last executing test programs: 446.289334ms ago: executing program 1 (id=8898): r0 = syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001ac0)=[{&(0x7f0000000480)=""/91, 0x5b}], 0x1, &(0x7f0000001e40)=[{0x0}, {&(0x7f0000001c40)=""/198, 0xc6}], 0x2, 0x0) 364.239341ms ago: executing program 3 (id=8906): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x23, &(0x7f00000000c0)=""/32, &(0x7f0000000080)=0x20) 344.760442ms ago: executing program 2 (id=8908): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e21, @empty}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) 308.356085ms ago: executing program 1 (id=8909): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r0, 0x10c, 0x5, 0x0, &(0x7f0000000080)) 304.393165ms ago: executing program 3 (id=8910): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x23, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$kcm(0x29, 0x5, 0x0) 302.923185ms ago: executing program 2 (id=8911): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f00000005c0)=@in4={0x21, 0x8, 0x2, 0x10, {0x2, 0x1, @empty}}, 0x24) 250.584489ms ago: executing program 1 (id=8915): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) munlockall() 246.87643ms ago: executing program 3 (id=8916): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000010900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000640000000180a0101000b000000000000010000000900010073797a30000000000900020073797a30000000001400038008000140000004"], 0xc8}}, 0x0) 235.787151ms ago: executing program 2 (id=8917): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x54, 0x1, [@m_sample={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x68}}, 0x0) 230.664391ms ago: executing program 0 (id=8918): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000002380)=""/169, 0xa9}], 0x1, 0x0, 0x0) 230.483391ms ago: executing program 4 (id=8919): ioprio_set$pid(0x1, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x102102180, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) 190.509135ms ago: executing program 0 (id=8920): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2710, 0x0, &(0x7f0000000000)) 190.201684ms ago: executing program 4 (id=8921): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) chmod(0x0, 0x0) 184.695305ms ago: executing program 3 (id=8922): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcc2, 0x0, 0x0, 0x0, 0x0, 0xc2fc}, &(0x7f0000000180)=0x83) 173.093936ms ago: executing program 1 (id=8923): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000340)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd29, 0x25dfdbfb, {0xa, 0x0, 0x80, 0x0, 0x0, 0x4}, [@RTA_DST={0x8, 0x1, @multicast1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000050}, 0x20000050) 153.769437ms ago: executing program 4 (id=8924): r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000340)=@keyring) 151.747247ms ago: executing program 2 (id=8925): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="154601efff000000540012800c0001006d6163766c616e004400028006000200010000000800010001"], 0x84}}, 0x20008040) 148.188868ms ago: executing program 0 (id=8926): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000300)=0x1, 0x4) 132.019589ms ago: executing program 3 (id=8927): openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) pselect6(0x40, &(0x7f00000000c0)={0x1, 0x3, 0x8, 0x88c, 0x9, 0x1000, 0x0, 0x5}, &(0x7f0000000100)={0xb, 0x4, 0x8, 0x0, 0x401, 0x4, 0x9, 0x80}, 0x0, 0x0, 0x0) 119.48074ms ago: executing program 4 (id=8928): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, 0x0) 107.534411ms ago: executing program 1 (id=8929): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000001380)=0x1, 0x4) 102.563882ms ago: executing program 0 (id=8930): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt(r0, 0x1, 0x7, &(0x7f00000001c0)=""/174, &(0x7f0000000040)=0xae) 89.725702ms ago: executing program 4 (id=8931): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="b800000010000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b0000000000900016806c0001800c0003000100000006000100280001"], 0xb8}}, 0x0) 64.007985ms ago: executing program 2 (id=8932): clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8}) 59.999085ms ago: executing program 0 (id=8933): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_SPORT={0x6, 0x1c, 0x4e20}, @RTA_DPORT={0x6, 0x1d, 0x4e21}]}, 0x2c}}, 0x0) 37.283767ms ago: executing program 3 (id=8934): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x14a5, 0x14644ad374e56c00}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x101}, @IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x9}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20048011}, 0x240400c4) 32.383647ms ago: executing program 1 (id=8935): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc97c, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) bpf$LINK_DETACH(0x22, 0x0, 0x0) 13.694339ms ago: executing program 2 (id=8936): r0 = socket$netlink(0x10, 0x3, 0xb) close(r0) 5.48427ms ago: executing program 0 (id=8937): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x36, 0x0, &(0x7f0000000080)="f6f4e9a100000000002a8bc686ddb7dbfc007024f8082d130827533e0000000000009b012e480883d6a056df64133990ed5093613507", 0x0, 0x4, 0x0, 0x2, 0x0, &(0x7f0000000700)="0102", 0x0}, 0x50) 0s ago: executing program 4 (id=8938): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000015c0), 0x48d20, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): ] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.720182][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 102.721663][T13573] loop0: p2 p3 p4 [ 102.740156][T13573] loop0: p2 start 164919041 is beyond EOD, truncated [ 102.746957][T13573] loop0: p3 size 66846464 extends beyond EOD, truncated [ 102.774116][T13573] loop0: p4 size 37048832 extends beyond EOD, truncated [ 102.809413][T13596] loop2: detected capacity change from 0 to 512 [ 102.833903][T13596] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #11: comm syz.2.4890: missing EA_INODE flag [ 102.883139][T13596] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.4890: error while reading EA inode 11 err=-117 [ 102.897378][T13596] EXT4-fs (loop2): 1 orphan inode deleted [ 102.903566][T13596] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.950494][T13617] loop1: detected capacity change from 0 to 1024 [ 102.951908][T13616] IPv6: addrconf: prefix option has invalid lifetime [ 102.965524][T13617] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 102.966573][ T6681] udevd[6681]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 102.976441][T13617] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 102.977840][ T6685] udevd[6685]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 103.019372][T13617] JBD2: no valid journal superblock found [ 103.025150][T13617] EXT4-fs (loop1): Could not load journal inode [ 103.026766][ T6685] udevd[6685]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 103.031935][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.042442][ T3518] udevd[3518]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 103.116800][T13630] tmpfs: Bad value for 'mpol' [ 103.121864][T13627] loop1: detected capacity change from 0 to 2048 [ 103.155778][T13637] loop4: detected capacity change from 0 to 512 [ 103.162820][ T3294] loop1: p1 < > [ 103.178667][T13627] loop1: p1 < > [ 103.185258][T13637] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 103.193214][T13637] EXT4-fs (loop4): orphan cleanup on readonly fs [ 103.203618][T13642] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:0000:0000 with DS=0xd [ 103.210400][T13643] tmpfs: Unexpected value for 'inode32' [ 103.231698][T13637] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 103.255062][T13637] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 103.262218][T13637] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #16: comm syz.4.4915: iget: immutable or append flags not allowed on symlinks [ 103.277300][T13637] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.4915: couldn't read orphan inode 16 (err -117) [ 103.295402][T13648] loop3: detected capacity change from 0 to 1764 [ 103.319170][T13637] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 103.347686][T13648] ISOFS: Bad logical zone size 2051 [ 103.440529][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.462247][T13677] 9pnet: Unknown protocol version 9p20\++} [ 103.463772][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 103.463786][ T29] audit: type=1326 audit(4820.652:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13674 comm="syz.2.4935" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f84cac7ebe9 code=0x0 [ 103.541235][T13688] tmpfs: Bad value for 'mpol' [ 103.572365][T13692] loop2: detected capacity change from 0 to 512 [ 103.598367][T13692] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 103.607611][T13692] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 103.645525][T13692] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 103.653704][T13692] System zones: 0-2, 18-18, 34-34 [ 103.659887][T13692] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.4941: couldn't read orphan inode 15 (err -116) [ 103.683579][T13692] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.734369][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.796321][T13718] loop3: detected capacity change from 0 to 8192 [ 103.833641][T13733] loop4: detected capacity change from 0 to 512 [ 103.853199][T13733] EXT4-fs: Ignoring removed oldalloc option [ 103.856981][T13718] loop3: p1 p2 p3 < > p4 < p5 p6 > [ 103.859197][T13733] EXT4-fs: inline encryption not supported [ 103.864310][T13718] loop3: partition table partially beyond EOD, truncated [ 103.877554][T13733] EXT4-fs: Ignoring removed mblk_io_submit option [ 103.879127][T13718] loop3: p1 start 67108864 is beyond EOD, truncated [ 103.890596][T13718] loop3: p2 size 61546 extends beyond EOD, truncated [ 103.897884][T13733] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 103.918912][T13718] loop3: p3 start 100859904 is beyond EOD, truncated [ 103.922926][T13733] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4961: bg 0: block 64: padding at end of block bitmap is not set [ 103.940866][T13718] loop3: p5 start 67108864 is beyond EOD, truncated [ 103.947521][T13718] loop3: p6 size 61546 extends beyond EOD, truncated [ 103.974526][T13747] tmpfs: Bad value for 'mpol' [ 103.990057][T13733] Quota error (device loop4): write_blk: dquota write failed [ 103.997767][T13733] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 104.007812][T13733] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.4961: Failed to acquire dquot type 0 [ 104.027404][T13733] EXT4-fs (loop4): 1 truncate cleaned up [ 104.050934][T13754] loop0: detected capacity change from 0 to 512 [ 104.075272][T13754] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 104.084432][T13754] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 104.097119][T13733] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.145453][T13767] loop2: detected capacity change from 0 to 764 [ 104.195554][T13775] loop3: detected capacity change from 0 to 128 [ 104.212298][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.234751][T13775] FAT-fs (loop3): bogus number of reserved sectors [ 104.241351][T13775] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 104.250763][T13775] FAT-fs (loop3): Can't find a valid FAT filesystem [ 104.319684][T13792] tmpfs: Bad value for 'nr_blocks' [ 104.411568][T13795] loop4: detected capacity change from 0 to 8192 [ 104.607134][T13843] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 104.610605][T13842] loop1: detected capacity change from 0 to 1024 [ 104.616576][ T29] audit: type=1400 audit(4821.726:284): avc: denied { relabelto } for pid=13841 comm="syz.0.5014" name="987" dev="tmpfs" ino=5061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 104.648031][ T29] audit: type=1400 audit(4821.726:285): avc: denied { associate } for pid=13841 comm="syz.0.5014" name="987" dev="tmpfs" ino=5061 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hwdata_t:s0" [ 104.728133][T13842] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 104.789751][T13842] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 104.811132][T13842] EXT4-fs (loop1): orphan cleanup on readonly fs [ 104.823199][T13842] Quota error (device loop1): v2_read_file_info: Block with free entry 1283 out of range (1, 6). [ 104.843659][T13842] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 104.858433][T13842] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 104.888578][T13842] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.5013: Freeing blocks not in datazone - block = 0, count = 4096 [ 104.918660][T13842] EXT4-fs (loop1): 1 orphan inode deleted [ 104.922718][T13892] loop2: detected capacity change from 0 to 256 [ 104.954411][T13892] FAT-fs (loop2): Directory bread(block 64) failed [ 104.965761][T13842] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 104.993879][T13892] FAT-fs (loop2): Directory bread(block 65) failed [ 104.996483][T13904] loop0: detected capacity change from 0 to 512 [ 105.034649][T13892] FAT-fs (loop2): Directory bread(block 66) failed [ 105.035104][T13904] EXT4-fs error (device loop0): ext4_orphan_get:1392: comm syz.0.5044: inode #15: comm syz.0.5044: iget: illegal inode # [ 105.041342][T13892] FAT-fs (loop2): Directory bread(block 67) failed [ 105.060447][T13892] FAT-fs (loop2): Directory bread(block 68) failed [ 105.067285][T13892] FAT-fs (loop2): Directory bread(block 69) failed [ 105.075176][T13892] FAT-fs (loop2): Directory bread(block 70) failed [ 105.085956][T13904] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.5044: couldn't read orphan inode 15 (err -117) [ 105.088244][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.107237][T13892] FAT-fs (loop2): Directory bread(block 71) failed [ 105.121707][T13892] FAT-fs (loop2): Directory bread(block 72) failed [ 105.128738][T13904] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.154577][T13892] FAT-fs (loop2): Directory bread(block 73) failed [ 105.164077][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.204563][ T29] audit: type=1400 audit(4822.280:286): avc: denied { mount } for pid=13891 comm="syz.2.5039" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 105.290272][ T29] audit: type=1326 audit(4822.354:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13928 comm="syz.0.5056" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feef1ddebe9 code=0x0 [ 105.331664][T13932] futex_wake_op: syz.4.5058 tries to shift op by -1; fix this program [ 105.359309][T13937] loop1: detected capacity change