last executing test programs: 2m31.636926567s ago: executing program 4 (id=5): openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context', 0x2, 0x0) 2m31.624851857s ago: executing program 0 (id=14): openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey', 0x800, 0x0) 2m31.624013167s ago: executing program 4 (id=17): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qrtr-tun', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qrtr-tun', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qrtr-tun', 0x800, 0x0) 2m31.623119427s ago: executing program 4 (id=19): syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x800) 2m31.622861588s ago: executing program 0 (id=20): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net', 0x2, 0x0) 2m31.605808008s ago: executing program 0 (id=22): name_to_handle_at(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000), 0x0) 2m31.605222978s ago: executing program 4 (id=24): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio1', 0x800, 0x0) 2m31.604898339s ago: executing program 4 (id=26): chroot(&(0x7f0000000000)) 2m31.604721479s ago: executing program 0 (id=27): fspick(0xffffffffffffffff, &(0x7f0000000000), 0x0) 2m31.559321952s ago: executing program 0 (id=30): socket$inet_icmp_raw(0x2, 0x3, 0x1) 2m31.498874595s ago: executing program 4 (id=37): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2m31.342483634s ago: executing program 0 (id=38): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2.441917997s ago: executing program 1 (id=8447): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4000}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xfffffffc}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x20000000) 2.172235053s ago: executing program 1 (id=8452): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c00080008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cb8b4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e002c2a73ae028d1b34ff4f8cc430bb5a360db598262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d930000", 0xd8}], 0x1}, 0x0) 1.88152002s ago: executing program 3 (id=8456): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c0, 0x130, 0x98, 0x1f0, 0x130, 0x98, 0x350, 0x350, 0x1f0, 0x350, 0x350, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x69}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0xb}, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0x81}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'dummy0\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x8, 0x8, 0x6}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) 1.854126122s ago: executing program 1 (id=8457): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000161e5340892ee3aa0002000000000000"], &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2}, 0x20) 1.697406881s ago: executing program 2 (id=8459): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYBLOB="84000000100005000004855a9ffbf21304000000", @ANYRES32, @ANYBLOB="1546010000000000540012800c0001006d6163766c616e004400028006000200010000000800010001000000080006"], 0x84}}, 0x20008040) 1.665594212s ago: executing program 6 (id=8460): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) 1.664413382s ago: executing program 1 (id=8461): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000000102f50000000000000000000a0000003c0001802c00018014000300ff01000000000000000000000000000114000400000000000000000000000000000000030c0002"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 1.559631789s ago: executing program 3 (id=8462): r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000000)=@ieee802154={0x24, @long={0x3, 0x1}}, 0x80, 0x0}, 0x0) 1.476698514s ago: executing program 5 (id=8463): r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x1c, &(0x7f0000000040), &(0x7f0000cab000)=0x7) 1.302063084s ago: executing program 5 (id=8464): r0 = socket$igmp6(0xa, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x913}], 0x1, 0x103, 0x0) 1.248694787s ago: executing program 1 (id=8465): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newsa={0x170, 0x1a, 0x633, 0x0, 0x25dfdbfd, {{@in=@private=0xa010101, @in=@broadcast, 0x0, 0x4000, 0x4e24, 0x8001, 0x0, 0x20}, {@in=@multicast1, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {0x323, 0x0, 0x0, 0x0, 0x4000}, {}, {}, 0x70bd29, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e22, 0x0, @in=@private=0xa010101}}, @encap={0x1c, 0x4, {0x1, 0x4e21, 0xfffc}}]}, 0x170}}, 0x0) 1.243782467s ago: executing program 6 (id=8466): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) 1.219064299s ago: executing program 2 (id=8467): r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x2}, 0x0) 1.174565051s ago: executing program 3 (id=8468): r0 = syz_open_procfs(0x0, &(0x7f0000000740)='gid_map\x00') write$selinux_create(r0, 0x0, 0x0) 1.005198681s ago: executing program 5 (id=8469): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x34}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) 930.587305ms ago: executing program 6 (id=8470): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000400)="d2ff03076003008cb89e08f086dd05536a601e52894858cf5fc7f65492b74365131466624be7053f664dc20d6b7be27e2994e1f9e95c", 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 834.020831ms ago: executing program 2 (id=8471): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000009180)=@newtaction={0x70, 0x30, 0x519, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xfffffffe, 0x0, 0x20000000, 0x40000008, 0x4}}, @TCA_SAMPLE_RATE={0x8}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) 791.804353ms ago: executing program 3 (id=8472): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) semtimedop(0x0, 0x0, 0x0, 0x0) 689.037239ms ago: executing program 6 (id=8473): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) utime(&(0x7f0000000000)='.\x00', 0x0) 637.072072ms ago: executing program 5 (id=8474): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001940)={0x20, 0x48, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@typed={0x8, 0x100, 0x0, 0x0, @u32}, @nested={0x4, 0x2}]}, 0x20}}, 0x20048800) 573.198036ms ago: executing program 2 (id=8475): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$sock(r0, &(0x7f0000000300)={&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x2, {{0x41, 0x3}}}, 0x80, 0x0}, 0x24008000) 451.040154ms ago: executing program 3 (id=8476): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @local, 0x0, 0x0, 0xfffffffc}}) 403.492446ms ago: executing program 6 (id=8477): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000300)={0x0, 0x0, 0x8, 0x4, 0x114, 0x1}) 387.669067ms ago: executing program 1 (id=8478): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) 362.467958ms ago: executing program 5 (id=8479): timerfd_create(0x1, 0x80800) close(0x3) 287.878043ms ago: executing program 2 (id=8480): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r0, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}, {&(0x7f00000002c0)='2', 0x1}], 0x2, 0x0, 0x0) 197.564478ms ago: executing program 6 (id=8481): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000007600010000150000000000000702"], 0x18}, 0x1, 0x5502000000000000}, 0x0) 182.639879ms ago: executing program 3 (id=8482): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(0x0, 0x800021, &(0x7f0000000000)) 149.954131ms ago: executing program 5 (id=8483): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x80082, 0x0) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000100)="bf7ede72f5f550c21b0c17549d521227958f13f2b9607c2a5fe57019128a51b74878b21d0b409e56c00512bf2c40d599f0b00e6b9056928a70c61695659894e6aa5c", 0x42}, {0x0}], 0x2) 0s ago: executing program 2 (id=8484): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_XFRM_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}, 0x1, 0x0, 0x0, 0xd9}, 0x0) kernel console output (not intermixed with test programs): :sysadm_t pid=13225 comm="syz.3.4717" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb9082eaeb9 code=0x0 [ 113.577417][ T3452] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.599754][T13246] tmpfs: Bad value for 'mpol' [ 113.644018][T13248] EXT4-fs (loop2): bad s_min_extra_isize: 2304 [ 113.655143][T13250] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 113.665250][T13252] FAT-fs (loop3): bogus number of reserved sectors [ 113.671814][T13252] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 113.681129][T13252] FAT-fs (loop3): Can't find a valid FAT filesystem [ 113.701062][T13250] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 113.804912][T13267] FAT-fs (loop1): bogus number of reserved sectors [ 113.811586][T13267] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 113.821053][T13267] FAT-fs (loop1): Can't find a valid FAT filesystem [ 114.028585][ T29] audit: type=1400 audit(1770436097.598:274): avc: denied { remount } for pid=13301 comm="syz.1.4756" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 114.132404][T13320] [syz.3.] <== rxrpc_preparse_xdr_yfs_rxgk() = -EKEYREJECTED [d9c19884!=bc, 2c,d9c19820] [ 114.201460][ T3371] loop1: p1 p2[DM] p4 [ 114.211441][ T3371] loop1: p1 size 196608 extends beyond EOD, truncated [ 114.220240][ T3371] loop1: p2 start 4292936063 is beyond EOD, truncated [ 114.227079][ T3371] loop1: p4 size 50331648 extends beyond EOD, truncated [ 114.257075][T13309] loop1: p1 p2[DM] p4 [ 114.264576][T13309] loop1: p1 size 196608 extends beyond EOD, truncated [ 114.294385][T13336] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 114.318831][T13309] loop1: p2 start 4292936063 is beyond EOD, truncated [ 114.325708][T13309] loop1: p4 size 50331648 extends beyond EOD, truncated [ 114.460443][ T3371] udevd[3371]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 114.481207][T13361] tmpfs: Bad value for 'mpol' [ 114.615176][ T29] audit: type=1326 audit(1770436098.178:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13377 comm="syz.1.4793" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fed2601aeb9 code=0x0 [ 114.652128][T13386] 9pnet_virtio: no channels available for device 127.0.0.1 [ 114.654509][ T29] audit: type=1400 audit(1770436098.228:276): avc: denied { mounton } for pid=13385 comm="syz.3.4797" path="/syzcgroup/cpu/syz3/cgroup.procs" dev="cgroup" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 114.799940][T13408] set_capacity_and_notify: 24 callbacks suppressed [ 114.800018][T13408] loop1: detected capacity change from 0 to 2048 [ 114.893307][ T3371] loop1: p4 < > [ 114.906493][T13408] loop1: p4 < > [ 115.055738][T13444] loop1: detected capacity change from 0 to 512 [ 115.084094][T13444] EXT4-fs: inline encryption not supported [ 115.101128][T13444] EXT4-fs: Ignoring removed i_version option [ 115.114495][T13444] EXT4-fs (loop1): 1 orphan inode deleted [ 115.131210][T13444] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.161774][ T3452] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.179689][T13458] loop6: detected capacity change from 0 to 512 [ 115.194200][T13458] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #11: comm syz.6.4832: iget: bad extra_isize 90 (inode size 256) [ 115.237317][T13458] EXT4-fs (loop6): Remounting filesystem read-only [ 115.265573][T13470] loop2: detected capacity change from 0 to 128 [ 115.291605][T13458] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 115.304643][T13458] EXT4-fs warning (device loop6): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 115.361045][T13485] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 115.381289][T13458] EXT4-fs (loop6): 1 orphan inode deleted [ 115.417806][T13458] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.483661][ T3442] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.603840][T13515] loop1: detected capacity change from 0 to 512 [ 115.605070][T13517] loop6: detected capacity change from 0 to 512 [ 115.633409][T13515] EXT4-fs: Ignoring removed orlov option [ 115.666061][T13517] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 115.685607][T13515] EXT4-fs: Mount option(s) incompatible with ext2 [ 115.712756][T13517] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #17: comm syz.6.4861: casefold flag without casefold feature [ 115.755324][T13517] EXT4-fs (loop6): Remounting filesystem read-only [ 115.765654][T13517] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.824022][T13539] loop3: detected capacity change from 0 to 1024 [ 115.840866][ T3442] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.850017][T13539] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 115.859793][T13539] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 115.895514][T13539] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 115.913506][T13551] loop1: detected capacity change from 0 to 512 [ 115.945512][T13539] EXT4-fs error (device loop3): ext4_get_journal_inode:5849: inode #5: comm syz.3.4871: unexpected bad inode w/o EXT4_IGET_BAD [ 115.992454][T13539] EXT4-fs (loop3): no journal found [ 115.997695][T13539] EXT4-fs (loop3): can't get journal size [ 116.057886][T13539] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 116.095220][ T3453] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.146759][T13590] loop3: detected capacity change from 0 to 512 [ 116.178772][T13590] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 116.187524][T13590] EXT4-fs (loop3): filesystem has both journal inode and journal device! [ 116.253931][T13600] loop1: detected capacity change from 0 to 2048 [ 116.309828][T13608] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.4905: corrupted inode contents [ 116.322010][ T4375] loop1: p1 p2 < > p3 p4 < p5 > [ 116.327081][ T4375] loop1: partition table partially beyond EOD, truncated [ 116.336751][ T4375] loop1: p1 start 8388607 is beyond EOD, truncated [ 116.343314][ T4375] loop1: p2 start 4294902784 is beyond EOD, truncated [ 116.350112][ T4375] loop1: p3 start 3724543488 is beyond EOD, truncated [ 116.358859][ T4375] loop1: p5 start 8388607 is beyond EOD, truncated [ 116.366223][T13608] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 116.375536][T13608] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.4905: corrupted inode contents [ 116.397820][T13600] loop1: p1 p2 < > p3 p4 < p5 > [ 116.402878][T13600] loop1: partition table partially beyond EOD, truncated [ 116.410115][T13600] loop1: p1 start 8388607 is beyond EOD, truncated [ 116.410423][T13608] EXT4-fs error (device loop3): ext4_evict_inode:301: inode #15: comm syz.3.4905: mark_inode_dirty error [ 116.416625][T13600] loop1: p2 start 4294902784 is beyond EOD, truncated [ 116.416645][T13600] loop1: p3 start 3724543488 is beyond EOD, truncated [ 116.417141][T13600] loop1: p5 start 8388607 is beyond EOD, truncated [ 116.480959][T13608] EXT4-fs (loop3): 1 orphan inode deleted [ 116.488951][ T3002] loop1: p1 p2 < > p3 p4 < p5 > [ 116.493946][ T3002] loop1: partition table partially beyond EOD, truncated [ 116.503744][T13608] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.516385][ T3002] loop1: p1 start 8388607 is beyond EOD, truncated [ 116.523023][ T3002] loop1: p2 start 4294902784 is beyond EOD, truncated [ 116.529862][ T3002] loop1: p3 start 3724543488 is beyond EOD, truncated [ 116.549509][ T3002] loop1: p5 start 8388607 is beyond EOD, truncated [ 116.573200][ T3453] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.647035][T13659] FAT-fs (loop3): bogus sectors per cluster 0 [ 116.653146][T13659] FAT-fs (loop3): Can't find a valid FAT filesystem [ 116.657306][T13662] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 116.679098][ T3002] loop5: p2 < > p4 [ 116.684006][T13656] EXT4-fs (loop2): bad geometry: first data block 0 is beyond end of filesystem (0) [ 116.686352][ T3002] loop5: p4 size 262144 extends beyond EOD, truncated [ 116.716117][T13668] vfat: Bad value for 'utf8' [ 116.724070][ T3002] loop5: p2 < > p4 [ 116.734211][ T3002] loop5: p4 size 262144 extends beyond EOD, truncated [ 116.746129][T13652] loop5: p2 < > p4 [ 116.752754][T13652] loop5: p4 size 262144 extends beyond EOD, truncated [ 116.814669][T13678] EXT4-fs warning (device loop2): ext4_init_metadata_csum:4637: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 116.828317][T13678] EXT4-fs (loop2): Couldn't mount because of unsupported optional features (fffc1829) [ 116.869649][T13682] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #11: comm syz.6.4942: iget: bad extra_isize 90 (inode size 256) [ 116.898864][T13682] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.4942: error while reading EA inode 11 err=-117 [ 116.945414][T13692] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 116.970287][T13682] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #11: comm syz.6.4942: iget: bad extra_isize 90 (inode size 256) [ 117.008583][T13695] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 117.030077][T13692] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 117.040600][T13692] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 117.050008][T13692] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.4946: Failed to acquire dquot type 1 [ 117.082126][T13682] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.4942: error while reading EA inode 11 err=-117 [ 117.098277][T13692] EXT4-fs (loop3): 1 truncate cleaned up [ 117.106218][T13695] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4947: bg 0: block 393: padding at end of block bitmap is not set [ 117.120965][T13682] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #18: comm syz.6.4942: iget: bad extra_isize 90 (inode size 256) [ 117.146433][T13692] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 117.188879][ T3303] loop1: p1 p2 p3 < p5 p6 > [ 117.194061][ T3303] loop1: p2 size 16775168 extends beyond EOD, truncated [ 117.199216][T13695] EXT4-fs (loop5): Remounting filesystem read-only [ 117.207614][T13682] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.4942: error while reading EA inode 18 err=-117 [ 117.211098][T13695] EXT4-fs (loop5): 2 truncates cleaned up [ 117.224461][ T3303] loop1: p5 start 4294970168 is beyond EOD, truncated [ 117.239650][T13695] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.264884][T13682] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #18: comm syz.6.4942: iget: bad extra_isize 90 (inode size 256) [ 117.279111][ T3453] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 117.280447][ T29] audit: type=1400 audit(2000000000.654:277): avc: denied { create } for pid=13705 comm="syz.2.4952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 117.297375][T13664] loop1: p1 p2 p3 < p5 p6 > [ 117.313501][T13664] loop1: p2 size 16775168 extends beyond EOD, truncated [ 117.324294][T13682] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.4942: error while reading EA inode 18 err=-117 [ 117.331202][T13664] loop1: p5 start 4294970168 is beyond EOD, truncated [ 117.340066][T13682] EXT4-fs (loop6): 1 orphan inode deleted [ 117.350475][T13682] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.359975][ T3445] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.482875][ T3442] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.517355][ T29] audit: type=1400 audit(2000000000.869:278): avc: denied { create } for pid=13723 comm="syz.5.4962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 117.579214][T13732] delete_channel: no stack [ 117.583712][T13732] delete_channel: no stack [ 117.618046][T13738] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 117.624624][T13738] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 117.632155][T13738] vhci_hcd vhci_hcd.0: Device attached [ 117.702278][T13739] vhci_hcd: connection closed [ 117.702510][ T42] vhci_hcd vhci_hcd.6: stop threads [ 117.712650][ T42] vhci_hcd vhci_hcd.6: release socket [ 117.718016][ T42] vhci_hcd vhci_hcd.6: disconnect device [ 117.805665][T13770] SELinux: Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped). [ 117.816251][ T29] audit: type=1400 audit(2000000001.150:279): avc: denied { relabelto } for pid=13769 comm="syz.5.4982" name="1026" dev="tmpfs" ino=5265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 117.842376][ T29] audit: type=1400 audit(2000000001.150:280): avc: denied { associate } for pid=13769 comm="syz.5.4982" name="1026" dev="tmpfs" ino=5265 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="u:r:untrusted_app:s0:c512,c768" [ 117.905106][T13770] Process accounting paused [ 117.926591][ T29] audit: type=1400 audit(2000000001.244:281): avc: denied { remove_name } for pid=3445 comm="syz-executor" name="binderfs" dev="tmpfs" ino=5269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 118.023743][T13800] EXT4-fs (loop3): unable to read superblock [ 118.077011][T13812] tmpfs: Bad value for 'mpol' [ 118.128788][T13821] tmpfs: Bad value for 'mpol' [ 118.143938][T13820] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 118.176188][T13820] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 118.234285][T13820] EXT4-fs (loop3): 1 truncate cleaned up [ 118.241566][T13832] rock: directory entry would overflow storage [ 118.247778][T13832] rock: sig=0x3b10, size=4, remaining=3 [ 118.258185][T13820] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.339226][ T3453] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.529835][T13884] journal_path: Non-blockdev passed as './file0' [ 118.536260][T13884] EXT4-fs: error: could not find journal device path [ 118.552768][T13885] EXT4-fs (loop6): orphan cleanup on readonly fs [ 118.559731][T13885] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 118.595400][T13885] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 118.637888][T13885] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.5038: bad orphan inode 14 [ 118.666002][T13885] ext4_test_bit(bit=13, block=18) = 1 [ 118.671436][T13885] is_bad_inode(inode)=0 [ 118.675693][T13885] NEXT_ORPHAN(inode)=0 [ 118.679886][T13885] max_ino=32 [ 118.683083][T13885] i_nlink=1 [ 118.710389][T13885] EXT4-fs (loop6): 1 truncate cleaned up [ 118.716443][T13885] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 118.818762][ T3442] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.855038][T13926] Attempt to read inode for relocated directory [ 119.019021][T13952] FAT-fs (loop6): bogus number of reserved sectors [ 119.025678][T13952] FAT-fs (loop6): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 119.035045][T13952] FAT-fs (loop6): Can't find a valid FAT filesystem [ 119.344739][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 119.344755][ T29] audit: type=1400 audit(2000000002.581:284): avc: denied { create } for pid=14007 comm="syz.3.5099" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 119.372711][T13998] EXT4-fs (loop1): cluster size (2048) smaller than block size (4096) [ 119.492244][T14031] futex_wake_op: syz.1.5110 tries to shift op by 36; fix this program [ 119.512301][T14019] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 119.521474][T14019] EXT4-fs (loop6): filesystem is read-only [ 119.552880][T14019] EXT4-fs (loop6): failed to initialize system zone (-117) [ 119.579850][T14019] EXT4-fs (loop6): mount failed [ 119.587473][T14039] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 119.604858][T14039] EXT4-fs (loop5): orphan cleanup on readonly fs [ 119.648039][T14039] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #16: comm syz.5.5114: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 32769(4), depth 65535(65535) [ 119.686702][T14039] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.5114: couldn't read orphan inode 16 (err -117) [ 119.699382][T14039] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 119.726099][ T3445] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.749916][T14055] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 119.759602][T14055] EXT4-fs (loop3): group descriptors corrupted! [ 119.825289][T14068] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 119.842980][T14068] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 119.851620][T14068] System zones: 0-2, 18-18, 34-35 [ 119.872013][T14068] EXT4-fs (loop6): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.920334][ T3442] EXT4-fs (loop6): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 119.947608][T14085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.956550][T14085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.111089][T14116] set_capacity_and_notify: 25 callbacks suppressed [ 120.111108][T14116] loop2: detected capacity change from 0 to 1024 [ 120.139191][T14121] dns_resolver: Unsupported server list version (0) [ 120.370890][T14167] loop1: detected capacity change from 0 to 512 [ 120.390696][T14169] loop3: detected capacity change from 0 to 1024 [ 120.397579][T14167] EXT4-fs: Ignoring removed i_version option [ 120.403650][T14171] loop6: detected capacity change from 0 to 512 [ 120.411630][T14169] EXT4-fs: inline encryption not supported [ 120.418866][T14169] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 120.431144][T14171] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 120.446832][T14169] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.5177: lblock 2 mapped to illegal pblock 2 (length 1) [ 120.468769][T14171] EXT4-fs (loop6): 1 orphan inode deleted [ 120.471508][T14169] EXT4-fs (loop3): Remounting filesystem read-only [ 120.474539][T14171] EXT4-fs (loop6): 1 truncate cleaned up [ 120.481009][T14169] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 120.481074][T14169] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 120.481105][T14169] EXT4-fs (loop3): 1 orphan inode deleted [ 120.509828][T14171] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.515154][T14167] EXT4-fs (loop1): 1 truncate cleaned up [ 120.535383][T14169] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.573567][T14180] loop2: detected capacity change from 0 to 512 [ 120.584298][T14180] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 120.621537][T14185] cgroup: Unknown subsys name '@﬽4*oңhoU' [ 120.730888][T14204] cgroup2: Unexpected value for 'memory_localevents' [ 120.753748][T14200] loop5: detected capacity change from 0 to 1024 [ 120.772195][T14200] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 120.788940][T14200] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 120.801591][T14200] EXT4-fs (loop5): invalid journal inode [ 120.809780][T14200] EXT4-fs (loop5): can't get journal size [ 120.829771][T14200] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 17104912: comm syz.5.5191: lblock 2 mapped to illegal pblock 17104912 (length 1) [ 120.845241][T14200] EXT4-fs (loop5): Remounting filesystem read-only [ 120.851826][T14200] EXT4-fs (loop5): failed to initialize system zone (-117) [ 120.859355][T14200] EXT4-fs (loop5): mount failed [ 120.868168][T14218] loop1: detected capacity change from 0 to 512 [ 120.888659][T14218] EXT4-fs error (device loop1): ext4_free_inode:354: comm syz.1.5200: bit already cleared for inode 11 [ 120.947231][T14218] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 120.947901][T14231] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 121.001039][T14218] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 121.036487][T14218] EXT4-fs (loop1): 1 orphan inode deleted [ 121.143285][T14260] loop5: detected capacity change from 0 to 1024 [ 121.188522][T14271] loop2: detected capacity change from 0 to 512 [ 121.199983][T14260] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 121.217701][T14271] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 121.227241][T14260] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 121.262614][T14271] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.5224: corrupted in-inode xattr: e_value out of bounds [ 121.293544][T14271] EXT4-fs (loop2): Remounting filesystem read-only [ 121.301526][T14284] tmpfs: Bad value for 'mpol' [ 121.479380][T14318] loop3: detected capacity change from 0 to 512 [ 121.501870][ T29] audit: type=1326 audit(2000000004.602:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14321 comm="syz.2.5249" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f41e606aeb9 code=0x0 [ 121.561473][T14318] EXT4-fs error (device loop3): ext4_quota_enable:7177: inode #3: comm syz.3.5246: iget: checksum invalid [ 121.600564][T14318] EXT4-fs error (device loop3): ext4_quota_enable:7180: comm syz.3.5246: Bad quota inode: 3, type: 0 [ 121.630600][T14318] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-74, ino=3). Please run e2fsck to fix. [ 121.647938][T14340] EXT4-fs: Ignoring removed mblk_io_submit option [ 121.672090][T14318] EXT4-fs (loop3): mount failed [ 121.690223][T14340] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=885ec129, mo2=0006] [ 121.704909][T14340] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.5256: Invalid inode bitmap blk 4 in block_group 0 [ 121.735823][T14340] EXT4-fs (loop1): Remounting filesystem read-only [ 121.765811][T14337] loop5: p2 p3 p4 < > [ 121.769913][T14337] loop5: partition table partially beyond EOD, truncated [ 121.802674][T14337] loop5: p2 size 590592 extends beyond EOD, truncated [ 121.812738][T14337] loop5: p3 start 4294967295 is beyond