last executing test programs: 2m36.462109853s ago: executing program 2 (id=311): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x3e3982, 0x0) pwritev(r0, 0x0, 0x0, 0x0, 0xf52) 2m36.421636094s ago: executing program 2 (id=313): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000001200)=0x40000013, 0xde) close_range(r0, 0xffffffffffffffff, 0x0) 2m36.378164615s ago: executing program 2 (id=316): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="94000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000c00000068000380640003800c00018005000200000000000c000180050002000000000048000180040003000c000200657468746f6f6c00040003000800010007000000040003001200020076657468305f746f5f626f6e640000000400030004000300080001008200000018000180140002007665746830"], 0x94}, 0x1, 0x0, 0x0, 0x240480c4}, 0x0) 2m36.348544836s ago: executing program 2 (id=318): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) setreuid(0xffffffffffffffff, 0xee01) cachestat(r0, &(0x7f00000000c0)={0x7, 0x9}, 0x0, 0xf3) 2m36.312083936s ago: executing program 2 (id=319): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) symlink(&(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00') 2m36.248199987s ago: executing program 2 (id=323): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2m20.871617383s ago: executing program 32 (id=323): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 883.263011ms ago: executing program 4 (id=5551): mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') getdents64(r0, &(0x7f0000002f40)=""/4097, 0x1001) 862.904982ms ago: executing program 4 (id=5552): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000880)={0x0, 0x2904c, 0x5, 0x10003, '\x00', [{0x0, 0x5, 0x900, 0xffffffffffffffff, 0x0, 0xa}, {0xffffffff, 0x4, 0x9, 0xa}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) 859.281522ms ago: executing program 0 (id=5553): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, &(0x7f0000002b80), 0x41000004, &(0x7f0000000040)) 834.030752ms ago: executing program 3 (id=5554): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x9}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_read_part_table(0x1055, &(0x7f0000000000)="$eJzsz7GNwkAQhtHfa5/Pm11yJVASMQEZTeCEZuiESmiA3GiREzcABO9JK630STOa8FHdmNOh75LUJHOW300elpbam382oSa17JKUv3vLGddwOyaP169vE6cky+qcOVMu/6UOSdtT9td33QkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3+wZAAD//8zcEgs=") 726.370124ms ago: executing program 4 (id=5557): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x16, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x11}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 634.806326ms ago: executing program 1 (id=5561): r0 = syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) ptrace(0x4206, r0) wait4(r0, 0x0, 0x8, &(0x7f0000000380)) 583.268628ms ago: executing program 4 (id=5563): r0 = socket$inet6_udp(0xa, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000000cc0)=0xc68e85d, 0x4) 540.798739ms ago: executing program 4 (id=5564): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000004780), r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000004800)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x10000000) 501.329029ms ago: executing program 3 (id=5566): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) r0 = getpgid(0x0) process_vm_writev(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 463.8196ms ago: executing program 4 (id=5567): prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x43e3, &(0x7f0000000380)={0x0, 0x0, 0x13090}, 0x0, 0x0, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) 451.58709ms ago: executing program 3 (id=5568): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) setrlimit(0xd, &(0x7f0000000280)={0xc800, 0x10000}) setpriority(0x1, 0x0, 0x80000000) 434.198241ms ago: executing program 3 (id=5569): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x13, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7786, 0x0, 0x0, 0x0, 0x1}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}, @printk={@p, {0x3, 0x3, 0x3, 0xa, 0x1, 0xfe00}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, 0x0, 0x5, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x13, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0001}, 0x50) 412.255711ms ago: executing program 3 (id=5570): mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000001180)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f00009d5000/0x1000)=nil, 0x0, &(0x7f0000000640)=[{0x800000000, 0x0, 0xffffffffffffffff}, {0x0, 0x5, 0x4}], 0xaaaac32, 0x3ee, 0x61, 0x0, 0x48, 0x6e}) 394.752651ms ago: executing program 1 (id=5571): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x20000e, &(0x7f0000000c80)={[{@i_version}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") mkdir(&(0x7f0000000000)='./bus\x00', 0x0) rmdir(&(0x7f00000003c0)='./bus\x00') 381.816982ms ago: executing program 3 (id=5572): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0xd4, 0x0, @multicast}, 0x10) sendmmsg(r0, &(0x7f000000f440)=[{{0x0, 0x0, &(0x7f0000008080)=[{&(0x7f00000002c0)="bf", 0x1}, {0x0}], 0x2}}], 0x1, 0x0) 366.826862ms ago: executing program 5 (id=5573): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) fallocate(r0, 0x40, 0x8, 0x80000002) 331.093473ms ago: executing program 5 (id=5574): close(0x3) setitimer(0x2, &(0x7f0000000040)={{}, {0x0, 0x2710}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 272.873754ms ago: executing program 1 (id=5575): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) listen(r0, 0x5) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000380)={0x0, 0x0}) 221.520815ms ago: executing program 0 (id=5576): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000000), 0x8) 205.761246ms ago: executing program 5 (id=5577): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) io_uring_register$IORING_REGISTER_QUERY(0xffffffffffffffff, 0x23, &(0x7f0000000880)=[{0x0, 0x0, 0x2}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x2}, {&(0x7f00000007c0)={0x0, 0x0, 0x1}, 0x0, 0x2}], 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 190.466096ms ago: executing program 0 (id=5578): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) write$vga_arbiter(r0, &(0x7f0000000180)=@other={'lock', ' ', 'mem'}, 0x9) 187.700716ms ago: executing program 1 (id=5579): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setuid(0xee00) mlock(&(0x7f0000ffb000/0x1000)=nil, 0xffffffffdf004fff) 158.613497ms ago: executing program 0 (id=5580): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x5}]}}}, {0x10, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) 121.498397ms ago: executing program 1 (id=5581): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000880)={0x0, 0x2904c, 0x5, 0x10003, '\x00', [{0x0, 0x5, 0x900, 0xffffffffffffffff, 0x0, 0xa}, {0xffffffff, 0x4, 0x9, 0xa}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) 121.149028ms ago: executing program 0 (id=5582): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1206, &(0x7f0000002480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2a042, 0x113) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000240)=0x1) 76.180869ms ago: executing program 5 (id=5583): r0 = io_uring_setup(0xbff, &(0x7f0000000000)={0x0, 0x1e78, 0x40, 0x2, 0x20b}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000380), 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, 0x0, 0x1) 40.819219ms ago: executing program 5 (id=5584): unshare(0x28040680) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @long}, 0x8) 40.27701ms ago: executing program 1 (id=5585): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x40, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x40}}, 0x0) 20.88001ms ago: executing program 5 (id=5586): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x3}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x7}]}}]}, 0x40}}, 0x8000) 0s ago: executing program 0 (id=5587): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x42902) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x0, 0x1, 0x0, 0x0, 0x4}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x5420, 0x0) kernel console output (not intermixed with test programs): fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 139.241578][T10843] loop4: detected capacity change from 0 to 1024 [ 139.269958][T10843] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 139.300179][T10843] ext4 filesystem being mounted at /699/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.336614][T10840] loop3: detected capacity change from 0 to 8192 [ 139.352097][T10843] EXT4-fs warning (device loop4): ext4_empty_dir:3104: inode #12: comm syz.4.3232: directory missing '..' [ 139.364535][T10840] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 139.387581][T10854] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3236'. [ 139.401140][T10840] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 139.439337][T10840] FAT-fs (loop3): Filesystem has been set read-only [ 139.446101][T10840] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 139.458081][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 139.497106][T10859] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.545967][T10859] ext4 filesystem being mounted at /609/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.639163][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.674097][T10864] IPv6: sit1: Disabled Multicast RS [ 139.733792][T10864] sit1: entered allmulticast mode [ 139.988724][T10901] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 140.005459][T10901] EXT4-fs (loop1): 1 truncate cleaned up [ 140.012675][T10901] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.027963][T10901] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 13: comm syz.1.3257: path /613/file0: bad entry in directory: directory entry overrun - offset=92, inode=0, rec_len=1024, size=1024 fake=0 [ 140.107971][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.446832][T10942] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3274'. [ 140.469663][ T28] kauditd_printk_skb: 55 callbacks suppressed [ 140.469678][ T28] audit: type=1400 audit(1783337832.185:1153): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 140.611996][ T28] audit: type=1400 audit(1783337832.325:1154): avc: denied { mount } for pid=10958 comm="syz.1.3282" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 140.637845][ T28] audit: type=1400 audit(1783337832.345:1155): avc: denied { unmount } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 140.682427][ T28] audit: type=1400 audit(1783337832.395:1156): avc: denied { bind } for pid=10962 comm="syz.1.3286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 140.707957][ T28] audit: type=1400 audit(1783337832.425:1157): avc: denied { bind } for pid=10966 comm="syz.4.3287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 140.735697][T10964] FAT-fs (loop5): data area starts beyond volume (32 > 0) [ 140.756516][T10964] FAT-fs (loop5): Can't find a valid FAT filesystem [ 140.940488][ T28] audit: type=1400 audit(1783337832.655:1158): avc: denied { create } for pid=10986 comm="syz.4.3297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 140.969782][ T28] audit: type=1400 audit(1783337832.675:1159): avc: denied { setopt } for pid=10986 comm="syz.4.3297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 141.009513][ T28] audit: type=1400 audit(1783337832.725:1160): avc: denied { map } for pid=10992 comm="syz.5.3299" path="socket:[28885]" dev="sockfs" ino=28885 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 141.033083][ T28] audit: type=1400 audit(1783337832.725:1161): avc: denied { read } for pid=10992 