last executing test programs: 1.310780375s ago: executing program 0 (id=7014): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0xdcdf, @loopback}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000480)={r1, 0x1, 0x30}, &(0x7f00000004c0)=0xc) 1.23133673s ago: executing program 0 (id=7021): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) r0 = io_uring_setup(0x8c3, &(0x7f0000000280)={0x0, 0x93d0, 0x2, 0x42, 0xfc}) futex(&(0x7f00000000c0)=0x1, 0x0, 0x1, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18) 1.00708794s ago: executing program 4 (id=7029): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x8400, &(0x7f00000003c0)={[{@uid}, {@overriderock}, {@nojoliet}, {@unhide}, {@check_relaxed}, {@nocompress}, {@mode={'mode', 0x3d, 0x10001}}, {@cruft}, {@check_strict}, {@hide}]}, 0x1, 0x688, &(0x7f0000000a40)="$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") r0 = syz_io_uring_setup(0x38, &(0x7f0000000140)={0x0, 0x1d30, 0x13500}, &(0x7f0000000240), &(0x7f0000000480)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x21, &(0x7f0000000440), 0x1) 882.997736ms ago: executing program 4 (id=7034): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x400000c, 0x13012, r0, 0x0) mprotect(&(0x7f0000ff4000/0x2000)=nil, 0xfaff, 0xb) 879.666677ms ago: executing program 2 (id=7036): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x19, &(0x7f0000001fc0)={0x19, 0x546d0581, 0xc}, 0x0) 852.981108ms ago: executing program 2 (id=7037): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x1, 0x0, 0x0) 814.21471ms ago: executing program 4 (id=7040): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4790, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x19b1, 0x35725d35}, 0x0, 0x1000, 0x20da, 0x0, 0x3b0, 0x20025, 0xb, 0x0, 0x0, 0x0, 0x20000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}, @IFLA_ADDRESS={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x0) 812.36362ms ago: executing program 2 (id=7041): perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0xd07, 0x3d}, 0x100b28, 0x6, 0x0, 0x5, 0x8, 0x6, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x54, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x4, 0x300}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, "9f2b"}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) 748.036373ms ago: executing program 2 (id=7042): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8a141, 0x91) pwrite64(r0, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) creat(&(0x7f0000002380)='./file1\x00', 0x0) 744.160503ms ago: executing program 3 (id=7052): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x400000c, 0x13012, r0, 0x0) mprotect(&(0x7f0000ff4000/0x2000)=nil, 0xfaff, 0xb) 743.627613ms ago: executing program 1 (id=7043): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x18, &(0x7f00000004c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3fffd}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 702.625965ms ago: executing program 3 (id=7044): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000140)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$eJzs3E9rXFUYB+A3Y2rS1PxRa7Vd6AtuxMWlycKVIEFSkAwotRFaQbg1Ex0yzpTcITAiVldu/Ryu3Ql+g2z8DO6y6bIL8UrvNG1SU4vQZMQ+z2Luyz3nxzkHhoEz3HP33/3xq+2tqtgqh9GamorWrYi8m5HRigOvr4+v12+sr7bba1czr6xeW34nMxfe+PXTb2Yi4twnPy/8MhN7S5/t31n5fe/C3sX9P6992a2yW2V/MMwybw4Gw/JmbyE3u9V2kflRr1NWnez2q87OofZObr0dEaMs+5vzc7d2OlWVZX+U251RDgc53Bll+UXZ7WdRFDk/FzzWmSd32fjpbl3XEXV9Jp6Puq7rszEX5+KFmI+F+C4iXoyX4uU4H6/EhXg1XouLTa/TmD4AAAAAAAAAAAAAAAAAAAA8O/7p/P9iLDn/DwAAAAAAAAAAAAAAAAAAAKfg4+s31lfb7bWrmbMRvR92N3Y3xtdx+9K9j1504nIsxh/RnP4fG9dXPmivXc7GUnzfu30/f3t347kmv3qQX25eJ3A/P920HeSXx/k8mp+JuXv5reg2+ZVYjPPHj79ybH423nrzUL6Ixfjt8xhELzabsR/mv13OfP/D9iP5S00/AAAA+D8o8oFj9+9F8bj2cf7B/vrJ/w88sr+ejkvTk107EdXo6+2y1evsNEXvoJj9252TK+IUx3q6RcSduilmjja1TmjQVkx8yYeKqf/GNBRPpzgbR+9M+peJ0/DwazDpmQAAAAAAAAAAAPBvnPBzhdNxzJNl701mqQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzFDhwLAAAAAAjzt06jYwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCoAAP//qH3FUA==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 701.934785ms ago: executing program 1 (id=7045): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) semget$private(0x0, 0x6, 0x3b1) 627.917519ms ago: executing program 4 (id=7046): r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x80001, 0x373}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f00000006c0)=""/188, 0xbc}], 0x2, 0x2, 0x1}) io_uring_enter(r0, 0x847ba, 0x2000, 0xe, 0x0, 0x0) 382.805311ms ago: executing program 2 (id=7047): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x8400, &(0x7f00000003c0)={[{@uid}, {@overriderock}, {@nojoliet}, {@unhide}, {@check_relaxed}, {@nocompress}, {@mode={'mode', 0x3d, 0x10001}}, {@cruft}, {@check_strict}, {@hide}]}, 0x1, 0x688, &(0x7f0000000a40)="$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") r0 = syz_io_uring_setup(0x38, &(0x7f0000000140)={0x0, 0x1d30, 0x13500}, &(0x7f0000000240), &(0x7f0000000480)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x21, &(0x7f0000000440), 0x1) 382.617991ms ago: executing program 3 (id=7048): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000080)=ANY=[], 0x10) getsockopt$inet6_opts(r0, 0x29, 0x37, 0x0, &(0x7f0000000000)=0xffffffffffffffe6) 382.452401ms ago: executing program 4 (id=7049): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x48, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}]}, 0x48}}, 0x44000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 370.948472ms ago: executing program 1 (id=7050): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000340)={0x28, 0x0, 0x2616}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2711, @local}, 0x10) 360.943262ms ago: executing program 3 (id=7051): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x4014, &(0x7f0000001000)=ANY=[@ANYBLOB="6d706f6c3d62690bbe608ae7a8e257d632a80e6e643a302d4e3a332f", @ANYRESDEC=r0]) 333.959643ms ago: executing program 0 (id=7053): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{&(0x7f00000003c0)={0xa, 0x4, 0x4000000, @private1, 0xffffffff}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000340)="18", 0x1}], 0x1}}], 0x1, 0x4000074) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x81, &(0x7f0000000080)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8) 326.471464ms ago: executing program 1 (id=7054): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x1, 0x0, 0x0) 266.261967ms ago: executing program 0 (id=7055): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000200)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x1, @loopback, 0x3}, r1}}, 0x30) 266.019037ms ago: executing program 3 (id=7056): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x900, 0x3, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80)={r1}, 0xc) 234.301348ms ago: executing program 1 (id=7057): r0 = epoll_create1(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_wait(r0, &(0x7f0000000340)=[{}], 0x1, 0x80000000) 224.777759ms ago: executing program 0 (id=7058): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000140)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 63.127147ms ago: executing program 0 (id=7059): r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x80001, 0x373}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f00000006c0)=""/188, 0xbc}], 0x2, 0x2, 0x1}) io_uring_enter(r0, 0x847ba, 0x2000, 0xe, 0x0, 0x0) 62.945187ms ago: executing program 3 (id=7060): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x30e600, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 62.800117ms ago: executing program 4 (id=7061): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) semget$private(0x0, 0x6, 0x3b1) 62.613137ms ago: executing program 2 (id=7069): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in6={0xa, 0x4e24, 0x1, @mcast2, 0x8}, @ib={0x1b, 0x4, 0x0, {"00000000000000000000000000000001"}, 0x0, 0xfffffffffffffffd, 0x3ff}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000240)={0x13, 0x10, 0xfa00, {&(0x7f0000000c00), r1, 0x2}}, 0x18) 0s ago: executing program 1 (id=7062): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f00000003c0)="b6a242") kernel console output (not intermixed with test programs): rmissive=1 [ 156.639994][ T28] audit: type=1400 audit(1774211604.823:1104): avc: denied { unmount } for pid=3322 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 156.700847][T14537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4991'. [ 156.800385][T14555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4997'. [ 156.986684][T14577] loop4: detected capacity change from 0 to 128 [ 157.009545][T14577] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 157.033045][T14577] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 157.041249][T14577] FAT-fs (loop4): Filesystem has been set read-only [ 157.055071][T14577] syz.4.5008: attempt to access beyond end of device [ 157.055071][T14577] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 157.181340][T14586] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 157.187905][T14586] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 157.200723][T14586] vhci_hcd vhci_hcd.0: Device attached [ 157.208936][T14586] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(5) [ 157.215480][T14586] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 157.227943][T14586] vhci_hcd vhci_hcd.0: Device attached [ 157.243632][T14586] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(7) [ 157.250215][T14586] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 157.295733][T14586] vhci_hcd vhci_hcd.0: Device attached [ 157.317204][T14594] vhci_hcd: connection closed [ 157.317289][T14587] vhci_hcd: connection closed [ 157.317662][ T12] vhci_hcd vhci_hcd.4: stop threads [ 157.332466][T14590] vhci_hcd: connection closed [ 157.333553][ T12] vhci_hcd vhci_hcd.4: release socket [ 157.360618][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 157.372049][ T12] vhci_hcd vhci_hcd.4: stop threads [ 157.385059][ T12] vhci_hcd vhci_hcd.4: release socket [ 157.396050][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 157.409620][ T12] vhci_hcd vhci_hcd.4: stop threads [ 157.417262][ T12] vhci_hcd vhci_hcd.4: release socket [ 157.428265][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 157.443669][ T3404] usb 9-1: new low-speed USB device number 2 using vhci_hcd [ 157.451425][ T3404] usb 9-1: enqueue for inactive port 0 [ 157.457016][ T3404] usb 9-1: enqueue for inactive port 0 [ 157.471012][ T3404] usb 9-1: enqueue for inactive port 0 [ 157.564279][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.616874][ T3404] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 157.674667][ T28] audit: type=1400 audit(1774211605.886:1105): avc: denied { read } for pid=14607 comm="syz.2.5020" path="socket:[39832]" dev="sockfs" ino=39832 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 157.796682][T14612] loop1: detected capacity change from 0 to 512 [ 157.835879][T14612] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 157.882023][T14612] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.5021: bg 0: block 104: invalid block bitmap [ 157.921863][T14612] loop1: lost filesystem error report for type 5 error -117 [ 157.922042][T14612] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 157.929458][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 157.929483][ C0] EXT4-fs (loop1): initial error at time 1774211606: ext4_validate_block_bitmap:432 [ 157.929513][ C0] EXT4-fs (loop1): last error at time 1774211606: ext4_validate_block_bitmap:432 [ 157.982201][T14612] loop1: lost filesystem error report for type 5 error -117 [ 157.983794][T14612] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.5021: invalid indirect mapped block 1 (level 1) [ 158.005528][T14612] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 158.023174][T14612] EXT4-fs (loop1): 1 truncate cleaned up [ 158.145492][T14643] loop3: detected capacity change from 0 to 2048 [ 158.152673][ T28] audit: type=1400 audit(1774211606.353:1106): avc: denied { getopt } for pid=14642 comm="syz.1.5032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 158.211067][ T3534] loop3: p3 < > p4 < > [ 158.217124][ T3534] loop3: partition table partially beyond EOD, truncated [ 158.232175][ T3534] loop3: p3 start 4284289 is beyond EOD, truncated [ 158.256072][T14643] loop3: p3 < > p4 < > [ 158.272930][T14643] loop3: partition table partially beyond EOD, truncated [ 158.293297][T14643] loop3: p3 start 4284289 is beyond EOD, truncated [ 158.389226][ T3534] udevd[3534]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 158.418638][T14670] loop4: detected capacity change from 0 to 512 [ 158.486502][T14670] ext4 filesystem being mounted at /994/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.661388][ T3305] usb 5-1: enqueue for inactive port 0 [ 158.668123][ T3305] usb 5-1: enqueue for inactive port 0 [ 158.719329][T14714] loop3: detected capacity change from 0 to 512 [ 158.741711][ T3305] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 158.794464][T14714] ext4 filesystem being mounted at /948/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.255213][T14787] bridge0: entered promiscuous mode [ 159.340868][T14799] loop4: detected capacity change from 0 to 256 [ 159.601884][T14825] bridge0: entered promiscuous mode [ 160.078861][T14846] loop1: detected capacity change from 0 to 512 [ 160.179866][T14846] ext4 filesystem being mounted at /981/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.342826][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 160.342842][ T28] audit: type=1400 audit(1774211608.550:1109): avc: denied { append } for pid=14858 comm="syz.4.5133" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 160.410140][ T3534] loop2: p3 < > p4 < > [ 160.423682][ T3534] loop2: partition table partially beyond EOD, truncated [ 160.445778][ T3534] loop2: p3 start 4284289 is beyond EOD, truncated [ 160.472414][T14857] loop2: p3 < > p4 < > [ 160.476779][T14857] loop2: partition table partially beyond EOD, truncated [ 160.512997][T14857] loop2: p3 start 4284289 is beyond EOD, truncated [ 160.548191][T14866] EXT4-fs mount: 46 callbacks suppressed [ 160.548211][T14866] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 160.643484][ T3534] udevd[3534]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 160.698554][T14866] ext4 filesystem being mounted at /984/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 160.815501][T14866] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #2: comm syz.1.5137: No space for directory leaf checksum. Please run e2fsck -D. [ 160.883945][T14866] EXT4-fs error (device loop1): __ext4_find_entry:1626: inode #2: comm syz.1.5137: checksumming