EOD, truncated [ 121.819591][T14337] loop5: p4 start 117440516 is beyond EOD, truncated [ 121.843348][ T3306] loop3: p1 < > p3 < > p4 < > [ 121.848145][ T3306] loop3: partition table partially beyond EOD, truncated [ 121.877608][ T3306] loop3: p3 start 4284289 is beyond EOD, truncated [ 121.889435][ T3371] udevd[3371]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 121.892725][T14367] FAT-fs (loop6): bogus sectors per cluster 223 [ 121.905667][T14367] FAT-fs (loop6): Can't find a valid FAT filesystem [ 121.927014][T14353] loop3: p1 < > p3 < > p4 < > [ 121.931831][T14353] loop3: partition table partially beyond EOD, truncated [ 121.975178][T14353] loop3: p3 start 4284289 is beyond EOD, truncated [ 122.082694][ T4375] udevd[4375]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 122.096780][ T3371] udevd[3371]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 122.130574][T14401] cgroup: none used incorrectly [ 122.264818][T14424] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 122.279744][T14424] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 122.279744][T14419] ext4 filesystem being mounted at /syzcgroup/cpu/syz5/cgroup.procs supports timestamps until 2038-01-19 (0x7fffffff) [ 122.302678][T14424] EXT4-fs (loop3): invalid journal inode [ 122.320203][T14424] EXT4-fs (loop3): can't get journal size [ 122.346305][T14424] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 17104912: comm syz.3.5295: lblock 2 mapped to illegal pblock 17104912 (length 1) [ 122.403450][T14441] futex_wake_op: syz.1.5304 tries to shift op by -3; fix this program [ 122.411343][T14424] EXT4-fs (loop3): Remounting filesystem read-only [ 122.423109][T14424] EXT4-fs (loop3): failed to initialize system zone (-117) [ 122.430578][T14424] EXT4-fs (loop3): mount failed [ 122.461320][ T4375] Alternate GPT is invalid, using primary GPT. [ 122.467644][ T4375] loop2: p1 p2 p3 [ 122.503076][T14437] Alternate GPT is invalid, using primary GPT. [ 122.509404][T14437] loop2: p1 p2 p3 [ 122.580799][T14445] FAT-fs (loop1): error, fat_get_cluster: detected the cluster chain loop (i_pos 1) [ 122.590261][T14445] FAT-fs (loop1): Filesystem has been set read-only [ 122.733500][T14485] tmpfs: Bad value for 'mpol' [ 122.773744][ T3371] udevd[3371]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 122.787867][T14493] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 122.797486][ T4375] udevd[4375]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 122.810859][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 122.827142][T14496] Unable to read rock-ridge attributes [ 122.848957][T14493] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.5330: bad orphan inode 15 [ 122.896817][T14507] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 122.905091][T14507] EXT4-fs (loop1): Number of reserved GDT blocks insanely large: 65280 [ 122.929264][ T3371] udevd[3371]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 122.930331][T14493] ext4_test_bit(bit=14, block=18) = 1 [ 122.944409][T14493] is_bad_inode(inode)=0 [ 122.948539][T14493] NEXT_ORPHAN(inode)=1023 [ 122.952952][T14493] max_ino=32 [ 122.956137][T14493] i_nlink=0 [ 122.973572][ T4375] udevd[4375]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 122.984712][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 122.997230][T14493] ext2 filesystem being mounted at /1087/qY3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 123.070257][T14525] EXT4-fs (loop1): orphan cleanup on readonly fs [ 123.095053][T14525] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 123.105468][T14525] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 123.114990][T14525] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.5345: Failed to acquire dquot type 1 [ 123.149773][T14534] FAT-fs (loop3): IO charset u#ww9C= Y撳t EŒ&y3_S@rRhB&5dxpO߁up@HX[曖[7VG1 y{.#vX)P1u&-@=6Axa'ێe yoE [ 123.149773][T14534] r not found [ 123.211808][T14525] EXT4-fs (loop1): 1 truncate cleaned up [ 123.230935][ T29] audit: type=1400 audit(2000000006.211:286): avc: denied { create } for pid=14543 comm="syz.5.5354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 123.479569][T14576] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 123.487814][T14576] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #13: comm syz.5.5370: iget: bad i_size value: 12154757448730 [ 123.500934][T14576] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.5370: couldn't read orphan inode 13 (err -117) [ 123.808621][T14609] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 4294967289)! [ 123.819545][T14609] EXT4-fs (loop5): group descriptors corrupted! [ 124.109832][T14640] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 124.121377][T14640] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 124.131587][T14640] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.5402: Corrupt directory, running e2fsck is recommended [ 124.171923][T14640] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 124.233582][T14640] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.5402: corrupted in-inode xattr: e_name out of bounds [ 124.251566][T14650] futex_wake_op: syz.6.5406 tries to shift op by -1; fix this program [ 124.276619][T14640] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.5402: couldn't read orphan inode 15 (err -117) [ 124.504444][T14688] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 124.518666][T14688] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 124.532955][T14688] EXT4-fs (loop6): failed to initialize system zone (-117) [ 124.545074][T14688] EXT4-fs (loop6): mount failed [ 125.281552][T14817] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 125.290735][T14817] EXT4-fs (loop1): filesystem is read-only [ 125.296593][T14817] EXT4-fs (loop1): invalid inodes per group: 5 [ 125.296593][T14817] [ 125.496879][T14861] set_capacity_and_notify: 24 callbacks suppressed [ 125.496896][T14861] loop5: detected capacity change from 0 to 164 [ 125.530017][T14861] isofs_fill_super: root inode is not a directory. Corrupted media? [ 125.673306][ T29] audit: type=1326 audit(2000000264.507:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14893 comm="syz.3.5526" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb9082eaeb9 code=0x0 [ 125.723596][T14901] loop6: detected capacity change from 0 to 512 [ 125.752126][T14901] EXT4-fs: Ignoring removed nomblk_io_submit option [ 125.759382][T14901] EXT4-fs: Mount option(s) incompatible with ext3 [ 125.864558][T14926] loop3: detected capacity change from 0 to 512 [ 125.918773][T14926] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.5541: EA inode hash validation failed [ 125.944395][T14926] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.5541: corrupted inode contents [ 125.961780][T14947] nfs: Unexpected value for 'acl' [ 125.979387][T14926] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #15: comm syz.3.5541: mark_inode_dirty error [ 126.001697][T14926] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.5541: corrupted inode contents [ 126.019143][T14953] loop1: detected capacity change from 0 to 764 [ 126.039890][T14955] loop6: detected capacity change from 0 to 512 [ 126.047650][T14926] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3001: inode #15: comm syz.3.5541: mark_inode_dirty error [ 126.077000][T14955] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 126.097503][T14926] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3004: inode #15: comm syz.3.5541: mark inode dirty (error -117) [ 126.110454][T14926] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 126.117969][T14963] loop5: detected capacity change from 0 to 512 [ 126.119911][T14926] EXT4-fs (loop3): 1 orphan inode deleted [ 126.160111][T14963] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 126.219571][T14963] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.5559: bg 0: block 4: invalid block bitmap [ 126.269045][T14963] EXT4-fs (loop5): Remounting filesystem read-only [ 126.276049][T14963] EXT4-fs (loop5): 1 truncate cleaned up [ 126.290169][T14982] loop3: detected capacity change from 0 to 512 [ 126.319381][T14982] EXT4-fs: journaled quota format not specified [ 126.502508][ T29] audit: type=1326 audit(2000000265.284:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15019 comm="syz.6.5587" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa2941faeb9 code=0x0 [ 126.550862][T15026] loop5: detected capacity change from 0 to 512 [ 126.601041][T15026] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 126.607819][T15035] loop1: detected capacity change from 0 to 1024 [ 126.610939][T15026] EXT4-fs (loop5): inodes count not valid: 0 vs 32 [ 126.624476][T15035] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 126.633009][T15035] EXT4-fs (loop1): filesystem too large to mount safely on this system [ 126.653283][T15039] loop6: detected capacity change from 0 to 512 [ 126.659938][T15039] EXT4-fs: Ignoring removed i_version option [ 126.704563][T15039] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 126.732083][T15039] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 126.764244][T15039] EXT4-fs (loop6): orphan cleanup on readonly fs [ 126.777475][T15039] Quota error (device loop6): do_check_range: Getting dqdh_next_free 196613 out of range 0-5 [ 126.787726][T15039] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 126.797907][T15039] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.5595: Failed to acquire dquot type 1 [ 126.867155][T15039] Quota error (device loop6): do_check_range: Getting dqdh_next_free 196613 out of range 0-5 [ 126.877457][T15039] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 126.887426][T15039] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.5595: Failed to acquire dquot type 1 [ 126.901848][ T29] audit: type=1400 audit(2000000265.658:289): avc: denied { setattr } for pid=15073 comm="syz.1.5614" name="cgroup.procs" dev="cgroup" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="unconfined_u:system_r:insmod_t:s0-s0:c0.c1023" [ 126.935863][T15039] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.5595: Invalid block bitmap block 0 in block_group 0 [ 126.965688][T15039] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 126.988402][T15039] Quota error (device loop6): do_check_range: Getting dqdh_next_free 196613 out of range 0-5 [ 126.998782][T15039] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 127.008814][T15039] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.5595: Failed to acquire dquot type 1 [ 127.034836][T15039] EXT4-fs (loop6): 1 orphan inode deleted [ 127.097543][T15098] tmpfs: Bad value for 'mpol' [ 127.155996][T15105] EXT4-fs (loop3): invalid inodes per group: 4294967295 [ 127.155996][T15105] [ 127.214803][T15108] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #4: comm syz.6.5630: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 127.292705][T15108] EXT4-fs error (device loop6): ext4_quota_enable:7180: comm syz.6.5630: Bad quota inode: 4, type: 1 [ 127.333405][T15108] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 127.396563][T15145] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.5648: corrupted inode contents [ 127.413940][T15108] EXT4-fs (loop6): mount failed [ 127.468568][T15145] EXT4-fs (loop1): Remounting filesystem read-only [ 127.502970][T15145] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 127.553166][T15145] EXT4-fs (loop1): 1 orphan inode deleted [ 127.584895][ T3371] loop3: p1 p2 p3 p4 [ 127.589027][ T3371] loop3: p1 size 196608 extends beyond EOD, truncated [ 127.607131][ T3371] loop3: p2 start 164919041 is beyond EOD, truncated [ 127.613884][ T3371] loop3: p3 size 66846464 extends beyond EOD, truncated [ 127.650412][ T3371] loop3: p4 size 37048832 extends beyond EOD, truncated [ 127.667489][T15139] loop3: p1 p2 p3 p4 [ 127.672266][T15139] loop3: p1 size 196608 extends beyond EOD, truncated [ 127.708263][T15139] loop3: p2 start 164919041 is beyond EOD, truncated [ 127.715134][T15139] loop3: p3 size 66846464 extends beyond EOD, truncated [ 127.736578][T15139] loop3: p4 size 37048832 extends beyond EOD, truncated [ 127.869397][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 127.880109][ T4375] udevd[4375]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 127.900101][ T3371] udevd[3371]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 128.036229][ T3306] loop5: p2 p3 p4 < > [ 128.043081][ T3306] loop5: p2 size 590592 extends beyond EOD, truncated [ 128.068227][ T3306] loop5: p3 start 589824 is beyond EOD, truncated [ 128.123429][T15222] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 128.133899][T15181] loop5: p2 p3 p4 < > [ 128.158687][T15222] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 128.169457][T15181] loop5: p2 size 590592 extends beyond EOD, truncated [ 128.223537][T15222] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #3: block 1: comm syz.1.5685: lblock 1 mapped to illegal pblock 1 (length 1) [ 128.252494][T15181] loop5: p3 start 589824 is beyond EOD, truncated [ 128.280718][T15222] Quota error (device loop1): write_blk: dquota write failed [ 128.296078][T15222] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.5685: Failed to acquire dquot type 0 [ 128.312799][T15222] EXT4-fs error (device loop1): ext4_free_blocks:6728: comm syz.1.5685: Freeing blocks not in datazone - block = 0, count = 4096 [ 128.328224][T15222] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.5685: Invalid inode bitmap blk 0 in block_group 0 [ 128.343517][ T1900] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 128.362950][T15222] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 128.371674][T15222] EXT4-fs (loop1): 1 orphan inode deleted [ 128.391696][ T1900] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:6: Failed to release dquot type 0 [ 128.423660][ T4375] udevd[4375]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 128.447886][ T3371] udevd[3371]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 128.484116][ T4375] udevd[4375]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 128.500371][ T3371] udevd[3371]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 128.511966][T15252] tmpfs: Bad value for 'mpol' [ 128.586810][T15264] EXT4-fs (loop3): unable to read superblock [ 128.862982][T15313] futex_wake_op: syz.6.5731 tries to shift op by 35; fix this program [ 128.976660][T15327] EXT4-fs: Ignoring removed nomblk_io_submit option [ 129.022373][T15327] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 not in group (block 83886085)! [ 129.033134][T15327] EXT4-fs (loop2): group descriptors corrupted! [ 129.110095][T15347] EXT4-fs: Ignoring removed orlov option [ 129.115825][T15347] EXT4-fs: inline encryption not supported [ 129.123449][ T3371] loop3: p3 < > p4 < > [ 129.127661][ T3371] loop3: partition table partially beyond EOD, truncated [ 129.141412][T15347] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 129.141875][ T3371] loop3: p3 start 4284289 is beyond EOD, truncated [ 129.174269][T15347] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 129.190736][T15340] loop3: p3 < > p4 < > [ 129.195000][T15340] loop3: partition table partially beyond EOD, truncated [ 129.215536][T15340] loop3: p3 start 4284289 is beyond EOD, truncated [ 129.218801][T15347] EXT4-fs (loop5): invalid journal inode [ 129.275315][T15357] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 129.285377][T15347] EXT4-fs (loop5): can't get journal size [ 129.308264][T15360] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 129.314907][T15360] EXT4-fs (loop1): mount failed [ 129.320292][T15357] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.5752: invalid indirect mapped block 4294967295 (level 0) [ 129.334611][ T3371] udevd[3371]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 129.346296][T15372] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1f [ 129.393327][T15357] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.5752: invalid indirect mapped block 4294967295 (level 1) [ 129.418883][T15357] EXT4-fs (loop6): 1 orphan inode deleted [ 129.424669][T15357] EXT4-fs (loop6): 1 truncate cleaned up [ 129.652907][T15409] tmpfs: Bad value for 'mpol' [ 129.860319][T15435] FAT-fs (loop3): bogus sectors per cluster 0 [ 129.866449][T15435] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 129.875691][T15435] FAT-fs (loop3): Can't find a valid FAT filesystem [ 130.125256][ T3371] loop6: p1[EZD] p2 p3 p4 [ 130.138386][ T3371] loop6: p3 start 117772289 is beyond EOD, truncated [ 130.145093][ T3371] loop6: p4 size 262144 extends beyond EOD, truncated [ 130.172198][T15455] loop6: p1[EZD] p2 p3 p4 [ 130.189761][T15455] loop6: p3 start 117772289 is beyond EOD, truncated [ 130.196468][T15455] loop6: p4 size 262144 extends beyond EOD, truncated [ 130.267778][T15487] EXT4-fs: Ignoring removed nobh option [ 130.277494][T15487] EXT4-fs (loop3): unsupported inode size: 16384 [ 130.283873][T15487] EXT4-fs (loop3): blocksize: 1024 [ 130.290507][ T3002] loop6: p1[EZD] p2 p3 p4 [ 130.297437][ T3002] loop6: p3 start 117772289 is beyond EOD, truncated [ 130.304246][ T3002] loop6: p4 size 262144 extends beyond EOD, truncated [ 130.421200][T15507] FAT-fs (loop1): bogus number of reserved sectors [ 130.427789][T15507] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 130.427989][T15508] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 130.437142][T15507] FAT-fs (loop1): Can't find a valid FAT filesystem [ 130.473436][ T3371] udevd[3371]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 130.476940][ T3370] udevd[3370]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 130.863833][T15556] set_capacity_and_notify: 18 callbacks suppressed [ 130.863851][T15556] loop1: detected capacity change from 0 to 8192 [ 130.898189][T15576] loop2: detected capacity change from 0 to 512 [ 130.928582][ T3371] loop1: p1 p2 p3 < > p4 < p5 p6 > [ 130.933939][ T3371] loop1: partition table partially beyond EOD, truncated [ 130.942199][ T3371] loop1: p1 start 30976 is beyond EOD, truncated [ 130.948725][ T3371] loop1: p2 size 16128 extends beyond EOD, truncated [ 130.950795][T15576] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 130.976748][ T3371] loop1: p3 start 327168 is beyond EOD, truncated [ 131.003264][T15576] EXT4-fs (loop2): 1 truncate cleaned up [ 131.009015][ T3371] loop1: p5 start 30976 is beyond EOD, truncated [ 131.015391][ T3371] loop1: p6 size 16128 extends beyond EOD, truncated [ 131.056586][T15556] loop1: p1 p2 p3 < > p4 < p5 p6 > [ 131.061823][T15556] loop1: partition table partially beyond EOD, truncated [ 131.121085][T15556] loop1: p1 start 30976 is beyond EOD, truncated [ 131.127466][T15556] loop1: p2 size 16128 extends beyond EOD, truncated [ 131.176536][T15609] loop5: detected capacity change from 0 to 512 [ 131.183004][T15556] loop1: p3 start 327168 is beyond EOD, truncated [ 131.193991][T15556] loop1: p5 start 30976 is beyond EOD, truncated [ 131.200332][T15556] loop1: p6 size 16128 extends beyond EOD, truncated [ 131.214800][T15616] loop2: detected capacity change from 0 to 764 [ 131.235009][T15609] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 131.256128][T15609] EXT4-fs (loop5): orphan cleanup on readonly fs [ 131.268842][T15616] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 131.288138][T15609] __quota_error: 6 callbacks suppressed [ 131.288154][T15609] Quota error (device loop5): do_check_range: Getting dqdh_prev_free 4294967295 out of range 0-7 [ 131.359578][T15609] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 131.415765][T15609] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.5875: Failed to acquire dquot type 1 [ 131.445306][T15648] loop2: detected capacity change from 0 to 512 [ 131.452321][T15609] EXT4-fs (loop5): Remounting filesystem read-only [ 131.461885][T15609] EXT4-fs (loop5): 1 truncate cleaned up [ 131.471263][ T3463] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 131.481841][ T3463] Quota error (device loop5): write_blk: dquota write failed [ 131.489262][ T3463] Quota error (device loop5): remove_free_dqentry: Can't write block (5) with free entries [ 131.499267][ T3463] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 131.509791][ T3463] Quota error (device loop5): write_blk: dquota write failed [ 131.517243][ T3463] Quota error (device loop5): free_dqentry: Can't move quota data block (5) to free list [ 131.527142][T15648] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 4294967295)! [ 131.538042][T15648] EXT4-fs (loop2): group descriptors corrupted! [ 131.594413][ T3463] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 131.604571][ T3463] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 131.689265][ T29] audit: type=1400 audit(2000000270.138:294): avc: denied { mount } for pid=15676 comm="syz.5.5906" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 131.770736][ T29] audit: type=1400 audit(2000000270.176:295): avc: denied { unmount } for pid=3445 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 131.838152][T15690] loop2: detected capacity change from 0 to 512 [ 131.845081][T15690] ext4: Bad value for 'mb_optimize_scan' [ 131.991043][T15722] loop1: detected capacity change from 0 to 512 [ 132.023679][T15722] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 132.037236][T15723] loop3: detected capacity change from 0 to 2048 [ 132.058165][T15722] EXT4-fs error (device loop1): xattr_find_entry:337: inode #15: comm syz.1.5928: corrupted xattr entries [ 132.081063][T15722] EXT4-fs (loop1): 1 orphan inode deleted [ 132.165448][T15723] loop3: p1 p2 [ 132.199452][ T3002] loop3: p1 p2 [ 132.235814][T15754] loop2: detected capacity change from 0 to 128 [ 132.271527][T15759] loop6: detected capacity change from 0 to 1024 [ 132.285995][T15754] vfat: Bad value for 'uni_xlate' [ 132.298340][T15759] EXT4-fs: Ignoring removed nobh option [ 132.303932][T15759] ext2: Unknown parameter 'nouser_xattr' [ 132.342453][T15767] EXT4-fs: Ignoring removed oldalloc option [ 132.369625][T15767] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 132.383401][ T29] audit: type=1400 audit(2000000270.774:296): avc: denied { setcurrent } for pid=15770 comm="syz.3.5951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 132.427810][T15767] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 132.487315][T15767] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.5950: bad orphan inode 11 [ 132.526217][T15767] ext4_test_bit(bit=10, block=4) = 1 [ 132.531680][T15767] is_bad_inode(inode)=0 [ 132.535853][T15767] NEXT_ORPHAN(inode)=3254779904 [ 132.540736][T15767] max_ino=32 [ 132.543928][T15767] i_nlink=0 [ 132.570844][T15798] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.5966: casefold flag without casefold feature [ 132.570840][T15767] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 2: comm syz.1.5950: lblock 2 mapped to illegal pblock 2 (length 1) [ 132.612579][T15798] EXT4-fs (loop5): Remounting filesystem read-only [ 132.658017][T15798] EXT4-fs mount: 44 callbacks suppressed [ 132.658033][T15798] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.718562][T15767] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 48: comm syz.1.5950: lblock 0 mapped to illegal pblock 48 (length 1) [ 132.775400][T15767] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.5950: Failed to acquire dquot type 0 [ 132.798534][ T3445] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.807564][T15767] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 132.828555][T15767] EXT4-fs error (device loop1): ext4_evict_inode:253: inode #11: comm syz.1.5950: mark_inode_dirty error [ 132.878138][T15767] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 132.899401][T15767] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.914698][T15827] tmpfs: Bad value for 'mpol' [ 132.978375][ T3452] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.010734][ T3452] EXT4-fs error (device loop1): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 133.032701][ T3452] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 133.042302][ T3452] EXT4-fs error (device loop1): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 133.065337][T15846] tmpfs: Bad value for 'mpol' [ 133.071410][T15844] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.232302][ T3442] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.243202][T15857] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.269056][T15862] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.311821][T15871] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.333171][T15874] IPv6: addrconf: prefix option has invalid lifetime [ 133.385727][ T3445] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.397282][ T3447] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.437999][ T3452] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.451734][T15869] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.465638][T15876] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.478809][T15878] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.513768][ T3453] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.526677][T15882] EXT4-fs: Ignoring removed oldalloc option [ 133.533199][T15876] ext4 filesystem being mounted at /1126/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.544298][T15882] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 133.569084][ T3445] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.587251][T15882] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #11: comm syz.2.6001: corrupted in-inode xattr: invalid ea_ino [ 133.601511][T15882] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.6001: couldn't read orphan inode 11 (err -117) [ 133.609330][ T3442] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.626193][T15882] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.675014][T15898] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.694164][ T3447] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.704566][ T3442] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.744450][T15909] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.769655][T15904] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.782963][ T3442] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.813119][ T3447] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.823638][T15910] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.876090][T15910] ext4 filesystem being mounted at /1173/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.883974][T15917] EXT4-fs (loop6): too many log groups per flexible block group [ 133.905002][T15917] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 133.935659][T15917] EXT4-fs (loop6): mount failed [ 133.948880][ T3453] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.052341][T15931] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.106590][ T3447] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.155318][T15943] EXT4-fs (loop6): Invalid log block size: 4294967295 [ 134.739776][T15986] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.827346][ T3442] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.864762][ T3371] loop5: p1 p2 p3 [ 134.875432][T15987] loop5: p1 p2 p3 [ 134.954581][T16002] netlink: 'syz.5.6054': attribute type 13 has an invalid length. [ 135.043397][T16012] futex_wake_op: syz.6.6059 tries to shift op by -3; fix this program [ 135.046511][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 135.055563][ T4375] udevd[4375]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 135.068167][ T3371] udevd[3371]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 135.117679][T16018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6062'. [ 135.141494][ T3371] udevd[3371]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 135.141891][ T4375] udevd[4375]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 135.152505][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 135.670299][T16073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.713755][T16073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.079500][T16107] xt_connbytes: Forcing CT accounting to be enabled [ 136.291978][T16118] netlink: 596 bytes leftover after parsing attributes in process `syz.2.6108'. [ 136.325785][T15954] set_capacity_and_notify: 47 callbacks suppressed [ 136.325803][T15954] loop3: detected capacity change from 0 to 262144 [ 136.556184][T16140] x_tables: unsorted underflow at hook 3 [ 136.659524][T16148] mmap: syz.3.6124 (16148): VmData 29114368 exceed data ulimit 1587. Update limits or use boot option ignore_rlimit_data. [ 136.697379][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 136.697395][ T29] audit: type=1400 audit(2000000530.830:315): avc: denied { write } for pid=16149 comm="syz.6.6125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 136.801530][ T29] audit: type=1400 audit(2000000530.914:316): avc: denied { accept } for pid=16153 comm="syz.6.6127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 136.867737][T16162] netlink: 'syz.5.6131': attribute type 2 has an invalid length. [ 136.875541][T16162] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6131'. [ 