from 0 to 512 [ 105.362394][ T29] audit: type=1400 audit(4822.354:288): avc: denied { unmount } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 105.408982][T13937] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 105.511337][T13962] loop1: detected capacity change from 0 to 1024 [ 105.548123][ T29] audit: type=1326 audit(4822.585:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13966 comm="syz.2.5075" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f84cac7ebe9 code=0x0 [ 105.584649][T13962] EXT4-fs warning (device loop1): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 105.676899][T13993] loop3: detected capacity change from 0 to 512 [ 105.697944][T13993] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5087: bg 0: block 288: padding at end of block bitmap is not set [ 105.721786][T13993] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 105.732818][T13993] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.5087: attempt to clear invalid blocks 1024 len 1 [ 105.754613][T14000] loop1: detected capacity change from 0 to 512 [ 105.757655][T14008] loop2: detected capacity change from 0 to 512 [ 105.761327][T14000] EXT4-fs: Ignoring removed oldalloc option [ 105.767216][T14002] loop0: detected capacity change from 0 to 512 [ 105.773458][T14004] loop4: detected capacity change from 0 to 512 [ 105.787056][T14002] EXT4-fs: Ignoring removed mblk_io_submit option [ 105.793151][T14000] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 105.794130][T14004] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 105.802618][T14000] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 105.822303][T14008] EXT4-fs (loop2): Invalid log block size: 7 [ 105.825477][T13993] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.5087: invalid indirect mapped block 1819239214 (level 0) [ 105.847241][T14004] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5090: bg 0: block 384: padding at end of block bitmap is not set [ 105.881090][T14002] EXT4-fs (loop0): failed to initialize system zone (-117) [ 105.901413][T14002] EXT4-fs (loop0): mount failed [ 105.906445][T13993] EXT4-fs (loop3): 1 truncate cleaned up [ 105.930537][T14004] EXT4-fs (loop4): Remounting filesystem read-only [ 105.943838][T13993] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.963160][T14004] EXT4-fs (loop4): 1 truncate cleaned up [ 105.969319][T14004] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.042032][T14033] loop2: detected capacity change from 0 to 1024 [ 106.049217][T14033] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 106.060156][T14033] EXT4-fs (loop2): group descriptors corrupted! [ 106.082718][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.091097][T14036] tmpfs: Bad value for 'mpol' [ 106.106905][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.118692][T14040] loop0: detected capacity change from 0 to 512 [ 106.134957][T14040] EXT4-fs (loop0): The Hurd can't support 64-bit file systems [ 106.363571][T14086] loop4: detected capacity change from 0 to 512 [ 106.377663][T14086] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843e028, mo2=0002] [ 106.389288][T14090] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 106.404081][T14086] System zones: 1-12 [ 106.421991][T14098] loop1: detected capacity change from 0 to 512 [ 106.428600][T14086] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.5133: invalid indirect mapped block 8 (level 2) [ 106.435015][T14101] loop2: detected capacity change from 0 to 512 [ 106.462088][T14086] EXT4-fs (loop4): Remounting filesystem read-only [ 106.469074][T14101] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.5140: invalid indirect mapped block 4294967295 (level 1) [ 106.469298][T14086] EXT4-fs (loop4): 1 truncate cleaned up [ 106.489413][T14086] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.490197][T14098] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.5138: casefold flag without casefold feature [ 106.524740][T14098] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.5138: couldn't read orphan inode 15 (err -117) [ 106.536880][T14101] EXT4-fs (loop2): Remounting filesystem read-only [ 106.562965][T14101] EXT4-fs (loop2): 2 truncates cleaned up [ 106.570608][T14101] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.584064][T14098] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.601615][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.627576][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.664883][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.692686][T14124] loop1: detected capacity change from 0 to 1024 [ 106.710930][T14124] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 106.761200][T14124] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 106.764679][T14131] loop2: detected capacity change from 0 to 2048 [ 106.780118][T14124] EXT4-fs error (device loop1): ext4_get_journal_inode:5796: comm syz.1.5151: inode #100663328: comm syz.1.5151: iget: illegal inode # [ 106.799517][T14131] FAT-fs (loop2): bogus sectors per cluster 248 [ 106.802085][T14140] loop4: detected capacity change from 0 to 512 [ 106.805958][T14131] FAT-fs (loop2): Can't find a valid FAT filesystem [ 106.827336][T14124] EXT4-fs (loop1): Remounting filesystem read-only [ 106.829865][T14140] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 106.833910][T14124] EXT4-fs (loop1): no journal found [ 106.845622][T14124] EXT4-fs (loop1): can't get journal size [ 106.879471][T14124] EXT4-fs (loop1): failed to initialize system zone (-22) [ 106.889988][T14124] EXT4-fs (loop1): mount failed [ 107.060372][T14176] tmpfs: Bad value for 'mpol' [ 107.161195][T14190] loop2: detected capacity change from 0 to 1024 [ 107.214665][T14190] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.5183: Failed to acquire dquot type 0 [ 107.249959][T14190] EXT4-fs (loop2): 1 truncate cleaned up [ 107.256041][T14190] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.275799][T14211] loop0: detected capacity change from 0 to 2048 [ 107.308739][T14220] loop1: detected capacity change from 0 to 1024 [ 107.317012][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.333790][T14220] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 107.345408][T14220] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 107.368509][T14220] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 107.377169][T14220] EXT4-fs (loop1): orphan cleanup on readonly fs [ 107.383812][T14220] EXT4-fs error (device loop1): ext4_read_inode_bitmap:167: comm syz.1.5197: Inode bitmap for bg 0 marked uninitialized [ 107.401576][T14220] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 107.418089][T14227] loop4: detected capacity change from 0 to 1756 [ 107.442510][T14233] loop2: detected capacity change from 0 to 512 [ 107.449113][T14233] EXT4-fs: Ignoring removed oldalloc option [ 107.455231][T14233] EXT4-fs: Ignoring removed mblk_io_submit option [ 107.484972][T14233] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 107.494102][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.521314][T14233] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=2840c01c, mo2=0102] [ 107.547893][T14233] System zones: 0-2, 18-18, 34-34 [ 107.553204][T14233] EXT4-fs (loop2): orphan cleanup on readonly fs [ 107.562169][T14233] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.5198: Failed to acquire dquot type 1 [ 107.576237][T14233] EXT4-fs (loop2): 1 truncate cleaned up [ 107.621053][T14233] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 107.647113][T14261] SELinux: security_context_str_to_sid () failed with errno=-22 [ 107.684559][T14270] loop1: detected capacity change from 0 to 512 [ 107.723723][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.743683][T14281] loop0: detected capacity change from 0 to 1024 [ 107.750184][T14270] EXT4-fs error (device loop1): ext4_quota_enable:7120: comm syz.1.5221: Bad quota inum: 1, type: 2 [ 107.765478][T14281] EXT4-fs: inline encryption not supported [ 107.783361][T14270] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 107.814283][T14270] EXT4-fs (loop1): mount failed [ 107.844076][T14281] EXT4-fs (loop0): orphan cleanup on readonly fs [ 107.869908][T14281] EXT4-fs (loop0): 1 truncate cleaned up [ 107.886691][T14281] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 107.931028][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.949816][T14306] random: crng reseeded on system resumption [ 108.032282][T14323] loop0: detected capacity change from 0 to 512 [ 108.057543][T14323] EXT4-fs: Ignoring removed mblk_io_submit option [ 108.084793][T14323] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 108.099190][T14329] loop1: detected capacity change from 0 to 2048 [ 108.107125][T14323] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c01c, mo2=0102] [ 108.115158][T14323] System zones: 0-2, 18-18, 34-34 [ 108.120562][T14323] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.5246: iget: bad i_size value: 360287970189639680 [ 108.136031][T14323] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.5246: couldn't read orphan inode 15 (err -117) [ 108.159090][T14323] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.172133][T14342] loop3: detected capacity change from 0 to 128 [ 108.179661][T14342] FAT-fs (loop3): bogus sectors per cluster 7 [ 108.185766][T14342] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 108.194945][T14342] FAT-fs (loop3): Can't find a valid FAT filesystem [ 108.206621][T14338] loop4: detected capacity change from 0 to 8192 [ 108.229800][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.267996][ T3294] loop4: p1 p3 [ 108.272525][ T3294] loop4: p1 start 51379968 is beyond EOD, truncated [ 108.279304][ T3294] loop4: p3 size 100663552 extends beyond EOD, truncated [ 108.288029][T14338] loop4: p1 p3 [ 108.314072][T14338] loop4: p1 start 51379968 is beyond EOD, truncated [ 108.320775][T14338] loop4: p3 size 100663552 extends beyond EOD, truncated [ 108.386852][ T6681] udevd[6681]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 108.437971][ T6681] udevd[6681]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 108.519913][T14394] loop2: detected capacity change from 0 to 1024 [ 108.531364][T14394] EXT4-fs (loop2): bad geometry: first data block is 0 with a 1k block and cluster size [ 108.757930][T14432] loop0: detected capacity change from 0 to 512 [ 108.764630][T14432] journal_path: not usable as path [ 108.769806][T14432] EXT4-fs: error: could not find journal device path [ 108.877206][T14450] loop2: detected capacity change from 0 to 512 [ 108.900740][T14453] loop4: detected capacity change from 0 to 512 [ 108.910931][T14454] loop0: detected capacity change from 0 to 256 [ 108.917675][T14454] vfat: Bad value for 'check' [ 108.926845][T14450] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.5309: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 108.952270][T14453] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 108.962824][T14453] EXT4-fs (loop4): orphan cleanup on readonly fs [ 108.969733][T14453] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 108.986331][T14463] 9pnet_virtio: no channels available for device 127.0.0.1 [ 108.993642][T14450] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.5309: Bad quota inode: 3, type: 0 [ 109.016504][T14453] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 109.024845][T14450] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 109.040734][T14450] EXT4-fs (loop2): mount failed [ 109.045726][T14453] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #13: comm syz.4.5310: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 109.089535][T14453] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.5310: couldn't read orphan inode 13 (err -117) [ 109.101970][T14453] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 109.159174][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.256943][T14492] loop0: detected capacity change from 0 to 512 [ 109.296517][T14492] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 109.315967][T14492] EXT4-fs (loop0): 1 truncate cleaned up [ 109.339332][T14506] loop2: detected capacity change from 0 to 1024 [ 109.359424][T14511] loop1: detected capacity change from 0 to 1024 [ 109.362999][T14506] EXT4-fs: Invalid want_extra_isize 1914 [ 109.369047][T14512] loop3: detected capacity change from 0 to 512 [ 109.414703][T14516] loop0: detected capacity change from 0 to 512 [ 109.438120][T14516] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 109.470544][T14527] tmpfs: Bad value for 'mpol' [ 109.485943][T14525] loop4: detected capacity change from 0 to 2048 [ 109.508536][T14529] loop3: detected capacity change from 0 to 1024 [ 109.549601][T14524] loop2: detected capacity change from 0 to 8192 [ 109.555253][T14531] loop1: detected capacity change from 0 to 2048 [ 109.572531][T14535] loop0: detected capacity change from 0 to 512 [ 109.584884][ T6685] loop2: p2 p3 p4 [ 109.588701][ T6685] loop2: p2 size 327551 extends beyond EOD, truncated [ 109.606229][ T6685] loop2: p3 size 16776960 extends beyond EOD, truncated [ 109.629736][ T6685] loop2: p4 size 3599499392 extends beyond EOD, truncated [ 109.659475][T14524] loop2: p2 p3 p4 [ 109.663373][T14544] loop4: detected capacity change from 0 to 1024 [ 109.671636][T14524] loop2: p2 size 327551 extends beyond EOD, truncated [ 109.699027][T14524] loop2: p3 size 16776960 extends beyond EOD, truncated [ 109.709328][T14524] loop2: p4 size 3599499392 extends beyond EOD, truncated [ 109.745336][T14553] loop3: detected capacity change from 0 to 512 [ 109.757100][T14557] loop1: detected capacity change from 0 to 1024 [ 109.775617][T14558] loop0: detected capacity change from 0 to 512 [ 109.849809][T14566] loop4: detected capacity change from 0 to 512 [ 109.862828][ T6681] udevd[6681]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 109.878143][T14570] loop2: detected capacity change from 0 to 512 [ 109.884917][ T6685] udevd[6685]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 109.898809][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 109.910461][T14568] loop1: detected capacity change from 0 to 4096 [ 109.928959][T14572] loop3: detected capacity change from 0 to 4096 [ 109.986156][ T6681] udevd[6681]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 110.005691][ T5791] udevd[5791]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 110.009895][T14586] loop0: detected capacity change from 0 to 1024 [ 110.025410][T14584] loop1: detected capacity change from 0 to 1024 [ 110.040305][ T3283] udevd[3283]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 110.074442][T14593] loop4: detected capacity change from 