last executing test programs: 1.019183755s ago: executing program 4 (id=12132): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6200}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x12}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1b9dbfca88d8e664}, 0x40080c0) 970.996225ms ago: executing program 4 (id=12134): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, {0x2, 0x4e21, @empty}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e22, @multicast1}, 0x16, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000480)='bond_slave_1\x00', 0xc, 0xffffffffffff8c77}) 923.917897ms ago: executing program 1 (id=12135): set_mempolicy(0x4005, &(0x7f0000000040)=0x1001, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) 908.953947ms ago: executing program 4 (id=12139): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x40008, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 847.942148ms ago: executing program 1 (id=12140): r0 = open(&(0x7f0000000280)='.\x00', 0x2000, 0x0) fcntl$notify(r0, 0x402, 0x0) 814.70042ms ago: executing program 1 (id=12144): openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) close(0x3) 669.685813ms ago: executing program 1 (id=12149): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000003800090000000000000000000300000004"], 0x2c}}, 0x0) 576.156466ms ago: executing program 3 (id=12152): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x22, 0x0, &(0x7f0000000080)) 523.862977ms ago: executing program 2 (id=12153): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000001000)={@rand_addr, @dev}, &(0x7f0000000040)=0xc) 523.663737ms ago: executing program 1 (id=12154): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1f, 0x0, &(0x7f0000000280)) 523.509257ms ago: executing program 3 (id=12155): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@func_proto={0x0, 0x2, 0x0, 0xd, 0xa, [{0x3}, {0x3, 0x3}]}]}, {0x0, [0x5f, 0x2e]}}, &(0x7f0000000f40)=""/4089, 0x38, 0xff9, 0x1}, 0x28) 523.435877ms ago: executing program 0 (id=12156): r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d9", 0x1}], 0x1, &(0x7f0000000380)=[@prinfo={0x18, 0x84, 0x5, {0x10, 0x7f}}, @sndinfo={0x20, 0x84, 0x2, {0x6, 0x200, 0x8, 0xb}}], 0x38}, 0x0) 503.385207ms ago: executing program 2 (id=12157): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@ipv4_getnexthop={0x18, 0x6a, 0x605, 0x70bd2c, 0x25dfdbfc, {0x2, 0x0, 0x0, 0x0, 0x4000000}}, 0x18}, 0x1, 0x0, 0x0, 0x4004010}, 0x880) 461.801408ms ago: executing program 1 (id=12158): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) select(0x0, 0x0, 0x0, 0x0, 0x0) 399.95549ms ago: executing program 0 (id=12159): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x11, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002c000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 399.81906ms ago: executing program 2 (id=12160): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, 0x0, 0x0) 399.70388ms ago: executing program 3 (id=12161): socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a0, &(0x7f0000000340)='.d\x00\x00\x00\x00j\xfef;q1\x95\xf4\xe4\x13\x95k#Jz.F\xce\xfb\x9c\x0f\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcf\x01t\r%\xad-\x13\xb0 E\xaaC\xc388\x13\xc6H\x0f \x03\x86\xb5\xbfq\'\xab!\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdf\xde\x91\xfd\xf1B*j\n\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f') 346.537691ms ago: executing program 2 (id=12162): pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) inotify_add_watch(r0, 0x0, 0x220) 325.917412ms ago: executing program 0 (id=12163): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7020}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_ID={0x8, 0x1, 0x2}]}}}]}, 0x40}}, 0x0) 267.931393ms ago: executing program 2 (id=12164): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0xb, 0x70bd2b, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x7ff, 0x200, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x32}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x64}}, 0x0) 267.817973ms ago: executing program 3 (id=12165): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="04000000040000000400000002"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) 246.276354ms ago: executing program 0 (id=12166): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000680), 0x2042, 0x0) write$P9_RGETLOCK(r0, &(0x7f0000000780)={0x25, 0x37, 0x1, {0x0, 0x6, 0x9, 0x0, 0x7, '\x1f(\xfa^%:\x00'}}, 0x25) 183.293696ms ago: executing program 3 (id=12167): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000100)={0x100002a, 0x23, 0xa, 0x2, 0x7, 0xa9, 0x5, 0x15c, 0x1}) 131.779406ms ago: executing program 0 (id=12168): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x8000000, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230675f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 131.594376ms ago: executing program 4 (id=12169): r0 = syz_open_procfs(0x0, &(0x7f0000000540)='timerslack_ns\x00') writev(r0, &(0x7f0000000440)=[{&(0x7f0000000240)="bf076d0681", 0x5}], 0x1) 93.262497ms ago: executing program 2 (id=12170): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 70.931888ms ago: executing program 4 (id=12171): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) 27.925179ms ago: executing program 3 (id=12172): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x70bd2c, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x281, 0x600a8}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5}, @IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x2}]}}}]}, 0x44}}, 0x54) 27.807499ms ago: executing program 0 (id=12173): pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) syz_clone3(&(0x7f00000076c0)={0x60208200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 0s ago: executing program 4 (id=12174): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000001000010026bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="601d020000000000140003007465616d30000000000000000000000008000400d40000001c001680180001"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x20080094) kernel console output (not intermixed with test programs): 52 bytes leftover after parsing attributes in process `syz.4.8150'. [ 194.399678][T16961] IPVS: starting estimator thread 0... [ 194.408425][T20579] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8157'. [ 194.447147][T20586] netlink: 'syz.1.8159': attribute type 21 has an invalid length. [ 194.466119][T20586] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8159'. [ 194.494748][T20592] xt_CONNSECMARK: invalid mode: 0 [ 194.504514][T20586] netlink: 'syz.1.8159': attribute type 5 has an invalid length. [ 194.512580][T20580] IPVS: using max 2352 ests per chain, 117600 per kthread [ 194.536677][T20586] netlink: 'syz.1.8159': attribute type 6 has an invalid length. [ 194.536695][T20586] netlink: 3 bytes leftover after parsing attributes in process `syz.1.8159'. [ 194.587220][T20597] ipt_REJECT: TCP_RESET invalid for non-tcp [ 194.673440][T20615] netlink: 'syz.2.8176': attribute type 30 has an invalid length. [ 194.705807][T20622] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 194.828154][T20640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8187'. [ 194.894733][T20648] netlink: 'syz.1.8192': attribute type 30 has an invalid length. [ 194.921564][T20648] bond7: option arp_missed_max: invalid value (0) [ 194.935679][T20648] bond7: option arp_missed_max: allowed values 1 - 255 [ 195.050573][T20664] sctp: [Deprecated]: syz.4.8198 (pid 20664) Use of struct sctp_assoc_value in delayed_ack socket option. [ 195.050573][T20664] Use struct sctp_sack_info instead [ 195.573746][T20648] bond7 (unregistering): Released all slaves [ 195.632394][T20676] bridge0: port 1(.`) entered disabled state [ 195.668673][T20681] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 195.684140][T20681] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 195.849400][T20703] SELinux: Context Y7j [ 195.849400][T20703] u/$2Sٟ2'ks2- vjd #,N< [ 195.849400][T20703] :E]Y\?ͼ=ً1KIk{kL^0}4nr}pįNwyxiu?+H~F1Wjm &8UۂVN2)GxV%5xeRM4r4cJsHU&'p2EMMk&cbU,,f@8bD%$f=8@kI|w Ox&KCH;x-Ko4i!Oi%ڂ2 F"2E,P] k? is not valid (left unmapped). [ 195.902542][T20703] SELinux: Context *mkXI$hx4۫KM is not valid (left unmapped). [ 195.927525][T20708] netlink: 'syz.4.8219': attribute type 8 has an invalid length. [ 195.961255][T20703] SELinux: Context KM*,hcIǾû̋y+.+y0[pr;JA9Iq jǼ=7)oM{nF=XmnxrD㑉垳4TW}t%ȖY^slFB53hm5};JXom%~"~9mM~alʺLI8i [ 241.602937][T30062] netlink: 'syz.3.11189': attribute type 4 has an invalid length. [ 241.604941][T30040] loop4: p3 start 11362048 is beyond EOD, truncated [ 241.621102][T30062] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11189'. [ 241.827058][T30122] netlink: 'syz.0.11208': attribute type 6 has an invalid length. [ 242.032525][T30172] netlink: 'syz.3.11224': attribute type 11 has an invalid length. [ 242.046513][T30172] netlink: 168 bytes leftover after parsing attributes in process `syz.3.11224'. [ 242.085408][ T28] kauditd_printk_skb: 63 callbacks suppressed [ 242.085424][ T28] audit: type=1400 audit(2000000426.765:10373): avc: denied { ioctl } for pid=30181 comm="syz.4.11228" path="socket:[81526]" dev="sockfs" ino=81526 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 242.156371][T30195] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11231'. [ 242.230484][T30213] xt_hashlimit: max too large, truncated to 1048576 [ 242.352047][T30242] netlink: 'syz.4.11246': attribute type 13 has an invalid length. [ 242.481026][T30271] netlink: 'syz.4.11255': attribute type 5 has an invalid length. [ 242.493261][T30271] netlink: 45 bytes leftover after parsing attributes in process `syz.4.11255'. [ 242.527627][ T28] audit: type=1400 audit(2000000427.176:10374): avc: denied { bind } for pid=30276 