comm="syz.5.3299" path="socket:[28885]" dev="sockfs" ino=28885 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 141.187905][T11007] tipc: Enabling of bearer rejected, media not registered [ 141.271596][T11016] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.340863][T11029] set_capacity_and_notify: 4 callbacks suppressed [ 141.340882][T11029] loop1: detected capacity change from 0 to 512 [ 141.372720][T11025] loop5: detected capacity change from 0 to 8192 [ 141.373825][ T28] audit: type=1400 audit(1783337833.075:1162): avc: denied { setattr } for pid=11015 comm="syz.3.3311" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 141.404576][T11029] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 141.465848][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.491719][T11029] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.510700][T11029] ext4 filesystem being mounted at /632/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.578334][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.911658][T11070] loop0: detected capacity change from 0 to 256 [ 142.023317][T11076] macvtap1: entered allmulticast mode [ 142.037219][T11078] loop0: detected capacity change from 0 to 764 [ 142.038015][T11076] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 142.065112][T11076] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 142.104238][T11076] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 142.131174][T11084] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3342'. [ 142.220435][T11086] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3343'. [ 142.282817][T11086] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3343'. [ 142.294022][T11086] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3343'. [ 142.460218][T11086] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3343'. [ 142.473852][T11086] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3343'. [ 142.509545][T11086] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3343'. [ 142.511003][T11106] loop4: detected capacity change from 0 to 512 [ 142.685184][T11098] loop3: detected capacity change from 0 to 256 [ 142.723019][T11125] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 142.755338][T11098] FAT-fs (loop3): data area starts beyond volume (32 > 0) [ 142.822627][T11098] FAT-fs (loop3): Can't find a valid FAT filesystem [ 143.799392][T11230] loop1: detected capacity change from 0 to 8192 [ 144.495787][T11249] __nla_validate_parse: 14 callbacks suppressed [ 144.495811][T11249] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3412'. [ 144.528542][T11249] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3412'. [ 144.552099][T11249] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3412'. [ 144.569416][T11252] loop0: detected capacity change from 0 to 512 [ 144.590964][T11252] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.620694][T11249] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3412'. [ 144.621023][T11252] ext4 filesystem being mounted at /691/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.646278][T11249] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3412'. [ 144.661556][T11249] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3412'. [ 144.664400][T11252] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 144.688214][T11252] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 144.747824][T11249] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3412'. [ 144.748615][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.757661][T11249] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3412'. [ 144.799137][T11249] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3412'. [ 144.894322][T11268] loop3: detected capacity change from 0 to 8192 [ 145.572936][T11336] netlink: 196 bytes leftover after parsing attributes in process `syz.0.3458'. [ 145.590604][T11338] SELinux: Context › is not valid (left unmapped). [ 145.653471][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 145.653491][ T28] audit: type=1400 audit(1783337837.365:1193): avc: denied { bind } for pid=11343 comm="syz.4.3462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 145.712273][ T28] audit: type=1400 audit(1783337837.365:1194): avc: denied { setopt } for pid=11343 comm="syz.4.3462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 145.741588][T11349] netlink: 'syz.1.3473': attribute type 3 has an invalid length. [ 145.932741][ T28] audit: type=1400 audit(1783337837.645:1195): avc: denied { listen } for pid=11383 comm="syz.0.3479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 145.950082][T11388] loop5: detected capacity change from 0 to 512 [ 146.020106][T11388] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.036658][T11390] bond2: (slave bond_slave_1): Device is not our slave [ 146.048961][T11388] ext4 filesystem being mounted at /574/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.056208][T11390] bond2: option active_slave: invalid value (bond_slave_1) [ 146.078212][T11390] bond2 (unregistering): Released all slaves [ 146.086314][ T28] audit: type=1400 audit(1783337837.795:1196): avc: denied { write } for pid=11387 comm="syz.5.3482" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 146.110538][T11388] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 146.125214][T11388] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 146.137754][T11388] EXT4-fs (loop5): This should not happen!! Data will be lost [ 146.137754][T11388] [ 146.147715][T11388] EXT4-fs (loop5): Total free blocks count 0 [ 146.155574][T11388] EXT4-fs (loop5): Free/Dirty block details [ 146.161614][T11388] EXT4-fs (loop5): free_blocks=65280 [ 146.167062][T11388] EXT4-fs (loop5): dirty_blocks=33 [ 146.172302][T11388] EXT4-fs (loop5): Block reservation details [ 146.178512][T11388] EXT4-fs (loop5): i_reserved_data_blocks=33 [ 146.220083][ T28] audit: type=1400 audit(1783337837.935:1197): avc: denied { getopt } for pid=11404 comm="syz.1.3488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 146.247526][ T4576] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 146.269570][ T4576] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.349713][T11415] ISOFS: unable to read i-node block [ 146.371313][T11415] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 146.636881][T11434] program syz.1.3501 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 146.651127][T11435] vlan2: entered promiscuous mode [ 147.063071][T11479] set_capacity_and_notify: 1 callbacks suppressed [ 147.063113][T11479] loop0: detected capacity change from 0 to 256 [ 147.083701][T11483] loop3: detected capacity change from 0 to 164 [ 147.108662][T11483] ISOFS: unable to read i-node block [ 147.117041][T11483] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 147.205302][T11488] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 147.257290][T11495] netlink: 'syz.3.3530': attribute type 46 has an invalid length. [ 147.299979][ T28] audit: type=1400 audit(1783337839.015:1198): avc: denied { write } for pid=11498 comm="syz.1.3532" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 147.381374][T11506] loop3: detected capacity change from 0 to 512 [ 147.428598][T11506] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.441280][T11506] ext4 filesystem being mounted at /728/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.455092][ T28] audit: type=1400 audit(1783337839.175:1199): avc: denied { write } for pid=11503 comm="syz.3.3535" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 147.501535][T11518] loop1: detected capacity change from 0 to 256 [ 147.566469][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.645317][T11525] loop3: detected capacity change from 0 to 512 [ 147.680084][T11525] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 147.897662][ T28] audit: type=1326 audit(1783337839.605:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11544 comm="syz.1.3553" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc74ccede59 code=0x7ffc0000 [ 147.976604][ T28] audit: type=1326 audit(1783337839.645:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11544 comm="syz.1.3553" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7fc74ccede59 code=0x7ffc0000 [ 148.018028][T11553] ieee802154 phy0 wpan0: encryption failed: -22 [ 148.031033][ T28] audit: type=1326 audit(1783337839.645:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11544 comm="syz.1.3553" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc74ccede59 code=0x7ffc0000 [ 148.522960][T11598] loop3: detected capacity change from 0 to 256 [ 148.631603][T11608] loop0: detected capacity change from 0 to 512 [ 148.685930][T11608] EXT4-fs error (device loop0): dx_probe:791: inode #2: comm syz.0.3581: Directory hole found for htree index block 0 [ 148.704484][T11617] loop5: detected capacity change from 0 to 512 [ 148.726642][T11617] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 148.735215][T11617] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 148.765335][T11608] loop0: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 148.765455][T11608] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 148.774682][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 148.774710][ C0] EXT4-fs (loop0): initial error at time 1783337840: dx_probe:791: inode 2 [ 148.774745][ C0] EXT4-fs (loop0): last error at time 1783337840: dx_probe:791: inode 2 [ 148.793062][T11617] EXT4-fs (loop5): 1 truncate cleaned up [ 148.814744][T11608] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.842701][T11617] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.871056][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.894633][T11617] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 148.941097][ T4576] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.999329][T11629] veth0_to_bond: default FDB implementation only supports local addresses [ 149.067941][T11634] loop5: detected capacity change from 0 to 256 [ 149.253199][ T282] kernel write not supported for file /input/event0 (pid: 282 comm: kworker/0:2) [ 149.306022][ T888] IPVS: starting estimator thread 0... [ 149.314279][T11668] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 149.399022][T11669] IPVS: using max 2256 ests per chain, 112800 per kthread [ 149.417048][T11681] loop5: detected capacity change from 0 to 128 [ 149.603720][T11700] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 149.625925][T11700] EXT4-fs (loop4): 1 truncate cleaned up [ 149.633606][T11700] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.668285][T11700] EXT4-fs error (device loop4): ext4_generic_delete_entry:2673: inode #2: block 13: comm syz.4.3624: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 149.706848][T11709] __nla_validate_parse: 4 callbacks suppressed [ 149.706866][T11709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3628'. [ 149.723627][T11700] EXT4-fs error (device loop4) in ext4_delete_entry:2744: Corrupt filesystem [ 149.733303][T11700] EXT4-fs warning (device loop4): ext4_rename_delete:3739: inode #2: comm syz.4.3624: Deleting old file: nlink 4, error=-117 [ 149.782437][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.926067][T11722] sg_write: data in/out 221184/136 bytes for SCSI command 0x0-- guessing data in; [ 149.926067][T11722] program syz.4.3635 not setting count and/or reply_len properly [ 150.020400][T11733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3638'. [ 150.072510][T11733] 8021q: adding VLAN 0 to HW filter on device bond1 [ 150.215511][T11747] macsec2: entered promiscuous mode [ 150.233172][T11747] macsec2: entered allmulticast mode [ 150.264816][T11753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3648'. [ 