0 to 512 [ 110.089868][T14595] loop3: detected capacity change from 0 to 512 [ 110.119254][T14597] loop2: detected capacity change from 0 to 2048 [ 110.195526][T14607] loop0: detected capacity change from 0 to 512 [ 110.241222][T14617] loop3: detected capacity change from 0 to 2048 [ 110.283979][T14615] loop1: detected capacity change from 0 to 512 [ 110.290717][T14621] loop2: detected capacity change from 0 to 4096 [ 110.363590][T14633] loop0: detected capacity change from 0 to 1756 [ 110.376695][T14628] loop4: detected capacity change from 0 to 2048 [ 110.399181][T14635] loop3: detected capacity change from 0 to 2364 [ 110.429732][T14640] loop3: detected capacity change from 0 to 736 [ 110.461750][T14638] loop2: detected capacity change from 0 to 1764 [ 110.489769][T14642] loop1: detected capacity change from 0 to 132 [ 110.520645][T14645] loop0: detected capacity change from 0 to 760 [ 110.534815][T14648] loop2: detected capacity change from 0 to 128 [ 110.549169][T14646] loop3: detected capacity change from 0 to 1768 [ 110.551515][T14650] loop4: detected capacity change from 0 to 1764 [ 110.617941][T14656] loop1: detected capacity change from 0 to 512 [ 110.630767][T14655] loop0: detected capacity change from 0 to 256 [ 110.650933][T14659] loop2: detected capacity change from 0 to 2048 [ 110.659778][T14662] loop3: detected capacity change from 0 to 128 [ 110.694685][T14664] loop0: detected capacity change from 0 to 256 [ 110.734417][T14668] loop1: detected capacity change from 0 to 512 [ 110.743201][T14669] loop3: detected capacity change from 0 to 2048 [ 110.761974][T14661] loop4: detected capacity change from 0 to 8192 [ 110.762862][T14670] loop2: detected capacity change from 0 to 2048 [ 110.786151][T14672] loop0: detected capacity change from 0 to 512 [ 110.876414][T14675] loop2: detected capacity change from 0 to 512 [ 110.900516][T14680] loop4: detected capacity change from 0 to 128 [ 110.909726][T14682] loop0: detected capacity change from 0 to 512 [ 111.027021][T14690] loop0: detected capacity change from 0 to 128 [ 111.035988][T14688] loop4: detected capacity change from 0 to 2048 [ 111.044000][T14684] loop3: detected capacity change from 0 to 2048 [ 111.127866][T14694] loop0: detected capacity change from 0 to 128 [ 111.203246][T14696] loop4: detected capacity change from 0 to 2048 [ 111.237899][T14700] loop0: detected capacity change from 0 to 256 [ 111.292458][T14677] loop1: detected capacity change from 0 to 32768 [ 111.296496][T14698] loop3: detected capacity change from 0 to 8192 [ 111.303139][T14704] loop4: detected capacity change from 0 to 512 [ 111.345347][T14702] loop0: detected capacity change from 0 to 2048 [ 111.375346][T14706] loop1: detected capacity change from 0 to 128 [ 111.425241][T14710] loop4: detected capacity change from 0 to 512 [ 111.462333][T14712] loop3: detected capacity change from 0 to 512 [ 111.494808][T14714] loop0: detected capacity change from 0 to 128 [ 111.528887][T14717] loop1: detected capacity change from 0 to 256 [ 111.540977][T14718] loop4: detected capacity change from 0 to 512 [ 111.563310][T14720] loop3: detected capacity change from 0 to 128 [ 111.618264][T14722] loop0: detected capacity change from 0 to 2048 [ 111.656432][T14727] loop3: detected capacity change from 0 to 2048 [ 111.720530][ T6681] loop3: p1 p2 p3 [ 111.730584][T14727] loop3: p1 p2 p3 [ 111.814435][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 111.814556][ T6685] udevd[6685]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 112.003436][T14728] loop4: detected capacity change from 0 to 32768 [ 112.023961][T14738] loop3: detected capacity change from 0 to 512 [ 112.086758][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 112.086773][ T29] audit: type=1400 audit(4828.631:293): avc: denied { add_name } for pid=14737 comm="syz.3.5431" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 112.127922][T14746] loop4: detected capacity change from 0 to 512 [ 112.147061][ T29] audit: type=1400 audit(4828.631:294): avc: denied { create } for pid=14737 comm="syz.3.5431" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 112.166864][ T29] audit: type=1400 audit(4828.631:295): avc: denied { read write } for pid=14737 comm="syz.3.5431" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 112.189039][ T29] audit: type=1400 audit(4828.631:296): avc: denied { open } for pid=14737 comm="syz.3.5431" path="/1100/file0/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 112.225011][T14746] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #3: comm syz.4.5434: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 112.286554][T14753] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5436'. [ 112.291018][T14746] EXT4-fs error (device loop4): ext4_quota_enable:7127: comm syz.4.5434: Bad quota inode: 3, type: 0 [ 112.328318][T14746] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 112.406601][T14746] EXT4-fs (loop4): mount failed [ 112.420856][T14724] loop1: detected capacity change from 0 to 65536 [ 112.445661][T14757] loop3: detected capacity change from 0 to 128 [ 112.501470][T14759] loop3: detected capacity change from 0 to 512 [ 112.687414][ T29] audit: type=1400 audit(4829.175:297): avc: denied { setopt } for pid=14770 comm="syz.3.5446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 112.740524][ T29] audit: type=1400 audit(4829.212:298): avc: denied { create } for pid=14774 comm="syz.3.5448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 112.760729][ T29] audit: type=1400 audit(4829.231:299): avc: denied { write } for pid=14774 comm="syz.3.5448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 112.812271][T14779] netlink: 196 bytes leftover after parsing attributes in process `syz.3.5449'. [ 112.863829][ T29] audit: type=1400 audit(4829.332:300): avc: denied { write } for pid=14781 comm="syz.4.5451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 112.962751][T14792] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5456'. [ 112.973051][ T29] audit: type=1400 audit(4829.434:301): avc: denied { create } for pid=14791 comm="syz.3.5456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 112.992837][ T29] audit: type=1400 audit(4829.434:302): avc: denied { write } for pid=14791 comm="syz.3.5456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 113.124379][T14806] netlink: 116 bytes leftover after parsing attributes in process `syz.3.5462'. [ 113.842019][T14687] loop2: detected capacity change from 0 to 262144 [ 114.032111][T14905] netlink: 'syz.3.5511': attribute type 21 has an invalid length. [ 114.041354][T14906] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5510'. [ 114.106126][T14915] ieee802154 phy0 wpan0: encryption failed: -22 [ 114.114731][T14916] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5515'. [ 114.149561][T14916] netlink: 'syz.4.5515': attribute type 2 has an invalid length. [ 114.157342][T14916] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5515'. [ 114.315407][T14944] netlink: 'syz.4.5526': attribute type 13 has an invalid length. [ 114.323331][T14944] netlink: 'syz.4.5526': attribute type 17 has an invalid length. [ 114.508869][T14971] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5540'. [ 114.539661][T14973] 9p: Unknown access argument : -22 [ 114.657259][T14730] loop0: detected capacity change from 0 to 262144 [ 114.783161][T15009] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5555'. [ 114.922119][T15026] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 115.119499][T15053] vti0: entered promiscuous mode [ 115.124494][T15053] vti0: entered allmulticast mode [ 115.243889][T15073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5591'. [ 115.296309][T15080] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 115.319057][T15084] netlink: 'syz.1.5596': attribute type 2 has an invalid length. [ 115.326898][T15084] netlink: 'syz.1.5596': attribute type 1 has an invalid length. [ 115.373096][T15084] netlink: 'syz.1.5596': attribute type 1 has an invalid length. [ 115.516440][T15109] loop3: detected capacity change from 0 to 1024 [ 115.676543][T15138] netlink: 'syz.4.5621': attribute type 1 has an invalid length. [ 115.890687][T15174] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 115.927378][T15180] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 115.962810][T15187] loop1: detected capacity change from 0 to 128 [ 116.148120][T15220] : renamed from bond0 (while UP) [ 116.278167][T15243] loop2: detected capacity change from 0 to 2048 [ 116.318289][T15255] netlink: 'syz.1.5677': attribute type 10 has an invalid length. [ 116.326227][T15255] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.333423][T15255] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.360805][T15255] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.367882][T15255] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.375181][T15255] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.382326][T15255] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.387849][T15260] loop0: detected capacity change from 0 to 2048 [ 116.389096][T15243] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.5670: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 116.389327][T15243] EXT4-fs (loop2): Remounting filesystem read-only [ 116.389448][T15255] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 116.439167][ T3294] loop0: p1 < > [ 116.439180][ T3294] loop0: partition table partially beyond EOD, truncated [ 116.439246][ T3294] loop0: p1 start 524289 is beyond EOD, truncated [ 116.449898][T15260] loop0: p1 < > [ 116.449915][T15260] loop0: partition table partially beyond EOD, truncated [ 116.450018][T15260] loop0: p1 start 524289 is beyond EOD, truncated [ 116.450838][ T2992] loop0: p1 < > [ 116.450847][ T2992] loop0: partition table partially beyond EOD, truncated [ 116.450894][ T2992] loop0: p1 start 524289 is beyond EOD, truncated [ 116.478611][T15273] veth3: entered promiscuous mode [ 116.478631][T15273] veth3: entered allmulticast mode [ 116.549024][T15286] loop0: detected capacity change from 0 to 128 [ 116.558368][T15288] netlink: 'syz.4.5692': attribute type 21 has an invalid length. [ 116.765498][T15321] usb usb1: usbfs: process 15321 (syz.3.5708) did not claim interface 0 before use [ 116.881885][T15341] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.889290][T15341] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.913200][T15341] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.920631][T15341] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.403773][T15408] IPv6: NLM_F_CREATE should be specified when creating new route [ 117.484081][T15423] loop3: detected capacity change from 0 to 128 [ 117.516337][ T29] kauditd_printk_skb: 105 callbacks suppressed [ 117.516352][ T29] audit: type=1400 audit(4833.634:408): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 117.622482][ T29] audit: type=1400 audit(4833.735:409): avc: denied { setopt } for pid=15434 comm="syz.1.5766" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 117.647968][T15438] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (128) [ 117.661533][ T29] audit: type=1400 audit(4833.754:410): avc: denied { create } for pid=15441 comm="syz.2.5768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 117.680474][ T29] audit: type=1400 audit(4833.754:411): avc: denied { bind } for pid=15441 comm="syz.2.5768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 117.704230][T15444] __nla_validate_parse: 5 callbacks suppressed [ 117.704244][T15444] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5767'. [ 117.719341][T15444] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5767'. [ 117.782732][ T29] audit: type=1400 audit(4833.772:412): avc: denied { ioctl } for pid=15433 comm="syz.4.5763" path="socket:[40259]" dev="sockfs" ino=40259 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 117.828525][ T29] audit: type=1400 audit(4833.929:413): avc: denied { write } for pid=15456 comm="syz.4.5774" name="igmp6" dev="proc" ino=4026532912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 117.894560][ T29] audit: type=1400 audit(4833.966:414): avc: denied { create } for pid=15455 comm="syz.0.5775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 117.913625][ T29] audit: type=1400 audit(4833.966:415): avc: denied { getopt } for pid=15455 comm="syz.0.5775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 117.932833][ T29] audit: type=1400 audit(4833.966:416): avc: denied { kernel } for pid=15461 comm="syz.1.5776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 117.951753][ T29] audit: type=1400 audit(4833.966:417): avc: denied { write } for pid=15461 comm="syz.1.5776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 118.008842][T15480] loop1: detected capacity change from 0 to 512 [ 118.047303][T15480] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.5786: corrupted xattr block 32: bad e_name length [ 118.051759][T15490] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5789'. [ 118.072372][T15480] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 118.095164][T15480] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.5786: corrupted xattr block 32: bad e_name length [ 118.117877][T15480] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 118.118003][T15480] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.5786: corrupted xattr block 32: bad e_name length [ 118.121921][T15480] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 118.124086][T15480] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.5786: Failed to acquire dquot type 1 [ 118.190100][T15498] lo: entered promiscuous mode [ 118.191080][T15498] tunl0: entered promiscuous mode [ 118.213334][T15498] gre0: entered promiscuous mode [ 118.214281][T15498] gretap0: entered promiscuous mode [ 118.215195][T15498] erspan0: entered promiscuous mode [ 118.229030][T15498] ip_vti0: entered promiscuous mode [ 118.280280][T15506] loop1: detected capacity change from 0 to 1024 [ 118.282398][T15506] EXT4-fs: Ignoring removed nobh option [ 118.286937][T15506] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 118.296154][T15506] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #11: comm syz.1.5794: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 118.297285][T15506] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.5794: couldn't read orphan inode 11 (err -117) [ 118.301568][T15498] ip6_vti0: entered promiscuous mode [ 118.302568][T15498] sit0: entered promiscuous mode [ 118.303849][T15498] ip6tnl0: entered promiscuous mode [ 118.304772][T15498] ip6gre0: entered promiscuous mode [ 118.305687][T15498] syz_tun: entered