directory block 0 [ 160.957418][ T3314] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 161.021822][T14883] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.149598][T14883] ext4 filesystem being mounted at /1019/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.165779][T14893] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5149'. [ 161.351939][T14900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5152'. [ 161.779178][T14915] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5159'. [ 161.830948][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.911589][T14927] SELinux: Context system_u:object_r:systemd_logind_var_run_t:s0 is not valid (left unmapped). [ 161.948872][ T28] audit: type=1400 audit(1774211610.131:1110): avc: denied { relabelto } for pid=14926 comm="syz.3.5165" name="file0" dev="tmpfs" ino=4975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:systemd_logind_var_run_t:s0" [ 162.018770][T14938] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5170'. [ 162.049703][ T28] audit: type=1400 audit(1774211610.161:1111): avc: denied { associate } for pid=14926 comm="syz.3.5165" name="file0" dev="tmpfs" ino=4975 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_logind_var_run_t:s0" [ 162.138510][ T28] audit: type=1400 audit(1774211610.191:1112): avc: denied { unlink } for pid=3322 comm="syz-executor" name="file0" dev="tmpfs" ino=4975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:systemd_logind_var_run_t:s0" [ 162.179714][T14954] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5186'. [ 162.193971][T14953] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5176'. [ 162.235982][T14960] netlink: 'syz.0.5178': attribute type 10 has an invalid length. [ 162.268440][T14960] veth0_vlan: left promiscuous mode [ 162.291716][T14960] veth0_vlan: entered promiscuous mode [ 162.311729][T14960] team0: Device veth0_vlan failed to register rx_handler [ 162.336281][ T28] audit: type=1400 audit(1774211610.530:1113): avc: denied { bind } for pid=14968 comm="syz.3.5183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 162.444708][T14979] set_capacity_and_notify: 3 callbacks suppressed [ 162.444724][T14979] loop3: detected capacity change from 0 to 2048 [ 162.506312][T14979] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.624406][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.717188][T15008] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5211'. [ 162.747312][T15008] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5211'. [ 162.772924][T15008] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5211'. [ 162.784992][T15008] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5211'. [ 162.829404][ T28] audit: type=1400 audit(1774211611.075:1114): avc: denied { append } for pid=15015 comm="syz.1.5204" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 162.856665][T15018] loop3: detected capacity change from 0 to 256 [ 162.896731][ T28] audit: type=1400 audit(1774211611.075:1115): avc: denied { open } for pid=15015 comm="syz.1.5204" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 162.941967][T15022] loop1: detected capacity change from 0 to 2048 [ 163.029410][T15022] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.099241][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.310644][T15050] loop1: detected capacity change from 0 to 256 [ 163.377800][T15052] netlink: 'syz.3.5222': attribute type 10 has an invalid length. [ 163.520347][T15052] veth0_vlan: left promiscuous mode [ 163.537881][T15052] veth0_vlan: entered promiscuous mode [ 163.557384][T15052] team0: Device veth0_vlan failed to register rx_handler [ 163.787116][ T28] audit: type=1400 audit(1774211612.035:1116): avc: denied { search } for pid=3041 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.832025][ T28] audit: type=1400 audit(1774211612.035:1117): avc: denied { search } for pid=3041 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.905345][ T28] audit: type=1400 audit(1774211612.035:1118): avc: denied { search } for pid=3041 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.972363][T15108] netlink: 'syz.0.5246': attribute type 298 has an invalid length. [ 164.157689][T15138] loop3: detected capacity change from 0 to 512 [ 164.183704][T15138] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 164.220274][T15138] EXT4-fs (loop3): 1 truncate cleaned up [ 164.236131][T15138] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.295165][T15156] loop2: detected capacity change from 0 to 128 [ 164.328923][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.351047][T15156] syz.2.5257: attempt to access beyond end of device [ 164.351047][T15156] loop2: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 164.621622][T15192] loop2: detected capacity change from 0 to 128 [ 164.630123][T15187] loop3: detected capacity change from 0 to 4096 [ 164.640289][T15192] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 164.658785][T15187] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.674301][T15190] loop4: detected capacity change from 0 to 512 [ 164.675932][T15192] ext4 filesystem being mounted at /1088/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 164.719123][T15190] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 164.734132][T15187] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.5272: corrupted inode contents [ 164.760539][T15192] EXT4-fs error (device loop2): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.2.5275: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 164.782191][T15190] EXT4-fs (loop4): 1 truncate cleaned up [ 164.790157][T15187] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #15: comm syz.3.5272: mark_inode_dirty error [ 164.807557][T15190] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.826562][T15187] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.5272: corrupted inode contents [ 164.840773][ T3313] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 164.885189][T15187] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #15: comm syz.3.5272: mark_inode_dirty error [ 164.913751][T15187] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.5272: corrupted inode contents [ 164.931969][T15187] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #15: comm syz.3.5272: mark_inode_dirty error [ 164.935565][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.944410][T15187] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.5272: corrupted inode contents [ 164.944925][T15187] EXT4-fs error (device loop3): ext4_truncate:4587: inode #15: comm syz.3.5272: mark_inode_dirty error [ 164.978563][T15187] EXT4-fs error (device loop3) in ext4_setattr:5983: Corrupt filesystem [ 164.997949][T15196] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.5272: corrupted inode contents [ 165.026427][T15204] loop2: detected capacity change from 0 to 512 [ 165.045879][T15202] rock: directory entry would overflow storage [ 165.052358][T15202] rock: sig=0x5245, size=8, remaining=5 [ 165.055171][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.120926][T15204] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.148640][T15204] ext4 filesystem being mounted at /1091/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.203038][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.267729][T15211] FAT-fs (loop4): Directory bread(block 32) failed [ 165.277973][T15211] FAT-fs (loop4): Directory bread(block 33) failed [ 165.318694][T15211] FAT-fs (loop4): Directory bread(block 34) failed [ 165.328457][T15211] FAT-fs (loop4): Directory bread(block 35) failed [ 165.335346][T15211] FAT-fs (loop4): Directory bread(block 36) failed [ 165.342022][T15211] FAT-fs (loop4): Directory bread(block 37) failed [ 165.349899][T15211] FAT-fs (loop4): Directory bread(block 38) failed [ 165.388301][T15211] FAT-fs (loop4): Directory bread(block 39) failed [ 165.408486][T15211] FAT-fs (loop4): Directory bread(block 40) failed [ 165.415832][T15211] FAT-fs (loop4): Directory bread(block 41) failed [ 165.474295][T15211] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 165.494987][T15211] FAT-fs (loop4): Filesystem has been set read-only [ 165.560819][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 165.560835][ T28] audit: type=1400 audit(1774211613.805:1132): avc: denied { write } for pid=15230 comm="syz.0.5291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 165.667572][ T28] audit: type=1400 audit(1774211613.875:1133): avc: denied { shutdown } for pid=15234 comm="syz.1.5292" lport=44921 faddr=fc01:: fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 165.743967][T15242] netlink: 'syz.4.5295': attribute type 10 has an invalid length. [ 165.775778][T15242] veth0_vlan: left promiscuous mode [ 165.788918][T15242] veth0_vlan: entered promiscuous mode [ 165.813940][T15242] team0: Device veth0_vlan failed to register rx_handler [ 165.873324][T15251] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 166.050266][T15270] EXT4-fs: inline encryption not supported [ 166.072546][T15264] FAT-fs (loop1): Directory bread(block 32) failed [ 166.081590][T15264] FAT-fs (loop1): Directory bread(block 33) failed [ 166.091406][T15264] FAT-fs (loop1): Directory bread(block 34) failed [ 166.100686][T15264] FAT-fs (loop1): Directory bread(block 35) failed [ 166.107650][T15264] FAT-fs (loop1): Directory bread(block 36) failed [ 166.114494][T15264] FAT-fs (loop1): Directory bread(block 37) failed [ 166.121095][T15264] FAT-fs (loop1): Directory bread(block 38) failed [ 166.142854][T15270] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.182690][T15264] FAT-fs (loop1): Directory bread(block 39) failed [ 166.222268][T15264] FAT-fs (loop1): Directory bread(block 40) failed [ 166.244957][T15264] FAT-fs (loop1): Directory bread(block 41) failed [ 166.264340][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.400302][T15264] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 166.429963][T15264] FAT-fs (loop1): Filesystem has been set read-only [ 166.647792][T15292] __nla_validate_parse: 10 callbacks suppressed [ 166.647810][T15292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5318'. [ 166.758350][T15295] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 166.775573][T15295] ext4 filesystem being mounted at /997/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 166.904807][T15295] EXT4-fs error (device loop3): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.3.5321: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 166.970991][T15311] program syz.2.5328 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 167.061562][ T3322] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 167.083052][ T28] audit: type=1400 audit(1774211615.325:1134): avc: denied { ioctl } for pid=15323 comm="syz.0.5334" path="socket:[42449]" dev="sockfs" ino=42449 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 167.165807][ T28] audit: type=1400 audit(1774211615.415:1135): avc: denied { shutdown } for pid=15328 comm="syz.4.5338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 167.206229][T15336] program syz.4.5341 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 167.235096][ T28] audit: type=1400 audit(1774211615.485:1136): avc: denied { bind } for pid=15340 comm="syz.1.5342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 167.318715][T15347] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 167.339924][T15347] ext4 filesystem being mounted at /1028/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 167.376237][T15347] EXT4-fs error (device loop1): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.1.5345: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 167.487768][ T3314] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 167.676281][T15357] set_capacity_and_notify: 10 callbacks suppressed [ 167.676304][T15357] loop1: detected capacity change from 0 to 4096 [ 167.890531][T15357] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.913718][T15357] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.5349: corrupted inode contents [ 167.928505][T15357] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #15: comm syz.1.5349: mark_inode_dirty error [ 167.953817][T15357] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.5349: corrupted inode contents [ 167.986327][T15357] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #15: comm syz.1.5349: mark_inode_dirty error [ 168.055411][T15357] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.5349: corrupted inode contents [ 168.083189][T15357] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #15: comm syz.1.5349: mark_inode_dirty error [ 168.095634][T15357] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.5349: corrupted inode contents [ 168.117906][T15357] EXT4-fs error (device loop1): ext4_truncate:4587: inode #15: comm syz.1.5349: mark_inode_dirty error [ 168.159221][T15357] EXT4-fs error (device loop1) in ext4_setattr:5983: Corrupt filesystem [ 168.195358][T15364] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.5349: corrupted inode contents [ 168.287622][ T23] kernel write not supported for file bpf-map (pid: 23 comm: kworker/1:0) [ 168.298480][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.345605][T15381] loop1: detected capacity change from 0 to 512 [ 168.418688][T15381] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.444958][T15381] ext4 filesystem being mounted at /1033/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.460024][ T28] audit: type=1400 audit(1774211616.705:1137): avc: denied { remount } for pid=15379 comm="syz.1.5358" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 168.481845][T15381] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 168.515125][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.605061][T15410] hub 9-0:1.0: USB hub found [ 168.613012][T15410] hub 9-0:1.0: 8 ports detected [ 168.653518][ T28] audit: type=1400 audit(1774211616.895:1138): avc: denied { ioctl } for pid=15412 comm="syz.1.5374" path="socket:[42581]" dev="sockfs" ino=42581 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 168.877389][T15441] netlink: 140 bytes leftover after parsing attributes in process `syz.0.5386'. [ 168.887397][T15438] loop2: detected capacity change from 0 to 4096 [ 168.899373][T15438] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.968519][T15438] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.5384: corrupted inode contents [ 169.024621][T15438] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #15: comm syz.2.5384: mark_inode_dirty error [ 169.063174][T15438] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.5384: corrupted inode contents [ 169.099963][T15438] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #15: comm syz.2.5384: mark_inode_dirty error [ 169.102413][T15453] loop3: detected capacity change from 0 to 512 [ 169.113388][T15438] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.5384: corrupted inode contents [ 169.124681][T15453] EXT4-fs: Ignoring removed nomblk_io_submit option [ 169.132306][T15438] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #15: comm syz.2.5384: mark_inode_dirty error [ 169.162600][T15438] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.5384: corrupted inode contents [ 169.175145][T15453] EXT4-fs: Ignoring removed mblk_io_submit option [ 169.182646][T15438] EXT4-fs error (device loop2): ext4_truncate:4587: inode #15: comm syz.2.5384: mark_inode_dirty error [ 169.194966][T15438] EXT4-fs error (device loop2) in ext4_setattr:5983: Corrupt filesystem [ 169.195260][T15453] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 169.205730][T15451] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.5384: corrupted inode contents [ 169.224396][T15453] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 169.235174][T15453] EXT4-fs (loop3): 1 truncate cleaned up [ 169.244831][T15453] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.266138][T15453] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #2: block 4: comm syz.3.5389: lblock 0 mapped to illegal pblock 4 (length 1) [ 169.281291][T15453] EXT4-fs (loop3): Remounting filesystem read-only [ 169.295654][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.350515][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.378131][ T28] audit: type=1400 audit(1774211617.625:1139): avc: denied { connect } for pid=15463 comm="syz.0.5395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 169.445925][T15471] pim6reg: entered allmulticast mode [ 169.457380][T15471] pim6reg: left allmulticast mode [ 169.472451][T15475] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5401'. [ 170.506096][T15492] IPVS: lc: FWM 3 0x00000003 - no destination available [ 170.533606][T15495] hub 9-0:1.0: USB hub found [ 170.545439][T15498] loop4: detected capacity change from 0 to 128 [ 170.555842][T15495] hub 9-0:1.0: 8 ports detected [ 170.567313][T15498] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 170.583643][T15498] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 170.636552][T15508] loop2: detected capacity change from 0 to 512 [ 170.702851][ T28] audit: type=1400 audit(1774211618.945:1140): avc: denied { connect } for pid=15511 comm="syz.4.5419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 170.833955][T15521] loop4: detected capacity change from 0 to 256 [ 170.861141][T15526] netlink: 140 bytes leftover after parsing attributes in process `syz.1.5426'. [ 170.998321][T15541] loop4: detected capacity change from 0 to 512 [ 171.556589][T15558] loop4: detected capacity change from 0 to 164 [ 171.588500][T15558] Unable to read rock-ridge attributes [ 171.727126][T15562] loop2: detected capacity change from 0 to 256 [ 171.795402][T15567] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 171.838556][T15567] EXT4-fs (loop4): 1 truncate cleaned up [ 171.853506][T15567] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.894253][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.903479][ T28] audit: type=1400 audit(1774211620.155:1141): avc: denied { bind } for pid=15576 comm="syz.1.5449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 171.988229][T15588] EXT4-fs: Ignoring removed nomblk_io_submit option [ 172.005954][T15588] EXT4-fs: Ignoring removed mblk_io_submit option [ 172.040674][T15588] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 172.050139][T15588] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 172.067240][T15588] EXT4-fs (loop4): 1 truncate cleaned up [ 172.074042][T15588] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.143100][T15588] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #2: block 4: comm syz.4.5454: lblock 0 mapped to illegal pblock 4 (length 1) [ 172.167693][T15588] EXT4-fs (loop4): Remounting filesystem read-only [ 172.184176][T15601] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 172.196992][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.210176][T15601] EXT4-fs (loop3): 1 truncate cleaned up [ 172.216490][T15601] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.247694][ T28] audit: type=1400 audit(1774211620.475:1142): avc: denied { append } for pid=15602 comm="syz.1.5461" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 172.354282][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.368995][ T28] audit: type=1400 audit(1774211620.615:1143): avc: denied { name_bind } for pid=15610 comm="syz.4.5465" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 172.527626][T15624] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 172.536092][T15624] System zones: 0-1, 3-36 [ 172.543818][T15624] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.5470: bad orphan inode 134217728 [ 172.566197][T15624] loop1: lost filesystem error report for type 5 error -117 [ 172.566824][T15624] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.648938][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.658023][ T28] audit: type=1400 audit(1774211620.895:1144): avc: denied { name_connect } for pid=15632 comm="syz.4.5475" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 172.772069][T15644] set_capacity_and_notify: 4 callbacks suppressed [ 172.772086][T15644] loop3: detected capacity change from 0 to 512 [ 172.812113][T15644] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.865291][T15644] ext4 filesystem being mounted at /1025/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.922014][T15650] 8021q: adding VLAN 0 to HW filter on device bond1 [ 172.929504][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.959282][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.989073][T15650] bond1 (unregistering): Released all slaves [ 173.048534][T15660] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5483'. [ 173.129792][T15670] pim6reg: entered allmulticast mode [ 173.146229][T15670] pim6reg: left allmulticast mode [ 173.167927][T15672] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5488'. [ 173.335489][T15698] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5502'. [ 173.349807][T15700] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=15700 comm=syz.0.5503 [ 173.410482][T15705] loop4: detected capacity change from 0 to 1024 [ 173.425256][T15705] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.456255][T15705] EXT4-fs (loop4): shut down requested (2) [ 173.466820][ T28] audit: type=1400 audit(1774211621.715:1145): avc: denied { read } for pid=2983 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 173.499963][ T28] audit: type=1400 audit(1774211621.715:1146): avc: denied { search } for pid=2983 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 173.522839][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.532266][ T28] audit: type=1400 audit(1774211621.715:1147): avc: denied { search } for pid=2983 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 173.576374][ T28] audit: type=1400 audit(1774211621.715:1148): avc: denied { add_name } for pid=2983 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 173.598384][ T28] audit: type=1400 audit(1774211621.715:1149): avc: denied { create } for pid=2983 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 173.719070][T15731] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5517'. [ 173.757814][T15735] loop4: detected capacity change from 0 to 512 [ 173.780883][T15739] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 173.789521][T15739] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 173.798334][T15735] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.805240][T15739] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0009 i0007 l0 [ 173.811754][T15735] ext4 filesystem being mounted at /1085/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.847452][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.941532][T15749] loop4: detected capacity change from 0 to 1024 [ 173.951876][T15749] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 173.961621][T15749] System zones: 0-1, 3-36 [ 173.981676][T15749] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.5524: bad orphan inode 134217728 [ 173.994711][T15749] loop4: lost filesystem error report for type 5 error -117 [ 173.995247][T15749] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.059174][T15761] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5529'. [ 174.069435][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.915781][T15852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5569'. [ 174.925095][T15852] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 174.950381][T15855] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5570'. [ 174.976782][T15857] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 174.985266][T15857] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 174.992762][T15857] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0009 i0007 l0 [ 175.158777][T15864] netlink: 'syz.4.5573': attribute type 3 has an invalid length. [ 175.275840][T15876] loop3: detected capacity change from 0 to 128 [ 175.295284][T15876] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 175.317813][T15876] ext4 filesystem being mounted at /1043/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 175.342597][ T3322] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 175.756424][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 175.756543][ T28] audit: type=1400 audit(1774211624.005:1157): avc: denied { watch } for pid=15895 comm="syz.0.5587" path="/1217/file0" dev="tmpfs" ino=6208 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 175.813571][ T28] audit: type=1400 audit(1774211624.005:1158): avc: denied { watch_reads } for pid=15895 comm="syz.0.5587" path="/1217/file0" dev="tmpfs" ino=6208 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 176.376573][T15944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5606'. [ 176.415832][T15944] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 176.597835][ T28] audit: type=1400 audit(1774211624.845:1159): avc: denied { append } for pid=15962 comm="syz.1.5616" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 176.630201][T15963] loop4: detected capacity change from 0 to 7 [ 176.667774][ C1] blk_print_req_error: 4 callbacks suppressed [ 176.667796][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 176.683632][ C1] buffer_io_error: 4 callbacks suppressed [ 176.683651][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 176.701574][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 176.711323][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 176.719750][T15963] loop4: unable to read partition table [ 176.740738][T15963] loop_reread_partitions: partition scan of loop4 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ֘ȵ4FLQkÝŠ5) failed (rc=-5) [ 176.754049][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 176.763691][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 176.773511][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 176.783163][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 176.833052][ T3534] Buffer I/O error on dev loop4, logical block 0, async page read [ 176.850587][ T3534] Buffer I/O error on dev loop4, logical block 0, async page read [ 176.874501][ T3534] Buffer I/O error on dev loop4, logical block 0, async page read [ 176.878759][T15985] loop1: detected capacity change from 0 to 128 [ 176.911295][T15985] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 176.933687][T15985] ext4 filesystem being mounted at /1079/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 177.103830][ T3314] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 177.377284][T16006] pim6reg: entered allmulticast mode [ 177.377985][T16005] pim6reg: left allmulticast mode [ 177.455063][T16010] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16010 comm=syz.2.5636 [ 178.137357][ T28] audit: type=1400 audit(1774211626.385:1160): avc: denied { read } for pid=16043 comm="syz.4.5648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 178.417717][T16063] vcan0: tx address claim with dest, not broadcast [ 178.609565][T16075] netlink: 'syz.4.5663': attribute type 13 has an invalid length. [ 179.618617][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.651619][T16110] loop1: detected capacity change from 0 to 164 [ 179.659149][T16110] rock: corrupted directory entry. extent=32, offset=131072, size=237 [ 179.686953][T16113] loop4: detected capacity change from 0 to 7 [ 179.694285][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 179.703937][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 179.711955][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 179.721593][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 179.730916][T16113] loop4: unable to read partition table [ 179.736757][T16113] loop_reread_partitions: partition scan of loop4 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ֘ȵ4FLQkÝŠ5) failed (rc=-5) [ 179.742044][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 179.758867][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 179.814212][T16119] loop1: detected capacity change from 0 to 1024 [ 179.841805][T16119] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.855187][ T3305] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.867496][T16121] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5683'. [ 179.896247][T16127] loop4: detected capacity change from 0 to 512 [ 179.910935][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.934128][T16127] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.963505][T16127] ext4 filesystem being mounted at /1114/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 179.984682][ T28] audit: type=1400 audit(1774211628.235:1161): avc: denied { connect } for pid=16132 comm="syz.1.5686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 180.053106][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.164869][T16155] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5698'. [ 180.192849][ T28] audit: type=1400 audit(1774211628.435:1162): avc: denied { ioctl } for pid=16161 comm="syz.3.5701" path="socket:[44730]" dev="sockfs" ino=44730 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 180.234822][T16166] usb usb9: usbfs: process 16166 (syz.1.5703) did not claim interface 37 before use [ 180.294438][T16173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5706'. [ 180.356503][T16179] loop1: detected capacity change from 0 to 1024 [ 180.375173][T16183] tipc: New replicast peer: 255.255.255.255 [ 180.381587][T16179] EXT4-fs: Ignoring removed nobh option [ 180.391295][T16183] tipc: Enabled bearer , priority 10 [ 180.397957][T16179] EXT4-fs: Ignoring removed nomblk_io_submit option [ 180.406187][T16183] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5711'. [ 180.421262][T16183] tipc: Disabling bearer [ 180.436252][T16179] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.487038][T16191] loop4: detected capacity change from 0 to 512 [ 180.489328][T16193] netlink: 264 bytes leftover after parsing attributes in process `syz.0.5713'. [ 180.507303][T16191] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.5714: inode has both inline data and extents flags [ 180.546309][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.562506][T16191] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 180.562671][T16191] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.5714: couldn't read orphan inode 15 (err -117) [ 180.571885][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 180.571901][ C1] EXT4-fs (loop4): initial error at time 1774211628: ext4_orphan_get:1391: inode 15 [ 180.571930][ C1] EXT4-fs (loop4): last error at time 1774211628: ext4_orphan_get:1391: inode 15 [ 180.613546][T16191] loop4: lost filesystem error report for type 5 error -117 [ 180.639577][T16191] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.868158][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.862109][ T28] audit: type=1400 audit(1774211630.105:1163): avc: denied { name_connect } for pid=16250 comm="syz.1.5738" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 182.216463][T16282] usb usb9: usbfs: process 16282 (syz.3.5751) did not claim interface 37 before use [ 182.813022][T16287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5752'. [ 182.980738][T16309] netlink: 264 bytes leftover after parsing attributes in process `syz.1.5764'. [ 183.022445][T16312] loop2: detected capacity change from 0 to 1024 [ 183.043476][T16315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5766'. [ 183.057343][T16315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5766'. [ 183.062556][T16312] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.118003][T16312] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: comm syz.2.5765: inode #7114504: comm syz.2.5765: iget: illegal inode # [ 183.125154][T16327] tipc: Enabling of bearer rejected, already enabled [ 183.141425][T16327] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5769'. [ 183.150811][T16327] tipc: Disabling bearer [ 183.156362][T16312] EXT4-fs (loop2): Remounting filesystem read-only [ 183.164766][T16312] EXT4-fs warning (device loop2): ext4_xattr_block_set:2200: inode #19: comm syz.2.5765: dec ref error=-30 [ 183.210302][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.855262][ T28] audit: type=1326 audit(1774211632.105:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16341 comm="syz.1.5773" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7132ccc799 code=0x0 [ 184.453075][T16403] loop3: detected capacity change from 0 to 1024 [ 184.466151][T16403] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.488312][T16403] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: comm syz.3.5805: inode #7114504: comm syz.3.5805: iget: illegal inode # [ 184.503004][T16403] EXT4-fs (loop3): Remounting filesystem read-only [ 184.503057][T16403] EXT4-fs warning (device loop3): ext4_xattr_block_set:2200: inode #19: comm syz.3.5805: dec ref error=-30 [ 184.555407][T16411] loop2: detected capacity change from 0 to 512 [ 184.569941][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.654860][T16415] loop2: detected capacity change from 0 to 128 [ 184.678497][T16415] syz.2.5808: attempt to access beyond end of device [ 184.678497][T16415] loop2: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 184.746995][T16419] sd 0:0:1:0: device reset [ 185.003394][T16437] loop2: detected capacity change from 0 to 128 [ 185.058437][ T28] audit: type=1400 audit(1774211633.305:1165): avc: denied { listen } for pid=16445 comm="syz.4.5822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 185.122356][T16454] sd 0:0:1:0: device reset [ 185.134065][T16453] loop1: detected capacity change from 0 to 128 [ 185.164763][T16453] syz.1.5826: attempt to access beyond end of device [ 185.164763][T16453] loop1: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 185.244485][T16468] __nla_validate_parse: 1 callbacks suppressed [ 185.244500][T16468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5832'. [ 185.270383][T16468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5832'. [ 185.356666][T16468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5832'. [ 185.379349][T16468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5832'. [ 185.439402][T16468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5832'. [ 185.452634][T16468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5832'. [ 185.637064][ T28] audit: type=1400 audit(1774211633.885:1166): avc: denied { remount } for pid=16501 comm="syz.1.5848" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 185.705754][ T28] audit: type=1400 audit(1774211633.915:1167): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 186.087016][T16542] loop2: detected capacity change from 0 to 1024 [ 186.112136][T16542] EXT4-fs: Ignoring removed orlov option [ 186.120616][T16542] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 186.162833][ T28] audit: type=1400 audit(1774211634.405:1168): avc: denied { link } for pid=16539 comm="syz.2.5866" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 186.222421][T16550] erspan0: entered promiscuous mode [ 186.244582][T16550] macsec2: entered promiscuous mode [ 186.662432][T16589] netlink: 160 bytes leftover after parsing attributes in process `syz.0.5887'. [ 186.822434][ T28] audit: type=1400 audit(1774211635.065:1169): avc: denied { nlmsg_read } for pid=16606 comm="syz.0.5895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 186.881344][T16609] pimreg0: tun_chr_ioctl cmd 1074025681 [ 187.317108][T16653] erspan0: entered promiscuous mode [ 187.345598][T16653] macsec2: entered promiscuous mode [ 187.584290][T16684] team_slave_0: entered promiscuous mode [ 187.590006][T16684] team_slave_1: entered promiscuous mode [ 187.603290][T16684] macvtap1: entered promiscuous mode [ 187.612821][T16684] team0: entered promiscuous mode [ 187.628954][T16684] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 187.654074][T16684] team0: Device macvtap1 is already an upper device of the team interface [ 187.697888][T16684] team0: left promiscuous mode [ 187.715852][T16684] team_slave_0: left promiscuous mode [ 187.721414][T16684] team_slave_1: left promiscuous mode [ 188.151477][T16725] netem: change failed [ 188.526755][T16753] netem: change failed [ 188.646203][ T28] audit: type=1400 audit(1774211636.895:1170): avc: denied { bind } for pid=16766 comm="syz.4.5966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 188.729746][T16774] loop2: detected capacity change from 0 to 2048 [ 188.752497][T16774] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 188.789723][T16774] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 28 [ 188.817907][T16774] EXT4-fs (loop2): This should not happen!! Data will be lost [ 188.817907][T16774] [ 188.828073][T16774] EXT4-fs (loop2): Total free blocks count 0 [ 188.852095][T16774] EXT4-fs (loop2): Free/Dirty block details [ 188.864874][T16774] EXT4-fs (loop2): free_blocks=2415919504 [ 188.876315][T16774] EXT4-fs (loop2): dirty_blocks=16 [ 188.887103][T16774] EXT4-fs (loop2): Block reservation details [ 188.897237][T16771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.899549][T16774] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 188.914268][T16771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.007636][T16784] loop2: detected capacity change from 0 to 128 [ 189.020790][T16786] option changes via remount are deprecated (pid=16785 comm=syz.3.5972) [ 189.024380][T16784] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 189.031494][T16786] cgroup: option or name mismatch, new: 0x0 "none", old: 0x0 "" [ 189.356783][T16808] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.5981'. [ 189.367399][T16808] netlink: zone id is out of range [ 189.372546][T16808] netlink: zone id is out of range [ 189.378441][T16808] netlink: zone id is out of range [ 189.383765][T16808] netlink: zone id is out of range [ 189.398109][T16808] netlink: set zone limit has 8 unknown bytes [ 189.746901][T16838] loop4: detected capacity change from 0 to 512 [ 190.017947][ T70] kworker/u8:4: attempt to access beyond end of device [ 190.017947][ T70] loop4: rw=1, sector=2384, nr_sectors = 2048 limit=512 [ 190.066898][ T70] kworker/u8:4: attempt to access beyond end of device [ 190.066898][ T70] loop4: rw=1, sector=4432, nr_sectors = 2056 limit=512 [ 190.093936][T16868] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.6008'. [ 190.101631][ T70] kworker/u8:4: attempt to access beyond end of device [ 190.101631][ T70] loop4: rw=1, sector=6488, nr_sectors = 2048 limit=512 [ 190.104233][T16868] netlink: zone id is out of range [ 190.134977][T16868] netlink: zone id is out of range [ 190.141122][T16868] netlink: zone id is out of range [ 190.146276][ T70] kworker/u8:4: attempt to access beyond end of device [ 190.146276][ T70] loop4: rw=1, sector=8536, nr_sectors = 2720 limit=512 [ 190.146925][T16868] netlink: zone id is out of range [ 190.172610][ T70] kworker/u8:4: attempt to access beyond end of device [ 190.172610][ T70] loop4: rw=1, sector=11256, nr_sectors = 4088 limit=512 [ 190.190032][ T70] kworker/u8:4: attempt to access beyond end of device [ 190.190032][ T70] loop4: rw=1, sector=15344, nr_sectors = 1120 limit=512 [ 190.195131][T16868] netlink: set zone limit has 8 unknown bytes [ 190.461325][ T28] audit: type=1400 audit(1774211638.705:1171): avc: denied { ioctl } for pid=16874 comm="syz.1.6021" path="socket:[47052]" dev="sockfs" ino=47052 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 190.606241][T16891] loop2: detected capacity change from 0 to 512 [ 190.618952][T16891] EXT4-fs: Ignoring removed oldalloc option [ 190.643262][T16891] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 190.661335][T16891] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.6027: bad orphan inode 131083 [ 190.699417][T16891] loop2: lost filesystem error report for type 5 error -117 [ 190.702796][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 190.716618][ C1] EXT4-fs (loop2): initial error at time 1774211638: ext4_orphan_get:1417 [ 190.725171][ C1] EXT4-fs (loop2): last error at time 1774211638: ext4_orphan_get:1417 [ 190.750126][T16891] EXT4-fs mount: 4 callbacks suppressed [ 190.750143][T16891] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.815529][ T28] audit: type=1400 audit(1774211639.055:1172): avc: denied { append } for pid=16907 comm="syz.1.6025" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 191.055167][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.189689][T16936] loop3: detected capacity change from 0 to 128 [ 191.198793][T16936] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 191.241466][T16938] option changes via remount are deprecated (pid=16937 comm=syz.4.6037) [ 191.260989][T16938] cgroup: option or name mismatch, new: 0x0 "none", old: 0x0 "" [ 191.607737][T16954] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 191.820380][T16976] team_slave_0: entered promiscuous mode [ 191.826149][T16976] team_slave_1: entered promiscuous mode [ 191.837574][T16976] macvtap1: entered promiscuous mode [ 191.843698][T16976] team0: entered promiscuous mode [ 191.850060][T16976] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 191.857542][T16976] team0: Device macvtap1 is already an upper device of the team interface [ 191.868106][T16976] team0: left promiscuous mode [ 191.876029][T16976] team_slave_0: left promiscuous mode [ 191.881487][T16976] team_slave_1: left promiscuous mode [ 191.910015][T16979] bridge0: port 3(syz_tun) entered disabled state [ 191.919034][T16979] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.926236][T16979] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.004403][T16979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.015423][T16979] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.068482][ T70] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.078305][ T70] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.087774][ T70] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.103647][ T70] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.121506][ T70] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.153514][ T70] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.163703][ T70] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.185921][ T70] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.258541][T16995] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.6060'. [ 192.513456][T17021] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6074'. [ 192.518470][T17017] loop3: detected capacity change from 0 to 2048 [ 192.550109][T17017] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 192.603364][T17017] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.640364][ T28] audit: type=1400 audit(1774211640.885:1173): avc: denied { map } for pid=17016 comm="syz.3.6072" path="/1163/file1/pids.current" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 192.689189][T17032] loop2: detected capacity change from 0 to 256 [ 192.696119][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.008707][T17050] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6087'. [ 193.097955][T17055] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 193.153844][T17061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6091'. [ 193.332936][ T28] audit: type=1326 audit(1774211641.575:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17080 comm="syz.1.6101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7132ccc799 code=0x7ffc0000 [ 193.416815][ T28] audit: type=1326 audit(1774211641.575:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17080 comm="syz.1.6101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7132ccc799 code=0x7ffc0000 [ 193.468656][T17092] loop4: detected capacity change from 0 to 1024 [ 193.487564][ T28] audit: type=1326 audit(1774211641.575:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17080 comm="syz.1.6101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7132ccc799 code=0x7ffc0000 [ 193.543528][T17092] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.549542][ T28] audit: type=1326 audit(1774211641.575:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17080 