150.424547][T11771] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3657'. [ 150.748988][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 150.749060][ T28] audit: type=1326 audit(1783337842.465:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11798 comm="syz.1.3670" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc74ccede59 code=0x7ffc0000 [ 150.792335][ T28] audit: type=1326 audit(1783337842.495:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11798 comm="syz.1.3670" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc74ccede59 code=0x7ffc0000 [ 150.825199][ T28] audit: type=1326 audit(1783337842.495:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11798 comm="syz.1.3670" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc74ccedbc2 code=0x7ffc0000 [ 150.868347][T11799] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.893030][T11799] ext4 filesystem being mounted at /692/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.924016][ T28] audit: type=1326 audit(1783337842.505:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11798 comm="syz.1.3670" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc74ccae68e code=0x7ffc0000 [ 150.966857][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.980402][ T28] audit: type=1326 audit(1783337842.505:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11798 comm="syz.1.3670" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fc74ccedc87 code=0x7ffc0000 [ 151.006159][ T28] audit: type=1326 audit(1783337842.505:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11798 comm="syz.1.3670" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc74ccae68e code=0x7ffc0000 [ 151.032154][ T28] audit: type=1326 audit(1783337842.505:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11798 comm="syz.1.3670" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc74ccedaeb code=0x7ffc0000 [ 151.058042][ T28] audit: type=1326 audit(1783337842.505:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11798 comm="syz.1.3670" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc74ccae68e code=0x7ffc0000 [ 151.084155][ T28] audit: type=1326 audit(1783337842.505:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11798 comm="syz.1.3670" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc74ccae68e code=0x7ffc0000 [ 151.112782][ T28] audit: type=1326 audit(1783337842.505:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11798 comm="syz.1.3670" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fc74cceccc7 code=0x7ffc0000 [ 151.154863][T11809] FAT-fs (loop0): data area starts beyond volume (32 > 0) [ 151.187498][T11809] FAT-fs (loop0): Can't find a valid FAT filesystem [ 151.243530][ T282] hid-generic 1000:0009:0010.0002: item fetching failed at offset 0/2 [ 151.252059][ T282] hid-generic 1000:0009:0010.0002: probe with driver hid-generic failed with error -22 [ 151.480074][T11850] sg_write: data in/out 451548/226 bytes for SCSI command 0x0-- guessing data in; [ 151.480074][T11850] program syz.0.3694 not setting count and/or reply_len properly [ 151.573834][T11856] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3697'. [ 151.602841][T11858] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 151.956443][T11909] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 151.979631][T11909] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #13: comm syz.1.3723: iget: bad i_size value: 12154757448730 [ 152.005283][T11909] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 152.007358][T11909] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.3723: couldn't read orphan inode 13 (err -117) [ 152.016658][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 152.016701][ C1] EXT4-fs (loop1): initial error at time 1783337843: ext4_orphan_get:1399: inode 13 [ 152.016731][ C1] EXT4-fs (loop1): last error at time 1783337843: ext4_orphan_get:1399: inode 13 [ 152.054542][T11909] loop1: lost filesystem error report for type 5 error -117 [ 152.060983][T11909] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.097549][T11909] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 152.131207][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.143491][T11923] set_capacity_and_notify: 5 callbacks suppressed [ 152.143508][T11923] loop5: detected capacity change from 0 to 512 [ 152.201287][T11932] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.3732'. [ 152.377303][T11952] loop5: detected capacity change from 0 to 256 [ 152.398370][T11938] loop4: detected capacity change from 0 to 256 [ 152.483777][T11938] FAT-fs (loop4): data area starts beyond volume (32 > 0) [ 152.492417][T11938] FAT-fs (loop4): Can't find a valid FAT filesystem [ 152.552652][T11961] loop1: detected capacity change from 0 to 512 [ 152.566268][T11961] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.578483][T11963] loop0: detected capacity change from 0 to 512 [ 152.580838][T11961] ext4 filesystem being mounted at /711/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 152.606466][T11961] EXT4-fs error (device loop1): ext4_get_first_dir_block:3545: inode #12: block 32: comm syz.1.3747: bad entry in directory: inode out of bounds - offset=0, inode=67108867, rec_len=2048, size=2048 fake=0 [ 152.643713][T11963] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.3748: bad orphan inode 15 [ 152.663710][T11963] loop0: lost filesystem error report for type 5 error -117 [ 152.663879][T11963] ext4_test_bit(bit=14, block=18) = 1 [ 152.671386][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 152.671412][ C0] EXT4-fs (loop0): initial error at time 1783337844: ext4_orphan_get:1425 [ 152.671441][ C0] EXT4-fs (loop0): last error at time 1783337844: ext4_orphan_get:1425 [ 152.701664][T11961] EXT4-fs error (device loop1): ext4_get_first_dir_block:3548: inode #12: comm syz.1.3747: directory missing '.' [ 152.718833][T11963] is_bad_inode(inode)=0 [ 152.728353][T11971] loop4: detected capacity change from 0 to 512 [ 152.732191][T11963] NEXT_ORPHAN(inode)=1023 [ 152.748511][T11971] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.761498][T11963] max_ino=32 [ 152.764827][T11963] i_nlink=0 [ 152.774269][T11963] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2972: inode #15: comm syz.0.3748: corrupted xattr block 19: invalid header [ 152.801739][T11963] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 152.801916][T11963] EXT4-fs warning (device loop0): ext4_evict_inode:287: xattr delete (err -117) [ 152.821884][T11963] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 152.837710][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.846944][T11963] ext4 filesystem being mounted at /756/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 152.861646][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.887010][T11963] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3748: bg 0: block 449: padding at end of block bitmap is not set [ 152.953144][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 152.966374][T11983] loop5: detected capacity change from 0 to 512 [ 152.985087][T11983] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 153.025235][T11983] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.050476][T11983] ext4 filesystem being mounted at /634/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.105196][T11983] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 153.176426][ T4576] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.194850][T12008] loop1: detected capacity change from 0 to 4096 [ 153.217539][T12015] loop5: detected capacity change from 0 to 256 [ 153.356636][T12025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3776'. [ 153.424871][T12035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3781'. [ 153.507984][T12048] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 153.585893][T12059] loop3: detected capacity change from 0 to 256 [ 153.603820][T12059] FAT-fs (loop3): unable to read block(17179869180) for building NFS inode [ 153.686307][T12070] netlink: 'syz.3.3798': attribute type 32 has an invalid length. [ 153.694471][T12070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3798'. [ 153.726166][T12070] bond2: option coupled_control: invalid value (64) [ 153.743542][T12076] EXT4-fs: Ignoring removed bh option [ 153.749757][T12070] bond2 (unregistering): Released all slaves [ 153.756951][T12076] EXT4-fs: Ignoring removed bh option [ 153.771117][T12076] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 153.963215][T12105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3813'. [ 154.163458][T12124] EXT4-fs error (device loop5): ext4_readdir:225: inode #12: comm syz.5.3822: path /647/file0/file0: directory fails checksum at offset 0 [ 154.244340][T12141] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 154.244340][T12141] Please contact the netfilter-devel mailing list or update your nftables rules. [ 154.358390][T12153] IPVS: Error connecting to the multicast addr [ 154.675940][T12188] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 155.528794][T12210] __nla_validate_parse: 3 callbacks suppressed [ 155.528813][T12210] netlink: 136 bytes leftover after parsing attributes in process `syz.1.3862'. [ 155.611485][ T9519] hid_parser_main: 6 callbacks suppressed [ 155.611506][ T9519] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 155.632702][ T9519] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 155.683433][T12228] netlink: 'syz.0.3870': attribute type 11 has an invalid length. [ 155.705729][T12225] fido_id[12225]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 155.746723][T12235] tipc: Enabled bearer , priority 0 [ 155.853361][T12251] sg_write: data in/out 17907676/62 bytes for SCSI command 0x0-- guessing data in; [ 155.853361][T12251] program syz.0.3880 not setting count and/or reply_len properly [ 155.882228][T12248] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 155.900103][ T28] kauditd_printk_skb: 86 callbacks suppressed [ 155.900122][ T28] audit: type=1400 audit(1783337847.615:1312): avc: denied { create } for pid=12254 comm="syz.5.3884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 155.926991][T12248] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 155.970948][ T28] audit: type=1400 audit(1783337847.645:1313): avc: denied { connect } for pid=12254 comm="syz.5.3884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 156.035250][ T28] audit: type=1400 audit(1783337847.645:1314): avc: denied { bind } for pid=12254 comm="syz.5.3884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 156.126041][T12273] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3892'. [ 156.138863][T12273] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3892'. [ 156.169764][T12273] netlink: 'syz.5.3892': attribute type 14 has an invalid length. [ 156.225511][T12281] sg_write: data in/out 19942/4 bytes for SCSI command 0x32-- guessing data in; [ 156.225511][T12281] program syz.3.3896 not setting count and/or reply_len properly [ 156.408296][T12297] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 156.408296][T12297] The task syz.5.3899 (12297) triggered the difference, watch for misbehavior. [ 156.500650][T12301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3903'. [ 156.527689][T12303] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3904'. [ 156.743312][T12325] tipc: Started in network mode [ 156.768271][T12325] tipc: Node identity 3, cluster identity 4711 [ 156.786102][T12325] tipc: Node number set to 3 [ 156.796447][T12325] tipc: Cannot configure node identity twice [ 157.020281][T12359] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 