137.094403][T16172] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6136'. [ 137.104016][ T29] audit: type=1400 audit(2000000531.205:317): avc: denied { create } for pid=16170 comm="syz.5.6136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 137.124249][ T29] audit: type=1400 audit(2000000531.205:318): avc: denied { write } for pid=16170 comm="syz.5.6136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 137.144373][ T29] audit: type=1400 audit(2000000531.205:319): avc: denied { nlmsg_write } for pid=16170 comm="syz.5.6136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 137.344755][T15994] loop1: detected capacity change from 0 to 262144 [ 137.455268][ T29] audit: type=1400 audit(2000000531.533:320): avc: denied { setopt } for pid=16191 comm="syz.3.6146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 137.500676][T16197] gtp0: entered promiscuous mode [ 137.505659][T16197] gtp0: entered allmulticast mode [ 137.530146][ T29] audit: type=1400 audit(2000000531.617:321): avc: denied { write } for pid=16199 comm="syz.6.6150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 137.577605][ T29] audit: type=1400 audit(2000000531.655:322): avc: denied { setopt } for pid=16204 comm="syz.6.6154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 137.773314][ T29] audit: type=1400 audit(2000000531.833:323): avc: denied { write } for pid=16235 comm="syz.3.6167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 137.851569][ T29] audit: type=1400 audit(2000000531.880:324): avc: denied { read write } for pid=16237 comm="syz.5.6169" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 137.936245][T16256] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 137.957712][T16256] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 138.128795][T16282] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6190'. [ 138.187889][T16282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6190'. [ 138.218964][T16296] netlink: 'syz.6.6197': attribute type 49 has an invalid length. [ 138.380131][T16325] x_tables: unsorted underflow at hook 1 [ 138.630225][T16364] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.6230'. [ 138.665965][T16366] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 138.709100][T16374] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6236'. [ 138.718427][T16366] gretap1: entered allmulticast mode [ 138.733481][T16374] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 138.752550][T16380] loop2: detected capacity change from 0 to 512 [ 138.767804][T16380] EXT4-fs: Ignoring removed mblk_io_submit option [ 138.817476][T16380] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.838794][T16397] xt_ecn: cannot match TCP bits for non-tcp packets [ 138.844436][T16396] vti0: entered allmulticast mode [ 138.869533][T16380] ext4 filesystem being mounted at /1280/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.908830][T16402] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.6248'. [ 138.912305][T16380] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.6239: Failed to acquire dquot type 1 [ 138.991401][ T3447] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.037273][T16422] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.046562][T16426] netlink: 'syz.2.6258': attribute type 10 has an invalid length. [ 139.046581][T16426] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6258'. [ 139.091676][T16432] xt_CT: You must specify a L4 protocol and not use inversions on it [ 139.147779][T16442] netlink: 'syz.5.6267': attribute type 1 has an invalid length. [ 139.277746][T16463] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 139.308091][T16468] xt_TCPMSS: Only works on TCP SYN packets [ 139.353925][T16476] netlink: 'syz.2.6285': attribute type 1 has an invalid length. [ 139.410866][T16488] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 139.548111][T16514] ipt_ECN: cannot use operation on non-tcp rule [ 139.772594][T16550] loop6: detected capacity change from 0 to 128 [ 139.879076][T16564] netlink: 'syz.3.6328': attribute type 1 has an invalid length. [ 139.916607][T16570] loop6: detected capacity change from 0 to 136 [ 140.009935][T16582] loop3: detected capacity change from 0 to 512 [ 140.029291][T16582] EXT4-fs: Ignoring removed nobh option [ 140.044444][T16582] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 140.079923][T16582] EXT4-fs (loop3): 1 truncate cleaned up [ 140.086002][T16582] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.115536][ T3453] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.209353][T16610] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 140.263683][T16618] loop6: detected capacity change from 0 to 256 [ 140.463360][T16643] loop2: detected capacity change from 0 to 2048 [ 140.486366][T16643] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.487281][T16647] __nla_validate_parse: 8 callbacks suppressed [ 140.487295][T16647] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6368'. [ 140.527231][ T3447] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.850018][T16705] netlink: 'syz.3.6395': attribute type 10 has an invalid length. [ 140.881602][T16705] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 140.893703][T16710] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6396'. [ 140.935577][T16717] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6401'. [ 140.935667][T16716] netlink: 'syz.6.6399': attribute type 2 has an invalid length. [ 140.952339][T16716] netlink: 'syz.6.6399': attribute type 1 has an invalid length. [ 141.245861][T16758] rtc_cmos 00:00: Alarms can be up to one day in the future [ 141.515928][T16798] loop6: detected capacity change from 0 to 512 [ 141.597347][T16798] EXT4-fs (loop6): orphan cleanup on readonly fs [ 141.603718][T16798] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 141.651422][T16817] xt_cgroup: xt_cgroup: no path or classid specified [ 141.662182][T16816] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6449'. [ 141.740172][T16798] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 141.787344][T16798] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.6442: attempt to clear invalid blocks 2 len 1 [ 141.927029][T16843] sctp: [Deprecated]: syz.2.6464 (pid 16843) Use of int in max_burst socket option. [ 141.927029][T16843] Use struct sctp_assoc_value instead [ 141.943936][T16798] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.6442: invalid indirect mapped block 1819239214 (level 0) [ 142.014231][T16798] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.6442: invalid indirect mapped block 1819239214 (level 1) [ 142.043660][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 142.043674][ T29] audit: type=1400 audit(2000000535.843:370): avc: denied { ioctl } for pid=16854 comm="syz.1.6470" path="socket:[45782]" dev="sockfs" ino=45782 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 142.085385][T16863] netlink: 'syz.5.6473': attribute type 1 has an invalid length. [ 142.141973][T16867] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 142.162660][T16869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6476'. [ 142.180961][T16798] EXT4-fs (loop6): 1 truncate cleaned up [ 142.199720][ T29] audit: type=1400 audit(2000000535.974:371): avc: denied { setopt } for pid=16872 comm="syz.3.6478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 142.265432][T16798] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 142.320491][T16888] xt_hashlimit: size too large, truncated to 1048576 [ 142.321386][ T29] audit: type=1400 audit(2000000536.096:372): avc: denied { read } for pid=16797 comm="syz.6.6442" name="file2" dev="loop6" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 142.327221][T16888] xt_hashlimit: invalid rate [ 142.354015][ T29] audit: type=1400 audit(2000000536.096:373): avc: denied { open } for pid=16797 comm="syz.6.6442" path="/1228/file1/file2" dev="loop6" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 142.438430][T16900] autofs4:pid:16900:validate_dev_ioctl: path string terminator missing for cmd(0xc0189375) [ 142.448988][ T3442] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.473465][ T29] audit: type=1400 audit(2000000536.208:374): avc: denied { read } for pid=16899 comm="syz.5.6491" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 142.496652][ T29] audit: type=1400 audit(2000000536.208:375): avc: denied { open } for pid=16899 comm="syz.5.6491" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 142.520388][ T29] audit: type=1400 audit(2000000536.208:376): avc: denied { ioctl } for pid=16899 comm="syz.5.6491" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 142.526435][T16907] netlink: 'syz.5.6496': attribute type 41 has an invalid length. [ 142.651343][T16916] netlink: 'syz.2.6500': attribute type 6 has an invalid length. [ 142.783320][ T29] audit: type=1400 audit(2000000536.526:377): avc: denied { ioctl } for pid=16934 comm="syz.6.6508" path="socket:[46220]" dev="sockfs" ino=46220 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 142.809301][T16939] netlink: 'syz.5.6510': attribute type 10 has an invalid length. [ 142.839456][T16939] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.846691][T16939] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.897239][T16939] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.904378][T16939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.911667][T16939] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.918727][T16939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.947278][T16939] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 143.049641][T16959] IPv6: NLM_F_CREATE should be specified when creating new route [ 143.063270][T16959] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 143.070518][T16959] IPv6: NLM_F_CREATE should be set when creating new route [ 143.091260][T16963] netlink: 'syz.2.6522': attribute type 46 has an invalid length. [ 143.152187][ T29] audit: type=1400 audit(2000000536.873:378): avc: denied { setopt } for pid=16968 comm="syz.5.6525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 143.241084][ T29] audit: type=1400 audit(2000000536.910:379): avc: denied { write } for pid=16973 comm="syz.2.6528" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 143.333162][T16991] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 143.340447][T16991] IPv6: NLM_F_CREATE should be set when creating new route [ 143.383060][T16999] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6540'. [ 143.493850][T17010] netlink: 'syz.3.6545': attribute type 2 has an invalid length. [ 143.502578][T17009] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6544'. [ 143.604227][T17019] loop3: detected capacity change from 0 to 512 [ 143.621154][T17019] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 143.630340][T17019] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 143.669353][T17019] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 143.669511][T17019] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 143.706110][T17019] System zones: 0-2, 18-18, 34-35 [ 143.722632][T17019] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.882424][ T3453] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.918106][T17053] xt_l2tp: invalid flags combination: c [ 143.994319][T17068] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6572'. [ 144.168988][T17100] netlink: 'syz.6.6588': attribute type 58 has an invalid length. [ 144.180688][T17101] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6589'. [ 144.190034][T17096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6586'. [ 144.242731][T17109] random: crng reseeded on system resumption [ 144.312959][T17120] loop1: detected capacity change from 0 to 764 [ 144.366035][T17120] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 144.547554][T17150] Driver unsupported XDP return value 0 on prog (id 557) dev N/A, expect packet loss! [ 144.838214][T17190] team0: entered promiscuous mode [ 144.843324][T17190] team_slave_0: entered promiscuous mode [ 144.849091][T17190] team_slave_1: entered promiscuous mode [ 144.855126][T17190] team0: entered allmulticast mode [ 144.860319][T17190] team_slave_0: entered allmulticast mode [ 144.866205][T17190] team_slave_1: entered allmulticast mode [ 144.908137][T17190] bridge0: port 3(team0) entered blocking state [ 144.914734][T17190] bridge0: port 3(team0) entered disabled state [ 144.937945][T17190] bridge0: port 3(team0) entered blocking state [ 144.944277][T17190] bridge0: port 3(team0) entered forwarding state [ 145.264382][T17227] team0: entered promiscuous mode [ 145.269478][T17227] team_slave_0: entered promiscuous mode [ 145.275150][T17227] team_slave_1: entered promiscuous mode [ 145.280959][T17227] team0: entered allmulticast mode [ 145.286070][T17227] team_slave_0: entered allmulticast mode [ 145.291813][T17227] team_slave_1: entered allmulticast mode [ 145.355910][T17227] bridge0: port 3(team0) entered blocking state [ 145.362215][T17227] bridge0: port 3(team0) entered disabled state [ 145.389931][T17227] bridge0: port 3(team0) entered blocking state [ 145.396252][T17227] bridge0: port 3(team0) entered forwarding state [ 145.461114][T17239] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.468365][T17239] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.510697][T17239] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.517807][T17239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.525335][T17239] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.532412][T17239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.552261][T17239] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 145.885649][T17297] __nla_validate_parse: 7 callbacks suppressed [ 145.885666][T17297] netlink: 152 bytes leftover after parsing attributes in process `syz.6.6685'. [ 145.918818][T17299] loop1: detected capacity change from 0 to 512 [ 145.964470][T17299] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.979195][T17297] .