promiscuous mode [ 118.306755][T15498] ip6gretap0: entered promiscuous mode [ 118.307707][T15498] bridge0: entered promiscuous mode [ 118.308654][T15498] vcan0: entered promiscuous mode [ 118.308938][T15498] bond0: entered promiscuous mode [ 118.309001][T15498] bond_slave_0: entered promiscuous mode [ 118.309048][T15498] bond_slave_1: entered promiscuous mode [ 118.310746][T15498] team0: entered promiscuous mode [ 118.310759][T15498] team_slave_0: entered promiscuous mode [ 118.310839][T15498] team_slave_1: entered promiscuous mode [ 118.312640][T15498] dummy0: entered promiscuous mode [ 118.313487][T15498] nlmon0: entered promiscuous mode [ 118.314576][T15498] caif0: entered promiscuous mode [ 118.314588][T15498] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 118.353010][T15512] loop3: detected capacity change from 0 to 2048 [ 118.382332][T15516] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (8) [ 118.423373][T15512] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.5800: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 118.423469][T15512] EXT4-fs (loop3): Remounting filesystem read-only [ 118.570524][T15540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5813'. [ 118.663937][T15551] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 118.665457][T15551] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 118.701167][T15557] netlink: 1080 bytes leftover after parsing attributes in process `syz.3.5821'. [ 118.774875][T15568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5827'. [ 118.998475][T15582] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 119.077534][T15597] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5842'. [ 119.086546][T15597] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5842'. [ 119.133211][T15607] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5846'. [ 119.235204][T15624] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5855'. [ 119.583850][T15690] @0: renamed from bond_slave_1 (while UP) [ 119.806366][T15730] validate_nla: 5 callbacks suppressed [ 119.806403][T15730] netlink: 'syz.3.5907': attribute type 3 has an invalid length. [ 119.834845][T15735] loop4: detected capacity change from 0 to 128 [ 119.945019][T15749] netlink: 'syz.0.5917': attribute type 27 has an invalid length. [ 120.174139][T15794] lo: entered promiscuous mode [ 120.196684][T15794] tunl0: entered promiscuous mode [ 120.211531][T15794] gre0: entered promiscuous mode [ 120.240097][T15794] gretap0: entered promiscuous mode [ 120.246303][T15794] erspan0: entered promiscuous mode [ 120.265866][T15794] ip_vti0: entered promiscuous mode [ 120.274973][T15794] ip6_vti0: entered promiscuous mode [ 120.296329][T15794] sit0: entered promiscuous mode [ 120.302442][T15794] ip6tnl0: entered promiscuous mode [ 120.315969][T15794] ip6gre0: entered promiscuous mode [ 120.322109][T15794] syz_tun: entered promiscuous mode [ 120.329105][T15794] ip6gretap0: entered promiscuous mode [ 120.343014][T15794] bridge0: entered promiscuous mode [ 120.349251][T15794] vcan0: entered promiscuous mode [ 120.354431][T15794] bond0: entered promiscuous mode [ 120.359518][T15794] bond_slave_0: entered promiscuous mode [ 120.365352][T15794] bond_slave_1: entered promiscuous mode [ 120.374217][T15794] team0: entered promiscuous mode [ 120.379481][T15794] team_slave_0: entered promiscuous mode [ 120.385344][T15794] team_slave_1: entered promiscuous mode [ 120.392797][T15794] dummy0: entered promiscuous mode [ 120.398648][T15794] nlmon0: entered promiscuous mode [ 120.405290][T15794] caif0: entered promiscuous mode [ 120.410314][T15794] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 120.426253][T15811] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.433755][T15811] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.441578][T15811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.448996][T15811] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.502881][T15831] netlink: 'syz.1.5958': attribute type 21 has an invalid length. [ 120.513706][T15832] sctp: [Deprecated]: syz.0.5957 (pid 15832) Use of int in maxseg socket option. [ 120.513706][T15832] Use struct sctp_assoc_value instead [ 120.553724][T15836] loop2: detected capacity change from 0 to 1024 [ 120.586563][T15836] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 120.604095][T15836] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 120.628566][T15848] loop4: detected capacity change from 0 to 512 [ 120.647322][T15836] EXT4-fs (loop2): invalid journal inode [ 120.654826][T15836] EXT4-fs (loop2): can't get journal size [ 120.678602][T15836] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #12: comm syz.2.5960: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 120.712264][T15848] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.5965: corrupted inode contents [ 120.734702][T15848] EXT4-fs (loop4): Remounting filesystem read-only [ 120.935644][T15909] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (1024) [ 120.944924][T15909] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 120.979519][T15915] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 121.066070][T15933] loop2: detected capacity change from 0 to 512 [ 121.079523][T15933] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 121.088075][T15935] usb usb1: usbfs: process 15935 (syz.1.6007) did not claim interface 0 before use [ 121.238319][T15965] loop0: detected capacity change from 0 to 512 [ 121.248319][T15964] loop1: detected capacity change from 0 to 512 [ 121.254730][T15965] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 121.265014][T15964] EXT4-fs (loop1): filesystem is read-only [ 121.281930][T15964] EXT4-fs (loop1): filesystem is read-only [ 121.287770][T15964] EXT4-fs (loop1): orphan cleanup on readonly fs [ 121.305136][T15964] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.6021: bad orphan inode 16 [ 121.311571][T15965] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.6022: Failed to acquire dquot type 0 [ 121.327516][T15964] ext4_test_bit(bit=15, block=3) = 0 [ 121.341336][T15978] Driver unsupported XDP return value 0 on prog (id 544) dev N/A, expect packet loss! [ 121.509311][T16002] netlink: 'syz.1.6038': attribute type 13 has an invalid length. [ 121.598816][T16002] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 121.797362][T16055] loop3: detected capacity change from 0 to 1024 [ 121.807303][T16055] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 121.839033][T16055] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 121.853362][T16055] EXT4-fs (loop3): orphan cleanup on readonly fs [ 121.870797][T16055] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 121.885350][T16055] EXT4-fs (loop3): Cannot turn on quotas: error -5 [ 121.924972][T16074] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 121.931507][T16074] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 121.939095][T16074] vhci_hcd vhci_hcd.0: Device attached [ 122.014256][T16055] EXT4-fs (loop3): 1 truncate cleaned up [ 122.026845][T16075] vhci_hcd: connection closed [ 122.027135][ T60] vhci_hcd: stop threads [ 122.036129][ T60] vhci_hcd: release socket [ 122.036148][T16098] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.040637][ T60] vhci_hcd: disconnect device [ 122.085636][T16103] loop2: detected capacity change from 0 to 512 [ 122.301472][T16139] netlink: 'syz.2.6102': attribute type 13 has an invalid length. [ 122.372913][T16153] SELinux: Context system_u:object_r:setrans_initrc_exec_t:s0 is not valid (left unmapped). [ 122.405731][T16159] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 122.414620][T16159] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 123.159423][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 123.159498][ T29] audit: type=1400 audit(4838.849:502): avc: denied { ioctl } for pid=16256 comm="syz.4.6162" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 123.231753][ T29] audit: type=1400 audit(4838.895:503): avc: denied { sqpoll } for pid=16261 comm="syz.0.6163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 123.433838][ T29] audit: type=1400 audit(4839.098:504): avc: denied { setopt } for pid=16304 comm="syz.4.6185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 123.526517][T16320] __nla_validate_parse: 20 callbacks suppressed [ 123.526532][T16320] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6192'. [ 123.547483][T16322] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6193'. [ 123.655172][T16331] netlink: 'syz.4.6198': attribute type 21 has an invalid length. [ 123.663044][T16331] netlink: 'syz.4.6198': attribute type 1 has an invalid length. [ 123.670757][T16331] netlink: 100 bytes leftover after parsing attributes in process `syz.4.6198'. [ 123.689302][T16335] netlink: 172 bytes leftover after parsing attributes in process `syz.3.6197'. [ 123.698427][T16335] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6197'. [ 123.775033][T16351] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6207'. [ 123.784255][T16351] netlink: 108 bytes leftover after parsing attributes in process `syz.0.6207'. [ 123.822981][T16351] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6207'. [ 123.909745][T16371] netlink: 'syz.4.6219': attribute type 5 has an invalid length. [ 123.927414][T16373] netlink: 9004 bytes leftover after parsing attributes in process `syz.3.6218'. [ 124.023100][ T29] audit: type=1326 audit(4839.643:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16389 comm="syz.0.6226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feef1ddebe9 code=0x7ffc0000 [ 124.092085][ T29] audit: type=1326 audit(4839.643:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16389 comm="syz.0.6226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7feef1ddebe9 code=0x7ffc0000 [ 124.099900][T16401] loop3: detected capacity change from 0 to 512 [ 124.114983][ T29] audit: type=1326 audit(4839.643:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16389 comm="syz.0.6226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feef1ddebe9 code=0x7ffc0000 [ 124.190355][T16401] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 124.211046][T16412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6237'. [ 124.232544][T16412] netlink: 'syz.0.6237': attribute type 3 has an invalid length. [ 124.240798][T16401] EXT4-fs (loop3): 1 truncate cleaned up [ 124.284378][ T29] audit: type=1400 audit(4839.883:508): avc: denied { module_request } for pid=16420 comm="syz.4.6241" kmod="rtnl-link-bridge_slave" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 124.521251][ T29] audit: type=1400 audit(4840.104:509): avc: denied { ioctl } for pid=16461 comm="syz.3.6261" path="socket:[43644]" dev="sockfs" ino=43644 ioctlcmd=0x48d7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 124.630841][T16479] cgroup: none used incorrectly [ 124.707105][T16490] loop4: detected capacity change from 0 to 512 [ 124.727342][T16490] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 124.736497][ T29] audit: type=1400 audit(4840.298:510): avc: denied { getopt } for pid=16492 comm="syz.3.6278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 124.770960][T16490] EXT4-fs (loop4): orphan cleanup on readonly fs [ 124.777761][T16490] Quota error (device loop4): find_block_dqentry: Quota for id 0 referenced but not present [ 124.787890][T16490] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.6274: Failed to acquire dquot type 1 [ 124.788660][T16500] ipvlan0: entered allmulticast mode [ 124.804593][T16500] veth0_vlan: entered allmulticast mode [ 124.832911][T16490] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6274: bg 0: block 40: padding at end of block bitmap is not set [ 124.900791][T16490] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 124.921037][T16490] EXT4-fs (loop4): 1 truncate cleaned up [ 124.957297][T16518] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 125.072163][T16534] tmpfs: Bad value for 'mpol' [ 125.163592][T16542] veth3: entered promiscuous mode [ 125.279127][T16571] netlink: 'syz.4.6313': attribute type 21 has an invalid length. [ 125.366997][T16588] netlink: 'syz.0.6321': attribute type 2 has an invalid length. [ 125.603708][T16633] loop3: detected capacity change from 0 to 512 [ 125.810576][T16675] netlink: 'syz.1.6363': attribute type 2 has an invalid length. [ 126.026577][T16718] loop0: detected capacity change from 0 to 128 [ 126.038235][T16718] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 126.079696][ T12] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 126.080980][T16713] vxcan3: entered promiscuous mode [ 126.093990][T16713] vxcan3: entered allmulticast mode [ 126.155751][T16729] batadv1: entered promiscuous mode [ 126.330482][T16759] vhci_hcd: invalid port number 96 [ 126.335635][T16759] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 126.430632][T16779] SELinux: failed to load policy [ 126.443919][T16777] random: crng reseeded on system resumption [ 126.493661][T16787] netlink: 'syz.3.6416': attribute type 17 has an invalid length. [ 126.502788][T16787] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 126.928526][T16858] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.947361][T16861] loop2: detected capacity change from 0 to 764 [ 126.990704][T16861] Symlink component flag not implemented [ 126.996583][T16861] Symlink component flag not implemented (116) [ 127.132225][T16887] netlink: 'syz.4.6464': attribute type 1 has an invalid length. [ 127.515102][T16942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.515459][T16946] loop1: detected capacity change from 0 to 764 [ 127.551294][T16946] Symlink component flag not implemented [ 127.557101][T16946] Symlink component flag not implemented (116) [ 127.736688][T16984] SELinux: Context w& is not valid (left unmapped). [ 127.742976][T16982] loop3: detected capacity change from 0 to 256 [ 127.965812][T17027] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 127.983767][T17027] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 128.097773][T17051] loop1: detected capacity change from 0 to 512 [ 128.171456][T17062] netlink: 'syz.1.6548': attribute type 9 has an invalid length. [ 128.191008][T17064] netlink: 'syz.0.6550': attribute type 5 has an invalid length. [ 128.308234][T17086] program syz.0.6560 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 128.318358][T17083] random: crng reseeded on system resumption [ 128.330356][T17088] netlink: 'syz.3.6561': attribute type 4 has an invalid length. [ 128.443866][T17113] raw_sendmsg: syz.1.6572 forgot to set AF_INET. Fix it! [ 128.467602][T17116] loop3: detected capacity change from 0 to 512 [ 