157.030394][T12359] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 157.040877][ T28] audit: type=1400 audit(1783337848.755:1315): avc: denied { getopt } for pid=12360 comm="syz.1.3931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 157.154345][T12367] netlink: 'syz.1.3935': attribute type 1 has an invalid length. [ 157.183715][T12370] netlink: 'syz.5.3936': attribute type 11 has an invalid length. [ 157.233029][ T28] audit: type=1400 audit(1783337848.945:1316): avc: denied { read } for pid=12373 comm="syz.5.3938" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 157.274011][ T28] audit: type=1400 audit(1783337848.945:1317): avc: denied { open } for pid=12373 comm="syz.5.3938" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 157.318449][T12378] set_capacity_and_notify: 6 callbacks suppressed [ 157.318471][T12378] loop3: detected capacity change from 0 to 512 [ 157.373754][T12378] EXT4-fs: Ignoring removed nobh option [ 157.394320][T12378] EXT4-fs (loop3): orphan cleanup on readonly fs [ 157.413743][T12378] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #11: block 1: comm syz.3.3940: lblock 0 mapped to illegal pblock 1 (length 1) [ 157.427960][T12378] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 157.430301][T12378] EXT4-fs (loop3): Remounting filesystem read-only [ 157.432269][ T28] audit: type=1326 audit(1783337849.145:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12386 comm="syz.4.3944" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f30ca8bde59 code=0x0 [ 157.439548][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 157.439569][ C1] EXT4-fs (loop3): initial error at time 1783337849: ext4_map_blocks:791: inode 11: block 1 [ 157.439602][ C1] EXT4-fs (loop3): last error at time 1783337849: ext4_map_blocks:791: inode 11: block 1 [ 157.498709][T12378] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 157.512088][T12378] EXT4-fs warning (device loop3): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 157.522268][T12378] EXT4-fs (loop3): 1 orphan inode deleted [ 157.585410][ T28] audit: type=1400 audit(1783337849.295:1319): avc: denied { bind } for pid=12393 comm="syz.1.3948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 157.757565][ T28] audit: type=1400 audit(1783337849.465:1320): avc: denied { search } for pid=3019 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 157.780247][ T28] audit: type=1400 audit(1783337849.465:1321): avc: denied { search } for pid=3019 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.033518][T12452] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3969'. [ 158.347793][T12485] netlink: 292 bytes leftover after parsing attributes in process `syz.5.3979'. [ 158.435106][T12492] loop5: detected capacity change from 0 to 512 [ 158.446417][T12495] loop1: detected capacity change from 0 to 128 [ 158.481200][T12495] FAT-fs (loop1): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 158.492293][T12495] FAT-fs (loop1): Filesystem has been set read-only [ 158.501912][T12497] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 158.508483][T12497] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 158.533624][T12502] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6) [ 158.540256][T12502] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 158.550168][T12497] vhci_hcd vhci_hcd.0: Device attached [ 158.585523][T12502] vhci_hcd vhci_hcd.0: Device attached [ 158.603197][T12497] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(5) [ 158.609785][T12497] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 158.619062][T12497] vhci_hcd vhci_hcd.0: Device attached [ 158.626231][T12498] vhci_hcd: connection closed [ 158.627464][ T30] vhci_hcd vhci_hcd.0: stop threads [ 158.639369][T12510] vhci_hcd: connection closed [ 158.642713][T12503] vhci_hcd: connection closed [ 158.647536][ T30] vhci_hcd vhci_hcd.0: release socket [ 158.670626][ T30] vhci_hcd vhci_hcd.0: disconnect device [ 158.670825][ T30] vhci_hcd vhci_hcd.0: stop threads [ 158.670847][ T30] vhci_hcd vhci_hcd.0: release socket [ 158.670871][ T30] vhci_hcd vhci_hcd.0: disconnect device [ 158.676825][ T30] vhci_hcd vhci_hcd.0: stop threads [ 158.676901][ T30] vhci_hcd vhci_hcd.0: release socket [ 158.676926][ T30] vhci_hcd vhci_hcd.0: disconnect device [ 158.931624][T12543] loop1: detected capacity change from 0 to 512 [ 158.953474][T12548] loop3: detected capacity change from 0 to 512 [ 158.953845][T12543] EXT4-fs error (device loop1): __ext4_iget:5533: inode #11: block 1: comm syz.1.4002: invalid block [ 158.986087][T12543] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 158.986376][T12548] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 158.998184][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 159.010167][ C1] EXT4-fs (loop1): initial error at time 1783337850: __ext4_iget:5533: inode 11: block 1 [ 159.020085][ C1] EXT4-fs (loop1): last error at time 1783337850: __ext4_iget:5533: inode 11: block 1 [ 159.026921][T12548] EXT4-fs (loop3): orphan cleanup on readonly fs [ 159.036274][T12543] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.4002: couldn't read orphan inode 11 (err -117) [ 159.048804][T12548] EXT4-fs warning (device loop3): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 159.068848][T12543] loop1: lost filesystem error report for type 5 error -117 [ 159.080860][T12548] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 159.105918][T12548] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #16: comm syz.3.4004: inode has both inline data and extents flags [ 159.119715][T12548] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 159.128146][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 159.143781][ C1] EXT4-fs (loop3): initial error at time 1783337850: ext4_orphan_get:1399: inode 16 [ 159.153239][ C1] EXT4-fs (loop3): last error at time 1783337850: ext4_orphan_get:1399: inode 16 [ 159.164277][T12548] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.4004: couldn't read orphan inode 16 (err -117) [ 159.176331][T12548] loop3: lost filesystem error report for type 5 error -117 [ 159.212111][T12548] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 159.238753][T12548] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 159.266698][T12564] netlink: 'syz.0.4012': attribute type 30 has an invalid length. [ 159.296899][T12569] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4015'. [ 159.307941][T12569] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4015'. [ 159.326341][T12569] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4015'. [ 159.518889][T12594] netlink: 'syz.0.4025': attribute type 1 has an invalid length. [ 159.769266][T12622] loop5: detected capacity change from 0 to 1024 [ 159.782511][T12622] EXT4-fs: Ignoring removed orlov option [ 159.839364][T12633] loop1: detected capacity change from 0 to 1024 [ 159.893256][T12633] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 159.935388][T12640] geneve0: entered promiscuous mode [ 159.959493][T12633] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 2: comm syz.1.4043: lblock 2 mapped to illegal pblock 2 (length 1) [ 159.987060][T12640] geneve0: left promiscuous mode [ 159.999677][T12633] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 160.001091][T12633] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 48: comm syz.1.4043: lblock 0 mapped to illegal pblock 48 (length 1) [ 160.010273][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 160.010316][ C1] EXT4-fs (loop1): initial error at time 1783337851: ext4_map_blocks:791: inode 3: block 2 [ 160.010355][ C1] EXT4-fs (loop1): last error at time 1783337851: ext4_map_blocks:791: inode 3: block 2 [ 160.052282][T12633] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 160.053023][T12633] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.4043: Failed to acquire dquot type 0 [ 160.074063][T12633] loop1: lost filesystem error report for type 5 error -117 [ 160.078219][T12633] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 160.128316][T12633] loop1: lost filesystem error report for type 5 error -117 [ 160.128431][T12633] EXT4-fs error (device loop1): ext4_evict_inode:267: inode #11: comm syz.1.4043: mark_inode_dirty error [ 160.161623][T12633] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 160.161746][T12633] EXT4-fs warning (device loop1): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 160.199004][T12633] EXT4-fs (loop1): 1 orphan inode deleted [ 160.247748][ T40] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 160.262165][ T40] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 160.262351][ T40] EXT4-fs error (device loop1): ext4_release_dquot:7077: comm kworker/u8:2: Failed to release dquot type 0 [ 160.306458][ T40] loop1: lost filesystem error report for type 5 error -117 [ 160.308161][ T3294] EXT4-fs error (device loop1): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 160.338436][ T3294] loop1: lost filesystem error report for type 5 error -117 [ 160.338652][ T3294] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 160.355724][ T3294] loop1: lost filesystem error report for type 5 error -117 [ 160.355849][ T3294] EXT4-fs error (device loop1): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 160.388358][ T3294] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 160.502913][T12689] loop1: detected capacity change from 0 to 128 [ 160.579978][T12689] ext4 filesystem being mounted at /797/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.617977][T12704] __nla_validate_parse: 8 callbacks suppressed [ 160.617996][T12704] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4076'. [ 160.704189][ T3294] EXT4-fs unmount: 19 callbacks suppressed [ 160.704209][ T3294] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 161.001855][T12752] loop0: detected capacity change from 0 to 1764 [ 161.130563][T12769] can0: slcan on ttyS3. [ 161.198232][T12769] can0 (unregistered): slcan off ttyS3. [ 161.402171][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 161.402187][ T28] audit: type=1400 audit(1783337853.115:1369): avc: denied { write } for pid=12777 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.470442][T12814] loop1: detected capacity change from 0 to 512 [ 161.492126][T12814] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.514461][T12814] ext4 filesystem being mounted at /806/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 161.543763][ T28] audit: type=1400 audit(1783337853.255:1370): avc: denied { write } for pid=12822 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.647679][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.783666][T12845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4134'. [ 161.809904][T12845] netlink: 11 bytes leftover after parsing attributes in process `syz.1.4134'. [ 161.902927][T12765] Set syz1 is full, maxelem 65536 reached [ 161.918014][ T28] audit: type=1400 audit(1783337853.625:1371): avc: denied { write } for pid=12830 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.011942][ T28] audit: type=1400 audit(1783337853.725:1372): avc: denied { write } for pid=12865 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.226718][ T28] audit: type=1400 audit(1783337853.935:1373): avc: denied { write } for pid=12881 comm="syz.5.4147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 162.288650][T12886] netlink: 204 bytes leftover after parsing attributes in process `syz.1.4149'. [ 162.412851][T12896] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4154'. [ 162.437448][T12896] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4154'. [ 162.447585][T12896] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4154'. [ 