last executing test programs: 1.020175893s ago: executing program 3 (id=7134): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000040)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200400100000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000014010380100100800800034000000002030106"], 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.020042542s ago: executing program 1 (id=7135): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000034000000030a010100000000000000000100000209000b0073797a31000000000900010073797a300000000008000a4000000004d4010000020a05"], 0x250}}, 0x0) 1.019985392s ago: executing program 3 (id=7136): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) recvmsg$qrtr(r0, 0x0, 0x0, 0x40000040) 976.789293ms ago: executing program 1 (id=7139): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0xf0, 0x10, 0x1, 0xfffffffe, 0x25dfdbfe, {{@in=@broadcast, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x2, 0x0, 0x0, 0x0, 0xff}, {@in6=@private2, 0x4d6, 0x6c}, @in=@private=0x8010101, {0x0, 0x192, 0x9ba3, 0x2, 0x251c, 0x3, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3502, 0xa, 0x1, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x800}, 0x0) 963.026623ms ago: executing program 3 (id=7140): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x74, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x24}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1ff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x74}, 0x1, 0x0, 0x0, 0x4810}, 0x0) 887.171155ms ago: executing program 1 (id=7145): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 886.961525ms ago: executing program 3 (id=7146): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="b000000016007f029e78f6030f7a0a762353bfb89fd8c902317bab30f89f080aaaaeb9d8091c815dcf03e14e877733fff4fe20a5be870f576b162e7de2d02673e789a4950c9cdc206e086fd0dc8ca9afcd9d522ac78876a4595146add31b35355848794ca3f8b38aef1e114ab9fb0200000000000000a3b0c81c6f8144e74fe13b80ca46c1a6c04ad73c9d44b605f900"/158, 0x9e}, {&(0x7f00000000c0)="68c32a7de6a2395800"/18, 0x12}], 0x2}, 0x0) 820.448796ms ago: executing program 3 (id=7150): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000020000103000000001700000002000000000000040000000008001a"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4044004) 820.198706ms ago: executing program 1 (id=7151): r0 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet6_int(r0, 0x29, 0x2, 0x0, &(0x7f0000000080)) 819.973846ms ago: executing program 1 (id=7152): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@noinit_itable}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x61, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) 819.295106ms ago: executing program 3 (id=7156): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f00000006c0)="ffffffff106c3ed990f77e9eb3cf", 0x0, 0x233473a1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 767.626247ms ago: executing program 1 (id=7159): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ff00000}]}) 602.57674ms ago: executing program 4 (id=7169): r0 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r0, &(0x7f0000000d00)=[{&(0x7f0000000580)=""/157, 0x9d}, {&(0x7f0000000700)=""/95, 0x5f}], 0x2, 0x4, 0x200) 553.5929ms ago: executing program 4 (id=7171): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) 447.480912ms ago: executing program 4 (id=7175): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8931, &(0x7f0000000000)={'netdevsim0\x00'}) 439.238362ms ago: executing program 4 (id=7179): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x700, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "01"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x60}, 0x1, 0x7}, 0x0) 359.525714ms ago: executing program 2 (id=7180): r0 = io_uring_setup(0x413e, &(0x7f0000000200)={0x0, 0x243d, 0x400, 0xfffffffb, 0x34c}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0x14, 0x0, 0x0) 328.851584ms ago: executing program 2 (id=7181): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x10, 0x0, 0x0) 296.795505ms ago: executing program 2 (id=7182): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) splice(r0, 0x0, r0, 0x0, 0x2, 0xe) 251.465926ms ago: executing program 0 (id=7183): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 249.267195ms ago: executing program 2 (id=7184): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="880000001000030529bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="15010000cd640600680012800b000100627269646765000058000280050016000000000005002a000100000005002500000000000c002000060000000000000005002d00000000000c002e0001000000010000000c002e000100000001000000060009"], 0x88}, 0x1, 0x0, 0x0, 0x4000004}, 0xe4) 223.657466ms ago: executing program 4 (id=7185): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3da, &(0x7f00000004c0)="$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") statx(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0xff00, 0x0) 217.575096ms ago: executing program 0 (id=7186): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x55}}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 147.340397ms ago: executing program 0 (id=7187): r0 = socket(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000013c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x1c0, 0x178, 0x394, 0x1c0, 0x178, 0x2a0, 0x258, 0x258, 0x2a0, 0x258, 0x3, 0x0, {[{{@ipv6={@loopback={0x1f0}, @mcast2, [], [], 'team_slave_0\x00', 'netpci0\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "fc6b061134c5d5c8465af5f5caa5bd6c0dde77ff83daa984c0d76167e0608dcaa2caff7bd9c5923cccd5b483df8124249f91b8c3c2cea9bed64dc935a975401a68e34a04c1f15e50050729ba985e8c1576994e350d93a782668d4d51a1bc76bba1fde09794922ae65a804c56f092e430ebb8fa892d671c8c8035cae06810f8c6", 0x20}}, @common=@unspec=@addrtype1={{0x28}, {0xa}}]}, @common=@inet=@SET2={0x30}}, {{@ipv6={@private1, @mcast1, [], [], 'wg2\x00', 'hsr0\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) 133.110538ms ago: executing program 0 (id=7188): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xb, 0x7, 0x2, 0xff22, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x7, &(0x7f0000000380)=@framed={{0x18, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xd3}}]}, &(0x7f00000005c0)='GPL\x00'}, 0x90) 83.603289ms ago: executing program 4 (id=7189): r0 = fsopen(&(0x7f0000000000)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='fd', &(0x7f0000000080)='\x00$J\t\xac\x84\xedT\xfa\xd7\xc8\xec[\xd7\xf5U\xb5\xcf\x8bKQ\x01\x00\x00\xf7\xe0\xf5cP\xbe\xc0h&\x96', 0x0) 39.468929ms ago: executing program 2 (id=7190): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r0) 39.236379ms ago: executing program 0 (id=7191): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getpeername(r0, 0x0, 0x0) 3.55769ms ago: executing program 0 (id=7192): r0 = open(&(0x7f0000000180)='./bus\x00', 0x14957e, 0x0) readahead(r0, 0x0, 0x0) 0s ago: executing program 2 (id=7193): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000e8010000030a01020000000000000000010000000900030073797a3200000000280004800800024000000000080001400000000500000000000000800900010073797a31000000000900010073797a3100000000340008800c00024000000000000080010c00024000000000000000040c0001"], 0x25c}}, 0x0) kernel console output (not intermixed with test programs): T4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.2750: corrupted inode contents [ 60.289628][ T9084] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #16: comm syz.2.2750: mark_inode_dirty error [ 60.309981][ T9084] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.2750: corrupted inode contents [ 60.360288][ T9084] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.2750: mark_inode_dirty error [ 60.384379][ T9084] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.2750: corrupted inode contents [ 60.396342][ T9152] loop0: detected capacity change from 0 to 2048 [ 60.415496][ T9152] Alternate GPT is invalid, using primary GPT. [ 60.421924][ T9152] loop0: p1 p2 p3 [ 60.425672][ T9152] loop0: partition table partially beyond EOD, truncated [ 60.439871][ T9084] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 60.479093][ T9084] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.2750: corrupted inode contents [ 60.499095][ T9084] EXT4-fs error (device loop2): ext4_truncate:4597: inode #16: comm syz.2.2750: mark_inode_dirty error [ 60.553222][ T9084] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 60.589631][ T9084] EXT4-fs (loop2): 1 truncate cleaned up [ 60.605795][ T9084] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.640315][ T9084] ext4 filesystem being mounted at /565/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.698954][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.933410][ T9240] loop4: detected capacity change from 0 to 1756 [ 61.138310][ T9280] tmpfs: Unknown parameter 'rootcontext' [ 61.369337][ T9323] loop3: detected capacity change from 0 to 512 [ 61.401479][ T9323] EXT4-fs (loop3): invalid inodes per group: 0 [ 61.401479][ T9323] [ 61.526648][ T29] audit: type=1326 audit(1753458104.567:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9349 comm="syz.2.2880" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc644f1e9a9 code=0x0 [ 61.688291][ T9381] loop2: detected capacity change from 0 to 1024 [ 61.704361][ T9381] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 61.753083][ T9381] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 61.761940][ T9381] System zones: 0-1, 2-3, 4-36, 98-101, 102-102 [ 61.774094][ T9381] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 61.788892][ T9395] loop0: detected capacity change from 0 to 512 [ 61.795190][ T29] audit: type=1326 audit(1753458104.810:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9393 comm="syz.3.2902" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1d980e9a9 code=0x0 [ 61.797058][ T9395] EXT4-fs: Ignoring removed orlov option [ 61.823943][ T9395] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.834993][ T9395] EXT4-fs error (device loop0): ext4_init_orphan_info:585: comm syz.0.2903: inode #0: comm syz.0.2903: iget: illegal inode # [ 61.866312][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.882682][ T9395] EXT4-fs (loop0): Remounting filesystem read-only [ 61.889232][ T9395] EXT4-fs (loop0): get orphan inode failed [ 61.912629][ T9395] EXT4-fs (loop0): mount failed [ 61.925532][ T9405] loop2: detected capacity change from 0 to 1024 [ 61.972269][ T9405] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 61.986013][ T9405] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 61.997002][ T9405] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 62.006382][ T9412] loop0: detected capacity change from 0 to 512 [ 62.029628][ T9412] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 62.040393][ T9405] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 62.073101][ T9412] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c0a8, mo2=0002] [ 62.081453][ T9405] EXT4-fs error (device loop2): ext4_get_journal_inode:5796: inode #17: comm syz.2.2905: iget: bad i_size value: 4398046511204 [ 62.102109][ T9412] System zones: 1-12 [ 62.118997][ T9412] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #11: comm syz.0.2911: missing EA_INODE flag [ 62.143922][ T9405] EXT4-fs (loop2): no journal found [ 62.159395][ T9412] EXT4-fs (loop0): Remounting filesystem read-only [ 62.184335][ T9412] EXT4-fs (loop0): 1 orphan inode deleted [ 62.204321][ T9412] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.274925][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.452182][ T29] audit: type=1400 audit(1753458105.428:216): avc: denied { create } for pid=9467 comm="syz.1.2938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 62.935724][ T9534] loop3: detected capacity change from 0 to 512 [ 63.040175][ T9548] 9pnet: Could not find request transport: tcp޿$GZR9 r3@#hqnlN [ 63.101853][ T9554] loop3: detected capacity change from 0 to 1024 [ 63.120774][ T9554] EXT4-fs warning (device loop3): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 63.485919][ T9603] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 63.660591][ T9626] loop3: detected capacity change from 0 to 512 [ 63.680043][ T9626] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 63.690105][ T9626] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 63.700050][ T9626] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3017: Failed to acquire dquot type 1 [ 63.733673][ T9626] EXT4-fs (loop3): 1 truncate cleaned up [ 63.748384][ T9626] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.761504][ T9626] ext4 filesystem being mounted at /621/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.866627][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.886840][ T9663] loop0: detected capacity change from 0 to 2368 [ 63.937155][ T9671] loop3: detected capacity change from 0 to 512 [ 63.982351][ T9671] EXT4-fs: Ignoring removed nomblk_io_submit option [ 64.007967][ T9671] EXT4-fs (loop3): filesystem is read-only [ 64.024752][ T9685] loop0: detected capacity change from 0 to 736 [ 64.031251][ T9671] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 64.047918][ T9671] EXT4-fs (loop3): filesystem is read-only [ 64.053853][ T9671] EXT4-fs (loop3): orphan cleanup on readonly fs [ 64.066548][ T9671] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #16: comm syz.3.3029: iget: bad i_size value: 648518346341360424 [ 64.090563][ T9671] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.3029: couldn't read orphan inode 16 (err -117) [ 64.103844][ T9671] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 64.127380][ T9685] rock: directory entry would overflow storage [ 64.133553][ T9685] rock: sig=0x3b10, size=4, remaining=3 [ 64.153140][ T9704] SELinux: Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped). [ 64.174477][ T29] audit: type=1400 audit(1753458107.037:217): avc: denied { relabelto } for pid=9703 comm="syz.4.3054" name="622" dev="tmpfs" ino=3164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 64.200549][ T29] audit: type=1400 audit(1753458107.037:218): avc: denied { associate } for pid=9703 comm="syz.4.3054" name="622" dev="tmpfs" ino=3164 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="u:r:untrusted_app:s0:c512,c768" [ 64.238670][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.369997][ T9736] loop2: detected capacity change from 0 to 128 [ 64.389092][ T9736] FAT-fs (loop2): bogus number of FAT structure [ 64.395531][ T9736] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 64.404890][ T9736] FAT-fs (loop2): Can't find a valid FAT filesystem [ 64.690784][ T9802] futex_wake_op: syz.1.3102 tries to shift op by -1; fix this program [ 65.275287][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 65.275301][ T29] audit: type=1400 audit(1753458108.066:221): avc: denied { read } for pid=2980 comm="acpid" name="mouse2" dev="devtmpfs" ino=1003 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 65.303235][ T29] audit: type=1400 audit(1753458108.066:222): avc: denied { open } for pid=2980 comm="acpid" path="/dev/input/mouse2" dev="devtmpfs" ino=1003 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 65.331580][ T29] audit: type=1400 audit(1753458108.075:223): avc: denied { ioctl } for pid=2980 comm="acpid" path="/dev/input/mouse2" dev="devtmpfs" ino=1003 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 65.357598][ T29] audit: type=1400 audit(1753458108.150:224): avc: denied { execmem } for pid=9935 comm="syz.1.3169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 65.585755][ T9966] loop3: detected capacity change from 0 to 512 [ 65.586600][ T9967] tmpfs: Bad value for 'mpol' [ 65.640830][ T9966] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 65.909431][ T29] audit: type=1326 audit(1753458108.668:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10032 comm="syz.1.3215" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc0966fe9a9 code=0x0 [ 66.118946][T10078] loop3: detected capacity change from 0 to 512 [ 66.158623][T10078] Quota error (device loop3): v2_read_file_info: Free block number 1 out of range (1, 6). [ 66.185451][T10078] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 66.202615][T10078] EXT4-fs (loop3): mount failed [ 66.400575][T10131] 9pnet_fd: p9_fd_create_unix (10131): problem connecting socket: ./file0: -2 [ 66.769366][T10215] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 66.860969][T10225] loop0: detected capacity change from 0 to 8192 [ 66.914596][T10225] loop0: p2 < > p3 p4 < > [ 66.919068][T10225] loop0: partition table partially beyond EOD, truncated [ 66.921918][T10241] loop4: detected capacity change from 0 to 2048 [ 66.933108][T10225] loop0: p2 start 591104 is beyond EOD, truncated [ 66.939700][T10225] loop0: p3 start 33557620 is beyond EOD, truncated [ 66.988317][ T3551] udevd[3551]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 67.009776][T10241] loop4: p1 < > p4 [ 67.019992][T10241] loop4: p4 size 8388608 extends beyond EOD, truncated [ 67.046035][ T2995] loop4: p1 < > p4 [ 67.052011][ T2995] loop4: p4 size 8388608 extends beyond EOD, truncated [ 67.080905][ T3551] udevd[3551]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 67.093813][ T3549] udevd[3549]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 67.151391][ T3551] udevd[3551]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 67.171863][ T3549] udevd[3549]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 67.185730][T10280] loop0: detected capacity change from 0 to 128 [ 67.203404][T10280] FAT-fs (loop0): bogus number of reserved sectors [ 67.209995][T10280] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 67.219469][T10280] FAT-fs (loop0): Can't find a valid FAT filesystem [ 67.245459][ T29] audit: type=1326 audit(1753982397.902:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10283 comm="syz.3.3340" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1d980e9a9 code=0x0 [ 67.280212][T10292] IPv6: addrconf: prefix option has invalid lifetime [ 67.306561][T10298] syz.4.3347(10298): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 67.491634][ T29] audit: type=1400 audit(1753982398.145:227): avc: denied { mount } for pid=10329 comm="syz.0.3364" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 67.543539][ T29] audit: type=1400 audit(1753982398.183:228): avc: denied { unmount } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 67.585539][T10347] tmpfs: Bad value for 'mpol' [ 67.711331][ T29] audit: type=1326 audit(1753982398.351:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10371 comm="syz.1.3384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0966fe9a9 code=0x7ffc0000 [ 67.900648][T10407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.935042][T10407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.027592][T10436] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.611453][T10540] loop2: detected capacity change from 0 to 128 [ 68.649450][T10540] FAT-fs (loop2): bread failed, FSINFO block (sector = 257) [ 68.905867][T10598] nfs4: Bad value for 'source' [ 68.952656][T10596] loop0: detected capacity change from 0 to 8192 [ 69.001645][ T3551] loop0: p2 p3 p4 [ 69.005490][ T3551] loop0: p2 start 2936012800 is beyond EOD, truncated [ 69.012387][ T3551] loop0: p3 start 1912602624 is beyond EOD, truncated [ 69.019211][ T3551] loop0: p4 size 656640 extends beyond EOD, truncated [ 69.040882][T10596] loop0: p2 p3 p4 [ 69.061927][T10596] loop0: p2 start 2936012800 is beyond EOD, truncated [ 69.068910][T10596] loop0: p3 start 1912602624 is beyond EOD, truncated [ 69.075787][T10596] loop0: p4 size 656640 extends beyond EOD, truncated [ 69.117237][T10626] dns_resolver: Unsupported server list version (0) [ 69.166888][ T3551] udevd[3551]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 69.179408][T10632] loop0: detected capacity change from 0 to 512 [ 69.224682][T10632] EXT4-fs (loop0): orphan cleanup on readonly fs [ 69.232056][ T3551] udevd[3551]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 69.242439][T10632] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3514: bg 0: block 248: padding at end of block bitmap is not set [ 69.258388][T10632] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.3514: Failed to acquire dquot type 1 [ 69.274597][T10632] EXT4-fs (loop0): 1 truncate cleaned up [ 69.281659][T10632] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 69.341214][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.369158][T10662] loop3: detected capacity change from 0 to 256 [ 69.385787][T10662] vfat: Deprecated parameter 'posix' [ 69.391166][T10662] FAT-fs: "posix" option is obsolete, not supported now [ 69.431260][T10662] FAT-fs (loop3): codepage cp775 not found [ 69.820510][T10746] loop3: detected capacity change from 0 to 256 [ 69.850100][T10746] vfat: Bad value for 'nonumtail' [ 69.904775][T10759] IPv6: addrconf: prefix option has invalid lifetime [ 70.086610][T10788] loop0: detected capacity change from 0 to 8192 [ 70.145200][ T3551] loop0: p1 p2 p4 [ 70.149066][ T3551] loop0: p1 size 65536 extends beyond EOD, truncated [ 70.190502][ T3551] loop0: p2 start 861536256 is beyond EOD, truncated [ 70.197252][ T3551] loop0: p4 size 65536 extends beyond EOD, truncated [ 70.218576][T10788] loop0: p1 p2 p4 [ 70.224515][T10788] loop0: p1 size 65536 extends beyond EOD, truncated [ 70.247737][T10788] loop0: p2 start 861536256 is beyond EOD, truncated [ 70.254518][T10788] loop0: p4 size 65536 extends beyond EOD, truncated [ 70.275512][T10820] loop2: detected capacity change from 0 to 1024 [ 70.302557][T10820] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 70.338916][T10820] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 70.377747][T10820] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 70.392626][T10820] EXT4-fs (loop2): orphan cleanup on readonly fs [ 70.399140][T10820] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.3606: Freeing blocks not in datazone - block = 0, count = 4096 [ 70.415135][T10820] EXT4-fs (loop2): Remounting filesystem read-only [ 70.421777][T10820] EXT4-fs (loop2): 1 orphan inode deleted [ 70.427937][T10820] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 70.441598][ T3551] udevd[3551]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 70.453800][ T3549] udevd[3549]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 70.494522][ T3549] udevd[3549]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 70.506631][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.703319][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 70.703332][ T29] audit: type=1400 audit(1753982914.145:244): avc: denied { create } for pid=10884 comm="syz.4.3639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 70.742323][T10891] loop0: detected capacity change from 0 to 512 [ 70.752738][T10891] EXT4-fs: Ignoring removed i_version option [ 70.769476][T10891] EXT4-fs: user quota file already specified [ 70.791799][T10898] loop4: detected capacity change from 0 to 1764 [ 70.864018][ T29] audit: type=1326 audit(1753982914.295:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10908 comm="syz.2.3651" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc644f1e9a9 code=0x0 [ 70.956129][T10928] tmpfs: Unsupported parameter 'huge' [ 71.044744][T10944] loop2: detected capacity change from 0 to 512 [ 71.059670][T10944] EXT4-fs (loop2): invalid inodes per group: 134217760 [ 71.059670][T10944] [ 71.247360][T10984] loop3: detected capacity change from 0 to 2048 [ 71.288256][ T3549] Alternate GPT is invalid, using primary GPT. [ 71.294625][ T3549] loop3: p1 p2 p3 [ 71.313404][T11000] tmpfs: Bad value for 'mpol' [ 71.350575][T10984] Alternate GPT is invalid, using primary GPT. [ 71.357072][T10984] loop3: p1 p2 p3 [ 71.482263][ T29] audit: type=1400 audit(1753982914.875:246): avc: denied { read } for pid=11026 comm="syz.3.3709" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 71.601315][T11043] loop0: detected capacity change from 0 to 512 [ 71.618943][T11043] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 71.669541][T11043] EXT4-fs error (device loop0): ext4_orphan_get:1419: comm syz.0.3717: bad orphan inode 15 [ 71.722497][T11043] ext4_test_bit(bit=14, block=18) = 1 [ 71.727959][T11043] is_bad_inode(inode)=0 [ 71.732130][T11043] NEXT_ORPHAN(inode)=1023 [ 71.736482][T11043] max_ino=32 [ 71.739730][T11043] i_nlink=0 [ 71.796632][T11043] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 71.839299][T11043] ext2 filesystem being mounted at /697/qY3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 71.895679][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 71.916538][ T29] audit: type=1400 audit(1753982915.277:247): avc: denied { create } for pid=11080 comm="syz.2.3736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 72.004938][T11089] loop2: detected capacity change from 0 to 2048 [ 72.021630][T11089] journal_path: Non-blockdev passed as './file1' [ 72.028050][T11089] EXT4-fs: error: could not find journal device path [ 72.079486][T11103] IPv6: addrconf: prefix option has invalid lifetime [ 72.209598][T11122] delete_channel: no stack [ 72.228713][T11122] delete_channel: no stack [ 72.828400][T11234] loop2: detected capacity change from 0 to 128 [ 73.151093][T11303] loop0: detected capacity change from 0 to 512 [ 73.159329][T11303] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 73.167772][T11303] EXT4-fs (loop0): bad geometry: block count 204800 exceeds size of device (128 blocks) [ 73.312549][T11331] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 73.317345][T11329] loop2: detected capacity change from 0 to 512 [ 73.344350][T11329] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 73.360101][T11329] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.3856: invalid indirect mapped block 4294967295 (level 0) [ 73.374246][T11329] EXT4-fs (loop2): Remounting filesystem read-only [ 73.382305][T11329] EXT4-fs (loop2): 1 orphan inode deleted [ 73.388055][T11329] EXT4-fs (loop2): 1 truncate cleaned up [ 73.394394][T11329] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.420745][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.774658][T11411] tmpfs: Bad value for 'mpol' [ 73.835387][ T29] audit: type=1400 audit(1753982917.082:248): avc: denied { append } for pid=11420 comm="syz.0.3901" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 73.968652][T11450] /dev/nullb0: Can't lookup blockdev [ 74.028222][T11461] loop0: detected capacity change from 0 to 256 [ 74.038753][T11461] FAT-fs (loop0): bogus number of FAT sectors [ 74.044897][T11461] FAT-fs (loop0): Can't find a valid FAT filesystem [ 74.224764][T11483] loop3: detected capacity change from 0 to 8192 [ 74.342170][T11505] loop0: detected capacity change from 0 to 8192 [ 74.440867][ T29] audit: type=1400 audit(1753982917.653:249): avc: denied { create } for pid=11534 comm="syz.4.3960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 74.500591][T11549] futex_wake_op: syz.4.3967 tries to shift op by 32; fix this program [ 74.514657][ T29] audit: type=1326 audit(1753982917.709:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11545 comm="syz.2.3965" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc644f1e9a9 code=0x0 [ 74.664108][T11579] tmpfs: Bad value for 'mpol' [ 74.770681][T11602] loop4: detected capacity change from 0 to 512 [ 74.816840][T11608] loop0: detected capacity change from 0 to 2048 [ 74.822112][T11612] loop2: detected capacity change from 0 to 1024 [ 74.834991][T11602] EXT4-fs (loop4): orphan cleanup on readonly fs [ 74.850334][ T3551] loop0: p3 p4 < > [ 74.854265][T11602] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 74.864628][T11602] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 74.874117][T11602] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.3989: Failed to acquire dquot type 1 [ 74.874350][ T3551] loop0: p3 size 57344 extends beyond EOD, truncated [ 74.893525][T11612] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 74.893573][T11617] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 74.909624][T11617] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 74.917372][T11617] vhci_hcd vhci_hcd.0: Device attached [ 74.917977][T11612] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 74.932467][T11602] EXT4-fs (loop4): 1 truncate cleaned up [ 74.941341][T11608] loop0: p3 p4 < > [ 74.944532][T11612] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 74.960204][T11608] loop0: p3 size 57344 extends beyond EOD, truncated [ 74.962789][T11620] vhci_hcd: connection closed [ 74.967212][ T41] vhci_hcd: stop threads [ 74.972671][T11602] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 74.976180][ T41] vhci_hcd: release socket [ 74.976188][ T41] vhci_hcd: disconnect device [ 75.014838][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.042288][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.135485][ T3551] udevd[3551]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 75.136566][ T3549] udevd[3549]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 75.311203][ T29] audit: type=1326 audit(1753982918.450:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11673 comm="syz.4.4025" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feadaf7e9a9 code=0x0 [ 75.464187][T11704] SELinux: Context system_u:object_r:fsa is not valid (left unmapped). [ 75.478177][T11705] loop4: detected capacity change from 0 to 128 [ 75.742243][T11740] loop0: detected capacity change from 0 to 8192 [ 75.820438][T11740] loop0: p1 < > p2 p4 [ 75.824756][T11740] loop0: partition table partially beyond EOD, truncated [ 75.831999][T11767] loop4: detected capacity