comm="syz.2.11258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 242.611273][ T28] audit: type=1326 audit(2000000427.261:10375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30292 comm="syz.4.11263" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962a0cde99 code=0x7ffc0000 [ 242.612179][ T28] audit: type=1326 audit(2000000427.261:10376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30292 comm="syz.4.11263" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962a0cde99 code=0x7ffc0000 [ 242.612291][ T28] audit: type=1326 audit(2000000427.261:10377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30292 comm="syz.4.11263" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f962a0cde99 code=0x7ffc0000 [ 242.612465][ T28] audit: type=1326 audit(2000000427.261:10378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30292 comm="syz.4.11263" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962a0cde99 code=0x7ffc0000 [ 242.612586][ T28] audit: type=1326 audit(2000000427.261:10379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30292 comm="syz.4.11263" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962a0cde99 code=0x7ffc0000 [ 242.612697][ T28] audit: type=1326 audit(2000000427.261:10380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30292 comm="syz.4.11263" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962a0cde99 code=0x7ffc0000 [ 242.612835][ T28] audit: type=1326 audit(2000000427.261:10381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30292 comm="syz.4.11263" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f962a0cde99 code=0x7ffc0000 [ 242.613045][ T28] audit: type=1326 audit(2000000427.261:10382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30292 comm="syz.4.11263" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f962a0cde99 code=0x7ffc0000 [ 242.960478][T30333] xt_CT: No such helper "snmp_trap" [ 243.124255][T30373] veth5: entered promiscuous mode [ 243.132235][T30373] veth5: entered allmulticast mode [ 243.141965][T30396] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11291'. [ 243.181504][T16961] usb usb8-port2: attempt power cycle [ 243.294577][T30426] netlink: 600 bytes leftover after parsing attributes in process `syz.0.11300'. [ 243.452070][T30449] ieee802154 phy0 wpan0: encryption failed: -22 [ 243.596955][T30469] netlink: 'syz.2.11315': attribute type 21 has an invalid length. [ 243.605526][T30469] netlink: 128 bytes leftover after parsing attributes in process `syz.2.11315'. [ 243.631050][T30469] netlink: 'syz.2.11315': attribute type 4 has an invalid length. [ 243.651291][T30469] netlink: 'syz.2.11315': attribute type 5 has an invalid length. [ 243.665972][T30469] netlink: 3 bytes leftover after parsing attributes in process `syz.2.11315'. [ 243.766505][T30505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11326'. [ 243.857903][T30521] Process accounting resumed [ 243.955349][T30549] loop4: detected capacity change from 0 to 512 [ 244.000207][T30549] EXT4-fs: Ignoring removed i_version option [ 244.029315][T30549] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 244.042218][T30549] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e11c, mo2=0002] [ 244.058925][T30549] System zones: 1-12 [ 244.063061][T30549] EXT4-fs (loop4): orphan cleanup on readonly fs [ 244.079034][T30549] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.11342: invalid indirect mapped block 12 (level 1) [ 244.103530][T30549] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 244.106445][T30549] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.11342: invalid indirect mapped block 2 (level 2) [ 244.115628][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 244.115673][ C1] EXT4-fs (loop4): initial error at time 2000000428: ext4_free_branches:1023: inode 11 [ 244.115734][ C1] EXT4-fs (loop4): last error at time 2000000428: ext4_free_branches:1023: inode 11 [ 244.154759][T30549] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 244.157726][T30549] EXT4-fs (loop4): 1 truncate cleaned up [ 244.174165][T30549] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 244.238488][T30593] bond7: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 245.056551][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 245.066649][T30593] bond7 (unregistering): Released all slaves [ 245.148667][T16961] usb usb8-port2: unable to enumerate USB device [ 245.354527][T30736] program syz.4.11380 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 245.388489][T30736] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 245.427574][T30753] bridge9: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 246.015362][T30876] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 246.047923][T30876] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 246.532871][T31019] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 246.798892][T31090] SELinux: failed to load policy [ 