162.477133][T12902] loop5: detected capacity change from 0 to 128 [ 162.486341][T12900] vlan4: entered allmulticast mode [ 162.492146][T12900] bond_slave_0: entered allmulticast mode [ 162.522395][T12896] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4154'. [ 162.557313][ T28] audit: type=1400 audit(1783337854.265:1374): avc: denied { read write } for pid=12906 comm="syz.1.4158" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 162.560455][T12896] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4154'. [ 162.585827][T12907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.585926][T12907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.625339][ T28] audit: type=1400 audit(1783337854.265:1375): avc: denied { open } for pid=12906 comm="syz.1.4158" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 162.625381][ T28] audit: type=1400 audit(1783337854.265:1376): avc: denied { ioctl } for pid=12906 comm="syz.1.4158" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 162.787463][T12896] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4154'. [ 162.851303][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 163.043283][T12942] netlink: 'syz.3.4174': attribute type 13 has an invalid length. [ 163.061417][ T28] audit: type=1400 audit(1783337854.775:1377): avc: denied { getopt } for pid=12945 comm="syz.5.4175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 163.082393][T12942] netlink: 'syz.3.4174': attribute type 11 has an invalid length. [ 163.186586][T12961] macsec0: entered promiscuous mode [ 163.195911][T12961] macsec0: left promiscuous mode [ 163.323062][T12983] loop5: detected capacity change from 0 to 512 [ 163.348170][T12983] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 163.369203][T12983] EXT4-fs (loop5): 1 truncate cleaned up [ 163.375944][T12983] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.398792][T12983] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4190: bg 0: block 465: padding at end of block bitmap is not set [ 163.398798][ T28] audit: type=1400 audit(1783337855.115:1378): avc: denied { write } for pid=12981 comm="syz.5.4190" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 163.475095][ T4576] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.506141][T12989] vlan3: entered promiscuous mode [ 163.520161][T12989] gretap0: entered promiscuous mode [ 163.668057][T13002] loop5: detected capacity change from 0 to 764 [ 163.687008][T13003] netlink: 'syz.1.4197': attribute type 29 has an invalid length. [ 163.697652][T13002] rock: directory entry would overflow storage [ 163.706098][T13003] netlink: 'syz.1.4197': attribute type 29 has an invalid length. [ 163.714480][T13002] rock: sig=0x5245, size=8, remaining=5 [ 163.776320][T13013] loop3: detected capacity change from 0 to 2048 [ 163.832258][T13013] loop3: p1 < > p3 [ 163.849072][T13013] loop3: p3 size 134217728 extends beyond EOD, truncated [ 164.758559][T13168] netlink: 'syz.0.4227': attribute type 4 has an invalid length. [ 164.859275][ T3520] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 165.126766][T13208] can0: slcan on ttyS3. [ 165.199571][T13208] can0 (unregistered): slcan off ttyS3. [ 165.398351][T13243] loop0: detected capacity change from 0 to 512 [ 165.428039][T13243] EXT4-fs: Ignoring removed i_version option [ 165.472674][T13243] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.491427][T13243] ext4 filesystem being mounted at /851/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.599950][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.697896][T13286] loop5: detected capacity change from 0 to 512 [ 165.721330][T13286] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 165.750428][T13286] EXT4-fs (loop5): 1 truncate cleaned up [ 165.763850][T13286] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.814953][T13298] xt_policy: too many policy elements [ 165.822086][T13286] EXT4-fs error (device loop5): ext4_generic_delete_entry:2673: inode #2: block 13: comm syz.5.4271: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 165.844268][T13286] EXT4-fs (loop5): Remounting filesystem read-only [ 165.901892][T13308] __nla_validate_parse: 8 callbacks suppressed [ 165.901912][T13308] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4279'. [ 165.935562][ T4576] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.993921][T13314] vlan2: entered promiscuous mode [ 166.108666][T13332] loop5: detected capacity change from 0 to 1024 [ 166.118464][T13332] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 166.152023][T13332] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 2: comm syz.5.4289: lblock 2 mapped to illegal pblock 2 (length 1) [ 166.166229][T13332] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 166.166462][T13332] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 48: comm syz.5.4289: lblock 0 mapped to illegal pblock 48 (length 1) [ 166.175669][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 166.175690][ C0] EXT4-fs (loop5): initial error at time 1783337857: ext4_map_blocks:791: inode 3: block 2 [ 166.175732][ C0] EXT4-fs (loop5): last error at time 1783337857: ext4_map_blocks:791: inode 3: block 2 [ 166.216549][T13332] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 166.216662][T13332] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.4289: Failed to acquire dquot type 0 [ 166.237251][T13332] loop5: lost filesystem error report for type 5 error -117 [ 166.237458][T13332] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 166.254358][T13332] loop5: lost filesystem error report for type 5 error -117 [ 166.257368][T13332] EXT4-fs error (device loop5): ext4_evict_inode:267: inode #11: comm syz.5.4289: mark_inode_dirty error [ 166.276039][T13332] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 166.277874][T13332] EXT4-fs warning (device loop5): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 166.298248][T13332] EXT4-fs (loop5): 1 orphan inode deleted [ 166.304917][T13332] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.320500][T13150] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 166.353819][T13150] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 166.356244][T13150] EXT4-fs error (device loop5): ext4_release_dquot:7077: comm kworker/u8:9: Failed to release dquot type 0 [ 166.421996][T13332] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 166.457308][T13332] EXT4-fs: Cannot change journaled quota options when quota turned on [ 166.545468][ T4576] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.555232][T13370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4308'. [ 166.573970][ T4576] EXT4-fs error (device loop5): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 166.602626][ T4576] loop5: lost filesystem error report for type 5 error -117 [ 166.604113][ T4576] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 166.631384][ T4576] loop5: lost filesystem error report for type 5 error -117 [ 166.634971][ T4576] EXT4-fs error (device loop5): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 166.675451][ T4576] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 166.705590][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 166.705609][ T28] audit: type=1400 audit(1783337858.415:1415): avc: denied { mount } for pid=13383 comm="syz.4.4316" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 166.779898][ T28] audit: type=1400 audit(1783337858.465:1416): avc: denied { remount } for pid=13383 comm="syz.4.4316" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 166.816274][ T28] audit: type=1400 audit(1783337858.485:1417): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 166.841755][T13396] loop4: detected capacity change from 0 to 512 [ 166.871989][ T28] audit: type=1400 audit(1783337858.525:1418): avc: denied { create } for pid=13390 comm="syz.1.4317" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key_socket permissive=1 [ 166.929497][T13396] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.948982][T13396] ext4 filesystem being mounted at /869/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.990175][ T28] audit: type=1400 audit(1783337858.695:1419): avc: denied { write } for pid=13395 comm="syz.4.4320" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 167.069104][ T28] audit: type=1400 audit(1783337858.695:1420): avc: denied { write } for pid=13395 comm="syz.4.4320" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 167.133824][ T28] audit: type=1400 audit(1783337858.695:1421): avc: denied { rmdir } for pid=13395 comm="syz.4.4320" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 167.808211][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.930025][T13440] loop0: detected capacity change from 0 to 512 [ 167.938419][T13440] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 167.972449][ T28] audit: type=1400 audit(1783337859.685:1422): avc: denied { ioctl } for pid=13442 comm="syz.3.4341" path="socket:[35653]" dev="sockfs" ino=35653 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 168.010043][T13440] EXT4-fs (loop0): 1 truncate cleaned up [ 168.032071][T13440] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.134770][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.186235][T13465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4347'. [ 168.320442][T13478] loop1: detected capacity change from 0 to 1024 [ 168.358759][T13478] EXT4-fs: inline encryption not supported [ 168.426389][T13478] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.522460][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.623845][T13469] loop3: detected capacity change from 0 to 1024 [ 168.741755][T13469] EXT4-fs (loop3): filesystem is read-only [ 169.033145][T13546] random: crng reseeded on system resumption [ 169.034344][ T28] audit: type=1400 audit(1783337860.745:1423): avc: denied { write } for pid=13545 comm="syz.0.4390" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 169.138210][ T28] audit: type=1400 audit(1783337860.745:1424): avc: denied { ioctl } for pid=13545 comm="syz.0.4390" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 169.374409][T13582] loop0: detected capacity change from 0 to 1024 [ 169.396721][T13582] EXT4-fs: Ignoring removed nobh option [ 169.408029][T13582] EXT4-fs: Ignoring removed bh option [ 169.419956][T13582] EXT4-fs (loop0): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 169.443205][T13582] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 169.461432][T13582] System zones: 0-1, 3-12 [ 169.474878][T13582] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.512700][T13593] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 169.530531][T13595] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4412'. [ 169.544696][T13582] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 169.565080][T13595] netlink: 'syz.4.4412': attribute type 1 has an invalid length. [ 169.651650][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.736667][T13611] loop0: detected capacity change from 0 to 512 [ 169.792051][T13611] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.812624][T13619] loop1: detected capacity change from 0 to 512 [ 169.835679][T13611] ext4 filesystem being mounted at /891/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.851931][T13619] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.921675][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.949100][T13619] EXT4-fs error (device loop1): ext4_validate_block_bitmap:423: comm syz.1.4423: bg 0: bad block bitmap checksum [ 170.009439][T13632] loop0: detected capacity change from 0 to 512 [ 170.019479][T13634] netlink: 'syz.5.4430': attribute type 1 