537] EXT4-fs (loop1): 1 truncate cleaned up [ 98.933776][T17537] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.948637][ T1670] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 98.987977][ T1670] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 99.002566][T17537] ext4 filesystem being mounted at /752/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.028249][ T1670] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 99.073681][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.188925][T17621] __nla_validate_parse: 7 callbacks suppressed [ 99.189010][T17621] netlink: 277 bytes leftover after parsing attributes in process `syz.0.3673'. [ 99.219991][T17625] hub 8-0:1.0: USB hub found [ 99.226105][T17625] hub 8-0:1.0: 8 ports detected [ 99.349129][T17654] loop4: detected capacity change from 0 to 512 [ 99.384483][T17654] EXT4-fs: Ignoring removed bh option [ 99.404807][T17654] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 99.433946][T17654] EXT4-fs (loop4): 1 truncate cleaned up [ 99.467294][T17654] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.526268][T17694] IPVS: set_ctl: invalid protocol: 0 172.30.1.1:20003 [ 99.554498][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.587430][T17707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3698'. [ 99.726862][T17740] loop4: detected capacity change from 0 to 2048 [ 99.747169][T17740] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.759909][T17740] ext4 filesystem being mounted at /807/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.808413][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.863707][T17766] loop3: detected capacity change from 0 to 512 [ 99.874771][T17766] EXT4-fs: Ignoring removed nobh option [ 99.888224][T17766] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 99.898799][T17771] EXT4-fs error (device loop2): ext4_iget_extra_inode:5040: inode #15: comm syz.2.3717: corrupted in-inode xattr: invalid ea_ino [ 99.924327][T17771] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 99.926228][T17771] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.3717: couldn't read orphan inode 15 (err -117) [ 99.935674][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 99.935711][ C0] EXT4-fs (loop2): initial error at time 1775359520: ext4_iget_extra_inode:5040: inode 15 [ 99.935748][ C0] EXT4-fs (loop2): last error at time 1775359520: ext4_iget_extra_inode:5040: inode 15 [ 99.975189][ T28] kauditd_printk_skb: 379 callbacks suppressed [ 99.975206][ T28] audit: type=1326 audit(1775359520.562:8991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17758 comm="syz.4.3713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5d6ec819 code=0x7ffc0000 [ 99.979006][T17766] EXT4-fs (loop3): 1 truncate cleaned up [ 99.993154][ T28] audit: type=1326 audit(1775359520.562:8992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17758 comm="syz.4.3713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5d6ec819 code=0x7ffc0000 [ 100.007421][T17766] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.017555][T17771] loop2: lost filesystem error report for type 5 error -117 [ 100.049551][ T28] audit: type=1326 audit(1775359520.572:8993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17758 comm="syz.4.3713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f0c5d6ec617 code=0x7ffc0000 [ 100.080613][ T28] audit: type=1326 audit(1775359520.572:8994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17758 comm="syz.4.3713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f0c5d6a9511 code=0x7ffc0000 [ 100.087708][T17771] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.104379][ T28] audit: type=1326 audit(1775359520.572:8995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17758 comm="syz.4.3713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f0c5d6ed609 code=0x7ffc0000 [ 100.143628][ T28] audit: type=1326 audit(1775359520.572:8996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17758 comm="syz.4.3713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f0c5d6a957b code=0x7ffc0000 [ 100.168177][ T28] audit: type=1326 audit(1775359520.572:8997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17758 comm="syz.4.3713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5d6ec819 code=0x7ffc0000 [ 100.168946][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.196286][ T28] audit: type=1326 audit(1775359520.572:8998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17758 comm="syz.4.3713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5d6ec819 code=0x7ffc0000 [ 100.214274][T17771] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3717'. [ 100.267288][ T28] audit: type=1326 audit(1775359520.572:8999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17758 comm="syz.4.3713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f0c5d6a8c6c code=0x7ffc0000 [ 100.291585][ T28] audit: type=1326 audit(1775359520.572:9000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17758 comm="syz.4.3713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f0c5d6a8cce code=0x7ffc0000 [ 100.317490][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.327745][T17783] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3718'. [ 100.431098][T17808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3724'. [ 100.547105][T17819] SET target dimension over the limit! [ 100.599824][T17832] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3733'. [ 100.650426][T17843] EXT4-fs: Ignoring removed nobh option [ 100.679181][T17843] EXT4-fs error (device loop3): ext4_iget_extra_inode:5040: inode #15: comm syz.3.3737: corrupted in-inode xattr: overlapping e_value [ 100.716148][T17843] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 100.716318][T17843] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.3737: couldn't read orphan inode 15 (err -117) [ 100.725684][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 100.725721][ C0] EXT4-fs (loop3): initial error at time 1775359521: ext4_iget_extra_inode:5040: inode 15 [ 100.725749][ C0] EXT4-fs (loop3): last error at time 1775359521: ext4_iget_extra_inode:5040: inode 15 [ 100.766485][T17843] loop3: lost filesystem error report for type 5 error -117 [ 100.773565][T17843] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.837947][T17871] netlink: 642 bytes leftover after parsing attributes in process `syz.4.3745'. [ 100.851316][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.919302][T17877] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.946146][T17877] ext4 filesystem being mounted at /626/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.013761][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.067961][T17916] netlink: 'syz.3.3758': attribute type 2 has an invalid length. [ 101.084000][T17908] EXT4-fs: Ignoring removed bh option [ 101.095438][T17908] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 101.112955][T17908] EXT4-fs (loop4): 1 truncate cleaned up [ 101.135434][T17908] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.227698][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.298913][T17967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3770'. [ 101.309031][T17969] vlan0: entered promiscuous mode [ 101.330610][T17969] bridge0: entered promiscuous mode [ 101.378137][T17987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3774'. [ 101.516349][T18018] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3784'. [ 101.591097][T18033] EXT4-fs: Ignoring