128.488412][T17116] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.6575: Invalid inode bitmap blk 4 in block_group 0 [ 128.533051][T17116] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 128.595729][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 128.595742][ T29] audit: type=1400 audit(4843.870:570): avc: denied { ioctl } for pid=17139 comm="syz.1.6586" path="socket:[46550]" dev="sockfs" ino=46550 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 128.598178][ T3301] EXT4-fs unmount: 83 callbacks suppressed [ 128.598191][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.767011][ T29] audit: type=1326 audit(4844.027:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17167 comm="syz.3.6599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6651e5ebe9 code=0x7ffc0000 [ 128.809244][ T29] audit: type=1326 audit(4844.027:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17167 comm="syz.3.6599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6651e5ebe9 code=0x7ffc0000 [ 128.832710][ T29] audit: type=1326 audit(4844.027:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17167 comm="syz.3.6599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f6651e5ebe9 code=0x7ffc0000 [ 128.855601][ T29] audit: type=1326 audit(4844.027:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17167 comm="syz.3.6599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6651e5ebe9 code=0x7ffc0000 [ 128.878484][ T29] audit: type=1326 audit(4844.027:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17167 comm="syz.3.6599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6651e5ebe9 code=0x7ffc0000 [ 129.062908][ T29] audit: type=1400 audit(4844.221:576): avc: denied { write } for pid=17203 comm="syz.4.6614" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 129.085558][ T29] audit: type=1400 audit(4844.230:577): avc: denied { map } for pid=17201 comm="syz.1.6613" path="socket:[46668]" dev="sockfs" ino=46668 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 129.108748][ T29] audit: type=1400 audit(4844.230:578): avc: denied { execmem } for pid=17201 comm="syz.1.6613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 129.127615][ T29] audit: type=1400 audit(4844.230:579): avc: denied { read } for pid=17201 comm="syz.1.6613" path="socket:[46668]" dev="sockfs" ino=46668 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 129.171262][T17231] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551614) [ 129.199344][T17237] netlink: 'syz.0.6629': attribute type 2 has an invalid length. [ 129.326896][T17260] __nla_validate_parse: 25 callbacks suppressed [ 129.326912][T17260] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6640'. [ 129.357716][T17243] loop4: detected capacity change from 0 to 8192 [ 129.615277][T17314] netlink: 'syz.3.6668': attribute type 13 has an invalid length. [ 129.680790][T17329] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 129.688214][T17329] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 129.695474][T17329] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 129.712886][T17332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6677'. [ 129.721786][T17332] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6677'. [ 129.749544][T17334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6679'. [ 129.758519][T17334] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6679'. [ 129.772168][T17337] netlink: 22 bytes leftover after parsing attributes in process `syz.0.6680'. [ 129.816349][T17344] netlink: 29 bytes leftover after parsing attributes in process `syz.2.6683'. [ 129.886444][T17358] netlink: 188 bytes leftover after parsing attributes in process `syz.0.6689'. [ 129.952812][T17370] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 129.976766][T17373] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 130.017823][T17383] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6702'. [ 130.093704][T17389] gtp0: entered promiscuous mode [ 130.098721][T17389] gtp0: entered allmulticast mode [ 130.599752][T17465] random: crng reseeded on system resumption [ 130.663399][T17477] loop2: detected capacity change from 0 to 164 [ 130.673297][T17477] Unsupported NM flag settings (8) [ 130.703909][T17482] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6752'. [ 130.746939][T17489] validate_nla: 3 callbacks suppressed [ 130.746953][T17489] netlink: 'syz.3.6753': attribute type 13 has an invalid length. [ 130.768693][T17492] process 'syz.0.6755' launched '/dev/fd/3' with NULL argv: empty string added [ 130.782977][T17489] erspan0: refused to change device tx_queue_len [ 130.857121][T17509] netdevsim netdevsim2: Direct firmware load for .. failed with error -2 [ 130.886631][T17515] netlink: 'syz.4.6766': attribute type 14 has an invalid length. [ 131.130323][T17565] bond1: entered promiscuous mode [ 131.135686][T17565] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.218133][T17579] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 131.228813][ T12] bond0: (slave bond_slave_0): interface is now down [ 131.235667][ T12] bond0: (slave bond_slave_1): interface is now down [ 131.264331][ T12] bond0: now running without any active interface! [ 131.382835][T17599] netlink: 'syz.0.6808': attribute type 10 has an invalid length. [ 131.418157][T17607] loop1: detected capacity change from 0 to 512 [ 131.469928][T17607] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.6812: bg 0: block 5: invalid block bitmap [ 131.517934][T17607] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 131.562963][T17607] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.6812: invalid indirect mapped block 3 (level 2) [ 131.589865][T17607] EXT4-fs (loop1): 2 truncates cleaned up [ 131.612083][T17607] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.684041][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.782807][T17667] loop4: detected capacity change from 0 to 512 [ 131.804491][T17667] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 131.850134][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.036485][T17697] netdevsim netdevsim4: Direct firmware load for .. failed with error -2 [ 132.348506][ T60] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.366116][ T60] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.394977][ T60] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.403815][T17747] netlink: 'syz.3.6880': attribute type 26 has an invalid length. [ 132.430563][ T60] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.599796][T17775] loop4: detected capacity change from 0 to 1024 [ 132.638319][T17775] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.673749][T17780] loop3: detected capacity change from 0 to 1764 [ 132.771545][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.905948][T17819] netlink: 'syz.3.6913': attribute type 10 has an invalid length. [ 132.939068][T17819] team0: Device hsr_slave_0 failed to register rx_handler [ 132.993475][T17829] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.015040][T17829] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 133.159908][T17854] netlink: 'syz.4.6930': attribute type 21 has an invalid length. [ 133.277223][ T56] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.313909][ T56] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.347327][ T56] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.369853][ T56] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.392132][T17882] netlink: 'syz.3.6944': attribute type 1 has an invalid length. [ 133.420387][T17888] program syz.0.6948 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 133.435686][T17888] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 133.491684][T17898] netlink: 'syz.4.6952': attribute type 1 has an invalid length. [ 133.521572][T17900] netlink: 'syz.0.6963': attribute type 8 has an invalid length. [ 133.541724][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.584465][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.595763][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.635461][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.695157][T17923] SELinux: Context is not valid (left unmapped). [ 133.888892][T17948] netlink: 'syz.0.6973': attribute type 29 has an invalid length. [ 134.025313][ T29] kauditd_printk_skb: 9336 callbacks suppressed [ 134.025406][ T29] audit: type=1326 audit(4848.873:9913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17654 comm="syz.2.6835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84cac7ebe9 code=0x7ff00000 [ 134.054788][ T29] audit: type=1326 audit(4848.873:9914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17654 comm="syz.2.6835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84cac7ebe9 code=0x7ff00000 [ 134.077799][ T29] audit: type=1326 audit(4848.873:9915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17654 comm="syz.2.6835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84cac7ebe9 code=0x7ff00000 [ 134.100785][ T29] audit: type=1326 audit(4848.873:9916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17654 comm="syz.2.6835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84cac7ebe9 code=0x7ff00000 [ 134.123796][ T29] audit: type=1326 audit(4848.873:9917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17654 comm="syz.2.6835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84cac7ebe9 code=0x7ff00000 [ 134.146791][ T29] audit: type=1326 audit(4848.873:9918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17654 comm="syz.2.6835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84cac7ebe9 code=0x7ff00000 [ 134.169827][ T29] audit: type=1326 audit(4848.873:9919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17654 comm="syz.2.6835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84cac7ebe9 code=0x7ff00000 [ 134.192777][ T29] audit: type=1326 audit(4848.873:9920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17654 comm="syz.2.6835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84cac7ebe9 code=0x7ff00000 [ 134.215811][ T29] audit: type=1326 audit(4848.873:9921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17654 comm="syz.2.6835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84cac7ebe9 code=0x7ff00000 [ 134.238804][ T29] audit: type=1326 audit(4848.873:9922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17654 comm="syz.2.6835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84cac7ebe9 code=0x7ff00000 [ 134.331667][T17990] loop0: detected capacity change from 0 to 512 [ 134.359156][T17990] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 134.441879][T17990] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.6995: invalid indirect mapped block 2683928664 (level 1) [ 134.465993][T17990] EXT4-fs (loop0): Remounting filesystem read-only [ 134.472600][T17990] EXT4-fs (loop0): 1 truncate cleaned up [ 134.478776][T17990] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.514985][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.809778][T18053] __nla_validate_parse: 23 callbacks suppressed [ 134.809794][T18053] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7027'. [ 134.888107][T18065] kernel read not supported for file /!selinuxwk1m9ɞ*T#jYmVvm(p-QZ#{ (pid: 18065 comm: syz.3.7032) [ 134.895555][T18063] vxcan3: entered promiscuous mode [ 134.906314][T18063] vxcan3: entered allmulticast mode [ 135.141385][T18103] team0: Device dummy0 is up. Set it down before adding it as a team port [ 135.150987][T18107] netlink: 272 bytes leftover after parsing attributes in process `syz.4.7053'. [ 135.323499][T18139] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7069'. [ 135.332583][T18139] tc_dump_action: action bad kind [ 135.400815][T18150] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5) [ 135.527527][T18176] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7087'. [ 135.628545][T18192] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7096'. [ 135.649059][T18192] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7096'. [ 135.695398][T18197] usb usb8: usbfs: process 18197 (syz.3.7097) did not claim interface 0 before use [ 135.947932][T18243] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7119'. [ 136.172023][T18263] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7129'. [ 136.205725][T18267] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7131'. [ 136.315076][T18280] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 136.352022][T18284] loop0: detected capacity change from 0 to 2048 [ 136.378539][T18284] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.383426][T18293] validate_nla: 6 callbacks suppressed [ 136.383493][T18293] netlink: 'syz.2.7142': attribute type 21 has an invalid length. [ 136.482045][T18302] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 136.489115][T18302] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 136.540080][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.585812][T18314] loop3: detected capacity change from 0 to 128 [ 136.586309][T18310] bridge_slave_0: left allmulticast mode [ 136.598044][T18310] bridge_slave_0: left promiscuous mode [ 136.603822][T18310] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.694331][T18310] bridge_slave_1: left allmulticast mode [ 136.700045][T18310] bridge_slave_1: left promiscuous mode [ 136.705693][T18310] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.706137][T18328] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7160'. [ 136.768628][T18334] netlink: 'syz.3.7163': attribute type 1 has an invalid length. [ 136.776406][T18334] netlink: 'syz.3.7163': attribute type 3 has an invalid length. [ 136.786394][T18310] bond0: (slave bond_slave_0): Releasing backup interface [ 136.794537][T18310] bond_slave_0: left promiscuous mode [ 136.816549][T18310] bond0: (slave bond_slave_1): Releasing backup interface [ 136.847471][T18310] bond_slave_1: left promiscuous mode [ 136.877003][T18310] team_slave_0: left promiscuous mode [ 136.887513][T18310] team0: Port device team_slave_0 removed [ 136.896190][T18310] team_slave_1: left promiscuous mode [ 136.904871][T18310] team0: Port device team_slave_1 removed [ 136.939521][T18310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.947016][T18310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.969973][T18310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.977504][T18310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.000212][T18363] netlink: 'syz.0.7177': attribute type 10 has an invalid length. [ 137.044538][T18363] batman_adv: batadv0: Adding interface: netdevsim1 [ 137.051147][T18363] batman_adv: batadv0: The MTU of interface