has an invalid length. [ 170.027723][T13634] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4430'. [ 170.043770][T13632] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 170.053054][T13632] System zones: 1-12 [ 170.061423][T13632] EXT4-fs error (device loop0): dx_probe:791: inode #2: comm syz.0.4427: Directory hole found for htree index block 0 [ 170.080721][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.081057][T13632] loop0: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 170.098163][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 170.113737][ C0] EXT4-fs (loop0): initial error at time 2000000000: dx_probe:791: inode 2 [ 170.122423][ C0] EXT4-fs (loop0): last error at time 2000000000: dx_probe:791: inode 2 [ 170.141343][T13632] EXT4-fs (loop0): Remounting filesystem read-only [ 170.150927][T13632] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 170.159286][T13632] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 170.169612][T13632] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.188750][T13640] netlink: 14902 bytes leftover after parsing attributes in process `syz.1.4442'. [ 170.228662][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.220923][T13682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4452'. [ 171.241784][T13682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4452'. [ 171.258930][T13682] netlink: 'syz.1.4452': attribute type 13 has an invalid length. [ 171.271128][T13688] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4455'. [ 171.311620][T13692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4457'. [ 171.324171][T13692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4457'. [ 171.334056][T13692] netlink: 'syz.4.4457': attribute type 14 has an invalid length. [ 171.345633][T13692] netlink: 'syz.4.4457': attribute type 12 has an invalid length. [ 171.502269][T13717] netlink: 11 bytes leftover after parsing attributes in process `syz.3.4469'. [ 171.722384][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 171.722403][ T28] audit: type=1400 audit(2000000002.400:1434): avc: denied { write } for pid=13754 comm="syz.4.4487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 171.760906][T13758] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 172.095694][T13797] loop1: detected capacity change from 0 to 1024 [ 172.139999][T13801] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.4508'. [ 172.159582][T13797] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 172.179896][T13797] ext4 filesystem being mounted at /888/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.193900][ T28] audit: type=1400 audit(2000000002.870:1435): avc: denied { write } for pid=13796 comm="syz.1.4506" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 172.239849][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 172.364004][ T28] audit: type=1326 audit(2000000003.040:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13819 comm="syz.0.4516" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2ffe4de59 code=0x7ffc0000 [ 172.393064][ T28] audit: type=1326 audit(2000000003.040:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13819 comm="syz.0.4516" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2ffe4de59 code=0x7ffc0000 [ 172.419334][ T28] audit: type=1326 audit(2000000003.040:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13819 comm="syz.0.4516" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2ffe4de59 code=0x7ffc0000 [ 172.420249][T13816] loop1: detected capacity change from 0 to 1024 [ 172.445289][ T28] audit: type=1326 audit(2000000003.040:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13819 comm="syz.0.4516" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2ffe4de59 code=0x7ffc0000 [ 172.445327][ T28] audit: type=1326 audit(2000000003.040:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13819 comm="syz.0.4516" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7fe2ffe4de59 code=0x7ffc0000 [ 172.445385][ T28] audit: type=1326 audit(2000000003.040:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13819 comm="syz.0.4516" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2ffe4de59 code=0x7ffc0000 [ 172.445423][ T28] audit: type=1326 audit(2000000003.040:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13819 comm="syz.0.4516" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2ffe4de59 code=0x7ffc0000 [ 172.445460][ T28] audit: type=1326 audit(2000000003.040:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13819 comm="syz.0.4516" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2ffe4de59 code=0x7ffc0000 [ 172.631123][T13827] loop4: detected capacity change from 0 to 256 [ 172.632883][T13827] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 172.634790][T13827] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 172.634822][T13827] FAT-fs (loop4): Filesystem has been set read-only [ 172.634851][T13827] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 172.634925][T13827] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 172.811408][T13816] EXT4-fs (loop1): filesystem is read-only [ 172.881345][T13841] vlan4: entered allmulticast mode [ 172.897169][T13841] macsec0: entered allmulticast mode [ 172.945754][T13848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4529'. [ 172.961419][T13851] loop0: detected capacity change from 0 to 512 [ 172.986326][T13848] bond0: (slave macsec2): Error -34 calling dev_set_mtu [ 173.001483][T13851] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.241799][T13876] GUP no longer grows the stack in syz.3.4543 (13876): 200000005000-200000008000 (200000004000) [ 173.253336][T13876] CPU: 1 UID: 0 PID: 13876 Comm: syz.3.4543 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 173.253349][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.253380][T13876] Tainted: [W]=WARN [ 173.253390][T13876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 173.253516][T13876] Call Trace: [ 173.253545][T13876] [ 173.253634][T13876] __dump_stack+0x1d/0x30 [ 173.253728][T13876] dump_stack_lvl+0x95/0xd0 [ 173.253799][T13876] dump_stack+0x15/0x1b [ 173.253872][T13876] fixup_user_fault+0x4fe/0x550 [ 173.253982][T13876] fault_in_user_writeable+0x5c/0xc0 [ 173.254097][T13876] futex_lock_pi+0x5f2/0x7c0 [ 173.254194][T13876] ? __pfx_futex_wake_mark+0x10/0x10 [ 173.254331][T13876] do_futex+0x2ea/0x460 [ 173.254407][T13876] __se_sys_futex+0x2f6/0x370 [ 173.254526][T13876] ? xfd_validate_state+0x45/0xf0 [ 173.254619][T13876] __x64_sys_futex+0x78/0x90 [ 173.254696][T13876] x64_sys_call+0x24ab/0x3020 [ 173.254779][T13876] do_syscall_64+0x136/0x3c0 [ 173.254949][T13876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.255058][T13876] RIP: 0033:0x7f7d20ccde59 [ 173.255206][T13876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.255270][T13876] RSP: 002b:00007f7d1f727028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 173.255404][T13876] RAX: ffffffffffffffda RBX: 00007f7d20f55fa0 RCX: 00007f7d20ccde59 [ 173.255455][T13876] RDX: 0000000000000001 RSI: 000000000000008d RDI: 0000200000004000 [ 173.255499][T13876] RBP: 00007f7d20d63e6f R08: 0000000000000000 R09: 0000000000000001 [ 173.255584][T13876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.255648][T13876] R13: 00007f7d20f56038 R14: 00007f7d20f55fa0 R15: 00007ffe3728fb48 [ 173.255721][T13876] [ 173.339247][T13878] loop3: detected capacity change from 0 to 1024 [ 173.485428][T13878] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 173.529715][T13878] ext4 filesystem being mounted at /948/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.544295][T13890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4548'. [ 173.601042][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 173.637689][T13900] Invalid ELF header magic: != ELF [ 173.721547][T13910] loop0: detected capacity change from 0 to 736 [ 173.799529][T13910] rock: directory entry would overflow storage [ 173.814050][T13910] rock: sig=0x3b10, size=4, remaining=3 [ 173.990078][ T9519] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 173.997959][ T9519] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 174.020911][ T9519] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 174.070847][T13953] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4579'. [ 174.106212][T13949] fido_id[13949]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 174.306892][T13982] loop4: detected capacity change from 0 to 1764 [ 174.318033][T13982] iso9660: Bad value for 'uid' [ 174.328688][T13987] loop5: detected capacity change from 0 to 512 [ 174.335353][T13982] iso9660: Bad value for 'uid' [ 174.363732][T13987] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.378052][T13987] ext4 filesystem being mounted at /796/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.412917][ T4576] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.509585][T14005] loop4: detected capacity change from 0 to 512 [ 174.520926][T14005] EXT4-fs: Ignoring removed i_version option [ 174.527516][T14005] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 174.552962][T14005] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 174.568135][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 174.574612][ C1] EXT4-fs (loop4): initial error at time 2000000005: ext4_mb_generate_buddy:1317 [ 174.583799][ C1] EXT4-fs (loop4): last error at time 2000000005: ext4_mb_generate_buddy:1317 [ 174.594439][T14011] tipc: Enabling of bearer rejected, failed to enable media [ 174.603308][T14005] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.4602: Failed to acquire dquot type 1 [ 174.616406][T14005] loop4: lost filesystem error report for type 5 error -28 [ 174.616652][T14005] EXT4-fs (loop4): 1 truncate cleaned up [ 174.641166][T14005] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.719575][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.813550][T14037] loop1: detected capacity change from 0 to 1024 [ 174.828053][T14037] EXT4-fs: Ignoring removed bh option [ 174.853783][T14037] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.874614][T14037] EXT4-fs (loop1): Online resizing not supported with bigalloc [ 174.923269][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.965238][T14054] xt_cluster: you have exceeded the maximum number of cluster nodes (2621472 > 32) [ 175.285325][T14072] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 175.333098][T14081] netlink: 'syz.0.4635': attribute type 12 has an invalid length. [ 175.390027][T14089] loop0: detected capacity change from 0 to 512 [ 175.398715][T14089] EXT4-fs: inline encryption not supported [ 175.426872][T14089] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 175.462753][T14089] EXT4-fs (loop0): 1 truncate cleaned up [ 175.469344][T14089] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.512443][T14089] EXT4-fs error (device loop0): __ext4_expand_extra_isize:6455: inode #15: comm syz.0.4639: bad extra_isize 62 (inode size 256) [ 175.533187][T14089] EXT4-fs (loop0): Remounting filesystem read-only [ 175.633288][T14113] futex_wake_op: syz.3.4651 tries to shift op by 144; fix this program [ 175.643158][T14113] futex_wake_op: syz.3.4651 tries to shift op by 144; fix this program [ 175.847936][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.080666][T14143] netlink: 'syz.3.4665': attribute type 10 has an invalid length. [ 176.094130][T14142] loop1: detected capacity change from 0 to 512 [ 176.105944][T14143] netlink: 'syz.3.4665': attribute type 10 has an invalid length. [ 176.120340][T14142] EXT4-fs: Ignoring removed bh option [ 176.126361][T14143] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 