removed i_version option [ 101.636201][T18033] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 101.650916][T18033] ext4 filesystem being mounted at /765/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 101.718569][ T3322] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.048157][T18109] netdevsim netdevsim2: Direct firmware load for  failed with error -2 [ 102.215433][T18141] tipc: Enabling of bearer rejected, media not registered [ 102.230974][T18133] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.270809][T18133] ext4 filesystem being mounted at /779/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.326070][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.551403][T18168] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.688854][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.894148][T18242] set_capacity_and_notify: 9 callbacks suppressed [ 102.894168][T18242] loop4: detected capacity change from 0 to 1024 [ 102.975794][T18242] EXT4-fs: inline encryption not supported [ 102.994833][T18242] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 103.048235][T18242] ext4 filesystem being mounted at /842/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.793816][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 103.980359][T18315] tipc: Started in network mode [ 103.987506][T18315] tipc: Node identity , cluster identity 4711 [ 103.995921][T18315] tipc: Failed to obtain node identity [ 104.001771][T18318] loop3: detected capacity change from 0 to 1024 [ 104.023445][T18315] tipc: Enabling of bearer rejected, failed to enable media [ 104.082581][T18318] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.143619][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.491460][T18416] loop2: detected capacity change from 0 to 1024 [ 104.499846][T18421] netlink: 'syz.3.3901': attribute type 1 has an invalid length. [ 104.511991][T18416] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a055c01c, mo2=0002] [ 104.512031][T18416] System zones: 0-1, 3-36 [ 104.523975][T18416] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.597239][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.835735][T18494] loop1: detected capacity change from 0 to 1024 [ 104.852227][T18494] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 104.919600][T18494] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.957885][T18523] loop3: detected capacity change from 0 to 128 [ 104.965313][T18523] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 104.983427][T18523] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 104.999271][ T28] kauditd_printk_skb: 176 callbacks suppressed [ 104.999322][ T28] audit: type=1400 audit(1775359525.592:9177): avc: denied { mount } for pid=18522 comm="syz.3.3929" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 105.048716][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.068800][ T50] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 105.072208][ T28] audit: type=1400 audit(1775359525.662:9178): avc: denied { unmount } for pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 105.137553][ T28] audit: type=1400 audit(1775359525.732:9179): avc: denied { block_suspend } for pid=18548 comm="syz.1.3931" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 105.170417][ T28] audit: type=1400 audit(1775359525.732:9180): avc: denied { create } for pid=18556 comm="syz.4.3936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 105.199947][ T28] audit: type=1400 audit(1775359525.732:9181): avc: denied { write } for pid=18556 comm="syz.4.3936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 105.227836][ T28] audit: type=1400 audit(1775359525.792:9182): avc: denied { ioctl } for pid=18562 comm="syz.4.3939" path="socket:[31902]" dev="sockfs" ino=31902 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 105.270880][ T28] audit: type=1400 audit(1775359525.862:9183): avc: denied { read } for pid=18574 comm="syz.4.3942" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 105.312061][ T28] audit: type=1400 audit(1775359525.862:9184): avc: denied { open } for pid=18574 comm="syz.4.3942" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 105.357635][ T28] audit: type=1400 audit(1775359525.892:9185): avc: denied { map } for pid=18574 comm="syz.4.3942" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 105.385075][T18585] __nla_validate_parse: 5 callbacks suppressed [ 105.385149][T18585] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3946'. [ 105.403878][T18590] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3947'. [ 105.415247][T18585] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3946'. [ 105.432038][T18590] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3947'. [ 105.435982][T18585] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3946'. [ 105.535461][T18602] loop0: detected capacity change from 0 to 4096 [ 105.564474][T18618] ipvlan0: entered promiscuous mode [ 105.576141][ T28] audit: type=1400 audit(1775359526.152:9186): avc: denied { create } for pid=18617 comm="syz.1.3953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 105.605096][T18617] ipvlan0: left promiscuous mode [ 105.624109][T18602] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.899606][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.192453][T18700] loop0: detected capacity change from 0 to 1024 [ 106.275314][T18700] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.371825][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.467506][T18751] tipc: Enabling of bearer rejected, failed to enable media [ 106.546132][T18760] bridge_slave_0: default FDB implementation only supports local addresses [ 106.568269][T18764] loop0: detected capacity change from 0 to 128 [ 106.700286][T18792] A٨: renamed from lo [ 106.902449][T18829] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 106.909455][T18829] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 106.932743][T18834] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4009'. [ 106.936214][T18829] vhci_hcd vhci_hcd.0: Device attached [ 106.988433][T18830] vhci_hcd: connection closed [ 106.991834][ T1670] vhci_hcd vhci_hcd.2: stop threads [ 107.021586][ T1670] vhci_hcd vhci_hcd.2: release socket [ 107.037274][ T1670] vhci_hcd vhci_hcd.2: disconnect device [ 107.139432][T18858] A٨: renamed from lo (while UP) [ 107.660815][T18913] loop2: detected capacity change from 0 to 128 [ 107.688895][T18915] loop4: detected capacity change from 0 to 164 [ 107.730542][T18915] rock: directory entry would overflow storage [ 107.740398][T18915] rock: sig=0x4f50, size=4, remaining=3 [ 107.770090][T18915] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 108.141145][T18975] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4051'. [ 108.439114][T19037] netlink: 131740 bytes leftover after parsing attributes in process `syz.1.4070'. [ 108.518475][T19037] netlink: zone id is out of range [ 108.543422][T19037] netlink: zone id is out of range [ 108.563314][T19037] netlink: del zone limit has 8 unknown bytes [ 108.758135][ T30] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.798307][ T30] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.832048][T19122] macvtap1: entered promiscuous mode [ 108.859996][T19122] team0: entered promiscuous mode [ 108.875250][T19122] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 108.891715][T19122] team0: Device macvtap1 is already an upper device of the team interface [ 108.913700][T19122] team0: left