netdevsim1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.076731][T18363] batman_adv: batadv0: Not using interface netdevsim1 (retrying later): interface not active [ 137.259516][T18398] netlink: 'syz.1.7194': attribute type 21 has an invalid length. [ 137.325961][T18409] loop1: detected capacity change from 0 to 512 [ 137.334706][T18409] EXT4-fs: Ignoring removed orlov option [ 137.355064][T18409] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 137.379348][T18409] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 137.411531][T18409] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.7201: corrupted in-inode xattr: e_value size too large [ 137.454921][T18409] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.7201: couldn't read orphan inode 15 (err -117) [ 137.472986][T18409] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.518654][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.543430][T18433] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 137.584661][T18441] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 137.766610][T18471] netlink: 'syz.1.7223': attribute type 9 has an invalid length. [ 137.774427][T18471] netlink: 'syz.1.7223': attribute type 6 has an invalid length. [ 138.255334][T18562] 8021q: VLANs not supported on lo [ 138.330956][T18576] loop3: detected capacity change from 0 to 512 [ 138.371250][T18576] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.444189][T18594] 8021q: VLANs not supported on lo [ 138.458802][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.722469][T18626] SELinux: policydb string does not match my string SE Linux [ 138.744144][T18626] SELinux: failed to load policy [ 138.846555][T18640] netlink: 'syz.3.7291': attribute type 10 has an invalid length. [ 138.870476][T18640] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.901099][T18640] bridge_slave_1: left allmulticast mode [ 138.907014][T18640] bridge_slave_1: left promiscuous mode [ 138.912665][T18640] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.947939][T18640] : (slave bridge_slave_1): Enslaving as an active interface with an up link [ 139.040946][ T3308] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 139.051924][ T3308] CPU: 1 UID: 0 PID: 3308 Comm: syz-executor Tainted: G W 6.17.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 139.051961][ T3308] Tainted: [W]=WARN [ 139.051967][ T3308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 139.051980][ T3308] Call Trace: [ 139.051986][ T3308] [ 139.051993][ T3308] __dump_stack+0x1d/0x30 [ 139.052015][ T3308] dump_stack_lvl+0xe8/0x140 [ 139.052034][ T3308] dump_stack+0x15/0x1b [ 139.052060][ T3308] dump_header+0x81/0x220 [ 139.052087][ T3308] oom_kill_process+0x342/0x400 [ 139.052259][ T3308] out_of_memory+0x979/0xb80 [ 139.052292][ T3308] try_charge_memcg+0x5e6/0x9e0 [ 139.052362][ T3308] charge_memcg+0x51/0xc0 [ 139.052453][ T3308] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 139.052476][ T3308] __read_swap_cache_async+0x1df/0x350 [ 139.052525][ T3308] swap_cluster_readahead+0x277/0x3e0 [ 139.052563][ T3308] swapin_readahead+0xde/0x6f0 [ 139.052649][ T3308] ? __filemap_get_folio+0x4f7/0x6b0 [ 139.052756][ T3308] ? swap_cache_get_folio+0x77/0x200 [ 139.052783][ T3308] do_swap_page+0x301/0x2430 [ 139.052840][ T3308] ? finish_task_switch+0xad/0x2b0 [ 139.052859][ T3308] ? __pfx_default_wake_function+0x10/0x10 [ 139.052879][ T3308] handle_mm_fault+0x9a5/0x2c20 [ 139.052916][ T3308] do_user_addr_fault+0x636/0x1090 [ 139.052948][ T3308] ? fpregs_restore_userregs+0xe2/0x1d0 [ 139.053007][ T3308] ? switch_fpu_return+0xe/0x20 [ 139.053053][ T3308] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 139.053081][ T3308] exc_page_fault+0x62/0xa0 [ 139.053160][ T3308] asm_exc_page_fault+0x26/0x30 [ 139.053226][ T3308] RIP: 0033:0x7f84cacb1465 [ 139.053246][ T3308] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d fe 70 1c 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 139.053261][ T3308] RSP: 002b:00007ffd2f124538 EFLAGS: 00010246 [ 139.053281][ T3308] RAX: 0000000000000000 RBX: 0000000000000b04 RCX: 00007f84cacb1463 [ 139.053293][ T3308] RDX: 00007ffd2f124550 RSI: 0000000000000000 RDI: 0000000000000000 [ 139.053304][ T3308] RBP: 00007ffd2f1245bc R08: 0000000003765586 R09: 0000000000000000 [ 139.053370][ T3308] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 139.053384][ T3308] R13: 00000000000927c0 R14: 000000000002115c R15: 00007ffd2f124610 [ 139.053403][ T3308] [ 139.053410][ T3308] memory: usage 307200kB, limit 307200kB, failcnt 2742 [ 139.286737][ T3308] memory+swap: usage 108184kB, limit 9007199254740988kB, failcnt 0 [ 139.294662][ T3308] kmem: usage 91656kB, limit 9007199254740988kB, failcnt 0 [ 139.301906][ T3308] Memory cgroup stats for /syz2: [ 139.302965][ T3308] cache 0 [ 139.310916][ T3308] rss 16384 [ 139.314026][ T3308] shmem 0 [ 139.317229][ T3308] mapped_file 0 [ 139.320854][ T3308] dirty 0 [ 139.323782][ T3308] writeback 0 [ 139.327090][ T3308] workingset_refault_anon 16 [ 139.331747][ T3308] workingset_refault_file 53 [ 139.336355][ T3308] swap 139264 [ 139.339646][ T3308] swapcached 20480 [ 139.343387][ T3308] pgpgin 144773 [ 139.346885][ T3308] pgpgout 144759 [ 139.350492][ T3308] pgfault 178119 [ 139.354073][ T3308] pgmajfault 11 [ 139.357734][ T3308] inactive_anon 0 [ 139.361408][ T3308] active_anon 24576 [ 139.365257][ T3308] inactive_file 0 [ 139.368875][ T3308] active_file 32768 [ 139.372872][ T3308] unevictable 0 [ 139.376319][ T3308] hierarchical_memory_limit 314572800 [ 139.381732][ T3308] hierarchical_memsw_limit 9223372036854771712 [ 139.387997][ T3308] total_cache 0 [ 139.391529][ T3308] total_rss 16384 [ 139.395221][ T3308] total_shmem 0 [ 139.398703][ T3308] total_mapped_file 0 [ 139.402667][ T3308] total_dirty 0 [ 139.406278][ T3308] total_writeback 0 [ 139.410154][ T3308] total_workingset_refault_anon 16 [ 139.415329][ T3308] total_workingset_refault_file 53 [ 139.420425][ T3308] total_swap 139264 [ 139.424268][ T3308] total_swapcached 20480 [ 139.428726][ T3308] total_pgpgin 144773 [ 139.432840][ T3308] total_pgpgout 144759 [ 139.436987][ T3308] total_pgfault 178119 [ 139.441113][ T3308] total_pgmajfault 11 [ 139.445242][ T3308] total_inactive_anon 0 [ 139.449499][ T3308] total_active_anon 24576 [ 139.453963][ T3308] total_inactive_file 0 [ 139.458164][ T3308] total_active_file 32768 [ 139.462526][ T3308] total_unevictable 0 [ 139.466522][ T3308] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.7258,pid=18566,uid=0 [ 139.481261][ T3308] Memory cgroup out of memory: Killed process 18566 (syz.2.7258) total-vm:95812kB, anon-rss:1072kB, file-rss:21796kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 139.501436][ T29] kauditd_printk_skb: 3337 callbacks suppressed [ 139.501516][ T29] audit: type=1400 audit(4853.941:13260): avc: denied { create } for pid=18676 comm="syz.0.7310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 139.534684][T18687] openvswitch: netlink: Flow actions attr not present in new flow. [ 139.545629][ T29] audit: type=1400 audit(4853.968:13261): avc: denied { write } for pid=18676 comm="syz.0.7310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 139.565816][ T29] audit: type=1400 audit(4853.978:13262): avc: denied { write } for pid=18690 comm="syz.4.7317" name="ip_mr_cache" dev="proc" ino=4026532870 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 139.620498][T18701] IPv6: Can't replace route, no match found [ 139.697919][ T29] audit: type=1400 audit(4854.098:13263): avc: denied { create } for pid=18710 comm="syz.0.7326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 139.717213][ T29] audit: type=1400 audit(4854.107:13264): avc: denied { ioctl } for pid=18710 comm="syz.0.7326" path="socket:[50053]" dev="sockfs" ino=50053 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 139.741638][ T29] audit: type=1400 audit(4854.116:13265): avc: denied { create } for pid=18715 comm="syz.2.7328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 139.760899][ T29] audit: type=1400 audit(4854.116:13266): avc: denied { getopt } for pid=18715 comm="syz.2.7328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 139.883710][ T29] audit: type=1400 audit(4854.181:13267): avc: denied { ioctl } for pid=18717 comm="syz.2.7330" path="socket:[51414]" dev="sockfs" ino=51414 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 139.908371][ T29] audit: type=1400 audit(4854.236:13268): avc: denied { bpf } for pid=18727 comm="syz.0.7336" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 139.928546][ T29] audit: type=1400 audit(4854.273:13269): avc: denied { tracepoint } for pid=18736 comm="syz.2.7340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 140.052437][T18766] netlink: 'syz.4.7352': attribute type 10 has an invalid length. [ 140.077944][T18771] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 140.077944][T18771] program syz.2.7354 not setting count and/or reply_len properly [ 140.087738][T18766] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 140.278241][T18805] syz.1.7373: attempt to access beyond end of device [ 140.278241][T18805] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 140.317606][T18812] __nla_validate_parse: 17 callbacks suppressed [ 140.317620][T18812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7375'. [ 140.351472][T18816] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7377'. [ 140.373754][T18816] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7377'. [ 140.382810][T18816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7377'. [ 140.574252][T18840] syz.2.7390: attempt to access beyond end of device [ 140.574252][T18840] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 140.809149][T18883] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=9299 sclass=netlink_audit_socket pid=18883 comm=syz.4.7410 [ 140.986278][T18917] netlink: 'syz.2.7427': attribute type 21 has an invalid length. [ 140.994453][T18917] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7427'. [ 141.088770][T18935] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7435'. [ 141.105458][T18940] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7437'. [ 141.114438][T18940] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7437'. [ 141.161604][T18948] tc_dump_action: action bad kind [ 141.261664][T18967] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7452'. [ 141.365486][T18988] netlink: 55 bytes leftover after parsing attributes in process `syz.1.7462'. [ 141.388992][T18992] loop4: detected capacity change from 0 to 512 [ 141.437425][T18992] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #11: comm syz.4.7465: missing EA_INODE flag [ 141.449313][T19004] bond0: (slave bridge0): Releasing backup interface [ 141.460377][T19004] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.482226][T18992] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.7465: error while reading EA inode 11 err=-117 [ 141.488277][T19004] bridge_slave_0: left allmulticast mode [ 141.500213][T19004] bridge_slave_0: left promiscuous mode [ 141.505924][T19004] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.520360][T19004] bridge_slave_1: left allmulticast mode [ 141.526037][T19004] bridge_slave_1: left promiscuous mode [ 141.531754][T19004] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.545047][T18992] EXT4-fs (loop4): 1 orphan inode deleted [ 141.546325][T19012] ieee802154 phy0 wpan0: encryption failed: -22 [ 141.559796][T18992] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.572335][T19014] loop2: detected capacity change from 0 to 512 [ 141.579710][T19004] bond0: (slave bond_slave_0): Releasing backup interface [ 141.591979][T19014] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 141.605179][T19004] bond0: (slave bond_slave_1): Releasing backup interface [ 141.610670][T19004] team0: Port device team_slave_0 removed [ 141.619854][T19014] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.647608][T19004] team0: Port device team_slave_1 removed [ 141.653470][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.670725][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.491465][T19165] validate_nla: 2 callbacks suppressed [ 142.491479][T19165] netlink: 'syz.3.7548': attribute type 21 has an invalid length. [ 142.604892][T19178] bridge_slave_0: left allmulticast mode [ 142.610648][T19178] bridge_slave_0: left promiscuous mode [ 142.616307][T19178] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.635778][T19188] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 142.655504][T19178] bridge_slave_1: left allmulticast mode [ 142.661178][T19178] bridge_slave_1: left promiscuous mode [ 142.666882][T19178] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.676671][T19192] loop1: detected capacity change from 0 to 512 [ 142.689704][T19178] bond0: (slave bond_slave_0): Releasing backup interface [ 142.697630][T19178] bond_slave_0: left promiscuous mode [ 142.705348][T19178] bond0: (slave bond_slave_1): Releasing backup interface [ 142.716274][T19178] bond_slave_1: left promiscuous mode [ 142.723888][T19178] team_slave_0: left promiscuous mode [ 142.732783][T19178] team0: Port device team_slave_0 removed [ 142.739412][T19178] team_slave_1: left promiscuous mode [ 142.747559][T19178] team0: Port device team_slave_1 removed [ 142.754331][T19178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.761839][T19178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.771274][T19178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.778727][T19178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.819031][T19192] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.834056][T19178] batman_adv: batadv0: Removing interface: netdevsim1 [ 142.844214][T19192] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.7560: corrupted xattr block 33: overlapping e_value [ 142.858252][T19192] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 142.872571][T19192] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.7560: corrupted xattr block 33: overlapping e_value [ 142.935110][T19192] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 142.971493][T19192] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.7560: corrupted xattr block 33: overlapping e_value [ 143.016473][T19192] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 143.083335][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.292905][T19249] netlink: 'syz.0.7581': attribute type 10 has an invalid length. [ 143.317610][T19249] dummy0: left promiscuous mode [ 143.334822][T19249] dummy0: entered promiscuous mode [ 143.345864][T19249] team0: Port device dummy0 added [ 143.747548][T19327] netlink: 'syz.3.7621': attribute type 21 