comm="syz.1.6101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7132ccc799 code=0x7ffc0000 [ 193.604522][ T28] audit: type=1326 audit(1774211641.585:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17080 comm="syz.1.6101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7132c8cfce code=0x7ffc0000 [ 193.632011][ T28] audit: type=1326 audit(1774211641.585:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17080 comm="syz.1.6101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7132c8cfce code=0x7ffc0000 [ 193.657389][T17088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.677499][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.687593][T17088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.718098][ T28] audit: type=1326 audit(1774211641.585:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17080 comm="syz.1.6101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7132ccc799 code=0x7ffc0000 [ 193.734607][T17106] loop3: detected capacity change from 0 to 512 [ 193.748080][ T28] audit: type=1326 audit(1774211641.585:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17080 comm="syz.1.6101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7132ccc799 code=0x7ffc0000 [ 193.748152][ T28] audit: type=1326 audit(1774211641.585:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17080 comm="syz.1.6101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f7132ccc799 code=0x7ffc0000 [ 193.748184][ T28] audit: type=1326 audit(1774211641.585:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17080 comm="syz.1.6101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7132ccc799 code=0x7ffc0000 [ 193.837956][T17106] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 193.850728][T17106] System zones: 1-12 [ 193.876956][T17106] EXT4-fs error (device loop3): ext4_iget_extra_inode:5025: inode #15: comm syz.3.6112: corrupted in-inode xattr: e_value size too large [ 193.906424][T17106] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 193.906637][T17106] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.6112: couldn't read orphan inode 15 (err -117) [ 193.915981][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 193.916002][ C0] EXT4-fs (loop3): initial error at time 1774211642: ext4_iget_extra_inode:5025: inode 15 [ 193.916028][ C0] EXT4-fs (loop3): last error at time 1774211642: ext4_iget_extra_inode:5025: inode 15 [ 193.958831][T17106] loop3: lost filesystem error report for type 5 error -117 [ 193.959410][T17106] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.014270][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.023483][T17115] loop4: detected capacity change from 0 to 256 [ 194.146547][T17129] loop3: detected capacity change from 0 to 512 [ 194.209995][ T28] audit: type=1400 audit(1774211642.455:1184): avc: denied { getopt } for pid=17134 comm="syz.2.6126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 194.337708][T17145] loop2: detected capacity change from 0 to 1024 [ 194.361177][T17147] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 194.386363][T17145] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.404626][T17147] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.428056][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.477582][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.483324][ T28] audit: type=1400 audit(1774211642.735:1185): avc: denied { execstack } for pid=17156 comm="syz.2.6136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 194.514755][ T70] kworker/u8:4: attempt to access beyond end of device [ 194.514755][ T70] loop3: rw=1, sector=2400, nr_sectors = 2472 limit=512 [ 194.536943][ T70] kworker/u8:4: attempt to access beyond end of device [ 194.536943][ T70] loop3: rw=1, sector=4872, nr_sectors = 3624 limit=512 [ 194.554010][T17160] EXT4-fs: Ignoring removed oldalloc option [ 194.563515][T17160] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 194.575506][T17160] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.6133: bad orphan inode 131083 [ 194.580101][ T70] kworker/u8:4: attempt to access beyond end of device [ 194.580101][ T70] loop3: rw=1, sector=8496, nr_sectors = 2056 limit=512 [ 194.600442][T17160] loop1: lost filesystem error report for type 5 error -117 [ 194.601100][T17160] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.630804][T17163] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 194.636842][ T70] kworker/u8:4: attempt to access beyond end of device [ 194.636842][ T70] loop3: rw=1, sector=10552, nr_sectors = 3432 limit=512 [ 194.653202][T17163] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 194.708567][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.723069][ T28] audit: type=1400 audit(1774211642.965:1186): avc: denied { mounton } for pid=17164 comm="syz.2.6139" path="/1261/file0" dev="tmpfs" ino=6494 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 194.755113][T17167] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6140'. [ 194.812676][T17174] program syz.1.6142 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 194.856342][T17178] sg_write: data in/out 204756/56 bytes for SCSI command 0x0-- guessing data in; [ 194.856342][T17178] program syz.1.6145 not setting count and/or reply_len properly [ 194.976284][T17193] SELinux: failed to load policy [ 194.982796][ T28] audit: type=1400 audit(1774211643.225:1187): avc: denied { load_policy } for pid=17192 comm="syz.0.6151" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 195.025108][T17195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6152'. [ 195.243297][ T28] audit: type=1400 audit(1774211643.495:1188): avc: denied { accept } for pid=17214 comm="syz.3.6160" lport=47322 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 195.373864][T17223] ªªªªªª: renamed from vlan0 [ 195.576585][T17234] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 195.604406][T17239] set_capacity_and_notify: 3 callbacks suppressed [ 195.605009][T17234] bond1 (unregistering): Released all slaves [ 195.622128][T17239] loop2: detected capacity change from 0 to 512 [ 195.637411][T17239] EXT4-fs (loop2): orphan cleanup on readonly fs [ 195.644555][T17239] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 195.673045][T17239] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.6172: Failed to acquire dquot type 1 [ 195.684788][T17239] loop2: lost filesystem error report for type 5 error -117 [ 195.685067][T17239] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.6172: Failed to acquire dquot type 1 [ 195.703636][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 195.703661][ C1] EXT4-fs (loop2): last error at time 1774211643: ext4_acquire_dquot:7001 [ 195.746772][T17239] loop2: lost filesystem error report for type 5 error -117 [ 195.748025][T17239] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6172: bg 0: block 248: padding at end of block bitmap is not set [ 195.782853][T17239] loop2: lost filesystem error report for type 5 error -117 [ 195.792935][T17239] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 195.810999][T17239] loop2: lost filesystem error report for type 5 error -117 [ 195.812923][T17239] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.6172: Failed to acquire dquot type 1 [ 195.841347][T17239] loop2: lost filesystem error report for type 5 error -117 [ 195.841603][T17239] EXT4-fs (loop2): 1 orphan inode deleted [ 195.875411][T17239] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 195.907940][T17249] loop1: detected capacity change from 0 to 512 [ 195.915206][T17249] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 195.930222][T17248] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6176'. [ 196.004894][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.056018][T17256] loop2: detected capacity change from 0 to 512 [ 196.094387][T17256] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.113897][T17256] ext4 filesystem being mounted at /1268/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 196.127360][T17263] loop3: detected capacity change from 0 to 512 [ 196.136303][T17263] EXT4-fs: Ignoring removed oldalloc option [ 196.144922][T17256] SELinux: failed to load policy [ 196.160346][T17263] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 196.191012][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.206908][T17263] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.6182: bad orphan inode 131083 [ 196.217657][T17263] loop3: lost filesystem error report for type 5 error -117 [ 196.218336][T17263] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.241766][T17268] program syz.1.6185 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 196.347485][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.813034][T17279] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.820344][T17279] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.909585][T17279] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.949200][T17279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.014003][T17299] lo: Caught tx_queue_len zero misconfig [ 197.027071][T17301] ªªªªªª: renamed from vlan0 (while UP) [ 197.094563][ T70] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.126101][ T70] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.156581][ T70] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.176060][ T70] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.268935][T17344] loop1: detected capacity change from 0 to 512 [ 197.314876][T17344] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 197.336547][T17344] System zones: 1-12 [ 197.350689][T17351] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6213'. [ 197.382226][T17344] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.6208: corrupted in-inode xattr: e_value size too large [ 197.417468][T17344] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 197.417686][T17354] netlink: 15 bytes leftover after parsing attributes in process `syz.4.6214'. [ 197.432811][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 197.438011][T17356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6215'. [ 197.443044][ C1] EXT4-fs (loop1): initial error at time 1774211645: ext4_iget_extra_inode:5025: inode 15 [ 197.452071][T17344] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.6208: couldn't read orphan inode 15 (err -117) [ 197.462166][ C1] EXT4-fs (loop1): last error at time 1774211645: ext4_iget_extra_inode:5025: inode 15 [ 197.492667][T17356] netlink: 'syz.2.6215': attribute type 3 has an invalid length. [ 197.519362][T17356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6215'. [ 197.534845][T17344] loop1: lost filesystem error report for type 5 error -117 [ 197.535397][T17344] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.582526][T17362] loop2: detected capacity change from 0 to 512 [ 197.602238][T17362] EXT4-fs: Ignoring removed bh option [ 197.608723][T17362] EXT4-fs: inline encryption not supported [ 197.615234][T17362] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 197.629345][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.670042][T17362] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 197.711773][T17362] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6217: bg 0: block 248: padding at end of block bitmap is not set [ 197.728565][T17362] loop2: lost filesystem error report for type 5 error -117 [ 197.728975][T17362] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.6217: Failed to acquire dquot type 1 [ 197.737014][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 197.737031][ C1] EXT4-fs (loop2): last error at time 1774211645: ext4_validate_block_bitmap:441 [ 197.764902][T17362] loop2: lost filesystem error report for type 5 error -117 [ 197.766622][T17362] EXT4-fs (loop2): 1 truncate cleaned up [ 197.780337][T17362] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 197.804921][T17359] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.812232][T17359] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.827362][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 197.862894][ T12] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:0: Failed to release dquot type 1 [ 197.882164][ T12] loop2: lost filesystem error report for type 5 error -117 [ 197.941946][T17359] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.971358][T17359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.029231][T17388] loop2: detected capacity change from 0 to 256 [ 198.083992][T17368] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 198.098415][T17368] bond1 (unregistering): Released all slaves [ 198.127169][ T178] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.136659][ T178] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.151332][ T178] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.160938][ T178] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.219119][T17398] bridge1: entered promiscuous mode [ 198.238618][T17398] bridge1: entered allmulticast mode [ 198.269515][T17408] loop2: detected capacity change from 0 to 512 [ 198.286398][T17398] team0: Port device bridge1 added [ 198.337720][T17415] loop4: detected capacity change from 0 to 512 [ 198.361002][T17415] EXT4-fs (loop4): orphan cleanup on readonly fs [ 198.371814][T17415] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.6241: Failed to acquire dquot type 1 [ 198.386976][T17415] loop4: lost filesystem error report for type 5 error -117 [ 198.387190][T17415] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.6241: Failed to acquire dquot type 1 [ 198.394550][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 198.394582][ C0] EXT4-fs (loop4): last error at time 1774211646: ext4_acquire_dquot:7001 [ 198.424132][T17415] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6241: bg 0: block 248: padding at end of block bitmap is not set [ 198.453982][T17415] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 198.473730][T17415] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.6241: Failed to acquire dquot type 1 [ 198.513633][T17415] EXT4-fs (loop4): 1 orphan inode deleted [ 198.534377][T17415] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 198.590751][T17428] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 198.612215][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.622033][T17428] bond1 (unregistering): Released all slaves [ 198.709053][ T50] bio_check_eod: 1 callbacks suppressed [ 198.709066][ T50] kworker/u8:3: attempt to access beyond end of device [ 198.709066][ T50] loop2: rw=1, sector=4064, nr_sectors = 2048 limit=512 [ 198.734280][ T50] kworker/u8:3: attempt to access beyond end of device [ 198.734280][ T50] loop2: rw=1, sector=6112, nr_sectors = 2392 limit=512 [ 198.774388][ T50] kworker/u8:3: attempt to access beyond end of device [ 198.774388][ T50] loop2: rw=1, sector=8504, nr_sectors = 2616 limit=512 [ 198.776590][T17446] loop4: detected capacity change from 0 to 512 [ 198.811374][ T50] kworker/u8:3: attempt to access beyond end of device [ 198.811374][ T50] loop2: rw=1, sector=11120, nr_sectors = 2048 limit=512 [ 198.828985][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 198.828998][ T28] audit: type=1400 audit(1774211647.075:1193): avc: denied { read } for pid=17444 comm="syz.1.6257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 198.858342][ T50] kworker/u8:3: attempt to access beyond end of device [ 198.858342][ T50] loop2: rw=1, sector=13168, nr_sectors = 2048 limit=512 [ 198.891742][ T50] kworker/u8:3: attempt to access beyond end of device [ 198.891742][ T50] loop2: rw=1, sector=15216, nr_sectors = 1248 limit=512 [ 199.019640][ T28] audit: type=1400 audit(1774211647.265:1194): avc: denied { mount } for pid=17467 comm="syz.1.6266" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 199.109665][T17478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6269'. [ 199.123853][T17478] netlink: 'syz.3.6269': attribute type 3 has an invalid length. [ 199.124617][T17481] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 199.131678][T17478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6269'. [ 199.156335][T17481] bond1 (unregistering): Released all slaves [ 199.804199][T17531] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.811543][T17531] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.933864][T17531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.974828][T17531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.070477][ T50] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.097128][ T50] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.123642][ T50] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.162554][ T50] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.197053][ T28] audit: type=1400 audit(1774211648.445:1195): avc: denied { read } for pid=17545 comm="syz.0.6298" lport=54712 faddr=::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 200.274903][T17558] netlink: 47 bytes leftover after parsing attributes in process `syz.2.6312'. [ 200.320393][T17561] bridge1: entered promiscuous mode [ 200.325946][T17561] bridge1: entered allmulticast mode [ 200.360220][T17561] team0: Port device bridge1 added [ 200.484798][T17587] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 200.512478][T17587] FAT-fs (loop4): error, corrupted file size (i_pos 548, 512) [ 200.528087][T17587] FAT-fs (loop4): Filesystem has been set read-only [ 200.543273][T17587] FAT-fs (loop4): error, corrupted file size (i_pos 548, 512) [ 200.630422][T17601] bridge2: entered promiscuous mode [ 200.636373][T17601] bridge2: entered allmulticast mode [ 200.644459][T17601] team0: Port device bridge2 added [ 200.674023][T17608] set_capacity_and_notify: 5 callbacks suppressed [ 200.674038][T17608] loop2: detected capacity change from 0 to 512 [ 200.696550][T17608] EXT4-fs: Ignoring removed oldalloc option [ 200.704586][T17608] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 200.721204][T17611] loop3: detected capacity change from 0 to 128 [ 200.739769][T17608] EXT4-fs (loop2): 1 truncate cleaned up [ 200.748666][T17608] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.769695][T17611] syz.3.6328: attempt to access beyond end of device [ 200.769695][T17611] loop3: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 200.787847][T17611] syz.3.6328: attempt to access beyond end of device [ 200.787847][T17611] loop3: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 200.813903][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.824113][T17611] buffer_io_error: 4 callbacks suppressed [ 200.824128][T17611] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 200.838689][T17611] syz.3.6328: attempt to access beyond end of device [ 200.838689][T17611] loop3: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 200.853026][T17611] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 200.885790][T17611] syz.3.6328: attempt to access beyond end of device [ 200.885790][T17611] loop3: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 200.900953][T17611] Buffer I/O error on dev loop3, logical block 83, lost async page write [ 200.909554][T17611] Buffer I/O error on dev loop3, logical block 84, lost async page write [ 200.919374][T17611] Buffer I/O error on dev loop3, logical block 95, lost async page write [ 200.928721][T17611] Buffer I/O error on dev loop3, logical block 96, lost async page write [ 200.937979][T17611] Buffer I/O error on dev loop3, logical block 99, lost async page write [ 200.946693][T17611] Buffer I/O error on dev loop3, logical block 100, lost async page write [ 200.957199][T17611] Buffer I/O error on dev loop3, logical block 111, lost async page write [ 200.965904][T17611] Buffer I/O error on dev loop3, logical block 112, lost async page write [ 201.236253][T17641] loop1: detected capacity change from 0 to 512 [ 201.507429][T17662] loop3: detected capacity change from 0 to 1024 [ 201.515276][T17662] EXT4-fs: Ignoring removed orlov option [ 201.536234][T17662] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.560988][ T28] audit: type=1400 audit(1774211905.802:1196): avc: denied { mounton } for pid=17661 comm="syz.3.6350" path="/1223/file1" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 201.580831][T17670] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 201.622906][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.639460][T17676] loop1: detected capacity change from 0 to 512 [ 201.657000][ T28] audit: type=1400 audit(1774211905.902:1197): avc: denied { connect } for pid=17677 comm="syz.0.6365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 201.697025][T17676] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 49, start 000000c8) [ 201.708576][T17676] FAT-fs (loop1): Filesystem has been set read-only [ 201.725212][T17676] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 49, start 000000c8) [ 201.736002][T17676] FAT-fs (loop1): error, invalid access to FAT (entry 0x000000c8) [ 201.760844][T17682] batadv_slave_0: Caught tx_queue_len zero misconfig [ 201.776689][ T28] audit: type=1400 audit(1774211906.022:1198): avc: denied { ioctl } for pid=17683 comm="syz.3.6369" path="socket:[49517]" dev="sockfs" ino=49517 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 201.808837][T17686] loop1: detected capacity change from 0 to 128 [ 201.833153][T17691] netlink: 47 bytes leftover after parsing attributes in process `syz.3.6358'. [ 202.014804][ T28] audit: type=1400 audit(1774211906.262:1199): avc: denied { connect } for pid=17712 comm="syz.1.6372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 202.059073][T17716] loop1: detected capacity change from 0 to 1024 [ 202.084121][T17716] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.135512][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.212029][T17729] loop1: detected capacity change from 0 to 2048 [ 202.249272][T17729] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.271414][T17730] SELinux: failed to load policy [ 202.343723][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.444656][ T28] audit: type=1400 audit(1774211906.692:1200): avc: denied { connect } for pid=17753 comm="syz.1.6389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 202.533318][T17762] loop4: detected capacity change from 0 to 8192 [ 202.544633][T17762] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 202.840892][T17777] tipc: Enabling of bearer rejected, failed to enable media [ 202.960371][T17785] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 202.993287][T17785] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 203.166151][ T28] audit: type=1400 audit(1774211907.412:1201): avc: denied { accept } for pid=17793 comm="syz.1.6406" path="socket:[49684]" dev="sockfs" ino=49684 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 203.466624][ T28] audit: type=1400 audit(1774211907.702:1202): avc: denied { setopt } for pid=17819 comm="syz.4.6420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 203.489167][T17823] loop3: detected capacity change from 0 to 764 [ 203.504039][T17823] rock: directory entry would overflow storage [ 203.525964][T17823] rock: sig=0x5245, size=8, remaining=5 [ 203.611367][T17830] bond1 (unregistering): Released all slaves [ 203.759970][T17848] lo: Caught tx_queue_len zero misconfig [ 203.846033][ T50] bio_check_eod: 44 callbacks suppressed [ 203.846050][ T50] kworker/u8:3: attempt to access beyond end of device [ 203.846050][ T50] loop4: rw=1, sector=2400, nr_sectors = 2264 limit=512 [ 203.879329][ T50] kworker/u8:3: attempt to access beyond end of device [ 203.879329][ T50] loop4: rw=1, sector=4664, nr_sectors = 2056 limit=512 [ 203.898951][ T50] kworker/u8:3: attempt to access beyond end of device [ 203.898951][ T50] loop4: rw=1, sector=6720, nr_sectors = 2496 limit=512 [ 203.918182][ T50] kworker/u8:3: attempt to access beyond end of device [ 203.918182][ T50] loop4: rw=1, sector=9216, nr_sectors = 2928 limit=512 [ 203.957915][ T50] kworker/u8:3: attempt to access beyond end of device [ 203.957915][ T50] loop4: rw=1, sector=12144, nr_sectors = 2128 limit=512 [ 203.977050][ T50] kworker/u8:3: attempt to access beyond end of device [ 203.977050][ T50] loop4: rw=1, sector=14272, nr_sectors = 2072 limit=512 [ 203.995350][ T50] kworker/u8:3: attempt to access beyond end of device [ 203.995350][ T50] loop4: rw=1, sector=16344, nr_sectors = 120 limit=512 [ 204.052770][T17872] tmpfs: Bad value for 'mpol' [ 204.219253][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 204.219271][ T28] audit: type=1400 audit(1774211908.462:1204): avc: denied { listen } for pid=17891 comm="syz.4.6451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 204.389780][T17911] net_ratelimit: 5 callbacks suppressed [ 204.389794][T17911] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 204.516192][ T28] audit: type=1400 audit(1774211908.762:1205): avc: denied { sys_module } for pid=17918 comm="syz.1.6464" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 204.813852][ T28] audit: type=1400 audit(1774211909.062:1206): avc: denied { bind } for pid=17944 comm="syz.3.6476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 204.834296][ T28] audit: type=1400 audit(1774211909.062:1207): avc: denied { name_bind } for pid=17944 comm="syz.3.6476" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 204.855724][ T28] audit: type=1400 audit(1774211909.062:1208): avc: denied { node_bind } for pid=17944 comm="syz.3.6476" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 205.077593][ T70] kworker/u8:4: attempt to access beyond end of device [ 205.077593][ T70] loop2: rw=1, sector=2384, nr_sectors = 2048 limit=512 [ 205.095318][ T70] kworker/u8:4: attempt to access beyond end of device [ 205.095318][ T70] loop2: rw=1, sector=4432, nr_sectors = 2520 limit=512 [ 205.112727][ T70] kworker/u8:4: attempt to access beyond end of device [ 205.112727][ T70] loop2: rw=1, sector=6952, nr_sectors = 2056 limit=512 [ 205.214861][T17961] netlink: 'syz.2.6484': attribute type 1 has an invalid length. [ 205.281309][T17963] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.297093][ T28] audit: type=1400 audit(1774211909.542:1209): avc: denied { execute } for pid=17962 comm="syz.2.6485" path="/1335/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 205.344030][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.658635][T17997] netlink: 27 bytes leftover after parsing attributes in process `syz.1.6500'. [ 205.698850][T18001] set_capacity_and_notify: 6 callbacks suppressed [ 205.698870][T18001] loop1: detected capacity change from 0 to 512 [ 205.727238][T18001] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 205.741021][T18001] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 205.761265][T18001] EXT4-fs (loop1): 1 truncate cleaned up [ 205.767811][T18001] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.793141][T18001] EXT4-fs error (device loop1): ext4_check_all_de:659: inode #12: block 7: comm syz.1.6502: bad entry in directory: directory entry overrun - offset=16, inode=2147483648, rec_len=1024, size=124 fake=0 [ 205.817669][T18001] EXT4-fs error (device loop1): ext4_check_all_de:659: inode #12: block 7: comm syz.1.6502: bad entry in directory: directory entry overrun - offset=16, inode=2147483648, rec_len=1024, size=124 fake=0 [ 205.898530][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.956133][T18018] loop1: detected capacity change from 0 to 1024 [ 205.994702][T18024] batman_adv: batadv0: Adding interface: vlan4 [ 206.001052][T18024] batman_adv: batadv0: The MTU of interface vlan4 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.005729][T18018] EXT4-fs: inline encryption not supported [ 206.038913][T18018] EXT4-fs: Ignoring removed bh option [ 206.045348][T18024] batman_adv: batadv0: Not using interface vlan4 (retrying later): interface not active [ 206.061059][T18029] netlink: 71 bytes leftover after parsing attributes in process `syz.3.6515'. [ 206.061083][T18018] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.133175][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.174867][T18041] loop1: detected capacity change from 0 to 512 [ 206.770682][T18094] loop3: detected capacity change from 0 to 764 [ 206.806675][T18094] Symlink component flag not implemented [ 206.814821][ T28] audit: type=1400 audit(1774211911.062:1210): avc: denied { remount } for pid=18093 comm="syz.3.6547" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 207.005376][T18115] loop1: detected capacity change from 0 to 512 [ 207.047601][T18115] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 207.103937][T18115] EXT4-fs (loop1): 1 truncate cleaned up [ 207.110342][T18115] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.185426][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.191542][T18131] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 207.204841][T18131] syzkaller0: linktype set to 769 [ 207.488314][ T28] audit: type=1326 audit(1774212167.732:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18164 comm="syz.1.6579" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7132ccc799 code=0x0 [ 207.517978][T18166] bridge0: port 4(batadv1) entered blocking state [ 207.525454][T18166] bridge0: port 4(batadv1) entered disabled state [ 207.539509][T18166] batadv1: entered allmulticast mode [ 207.568221][T18166] batadv1: entered promiscuous mode [ 207.625832][T18175] hub 1-0:1.0: USB hub found [ 207.640540][T18175] hub 1-0:1.0: 8 ports detected [ 207.758077][T18191] block