`: renamed from bond0 (while UP) [ 145.985128][T17299] ext4 filesystem being mounted at /1297/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.078878][ T3452] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.266338][T17357] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1002 sclass=netlink_tcpdiag_socket pid=17357 comm=syz.1.6712 [ 146.279357][T17357] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1001 sclass=netlink_tcpdiag_socket pid=17357 comm=syz.1.6712 [ 146.352012][T17371] ip6t_srh: unknown srh match flags 4000 [ 146.386571][T17377] loop6: detected capacity change from 0 to 136 [ 146.403827][T17379] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6723'. [ 146.413910][T17377] Attempt to read inode for relocated directory [ 146.432492][T17385] openvswitch: netlink: Message has 7 unknown bytes. [ 146.473685][T17389] loop1: detected capacity change from 0 to 512 [ 146.507218][T17393] loop5: detected capacity change from 0 to 512 [ 146.520977][T17389] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.535474][T17403] validate_nla: 12 callbacks suppressed [ 146.535489][T17403] netlink: 'syz.2.6733': attribute type 5 has an invalid length. [ 146.549070][T17403] netlink: 'syz.2.6733': attribute type 11 has an invalid length. [ 146.552067][T17393] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.560287][T17389] EXT4-fs error (device loop1): ext4_validate_block_bitmap:423: comm syz.1.6729: bg 0: bad block bitmap checksum [ 146.569473][T17393] ext4 filesystem being mounted at /1399/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.593653][T17389] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6689: Filesystem failed CRC [ 146.630461][T17409] netlink: 'syz.3.6736': attribute type 9 has an invalid length. [ 146.723396][ T3452] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.723822][ T3445] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.749209][T17421] netlink: 104 bytes leftover after parsing attributes in process `syz.6.6742'. [ 146.769187][T17426] netlink: 'syz.3.6746': attribute type 4 has an invalid length. [ 146.777136][T17426] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6746'. [ 146.827535][T17426] .`: renamed from bond0 (while UP) [ 146.917761][T17440] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 146.969238][T17452] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6757'. [ 146.978216][T17452] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6757'. [ 147.176637][T17473] netlink: 'syz.3.6767': attribute type 10 has an invalid length. [ 147.257733][T17473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.265659][T17473] .`: (slave batadv0): Enslaving as an active interface with an up link [ 147.341606][T17490] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6775'. [ 147.385008][T17493] netlink: 'syz.3.6778': attribute type 21 has an invalid length. [ 147.408495][T17498] netlink: 'syz.6.6779': attribute type 21 has an invalid length. [ 147.454403][T17498] netlink: 144 bytes leftover after parsing attributes in process `syz.6.6779'. [ 147.602411][T17524] bond1: entered promiscuous mode [ 147.627455][T17524] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.703473][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 147.703559][ T29] audit: type=1400 audit(2000000541.132:424): avc: denied { ioctl } for pid=17534 comm="syz.6.6797" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 147.964569][T17557] Option 'ڼeF 2͂ K*Ϫ,۟nyB6f[A [ 147.964569][T17557] Q׿2:[kz' to dns_resolver key: bad/missing value [ 148.061035][T17567] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6812'. [ 148.073845][ T29] audit: type=1400 audit(2000000541.459:425): avc: denied { bind } for pid=17564 comm="syz.6.6813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 148.131132][T17570] loop3: detected capacity change from 0 to 512 [ 148.190103][T17570] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.261300][T17570] EXT4-fs error (device loop3): ext4_validate_block_bitmap:423: comm syz.3.6815: bg 0: bad block bitmap checksum [ 148.279123][T17595] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 148.315572][T17570] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Filesystem failed CRC [ 148.364518][T17600] netlink: 'syz.1.6827': attribute type 21 has an invalid length. [ 148.388450][ T3453] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.596661][T17631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6843'. [ 148.622498][T17634] loop5: detected capacity change from 0 to 1024 [ 148.654493][T17634] EXT4-fs: Ignoring removed nomblk_io_submit option [ 148.693392][T17634] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 148.733140][T17634] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.775508][T17634] VFS: Lookup of 'file0' in ext4 loop5 would have caused loop [ 148.801918][ T3445] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.885314][T17677] bond_slave_0: entered promiscuous mode [ 148.891024][T17677] bond_slave_1: entered promiscuous mode [ 148.896777][T17677] bridge0: entered promiscuous mode [ 149.062757][T17715] Cannot find add_set index 0 as target [ 149.190222][ T29] audit: type=1400 audit(2000000542.526:426): avc: denied { bind } for pid=17727 comm="syz.2.6883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 149.209655][ T29] audit: type=1400 audit(2000000542.526:427): avc: denied { name_bind } for pid=17727 comm="syz.2.6883" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 149.231485][ T29] audit: type=1400 audit(2000000542.526:428): avc: denied { node_bind } for pid=17727 comm="syz.2.6883" saddr=fe80::18 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 149.389117][T17755] 0X: renamed from caif0 [ 149.403720][T17755] 0X: entered allmulticast mode [ 149.408965][T17755] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 149.573614][ T29] audit: type=1326 audit(2000000542.881:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17789 comm="syz.3.6912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9082eaeb9 code=0x7ffc0000 [ 149.597191][ T29] audit: type=1326 audit(2000000542.881:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17789 comm="syz.3.6912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9082eaeb9 code=0x7ffc0000 [ 149.646174][T17798] gre0: entered promiscuous mode [ 149.662115][ T29] audit: type=1326 audit(2000000542.881:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17789 comm="syz.3.6912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7fb9082eaeb9 code=0x7ffc0000 [ 149.685507][ T29] audit: type=1326 audit(2000000542.881:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17789 comm="syz.3.6912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9082eaeb9 code=0x7ffc0000 [ 149.708900][ T29] audit: type=1326 audit(2000000542.881:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17789 comm="syz.3.6912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9082eaeb9 code=0x7ffc0000 [ 149.779771][T17812] netlink: 'syz.1.6921': attribute type 21 has an invalid length. [ 149.872697][T17833] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 149.956305][T17841] Process accounting resumed [ 150.159895][T17879] sctp: [Deprecated]: syz.3.6958 (pid 17879) Use of struct sctp_assoc_value in delayed_ack socket option. [ 150.159895][T17879] Use struct sctp_sack_info instead [ 150.244025][T17890] 0X: renamed from caif0 [ 150.272539][T17890] 0X: entered allmulticast mode [ 150.277965][T17890] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 150.334883][T17904] xt_NFQUEUE: number of total queues is 0 [ 150.381271][T17915] xt_bpf: check failed: parse error [ 150.668136][T17969] netlink: 'syz.5.7002': attribute type 16 has an invalid length. [ 150.676382][T17972] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 150.802394][T17997] SELinux: Context system_u:object_r:cgroup_t:s0 is not valid (left unmapped). [ 150.901750][T18011] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 150.906115][T18015] random: crng reseeded on system resumption [ 150.908964][T18011] IPv6: NLM_F_CREATE should be set when creating new route [ 150.922162][T18011] IPv6: NLM_F_CREATE should be set when creating new route [ 150.929429][T18011] IPv6: NLM_F_CREATE should be set when creating new route [ 151.219455][T18063] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.226622][T18063] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.247721][T18063] bridge0: entered promiscuous mode [ 151.254035][T18063] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 151.425612][T18097] __nla_validate_parse: 17 callbacks suppressed [ 151.425631][T18097] netlink: 140 bytes leftover after parsing attributes in process `syz.2.7064'. [ 151.549137][T18124] usb usb7: usbfs: process 18124 (syz.3.7076) did not claim interface 0 before use [ 151.565258][T18127] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 151.599991][T18127] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 151.724861][T18154] netlink: 55 bytes leftover after parsing attributes in process `syz.1.7091'. [ 151.735647][T18156] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7093'. [ 151.744680][T18156] netlink: 48 bytes leftover after parsing attributes in process `syz.6.7093'. [ 151.779536][T18163] random: crng reseeded on system resumption [ 151.898738][T18183] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 151.906078][T18183] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 152.012058][T18203] loop2: detected capacity change from 0 to 164 [ 152.237447][T18249] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7137'. [ 152.262748][T18249] bridge1: entered promiscuous mode [ 152.357939][T18268] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7145'. [ 152.393900][T18268] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7145'. [ 152.477209][T18292] netlink: 766 bytes leftover after parsing attributes in process `syz.6.7152'. [ 152.554313][T18307] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7159'. [ 153.041276][T18393] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7201'. [ 153.094964][T18407] validate_nla: 4 callbacks suppressed [ 153.095027][T18407] netlink: 'syz.1.7209': attribute type 46 has an invalid length. [ 153.161112][T18417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.174234][T18417] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 153.184439][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 153.184472][ T29] audit: type=1400 audit(2000000546.258:462): avc: denied { read open } for pid=18423 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.197003][T18417] bond0: (slave gre0): Error -95 calling set_mac_address [ 153.216025][ T29] audit: type=1400 audit(2000000546.258:463): avc: denied { getattr } for pid=18423 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.326790][ T29] audit: type=1400 audit(2000000546.389:464): avc: denied { add_name } for pid=18419 comm="dhcpcd-run-hook" name="resolv.conf.lapb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.403216][ T29] audit: type=1400 audit(2000000546.436:465): avc: denied { remove_name } for pid=18448 comm="rm" name="resolv.conf.lapb0.link" dev="tmpfs" ino=34866 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.481943][T18474] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 153.590061][T18499] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 153.664065][ T29] audit: type=1400 audit(2000000546.716:466): avc: denied { connect } for pid=18510 comm="syz.1.7244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 153.708052][T18523] xt_CT: You must specify a L4 protocol and not use inversions on it [ 153.716572][T18519] loop1: detected capacity change from 0 to 1024 [ 153.755949][T18531] netlink: 'syz.5.7249': attribute type 10 has an invalid length. [ 153.765045][T18519] EXT4-fs: Ignoring removed mblk_io_submit option [ 153.774604][T18530] bond0 (unregistering): Released all slaves [ 153.784498][T18519] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 153.793643][T18519] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 153.805978][T18531] vxcan1: entered promiscuous mode [ 153.811197][T18531] vxcan1: entered allmulticast mode [ 153.816417][T18531] team0: Device vxcan1 is of different type [ 153.821141][T18519] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #11: comm syz.1.7245: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 153.842461][T18519] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.7245: couldn't read orphan inode 11 (err -117) [ 153.870999][T18519] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.933457][T18519] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.7245: Invalid block bitmap block 0 in block_group 0 [ 153.959163][T18519] Quota error (device loop1): write_blk: dquota write failed [ 153.966563][T18519] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 153.980448][T18519] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.7245: Failed to acquire dquot type 0 [ 154.033555][ T3452] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.046669][T18564] binfmt_misc: register: failed to install interpreter file ./file0 [ 154.189113][ T29] audit: type=1400 audit(2000000547.203:467): avc: denied { validate_trans } for pid=18591 comm="syz.5.7278" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 154.246606][ T29] audit: type=1400 audit(2000000547.203:468): avc: denied { setopt } for pid=18592 comm="syz.6.7277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 154.337282][T18621] netlink: 'syz.6.7291': attribute type 31 has an invalid length. [ 154.608936][T18658] bond2: entered allmulticast mode [ 154.622047][T18658] 8021q: adding VLAN 0 to HW filter on device bond2 [ 154.697476][ T29] audit: type=1400 audit(2000000547.680:469): avc: denied { bind } for pid=18678 comm="syz.3.7320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 155.171134][T18735] netlink: 'syz.6.7346': attribute type 11 has an invalid length. [ 155.286256][T18748] netlink: 'syz.2.7353': attribute type 6 has an invalid length. [ 155.318640][T18751] ipt_REJECT: TCP_RESET invalid for non-tcp [ 155.410510][T18761] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.417663][T18761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.425064][T18761] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.432119][T18761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.446922][T18761] 8021q: adding VLAN 0 to HW filter on device .