176.148336][T14143] bond0: (slave netdevsim2): Enslaving as an active interface with an up link [ 176.159432][T14142] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.4664: corrupted in-inode xattr: e_value size too large [ 176.204603][T14142] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 176.204875][T14142] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.4664: couldn't read orphan inode 15 (err -117) [ 176.214094][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 176.214137][ C1] EXT4-fs (loop1): initial error at time 2000000006: ext4_iget_extra_inode:5180: inode 15 [ 176.214174][ C1] EXT4-fs (loop1): last error at time 2000000006: ext4_iget_extra_inode:5180: inode 15 [ 176.238693][T14156] loop5: detected capacity change from 0 to 128 [ 176.245113][T14142] loop1: lost filesystem error report for type 5 error -117 [ 176.260996][T14142] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.314597][T14155] veth3: entered promiscuous mode [ 176.347759][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.607084][T14186] ext4: Unknown parameter 'discard.init_itable' [ 176.645107][T14186] __nla_validate_parse: 4 callbacks suppressed [ 176.645120][T14186] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4686'. [ 176.698806][T14190] netlink: 'syz.0.4688': attribute type 1 has an invalid length. [ 176.705275][T14186] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4686'. [ 176.764307][ T28] kauditd_printk_skb: 65 callbacks suppressed [ 176.764325][ T28] audit: type=1400 audit(2000000007.440:1505): avc: denied { append } for pid=14193 comm="syz.1.4690" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 176.829402][ T28] audit: type=1400 audit(2000000007.500:1506): avc: denied { mount } for pid=14194 comm="syz.4.4691" name="/" dev="loop4" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 176.894537][ T28] audit: type=1400 audit(2000000007.570:1507): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 176.918084][T14201] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 176.949538][ T28] audit: type=1400 audit(2000000007.630:1508): avc: denied { mount } for pid=14200 comm="syz.1.4693" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 176.994492][ T28] audit: type=1400 audit(2000000007.670:1509): avc: denied { unmount } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 177.073390][ T28] audit: type=1400 audit(2000000007.740:1510): avc: denied { allowed } for pid=14204 comm="syz.1.4695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 177.114090][ T28] audit: type=1400 audit(2000000007.750:1511): avc: denied { read write } for pid=14208 comm="syz.0.4697" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 177.192494][T14214] Invalid ELF header magic: != ELF [ 177.196403][ T28] audit: type=1400 audit(2000000007.750:1512): avc: denied { open } for pid=14208 comm="syz.0.4697" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 177.283060][ T28] audit: type=1400 audit(2000000007.760:1513): avc: denied { sqpoll } for pid=14204 comm="syz.1.4695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 177.328255][ T28] audit: type=1400 audit(2000000007.760:1514): avc: denied { create } for pid=14204 comm="syz.1.4695" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 177.458829][T14172] EXT4-fs (loop5): filesystem is read-only [ 177.487082][T14224] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 177.607728][T14232] EXT4-fs: Ignoring removed mblk_io_submit option [ 177.664267][T14232] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.684838][T14232] ext4 filesystem being mounted at /819/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.782509][ T4576] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.021772][ T282] kernel read not supported for file /vga_arbiter (pid: 282 comm: kworker/0:2) [ 178.185029][T14279] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4728'. [ 179.025783][T14335] set_capacity_and_notify: 6 callbacks suppressed [ 179.025840][T14335] loop5: detected capacity change from 0 to 164 [ 179.144573][T14349] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 179.161026][T14349] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 179.267693][T14363] loop0: detected capacity change from 0 to 164 [ 179.278749][T14361] loop5: detected capacity change from 0 to 512 [ 179.292291][T14361] EXT4-fs error (device loop5): ext4_get_journal_inode:5900: comm syz.5.4765: inode #2147418112: comm syz.5.4765: iget: illegal inode # [ 179.325233][T14361] loop5: lost filesystem error report for type 5 error -117 [ 179.327647][T14361] EXT4-fs (loop5): no journal found [ 179.335240][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 179.335264][ C1] EXT4-fs (loop5): initial error at time 2000000010: ext4_get_journal_inode:5900 [ 179.335308][ C1] EXT4-fs (loop5): last error at time 2000000010: ext4_get_journal_inode:5900 [ 179.357296][T14357] loop4: detected capacity change from 0 to 1024 [ 179.373835][T14361] EXT4-fs (loop5): can't get journal size [ 179.380737][T14361] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 179.407547][T14361] EXT4-fs (loop5): Errors on filesystem, clearing orphan list. [ 179.431746][T14361] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.439875][T14357] EXT4-fs (loop4): filesystem is read-only [ 179.543483][T14378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4775'. [ 179.552665][T14378] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4775'. [ 179.563773][T14378] 8021q: VLANs not supported on gre0 [ 179.569452][ T4576] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.623114][T14385] loop5: detected capacity change from 0 to 512 [ 179.635001][T14389] loop0: detected capacity change from 0 to 512 [ 179.666009][T14389] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 179.676687][T14389] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 179.677208][T14385] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.705296][T14389] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 179.722541][T14389] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 179.743896][T14389] System zones: 0-2, 18-18, 34-35 [ 179.750327][T14389] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.787140][ T4576] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.798316][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.844959][T14400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4785'. [ 179.967577][T14412] loop3: detected capacity change from 0 to 1764 [ 180.315607][T14456] loop3: detected capacity change from 0 to 512 [ 180.346430][T14456] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.381910][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.431767][T14471] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4816'. [ 180.622495][T14495] loop1: detected capacity change from 0 to 128 [ 180.639490][T14495] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 180.652711][T14495] ext4 filesystem being mounted at /950/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.752266][ T3294] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 180.937299][T14524] netlink: 'syz.0.4839': attribute type 10 has an invalid length. [ 181.100768][T14536] usb usb9: usbfs: process 14536 (syz.3.4846) did not claim interface 0 before use [ 181.144051][T14540] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 181.390230][T14567] loop3: detected capacity change from 0 to 128 [ 181.397590][T14567] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 181.439324][T14571] netlink: 'syz.1.4861': attribute type 10 has an invalid length. [ 181.470203][T14567] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 181.597639][T14589] program syz.4.4872 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 181.644678][T14591] Failed to initialize the IGMP autojoin socket (err -2) [ 181.796512][T14602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4878'. [ 181.807811][T14602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4878'. [ 181.817174][T14602] netlink: 'syz.3.4878': attribute type 6 has an invalid length. [ 181.917179][T14613] netlink: 67 bytes leftover after parsing attributes in process `syz.3.4883'. [ 181.935384][T14613] gretap0: entered promiscuous mode [ 181.968666][T14613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.984072][T14613] dummy0: left promiscuous mode [ 182.001589][T14613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.019883][T14605] EXT4-fs (loop0): filesystem is read-only [ 182.032711][T14613] wireguard: wg0: Could not create IPv4 socket [ 182.045694][T14613] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 182.171513][T14623] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4889'. [ 182.211350][T14627] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4890'. [ 182.255160][T14629] EXT4-fs: Ignoring removed bh option [ 182.280074][T14629] EXT4-fs (loop0): stripe (15) is not aligned with cluster size (16), stripe is disabled [ 182.308222][ T9] kernel write not supported for file /snd/seq (pid: 9 comm: kworker/0:0) [ 182.322735][T14629] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.382065][T14636] tmpfs: Unexpected value for 'noswap' [ 182.423954][T14643] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4898'. [ 182.437499][ T28] kauditd_printk_skb: 95 callbacks suppressed [ 182.437518][ T28] audit: type=1400 audit(2000000013.110:1610): avc: denied { execute_no_trans } for pid=14640 comm="syz.5.4897" path=2F6D656D66643A5B0BDB58AE5B1A02FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="hugetlbfs" ino=39573 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 182.676354][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.828260][ T28] audit: type=1400 audit(2000000013.510:1611): avc: denied { append } for pid=14664 comm="syz.1.4907" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 182.908792][ T28] audit: type=1400 audit(2000000013.590:1612): avc: denied { accept } for pid=14671 comm="syz.1.4911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 182.943621][ T28] audit: type=1400 audit(2000000013.590:1613): avc: denied { ioctl } for pid=14674 comm="syz.5.4912" path="net:[4026532377]" dev="nsfs" ino=4026532377 ioctlcmd=0xb708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 183.051828][T14680] usb usb9: usbfs: process 14680 (syz.5.4914) did not claim interface 0 before use [ 183.063839][T14686] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 183.086737][T14686] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 2: comm syz.3.4917: lblock 2 mapped to illegal pblock 2 (length 1) [ 183.091273][ T28] audit: type=1400 audit(2000000013.760:1614): avc: denied { setopt } for pid=14687 comm="syz.1.4918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 183.104017][T14686] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 183.128164][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 183.143765][ C0] EXT4-fs (loop3): initial error at time 2000000013: ext4_map_blocks:791: inode 3: block 2 [ 183.153949][ C0] EXT4-fs (loop3): last error at time 2000000013: ext4_map_blocks:791: inode 3: block 2 [ 183.156039][T14686] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 183.181070][T14686] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 48: comm syz.3.4917: lblock 0 mapped to illegal pblock 48 (length 1) [ 183.214965][T14686] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 183.215124][T14686] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 183.234889][T14686] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.4917: Failed to acquire dquot type 0 [ 183.246507][T14686] loop3: lost filesystem error report for type 5 error -117 [ 