device autoloading is deprecated and will be removed. [ 207.973287][T18221] loop0: detected capacity change from 0 to 256 [ 207.981064][T18221] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 208.022792][ T178] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 208.032197][ T178] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 208.178484][T18241] loop0: detected capacity change from 0 to 1024 [ 208.193948][ T28] audit: type=1400 audit(2000000000.170:1212): avc: denied { ioctl } for pid=18242 comm="syz.2.6615" path="socket:[51481]" dev="sockfs" ino=51481 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 208.224814][T18241] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.243793][T18241] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6614'. [ 208.266748][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.480326][T18269] loop1: detected capacity change from 0 to 1024 [ 208.487299][T18269] EXT4-fs: inline encryption not supported [ 208.493328][T18269] EXT4-fs: Ignoring removed i_version option [ 208.516633][T18269] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.533566][T18276] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6629'. [ 208.590132][ T28] audit: type=1400 audit(2000000000.560:1213): avc: denied { ioctl } for pid=18279 comm="syz.3.6631" path="socket:[51534]" dev="sockfs" ino=51534 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 208.670594][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.686508][T18290] loop3: detected capacity change from 0 to 1024 [ 208.693395][T18290] EXT4-fs: Ignoring removed bh option [ 208.715505][T18290] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.735201][T18290] ext4 filesystem being mounted at /1300/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.750194][T18298] netlink: 4560 bytes leftover after parsing attributes in process `syz.4.6639'. [ 208.760529][T18298] netlink: 4560 bytes leftover after parsing attributes in process `syz.4.6639'. [ 208.771838][T18290] EXT4-fs error (device loop3): ext4_map_blocks:818: inode #15: comm syz.3.6636: lblock 0 mapped to illegal pblock 0 (length 6) [ 208.802998][T18290] EXT4-fs error (device loop3): ext4_ext_remove_space:2954: inode #15: comm syz.3.6636: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 208.844307][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 209.344214][T18324] loop0: detected capacity change from 0 to 2048 [ 209.364540][T18324] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.389745][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.418454][T18329] EXT4-fs: Ignoring removed nomblk_io_submit option [ 209.434309][T18329] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.479925][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.606419][T18353] batadv_slave_0: Caught tx_queue_len zero misconfig [ 209.620226][T18355] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 209.637047][T18357] xt_CT: You must specify a L4 protocol and not use inversions on it [ 209.662145][T18355] EXT4-fs (loop0): 1 truncate cleaned up [ 209.677640][T18355] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.736914][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 209.736930][ T28] audit: type=1400 audit(2000000001.710:1236): avc: denied { read } for pid=18365 comm="syz.1.6670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 209.823546][T18373] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.6672'. [ 209.888933][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.905963][ T28] audit: type=1400 audit(2000000001.880:1237): avc: denied { write } for pid=18382 comm="syz.4.6679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 210.022226][T18387] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.052821][ T28] audit: type=1400 audit(2000000002.010:1238): avc: denied { mount } for pid=18394 comm="syz.2.6684" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 210.113147][T18387] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.6676: corrupted inode contents [ 210.150846][T18387] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #15: comm syz.0.6676: mark_inode_dirty error [ 210.204326][T18387] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.6676: corrupted inode contents [ 210.227685][T18387] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #15: comm syz.0.6676: mark_inode_dirty error [ 210.252456][ T28] audit: type=1400 audit(2000000002.220:1239): avc: denied { read } for pid=18415 comm="syz.4.6691" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 210.291903][T18387] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.6676: corrupted inode contents [ 210.329656][T18422] ipvlan0: entered promiscuous mode [ 210.331247][ T28] audit: type=1400 audit(2000000002.220:1240): avc: denied { ioctl } for pid=18415 comm="syz.4.6691" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 210.337282][T18424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6692'. [ 210.388842][T18387] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #15: comm syz.0.6676: mark_inode_dirty error [ 210.401051][T18387] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.6676: corrupted inode contents [ 210.414044][T18422] ipvlan0: left promiscuous mode [ 210.421491][T18387] EXT4-fs error (device loop0): ext4_truncate:4587: inode #15: comm syz.0.6676: mark_inode_dirty error [ 210.433974][T18387] EXT4-fs error (device loop0) in ext4_setattr:5983: Corrupt filesystem [ 210.483273][T18407] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.6676: corrupted inode contents [ 210.543635][T18436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6699'. [ 210.552916][T18436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6699'. [ 210.563474][T18436] netlink: 'syz.1.6699': attribute type 19 has an invalid length. [ 210.571329][T18436] netlink: 'syz.1.6699': attribute type 20 has an invalid length. [ 210.679499][ T3317] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 210.679693][ T3317] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 210.690803][ T3317] EXT4-fs warning (device loop0): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 210.718197][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.867639][ T28] audit: type=1400 audit(2000000002.830:1241): avc: denied { write } for pid=18467 comm="syz.1.6714" name="usbmon6" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 210.973425][ T28] audit: type=1326 audit(2000000002.950:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18479 comm="syz.4.6719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4cff1c799 code=0x7ffc0000 [ 211.005991][ T28] audit: type=1326 audit(2000000002.950:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18479 comm="syz.4.6719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4cff1c799 code=0x7ffc0000 [ 211.030101][ T28] audit: type=1326 audit(2000000002.950:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18479 comm="syz.4.6719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4cff1c799 code=0x7ffc0000 [ 211.055084][ T28] audit: type=1326 audit(2000000002.950:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18479 comm="syz.4.6719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb4cff1c799 code=0x7ffc0000 [ 211.103104][T18488] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6722'. [ 211.173770][T18469] set_capacity_and_notify: 4 callbacks suppressed [ 211.173789][T18469] loop2: detected capacity change from 0 to 32768 [ 211.224482][T18469] loop2: p1 < > p3 < p5 p6 > [ 211.229277][T18469] loop2: partition table partially beyond EOD, truncated [ 211.256020][T18469] loop2: p6 size 655360 extends beyond EOD, truncated [ 211.389950][T13805] udevd[13805]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 211.401091][ T4058] udevd[4058]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 211.412647][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 211.424016][ T3534] udevd[3534]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 211.523373][T18528] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.6741'. [ 211.532643][T18528] netlink: zone id is out of range [ 211.579078][T18528] netlink: zone id is out of range [ 211.617448][T18528] netlink: set zone limit has 8 unknown bytes [ 211.679004][T18540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6747'. [ 211.716227][T18545] loop0: detected capacity change from 0 to 764 [ 211.725423][T18548] loop2: detected capacity change from 0 to 128 [ 211.792492][T18554] loop3: detected capacity change from 0 to 512 [ 211.806811][T18554] EXT4-fs: Ignoring removed nobh option [ 211.821213][T18554] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 211.851680][T18554] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.6752: iget: bad i_size value: 38620345925642 [ 211.875974][T18554] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 211.876153][T18554] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.6752: couldn't read orphan inode 15 (err -117) [ 211.885430][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 211.885447][ C0] EXT4-fs (loop3): initial error at time 2000000003: ext4_orphan_get:1391: inode 15 [ 211.885491][ C0] EXT4-fs (loop3): last error at time 2000000003: ext4_orphan_get:1391: inode 15 [ 211.925338][T18554] fserror_report: 4 callbacks suppressed [ 211.925351][T18554] loop3: lost filesystem error report for type 5 error -117 [ 211.931647][T18554] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.995753][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.040438][T18572] sit0: Caught tx_queue_len zero misconfig [ 212.337562][T18604] loop1: detected capacity change from 0 to 512 [ 212.387049][T18604] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.422292][T18604] ext4 filesystem being mounted at /1307/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.450492][T18604] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #18: comm syz.1.6776: corrupted inode contents [ 212.479961][T18604] loop1: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 212.480218][T18604] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #18: comm syz.1.6776: mark_inode_dirty error [ 212.514576][T18604] loop1: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 212.514712][T18604] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #18: comm syz.1.6776: corrupted inode contents [ 212.536390][T18604] loop1: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 212.536502][T18604] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2999: inode #18: comm syz.1.6776: mark_inode_dirty error [ 212.558964][T18604] loop1: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 212.559120][T18604] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3002: inode #18: comm syz.1.6776: mark inode dirty (error -117) [ 212.588639][T18604] loop1: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 212.588814][T18604] EXT4-fs warning (device loop1): ext4_evict_inode:275: xattr delete (err -117) [ 212.624012][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.925527][T18637] loop2: detected capacity change from 0 to 8192 [ 213.189148][T18676] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6809'. [ 213.256002][T18682] loop4: detected capacity change from 0 to 128 [ 213.501161][T18707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6822'. [ 213.573704][T18716] netlink: 'syz.4.6826': attribute type 10 has an invalid length. [ 213.597544][T18716] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6826'. [ 213.606695][T18718] loop3: detected capacity change from 0 to 256 [ 213.613497][T18697] loop0: detected capacity change from 0 to 256 [ 213.633055][T18716] : entered promiscuous mode [ 213.655844][T18716] bridge0: port 5() entered blocking state [ 213.662004][T18716] bridge0: port 5() entered disabled state [ 213.671577][T18716] : entered allmulticast mode [ 213.676546][T18716] bridge0: entered allmulticast mode [ 213.684867][T18716] : left allmulticast mode [ 213.697963][T18716] bridge0: left allmulticast mode [ 213.712240][T18718] FAT-fs (loop3): Directory bread(block 64) failed [ 213.719949][T18718] FAT-fs (loop3): Directory bread(block 65) failed [ 213.726941][T18718] FAT-fs (loop3): Directory bread(block 66) failed [ 213.734470][T18718] FAT-fs (loop3): Directory bread(block 67) failed [ 213.751858][T18718] FAT-fs (loop3): Directory bread(block 68) failed [ 213.759893][T18718] FAT-fs (loop3): Directory bread(block 69) failed [ 213.770530][T18718] FAT-fs (loop3): Directory bread(block 70) failed [ 213.777359][T18718] FAT-fs (loop3): Directory bread(block 71) failed [ 213.784041][T18718] FAT-fs (loop3): Directory bread(block 72) failed [ 213.790636][T18718] FAT-fs (loop3): Directory bread(block 73) failed [ 213.814600][T18726] SELinux: failed to load policy [ 213.926963][T18742] netlink: 296 bytes leftover after parsing attributes in process `syz.4.6837'. [ 214.036003][T18756] loop4: detected capacity change from 0 to 512 [ 214.056036][T18756] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.068715][T18756] ext4 filesystem being mounted at /1311/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.094017][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.143413][T18759] loop0: p1 p2 p4 [ 214.153874][T18759] loop0: p4 size 262912 extends beyond EOD, truncated [ 214.291201][T18779] blktrace: Concurrent blktraces are not allowed on loop3 [ 214.304869][ T3534] udevd[3534]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 214.307580][T13805] udevd[13805]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 214.325966][ T4058] udevd[4058]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 214.472954][T18787] msdos: Bad value for 'gid' [ 214.483607][T18787] msdos: Bad value for 'gid' [ 214.627563][T18802] EXT4-fs: Ignoring removed nomblk_io_submit option [ 214.654772][T18802] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.730356][T18815] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.744903][T18814] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 214.775156][T18814] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 28 [ 214.804584][T18814] EXT4-fs (loop2): This should not happen!! Data will be lost [ 214.804584][T18814] [ 214.815071][T18814] EXT4-fs (loop2): Total free blocks count 0 [ 214.821181][T18814] EXT4-fs (loop2): Free/Dirty block details [ 214.827561][T18814] EXT4-fs (loop2): free_blocks=4096 [ 214.833492][T18814] EXT4-fs (loop2): dirty_blocks=16 [ 214.838722][T18814] EXT4-fs (loop2): Block reservation details [ 214.845587][T18814] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 214.940438][T18826] EXT4-fs: Ignoring removed bh option [ 214.957186][T18826] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2808: inode #11: comm syz.0.6874: corrupted