246.888437][T31115] validate_nla: 5 callbacks suppressed [ 246.888496][T31115] netlink: 'syz.0.11503': attribute type 16 has an invalid length. [ 246.922150][T31121] netlink: 'syz.1.11505': attribute type 10 has an invalid length. [ 246.931818][T31115] netlink: 'syz.0.11503': attribute type 17 has an invalid length. [ 247.001671][T31115] bridge0: port 3() entered blocking state [ 247.008147][T31115] bridge0: port 3() entered forwarding state [ 247.029453][T31133] xt_connbytes: Forcing CT accounting to be enabled [ 247.043488][T31115] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 247.056924][T31115] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 247.112078][T31129] bond6: Unable to set down delay as MII monitoring is disabled [ 247.123432][T31129] bond6 (unregistering): Released all slaves [ 247.264006][T31276] bond6: option active_slave: mode dependency failed, not supported in mode 802.3ad(4) [ 247.277877][T31276] bond6 (unregistering): Released all slaves [ 247.460903][T31376] loop1: detected capacity change from 0 to 764 [ 247.476131][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 247.476178][ T28] audit: type=1400 audit(2000000431.807:10445): avc: denied { mounton } for pid=31374 comm="syz.1.11526" path="/2306/file0" dev="tmpfs" ino=11665 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 247.515138][T31382] bond7: Unable to set up delay as MII monitoring is disabled [ 247.528098][T31376] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 247.539740][T31382] bond7 (unregistering): Released all slaves [ 247.545924][ T28] audit: type=1400 audit(2000000431.863:10446): avc: denied { mount } for pid=31374 comm="syz.1.11526" name="/" dev="loop1" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 247.596676][ T28] audit: type=1400 audit(2000000431.863:10447): avc: denied { prog_run } for pid=31366 comm="syz.4.11522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 247.632825][ T28] audit: type=1400 audit(2000000431.947:10448): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 247.751065][T31489] loop4: detected capacity change from 0 to 2048 [ 247.819875][T31489] Alternate GPT is invalid, using primary GPT. [ 247.828402][T31489] loop4: p2 p3 p7 [ 247.892777][T31511] __nla_validate_parse: 10 callbacks suppressed [ 247.892801][T31511] netlink: 148 bytes leftover after parsing attributes in process `syz.3.11539'. [ 247.926695][T31517] netlink: 'syz.0.11538': attribute type 12 has an invalid length. [ 247.941320][T31517] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11538'. [ 247.971544][ T28] audit: type=1400 audit(2000000432.265:10449): avc: denied { create } for pid=31529 comm="syz.4.11540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 248.000724][T31528] bond6: option mode: invalid value (9) [ 248.010872][ T28] audit: type=1400 audit(2000000432.274:10450): avc: denied { write } for pid=31529 comm="syz.4.11540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 248.031897][T31528] bond6 (unregistering): Released all slaves [ 248.116744][ T28] audit: type=1400 audit(2000000432.396:10451): avc: denied { map_create } for pid=31608 comm="syz.0.11544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 248.178730][T31623] loop0: detected capacity change from 0 to 512 [ 248.198276][ T28] audit: type=1400 audit(2000000432.396:10452): avc: denied { map_read map_write } for pid=31608 comm="syz.0.11544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 248.224848][T31623] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 248.255859][T31623] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.270782][ T28] audit: type=1400 audit(2000000432.461:10453): avc: denied { read } for pid=31616 comm="syz.3.11548" dev="nsfs" ino=4026532622 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 248.295028][T31623] ext4 filesystem being mounted at /2359/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.308288][ T28] audit: type=1400 audit(2000000432.461:10454): avc: denied { open } for pid=31616 comm="syz.3.11548" path="net:[4026532622]" dev="nsfs" ino=4026532622 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 248.335408][T31623] EXT4-fs error (device loop0): ext4_empty_dir:3082: inode #12: comm syz.0.11551: invalid size [ 248.349336][T31623] EXT4-fs (loop0): Remounting filesystem read-only [ 248.412708][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.425051][ T12] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 248.440439][ T12] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 248.607043][T31700] netlink: 'syz.0.11572': attribute type 2 has an invalid length. [ 248.721028][T31727] netlink: 128 bytes leftover after parsing attributes in process `syz.1.11580'. [ 248.738970][T31727] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 249.056620][T31832] sock: sock_timestamping_bind_phc: sock not bind to device [ 249.068019][T31804] bond6: entered allmulticast