promiscuous mode [ 108.945514][ T30] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.981917][ T30] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.004965][T19171] loop3: detected capacity change from 0 to 512 [ 109.012515][T19167] loop1: detected capacity change from 0 to 512 [ 109.013564][T19171] EXT4-fs: Ignoring removed orlov option [ 109.043318][T19171] EXT4-fs: Ignoring removed i_version option [ 109.057657][T19178] loop2: detected capacity change from 0 to 512 [ 109.072125][T19171] EXT4-fs: Ignoring removed nomblk_io_submit option [ 109.080716][T19171] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 109.090807][T19167] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 109.100304][T19171] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 109.100493][T19171] EXT4-fs (loop3): orphan cleanup on readonly fs [ 109.100545][T19171] EXT4-fs warning (device loop3): ext4_enable_quotas:7261: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 109.100573][T19171] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 109.100932][T19171] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4112: bg 0: block 40: padding at end of block bitmap is not set [ 109.152601][T19171] loop3: lost filesystem error report for type 5 error -117 [ 109.153145][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 109.154719][T19171] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 109.161082][ C1] EXT4-fs (loop3): initial error at time 1775359529: ext4_validate_block_bitmap:441 [ 109.187016][ C1] EXT4-fs (loop3): last error at time 1775359529: ext4_validate_block_bitmap:441 [ 109.197692][T19171] loop3: lost filesystem error report for type 5 error -117 [ 109.203927][T19167] EXT4-fs (loop1): orphan cleanup on readonly fs [ 109.223815][T19178] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 109.228835][T19201] loop0: detected capacity change from 0 to 2048 [ 109.239631][T19171] EXT4-fs (loop3): 1 truncate cleaned up [ 109.245884][T19178] System zones: 0-2, 18-18, 34-34 [ 109.253445][T19167] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #17: comm syz.1.4111: inode has both inline data and extents flags [ 109.274560][T19201] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.284759][T19167] loop1: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 109.288876][T19167] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.4111: couldn't read orphan inode 17 (err -117) [ 109.299060][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 109.318224][ C1] EXT4-fs (loop1): initial error at time 1775359529: ext4_orphan_get:1397: inode 17 [ 109.329083][ C1] EXT4-fs (loop1): last error at time 1775359529: ext4_orphan_get:1397: inode 17 [ 109.335795][T19178] EXT4-fs (loop2): 1 orphan inode deleted [ 109.347626][ T1670] EXT4-fs error (device loop2): ext4_release_dquot:7062: comm kworker/u8:7: Failed to release dquot type 1 [ 109.374204][T19171] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 109.388599][T19167] loop1: lost filesystem error report for type 5 error -117 [ 109.391002][ T1670] loop2: lost filesystem error report for type 5 error -117 [ 109.393866][T19178] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.399407][ T1670] EXT4-fs (loop2): Remounting filesystem read-only [ 109.432790][T19167] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 109.446716][T19178] ext4 filesystem being mounted at /834/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.480687][T19178] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.494647][T19171] EXT4-fs warning (device loop3): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 109.500956][T19167] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 109.510335][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.529844][T19167] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 109.551306][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.561415][T19167] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 109.665246][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.726252][T19258] loop1: detected capacity change from 0 to 512 [ 109.746185][T19258] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.780525][T19258] ext4 filesystem being mounted at /842/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 109.906226][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.988530][T19294] loop2: detected capacity change from 0 to 512 [ 110.018128][T19294] EXT4-fs: Ignoring removed bh option [ 110.036275][T19294] EXT4-fs: inline encryption not supported [ 110.064170][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 110.064240][ T28] audit: type=1400 audit(1775359530.662:9237): avc: denied { read } for pid=19303 comm="syz.1.4147" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 110.105572][T19294] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 110.168816][ T28] audit: type=1400 audit(1775359530.692:9238): avc: denied { open } for pid=19303 comm="syz.1.4147" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 110.204520][ T28] audit: type=1400 audit(1775359530.702:9239): avc: denied { ioctl } for pid=19303 comm="syz.1.4147" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 110.245097][T19294] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 110.304328][T19294] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4143: bg 0: block 248: padding at end of block bitmap is not set [ 110.318941][ T28] audit: type=1400 audit(1775359530.912:9240): avc: denied { read } for pid=3044 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 110.365708][ T28] audit: type=1400 audit(1775359530.912:9241): avc: denied { search } for pid=3044 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.384871][T19356] loop3: detected capacity change from 0 to 512 [ 110.404223][T19294] loop2: lost filesystem error report for type 5 error -117 [ 110.411351][T19294] Quota error (device loop2): write_blk: dquota write failed [ 110.417925][ T28] audit: type=1400 audit(1775359530.912:9242): avc: denied { search } for pid=3044 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.418886][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 110.453277][ T28] audit: type=1400 audit(1775359530.912:9243): avc: denied { search } for pid=3044 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.455480][ C0] EXT4-fs (loop2): last error at time 1775359531: ext4_validate_block_bitmap:441 [ 110.502235][T19294] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 110.517230][T19294] EXT4-fs error (device loop2): ext4_acquire_dquot:7026: comm syz.2.4143: Failed to acquire dquot type 1 [ 110.528961][T19294] loop2: lost filesystem error report for type 5 error -28 [ 110.529665][T19294] EXT4-fs (loop2): 1 truncate cleaned up [ 110.546364][ T28] audit: type=1400 audit(1775359530.912:9244): avc: denied { read } for pid=3044 comm="dhcpcd" name="n26" dev="tmpfs" ino=15914 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 110.566231][T19294] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 110.605801][T19356] FAT-fs (loop3): Directory bread(block 199916) failed [ 110.612765][T19356] FAT-fs (loop3): Directory bread(block 199917) failed [ 110.632978][T19356] FAT-fs (loop3): Directory bread(block 199918) failed [ 110.640596][T19356] FAT-fs (loop3): Directory bread(block 199919) failed [ 110.641873][T19391] loop1: detected capacity change from 0 to 128 [ 110.654930][T19356] FAT-fs (loop3): Directory bread(block 199920) failed [ 110.666650][T19356] FAT-fs (loop3): Directory bread(block 199921) failed [ 110.683221][T19356] FAT-fs (loop3): Directory bread(block 199922) failed [ 110.709707][T19391] FAT-fs (loop1): Directory bread(block 32) failed [ 110.714237][T19356] FAT-fs (loop3): Directory bread(block 199923) failed [ 110.731570][T19294] EXT4-fs error (device loop2): ext4_lookup:1789: inode #2: comm syz.2.4143: deleted inode referenced: 12 [ 110.746470][T19391] FAT-fs (loop1): Directory bread(block 33) failed [ 110.752178][T19356] FAT-fs (loop3): Directory bread(block 199916) failed [ 110.761551][T19391] FAT-fs (loop1): Directory bread(block 34) failed [ 110.772086][T19391] FAT-fs (loop1): Directory bread(block 35) failed [ 110.780400][T19391] FAT-fs (loop1): Directory bread(block 36) failed [ 110.788563][T19356] FAT-fs (loop3): Directory bread(block 199917) failed [ 110.802744][T19391] FAT-fs (loop1): Directory bread(block 37) failed [ 110.849255][T19391] FAT-fs (loop1): Directory bread(block 38) failed [ 110.857747][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 110.868355][T19391] FAT-fs (loop1): Directory bread(block 39) failed [ 110.877583][T19391] FAT-fs (loop1): Directory bread(block 40) failed [ 110.885374][T19391] FAT-fs (loop1): Directory bread(block 41) failed [ 110.974903][T19391] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 111.018957][T19391] FAT-fs (loop1): Filesystem has been set read-only [ 111.051624][T19464] loop2: detected capacity change from 0 to 512 [ 111.083640][T19464] EXT4-fs: Ignoring removed nobh option [ 111.116287][T19478] loop3: detected capacity change from 0 to 128 [ 111.135749][T19464] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.160831][T19464] ext4 filesystem being mounted at /841/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.178823][T19484] EXT4-fs: Ignoring removed oldalloc option [ 111.185703][T19484] EXT4-fs: Ignoring removed nomblk_io_submit option [ 111.200735][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.226129][T19484] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 111.226835][T19478] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 111.260503][T19484] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 111.277651][T19478] ext4 filesystem being mounted at /858/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.308068][T19484] EXT4-fs (loop4): orphan cleanup on readonly fs [ 111.342637][ T3317] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 111.347717][T19484] EXT4-fs warning (device loop4): ext4_enable_quotas:7261: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 111.367152][T19484] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 111.379500][T19484] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4183: bg 0: block 40: padding at end of block bitmap is not set [ 111.394609][T19484] loop4: lost filesystem error report for type 5 error -117 [ 111.394838][T19484] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 111.411296][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 111.411351][ C1] EXT4-fs (loop4): initial error at time 1775359531: ext4_validate_block_bitmap:441 [ 111.411380][ C1] EXT4-fs (loop4): last error at time 1775359531: ext4_validate_block_bitmap:441 [ 111.468572][T19484] loop4: lost filesystem error report for type 5 error -117 [ 111.469793][T19484] EXT4-fs (loop4): 1 truncate cleaned up [ 111.510937][T19484] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 111.570415][T19553] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4196'. [ 111.596288][T19484] EXT4-fs error (device loop4): ext4_encrypted_get_link:46: inode #16: comm syz.4.4183: bad symlink. [ 111.596663][T19484] EXT4-fs error (device loop4): ext4_encrypted_get_link:46: inode #16: comm syz.4.4183: bad symlink. [ 111.638651][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.808379][T19598] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 112.028726][T19633] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 112.232535][T19652] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 112.291882][T19652] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 112.342204][T19660] netlink: 'syz.3.4222': attribute type 2 has an invalid length. [ 112.357287][T19633] EXT4-fs (loop1): 1 truncate cleaned up [ 112.371005][T19633] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.384528][T19660] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4222'. [ 112.460316][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.954337][T19748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4240'. [ 112.995145][T19754] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4241'. [ 113.126484][T19781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4246'. [ 113.196457][T19787] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4249'. [ 113.466627][T19836] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.513301][T19836] ext4 filesystem being mounted at /941/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.547484][T19817] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 113.593399][T19817] System zones: 0-2, 18-18, 34-34 [ 113.629125][T19817] EXT4-fs (loop0): 1 orphan inode deleted [ 113.635663][T19836] EXT4-fs error (device loop4): ext4_validate_inode_bitmap:105: comm syz.4.4260: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 113.669348][ T30] EXT4-fs error (device loop0): ext4_release_dquot:7062: comm kworker/u8:1: Failed to release dquot type 1 [ 113.682336][T19863] EXT4-fs: Ignoring removed nobh option [ 113.683695][T19817] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.697740][T19863] EXT4-fs: Ignoring removed orlov option [ 113.720146][ T30] loop0: lost filesystem error report for type 5 error -117 [ 113.720293][ T30] EXT4-fs (loop0): Remounting filesystem read-only [ 113.739502][T19863] EXT4-fs error (device loop2): __ext4_iget:5393: inode #11: block 1: comm syz.2.4265: invalid block [ 113.747779][T19817] ext4 filesystem being mounted at /717/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.770944][T19864] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 113.772777][T19863] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 113.780790][T19863] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.4265: couldn't read orphan inode 11 (err -117) [ 113.790071][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 113.790099][ C0] EXT4-fs (loop2): initial error at time 1775359534: __ext4_iget:5393: inode 11: block 1 [ 113.790141][ C0] EXT4-fs (loop2): last error at time 1775359534: __ext4_iget:5393: inode 11: block 1 [ 113.829404][T19863] loop2: lost filesystem error report for type 5 error -117 [ 113.829994][T19863] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.852173][T19817] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.880912][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.914129][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.037170][T19900] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 114.067993][T19915] set_capacity_and_notify: 8 callbacks suppressed [ 114.068044][T19915] loop4: detected capacity change from 0 to 512 [ 114.104419][T19900] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 114.128312][T19915] EXT4-fs: Ignoring removed bh option [ 114.161857][T19915] EXT4-fs: inline encryption not supported [ 114.210865][T19915] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 114.220791][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.238591][T19928] loop0: detected capacity change from 0 to 4096 [ 114.265239][T19915] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 