change from 0 to 1024 [ 75.834226][T11740] loop0: p1 start 408832 is beyond EOD, truncated [ 75.844763][T11740] loop0: p2 size 8388352 extends beyond EOD, truncated [ 75.859732][T11767] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 75.875315][T11767] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 75.885127][T11767] EXT4-fs (loop4): group descriptors corrupted! [ 76.138324][T11815] loop2: detected capacity change from 0 to 512 [ 76.168817][T11823] loop4: detected capacity change from 0 to 512 [ 76.182279][T11823] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 76.199166][T11815] EXT4-fs (loop2): orphan cleanup on readonly fs [ 76.205916][T11815] __quota_error: 4 callbacks suppressed [ 76.205926][T11815] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 76.212033][T11823] EXT4-fs (loop4): orphan cleanup on readonly fs [ 76.221885][T11815] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 76.237733][T11815] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.4094: Failed to acquire dquot type 1 [ 76.262824][T11823] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 76.279489][T11823] EXT4-fs (loop4): Remounting filesystem read-only [ 76.286100][T11823] EXT4-fs (loop4): 1 truncate cleaned up [ 76.302903][T11823] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 76.316455][T11815] EXT4-fs (loop2): 1 truncate cleaned up [ 76.328051][T11815] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.364489][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.388570][ T29] audit: type=1400 audit(2000000000.276:256): avc: denied { create } for pid=11846 comm="syz.3.4110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 76.436381][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.472447][T11859] loop2: detected capacity change from 0 to 512 [ 76.495165][T11859] EXT4-fs: Ignoring removed bh option [ 76.496435][ T3551] udevd[3551]: incorrect ext4 checksum on /dev/loop2 [ 76.507939][T11859] EXT4-fs (loop2): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 76.741264][ T29] audit: type=1400 audit(2000000768.598:257): avc: denied { read write } for pid=11909 comm="syz.3.4141" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 76.765647][ T29] audit: type=1400 audit(2000000768.598:258): avc: denied { open } for pid=11909 comm="syz.3.4141" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 76.802924][T11917] 9pnet: Unknown protocol version 9p20\++} [ 76.861597][T11920] tmpfs: Unknown parameter 'context' [ 76.929046][ T29] audit: type=1400 audit(2000000768.755:259): avc: denied { create } for pid=11933 comm="syz.0.4152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 77.171792][T11989] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 77.178393][T11989] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 77.185951][T11989] vhci_hcd vhci_hcd.0: Device attached [ 77.221797][T11990] vhci_hcd: connection closed [ 77.226732][ T414] vhci_hcd: stop threads [ 77.235750][ T414] vhci_hcd: release socket [ 77.240163][ T414] vhci_hcd: disconnect device [ 77.450743][ T29] audit: type=1400 audit(2000000769.254:260): avc: denied { mount } for pid=12040 comm="syz.3.4204" name="/" dev="ramfs" ino=30140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 77.486438][ T29] audit: type=1400 audit(2000000769.272:261): avc: denied { unmount } for pid=3312 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 77.641384][T12077] loop4: detected capacity change from 0 to 1024 [ 77.650281][T12077] EXT4-fs: Ignoring removed oldalloc option [ 77.661196][T12077] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 77.675608][T12077] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 77.686608][T12077] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 77.730429][T12077] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 77.761771][T12077] EXT4-fs error (device loop4): ext4_get_journal_inode:5796: comm syz.4.4222: inode #1: comm syz.4.4222: iget: illegal inode # [ 77.776632][T12092] loop3: detected capacity change from 0 to 8192 [ 77.784468][T12077] EXT4-fs (loop4): no journal found [ 77.789692][T12077] EXT4-fs (loop4): can't get journal size [ 77.796319][T12077] EXT4-fs (loop4): failed to initialize system zone (-22) [ 77.803638][T12077] EXT4-fs (loop4): mount failed [ 77.937902][T12122] loop3: detected capacity change from 0 to 256 [ 77.975712][T12122] FAT-fs (loop3): IO charset cp850 not found [ 78.030731][T12138] loop2: detected capacity change from 0 to 512 [ 78.046704][T12142] loop3: detected capacity change from 0 to 512 [ 78.062433][T12144] loop4: detected capacity change from 0 to 2048 [ 78.081514][T12144] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.081702][T12142] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.094462][T12138] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.122984][T12144] ext4 filesystem being mounted at /851/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.151703][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.161438][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.171171][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.213499][T12155] loop4: detected capacity change from 0 to 2048 [ 78.228360][T12155] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.244976][T12157] loop2: detected capacity change from 0 to 2048 [ 78.252096][T12160] loop3: detected capacity change from 0 to 4096 [ 78.284595][T12157] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.336823][T12160] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.361276][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.361534][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.419253][T12182] loop2: detected capacity change from 0 to 4096 [ 78.426187][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.436924][T12184] loop4: detected capacity change from 0 to 2048 [ 78.458475][T12182] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.492918][T12184] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.516271][T12192] loop3: detected capacity change from 0 to 1024 [ 78.531513][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.541919][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.571475][T12192] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.592678][T12200] loop4: detected capacity change from 0 to 132 [ 78.602039][T12198] loop2: detected capacity change from 0 to 1768 [ 78.634321][T12192] ext4 filesystem being mounted at /888/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.656183][T12205] loop2: detected capacity change from 0 to 128 [ 78.663865][T12206] loop4: detected capacity change from 0 to 256 [ 78.673464][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.765864][T12215] loop3: detected capacity change from 0 to 256 [ 78.772334][T12217] loop2: detected capacity change from 0 to 1024 [ 78.822030][T12217] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.844432][T12219] loop0: detected capacity change from 0 to 8192 [ 78.852627][T12223] loop3: detected capacity change from 0 to 512 [ 78.854358][T12225] loop4: detected capacity change from 0 to 1024 [ 78.915726][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.944629][T12225] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.997806][T12234] loop2: detected capacity change from 0 to 2048 [ 79.050734][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.080170][T12233] loop0: detected capacity change from 0 to 8192 [ 79.106105][T12238] loop2: detected capacity change from 0 to 128 [ 79.192976][T12244] loop2: detected capacity change from 0 to 128 [ 79.228782][T12242] loop0: detected capacity change from 0 to 512 [ 79.264991][T12246] loop2: detected capacity change from 0 to 2048 [ 79.335649][T12249] loop0: detected capacity change from 0 to 128 [ 79.344473][T12250] loop2: detected capacity change from 0 to 256 [ 79.449163][T12256] loop0: detected capacity change from 0 to 4096 [ 79.488984][T12256] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.554030][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.565807][T12254] loop2: detected capacity change from 0 to 8192 [ 79.615870][ T29] audit: type=1400 audit(2000000771.238:262): avc: denied { create } for pid=12260 comm="syz.1.4305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 79.636569][ T29] audit: type=1400 audit(2000000771.238:263): avc: denied { write } for pid=12260 comm="syz.1.4305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 79.994492][T12283] random: crng reseeded on system resumption [ 80.012559][T12283] Restarting kernel threads ... [ 80.027720][T12283] Done restarting kernel threads. [ 80.042559][T12285] netlink: 'syz.2.4316': attribute type 21 has an invalid length. [ 80.070614][T12263] loop0: detected capacity change from 0 to 32768 [ 80.215368][T12299] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4323'. [ 80.237721][T12299] gretap0: entered promiscuous mode [ 80.291036][T12304] loop2: detected capacity change from 0 to 2048 [ 80.345907][T12311] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4329'. [ 80.391483][T12317] loop0: detected capacity change from 0 to 128 [ 80.413914][T12319] netlink: 4844 bytes leftover after parsing attributes in process `syz.1.4333'. [ 80.647480][T12343] netlink: 'syz.2.4345': attribute type 21 has an invalid length. [ 80.655433][T12343] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4345'. [ 80.740202][T12345] loop0: detected capacity change from 0 to 8192 [ 80.822399][ T3551] loop0: p1 p2 p3 [ 80.844927][T12345] loop0: p1 p2 p3 [ 80.953423][ T3549] udevd[3549]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 80.964329][ T3550] udevd[3550]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 80.982415][ T3551] udevd[3551]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 81.027746][ T3550] udevd[3550]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 81.038870][ T3549] udevd[3549]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 81.049678][ T3551] udevd[3551]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 81.254533][T12402] No such timeout policy "syz0" [ 81.435581][T12425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4379'. [ 81.493486][T12240] loop4: detected capacity change from 0 to 262144 [ 81.503330][T12432] netlink: 'syz.0.4382': attribute type 13 has an invalid length. [ 81.542631][T12436] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 40182 - 0 [ 81.551734][T12436] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 40182 - 0 [ 81.560689][T12436] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 40182 - 0 [ 81.569551][T12436] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 40182 - 0 [ 81.576701][T12236] loop3: detected capacity change from 0 to 262144 [ 81.674849][T12436] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 40422 - 0 [ 81.683688][T12436] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 40422 - 0 [ 81.692592][T12436] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 40422 - 0 [ 81.701544][T12436] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 40422 - 0 [ 81.719517][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 81.719600][ T29] audit: type=1400 audit(2000000773.194:284): avc: denied { read write } for pid=12451 comm="syz.0.4393" name="ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 81.725092][T12436] geneve2: entered promiscuous mode [ 81.725717][ T29] audit: type=1400 audit(2000000773.194:285): avc: denied { open } for pid=12451 comm="syz.0.4393" path="/dev/ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 81.749169][T12436] geneve2: entered allmulticast mode [ 81.796212][T12456] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4395'. [ 81.858057][ T29] audit: type=1400 audit(2000000773.231:286): avc: denied { ioctl } for pid=12451 comm="syz.0.4393" path="/dev/ptp0" dev="devtmpfs" ino=245 ioctlcmd=0x3d04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 81.957223][ T29] audit: type=1400 audit(2000000773.323:287): avc: denied { connect } for pid=12459 comm="syz.2.4397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 81.976776][ T29] audit: type=1400 audit(2000000773.370:288): avc: denied { connect } for pid=12463 comm="syz.3.4400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 82.102057][T12491] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4411'. [ 82.124833][ T29] audit: type=1326 audit(2000000773.563:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12492 comm="syz.0.4413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8dcde9a9 code=0x7ffc0000 [ 82.178180][T12497] xt_TCPMSS: Only works on TCP SYN packets [ 82.212257][ T29] audit: type=1326 audit(2000000773.582:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12492 comm="syz.0.4413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fde8dcde9a9 code=0x7ffc0000 [ 82.235813][ T29] audit: type=1326 audit(2000000773.582:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12492 comm="syz.0.4413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8dcde9a9 code=0x7ffc0000 [ 82.259243][ T29] audit: type=1326 audit(2000000773.582:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12492 comm="syz.0.4413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8dcde9a9 code=0x7ffc0000 [ 82.282758][ T29] audit: type=1400 audit(2000000773.591:293): avc: denied { setopt } for pid=12493 comm="syz.3.4415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 82.343620][T12513] netlink: 5 bytes leftover after parsing attributes in process `syz.2.4432'. [ 82.425866][T12528] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4429'. [ 82.530159][T12544] Driver unsupported XDP return value 0 on prog (id 432) dev N/A, expect packet loss! [ 82.585950][T12548] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4440'. [ 82.756746][T12573] random: crng reseeded on system resumption [ 82.800765][T12573] Restarting kernel threads ... [ 82.822436][T12573] Done restarting kernel threads. [ 83.043399][T12619] ieee802154 phy0 wpan0: encryption failed: -22 [ 83.184234][T12643] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 83.245582][T12652] loop3: detected capacity change from 0 to 1024 [ 83.276467][T12652] EXT4-fs: Ignoring removed nobh option [ 83.311944][T12652] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 83.344191][T12652] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #11: comm syz.3.4489: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 83.421070][T12689] netlink: 'syz.1.4507': attribute type 4 has an invalid length. [ 83.434361][T12652] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.4489: couldn't read orphan inode 11 (err -117) [ 83.458893][T12652] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.487385][T12652] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.4489: Invalid block bitmap block 0 in block_group 0 [ 83.522542][T12652] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4489: Failed to acquire dquot type 0 [ 83.537634][T12707] @: renamed from bond_slave_0 (while UP) [ 83.580549][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.581778][T12713] netlink: 'syz.1.4519': attribute type 2 has an invalid length. [ 83.597329][T12713] netlink: 'syz.1.4519': attribute type 1 has an invalid length. [ 83.756393][T12737] ieee802154 phy0 wpan0: encryption failed: -22 [ 83.929115][T12774] loop2: detected capacity change from 0 to 512 [ 83.981357][T12774] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.011038][T12774] ext4 filesystem being mounted at /930/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.023375][T12774] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.4549: corrupted xattr block 33: invalid ea_ino [ 84.044335][T12774] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 84.059316][T12774] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.4549: corrupted xattr block 33: invalid ea_ino [ 84.097280][T12774] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 84.108961][T12774] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.4549: corrupted xattr block 33: invalid ea_ino [ 84.126213][T12774] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 84.174549][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.229374][T12832] netlink: 'syz.1.4577': attribute type 29 has an invalid length. [ 84.241352][T12835] netlink: 'syz.2.4572': attribute type 7 has an invalid length. [ 84.308048][T12844] Cannot find add_set index 0 as target [ 84.443348][T12874] x_tables: unsorted underflow at hook 4 [ 84.844802][T12959] netlink: 'syz.1.4642': attribute type 1 has an invalid length. [ 84.886361][T12968] loop0: detected capacity change from 0 to 512 [ 84.941704][T12978] cgroup: name respecified [ 84.955856][T12968] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.982804][T12985] netlink: 'syz.1.4653': attribute type 1 has an invalid length. [ 85.032331][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.381398][T13059] block device autoloading is deprecated and will be removed. [ 85.413834][T13059] syz.1.4689: attempt to access beyond end of device [ 85.413834][T13059] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 85.530637][T13080] Option ' ' to dns_resolver key: bad/missing value [ 85.696253][T13112] xt_CT: You must specify a L4 protocol and not use inversions on it [ 85.744905][T13121] tc_dump_action: action bad kind [ 86.076761][T13177] validate_nla: 1 callbacks suppressed [ 86.076775][T13177] netlink: 'syz.2.4748': attribute type 1 has an invalid length. [ 86.090181][T13177] __nla_validate_parse: 14 callbacks suppressed [ 86.090195][T13177] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4748'. [ 86.365173][T13229] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 86.529718][T13252] netlink: 'syz.3.4783': attribute type 1 has an invalid length. [ 86.556368][T13254] netlink: 45 bytes leftover after parsing attributes in process `syz.3.4788'. [ 86.663400][T13271] netlink: 'syz.2.4794': attribute type 11 has an invalid length. [ 86.676575][T13276] autofs4:pid:13276:validate_dev_ioctl: path string terminator missing for cmd(0xc018937e) [ 86.742997][T13283] xt_hashlimit: invalid interval [ 86.812984][T13295] xt_l2tp: missing protocol rule (udp|l2tpip) [ 86.852239][T13298] loop0: detected capacity change from 0 to 512 [ 86.916103][T13298] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.005668][T13298] ext4 filesystem being mounted at /924/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.029150][T13322] loop4: detected capacity change from 0 to 1024 [ 87.050974][T13322] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.060046][T13298] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.4808: corrupted xattr block 33: invalid ea_ino [ 87.081739][T13322] ext4 filesystem being mounted at /904/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.093453][T13298] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 87.102435][T13298] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.4808: corrupted xattr block 33: invalid ea_ino [ 87.124479][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.146592][ T29] kauditd_printk_skb: 1728 callbacks suppressed [ 87.146606][ T29] audit: type=1326 audit(2000000778.196:2020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13311 comm="syz.3.4813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d980e9a9 code=0x7ff00000 [ 87.177398][ T29] audit: type=1326 audit(2000000778.233:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13311 comm="syz.3.4813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d980e9a9 code=0x7ff00000 [ 87.190948][T13298] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 87.201011][ T29] audit: type=1326 audit(2000000778.233:2022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13311 comm="syz.3.4813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d980e9a9 code=0x7ff00000 [ 87.259496][T13298] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.4808: corrupted xattr block 33: invalid ea_ino [ 87.266286][T13339] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4826'. [ 87.273131][ T29] audit: type=1326 audit(2000000778.233:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13311 comm="syz.3.4813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d980e9a9 code=0x7ff00000 [ 87.281768][T13339] netlink: 116 bytes leftover after parsing attributes in process `syz.2.4826'. [ 87.305349][ T29] audit: type=1326 audit(2000000778.233:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13311 comm="syz.3.4813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d980e9a9 code=0x7ff00000 [ 87.337973][ T29] audit: type=1326 audit(2000000778.233:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13311 comm="syz.3.4813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d980e9a9 code=0x7ff00000 [ 87.361838][ T29] audit: type=1326 audit(2000000778.233:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13311 comm="syz.3.4813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d980e9a9 code=0x7ff00000 [ 87.361857][T13298] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 87.394477][ T29] audit: type=1326 audit(2000000778.233:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13311 comm="syz.3.4813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d980e9a9 code=0x7ff00000 [ 87.418544][ T29] audit: type=1326 audit(2000000778.233:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13311 comm="syz.3.4813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d980e9a9 code=0x7ff00000 [ 87.442337][ T29] audit: type=1326 audit(2000000778.233:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13311 comm="syz.3.4813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d980e9a9 code=0x7ff00000 [ 87.571587][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.736108][T13375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4842'. [ 87.745230][T13375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4842'. [ 87.994201][T13411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4860'. [ 88.026859][T13413] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 88.393755][T13465] vhci_hcd: invalid port number 23 [ 88.398926][T13465] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 88.439359][T13478] bridge_slave_0: left allmulticast mode [ 88.445149][T13478] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.470826][T13481] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4895'. [ 88.479853][T13481] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4895'. [ 88.521858][T13483] loop0: detected capacity change from 0 to 512 [ 88.544030][T13479] loop4: detected capacity change from 0 to 8192 [ 88.569120][T13487] veth0_macvtap: left promiscuous mode [ 88.570187][T13479] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 88.583217][T13479] FAT-fs (loop4): Filesystem has been set read-only [ 88.589868][T13487] macvtap0: entered allmulticast mode [ 88.623116][T13483] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.4896: Failed to acquire dquot type 1 [ 88.661328][T13483] EXT4-fs (loop0): 1 truncate cleaned up [ 88.668498][T13483] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.681342][T13483] ext4 filesystem being mounted at /941/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.738622][T13499] program syz.4.4903 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 88.781825][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.835680][T13513] xt_cgroup: path and classid specified [ 88.924673][T13527] netlink: 300 bytes leftover after parsing attributes in process `syz.4.4916'. [ 89.034440][T13543] SET target dimension over the limit! [ 89.042907][T13545] Cannot find del_set index 2 as target [ 89.127353][T13557] loop4: detected capacity change from 0 to 1024 [ 89.169812][T13557] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.202642][T13557] process 'syz.4.4931' launched './file1' with NULL argv: empty string added [ 89.248510][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.514409][T13609] netlink: 'syz.2.4955': attribute type 39 has an invalid length. [ 89.579220][T13619] xt_time: unknown flags 0x4 [ 90.074903][T13692] netlink: 'syz.2.4997': attribute type 39 has an invalid length. [ 90.211335][T13709] netlink: 'syz.4.5006': attribute type 22 has an invalid length. [ 90.492134][T13766] lo: entered promiscuous mode [ 90.506811][T13766] tunl0: entered promiscuous mode [ 90.520865][T13766] gre0: entered promiscuous mode [ 90.527052][T13766] gretap0: entered promiscuous mode [ 90.534610][T13766] erspan0: entered promiscuous mode [ 90.542012][T13766] ip_vti0: entered promiscuous mode [ 90.547204][T13767] usb usb8: usbfs: process 13767 (syz.2.5033) did not claim interface 0 before use [ 90.551921][T13766] ip6_vti0: entered promiscuous mode [ 90.563391][T13766] sit0: entered promiscuous mode [ 90.569638][T13766] ip6tnl0: entered promiscuous mode [ 90.586301][T13766] ip6gre0: entered promiscuous mode [ 90.599373][T13766] syz_tun: entered promiscuous mode [ 90.601501][T13781] xt_TCPMSS: Only works on TCP SYN packets [ 90.606375][T13766] ip6gretap0: entered promiscuous mode [ 90.610564][T13780] tmpfs: Bad value for 'mpol' [ 90.620071][T13766] bridge0: entered promiscuous mode [ 90.633169][T13766] vcan0: entered promiscuous mode [ 90.639774][T13766] bond0: entered promiscuous mode [ 90.644918][T13766] @: entered promiscuous mode [ 90.650011][T13766] bond_slave_1: entered promiscuous mode [ 90.668846][T13766] team0: entered promiscuous mode [ 90.674003][T13766] team_slave_0: entered promiscuous mode [ 90.679729][T13766] team_slave_1: entered promiscuous mode [ 90.688213][T13766] dummy0: entered promiscuous mode [ 90.690105][T13783] Cannot find del_set index 1 as target [ 90.694467][T13766] nlmon0: entered promiscuous mode [ 90.706145][T13766] caif0: entered promiscuous mode [ 90.711332][T13766] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 91.200461][T13856] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 91.207771][T13856] IPv6: NLM_F_CREATE should be set when creating new route [ 91.214994][T13856] IPv6: NLM_F_CREATE should be set when creating new route [ 91.222210][T13856] IPv6: NLM_F_CREATE should be set when creating new route [ 91.278066][T13863] netlink: 'syz.0.5081': attribute type 39 has an invalid length. [ 91.517636][T13898] syz.4.5099 uses obsolete (PF_INET,SOCK_PACKET) [ 91.525009][T13899] __nla_validate_parse: 11 callbacks suppressed [ 91.525024][T13899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5097'. [ 91.545045][T13899] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (40192) [ 91.567393][T13901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5100'. [ 91.589687][T13904] netlink: 'syz.4.5101': attribute type 39 has an invalid length. [ 91.605899][T13907] netlink: 'syz.1.5103': attribute type 10 has an invalid length. [ 91.617466][T13909] netlink: 'syz.0.5104': attribute type 4 has an invalid length. [ 91.626869][T13907] geneve1: entered promiscuous mode [ 91.642515][T13907] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 91.898082][T13951] IPv6: Can't replace route, no match found [ 91.997845][T13968] loop0: detected capacity change from 0 to 512 [ 92.059076][T13968] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 92.070897][T13981] C: renamed from team_slave_0 (while UP) [ 92.080461][T13968] EXT4-fs (loop0): orphan cleanup on readonly fs [ 92.088029][T13968] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 92.089275][T13981] netlink: 'syz.4.5138': attribute type 3 has an invalid length. [ 92.110510][T13981] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5138'. [ 92.119550][T13981] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 92.126997][T13968] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 92.150528][T13968] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.5131: bg 0: block 40: padding at end of block bitmap is not set [ 92.165250][T13968] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 92.174534][T13968] EXT4-fs (loop0): 1 truncate cleaned up [ 92.196629][T13968] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 92.274657][T14004] netlink: 'syz.3.5148': attribute type 39 has an invalid length. [ 92.326034][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.482680][T14047] usb usb1: usbfs: process 14047 (syz.1.5168) did not claim interface 0 before use [ 92.509131][T14053] netlink: 'syz.1.5172': attribute type 39 has an invalid length. [ 92.556519][T14061] netlink: 2116 bytes leftover after parsing attributes in process `syz.3.5176'. [ 92.603857][ T29] kauditd_printk_skb: 11261 callbacks suppressed [ 92.603871][ T29] audit: type=1400 audit(2000000783.235:13288): avc: denied { relabelfrom } for pid=14068 comm="syz.3.5180" name="" dev="pipefs" ino=36617 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 92.633147][T14069] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 92.634614][T14074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5182'. [ 92.670832][ T29] audit: type=1400 audit(2000000783.281:13289): avc: denied { relabelto } for pid=14068 comm="syz.3.5180" name="" dev="pipefs" ino=36617 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:dhcp_state_t:s0" [ 92.697828][ T29] audit: type=1326 audit(2000000783.281:13290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14070 comm="syz.0.5181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8dcde9a9 code=0x7ffc0000 [ 92.721512][ T29] audit: type=1326 audit(2000000783.281:13291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14070 comm="syz.0.5181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8dcde9a9 code=0x7ffc0000 [ 92.745104][ T29] audit: type=1326 audit(2000000783.290:13292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14070 