mode [ 249.091905][T31804] 8021q: adding VLAN 0 to HW filter on device bond6 [ 249.108858][T31850] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11604'. [ 249.300326][T31883] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 249.306889][T31883] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 249.373196][T31883] vhci_hcd vhci_hcd.0: Device attached [ 249.385105][T31896] vhci_hcd vhci_hcd.0: port 0 already used [ 249.406384][T31886] vhci_hcd: connection closed [ 249.406711][ T36] vhci_hcd vhci_hcd.3: stop threads [ 249.431546][ T36] vhci_hcd vhci_hcd.3: release socket [ 249.441016][ T36] vhci_hcd vhci_hcd.3: disconnect device [ 249.487121][T31921] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.11623'. [ 249.504699][T31922] loop0: detected capacity change from 0 to 512 [ 249.535179][T31922] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.567266][T31936] loop4: detected capacity change from 0 to 512 [ 249.574336][T31922] ext4 filesystem being mounted at /2370/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.587426][T31936] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 249.599270][T31936] EXT4-fs (loop4): group descriptors corrupted! [ 249.639834][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.749159][T31974] netlink: 'syz.4.11635': attribute type 20 has an invalid length. [ 249.766759][T31974] IPv6: NLM_F_CREATE should be specified when creating new route [ 249.790127][T31981] netlink: 'syz.0.11649': attribute type 4 has an invalid length. [ 249.796234][T31982] loop1: detected capacity change from 0 to 736 [ 249.833642][T31982] rock: directory entry would overflow storage [ 249.839865][T31982] rock: sig=0x3b10, size=4, remaining=3 [ 250.365571][T32112] x_tables: duplicate underflow at hook 1 [ 250.392507][T32116] netlink: 'syz.1.11682': attribute type 21 has an invalid length. [ 250.465387][T32135] netlink: 'syz.1.11687': attribute type 1 has an invalid length. [ 250.483489][T32135] netlink: 'syz.1.11687': attribute type 3 has an invalid length. [ 250.491614][T32135] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11687'. [ 250.522839][T32142] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11692'. [ 250.591549][T32158] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11696'. [ 250.594437][T32160] netlink: 72 bytes leftover after parsing attributes in process `syz.2.11697'. [ 250.617869][T32160] netlink: 72 bytes leftover after parsing attributes in process `syz.2.11697'. [ 250.664285][T32168] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 250.771203][T32195] ip6erspan2: entered allmulticast mode [ 250.831856][T32213] ip6tnl5: entered allmulticast mode [ 250.979082][T32247] loop0: detected capacity change from 0 to 512 [ 250.990151][T32255] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 251.039304][T32247] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.085706][T32247] EXT4-fs error (device loop0): ext4_xattr_set_entry:1672: inode #2: comm syz.0.11735: corrupted xattr entries [ 251.120966][T32278] bond8: option arp_missed_max: mode dependency failed, not supported in mode balance-tlb(5) [ 251.135764][T32278] bond8 (unregistering): Released all slaves [ 251.147242][ T12] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 251.167292][ T12] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 251.179158][ T3376] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 251.210452][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.393618][T32387] IPVS: Unknown mcast interface: lo [ 251.490107][T32404] loop4: detected capacity change from 0 to 512 [ 251.491080][T32410] ip6t_srh: unknown srh invflags 4000 [ 251.498407][T32404] EXT4-fs: Ignoring removed oldalloc option [ 251.543973][T32404] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 251.573108][T32404] EXT4-fs (loop4): orphan cleanup on readonly fs [ 251.599945][T32404] EXT4-fs warning (device loop4): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 251.617277][T32404] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 251.634959][T32404] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #13: comm syz.4.11754: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 251.653526][T32404] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 251.655047][T32404] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.11754: couldn't read orphan inode 13 (err -117) [ 251.664366][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 251.664390][ C0] EXT4-fs (loop4): last error at time 2000000435: ext4_ext_check_inode:521: inode 13 [ 251.692475][T32404] loop4: lost filesystem error report for type 5 error -117 [ 251.692664][T18471] usb usb8-port2: attempt power cycle [ 251.713397][T32404] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 251.767116][ T3404] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 251.799220][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.192938][T32551] xt_hashlimit: max too large, truncated to 1048576 [ 252.278942][ T3376] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 252.280053][T32572] loop0: detected capacity change from 0 to 512 [ 252.334625][T32572] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 252.359932][T32572] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.11807: Failed to acquire dquot type 1 [ 252.376200][T32572] loop0: lost filesystem error report for type 5 error -117 [ 252.376837][T32572] EXT4-fs (loop0): 1 truncate cleaned up [ 252.389868][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 252.389885][ C1] EXT4-fs (loop0): last error at time 2000000436: ext4_acquire_dquot:7041 [ 252.446174][T32572] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 252.499141][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 252.526217][T32618] vlan0: entered promiscuous mode [ 252.947624][ T28] kauditd_printk_skb: 98 callbacks suppressed [ 252.947642][ T28] audit: type=1400 audit(2000000436.923:10546): avc: denied { create } for pid=32726 comm="syz.0.11850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 252.979732][T32727] ieee802154 phy0 wpan0: encryption failed: -22 [ 252.995283][ T28] audit: type=1400 audit(2000000436.961:10547): avc: denied { write } for pid=32726 comm="syz.0.11850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 253.052844][T32739] loop4: detected capacity change from 0 to 128 [ 253.084600][T32739] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 253.103763][T32739] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 253.122257][ T28] audit: type=1400 audit(2000000437.092:10548): avc: denied { mount } for pid=32735 comm="syz.4.11852" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 253.178960][ T28] audit: type=1400 audit(2000000437.129:10549): avc: denied { unmount } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 253.203964][ T28] audit: type=1400 audit(2000000437.166:10550): avc: denied { connect } for pid=32758 comm="syz.0.11858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 253.253108][T32765] __nla_validate_parse: 11 callbacks suppressed [ 253.253201][T32765] netlink: 72 bytes leftover after parsing attributes in process `syz.0.11863'. [ 253.478226][ T111] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 253.574619][ T335] loop4: detected capacity change from 0 to 128 [ 253.664562][ T28] audit: type=1400 audit(2000000437.597:10551): avc: denied { create } for pid=352 comm="syz.3.11879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 253.701605][T18471] usb usb8-port2: unable to enumerate USB device [ 253.723590][ T28] audit: type=1400 audit(2000000437.606:10552): avc: denied { ioctl } for pid=352 comm="syz.3.11879" path="socket:[87116]" dev="sockfs" ino=87116 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 253.782711][ T28] audit: type=1400 audit(2000000437.709:10553): avc: denied { setopt } for pid=378 comm="syz.3.11887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 253.847811][ T394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11891'. [ 253.857086][ T28] audit: type=1400 audit(2000000437.765:10554): avc: denied { append } for pid=389 comm="syz.0.11890" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 253.930822][ T28] audit: type=1400 audit(2000000437.765:10555): avc: denied { open } for pid=389 comm="syz.0.11890" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 254.002371][ T422] validate_nla: 4 callbacks suppressed [ 254.002459][ T422] netlink: 'syz.2.11900': attribute type 2 has an invalid length. [ 254.028700][ T427] Invalid option length (0) for dns_resolver key [ 254.038831][ T430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11903'. [ 254.094868][ T441] netlink: 'syz.1.11906': attribute type 34 has an invalid length. [ 254.103778][ T441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11906'. [ 254.159115][ T485] netlink: 'syz.3.11910': attribute type 1 has an invalid length. [ 254.321736][ T531] netlink: 'syz.4.11923': attribute type 3 has an invalid length. [ 254.367778][ T541] x_tables: ip_tables: osf match: only valid for protocol 6 [ 254.390659][ T548] usb usb5: usbfs: process 548 (syz.3.11929) did not claim interface 0 before use [ 254.503252][ T575] netlink: 52 bytes leftover after parsing attributes in process `syz.2.11938'. [ 254.528588][ T575] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 254.617871][ T597] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11945'. [ 254.635558][ T600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11946'. [ 254.643441][ T607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11949'. [ 254.663618][ T597] netlink: 'syz.2.11945': attribute type 1 has an invalid length. [ 254.700794][ T612] netlink: 'syz.3.11950': attribute type 15 has an invalid length. [ 254.737610][ T612] netlink: 666 bytes leftover after parsing attributes in process `syz.3.11950'. [ 254.766194][ T628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11956'. [ 254.787202][ T628] netlink: 'syz.2.11956': attribute type 4 has an invalid length. [ 254.882930][ T650] loop2: detected capacity change from 0 to 1024 [ 254.903734][ T650] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 254.934080][ T650] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 2: comm syz.2.11963: lblock 2 mapped to illegal pblock 2 (length 1) [ 254.950891][ T650] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 254.951512][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 254.967041][ C0] EXT4-fs (loop2): initial error at time 2000000438: ext4_map_blocks:791: inode 3: block 2 [ 254.972577][ T650] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 48: comm syz.2.11963: lblock 0 mapped to illegal pblock 48 (length 1) [ 254.977104][ C0] EXT4-fs (loop2): last error at time 2000000438: ext4_map_blocks:791: inode 3: block 2 [ 255.042920][ T684] loop4: detected capacity change from 0 to 164 [ 255.049989][ T650] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 255.065415][ T650] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.11963: Failed to acquire dquot type 0 [ 255.100747][ T650] loop2: lost filesystem error report for type 5 error -117 [ 255.104311][ T650] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 255.131175][ T650] loop2: lost filesystem error report for type 5 error -117 [ 255.131338][ T650] EXT4-fs error (device loop2): ext4_evict_inode:267: inode #11: comm syz.2.11963: mark_inode_dirty error [ 255.142298][ T692] 8021q: adding VLAN 0 to HW filter on device bond9 [ 255.150951][ T650] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 255.158207][ T650] EXT4-fs warning (device loop2): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 255.182669][ T650] EXT4-fs (loop2): 1 orphan inode deleted [ 255.188952][ T650] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.202438][ T3438] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 255.229636][ T3438] EXT4-fs error (device loop2): ext4_release_dquot:7077: comm kworker/u8:7: Failed to release dquot type 0 [ 255.272676][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.293754][ T111] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 255.331516][ T111] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 255.331618][ T111] EXT4-fs error (device loop2): ext4_release_dquot:7077: comm kworker/u8:5: Failed to release dquot type 0 [ 255.359225][ T111] loop2: lost filesystem error report for type 5 error -117 [ 255.359677][ T3302] EXT4-fs error (device loop2): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 255.391560][ T3302] loop2: lost filesystem error report for type 5 error -117 [ 255.391668][ T3302] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 255.410191][ T3302] loop2: lost filesystem error report for type 5 error -117 [ 255.414702][ T3302] EXT4-fs error (device loop2): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 255.443328][ T3302] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 255.451028][ T776] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 255.745182][ T836] netlink: 'syz.0.12010': attribute type 27 has an invalid length. [ 255.759300][ T836] netlink: 'syz.0.12010': attribute type 3 has an invalid length. [ 255.870957][ C1] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 255.995422][ T871] loop0: detected capacity change from 0 to 128 [ 256.037070][ T871] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 256.078954][ T871] FAT-fs (loop0): error, invalid access to FAT (entry 0x09cb9c9e) [ 256.120900][ T871] FAT-fs (loop0): Filesystem has been set read-only [ 256.424992][ T918] xt_hashlimit: size too large, truncated to 1048576 [ 256.452499][ T918] xt_NFQUEUE: number of queues (10) out of range (got 65542) [ 256.487355][ T928] qrtr: Invalid version 159 [ 256.495091][ T926] loop2: detected capacity change from 0 to 512 [ 256.569059][ T926] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.662712][ T926] ext4 filesystem being mounted at /2348/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.732989][ T926] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.12039: corrupted xattr block 33: invalid ea_ino [ 256.791150][ T963] ipt_REJECT: TCP_RESET invalid for non-tcp [ 256.792772][ T926] EXT4-fs (loop2): Remounting filesystem read-only [ 256.837516][ T926] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 256.917727][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.145439][ T1026] xt_TCPMSS: Only works on TCP SYN packets [ 257.169568][ T1029] netlink: 'syz.1.12071': attribute type 6 has an invalid length. [ 257.241087][ T1042] --map-set only usable from mangle table [ 257.435113][ T1080] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 257.462053][ T1080] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 257.490457][ T1080] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 257.779872][ T1139] xt_CT: You must specify a L4 protocol and not use inversions on it [ 257.836029][ T1151] xt_CT: You must specify a L4 protocol and not use inversions on it [ 258.064380][ T1190] bond0: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 258.284990][ T1230] xt_CT: No such helper "pptp" [ 258.391443][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 258.391456][ T28] audit: type=1400 audit(2000000442.021:10609): avc: denied { read } for pid=1249 comm="syz.0.12143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 258.488938][ T28] audit: type=1400 audit(2000000442.105:10610): avc: denied { append } for pid=1260 comm="syz.0.12147" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 258.563386][ T28] audit: type=1326 audit(2000000442.171:10611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1270 comm="syz.2.12150" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34a24cde99 code=0x7ffc0000 [ 258.688202][ T28] audit: type=1326 audit(2000000442.171:10612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1270 comm="syz.2.12150" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34a24cde99 code=0x7ffc0000 [ 258.768032][ T1309] __nla_validate_parse: 11 callbacks suppressed [ 258.785641][ T1309] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12159'. [ 258.792375][ T28] audit: type=1326 audit(2000000442.171:10613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1270 comm="syz.2.12150" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34a24cde99 code=0x7ffc0000 [ 258.879214][ T28] audit: type=1326 audit(2000000442.171:10614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1270 comm="syz.2.12150" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34a24cde99 code=0x7ffc0000 [ 258.961988][ T28] audit: type=1326 audit(2000000442.180:10615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1270 comm="syz.2.12150" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f34a24cde99 code=0x7ffc0000 [ 259.025311][ T1334] audit: audit_backlog=65 > audit_backlog_limit=64 [ 259.043144][ T1334] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 259.051319][ T28] audit: type=1326 audit(2000000442.180:10616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1270 comm="syz.2.12150" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34a24cde99 code=0x7ffc0000 [ 259.123482][ T1342] team0: left promiscuous mode [ 259.128316][ T1342] team_slave_0: left promiscuous mode [ 259.161687][ T1342] team_slave_1: left promiscuous mode [ 259.172562][ T1342] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.221225][ T1342] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 259.252785][ T1342] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 259.274390][ T111] ================================================================== [ 259.282497][ T111] BUG: KCSAN: data-race in alloc_pid / copy_process [ 259.289100][ T111] [ 259.291427][ T111] read-write to 0xffffffff86c5c268 of 4 bytes by task 12 on cpu 1: [ 259.299351][ T111] alloc_pid+0x6bb/0x930 [ 259.303619][ T111] copy_process+0x11aa/0x2310 [ 259.308296][ T111] kernel_clone+0x1c0/0x5f0 [ 259.312811][ T111] user_mode_thread+0x9c/0xd0 [ 259.317537][ T111] call_usermodehelper_exec_work+0x41/0x160 [ 259.323458][ T111] process_scheduled_works+0x4d4/0x9a0 [ 259.328936][ T111] worker_thread+0x569/0x750 [ 259.333537][ T111] kthread+0x221/0x270 [ 259.337626][ T111] ret_from_fork+0x146/0x330 [ 259.342252][ T111] ret_from_fork_asm+0x1a/0x30 [ 259.347027][ T111] [ 259.349358][ T111] read to 0xffffffff86c5c268 of 4 bytes by task 111 on cpu 0: [ 259.356836][ T111] copy_process+0x1aae/0x2310 [ 259.361545][ T111] kernel_clone+0x1c0/0x5f0 [ 259.366058][ T111] user_mode_thread+0x9c/0xd0 [ 259.370746][ T111] call_usermodehelper_exec_work+0x41/0x160 [ 259.376652][ T111] process_scheduled_works+0x4d4/0x9a0 [ 259.382117][ T111] worker_thread+0x569/0x750 [ 259.386715][ T111] kthread+0x221/0x270 [ 259.390798][ T111] ret_from_fork+0x146/0x330 [ 259.395408][ T111] ret_from_fork_asm+0x1a/0x30 [ 259.400218][ T111] [ 259.402548][ T111] value changed: 0x80000129 -> 0x8000012a [ 259.408264][ T111] [ 259.410584][ T111] Reported by Kernel Concurrency Sanitizer on: [ 259.416751][ T111] CPU: 0 UID: 0 PID: 111 Comm: kworker/u8:5 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 259.427697][ T111] Tainted: [W]=WARN [ 259.431518][ T111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 259.441583][ T111] Workqueue: events_unbound call_usermodehelper_exec_work [ 259.448724][ T111] ================================================================== [ 259.477942][ T1354] team0: entered promiscuous mode [ 259.484630][ T1354] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12174'. [ 259.497936][ T1354] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 265.193214][ C1] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!