has an invalid length. [ 143.774800][T19329] erspan1: entered allmulticast mode [ 143.780506][T19327] netlink: 'syz.3.7621': attribute type 1 has an invalid length. [ 143.788467][T19330] loop2: detected capacity change from 0 to 1024 [ 143.805507][T19330] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.834382][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.035731][T19372] tmpfs: Bad value for 'mpol' [ 144.043868][T19375] netlink: 'syz.2.7643': attribute type 4 has an invalid length. [ 144.076310][T19380] loop4: detected capacity change from 0 to 512 [ 144.078826][T19375] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 144.118685][T19380] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 144.143268][T19380] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.173447][T19389] loop3: detected capacity change from 0 to 512 [ 144.212356][T19399] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 144.212356][T19399] program syz.0.7651 not setting count and/or reply_len properly [ 144.230865][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.245728][T19389] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.259230][T19403] netlink: 'syz.2.7654': attribute type 10 has an invalid length. [ 144.268232][T19403] dummy0: left promiscuous mode [ 144.287393][T19403] dummy0: entered promiscuous mode [ 144.304714][T19389] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.7648: corrupted inode contents [ 144.330991][T19403] team0: Port device dummy0 added [ 144.340581][T19389] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.7648: mark_inode_dirty error [ 144.376434][T19389] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.7648: corrupted inode contents [ 144.414923][T19389] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.7648: mark_inode_dirty error [ 144.477029][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.510389][T19438] sock: sock_timestamping_bind_phc: sock not bind to device [ 144.733710][T19477] : renamed from bond_slave_0 (while UP) [ 144.738433][T19478] netlink: 'syz.1.7690': attribute type 2 has an invalid length. [ 144.747378][T19478] netlink: 'syz.1.7690': attribute type 3 has an invalid length. [ 144.802334][T19485] (unnamed net_device) (uninitialized): option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 144.839867][T19494] netlink: 'syz.0.7709': attribute type 16 has an invalid length. [ 144.975286][T19519] loop0: detected capacity change from 0 to 512 [ 145.011417][ T29] kauditd_printk_skb: 105 callbacks suppressed [ 145.011431][ T29] audit: type=1400 audit(4859.018:13375): avc: denied { create } for pid=19524 comm="syz.2.7715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 145.041116][T19519] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 145.069955][ T29] audit: type=1400 audit(4859.045:13376): avc: denied { map } for pid=19524 comm="syz.2.7715" path="socket:[54611]" dev="sockfs" ino=54611 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 145.092712][ T29] audit: type=1400 audit(4859.045:13377): avc: denied { read write } for pid=19524 comm="syz.2.7715" path="socket:[54611]" dev="sockfs" ino=54611 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 145.116239][ T29] audit: type=1400 audit(4859.064:13378): avc: denied { bind } for pid=19530 comm="syz.2.7719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 145.133624][T19537] bridge_slave_0: left allmulticast mode [ 145.135269][ T29] audit: type=1400 audit(4859.064:13379): avc: denied { name_bind } for pid=19530 comm="syz.2.7719" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 145.140844][T19537] bridge_slave_0: left promiscuous mode [ 145.162221][ T29] audit: type=1400 audit(4859.064:13380): avc: denied { node_bind } for pid=19530 comm="syz.2.7719" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 145.189688][T19537] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.221387][T19519] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.238564][T19537] bridge_slave_1: left allmulticast mode [ 145.244450][T19537] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.276642][T19537] bond0: (slave 30): Releasing backup interface [ 145.276705][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.305941][T19537] bond0: (slave bond_slave_1): Releasing backup interface [ 145.320310][ T29] audit: type=1326 audit(4859.304:13381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19556 comm="syz.0.7729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feef1ddebe9 code=0x7ffc0000 [ 145.343484][ T29] audit: type=1326 audit(4859.304:13382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19556 comm="syz.0.7729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7feef1ddebe9 code=0x7ffc0000 [ 145.366538][ T29] audit: type=1326 audit(4859.304:13383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19556 comm="syz.0.7729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feef1ddebe9 code=0x7ffc0000 [ 145.389642][ T29] audit: type=1326 audit(4859.304:13384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19556 comm="syz.0.7729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feef1ddebe9 code=0x7ffc0000 [ 145.422470][T19537] team0: Port device team_slave_0 removed [ 145.431798][T19537] team0: Port device team_slave_1 removed [ 145.495748][T19537] bond0: (slave netdevsim1): Releasing backup interface [ 145.527360][T19555] wg1: entered promiscuous mode [ 145.532325][T19555] wg1: entered allmulticast mode [ 145.563629][T19585] loop2: detected capacity change from 0 to 512 [ 145.609177][T19594] netlink: 'syz.1.7748': attribute type 1 has an invalid length. [ 145.628330][T19585] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.651341][T19585] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.7745: corrupted xattr block 33: overlapping e_value [ 145.676409][T19585] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 145.701504][T19585] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.7745: corrupted xattr block 33: overlapping e_value [ 145.715988][T19585] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 145.725219][T19585] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.7745: corrupted xattr block 33: overlapping e_value [ 145.739649][T19585] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 145.769369][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.862597][T19627] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 145.920791][T19641] loop4: detected capacity change from 0 to 512 [ 145.935582][T19643] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=82 sclass=netlink_xfrm_socket pid=19643 comm=syz.2.7771 [ 145.953339][T19641] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 145.980523][T19641] EXT4-fs (loop4): orphan cleanup on readonly fs [ 145.986999][T19641] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.7770: Block bitmap for bg 0 marked uninitialized [ 146.007195][T19641] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 146.034454][T19641] EXT4-fs (loop4): 1 orphan inode deleted [ 146.054410][T19641] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 146.102256][T19666] __nla_validate_parse: 21 callbacks suppressed [ 146.102271][T19666] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7782'. [ 146.124479][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.145301][T19666] xfrm0: entered promiscuous mode [ 146.150432][T19666] xfrm0: entered allmulticast mode [ 146.180842][T19666] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7782'. [ 146.239787][T19687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7788'. [ 146.405679][T19712] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=19712 comm=syz.3.7800 [ 146.530488][T19734] netlink: 80 bytes leftover after parsing attributes in process `syz.0.7811'. [ 146.621891][T19750] program syz.1.7818 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 146.656833][T19750] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 146.675208][T19758] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7822'. [ 146.679827][T19760] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7824'. [ 146.899359][T19800] loop1: detected capacity change from 0 to 1024 [ 146.915280][T19796] vhci_hcd: invalid port number 254 [ 146.928915][T19800] EXT4-fs: Ignoring removed bh option [ 146.952250][T19800] EXT4-fs: Ignoring removed nobh option [ 146.957962][T19800] EXT4-fs: inline encryption not supported [ 147.031050][T19800] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.052948][T19800] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.072144][T19828] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 147.109942][T19835] program syz.2.7860 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 147.110192][T19837] vhci_hcd: invalid port number 254 [ 147.158038][T19835] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 147.230044][T19857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7871'. [ 147.261334][T19862] loop4: detected capacity change from 0 to 164 [ 147.306624][T19871] program syz.0.7877 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 147.344777][T19871] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 147.362086][ T10] IPVS: starting estimator thread 0... [ 147.474695][T19881] IPVS: using max 2832 ests per chain, 141600 per kthread [ 147.657909][T19940] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7910'. [ 147.724124][T19953] program syz.3.7915 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 147.755888][T19953] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 148.083848][T20020] loop1: detected capacity change from 0 to 512 [ 148.130306][T20020] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.175320][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.184474][T20041] validate_nla: 6 callbacks suppressed [ 148.184509][T20041] netlink: 'syz.0.7957': attribute type 3 has an invalid length. [ 148.185497][T20040] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7959'. [ 148.190181][T20041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7957'. [ 148.255680][T20049] netlink: 'syz.4.7963': attribute type 41 has an invalid length. [ 148.854282][T20168] hub 6-0:1.0: USB hub found [ 148.872893][T20168] hub 6-0:1.0: 8 ports detected [ 148.916865][T20178] netlink: 'syz.0.8024': attribute type 1 has an invalid length. [ 148.986846][T20188] tmpfs: Bad value for 'mpol' [ 149.325620][ T3382] hid-generic 0000:00E2:0000.0001: unknown main item tag 0x0 [ 149.333110][ T3382] hid-generic 0000:00E2:0000.0001: unknown main item tag 0x0 [ 149.340529][ T3382] hid-generic 0000:00E2:0000.0001: unknown main item tag 0x0 [ 149.347911][ T3382] hid-generic 0000:00E2:0000.0001: unknown main item tag 0x0 [ 149.355394][ T3382] hid-generic 0000:00E2:0000.0001: unknown main item tag 0x0 [ 149.358251][T20258] netlink: 'syz.3.8062': attribute type 3 has an invalid length. [ 149.362905][ T3382] hid-generic 0000:00E2:0000.0001: unknown main item tag 0x0 [ 149.378025][ T3382] hid-generic 0000:00E2:0000.0001: unknown main item tag 0x0 [ 149.385537][ T3382] hid-generic 0000:00E2:0000.0001: unknown main item tag 0x0 [ 149.392993][ T3382] hid-generic 0000:00E2:0000.0001: unknown main item tag 0x0 [ 149.400374][ T3382] hid-generic 0000:00E2:0000.0001: unknown main item tag 0x0 [ 149.412639][ T3382] hid-generic 0000:00E2:0000.0001: hidraw0: HID v8.00 Device [syz0] on syz0 [ 149.451313][T20260] fido_id[20260]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 149.662730][T20303] netlink: 'syz.1.8085': attribute type 10 has an invalid length. [ 149.687874][T20303] bridge0: port 1(netdevsim1) entered blocking state [ 149.694654][T20303] bridge0: port 1(netdevsim1) entered disabled state [ 149.716939][T20303] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 149.717947][T20314] delete_channel: no stack [ 149.725838][T20303] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 149.949156][T20357] (unnamed net_device) (uninitialized): option ad_select: invalid value (34) [ 149.957781][T20361] loop2: detected capacity change from 0 to 512 [ 149.965693][T20361] EXT4-fs: Ignoring removed nomblk_io_submit option [ 149.972493][T20361] EXT4-fs: Ignoring removed bh option [ 150.030597][T20361] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 150.048688][T20376] unsupported nla_type 65024 [ 150.060703][T20361] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #11: comm syz.2.8113: corrupted inode contents [ 150.076621][T20361] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #11: comm syz.2.8113: mark_inode_dirty error [ 150.098222][T20361] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.8113: invalid indirect mapped block 1 (level 1) [ 150.116502][T20361] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #11: comm syz.2.8113: corrupted inode contents [ 150.139392][T20361] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 150.174477][T20361] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #11: comm syz.2.8113: corrupted inode contents [ 150.217801][T20361] EXT4-fs error (device loop2): ext4_truncate:4666: inode #11: comm syz.2.8113: mark_inode_dirty error [ 150.257721][T20407] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 150.263048][T20361] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 150.307713][T20361] EXT4-fs (loop2): 1 truncate cleaned up [ 150.314865][T20407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.314898][T20361] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.318822][T20361] EXT4-fs error (device loop2): ext4_find_dest_de:2052: inode #2: block 13: comm syz.2.8113: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 150.336311][T20407] bond0: (slave lo): making interface the new active one [ 150.373397][T20407] bond0: (slave lo): Enslaving as an active interface with an up link [ 150.434252][T20425] loop0: detected capacity change from 0 to 164 [ 150.435038][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.563091][T20444] bridge0: port 1(veth0_to_bridge) entered blocking state [ 150.570385][T20444] bridge0: port 1(veth0_to_bridge) entered disabled state [ 150.586247][T20444] veth0_to_bridge: entered allmulticast mode [ 150.596987][ T29] kauditd_printk_skb: 77 callbacks suppressed [ 150.597011][ T29] audit: type=1326 audit(4864.177:13462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20446 comm="syz.2.8156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84cac7ebe9 code=0x7ffc0000 [ 150.599188][T20444] veth0_to_bridge: entered promiscuous mode [ 150.603106][ T29] audit: type=1326 audit(4864.177:13463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20446 comm="syz.2.8156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84cac7ebe9 code=0x7ffc0000 [ 