comm="syz.0.5181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7fde8dcde9a9 code=0x7ffc0000 [ 92.768695][ T29] audit: type=1326 audit(2000000783.290:13293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14070 comm="syz.0.5181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8dcde9a9 code=0x7ffc0000 [ 92.792355][ T29] audit: type=1326 audit(2000000783.290:13294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14070 comm="syz.0.5181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8dcde9a9 code=0x7ffc0000 [ 92.869736][ T29] audit: type=1400 audit(2000000783.484:13295): avc: denied { connect } for pid=14099 comm="syz.3.5196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 92.995836][T14130] bridge0: port 1(veth0_to_bridge) entered blocking state [ 93.003186][T14130] bridge0: port 1(veth0_to_bridge) entered disabled state [ 93.025415][T14130] veth0_to_bridge: entered allmulticast mode [ 93.034667][T14130] veth0_to_bridge: entered promiscuous mode [ 93.040816][T14130] bridge0: port 1(veth0_to_bridge) entered blocking state [ 93.047969][T14130] bridge0: port 1(veth0_to_bridge) entered forwarding state [ 93.085588][T14143] loop4: detected capacity change from 0 to 512 [ 93.101113][T14145] C: renamed from team_slave_0 (while UP) [ 93.116143][T14145] netlink: 'syz.2.5217': attribute type 3 has an invalid length. [ 93.124009][T14145] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5217'. [ 93.133116][T14145] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 93.227240][T14166] netlink: 'syz.4.5226': attribute type 1 has an invalid length. [ 93.291931][ T29] audit: type=1400 audit(2000000783.872:13296): avc: denied { name_connect } for pid=14176 comm="syz.3.5232" dest=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 93.323936][T14183] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 93.361851][ T29] audit: type=1400 audit(2000000783.936:13297): avc: denied { getopt } for pid=14189 comm="syz.3.5240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 93.478405][T14216] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 93.566969][T14235] netlink: 'syz.2.5254': attribute type 7 has an invalid length. [ 93.574843][T14235] netlink: 'syz.2.5254': attribute type 5 has an invalid length. [ 93.589030][T14238] loop3: detected capacity change from 0 to 512 [ 93.634125][T14238] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.657089][T14238] ext4 filesystem being mounted at /1030/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.674102][T14238] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.5253: corrupted xattr block 33: e_value out of bounds [ 93.688673][T14250] dummy0: entered allmulticast mode [ 93.696700][T14238] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 93.702800][T14249] dummy0: left allmulticast mode [ 93.716180][T14238] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.5253: corrupted xattr block 33: e_value out of bounds [ 93.749559][T14238] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 93.786646][T14262] Cannot find set identified by id 3 to match [ 93.822964][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.902144][T14281] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5267'. [ 94.062880][T14307] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5284'. [ 94.223098][T14324] SELinux: security_context_str_to_sid () failed with errno=-22 [ 94.578076][T14372] vti0: entered allmulticast mode [ 94.702015][T14401] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5323'. [ 94.721436][T14401] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5323'. [ 94.853138][T14430] IPv6: Can't replace route, no match found [ 94.956142][T14454] loop4: detected capacity change from 0 to 1024 [ 95.005198][T14454] EXT4-fs: Ignoring removed nobh option [ 95.010798][T14454] EXT4-fs: Ignoring removed bh option [ 95.062719][T14454] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.122188][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.139270][T14485] vti0: entered allmulticast mode [ 95.549666][T14566] loop4: detected capacity change from 0 to 512 [ 95.597718][T14566] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.612807][T14566] ext4 filesystem being mounted at /1020/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.644163][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.683722][T14588] loop4: detected capacity change from 0 to 128 [ 95.705217][T14588] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 95.782899][T14588] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 96.186457][T14685] xt_cgroup: xt_cgroup: no path or classid specified [ 96.314540][T14715] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 96.397034][T14731] xt_hashlimit: size too large, truncated to 1048576 [ 96.597957][T14763] loop3: detected capacity change from 0 to 512 [ 96.627902][T14763] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff05) [ 96.635762][T14763] FAT-fs (loop3): Filesystem has been set read-only [ 96.889595][T14820] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.197886][T14886] __nla_validate_parse: 11 callbacks suppressed [ 97.197898][T14886] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5562'. [ 97.226671][T14886] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 97.269183][T14897] netlink: 92 bytes leftover after parsing attributes in process `syz.0.5567'. [ 97.347268][T14914] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5575'. [ 97.356348][T14914] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5575'. [ 97.370804][T14914] geneve2: entered promiscuous mode [ 97.376199][T14914] geneve2: entered allmulticast mode [ 97.487929][T14936] validate_nla: 11 callbacks suppressed [ 97.487976][T14936] netlink: 'syz.0.5586': attribute type 10 has an invalid length. [ 97.511088][T14936] macvlan1: entered promiscuous mode [ 97.516540][T14936] macvlan1: entered allmulticast mode [ 97.550709][T14936] veth1_vlan: entered allmulticast mode [ 97.557880][T14936] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 97.736121][T14971] SET target dimension over the limit! [ 97.896134][T15003] lo: left promiscuous mode [ 97.902893][T15003] tunl0: left promiscuous mode [ 97.913079][T15003] gre0: left promiscuous mode [ 97.935293][T15003] gretap0: left promiscuous mode [ 97.942100][T15003] erspan0: left promiscuous mode [ 97.951830][T15003] ip_vti0: left promiscuous mode [ 97.965773][T15003] ip6_vti0: left promiscuous mode [ 97.979741][T15003] sit0: left promiscuous mode [ 97.996607][T15003] ip6tnl0: left promiscuous mode [ 98.008227][T15003] ip6gre0: left promiscuous mode [ 98.020406][T15003] syz_tun: left promiscuous mode [ 98.027748][T15003] ip6gretap0: left promiscuous mode [ 98.034615][T15003] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.041851][T15003] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.049534][T15003] bridge0: left promiscuous mode [ 98.056088][T15003] vcan0: left promiscuous mode [ 98.062133][T15003] bond0: left promiscuous mode [ 98.066925][T15003] @: left promiscuous mode [ 98.071751][T15003] bond_slave_1: left promiscuous mode [ 98.100474][T15003] team0: left promiscuous mode [ 98.110309][T15003] C: left promiscuous mode [ 98.114940][T15003] team_slave_1: left promiscuous mode [ 98.123064][T15003] dummy0: left promiscuous mode [ 98.134335][T15003] nlmon0: left promiscuous mode [ 98.140490][T15003] caif0: left promiscuous mode [ 98.171877][T15003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.181348][T15003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.207581][T15003] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.216589][T15003] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.225630][T15003] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.234525][T15003] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.309274][T15045] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5640'. [ 98.310706][T15043] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5637'. [ 98.406169][T15058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5647'. [ 98.421323][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 98.421334][ T29] audit: type=1326 audit(2000000788.606:13342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15059 comm="syz.3.5646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d980e9a9 code=0x50000 [ 98.422480][T15062] loop4: detected capacity change from 0 to 128 [ 98.433484][ T29] audit: type=1326 audit(2000000788.615:13343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15059 comm="syz.3.5646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d980e9a9 code=0x50000 [ 98.459359][T15058] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.480362][ T29] audit: type=1326 audit(2000000788.615:13344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15059 comm="syz.3.5646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d980e9a9 code=0x50000 [ 98.511535][ T29] audit: type=1326 audit(2000000788.615:13345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15059 comm="syz.3.5646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d980e9a9 code=0x50000 [ 98.513079][T15058] batadv_slave_0: entered promiscuous mode [ 98.535107][ T29] audit: type=1326 audit(2000000788.615:13346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15059 comm="syz.3.5646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d980e9a9 code=0x50000 [ 98.540697][T15058] batadv_slave_0: entered allmulticast mode [ 98.563886][ T29] audit: type=1326 audit(2000000788.615:13347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15059 comm="syz.3.5646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d980e9a9 code=0x50000 [ 98.593096][ T29] audit: type=1326 audit(2000000788.615:13348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15059 comm="syz.3.5646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d980e9a9 code=0x50000 [ 98.616419][ T29] audit: type=1326 audit(2000000788.615:13349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15059 comm="syz.3.5646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d980e9a9 code=0x50000 [ 98.639834][ T29] audit: type=1326 audit(2000000788.615:13350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15059 comm="syz.3.5646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d980e9a9 code=0x50000 [ 98.663125][ T29] audit: type=1326 audit(2000000788.615:13351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15059 comm="syz.3.5646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d980e9a9 code=0x50000 [ 98.737987][T15073] loop0: detected capacity change from 0 to 512 [ 98.826250][T15073] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.843065][T15088] loop4: detected capacity change from 0 to 512 [ 98.871887][T15073] ext4 filesystem being mounted at /1084/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.886546][T15073] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.5654: corrupted xattr block 19: overlapping e_value [ 98.904194][T15088] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 98.921438][T15073] EXT4-fs (loop0): Remounting filesystem read-only [ 98.928091][T15073] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 98.937134][T15073] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 98.952890][T15088] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #17: comm syz.4.5660: iget: bad i_size value: -6917529027641081756 [ 98.975540][T15101] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5665'. [ 98.978468][T15088] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.5660: couldn't read orphan inode 17 (err -117) [ 98.984531][T15101] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5665'. [ 98.997256][T15088] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.027233][T15103] C: renamed from team_slave_0 (while UP) [ 99.033196][T15088] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5660: bg 0: block 65: padding at end of block bitmap is not set [ 99.053839][T15088] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.5660: Failed to acquire dquot type 0 [ 99.068414][T15103] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5666'. [ 99.158302][T15115] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 99.164946][T15115] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 99.172717][T15115] vhci_hcd vhci_hcd.0: Device attached [ 99.190384][T15122] netlink: 'syz.4.5674': attribute type 9 has an invalid length. [ 99.195725][T15117] vhci_hcd: connection closed [ 99.198282][T15122] netlink: 'syz.4.5674': attribute type 6 has an invalid length. [ 99.204675][ T12] vhci_hcd: stop threads [ 99.214814][T15121] loop0: detected capacity change from 0 to 256 [ 99.215129][ T12] vhci_hcd: release socket [ 99.225936][ T12] vhci_hcd: disconnect device [ 99.235926][T15121] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 99.307036][T15126] IPv6: sit1: Disabled Multicast RS [ 99.648589][T15179] tmpfs: Bad value for 'mpol' [ 99.686438][T15182] netlink: 'syz.4.5703': attribute type 1 has an invalid length. [ 99.815765][T15202] syz.2.5713: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 99.830398][T15202] CPU: 0 UID: 0 PID: 15202 Comm: syz.2.5713 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(voluntary) [ 99.830431][T15202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 99.830445][T15202] Call Trace: [ 99.830452][T15202] [ 99.830460][T15202] __dump_stack+0x1d/0x30 [ 99.830539][T15202] dump_stack_lvl+0xe8/0x140 [ 99.830561][T15202] dump_stack+0x15/0x1b [ 99.830626][T15202] warn_alloc+0x12b/0x1a0 [ 99.830658][T15202] ? audit_log_end+0x1d7/0x1f0 [ 99.830698][T15202] ? audit_log_end+0x1d7/0x1f0 [ 99.830770][T15202] __vmalloc_node_range_noprof+0x9c/0xe00 [ 99.830831][T15202] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 99.830902][T15202] ? slow_avc_audit+0x104/0x140 [ 99.830933][T15202] ? should_fail_ex+0x30/0x280 [ 99.831043][T15202] ? xskq_create+0x36/0xe0 [ 99.831070][T15202] vmalloc_user_noprof+0x7d/0xb0 [ 99.831138][T15202] ? xskq_create+0x80/0xe0 [ 99.831163][T15202] xskq_create+0x80/0xe0 [ 99.831189][T15202] xsk_init_queue+0x95/0xf0 [ 99.831286][T15202] xsk_setsockopt+0x35c/0x510 [ 99.831311][T15202] ? __pfx_xsk_setsockopt+0x10/0x10 [ 99.831334][T15202] __sys_setsockopt+0x181/0x200 [ 99.831372][T15202] __x64_sys_setsockopt+0x64/0x80 [ 99.831504][T15202] x64_sys_call+0x2bd5/0x2fb0 [ 99.831523][T15202] do_syscall_64+0xd2/0x200 [ 99.831540][T15202] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 99.831624][T15202] ? clear_bhb_loop+0x40/0x90 [ 99.831648][T15202] ? clear_bhb_loop+0x40/0x90 [ 99.831719][T15202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.831763][T15202] RIP: 0033:0x7fc644f1e9a9 [ 99.831782][T15202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.831805][T15202] RSP: 002b:00007fc643587038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 99.831822][T15202] RAX: ffffffffffffffda