` [ 155.468869][T18761] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 155.484622][T18765] netlink: 'syz.5.7362': attribute type 25 has an invalid length. [ 155.562128][T18789] loop3: detected capacity change from 0 to 512 [ 155.584242][T18789] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 155.616573][T18789] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 155.629436][T18789] EXT4-fs (loop3): orphan cleanup on readonly fs [ 155.635783][T18789] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.7371: bad orphan inode 267 [ 155.660566][T18789] EXT4-fs (loop3): Remounting filesystem read-only [ 155.667698][T18789] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 155.685568][T18789] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.7371: dx entry: limit 0 != root limit 125 [ 155.697403][T18789] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.7371: Corrupt directory, running e2fsck is recommended [ 155.726548][T18807] bond1 (unregistering): Released all slaves [ 155.736372][ T3453] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 155.745574][T18810] netlink: 'syz.6.7392': attribute type 5 has an invalid length. [ 155.775227][T18812] bond2: Removing last arp target with arp_interval on [ 155.803120][T18812] bond2: entered promiscuous mode [ 155.808186][T18812] bond2: entered allmulticast mode [ 155.821633][T18812] 8021q: adding VLAN 0 to HW filter on device bond2 [ 155.906354][T18837] geneve2: entered promiscuous mode [ 155.919727][ T52] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 155.952351][ T52] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 155.973830][ T52] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 155.986616][T18855] netlink: 'syz.6.7404': attribute type 22 has an invalid length. [ 155.991259][ T52] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 156.044776][T18862] netlink: 'syz.6.7406': attribute type 5 has an invalid length. [ 156.055416][T18860] IPv6: sit1: Disabled Multicast RS [ 156.155385][T18876] loop1: detected capacity change from 0 to 2048 [ 156.204772][T18888] bond3 (unregistering): Released all slaves [ 156.213410][T18876] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.232580][T18876] ext4 filesystem being mounted at /1417/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.244697][T18876] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.7414: bg 0: block 345: padding at end of block bitmap is not set [ 156.281569][ T3452] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.379826][T18915] netlink: 'syz.1.7431': attribute type 15 has an invalid length. [ 156.419417][T18923] x_tables: ip_tables: REJECT.0 target: invalid size 8 (kernel) != (user) 0 [ 156.505930][T18940] xt_CONNSECMARK: invalid mode: 0 [ 156.536364][T18951] 9pnet_fd: p9_fd_create_tcp (18951): problem binding to privport [ 156.561308][T18944] bond3: option lacp_active: invalid value (5) [ 156.578894][T18944] bond3 (unregistering): Released all slaves [ 156.601401][T18959] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 156.697336][T18973] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 156.748493][T18985] sctp: [Deprecated]: syz.1.7465 (pid 18985) Use of int in maxseg socket option. [ 156.748493][T18985] Use struct sctp_assoc_value instead [ 156.813155][T18993] xt_l2tp: wrong L2TP version: 0 [ 157.018243][T19031] batman_adv: batadv0: adding TT local entry ba:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 157.053167][T19031] batman_adv: batadv0: adding TT local entry ba:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 157.083920][T19031] batman_adv: batadv0: adding TT local entry ba:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 157.100300][T19043] veth0_vlan: entered allmulticast mode [ 157.107688][T19031] batman_adv: batadv0: adding TT local entry ba:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 157.130380][T19043] veth0_vlan: left promiscuous mode [ 157.136811][T19043] veth0_vlan: entered promiscuous mode [ 157.145680][T19043] team0: Device veth0_vlan failed to register rx_handler [ 157.157852][T19031] batman_adv: batadv0: adding TT local entry ba:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 157.200808][T19031] batman_adv: batadv0: adding TT local entry ba:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 157.323494][T19075] 8021q: adding VLAN 0 to HW filter on device .` [ 157.424063][T19089] loop6: detected capacity change from 0 to 1764 [ 157.471438][T19094] loop5: detected capacity change from 0 to 512 [ 157.504085][T19094] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 157.528460][T19094] EXT4-fs (loop5): Remounting filesystem read-only [ 157.535197][T19094] EXT4-fs (loop5): 1 truncate cleaned up [ 157.535663][T19094] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.589325][ T3445] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.934533][T19135] bond3: Unable to set down delay as MII monitoring is disabled [ 157.982286][T19135] bond3 (unregistering): Released all slaves [ 158.193583][T19178] loop2: detected capacity change from 0 to 512 [ 158.224345][T19178] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.7559: bad orphan inode 15 [ 158.259354][T19178] ext4_test_bit(bit=14, block=5) = 0 [ 158.265204][T19178] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.279221][T19178] EXT4-fs error (device loop2): __ext4_new_inode:1073: comm syz.2.7559: reserved inode found cleared - inode=1 [ 158.342187][ T3447] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.629164][T19238] loop5: detected capacity change from 0 to 512 [ 158.660937][T19243] IPv6: NLM_F_CREATE should be specified when creating new route [ 158.720632][T19238] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.737701][T19238] ext4 filesystem being mounted at /1580/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.810183][ T3445] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.844763][T19265] tipc: Trying to set illegal importance in message [ 158.844764][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 158.844777][ T29] audit: type=1400 audit(2000000551.273:522): avc: denied { setopt } for pid=19262 comm="syz.6.7601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 158.880670][T19267] __nla_validate_parse: 23 callbacks suppressed [ 158.880685][T19267] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7602'. [ 158.936981][ T29] audit: type=1400 audit(2000000551.325:523): avc: denied { allowed } for pid=19269 comm="syz.6.7603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 158.956371][ T29] audit: type=1400 audit(2000000551.325:524): avc: denied { create } for pid=19269 comm="syz.6.7603" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 158.961461][T19274] validate_nla: 4 callbacks suppressed [ 158.961501][T19274] netlink: 'syz.6.7606': attribute type 30 has an invalid length. [ 158.977586][ T29] audit: type=1400 audit(2000000551.325:525): avc: denied { map } for pid=19269 comm="syz.6.7603" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=54277 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 159.015060][ T29] audit: type=1400 audit(2000000551.325:526): avc: denied { read write } for pid=19269 comm="syz.6.7603" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=54277 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 159.037649][T19274] bond0: option arp_missed_max: invalid value (0) [ 159.040036][ T29] audit: type=1400 audit(2000000551.334:527): avc: denied { getopt } for pid=19268 comm="syz.5.7604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 159.046331][T19274] bond0: option arp_missed_max: allowed values 1 - 255 [ 159.078745][ T29] audit: type=1400 audit(2000000551.411:528): avc: denied { create } for pid=19276 comm="syz.2.7607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 159.098366][ T29] audit: type=1400 audit(2000000551.411:529): avc: denied { setopt } for pid=19276 comm="syz.2.7607" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 159.118837][ T29] audit: type=1400 audit(2000000551.472:530): avc: denied { create } for pid=19275 comm="syz.3.7608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 159.150447][ T29] audit: type=1400 audit(2000000551.498:531): avc: denied { setopt } for pid=19275 comm="syz.3.7608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 159.153469][T19274] bond0 (unregistering): Released all slaves [ 159.197751][T19290] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 159.376922][T19323] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7628'. [ 159.543048][T19353] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7643'. [ 159.605775][T19364] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7649'. [ 159.648330][T19364] ip6tnl1: entered allmulticast mode [ 159.658566][T19372] netlink: 'syz.3.7653': attribute type 10 has an invalid length. [ 159.685930][T19375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7655'. [ 159.737461][T19383] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7658'. [ 159.803733][T19396] netlink: 404 bytes leftover after parsing attributes in process `syz.6.7665'. [ 159.812868][T19396] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7665'. [ 159.821861][T19396] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7665'. [ 159.830858][T19396] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7665'. [ 159.888577][T19405] loop1: detected capacity change from 0 to 128 [ 160.027849][T19432] w: entered promiscuous mode [ 160.040645][T19432] 8021q: adding VLAN 0 to HW filter on device w [ 160.090997][T19440] loop6: detected capacity change from 0 to 256 [ 160.097663][T19442] ip6erspan0: entered promiscuous mode [ 160.103152][T19442] ip6erspan0: entered allmulticast mode [ 160.269714][T19469] bond1: option updelay: invalid value (18446744073709551613) [ 160.277221][T19469] bond1: option updelay: allowed values 0 - 2147483647 [ 160.293786][T19469] bond1 (unregistering): Released all slaves [ 160.416006][T19491] netlink: 'syz.3.7712': attribute type 5 has an invalid length. [ 161.119663][T19614] gtp0: entered promiscuous mode [ 161.124662][T19614] gtp0: entered allmulticast mode [ 161.184920][T19623] netlink: 'syz.5.7776': attribute type 2 has an invalid length. [ 161.240188][T19633] netlink: 'syz.6.7781': attribute type 1 has an invalid length. [ 161.298674][T19643] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 161.414046][T19665] No such timeout policy "syz1" [ 161.642481][ T3463] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.674258][ T3463] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.700568][ T3463] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.741417][ T3463] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.756949][T19711] netlink: 'syz.3.7818': attribute type 1 has an invalid length. [ 161.951567][T19749] netlink: 'syz.1.7838': attribute type 6 has an invalid length. [ 161.969929][T19748] bond0: entered promiscuous mode [ 161.975076][T19748] bond0: entered allmulticast mode [ 161.981738][T19748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.987193][T19755] SET target dimension over the limit! [ 162.163062][T19787] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 162.251282][T19800] netlink: 'syz.1.7863': attribute type 2 has an invalid length. [ 162.259081][T19800] netlink: 'syz.1.7863': attribute type 3 has an invalid length. [ 162.392692][T19818] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 162.400123][T19818] vhci_hcd vhci_hcd.2: invalid port number 255 [ 162.406349][T19818] vhci_hcd vhci_hcd.2: default hub control req: 400e v0014 i00ff l0 [ 162.554967][T19857] xt_CT: You must specify a L4 protocol and not use inversions on it [ 162.713555][T19881] binfmt_misc: register: failed to install interpreter file ./file0 [ 162.920190][T19920] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 163.011609][T19938] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 163.123140][T19958] xt_TCPMSS: Only works on TCP SYN packets [ 163.136961][T19960] syz_tun: entered promiscuous mode [ 163.223887][T19974] IPVS: set_ctl: invalid protocol: 4 224.0.0.1:20004 [ 163.362304][T19993] bond1: option arp_all_targets: invalid value (262144) [ 163.372916][T19993] bond1 (unregistering): Released all slaves [ 163.513649][T20021] bond1: option primary_reselect: invalid value (4) [ 163.534853][T20021] bond1 (unregistering): Released all slaves [ 163.648300][T20048] syz_tun: entered promiscuous mode [ 163.694161][T20052] SET target dimension over the limit! [ 163.834162][T20081] netlink: 'syz.1.7999': attribute type 49 has an invalid length. [ 163.845038][T20082] vxlan1: entered promiscuous mode [ 163.850214][T20082] vxlan1: entered allmulticast mode [ 163.909933][T20091] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 164.416322][T20184] team0: Port device macvlan1 added [ 164.550626][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 164.550660][ T29] audit: type=1400 audit(2000000556.374:634): avc: denied { write } for pid=20213 comm="syz.3.8065" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 164.632627][ T29] audit: type=1400 audit(2000000556.429:635): avc: denied { setopt } for pid=20219 comm="syz.2.8066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 164.672864][T20228] __nla_validate_parse: 19 callbacks suppressed [ 164.672934][T20228] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8073'. [ 164.688160][T20228] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8073'. [ 164.707366][ T29] audit: type=1400 audit(2000000556.521:636): avc: denied { create } for pid=20232 comm="syz.1.8069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 164.740139][ T29] audit: type=1400 audit(2000000556.558:637): avc: denied { write } for pid=20232 comm="syz.1.8069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 164.789813][T20241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8080'. [ 164.798905][T20241] validate_nla: 2 callbacks suppressed [ 164.798917][T20241] netlink: 'syz.1.8080': attribute type 2 has an invalid length. [ 164.812171][T20241] netlink: 'syz.1.8080': attribute type 2 has an invalid length. [ 164.819956][T20241] netlink: 'syz.1.8080': attribute type 2 has an invalid length. [ 164.827763][T20241] netlink: 'syz.1.8080': attribute type 1 has an invalid length. [ 164.835571][T20241] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8080'. [ 164.846971][ T29] audit: type=1400 audit(2000000556.641:638): avc: denied { create } for pid=20247 comm="syz.5.8082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 164.966097][T20271] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8092'. [ 164.975219][T20271] net_ratelimit: 28660 callbacks suppressed [ 164.975230][T20271] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 164.997063][ T42] bridge0: port 3(team0) entered disabled state [ 165.015186][ T29] audit: type=1400 audit(2000000556.797:639): avc: denied { ioctl } for pid=20269 comm="syz.6.8089" path="socket:[57025]" dev="sockfs" ino=57025 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 165.170664][ T29] audit: type=1400 audit(2000000556.944:640): avc: denied { read } for pid=20302 comm="syz.1.8105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 165.215076][ T29] audit: type=1400 