114.307953][T19915] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4275: bg 0: block 248: padding at end of block bitmap is not set [ 114.322775][T19915] loop4: lost filesystem error report for type 5 error -117 [ 114.323143][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 114.337380][ C1] EXT4-fs (loop4): last error at time 1775359534: ext4_validate_block_bitmap:441 [ 114.349190][T19928] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 114.364132][T19915] EXT4-fs error (device loop4): ext4_acquire_dquot:7026: comm syz.4.4275: Failed to acquire dquot type 1 [ 114.392418][T19915] loop4: lost filesystem error report for type 5 error -28 [ 114.392991][T19915] EXT4-fs (loop4): 1 truncate cleaned up [ 114.413650][T19915] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 114.427081][T19928] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.460148][T19915] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz.4.4275: deleted inode referenced: 12 [ 114.476857][T19967] loop3: detected capacity change from 0 to 1024 [ 114.487735][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.490793][T19971] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4291'. [ 114.517629][T19971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4291'. [ 114.525324][T19967] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.551431][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 114.606687][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.817322][T20021] loop0: detected capacity change from 0 to 512 [ 114.833419][T20025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4306'. [ 114.839626][T20021] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.4305: inode has both inline data and extents flags [ 114.860062][T20021] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 114.860301][T20021] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.4305: couldn't read orphan inode 15 (err -117) [ 114.869711][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 114.869731][ C0] EXT4-fs (loop0): initial error at time 1775359535: ext4_orphan_get:1397: inode 15 [ 114.869763][ C0] EXT4-fs (loop0): last error at time 1775359535: ext4_orphan_get:1397: inode 15 [ 114.908733][T20021] loop0: lost filesystem error report for type 5 error -117 [ 114.909783][T20021] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.923522][T20040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4310'. [ 114.945802][ T30] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.956299][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.966171][ T30] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.002115][ T30] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.038294][ T30] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.077677][T20064] loop3: detected capacity change from 0 to 512 [ 115.116036][T20064] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.128999][T20064] ext4 filesystem being mounted at /882/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.175213][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.314723][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 115.314741][ T28] audit: type=1400 audit(1775359535.912:9279): avc: denied { getopt } for pid=20107 comm="syz.4.4329" lport=13 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 115.539152][T20157] IPv6: Can't replace route, no match found [ 115.578540][T20162] loop4: detected capacity change from 0 to 1024 [ 115.589685][T20162] EXT4-fs: Ignoring removed i_version option [ 115.622355][T20162] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 115.635323][T20162] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 115.655069][T20162] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 115.667737][T20162] EXT4-fs error (device loop4): ext4_acquire_dquot:7026: comm syz.4.4346: Failed to acquire dquot type 0 [ 115.693076][ T28] audit: type=1400 audit(1775359536.282:9280): avc: denied { read } for pid=20167 comm="syz.0.4348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 115.705112][T20162] loop4: lost filesystem error report for type 5 error -117 [ 115.724972][T20162] EXT4-fs error (device loop4): mb_free_blocks:2049: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 115.725078][T20162] EXT4-fs error (device loop4): ext4_do_update_inode:5602: inode #13: comm syz.4.4346: corrupted inode contents [ 115.725101][T20162] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 115.725474][T20162] EXT4-fs error (device loop4): ext4_dirty_inode:6495: inode #13: comm syz.4.4346: mark_inode_dirty error [ 115.725544][T20162] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 115.725994][T20162] EXT4-fs error (device loop4): ext4_do_update_inode:5602: inode #13: comm syz.4.4346: corrupted inode contents [ 115.726023][T20162] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 115.726134][T20162] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #13: comm syz.4.4346: mark_inode_dirty error [ 115.726160][T20162] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 115.726493][T20162] EXT4-fs error (device loop4): ext4_do_update_inode:5602: inode #13: comm syz.4.4346: corrupted inode contents [ 115.726527][T20162] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 115.726712][T20162] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 115.726733][T20162] loop4: lost filesystem error report for type 5 error -117 [ 115.726943][T20162] EXT4-fs error (device loop4): ext4_do_update_inode:5602: inode #13: comm syz.4.4346: corrupted inode contents [ 115.734192][ C1] EXT4-fs (loop4): error count since last fsck: 8 [ 115.734213][ C1] EXT4-fs (loop4): initial error at time 1775359536: ext4_acquire_dquot:7026 [ 115.734238][ C1] EXT4-fs (loop4): last error at time 1775359536: ext4_orphan_del:303 [ 115.835809][T20162] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 115.940077][T20162] EXT4-fs error (device loop4): ext4_truncate:4602: inode #13: comm syz.4.4346: mark_inode_dirty error [ 115.951900][T20162] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 115.952101][T20162] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 115.972518][T20162] loop4: lost filesystem error report for type 5 error -117 [ 115.974391][T20162] EXT4-fs (loop4): 1 truncate cleaned up [ 115.982662][T20162] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.024497][T20194] sg_write: data in/out 418780/98 bytes for SCSI command 0x0-- guessing data in; [ 116.024497][T20194] program syz.2.4356 not setting count and/or reply_len properly [ 116.045287][ T28] audit: type=1400 audit(1775359536.612:9281): avc: denied { write } for pid=20193 comm="syz.2.4356" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 116.045700][T20162] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 116.084738][ T28] audit: type=1400 audit(1775359536.642:9282): avc: denied { rename } for pid=20160 comm="syz.4.4346" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 116.144924][T20162] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 116.156287][T20162] EXT4-fs error (device loop4): ext4_acquire_dquot:7026: comm syz.4.4346: Failed to acquire dquot type 0 [ 116.168910][T20207] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 116.226797][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.265761][ T28] audit: type=1400 audit(1775359536.852:9283): avc: denied { mount } for pid=20228 comm="syz.1.4365" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 116.478205][ T28] audit: type=1400 audit(1775359537.072:9284): avc: denied { ioctl } for pid=20264 comm="syz.2.4375" path="/dev/mISDNtimer" dev="devtmpfs" ino=250 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 116.561230][T20303] loop1: detected capacity change from 0 to 128 [ 116.588310][T20305] netdevsim netdevsim3 netdevsim0: IPsec offload requires 128 bit authentication [ 116.677654][T20321] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 116.760182][T20336] loop2: detected capacity change from 0 to 512 [ 116.785221][T20338] loop1: detected capacity change from 0 to 512 [ 116.803041][T20338] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.4393: inode has both inline data and extents flags [ 116.820531][T20336] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 116.849617][T20338] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 116.851036][T20338] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.4393: couldn't read orphan inode 15 (err -117) [ 116.854942][T20336] EXT4-fs (loop2): orphan cleanup on readonly fs [ 116.860714][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 116.885889][ C1] EXT4-fs (loop1): initial error at time 1775359537: ext4_orphan_get:1397: inode 15 [ 116.895518][ C1] EXT4-fs (loop1): last error at time 1775359537: ext4_orphan_get:1397: inode 15 [ 116.907162][T20338] loop1: lost filesystem error report for type 5 error -117 [ 116.908373][T20338] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.951354][T20336] EXT4-fs error (device loop2): ext4_do_update_inode:5602: inode #16: comm syz.2.4391: corrupted inode contents [ 116.979312][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.017986][T20336] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 117.023201][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 117.038908][ C1] EXT4-fs (loop2): initial error at time 1775359537: ext4_do_update_inode:5602: inode 16 [ 117.049148][ C1] EXT4-fs (loop2): last error at time 1775359537: ext4_do_update_inode:5602: inode 16 [ 117.067910][T20336] EXT4-fs (loop2): Remounting filesystem read-only [ 117.084815][T20336] EXT4-fs (loop2): 1 truncate cleaned up [ 117.102449][ T36] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 117.134343][ T36] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 117.155966][ T36] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 117.174817][T20336] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 117.230372][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.264336][T20397] __nla_validate_parse: 2 callbacks suppressed [ 117.264352][T20397] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4406'. [ 117.281780][T20403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4409'. [ 117.307108][T20403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4409'. [ 117.319984][T20403] netlink: 'syz.0.4409': attribute type 14 has an invalid length. [ 117.347291][T20417] loop2: detected capacity change from 0 to 512 [ 117.386627][T20403] netlink: 'syz.0.4409': attribute type 11 has an invalid length. [ 117.405373][T20417] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 117.434415][T20417] EXT4-fs (loop2): 1 truncate cleaned up [ 117.465269][T20417] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.499820][ T3301] loop1: p1 p2 p4[EZD] [ 117.509678][ T3301] loop1: p4 start 201326592 is beyond EOD, truncated [ 117.558972][T20424] loop1: p1 p2 p4[EZD] [ 117.559352][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.578702][T20424] loop1: p4 start 201326592 is beyond EOD, truncated [ 117.610987][T20454] hub 9-0:1.0: USB hub found [ 117.619081][T20463] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4423'. [ 117.632840][T20463] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4423'. [ 117.661591][ T9911] udevd[9911]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 117.664378][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 117.681855][T20454] hub 9-0:1.0: 8 ports detected [ 117.687275][T20463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4423'. [ 117.758293][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 117.779661][ T9911] udevd[9911]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 117.891593][ T35] kernel write not supported for file /input/event2 (pid: 35 comm: kworker/1:1) [ 118.504371][T20608] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ1 [ 118.709017][T20644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4475'. [ 118.792799][T20665] netlink: 764 bytes leftover after parsing attributes in process `syz.1.4482'. [ 118.985961][T20693] hsr0: entered promiscuous mode [ 119.025291][T20700] netlink: 830 bytes leftover after parsing attributes in process `syz.4.4491'. [ 119.092178][T20710] set_capacity_and_notify: 3 callbacks suppressed [ 119.092207][T20710] loop1: detected capacity change from 0 to 256 [ 119.126688][T20710] FAT-fs (loop1): Directory bread(block 64) failed [ 119.143219][T20712] loop4: detected capacity change from 0 to 512 [ 119.144539][T20710] FAT-fs (loop1): Directory bread(block 65) failed [ 119.158299][T20710] FAT-fs (loop1): Directory bread(block 66) failed [ 119.174429][T20712] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 119.178686][T20710] FAT-fs (loop1): Directory bread(block 67) failed [ 119.207526][T20712] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.4494: bad orphan inode 131083 [ 119.214272][T20710] FAT-fs (loop1): Directory bread(block 68) failed [ 119.235260][T20712] loop4: lost filesystem error report for type 5 error -117 [ 119.236801][T20712] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.270881][T20710] FAT-fs (loop1): Directory bread(block 69) failed [ 119.287648][T20710] FAT-fs (loop1): Directory bread(block 70) failed [ 119.302425][T20710] FAT-fs (loop1): Directory bread(block 71) failed [ 119.319159][T20710] FAT-fs (loop1): Directory bread(block 72) failed [ 119.341886][T20710] FAT-fs (loop1): Directory bread(block 73) failed [ 119.611917][T20724] loop0: detected capacity change from 0 to 256 [ 119.622544][T20724] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 119.838634][T20731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4501'. [ 119.848390][T20731] netlink: 'syz.3.4501': attribute type 1 has an invalid length. [ 119.946633][T20744] loop0: detected capacity change from 0 to 512 [ 120.000842][T20759] loop4: detected capacity change from 0 to 512 [ 120.037401][T20744] ext4 filesystem being mounted at /773/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 120.068628][T20759] ext4 filesystem being mounted at /985/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.258589][T20793] netlink: 'syz.4.4512': attribute type 7 has an invalid length. [ 122.280128][T20793] netlink: 'syz.4.4512': attribute type 8 has an invalid length. [ 122.310478][T20793] netlink: 'syz.4.4512': attribute type 13 has an invalid length. [ 122.444813][T20834] IPVS: Error connecting to the multicast addr [ 122.451660][T20827] loop3: detected capacity change from 0 to 1024 [ 122.482478][T20838] loop2: detected capacity change from 0 to 128 [ 122.494814][T20827] EXT4-fs: inline encryption not supported [ 122.518899][T20827] ext4 filesystem being mounted at /929/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.556904][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 122.556945][ T28] audit: type=1400 audit(1775359543.152:9309): avc: denied { append } for pid=20822 comm="syz.3.4522" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 