150.667948][ T29] audit: type=1326 audit(4864.233:13464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20446 comm="syz.2.8156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f84cac7ebe9 code=0x7ffc0000 [ 150.691162][ T29] audit: type=1326 audit(4864.233:13465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20446 comm="syz.2.8156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84cac7ebe9 code=0x7ffc0000 [ 150.714404][ T29] audit: type=1326 audit(4864.233:13466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20446 comm="syz.2.8156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84cac7ebe9 code=0x7ffc0000 [ 150.829598][ T29] audit: type=1400 audit(4864.390:13467): avc: denied { read } for pid=20474 comm="syz.0.8170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 150.918591][ T29] audit: type=1400 audit(4864.464:13468): avc: denied { write } for pid=20485 comm="syz.2.8176" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 151.079309][T20515] netlink: 'syz.0.8190': attribute type 21 has an invalid length. [ 151.090511][ T29] audit: type=1326 audit(4864.630:13469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20517 comm="syz.3.8191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6651e5ebe9 code=0x7ffc0000 [ 151.113767][ T29] audit: type=1326 audit(4864.630:13470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20517 comm="syz.3.8191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6651e5ebe9 code=0x7ffc0000 [ 151.151243][ T29] audit: type=1326 audit(4864.676:13471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20517 comm="syz.3.8191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f6651e5ebe9 code=0x7ffc0000 [ 151.505737][T20591] netlink: 'syz.3.8227': attribute type 21 has an invalid length. [ 151.523644][T20591] netlink: 'syz.3.8227': attribute type 5 has an invalid length. [ 151.531463][T20591] netlink: 'syz.3.8227': attribute type 6 has an invalid length. [ 151.539351][T20591] __nla_validate_parse: 27 callbacks suppressed [ 151.539365][T20591] netlink: 3 bytes leftover after parsing attributes in process `syz.3.8227'. [ 151.625777][T20610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8237'. [ 151.697286][T20623] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8238'. [ 151.724203][T20627] netlink: 'syz.2.8246': attribute type 21 has an invalid length. [ 151.732061][T20627] netlink: 128 bytes leftover after parsing attributes in process `syz.2.8246'. [ 151.800505][T20627] netlink: 3 bytes leftover after parsing attributes in process `syz.2.8246'. [ 151.897832][T20654] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2) [ 151.980704][T20666] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8265'. [ 152.081620][T20683] IPVS: length: 72 != 24 [ 152.296157][T20720] netdevsim netdevsim1 5: renamed from netdevsim0 [ 152.334106][T20727] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8295'. [ 152.416001][T20743] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8303'. [ 152.480544][T20755] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8308'. [ 152.632286][T20787] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8324'. [ 152.699468][T20798] loop1: detected capacity change from 0 to 256 [ 152.746816][T20798] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 152.755462][T20798] FAT-fs (loop1): Filesystem has been set read-only [ 152.883965][T20819] loop0: detected capacity change from 0 to 512 [ 152.934443][T20819] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 152.987527][T20819] EXT4-fs (loop0): mount failed [ 153.622514][T20962] validate_nla: 11 callbacks suppressed [ 153.622528][T20962] netlink: 'syz.2.8409': attribute type 39 has an invalid length. [ 153.744461][T20987] netlink: 'syz.2.8422': attribute type 11 has an invalid length. [ 153.815134][T20999] loop4: detected capacity change from 0 to 256 [ 153.833220][T20999] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 153.841966][T20999] FAT-fs (loop4): Filesystem has been set read-only [ 154.115082][T21049] netlink: 'syz.1.8452': attribute type 39 has an invalid length. [ 154.388445][T21093] loop0: detected capacity change from 0 to 128 [ 154.584492][T21124] netlink: 'syz.1.8488': attribute type 46 has an invalid length. [ 154.646414][T21134] loop0: detected capacity change from 0 to 512 [ 154.665362][T21134] EXT4-fs: Ignoring removed nomblk_io_submit option [ 154.674768][T21137] SELinux: failed to load policy [ 154.693045][T21134] EXT4-fs (loop0): filesystem is read-only [ 154.705929][T21134] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 154.731113][T21145] loop1: detected capacity change from 0 to 1024 [ 154.743747][T21134] EXT4-fs (loop0): filesystem is read-only [ 154.749719][T21134] EXT4-fs (loop0): orphan cleanup on readonly fs [ 154.756420][T21134] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #16: comm syz.0.8494: iget: bad i_size value: 648518346341360424 [ 154.775939][T21134] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.8494: couldn't read orphan inode 16 (err -117) [ 154.791980][T21134] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 154.815876][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.828462][T21145] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.969206][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.227824][T21204] netlink: 'syz.2.8528': attribute type 3 has an invalid length. [ 155.296017][T21217] vlan0: entered promiscuous mode [ 155.454891][T21246] No source specified [ 155.761629][T21294] netlink: 'syz.1.8572': attribute type 21 has an invalid length. [ 156.171545][T21340] netlink: 'syz.1.8594': attribute type 3 has an invalid length. [ 156.223921][T21350] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2) [ 156.492596][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 156.492610][ T29] audit: type=1107 audit(4869.614:13518): pid=21373 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 156.628438][T21391] loop0: detected capacity change from 0 to 128 [ 156.651255][T21391] FAT-fs (loop0): Directory bread(block 524322) failed [ 156.662368][T21391] FAT-fs (loop0): Directory bread(block 524323) failed [ 156.669335][T21391] FAT-fs (loop0): Directory bread(block 524324) failed [ 156.677151][T21391] FAT-fs (loop0): Directory bread(block 524325) failed [ 156.684232][T21391] FAT-fs (loop0): Directory bread(block 524326) failed [ 156.691215][T21391] FAT-fs (loop0): Directory bread(block 524327) failed [ 156.699038][T21391] FAT-fs (loop0): Directory bread(block 524328) failed [ 156.726386][T21391] FAT-fs (loop0): Directory bread(block 524329) failed [ 156.782340][T21391] FAT-fs (loop0): Directory bread(block 524322) failed [ 156.802030][T21391] FAT-fs (loop0): Directory bread(block 524323) failed [ 156.945293][T21419] netlink: 'syz.0.8633': attribute type 21 has an invalid length. [ 156.953135][T21419] netlink: 'syz.0.8633': attribute type 6 has an invalid length. [ 156.999562][T21421] __nla_validate_parse: 20 callbacks suppressed [ 156.999576][T21421] netlink: 830 bytes leftover after parsing attributes in process `syz.1.8635'. [ 157.041715][T21425] netlink: 'syz.2.8636': attribute type 1 has an invalid length. [ 157.106803][T21431] loop0: detected capacity change from 0 to 164 [ 157.138316][T21437] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8641'. [ 157.255512][T21453] ieee802154 phy0 wpan0: encryption failed: -22 [ 157.414698][ T29] audit: type=1326 audit(4870.463:13519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21479 comm="syz.2.8663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84cac7ebe9 code=0x7ffc0000 [ 157.437857][ T29] audit: type=1326 audit(4870.463:13520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21479 comm="syz.2.8663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84cac7ebe9 code=0x7ffc0000 [ 157.464262][ T29] audit: type=1326 audit(4870.519:13521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21479 comm="syz.2.8663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f84cac7ebe9 code=0x7ffc0000 [ 157.487400][ T29] audit: type=1326 audit(4870.519:13522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21479 comm="syz.2.8663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84cac7ebe9 code=0x7ffc0000 [ 157.510632][ T29] audit: type=1326 audit(4870.519:13523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21479 comm="syz.2.8663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84cac7ebe9 code=0x7ffc0000 [ 157.586270][T21492] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8665'. [ 157.654664][T21492] netlink: 3 bytes leftover after parsing attributes in process `syz.3.8665'. [ 157.829320][T21531] loop1: detected capacity change from 0 to 256 [ 158.089152][T21566] loop3: detected capacity change from 0 to 2048 [ 158.167208][T21566] Alternate GPT is invalid, using primary GPT. [ 158.173635][T21566] loop3: p2 p3 p7 [ 158.283117][ T6685] udevd[6685]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 158.294605][ T3518] udevd[3518]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 158.308845][ T6681] udevd[6681]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 158.397526][ T29] audit: type=1326 audit(4871.368:13524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21589 comm="syz.1.8717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1909cebe9 code=0x7ffc0000 [ 158.420785][ T29] audit: type=1326 audit(4871.368:13525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21589 comm="syz.1.8717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1909cebe9 code=0x7ffc0000 [ 158.444102][ T29] audit: type=1326 audit(4871.368:13526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21589 comm="syz.1.8717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fb1909cebe9 code=0x7ffc0000 [ 158.467228][ T29] audit: type=1326 audit(4871.368:13527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21589 comm="syz.1.8717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1909cebe9 code=0x7ffc0000 [ 158.818936][T21651] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8747'. [ 158.898096][T21665] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8755'. [ 158.922746][T21665] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8755'. [ 159.225296][T21720] validate_nla: 3 callbacks suppressed [ 159.225313][T21720] netlink: 'syz.4.8782': attribute type 5 has an invalid length. [ 159.277474][T21725] program syz.2.8784 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 159.366259][T21738] loop2: detected capacity change from 0 to 512 [ 159.398018][T21738] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.420539][T21743] usb usb8: check_ctrlrecip: process 21743 (syz.0.8794) requesting ep 01 but needs 81 [ 159.430246][T21743] usb usb8: usbfs: process 21743 (syz.0.8794) did not claim interface 0 before use [ 159.489306][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.623532][T21783] netlink: 'syz.0.8810': attribute type 13 has an invalid length. [ 159.804721][T21797] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8818'. [ 159.952156][T21783] lo: left promiscuous mode [ 159.967560][T21783] tunl0: left promiscuous mode [ 159.979530][T21783] gre0: left promiscuous mode [ 159.988719][T21783] gretap0: left promiscuous mode [ 159.999892][T21783] gretap0: refused to change device tx_queue_len [ 160.022723][T21783] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 160.129939][T21817] IPv6: NLM_F_CREATE should be specified when creating new route [ 160.273967][T21838] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8838'. [ 160.283072][T21838] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8838'. [ 160.467744][T21869] netlink: 'syz.4.8848': attribute type 6 has an invalid length. [ 160.671350][T21892] loop3: detected capacity change from 0 to 1024 [ 160.698730][T21892] EXT4-fs: Ignoring removed oldalloc option [ 160.704810][T21892] EXT4-fs: Ignoring removed bh option [ 160.730579][T21912] ieee802154 phy0 wpan0: encryption failed: -22 [ 160.754704][T21910] loop1: detected capacity change from 0 to 512 [ 160.758511][T21892] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.774836][T21910] EXT4-fs: Ignoring removed oldalloc option [ 160.804133][T21910] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 160.848174][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.920287][T21910] EXT4-fs (loop1): 1 truncate cleaned up [ 160.963100][T21910] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.055580][T21910] EXT4-fs error (device loop1): ext4_lookup:1787: inode #14: comm syz.1.8869: invalid fast symlink length 39 [ 161.155185][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.514047][T22036] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 161.578474][T22045] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 161.608387][ T3294] ================================================================== [ 161.616497][ T3294] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_mknod [ 161.623445][ T3294] [ 161.625761][ T3294] write to 0xffff888104389e04 of 4 bytes by task 6681 on cpu 1: [ 161.633431][ T3294] shmem_mknod+0x137/0x180 [ 161.637847][ T3294] shmem_create+0x34/0x50 [ 161.642164][ T3294] path_openat+0x1105/0x2170 [ 161.646759][ T3294] do_filp_open+0x109/0x230 [ 161.651247][ T3294] do_sys_openat2+0xa6/0x110 [ 161.655833][ T3294] __x64_sys_openat+0xf2/0x120 [ 161.660591][ T3294] x64_sys_call+0x2e9c/0x2ff0 [ 161.665257][ T3294] do_syscall_64+0xd2/0x200 [ 161.669753][ T3294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.675633][ T3294] [ 161.677941][ T3294] read to 0xffff888104389e04 of 4 bytes by task 3294 on cpu 0: [ 161.685466][ T3294] fill_mg_cmtime+0x5b/0x260 [ 161.690047][ T3294] generic_fillattr+0x24a/0x340 [ 161.694885][ T3294] shmem_getattr+0x181/0x200 [ 161.699461][ T3294] vfs_getattr_nosec+0x143/0x1e0 [ 161.704390][ T3294] vfs_statx+0x113/0x390 [ 161.708621][ T3294] vfs_fstatat+0x115/0x170 [ 161.713032][ T3294] __se_sys_newfstatat+0x55/0x260 [ 161.718052][ T3294] __x64_sys_newfstatat+0x55/0x70 [ 161.723070][ T3294] x64_sys_call+0x135a/0x2ff0 [ 161.727734][ T3294] do_syscall_64+0xd2/0x200 [ 161.732232][ T3294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.738110][ T3294] [ 161.740413][ T3294] value changed: 0x01b13aca -> 0x027b2a1f [ 161.746112][ T3294] [ 161.748415][ T3294] Reported by Kernel Concurrency Sanitizer on: [ 161.754549][ T3294] CPU: 0 UID: 0 PID: 3294 Comm: udevd Tainted: G W 6.17.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 161.766345][ T3294] Tainted: [W]=WARN [ 161.770133][ T3294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 161.780175][ T3294] ==================================================================