RBX: 00007fc645145fa0 RCX: 00007fc644f1e9a9 [ 99.831834][T15202] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 99.831845][T15202] RBP: 00007fc644fa0d69 R08: 0000000000000004 R09: 0000000000000000 [ 99.831857][T15202] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.831946][T15202] R13: 0000000000000000 R14: 00007fc645145fa0 R15: 00007ffdd539aa28 [ 99.831964][T15202] [ 99.831975][T15202] Mem-Info: [ 100.062832][T15202] active_anon:8011 inactive_anon:1 isolated_anon:0 [ 100.062832][T15202] active_file:20166 inactive_file:2311 isolated_file:0 [ 100.062832][T15202] unevictable:0 dirty:317 writeback:0 [ 100.062832][T15202] slab_reclaimable:3067 slab_unreclaimable:14245 [ 100.062832][T15202] mapped:29100 shmem:467 pagetables:1454 [ 100.062832][T15202] sec_pagetables:0 bounce:0 [ 100.062832][T15202] kernel_misc_reclaimable:0 [ 100.062832][T15202] free:1861031 free_pcp:28277 free_cma:0 [ 100.107859][T15202] Node 0 active_anon:32044kB inactive_anon:4kB active_file:80664kB inactive_file:9244kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116400kB dirty:1268kB writeback:0kB shmem:1868kB writeback_tmp:0kB kernel_stack:3344kB pagetables:5932kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 100.136845][T15202] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 100.152126][T15227] usb usb1: usbfs: process 15227 (syz.0.5726) did not claim interface 0 before use [ 100.165413][T15202] lowmem_reserve[]: 0 2882 7860 7860 [ 100.180296][T15202] Node 0 DMA32 free:2947720kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951348kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:100kB free_cma:0kB [ 100.210578][T15202] lowmem_reserve[]: 0 0 4978 4978 [ 100.215731][T15202] Node 0 Normal free:4480692kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32164kB inactive_anon:4kB active_file:80664kB inactive_file:9212kB unevictable:0kB writepending:1280kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:109300kB local_pcp:97100kB free_cma:0kB [ 100.247840][T15202] lowmem_reserve[]: 0 0 0 0 [ 100.252443][T15202] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 100.265257][T15202] Node 0 DMA32: 4*4kB (M) 3*8kB (M) 2*16kB (M) 2*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947720kB [ 100.281552][T15202] Node 0 Normal: 1752*4kB (UME) 1026*8kB (UME) 256*16kB (UME) 303*32kB (UME) 380*64kB (UM) 189*128kB (UM) 143*256kB (UME) 126*512kB (UME) 101*1024kB (UM) 60*2048kB (UME) 995*4096kB (UM) = 4480464kB [ 100.301397][T15202] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 100.310799][T15202] 22902 total pagecache pages [ 100.315510][T15202] 4 pages in swap cache [ 100.319703][T15202] Free swap = 124980kB [ 100.323957][T15202] Total swap = 124996kB [ 100.328107][T15202] 2097051 pages RAM [ 100.331981][T15202] 0 pages HighMem/MovableOnly [ 100.336712][T15202] 80814 pages reserved [ 100.420023][T15243] netlink: 'syz.4.5734': attribute type 10 has an invalid length. [ 100.442040][T15243] macvlan1: entered promiscuous mode [ 100.447603][T15243] macvlan1: entered allmulticast mode [ 100.463854][T15243] veth1_vlan: entered allmulticast mode [ 100.471653][T15243] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 100.517546][T15252] netlink: 'syz.2.5738': attribute type 10 has an invalid length. [ 100.541817][T15252] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.548993][T15252] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.562040][T15258] tmpfs: Unexpected value for 'inode32' [ 100.600508][T15252] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.607642][T15252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.614979][T15252] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.622046][T15252] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.631147][T15252] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 100.913036][T15306] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 101.274166][T15348] bond1: entered promiscuous mode [ 101.279287][T15348] bond1: entered allmulticast mode [ 101.283323][T15350] loop0: detected capacity change from 0 to 512 [ 101.284774][T15348] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.300897][T15348] bond1 (unregistering): Released all slaves [ 101.366983][T15363] netlink: 'syz.2.5792': attribute type 12 has an invalid length. [ 101.423396][T15371] x_tables: duplicate entry at hook 2 [ 101.517271][T15382] loop4: detected capacity change from 0 to 512 [ 101.524411][T15387] netlink: 'syz.1.5804': attribute type 1 has an invalid length. [ 101.596940][T15382] EXT4-fs (loop4): 1 orphan inode deleted [ 101.612758][ T414] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 101.637419][T15382] ext4 filesystem being mounted at /1108/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 101.741465][T15418] loop2: detected capacity change from 0 to 512 [ 101.777727][T15424] SELinux: syz.3.5822 (15424) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 101.778462][T15418] EXT4-fs mount: 4 callbacks suppressed [ 101.778474][T15418] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.793331][T15425] xt_hashlimit: max too large, truncated to 1048576 [ 101.828013][T15418] ext4 filesystem being mounted at /1232/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.884306][T15418] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.5818: corrupted xattr block 33: e_value out of bounds [ 101.914989][T15418] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 101.926108][T15446] netlink: 'syz.0.5832': attribute type 29 has an invalid length. [ 101.946133][T15418] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.5818: corrupted xattr block 33: e_value out of bounds [ 101.992288][T15457] loop3: detected capacity change from 0 to 164 [ 101.996704][T15418] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 102.024473][T15457] rock: directory entry would overflow storage [ 102.027246][T15418] SELinux: Context system_u:object_r:logrotate_var_lib_t:s0 is not valid (left unmapped). [ 102.030650][T15457] rock: sig=0x66, size=4, remaining=3 [ 102.062740][T15461] netlink: 'syz.0.5838': attribute type 8 has an invalid length. [ 102.070593][T15418] EXT4-fs error (device loop2): ext4_xattr_block_find:1869: inode #15: comm syz.2.5818: corrupted xattr block 33: e_value out of bounds [ 102.163156][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.259509][T15485] loop2: detected capacity change from 0 to 512 [ 102.260200][T15489] ieee802154 phy0 wpan0: encryption failed: -90 [ 102.306832][T15485] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.323861][T15485] ext4 filesystem being mounted at /1233/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.370356][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.477190][T15522] loop2: detected capacity change from 0 to 512 [ 102.492224][T15525] netdevsim netdevsim1 5: renamed from netdevsim0 (while UP) [ 102.543305][T15522] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 102.595518][T15522] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #17: comm syz.2.5865: iget: bad i_size value: -6917529027641081756 [ 102.618095][T15522] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.5865: couldn't read orphan inode 17 (err -117) [ 102.633028][T15522] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.645786][T15551] __nla_validate_parse: 11 callbacks suppressed [ 102.645811][T15551] netlink: 100 bytes leftover after parsing attributes in process `syz.4.5880'. [ 102.674678][T15522] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5865: bg 0: block 65: padding at end of block bitmap is not set [ 102.705791][T15522] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.5865: Failed to acquire dquot type 0 [ 102.759467][T15569] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5889'. [ 102.774090][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.938707][T15598] validate_nla: 1 callbacks suppressed [ 102.938722][T15598] netlink: 'syz.0.5903': attribute type 10 has an invalid length. [ 102.955715][T15598] bridge0: port 1(veth0_to_bridge) entered disabled state [ 102.962937][T15598] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.982360][T15598] bridge0: port 1(veth0_to_bridge) entered blocking state [ 102.989528][T15598] bridge0: port 1(veth0_to_bridge) entered forwarding state [ 102.996869][T15598] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.004060][T15598] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.013994][T15598] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 103.025264][T15604] netlink: 6 bytes leftover after parsing attributes in process `syz.2.5905'. [ 103.036100][T15604] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 103.074351][T15614] 8021q: adding VLAN 0 to HW filter on device bond2 [ 103.102008][T15621] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5914'. [ 103.111190][T15621] netlink: 6 bytes leftover after parsing attributes in process `syz.0.5914'. [ 103.158777][T15631] dummy0: entered promiscuous mode [ 103.164089][T15631] dummy0: entered allmulticast mode [ 103.194145][T15633] netlink: 'syz.3.5920': attribute type 10 has an invalid length. [ 103.248799][T15633] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.256173][T15633] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.308049][T15633] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.315211][T15633] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.322526][T15633] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.329604][T15633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.338641][T15633] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 103.347522][T15647] netlink: 62967 bytes leftover after parsing attributes in process `syz.0.5927'. [ 103.389939][T15664] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.5935'. [ 103.443819][T15675] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5941'. [ 103.564629][T15700] netlink: 'syz.3.5952': attribute type 39 has an invalid length. [ 103.605120][T15700] veth1_macvtap: left promiscuous mode [ 103.653630][T15716] loop2: detected capacity change from 0 to 256 [ 103.710101][T15716] FAT-fs (loop2): Directory bread(block 64) failed [ 103.725057][T15716] FAT-fs (loop2): Directory bread(block 65) failed [ 103.747233][T15716] FAT-fs (loop2): Directory bread(block 66) failed [ 103.760488][T15727] loop4: detected capacity change from 0 to 4096 [ 103.767490][T15716] FAT-fs (loop2): Directory bread(block 67) failed [ 103.782195][T15737] xt_connbytes: Forcing CT accounting to be enabled [ 103.782566][T15727] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.792474][T15716] FAT-fs (loop2): Directory bread(block 68) failed [ 103.821287][T15716] FAT-fs (loop2): Directory bread(block 69) failed [ 103.827926][T15716] FAT-fs (loop2): Directory bread(block 70) failed [ 103.834789][T15716] FAT-fs (loop2): Directory bread(block 71) failed [ 103.837049][T15727] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.841356][T15716] FAT-fs (loop2): Directory bread(block 72) failed [ 103.857128][T15716] FAT-fs (loop2): Directory bread(block 73) failed [ 103.904468][T15749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5977'. [ 103.913499][T15749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5977'. [ 104.002864][T15759] netlink: 'syz.2.5981': attribute type 13 has an invalid length. [ 104.032955][T15769] loop3: detected capacity change from 0 to 512 [ 104.033551][T15759] gretap0: refused to change device tx_queue_len [ 104.045609][T15759] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 104.094905][T15769] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.127281][T15769] ext4 filesystem being mounted at /1145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.137040][T15781] netlink: 'syz.0.5992': attribute type 3 has an invalid length. [ 104.151513][T15769] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.5986: corrupted xattr block 33: e_value out of bounds [ 104.166719][T15769] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 104.175904][T15769] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.5986: corrupted xattr block 33: e_value out of bounds [ 104.200731][T15769] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 104.216171][T15769] EXT4-fs error (device loop3): ext4_xattr_block_find:1869: inode #15: comm syz.3.5986: corrupted xattr block 33: e_value out of bounds [ 104.237616][T15789] bond1: entered promiscuous mode [ 104.242743][T15789] bond1: entered allmulticast mode [ 104.257116][T15789] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.282220][T15789] bond1 (unregistering): Released all slaves [ 104.290738][T15800] loop2: detected capacity change from 0 to 512 [ 104.300321][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.310013][T15800] EXT4-fs: Ignoring removed oldalloc option [ 104.357773][T15800] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.6001: Parent and EA inode have the same ino 15 [ 104.357852][ T29] kauditd_printk_skb: 11354 callbacks suppressed [ 104.357863][ T29] audit: type=1400 audit(2000000794.088:24698): avc: denied { module_load } for pid=15805 comm="syz.4.6005" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=system permissive=1 [ 104.373145][T15809] vti0: entered promiscuous mode [ 104.377251][T15806] kernel read not supported for file /policy (pid: 15806 comm: syz.4.6005) [ 104.400578][T15809] vti0: entered allmulticast mode [ 104.420453][T15800] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.6001: Parent and EA inode have the same ino 15 [ 104.469116][T15800] EXT4-fs (loop2): 1 orphan inode deleted [ 104.469572][T15800] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.520551][T15825] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 104.521714][T15824] netlink: 'syz.4.6011': attribute type 1 has an invalid length. [ 104.569162][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.612479][T15835] bond3: entered promiscuous mode [ 104.617778][T15835] bond3: entered allmulticast mode [ 104.623144][T15835] 8021q: adding VLAN 0 to HW filter on device bond3 [ 104.634194][T15835] bond3 (unregistering): Released all slaves [ 104.651403][ T29] audit: type=1400 audit(2000000794.355:24699): avc: denied { create } for pid=15844 comm="syz.3.6023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 104.673774][ T29] audit: type=1400 audit(2000000794.383:24700): avc: denied { write } for pid=15844 comm="syz.3.6023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 104.711139][T15848] ip6t_srh: unknown srh match flags 4000 [ 104.795828][T15866] loop2: detected capacity change from 0 to 512 [ 104.831782][T15866] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.855220][T15866] ext4 filesystem being mounted at /1258/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.868583][ T29] audit: type=1400 audit(2000000794.558:24701): avc: denied { setattr } for pid=15864 comm="syz.2.6033" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 104.942842][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.086020][T15873] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.093223][T15873] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.399569][T15873] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.433487][T15873] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.513498][T15873] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.522432][T15873] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.531497][T15873] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.540483][T15873] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.571950][T15873] vti0: left allmulticast mode [ 105.595575][T15888] bond2: entered promiscuous mode [ 105.600719][T15888] bond2: entered allmulticast mode [ 105.612913][T15888] 8021q: adding VLAN 0 to HW filter on device bond2 [ 105.622987][T15888] bond2 (unregistering): Released all slaves [ 105.857844][T15965] netlink: 'syz.1.6071': attribute type 29 has an invalid length. [ 105.929985][T15975] xt_cluster: you have exceeded the maximum number of cluster nodes (1023 > 32) [ 105.977809][T15987] vti1: entered promiscuous mode [ 105.982906][T15987] vti1: entered allmulticast mode [ 106.131992][T16013] netlink: 'syz.2.6094': attribute type 1 has an invalid length. [ 106.143216][ T29] audit: type=1400 audit(2000000795.721:24702): avc: denied { mount } for pid=16009 comm="syz.4.6093" name="/" dev="gadgetfs" ino=4414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 106.250055][T16032] SELinux: security_context_str_to_sid (=S|1rWiM!Oj4~1c3FfX50X2) failed with errno=-22 [ 106.319961][T16038] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 106.452472][ T29] audit: type=1400 audit(2000000796.017:24703): avc: denied { read write } for pid=16067 comm="syz.1.6122" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 106.483473][T16061] bridge2: entered promiscuous mode [ 106.488771][T16061] bridge2: entered allmulticast mode [ 106.496360][ T29] audit: type=1400 audit(2000000796.017:24704): avc: denied { open } for pid=16067 comm="syz.1.6122" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 106.546374][T16076] loop4: detected capacity change from 0 to 512 [ 106.852115][ T29] audit: type=1400 audit(2000000796.386:24705): avc: denied { getopt } for pid=16129 comm="syz.0.6150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 106.914810][T16139] loop0: detected capacity change from 0 to 512 [ 106.950343][T16139] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.964444][T16139] ext4 filesystem being mounted at /1195/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 107.041585][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.057861][T16165] loop2: detected capacity change from 0 to 512 [ 107.093501][T16165] EXT4-fs (loop2): 1 orphan inode deleted [ 107.116957][ T57] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 107.126764][ T57] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1 [ 107.140864][T16165] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.192658][T16165] ext4 filesystem being mounted at /1283/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 107.226294][T16186] : renamed from vlan1 (while UP) [ 107.292024][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.303308][T16192] netlink: 'syz.0.6178': attribute type 5 has an invalid length. [ 107.344476][T16199] binfmt_misc: register: failed to install interpreter file ./file2 [ 107.478940][T16224] netlink: 'syz.4.6194': attribute type 21 has an invalid length. [ 107.611577][T16251] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 107.620262][T16251] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 107.628984][T16251] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 107.637675][T16251] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 107.651867][T16251] geneve2: entered promiscuous mode [ 107.657189][T16251] geneve2: entered allmulticast mode [ 107.949324][T16303] ipt_rpfilter: unknown options [ 108.064883][ T29] audit: type=1400 audit(2000000797.512:24706): avc: denied { read } for pid=16320 comm="syz.0.6241" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 108.156886][T16332] __nla_validate_parse: 19 callbacks suppressed [ 108.156901][T16332] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6246'. [ 108.193270][T16340] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6250'. [ 108.271876][T16349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6254'. [ 108.319920][T16361] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6261'. [ 108.328909][T16361] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6261'. [ 108.369456][T16364] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 108.404971][T16372] validate_nla: 2 callbacks suppressed [ 108.404984][T16372] netlink: 'syz.4.6267': attribute type 5 has an invalid length. [ 108.465332][T16384] Cannot find del_set index 4 as target [ 108.536611][T16396] loop0: detected capacity change from 0 to 512 [ 108.584225][T16396] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -13 [ 108.598078][T16396] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #13: comm syz.0.6279: iget: bad i_size value: 12154757448730 [ 108.603004][T16409] SELinux: syz.2.6284 (16409) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 108.631909][T16396] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.6279: couldn't read orphan inode 13 (err -117) [ 108.659312][T16396] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.710726][T16425] netlink: 'syz.4.6291': attribute type 1 has an invalid length. [ 108.718540][T16425] netlink: 244 bytes leftover after parsing attributes in process `syz.4.6291'. [ 108.727631][T16425] NCSI netlink: No device for ifindex 130997362 [ 108.736605][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.765945][T16433] SET target dimension over the limit! [ 108.995218][T16481] mmap: syz.3.6319 (16481): VmData 29081600 exceed data ulimit 3798. Update limits or use boot option ignore_rlimit_data. [ 109.053398][T16490] SELinux: Context system_u:object_r:run_init_exec_t:s0 is not valid (left unmapped). [ 109.065269][T16488] SELinux: Context is not valid (left unmapped). [ 109.108329][T16501] loop0: detected capacity change from 0 to 128 [ 109.134855][T16506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6332'. [ 109.143851][T16506] tc_dump_action: action bad kind [ 109.333964][T16542] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 109.340565][T16542] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 109.348184][T16542] vhci_hcd vhci_hcd.0: Device attached [ 109.378711][T16544] vhci_hcd: connection closed [ 109.380490][ T414] vhci_hcd: stop threads [ 109.389617][ T414] vhci_hcd: release socket [ 109.394060][ T414] vhci_hcd: disconnect device [ 109.427159][T16562] loop0: detected capacity change from 0 to 512 [ 109.448690][T16562] EXT4-fs: Ignoring removed i_version option [ 109.455192][T16562] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 109.474043][T16562] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e12c, mo2=0002] [ 109.488138][T16562] System zones: 1-12 [ 109.492690][T16562] EXT4-fs (loop0): orphan cleanup on readonly fs [ 109.499250][T16562] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.6359: invalid indirect mapped block 12 (level 1) [ 109.514943][T16574] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6363'. [ 109.515187][T16562] EXT4-fs (loop0): Remounting filesystem read-only [ 109.539396][T16562] EXT4-fs (loop0): 1 truncate cleaned up [ 109.548628][T16562] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 109.628814][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 109.702674][T16602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6377'. [ 109.713624][T16602] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 109.723180][T16602] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 109.842918][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 109.842933][ T29] audit: type=1326 audit(2000000799.145:24718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16626 comm="syz.0.6389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8dcde9a9 code=0x7ffc0000 [ 109.876548][ T29] audit: type=1326 audit(2000000799.145:24719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16626 comm="syz.0.6389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8dcde9a9 code=0x7ffc0000 [ 109.900280][ T29] audit: type=1326 audit(2000000799.182:24720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16626 comm="syz.0.6389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fde8dcde9a9 code=0x7ffc0000 [ 109.924042][ T29] audit: type=1326 audit(2000000799.182:24721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16626 comm="syz.0.6389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8dcde9a9 code=0x7ffc0000 [ 109.947808][ T29] audit: type=1326 audit(2000000799.182:24722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16626 comm="syz.0.6389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8dcde9a9 code=0x7ffc0000 [ 109.984387][T16638] loop3: detected capacity change from 0 to 512 [ 110.000198][T16638] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 110.015929][T16638] System zones: 1-12 [ 110.032336][T16638] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.6393: error while reading EA inode 32 err=-116 [ 110.047677][T16650] netlink: 164 bytes leftover after parsing attributes in process `syz.1.6399'. [ 110.058188][T16638] EXT4-fs (loop3): Remounting filesystem read-only [ 110.064816][T16638] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 110.084545][T16638] EXT4-fs (loop3): 1 orphan inode deleted [ 110.091092][T16638] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.134212][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.327474][T16707] No such timeout policy "syz1" [ 110.492695][T16736] netlink: 'syz.0.6438': attribute type 10 has an invalid length. [ 110.645353][ T29] audit: type=1326 audit(2000000799.883:24723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16762 comm="syz.4.6452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feadaf7e9a9 code=0x7ffc0000 [ 110.668992][ T29] audit: type=1326 audit(2000000799.883:24724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16762 comm="syz.4.6452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feadaf7e9a9 code=0x7ffc0000 [ 110.709582][ T29] audit: type=1326 audit(2000000799.939:24725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16762 comm="syz.4.6452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7feadaf7e9a9 code=0x7ffc0000 [ 110.717932][T16777] xt_hashlimit: size too large, truncated to 1048576 [ 110.733257][ T29] audit: type=1326 audit(2000000799.939:24726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16762 comm="syz.4.6452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feadaf7e9a9 code=0x7ffc0000 [ 110.739938][T16777] xt_hashlimit: max too large, truncated to 1048576 [ 110.763428][ T29] audit: type=1326 audit(2000000799.939:24727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16762 comm="syz.4.6452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feadaf7e9a9 code=0x7ffc0000 [ 110.848412][T16785] Cannot find set identified by id 65534 to match [ 111.066372][T16822] ip6erspan0: entered allmulticast mode [ 111.273045][T16864] netlink: 'syz.0.6501': attribute type 2 has an invalid length. [ 111.310776][T16873] netlink: 'syz.4.6507': attribute type 4 has an invalid length. [ 111.364584][T16882] netlink: 'syz.4.6509': attribute type 15 has an invalid length. [ 111.380731][T16885] loop2: detected capacity change from 0 to 1024 [ 111.408164][T16888] x_tables: duplicate underflow at hook 4 [ 111.408689][T16885] EXT4-fs: Ignoring removed nobh option [ 111.419527][T16885] EXT4-fs: Ignoring removed bh option [ 111.449987][T16885] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.485525][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.561624][T16916] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 111.588861][T16916] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 111.692100][T16936] loop2: detected capacity change from 0 to 512 [ 111.698683][T16936] EXT4-fs: Ignoring removed nomblk_io_submit option [ 111.731399][T16936] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 111.739377][T16936] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 111.747506][T16936] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 111.757309][T16936] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 111.815386][T16936] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 111.845162][T16936] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.6535: dx entry: limit 65535 != root limit 120 [ 111.857359][T16936] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.6535: Corrupt directory, running e2fsck is recommended [ 111.864705][T16961] loop4: detected capacity change from 0 to 512 [ 111.877439][T16961] EXT4-fs: Ignoring removed bh option [ 111.893868][T16961] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 111.901393][T16967] program syz.1.6549 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.903005][T16961] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 111.929824][T16969] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 111.945711][T16961] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 111.965491][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.973522][T16974] netlink: 'syz.0.6553': attribute type 4 has an invalid length. [ 111.988418][T16961] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 112.032924][T16961] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.101732][T16961] EXT4-fs error (device loop4): ext4_empty_dir:3116: inode #12: block 32: comm syz.4.6550: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=2320, size=2048 fake=0 [ 112.185707][T17014] loop2: detected capacity change from 0 to 512 [ 112.194765][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.218936][T17018] netlink: 'syz.3.6576': attribute type 10 has an invalid length. [ 112.239691][T17014] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.265459][T17014] ext4 filesystem being mounted at /1346/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.286543][T17030] SELinux: syz.1.6581 (17030) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 112.308751][T17032] netlink: 'syz.3.6578': attribute type 1 has an invalid length. [ 112.319675][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.382190][T17044] loop0: detected capacity change from 0 to 512 [ 112.399625][T17044] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.6588: casefold flag without casefold feature [ 112.430421][T17044] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.6588: couldn't read orphan