audit(2000000556.980:641): avc: denied { write } for pid=20307 comm="syz.3.8109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 165.285689][ T29] audit: type=1400 audit(2000000557.054:642): avc: denied { read } for pid=20316 comm="syz.3.8113" name="usbmon3" dev="devtmpfs" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 165.309131][ T29] audit: type=1400 audit(2000000557.054:643): avc: denied { open } for pid=20316 comm="syz.3.8113" path="/dev/usbmon3" dev="devtmpfs" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 165.476570][T20350] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8129'. [ 165.669651][T20384] loop2: detected capacity change from 0 to 164 [ 165.816102][T20409] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 165.868076][T20418] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8162'. [ 165.882553][T20420] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8163'. [ 165.952334][T20432] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8169'. [ 165.966905][T20432] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8169'. [ 165.975895][T20426] bond0: left promiscuous mode [ 165.980750][T20426] bond0: left allmulticast mode [ 166.093916][T20450] SELinux: Context is not valid (left unmapped). [ 166.219759][T20474] netlink: 'syz.3.8189': attribute type 5 has an invalid length. [ 166.269091][T20488] xt_CT: You must specify a L4 protocol and not use inversions on it [ 166.409783][T20510] loop3: detected capacity change from 0 to 1024 [ 166.443271][T20510] EXT4-fs: Ignoring removed nomblk_io_submit option [ 166.453055][T20518] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 166.489877][T20510] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 166.510398][T20510] System zones: 0-1, 3-36 [ 166.535104][T20510] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.548312][T20531] @: renamed from bond_slave_0 (while UP) [ 166.622233][ T3453] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.971986][T20572] loop6: detected capacity change from 0 to 256 [ 166.980260][T20572] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 167.830820][T20602] lo: entered promiscuous mode [ 168.029943][T20606] netlink: 'syz.5.8253': attribute type 21 has an invalid length. [ 168.450358][T20620] netlink: 'syz.1.8262': attribute type 13 has an invalid length. [ 168.485557][T20620] syz_tun: refused to change device tx_queue_len [ 168.491918][T20620] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 169.955915][ T29] kauditd_printk_skb: 315 callbacks suppressed [ 169.955930][ T29] audit: type=1400 audit(2000000561.382:959): avc: denied { read write } for pid=3445 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 169.986262][ T29] audit: type=1400 audit(2000000561.382:960): avc: denied { read write open } for pid=3445 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 170.004236][T20675] netlink: 'syz.2.8288': attribute type 21 has an invalid length. [ 170.011239][ T29] audit: type=1326 audit(2000000561.382:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20671 comm="syz.3.8287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9082eaeb9 code=0x7ffc0000 [ 170.042438][ T29] audit: type=1326 audit(2000000561.382:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20671 comm="syz.3.8287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9082eaeb9 code=0x7ffc0000 [ 170.248868][T20680] netlink: 'syz.1.8289': attribute type 10 has an invalid length. [ 170.256907][T20680] __nla_validate_parse: 8 callbacks suppressed [ 170.256924][T20680] netlink: 2 bytes leftover after parsing attributes in process `syz.1.8289'. [ 170.322187][T20680] bond0: entered promiscuous mode [ 170.327274][T20680] @: entered promiscuous mode [ 170.330443][ T29] audit: type=1400 audit(2000000561.382:963): avc: denied { ioctl } for pid=3445 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 170.332319][T20680] bond_slave_1: entered promiscuous mode [ 170.357659][ T29] audit: type=1326 audit(2000000561.447:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20671 comm="syz.3.8287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fb9082eaeb9 code=0x7ffc0000 [ 170.386730][ T29] audit: type=1326 audit(2000000561.447:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20671 comm="syz.3.8287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9082eaeb9 code=0x7ffc0000 [ 170.402561][T20682] netlink: 'syz.6.8291': attribute type 21 has an invalid length. [ 170.410145][ T29] audit: type=1326 audit(2000000561.447:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20671 comm="syz.3.8287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9082eaeb9 code=0x7ffc0000 [ 170.417931][T20682] netlink: 128 bytes leftover after parsing attributes in process `syz.6.8291'. [ 170.449734][T20680] bridge0: port 3(bond0) entered blocking state [ 170.450466][ T29] audit: type=1400 audit(2000000561.540:967): avc: denied { read write } for pid=3442 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 170.456675][T20680] bridge0: port 3(bond0) entered disabled state [ 170.487188][ T29] audit: type=1400 audit(2000000561.540:968): avc: denied { read write open } for pid=3442 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 170.512928][T20680] bond0: entered allmulticast mode [ 170.518106][T20680] @: entered allmulticast mode [ 170.523125][T20680] bond_slave_1: entered allmulticast mode [ 170.555691][T20687] loop5: detected capacity change from 0 to 128 [ 170.566099][T20687] FAT-fs (loop5): bogus number of reserved sectors [ 170.572672][T20687] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 170.582028][T20687] FAT-fs (loop5): Can't find a valid FAT filesystem [ 170.584858][T20688] netlink: 'syz.3.8292': attribute type 2 has an invalid length. [ 170.596383][T20688] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8292'. [ 170.621169][T20680] bridge0: port 3(bond0) entered blocking state [ 170.627471][T20680] bridge0: port 3(bond0) entered forwarding state [ 170.665163][T20682] netlink: 'syz.6.8291': attribute type 4 has an invalid length. [ 170.672929][T20682] netlink: 'syz.6.8291': attribute type 5 has an invalid length. [ 170.680767][T20682] netlink: 3 bytes leftover after parsing attributes in process `syz.6.8291'. [ 171.051653][T20700] random: crng reseeded on system resumption [ 171.406559][T20713] loop5: detected capacity change from 0 to 1024 [ 171.465995][T20713] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.662297][ T3445] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.709629][T20723] netlink: 172 bytes leftover after parsing attributes in process `syz.1.8308'. [ 171.986060][T20733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8315'. [ 172.285033][T20744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8319'. [ 173.381344][T20787] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 173.388577][T20787] IPv6: NLM_F_CREATE should be set when creating new route [ 173.395794][T20787] IPv6: NLM_F_CREATE should be set when creating new route [ 173.907158][T20802] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8349'. [ 174.288073][ T1048] IPVS: starting estimator thread 0... [ 174.384050][T20814] IPVS: using max 2544 ests per chain, 127200 per kthread [ 175.306806][T20851] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 175.314380][T20851] SELinux: failed to load policy [ 175.334397][ T29] kauditd_printk_skb: 370 callbacks suppressed [ 175.334413][ T29] audit: type=1400 audit(2000000566.391:1339): avc: denied { read write } for pid=3447 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 175.416147][T20857] program syz.3.8371 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 175.425510][ T29] audit: type=1400 audit(2000000566.391:1340): avc: denied { read write open } for pid=3447 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 175.450676][ T29] audit: type=1400 audit(2000000566.391:1341): avc: denied { ioctl } for pid=3447 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 175.476286][ T29] audit: type=1400 audit(2000000566.465:1342): avc: denied { map_create } for pid=20854 comm="syz.1.8372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 175.495625][ T29] audit: type=1400 audit(2000000566.465:1343): avc: denied { bpf } for pid=20854 comm="syz.1.8372" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 175.516306][ T29] audit: type=1400 audit(2000000566.465:1344): avc: denied { map_read map_write } for pid=20854 comm="syz.1.8372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 175.536282][ T29] audit: type=1400 audit(2000000566.475:1345): avc: denied { read write } for pid=20856 comm="syz.3.8371" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 175.560381][ T29] audit: type=1400 audit(2000000566.475:1346): avc: denied { read write open } for pid=20856 comm="syz.3.8371" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 175.585457][ T29] audit: type=1400 audit(2000000566.475:1347): avc: denied { ioctl } for pid=20856 comm="syz.3.8371" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 175.613185][T20857] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 175.708466][ T29] audit: type=1400 audit(2000000566.512:1348): avc: denied { read write } for pid=3442 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 176.333218][T20886] SELinux: truncated policydb string identifier [ 176.339669][T20886] SELinux: failed to load policy [ 176.944346][T20907] loop3: detected capacity change from 0 to 512 [ 176.968897][T20907] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 177.009418][T20907] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 177.061398][T20907] EXT4-fs (loop3): orphan cleanup on readonly fs [ 177.067827][T20907] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.8396: bad orphan inode 267 [ 177.174136][T20907] EXT4-fs (loop3): Remounting filesystem read-only [ 177.195605][T20907] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 177.234876][T20919] netlink: 'syz.1.8404': attribute type 21 has an invalid length. [ 177.259419][T20919] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8404'. [ 177.268789][T20907] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.8396: dx entry: limit 0 != root limit 125 [ 177.280574][T20907] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.8396: Corrupt directory, running e2fsck is recommended [ 177.436945][ T3453] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 179.101320][T20980] delete_channel: no stack [ 179.141764][T20979] bond3: option all_slaves_active: invalid value (5) [ 179.201191][T20979] bond3 (unregistering): Released all slaves [ 180.257094][T21020] netlink: 'syz.1.8452': attribute type 21 has an invalid length. [ 180.265002][T21020] netlink: 156 bytes leftover after parsing attributes in process `syz.1.8452'. [ 180.462554][T21028] SET target dimension over the limit! [ 180.708597][ T29] kauditd_printk_skb: 470 callbacks suppressed [ 180.708621][ T29] audit: type=1400 audit(2000000571.418:1819): avc: denied { read write } for pid=3445 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 180.778347][T21036] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8459'. [ 180.787384][T21036] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8459'. [ 180.805405][ T29] audit: type=1400 audit(2000000571.418:1820): avc: denied { read write open } for pid=3445 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 180.830471][ T29] audit: type=1400 audit(2000000571.427:1821): avc: denied { ioctl } for pid=3445 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 180.856122][ T29] audit: type=1400 audit(2000000571.427:1822): avc: denied { ioctl } for pid=3453 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 180.881830][ T29] audit: type=1400 audit(2000000571.502:1823): avc: denied { create } for pid=21035 comm="syz.1.8461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 180.905148][T21038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8461'. [ 181.094434][ T29] audit: type=1400 audit(2000000571.605:1824): avc: denied { write } for pid=21035 comm="syz.1.8461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 181.115099][ T29] audit: type=1400 audit(2000000571.633:1825): avc: denied { read write } for pid=3445 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 181.139298][ T29] audit: type=1400 audit(2000000571.633:1826): avc: denied { read write open } for pid=3445 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 181.164419][ T29] audit: type=1400 audit(2000000571.633:1827): avc: denied { ioctl } for pid=3445 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 181.190058][ T29] audit: type=1400 audit(2000000571.642:1828): avc: denied { create } for pid=21040 comm="syz.3.8462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 181.250619][T21049] netlink: 'syz.1.8465': attribute type 32 has an invalid length. [ 181.498770][T21059] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8469'. [ 181.507835][T21059] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8469'. [ 182.211901][ T3002] ================================================================== [ 182.220011][ T3002] BUG: KCSAN: data-race in d_make_discardable / do_readlinkat [ 182.227487][ T3002] [ 182.229799][ T3002] write to 0xffff88811c1560c0 of 4 bytes by task 3371 on cpu 1: [ 182.237511][ T3002] d_make_discardable+0x4f/0xa0 [ 182.242358][ T3002] simple_unlink+0x68/0x80 [ 182.246777][ T3002] shmem_unlink+0x12d/0x140 [ 182.251266][ T3002] vfs_unlink+0x28b/0x440 [ 182.255594][ T3002] do_unlinkat+0x1e2/0x4b0 [ 182.260046][ T3002] __x64_sys_unlink+0x2e/0x40 [ 182.264711][ T3002] x64_sys_call+0x2f48/0x3000 [ 182.269377][ T3002] do_syscall_64+0xc0/0x2a0 [ 182.273878][ T3002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.279755][ T3002] [ 182.282063][ T3002] read to 0xffff88811c1560c0 of 4 bytes by task 3002 on cpu 0: [ 182.289585][ T3002] do_readlinkat+0xa9/0x340 [ 182.294081][ T3002] __x64_sys_readlink+0x47/0x60 [ 182.298923][ T3002] x64_sys_call+0x2af1/0x3000 [ 182.303590][ T3002] do_syscall_64+0xc0/0x2a0 [ 182.308089][ T3002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.313968][ T3002] [ 182.316271][ T3002] value changed: 0x08300080 -> 0x00300180 [ 182.321968][ T3002] [ 182.324270][ T3002] Reported by Kernel Concurrency Sanitizer on: [ 182.330404][ T3002] CPU: 0 UID: 0 PID: 3002 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 182.341239][ T3002] Tainted: [W]=WARN [ 182.345023][ T3002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 182.355060][ T3002] ==================================================================