xattr block 95: invalid header [ 214.971899][T18826] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 214.972270][T18826] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.6874: bg 0: block 7: invalid block bitmap [ 214.981453][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 214.981470][ C1] EXT4-fs (loop0): initial error at time 2000000006: ext4_expand_extra_isize_ea:2808: inode 11 [ 214.981506][ C1] EXT4-fs (loop0): last error at time 2000000006: ext4_expand_extra_isize_ea:2808: inode 11 [ 215.021599][T18826] loop0: lost filesystem error report for type 5 error -117 [ 215.021805][T18826] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 215.038663][T18826] loop0: lost filesystem error report for type 5 error -117 [ 215.038840][T18826] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2970: inode #11: comm syz.0.6874: corrupted xattr block 95: invalid header [ 215.060699][T18826] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 215.060858][T18826] EXT4-fs warning (device loop0): ext4_evict_inode:275: xattr delete (err -117) [ 215.079785][T18826] EXT4-fs (loop0): 1 orphan inode deleted [ 215.290071][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 215.290085][ T28] audit: type=1400 audit(2000000007.260:1276): avc: denied { ioctl } for pid=18844 comm="syz.0.6879" path="socket:[53375]" dev="sockfs" ino=53375 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 215.368227][T18843] ext4 filesystem being mounted at /1355/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.448771][T18853] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 215.490477][T18853] EXT4-fs (loop3): 1 truncate cleaned up [ 215.531620][T18853] EXT4-fs error (device loop3): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.3.6881: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 215.552997][T18853] EXT4-fs error (device loop3) in ext4_delete_entry:2737: Corrupt filesystem [ 215.569357][T18853] EXT4-fs warning (device loop3): ext4_rename_delete:3729: inode #2: comm syz.3.6881: Deleting old file: nlink 4, error=-117 [ 215.593422][T18858] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #2: block 13: comm syz.3.6881: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 215.620731][ T28] audit: type=1400 audit(2000000007.590:1277): avc: denied { mounton } for pid=18852 comm="syz.3.6881" path="/1356/bus/file0/file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 215.701604][T18866] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.6886'. [ 215.762639][T18866] netlink: zone id is out of range [ 215.777687][T18866] netlink: zone id is out of range [ 215.810831][T18866] netlink: set zone limit has 8 unknown bytes [ 215.904662][T18877] ext4 filesystem being mounted at /1409/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.940266][ T3534] loop4: p1 p2 p4 [ 215.947738][ T3534] loop4: p4 size 262912 extends beyond EOD, truncated [ 215.958602][T18875] loop4: p1 p2 p4 [ 215.964681][T18875] loop4: p4 size 262912 extends beyond EOD, truncated [ 216.098831][T18887] EXT4-fs: Ignoring removed nobh option [ 216.111114][T18887] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 216.123066][T18887] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.6895: iget: bad i_size value: 38620345925642 [ 216.137552][T18887] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 216.138417][T18887] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.6895: couldn't read orphan inode 15 (err -117) [ 216.147620][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 216.147638][ C1] EXT4-fs (loop1): initial error at time 2000000008: ext4_orphan_get:1391: inode 15 [ 216.147661][ C1] EXT4-fs (loop1): last error at time 2000000008: ext4_orphan_get:1391: inode 15 [ 216.155415][T13805] udevd[13805]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 216.163982][T18887] loop1: lost filesystem error report for type 5 error -117 [ 216.175885][ T3534] udevd[3534]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 216.180506][ T4058] udevd[4058]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 216.324423][T18898] set_capacity_and_notify: 11 callbacks suppressed [ 216.324441][T18898] loop2: detected capacity change from 0 to 512 [ 216.382848][T18901] loop4: detected capacity change from 0 to 764 [ 216.465607][T18905] loop1: detected capacity change from 0 to 128 [ 216.474581][T18907] loop4: detected capacity change from 0 to 512 [ 216.481279][T18907] EXT4-fs: Ignoring removed oldalloc option [ 216.487985][T18905] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 216.500756][T18905] FAT-fs (loop1): error, corrupted file size (i_pos 548, 512) [ 216.509517][T18905] FAT-fs (loop1): Filesystem has been set read-only [ 216.516450][T18907] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 216.527884][T18905] FAT-fs (loop1): error, corrupted file size (i_pos 548, 512) [ 216.546557][T18907] EXT4-fs (loop4): 1 truncate cleaned up [ 216.800430][T18936] loop1: detected capacity change from 0 to 512 [ 216.804505][T18934] loop3: detected capacity change from 0 to 128 [ 216.833287][T18936] EXT4-fs: Ignoring removed oldalloc option [ 216.840712][T18936] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 216.860925][T18934] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 216.878705][T18936] EXT4-fs (loop1): 1 truncate cleaned up [ 216.903545][T18934] FAT-fs (loop3): error, corrupted file size (i_pos 548, 512) [ 216.942004][T18934] FAT-fs (loop3): Filesystem has been set read-only [ 216.973014][T18934] FAT-fs (loop3): error, corrupted file size (i_pos 548, 512) [ 217.226732][T18957] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.6927'. [ 217.237597][T18957] netlink: zone id is out of range [ 217.242971][T18957] netlink: zone id is out of range [ 217.265212][T18957] netlink: set zone limit has 8 unknown bytes [ 217.311678][T18966] loop3: detected capacity change from 0 to 764 [ 217.353210][T18969] loop0: detected capacity change from 0 to 512 [ 217.370044][T18969] EXT4-fs: Ignoring removed oldalloc option [ 217.385671][T18969] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 217.399857][T18969] EXT4-fs (loop0): 1 truncate cleaned up [ 217.741634][T18996] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.6942'. [ 217.751277][T18996] netlink: zone id is out of range [ 217.757312][T18996] netlink: zone id is out of range [ 217.784046][T18996] netlink: set zone limit has 8 unknown bytes [ 217.858535][T19002] loop0: detected capacity change from 0 to 8192 [ 218.282181][T19009] loop3: detected capacity change from 0 to 512 [ 218.289675][T19009] EXT4-fs: Ignoring removed oldalloc option [ 218.296086][T19009] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 218.313283][T19009] EXT4-fs (loop3): 1 truncate cleaned up [ 218.341010][T19012] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 218.351772][T19012] SELinux: failed to load policy [ 218.437718][T19025] sit0: Caught tx_queue_len zero misconfig [ 218.540510][T19036] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 218.551897][T19039] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 218.689442][T19049] ext4 filesystem being mounted at /1344/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.722617][T19049] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #18: comm syz.4.6965: corrupted inode contents [ 218.735423][T19049] loop4: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 218.735797][T19049] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #18: comm syz.4.6965: mark_inode_dirty error [ 218.757800][T19049] loop4: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 218.757990][T19049] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #18: comm syz.4.6965: corrupted inode contents [ 218.783152][T19049] loop4: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 218.783262][T19049] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2999: inode #18: comm syz.4.6965: mark_inode_dirty error [ 218.805365][T19049] loop4: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 218.805524][T19049] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3002: inode #18: comm syz.4.6965: mark inode dirty (error -117) [ 218.827874][T19049] loop4: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 218.829007][T19049] EXT4-fs warning (device loop4): ext4_evict_inode:275: xattr delete (err -117) [ 218.886477][T19060] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 218.991024][T19062] SELinux: failed to load policy [ 219.423589][T19076] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 219.436754][T19078] EXT4-fs: Ignoring removed orlov option [ 219.597516][T19087] EXT4-fs: Ignoring removed orlov option [ 219.680485][T19097] bio_check_eod: 16 callbacks suppressed [ 219.680504][T19097] syz.2.6982: attempt to access beyond end of device [ 219.680504][T19097] loop2: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 219.702025][T19097] syz.2.6982: attempt to access beyond end of device [ 219.702025][T19097] loop2: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 219.717064][T19097] buffer_io_error: 18 callbacks suppressed [ 219.717136][T19097] Buffer I/O error on dev loop2, logical block 79, lost async page write [ 219.731855][T19097] syz.2.6982: attempt to access beyond end of device [ 219.731855][T19097] loop2: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 219.747302][T19097] Buffer I/O error on dev loop2, logical block 80, lost async page write [ 219.756932][T19097] syz.2.6982: attempt to access beyond end of device [ 219.756932][T19097] loop2: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 219.780536][T19097] syz.2.6982: attempt to access beyond end of device [ 219.780536][T19097] loop2: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 219.797867][T19097] Buffer I/O error on dev loop2, logical block 83, lost async page write [ 219.806444][T19097] syz.2.6982: attempt to access beyond end of device [ 219.806444][T19097] loop2: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 219.820746][T19097] Buffer I/O error on dev loop2, logical block 84, lost async page write [ 219.830479][T19097] syz.2.6982: attempt to access beyond end of device [ 219.830479][T19097] loop2: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 219.845947][T19097] syz.2.6982: attempt to access beyond end of device [ 219.845947][T19097] loop2: rw=8390657, sector=190, nr_sectors = 2 limit=128 [ 219.861260][T19097] Buffer I/O error on dev loop2, logical block 95, lost async page write [ 219.869801][T19097] syz.2.6982: attempt to access beyond end of device [ 219.869801][T19097] loop2: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 219.886473][T19097] Buffer I/O error on dev loop2, logical block 96, lost async page write [ 219.895377][T19097] syz.2.6982: attempt to access beyond end of device [ 219.895377][T19097] loop2: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 219.909449][T19097] Buffer I/O error on dev loop2, logical block 99, lost async page write [ 219.937823][T19097] Buffer I/O error on dev loop2, logical block 100, lost async page write [ 219.948824][T19097] Buffer I/O error on dev loop2, logical block 111, lost async page write [ 219.966807][T19097] Buffer I/O error on dev loop2, logical block 112, lost async page write [ 220.000515][T19113] rock: directory entry would overflow storage [ 220.013524][T19113] rock: sig=0x5245, size=8, remaining=5 [ 220.080417][T19120] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 220.155575][T19124] tipc: Enabling of bearer rejected, failed to enable media [ 220.818283][T19162] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 221.036695][T19191] EXT4-fs mount: 28 callbacks suppressed [ 221.036714][T19191] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.176610][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.204396][T19206] rock: directory entry would overflow storage [ 221.229331][T19206] rock: sig=0x5245, size=8, remaining=5 [ 221.355923][T19226] lo: Caught tx_queue_len zero misconfig [ 221.432012][T19232] set_capacity_and_notify: 13 callbacks suppressed [ 221.432104][T19232] loop2: detected capacity change from 0 to 2048 [ 221.494175][T19232] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.531976][T19238] loop3: detected capacity change from 0 to 8192 [ 221.574898][T19238] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 221.789966][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.822432][T19254] tmpfs: Bad value for 'mpol' [ 221.865838][T19259] loop2: detected capacity change from 0 to 764 [ 221.887719][T19249] bond1 (unregistering): Released all slaves [ 221.896298][T19259] rock: directory entry would overflow storage [ 221.902493][T19259] rock: sig=0x5245, size=8, remaining=5 [ 221.984602][T19268] loop0: detected capacity change from 0 to 8192 [ 221.994482][T19268] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 222.115345][T19275] netlink: 'syz.3.7060': attribute type 1 has an invalid length. [ 222.159695][T17321] ================================================================== [ 222.167881][T17321] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 222.174955][T17321] [ 222.177273][T17321] read-write to 0xffff888237c2a8a4 of 4 bytes by task 17318 on cpu 0: [ 222.185426][T17321] wq_worker_running+0x9b/0x120 [ 222.190284][T17321] synchronize_rcu_expedited+0x5f8/0x770 [ 222.195920][T17321] try_check_zero+0x191/0x260 [ 222.200600][T17321] process_srcu+0x1ff/0xdc0 [ 222.205105][T17321] process_scheduled_works+0x513/0xa10 [ 222.210567][T17321] worker_thread+0x58a/0x780 [ 222.215163][T17321] kthread+0x22a/0x280 [ 222.219665][T17321] ret_from_fork+0x150/0x360 [ 222.224261][T17321] ret_from_fork_asm+0x1a/0x30 [ 222.229030][T17321] [ 222.231359][T17321] read to 0xffff888237c2a8a4 of 4 bytes by task 17321 on cpu 1: [ 222.238981][T17321] kick_pool+0x49/0x2d0 [ 222.243145][T17321] __queue_work+0x896/0xaf0 [ 222.247658][T17321] queue_work_on+0xa9/0x140 [ 222.252170][T17321] process_srcu+0xa56/0xdc0 [ 222.256675][T17321] process_scheduled_works+0x513/0xa10 [ 222.262139][T17321] worker_thread+0x58a/0x780 [ 222.266741][T17321] kthread+0x22a/0x280 [ 222.270807][T17321] ret_from_fork+0x150/0x360 [ 222.275409][T17321] ret_from_fork_asm+0x1a/0x30 [ 222.280194][T17321] [ 222.282512][T17321] value changed: 0x00000000 -> 0x00000001 [ 222.288215][T17321] [ 222.290540][T17321] Reported by Kernel Concurrency Sanitizer on: [ 222.296697][T17321] CPU: 1 UID: 0 PID: 17321 Comm: kworker/1:9 Tainted: G W syzkaller #0 PREEMPT(full) [ 222.307718][T17321] Tainted: [W]=WARN [ 222.311534][T17321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 222.321582][T17321] Workqueue: rcu_gp process_srcu [ 222.326524][T17321] ==================================================================