inode 15 (err -117) [ 112.448355][T17044] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.546937][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.611812][T17081] random: crng reseeded on system resumption [ 112.677661][T17090] sctp: [Deprecated]: syz.3.6608 (pid 17090) Use of int in max_burst socket option deprecated. [ 112.677661][T17090] Use struct sctp_assoc_value instead [ 113.034254][T17146] netlink: 'syz.1.6636': attribute type 8 has an invalid length. [ 113.674455][T17263] __nla_validate_parse: 17 callbacks suppressed [ 113.674470][T17263] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6691'. [ 113.790350][T17292] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6704'. [ 113.799382][T17292] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 114.164016][T17375] validate_nla: 1 callbacks suppressed [ 114.164032][T17375] netlink: 'syz.2.6746': attribute type 10 has an invalid length. [ 114.177499][T17375] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6746'. [ 114.189807][T17380] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6748'. [ 114.248698][T17375] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 114.301583][T17375] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 114.367723][T17411] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6761'. [ 114.376711][T17411] netlink: 108 bytes leftover after parsing attributes in process `syz.2.6761'. [ 114.407405][T17417] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.6766'. [ 114.413377][T17419] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6768'. [ 114.426549][T17411] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6761'. [ 114.485080][T17425] ./file0: Can't open blockdev [ 114.564029][T17442] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 114.632261][T17461] netlink: 'syz.1.6788': attribute type 13 has an invalid length. [ 114.653396][T17463] bond2: entered promiscuous mode [ 114.658531][T17463] bond2: entered allmulticast mode [ 114.672033][T17463] 8021q: adding VLAN 0 to HW filter on device bond2 [ 114.705749][T17476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6795'. [ 114.746120][T17461] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.753377][T17461] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.802726][T17461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.839484][T17461] netdevsim netdevsim1 5: unset [1, 2] type 2 family 0 port 40422 - 0 [ 114.848094][T17461] netdevsim netdevsim1 netdevsim1: unset [1, 2] type 2 family 0 port 40422 - 0 [ 114.857173][T17461] netdevsim netdevsim1 netdevsim2: unset [1, 2] type 2 family 0 port 40422 - 0 [ 114.866195][T17461] netdevsim netdevsim1 netdevsim3: unset [1, 2] type 2 family 0 port 40422 - 0 [ 114.875388][T17461] netdevsim netdevsim1 5: unset [1, 1] type 2 family 0 port 40182 - 0 [ 114.884012][T17461] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 40182 - 0 [ 114.893314][T17461] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 40182 - 0 [ 114.902429][T17461] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 40182 - 0 [ 114.912947][T17461] netdevsim netdevsim1 5: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.921220][T17461] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.930161][T17461] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.939026][T17461] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.991595][T17496] loop3: detected capacity change from 0 to 1024 [ 115.007040][T17496] EXT4-fs: Ignoring removed nomblk_io_submit option [ 115.022013][T17492] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 115.055510][T17496] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.100567][T17514] xt_TCPMSS: Only works on TCP SYN packets [ 115.133370][T17523] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 115.149163][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.170786][T17521] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 115.228723][T17538] netlink: 'syz.0.6824': attribute type 12 has an invalid length. [ 115.276139][T17546] loop4: detected capacity change from 0 to 128 [ 115.299055][T17555] loop2: detected capacity change from 0 to 512 [ 115.305731][T17555] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 115.314476][T17551] loop0: detected capacity change from 0 to 512 [ 115.322494][T17546] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 115.337686][T17546] ext4 filesystem being mounted at /1304/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 115.354031][T17555] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.375714][T17555] ext4 filesystem being mounted at /1388/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.388320][ T3311] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 115.399044][T17551] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 115.417733][T17551] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 115.427108][T17551] EXT4-fs (loop0): 1 truncate cleaned up [ 115.438167][T17551] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.484819][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 115.484834][ T29] audit: type=1400 audit(2000000804.359:24763): avc: denied { remount } for pid=17550 comm="syz.0.6831" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 115.516319][T17551] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 115.523247][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.569816][ T29] audit: type=1400 audit(2000000804.424:24764): avc: denied { read } for pid=17583 comm="syz.2.6841" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 115.600767][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.674958][ T29] audit: type=1326 audit(2000000804.525:24765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17598 comm="syz.0.6853" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fde8dcde9a9 code=0x0 [ 115.824376][T17628] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 115.833316][T17628] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 115.860502][T17634] tmpfs: Bad value for 'mpol' [ 116.330658][T17739] netlink: 'syz.0.6918': attribute type 21 has an invalid length. [ 116.717358][ T29] audit: type=1400 audit(2000000805.485:24766): avc: denied { setattr } for pid=17799 comm="syz.4.6951" name="tty28" dev="devtmpfs" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 116.815063][ T29] audit: type=1400 audit(2000000805.577:24767): avc: denied { ioctl } for pid=17814 comm="syz.3.6958" path="socket:[49176]" dev="sockfs" ino=49176 ioctlcmd=0x89fa scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 116.871409][ T29] audit: type=1400 audit(2000000805.614:24768): avc: denied { audit_read } for pid=17818 comm="syz.2.6961" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 116.920055][T17827] loop3: detected capacity change from 0 to 164 [ 117.043676][T17845] netlink: 'syz.4.6974': attribute type 30 has an invalid length. [ 117.061896][T17847] geneve3: entered promiscuous mode [ 117.067181][T17847] geneve3: entered allmulticast mode [ 117.341414][T17890] loop3: detected capacity change from 0 to 512 [ 117.372824][ T29] audit: type=1400 audit(2000000806.094:24769): avc: denied { accept } for pid=17896 comm="syz.4.6999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 117.415719][T17890] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.449790][ T29] audit: type=1400 audit(2000000806.168:24770): avc: denied { read append open } for pid=17889 comm="syz.3.6996" path="/1335/file0/blkio.bfq.io_service_bytes" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 117.495976][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.559948][T17929] netlink: set zone limit has 4 unknown bytes [ 117.569231][T17927] No such timeout policy "syz0" [ 117.874903][T17983] netlink: 'syz.2.7041': attribute type 1 has an invalid length. [ 118.106935][ T29] audit: type=1400 audit(2000000806.768:24771): avc: denied { mount } for pid=18027 comm="syz.3.7063" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 118.144787][T18035] loop4: detected capacity change from 0 to 512 [ 118.165861][T18035] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 118.203464][T18035] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 118.220462][T18035] EXT4-fs (loop4): 1 truncate cleaned up [ 118.227246][T18035] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.230981][ T29] audit: type=1400 audit(2000000806.879:24772): avc: denied { getopt } for pid=18050 comm="syz.0.7073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 118.280408][T18035] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 118.316006][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.364883][T18072] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5) [ 118.410050][T18081] SET target dimension over the limit! [ 118.473935][T18092] netlink: 'syz.4.7095': attribute type 21 has an invalid length. [ 118.509059][T18092] netlink: 'syz.4.7095': attribute type 5 has an invalid length. [ 118.585646][T18116] ieee802154 phy0 wpan0: encryption failed: -22 [ 118.613372][T18119] netlink: 'syz.3.7108': attribute type 21 has an invalid length. [ 118.627746][T18119] netlink: 'syz.3.7108': attribute type 6 has an invalid length. [ 118.720218][T18137] IPv6: Can't replace route, no match found [ 118.743095][T18143] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 118.860308][T18169] loop2: detected capacity change from 0 to 512 [ 118.876823][T18169] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 118.891374][T18169] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 118.901606][T18169] EXT4-fs (loop2): 1 truncate cleaned up [ 118.907836][T18169] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.928872][T18169] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 118.957533][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.105377][T18209] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2) [ 119.258110][T18233] __nla_validate_parse: 27 callbacks suppressed [ 119.258125][T18233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7165'. [ 119.704074][T18289] loop4: detected capacity change from 0 to 512 [ 119.719463][T18287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7184'. [ 119.754093][T18289] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 119.758646][T18293] xt_addrtype: ipv6 does not support BROADCAST matching [ 119.773768][T18289] System zones: 0-7 [ 119.781342][T18289] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.839945][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.927904][ T3549] ================================================================== [ 119.936020][ T3549] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_mknod [ 119.942957][ T3549] [ 119.945269][ T3549] write to 0xffff88810425a0ec of 4 bytes by task 3551 on cpu 0: [ 119.952883][ T3549] shmem_mknod+0x137/0x180 [ 119.957293][ T3549] shmem_create+0x34/0x50 [ 119.961612][ T3549] path_openat+0x1102/0x2170 [ 119.966200][ T3549] do_filp_open+0x109/0x230 [ 119.970697][ T3549] do_sys_openat2+0xa6/0x110 [ 119.975283][ T3549] __x64_sys_openat+0xf2/0x120 [ 119.980040][ T3549] x64_sys_call+0x1af/0x2fb0 [ 119.984623][ T3549] do_syscall_64+0xd2/0x200 [ 119.989115][ T3549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.995002][ T3549] [ 119.997312][ T3549] read to 0xffff88810425a0ec of 4 bytes by task 3549 on cpu 1: [ 120.004839][ T3549] fill_mg_cmtime+0x5b/0x260 [ 120.009421][ T3549] generic_fillattr+0x24a/0x340 [ 120.014263][ T3549] shmem_getattr+0x181/0x200 [ 120.018842][ T3549] vfs_getattr_nosec+0x143/0x1e0 [ 120.023770][ T3549] vfs_statx+0x113/0x390 [ 120.028001][ T3549] vfs_fstatat+0x115/0x170 [ 120.032406][ T3549] __se_sys_newfstatat+0x55/0x260 [ 120.037423][ T3549] __x64_sys_newfstatat+0x55/0x70 [ 120.042446][ T3549] x64_sys_call+0x2c22/0x2fb0 [ 120.047114][ T3549] do_syscall_64+0xd2/0x200 [ 120.051604][ T3549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.057486][ T3549] [ 120.059796][ T3549] value changed: 0x1bb9efc9 -> 0x1bbe9d4d [ 120.065497][ T3549] [ 120.067808][ T3549] Reported by Kernel Concurrency Sanitizer on: [ 120.073943][ T3549] CPU: 1 UID: 0 PID: 3549 Comm: udevd Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(voluntary) [ 120.085910][ T3549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 120.096042][ T3549] ================================================================== [ 120.164256][T18308] netlink: 352 bytes leftover after parsing attributes in process `syz.2.7193'. [ 120.173313][T18308] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7193'. [ 120.195977][T18308] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7193'. [ 120.911074][ T29] kauditd_printk_skb: 14440 callbacks suppressed [ 120.911090][ T29] audit: type=1326 audit(2000000809.370:39213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18219 comm="syz.1.7159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0966fe9a9 code=0x7ff00000 [ 120.944333][ T29] audit: type=1326 audit(2000000809.398:39214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18219 comm="syz.1.7159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0966fe9a9 code=0x7ff00000 [ 120.967967][ T29] audit: type=1326 audit(2000000809.398:39215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18219 comm="syz.1.7159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0966fe9a9 code=0x7ff00000 [ 120.991537][ T29] audit: type=1326 audit(2000000809.398:39216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18219 comm="syz.1.7159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0966fe9a9 code=0x7ff00000 [ 121.015102][ T29] audit: type=1326 audit(2000000809.398:39217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18219 comm="syz.1.7159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0966fe9a9 code=0x7ff00000 [ 121.038718][ T29] audit: type=1326 audit(2000000809.398:39218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18219 comm="syz.1.7159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0966fe9a9 code=0x7ff00000 [ 121.062337][ T29] audit: type=1326 audit(2000000809.398:39219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18219 comm="syz.1.7159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0966fe9a9 code=0x7ff00000 [ 121.086025][ T29] audit: type=1326 audit(2000000809.398:39220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18219 comm="syz.1.7159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0966fe9a9 code=0x7ff00000 [ 121.109687][ T29] audit: type=1326 audit(2000000809.398:39221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18219 comm="syz.1.7159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0966fe9a9 code=0x7ff00000 [ 121.133268][ T29] audit: type=1326 audit(2000000809.398:39222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18219 comm="syz.1.7159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0966fe9a9 code=0x7ff00000