122.590217][T20850] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4529'. [ 122.714493][T20875] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4535'. [ 122.781884][T20884] netlink: 'syz.1.4539': attribute type 10 has an invalid length. [ 122.791311][ T28] audit: type=1400 audit(1775359543.372:9310): avc: denied { write } for pid=20886 comm="syz.4.4540" path="socket:[36337]" dev="sockfs" ino=36337 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 122.826258][T20884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.832151][ T28] audit: type=1400 audit(1775359543.412:9311): avc: denied { append } for pid=20888 comm="syz.4.4541" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 122.869382][T20893] loop0: detected capacity change from 0 to 512 [ 122.877474][T20884] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 122.888691][T20892] netlink: 'syz.1.4539': attribute type 10 has an invalid length. [ 122.920862][T20893] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.4542: invalid indirect mapped block 256 (level 2) [ 122.942105][T20892] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4539'. [ 122.963167][T20893] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 122.964125][T20893] EXT4-fs (loop0): 2 truncates cleaned up [ 122.974528][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 122.974548][ C0] EXT4-fs (loop0): initial error at time 1775359543: ext4_free_branches:1023: inode 11 [ 122.974579][ C0] EXT4-fs (loop0): last error at time 1775359543: ext4_free_branches:1023: inode 11 [ 123.012617][T20892] batadv0: entered promiscuous mode [ 123.018580][T20892] batadv0: entered allmulticast mode [ 123.025201][T20892] bond0: (slave batadv0): Releasing backup interface [ 123.040830][T20892] bridge0: port 4(batadv0) entered blocking state [ 123.047617][T20892] bridge0: port 4(batadv0) entered disabled state [ 123.050450][T20912] loop2: detected capacity change from 0 to 512 [ 123.092089][ T28] audit: type=1400 audit(1775359543.682:9312): avc: denied { unmount } for pid=3320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 123.132318][T20912] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 123.191449][T20937] futex_wake_op: syz.4.4554 tries to shift op by -1; fix this program [ 123.204513][ T28] audit: type=1400 audit(1775359543.782:9313): avc: denied { write } for pid=20932 comm="syz.0.4553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 123.227968][T20912] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 123.278819][T20912] FAT-fs (loop2): Filesystem has been set read-only [ 123.303190][ T28] audit: type=1400 audit(1775359543.782:9314): avc: denied { connect } for pid=20932 comm="syz.0.4553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 123.324665][T20943] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 123.351763][T20954] netlink: 'syz.4.4559': attribute type 10 has an invalid length. [ 123.394365][ T28] audit: type=1400 audit(1775359543.782:9315): avc: denied { name_connect } for pid=20932 comm="syz.0.4553" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 123.396199][T20954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.445430][T20954] .`: (slave batadv0): Enslaving as an active interface with an up link [ 123.463429][ T36] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 123.472387][ T28] audit: type=1400 audit(1775359544.032:9316): avc: denied { map } for pid=20961 comm="syz.3.4562" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 123.473020][ T36] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 123.510438][T20970] netlink: 'syz.4.4559': attribute type 10 has an invalid length. [ 123.516448][T20973] netlink: 4436 bytes leftover after parsing attributes in process `syz.1.4564'. [ 123.539220][T20971] loop2: detected capacity change from 0 to 1764 [ 123.546191][T20970] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4559'. [ 123.549151][T20973] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 123.574328][T20971] iso9660: Bad value for 'session' [ 123.578241][ T28] audit: type=1400 audit(1775359544.132:9317): avc: denied { sqpoll } for pid=20959 comm="syz.0.4561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 123.647787][T20989] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4567'. [ 123.670020][ T28] audit: type=1400 audit(1775359544.172:9318): avc: denied { mounton } for pid=20964 comm="syz.2.4563" path="/syzcgroup/net/syz2/devices.allow" dev="cgroup" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 123.704299][T20970] batadv0: entered promiscuous mode [ 123.750981][T20970] batadv0: entered allmulticast mode [ 123.772864][T20970] .`: (slave batadv0): Releasing backup interface [ 123.802433][T20970] bridge0: port 1(batadv0) entered blocking state [ 123.811043][T20970] bridge0: port 1(batadv0) entered disabled state [ 123.820240][T20995] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4571'. [ 123.843499][T21005] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4571'. [ 123.918458][T21025] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4580'. [ 123.973374][ T36] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 123.982794][ T36] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 124.080914][T21052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4588'. [ 124.339932][T21108] netlink: 'syz.4.4605': attribute type 14 has an invalid length. [ 124.548233][T21153] SELinux: failed to load policy [ 124.692098][T21182] xt_hashlimit: size too large, truncated to 1048576 [ 124.701262][T21182] xt_NFQUEUE: number of queues (65529) out of range (got 65536) [ 124.758718][T21190] loop3: detected capacity change from 0 to 512 [ 124.777945][T21190] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 124.821805][T21190] EXT4-fs (loop3): 1 truncate cleaned up [ 124.929286][T21214] loop4: detected capacity change from 0 to 2048 [ 124.949718][T21231] loop2: detected capacity change from 0 to 764 [ 124.975529][T21214] ext4 filesystem being mounted at /1018/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.047784][T21247] loop1: detected capacity change from 0 to 128 [ 125.236949][T21284] loop3: detected capacity change from 0 to 512 [ 125.265131][T21284] EXT4-fs: Ignoring removed nobh option [ 125.285651][T21284] EXT4-fs (loop3): orphan cleanup on readonly fs [ 125.310654][T21284] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.4657: EA inode hash validation failed [ 125.358308][T21284] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 125.373122][T21284] EXT4-fs error (device loop3): ext4_do_update_inode:5602: inode #15: comm syz.3.4657: corrupted inode contents [ 125.376251][T21315] loop1: detected capacity change from 0 to 128 [ 125.385541][T21284] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 125.392807][T21284] EXT4-fs error (device loop3): ext4_dirty_inode:6495: inode #15: comm syz.3.4657: mark_inode_dirty error [ 125.402226][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 125.402247][ C0] EXT4-fs (loop3): initial error at time 1775359545: ext4_do_update_inode:5602: inode 15 [ 125.402288][ C0] EXT4-fs (loop3): last error at time 1775359545: ext4_do_update_inode:5602: inode 15 [ 125.456716][T21284] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 125.456916][T21284] EXT4-fs error (device loop3): ext4_do_update_inode:5602: inode #15: comm syz.3.4657: corrupted inode contents [ 125.489138][T21284] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 125.489287][T21284] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.4657: mark_inode_dirty error [ 125.515032][T21284] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 125.515203][T21284] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3002: inode #15: comm syz.3.4657: mark inode dirty (error -117) [ 125.592718][T21341] loop1: detected capacity change from 0 to 256 [ 125.600823][T21284] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 125.602613][T21284] EXT4-fs warning (device loop3): ext4_evict_inode:285: xattr delete (err -117) [ 125.626475][T21284] EXT4-fs (loop3): 1 orphan inode deleted [ 125.648651][T21348] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 125.857125][T21393] delete_channel: no stack [ 125.869832][ T35] kernel write not supported for file /sg0 (pid: 35 comm: kworker/1:1) [ 126.219496][T21481] loop0: detected capacity change from 0 to 1024 [ 126.234823][T21484] loop1: detected capacity change from 0 to 2048 [ 126.251211][T21481] EXT4-fs: Ignoring removed bh option [ 126.271167][T21491] loop4: detected capacity change from 0 to 128 [ 126.300546][T21491] ext4 filesystem being mounted at /1033/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 126.346732][ T36] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 126.382848][ T36] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 200 with error 28 [ 126.395780][ T36] EXT4-fs (loop1): This should not happen!! Data will be lost [ 126.395780][ T36] [ 126.409261][ T36] EXT4-fs (loop1): Total free blocks count 0 [ 126.416764][ T36] EXT4-fs (loop1): Free/Dirty block details [ 126.422780][ T36] EXT4-fs (loop1): free_blocks=4096 [ 126.430301][ T36] EXT4-fs (loop1): dirty_blocks=208 [ 126.436783][ T36] EXT4-fs (loop1): Block reservation details [ 126.445896][ T36] EXT4-fs (loop1): i_reserved_data_blocks=13 [ 126.454252][ T3320] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 126.654613][T21542] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 126.670845][T21542] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 242 with error 28 [ 126.684830][T21542] EXT4-fs (loop4): This should not happen!! Data will be lost [ 126.684830][T21542] [ 126.695811][T21542] EXT4-fs (loop4): Total free blocks count 0 [ 126.701986][T21542] EXT4-fs (loop4): Free/Dirty block details [ 126.709053][T21542] EXT4-fs (loop4): free_blocks=66060288 [ 126.715514][T21542] EXT4-fs (loop4): dirty_blocks=256 [ 126.720739][T21542] EXT4-fs (loop4): Block reservation details [ 126.727798][T21542] EXT4-fs (loop4): i_reserved_data_blocks=16 [ 126.757458][ T36] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 126.785938][ T36] EXT4-fs (loop4): This should not happen!! Data will be lost [ 126.785938][ T36] [ 126.804957][ T3325] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 127.008974][T21601] EXT4-fs: Ignoring removed nobh option [ 127.020224][T21601] EXT4-fs error (device loop4): ext4_iget_extra_inode:5040: inode #15: comm syz.4.4742: corrupted in-inode xattr: overlapping e_value [ 127.044953][T21601] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 127.045211][T21601] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.4742: couldn't read orphan inode 15 (err -117) [ 127.054486][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 127.054506][ C0] EXT4-fs (loop4): initial error at time 1775359547: ext4_iget_extra_inode:5040: inode 15 [ 127.054535][ C0] EXT4-fs (loop4): last error at time 1775359547: ext4_iget_extra_inode:5040: inode 15 [ 127.143948][T21601] loop4: lost filesystem error report for type 5 error -117 [ 127.665220][ T28] kauditd_printk_skb: 209 callbacks suppressed [ 127.665284][ T28] audit: type=1400 audit(1775359548.262:9528): avc: denied { create } for pid=21702 comm="syz.0.4765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 127.753865][ T28] audit: type=1400 audit(1775359548.262:9529): avc: denied { setopt } for pid=21702 comm="syz.0.4765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 127.793838][ T28] audit: type=1400 audit(1775359548.262:9530): avc: denied { bind } for pid=21702 comm="syz.0.4765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 127.844387][ T28] audit: type=1400 audit(1775359548.262:9531): avc: denied { name_bind } for pid=21702 comm="syz.0.4765" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 127.869419][ T28] audit: type=1400 audit(1775359548.262:9532): avc: denied { node_bind } for pid=21702 comm="syz.0.4765" saddr=172.20.20.18 src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 127.984791][ T28] audit: type=1400 audit(1775359548.572:9533): avc: denied { setopt } for pid=21730 comm="syz.3.4771" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 128.046116][ T28] audit: type=1400 audit(1775359548.622:9534): avc: denied { create } for pid=21729 comm="syz.0.4772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 128.067027][ T28] audit: type=1400 audit(1775359548.622:9535): avc: denied { write } for pid=21729 comm="syz.0.4772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 128.105933][ T28] audit: type=1400 audit(1775359548.652:9536): avc: denied { name_bind } for pid=21737 comm="syz.3.4774" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 128.132508][T21747] netlink: 'syz.3.4776': attribute type 5 has an invalid length. [ 128.197112][ T28] audit: type=1400 audit(1775359548.652:9537): avc: denied { node_bind } for pid=21737 comm="syz.3.4774" saddr=::e0:0:0:0:1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 128.245784][T21759] __nla_validate_parse: 12 callbacks suppressed [ 128.245806][T21759] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4779'. [ 128.262070][T21766] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 128.319200][ T1993] ================================================================== [ 128.327746][ T1993] BUG: KCSAN: data-race in alloc_pid / copy_process [ 128.334556][ T1993] [ 128.336986][ T1993] read-write to 0xffffffff86c5ffa8 of 4 bytes by task 36 on cpu 0: [ 128.345638][ T1993] alloc_pid+0x651/0x940 [ 128.349981][ T1993] copy_process+0xf37/0x20b0 [ 128.354684][ T1993] kernel_clone+0x16b/0x5d0 [ 128.359294][ T1993] user_mode_thread+0x9c/0xd0 [ 128.364071][ T1993] call_usermodehelper_exec_work+0x41/0x160 [ 128.369978][ T1993] process_scheduled_works+0x513/0xa10 [ 128.375466][ T1993] worker_thread+0x58a/0x780 [ 128.380067][ T1993] kthread+0x22a/0x280 [ 128.384140][ T1993] ret_from_fork+0x150/0x360 [ 128.388832][ T1993] ret_from_fork_asm+0x1a/0x30 [ 128.393693][ T1993] [ 128.396085][ T1993] read to 0xffffffff86c5ffa8 of 4 bytes by task 1993 on cpu 1: [ 128.403930][ T1993] copy_process+0x187f/0x20b0 [ 128.409273][ T1993] kernel_clone+0x16b/0x5d0 [ 128.413894][ T1993] user_mode_thread+0x9c/0xd0 [ 128.418600][ T1993] call_usermodehelper_exec_work+0x41/0x160 [ 128.424688][ T1993] process_scheduled_works+0x513/0xa10 [ 128.430509][ T1993] worker_thread+0x58a/0x780 [ 128.435109][ T1993] kthread+0x22a/0x280 [ 128.439355][ T1993] ret_from_fork+0x150/0x360 [ 128.444241][ T1993] ret_from_fork_asm+0x1a/0x30 [ 128.449623][ T1993] [ 128.451957][ T1993] value changed: 0x800000f3 -> 0x800000f4 [ 128.457683][ T1993] [ 128.460146][ T1993] Reported by Kernel Concurrency Sanitizer on: [ 128.466301][ T1993] CPU: 1 UID: 0 PID: 1993 Comm: kworker/u8:10 Tainted: G W syzkaller #0 PREEMPT(full) [ 128.477848][ T1993] Tainted: [W]=WARN [ 128.481735][ T1993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 128.492056][ T1993] Workqueue: events_unbound call_usermodehelper_exec_work [ 128.499310][ T1993] ==================================================================