183.248227][T14686] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 183.268286][T14686] loop3: lost filesystem error report for type 5 error -117 [ 183.269730][T14686] EXT4-fs error (device loop3): ext4_evict_inode:267: inode #11: comm syz.3.4917: mark_inode_dirty error [ 183.298883][T14686] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 183.300346][T14686] EXT4-fs warning (device loop3): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 183.326899][T14686] EXT4-fs (loop3): 1 orphan inode deleted [ 183.339303][T14686] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.352296][T13152] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 183.396413][T13152] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 183.431124][T13152] EXT4-fs error (device loop3): ext4_release_dquot:7077: comm kworker/u8:10: Failed to release dquot type 0 [ 183.462646][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.472176][ T3295] EXT4-fs error (device loop3): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 183.485417][ T3295] loop3: lost filesystem error report for type 5 error -117 [ 183.485502][ T3295] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 183.504981][ T3295] loop3: lost filesystem error report for type 5 error -117 [ 183.505082][ T3295] EXT4-fs error (device loop3): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 183.524152][ T3295] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 183.610684][T14718] usb usb9: usbfs: process 14718 (syz.4.4932) did not claim interface 0 before use [ 183.617508][ T28] audit: type=1400 audit(2000000014.290:1615): avc: denied { create } for pid=14723 comm="syz.0.4934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 183.663654][ T28] audit: type=1400 audit(2000000014.330:1616): avc: denied { connect } for pid=14723 comm="syz.0.4934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 183.768018][T14734] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 183.790476][T14734] EXT4-fs (loop0): 1 truncate cleaned up [ 183.808571][T14734] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.838063][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.843552][T14741] UHID_CREATE from different security context by process 2135 (syz.3.4943), this is not allowed. [ 183.877228][T14743] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 183.895375][T14743] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.4954: invalid indirect mapped block 9 (level 0) [ 183.915110][T14745] netlink: 'syz.4.4944': attribute type 10 has an invalid length. [ 183.924103][T14743] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 183.924355][T14743] EXT4-fs (loop0): 1 truncate cleaned up [ 183.934008][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 183.934057][ C0] EXT4-fs (loop0): initial error at time 2000000014: ext4_free_branches:1023: inode 11 [ 183.934096][ C0] EXT4-fs (loop0): last error at time 2000000014: ext4_free_branches:1023: inode 11 [ 183.967280][T14743] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.005583][T14750] netlink: 'syz.3.4946': attribute type 11 has an invalid length. [ 184.023876][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.024885][T14750] netlink: 'syz.3.4946': attribute type 5 has an invalid length. [ 184.203124][T14769] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4956'. [ 184.267781][T14765] can0: slcan on ptm0. [ 184.328973][T14764] can0 (unregistered): slcan off ptm0. [ 184.526592][T14813] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4973'. [ 184.601854][T14823] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4973'. [ 184.686299][T14839] netlink: 'syz.3.4983': attribute type 6 has an invalid length. [ 184.703255][T14841] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4982'. [ 185.142596][T14882] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 185.425953][T14914] set_capacity_and_notify: 7 callbacks suppressed [ 185.425973][T14914] loop3: detected capacity change from 0 to 8192 [ 185.445377][T14914] syz.3.5012: attempt to access beyond end of device [ 185.445377][T14914] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 185.462618][T14914] Buffer I/O error on dev loop3, logical block 57847, async page read [ 185.471593][T14914] syz.3.5012: attempt to access beyond end of device [ 185.471593][T14914] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 185.485406][T14914] Buffer I/O error on dev loop3, logical block 57847, async page read [ 185.495039][T14914] syz.3.5012: attempt to access beyond end of device [ 185.495039][T14914] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 185.509299][T14914] Buffer I/O error on dev loop3, logical block 57847, async page read [ 186.106963][T14996] Invalid logical block size (2) [ 186.327942][T15029] netlink: 'syz.5.5054': attribute type 10 has an invalid length. [ 186.515144][T15048] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 186.589374][T15035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.598561][T15035] dummy0: left promiscuous mode [ 186.604801][T15035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.615135][T15035] wireguard: wg0: Could not create IPv4 socket [ 186.621497][T15035] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 186.755050][T15066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.781636][T15063] loop3: detected capacity change from 0 to 1024 [ 186.789740][T15066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.847776][T15063] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.912640][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.930340][T15086] __nla_validate_parse: 3 callbacks suppressed [ 186.930360][T15086] netlink: 67 bytes leftover after parsing attributes in process `syz.5.5080'. [ 186.968508][T15086] ip6gretap0: left promiscuous mode [ 186.981672][T15086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.989953][T15086] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.001347][T15086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.028472][T15086] wireguard: wg0: Could not create IPv4 socket [ 187.043943][T15086] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 187.354798][T15119] loop5: detected capacity change from 0 to 256 [ 187.414749][T15122] loop4: detected capacity change from 0 to 512 [ 187.436990][T15122] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 187.448354][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 187.448371][ T28] audit: type=1400 audit(2000000001.010:1674): avc: denied { firmware_load } for pid=15124 comm="syz.0.5099" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 187.502827][T15122] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.5097: bad orphan inode 131083 [ 187.550904][T15122] loop4: lost filesystem error report for type 5 error -117 [ 187.551564][T15122] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.600051][T15139] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5106'. [ 187.626864][T15142] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5107'. [ 187.667576][ T28] audit: type=1400 audit(2000000001.220:1675): avc: denied { create } for pid=15143 comm="syz.0.5109" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=x25_socket permissive=1 [ 187.743306][ T28] audit: type=1400 audit(2000000001.260:1676): avc: denied { create } for pid=15146 comm="syz.5.5110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 187.767252][T15151] loop0: detected capacity change from 0 to 512 [ 187.781285][T15151] EXT4-fs: inline encryption not supported [ 187.800153][T15151] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 187.811642][ T28] audit: type=1400 audit(2000000001.280:1677): avc: denied { setopt } for pid=15146 comm="syz.5.5110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 187.850890][T15151] EXT4-fs (loop0): 1 truncate cleaned up [ 187.882836][T15151] EXT4-fs error (device loop0): __ext4_expand_extra_isize:6455: inode #12: comm syz.0.5112: bad extra_isize 62 (inode size 256) [ 187.898950][ T28] audit: type=1400 audit(2000000001.370:1678): avc: denied { read } for pid=15153 comm="syz.5.5113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 187.920229][ T28] audit: type=1400 audit(2000000001.420:1679): avc: denied { nlmsg_read } for pid=15153 comm="syz.5.5113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 187.941455][ T28] audit: type=1400 audit(2000000001.440:1680): avc: denied { write } for pid=15149 comm="syz.0.5112" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 187.964025][ T28] audit: type=1400 audit(2000000001.440:1681): avc: denied { write } for pid=15149 comm="syz.0.5112" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 187.987440][T15151] EXT4-fs (loop0): Remounting filesystem read-only [ 188.007674][ T28] audit: type=1400 audit(2000000001.440:1682): avc: denied { remove_name } for pid=15149 comm="syz.0.5112" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 188.031838][ T28] audit: type=1400 audit(2000000001.440:1683): avc: denied { rename } for pid=15149 comm="syz.0.5112" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 188.196875][T15184] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5126'. [ 188.216171][T15184] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5126'. [ 188.355359][T15200] loop5: detected capacity change from 0 to 512 [ 188.374966][T15200] EXT4-fs: old and new quota format mixing [ 189.430502][T15204] syz.5.5137 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 189.477730][T15204] CPU: 1 UID: 0 PID: 15204 Comm: syz.5.5137 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 189.477772][T15204] Tainted: [W]=WARN [ 189.477779][T15204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 189.477806][T15204] Call Trace: [ 189.477820][T15204] [ 189.477830][T15204] __dump_stack+0x1d/0x30 [ 189.477930][T15204] dump_stack_lvl+0x95/0xd0 [ 189.477955][T15204] dump_stack+0x15/0x1b [ 189.477980][T15204] dump_header+0x80/0x240 [ 189.478009][T15204] oom_kill_process+0x295/0x350 [ 189.478130][T15204] out_of_memory+0x981/0xbc0 [ 189.478170][T15204] try_charge_memcg+0x621/0xa00 [ 189.478257][T15204] charge_memcg+0x6d/0x120 [ 189.478288][T15204] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 189.478332][T15204] swap_cache_alloc_folio+0x47b/0x5e0 [ 189.478401][T15204] swap_cluster_readahead+0x2b1/0x460 [ 189.478447][T15204] swapin_readahead+0xd8/0x8a0 [ 189.478498][T15204] ? _raw_spin_unlock+0x9/0x30 [ 189.478517][T15204] ? swap_put_entries_cluster+0x49c/0x4c0 [ 189.478573][T15204] ? __entry_text_end+0x11218/0x102179 [ 189.478678][T15204] ? __rcu_read_unlock+0x4e/0x70 [ 189.478714][T15204] ? swap_cache_get_folio+0x1f7/0x200 [ 189.478757][T15204] do_swap_page+0x2a2/0x1ec0 [ 189.478788][T15204] ? __css_rstat_updated+0xbb/0x280 [ 189.478883][T15204] ? __rcu_read_lock+0x36/0x50 [ 189.478908][T15204] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 189.478939][T15204] handle_mm_fault+0xb3c/0x2da0 [ 189.479024][T15204] do_user_addr_fault+0x634/0x1060 [ 189.479064][T15204] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 189.479100][T15204] ? trace_page_fault_user+0x1f/0xa0 [ 189.479179][T15204] exc_page_fault+0x62/0xa0 [ 189.479260][T15204] asm_exc_page_fault+0x26/0x30 [ 189.479287][T15204] RIP: 0033:0x7f7f3b884750 [ 189.479308][T15204] Code: 31 c0 e8 d3 ec fe ff 48 8d 35 e5 ef 1c 00 48 8b 94 24 c8 03 00 00 48 8d 3d 64 01 1d 00 31 c0 e8 b6 ec fe ff 66 0f 1f 44 00 00 <0f> b6 05 8e 0f ef 00 84 c0 74 0b 0f b6 05 71 0f ef 00 84 c0 74 0a [ 189.479367][T15204] RSP: 002b:00007ffce7837f98 EFLAGS: 00010202 [ 189.479387][T15204] RAX: 0000001b31724000 RBX: 00007f7f3bc46090 RCX: 0000001b31724000 [ 189.479404][T15204] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 00007f7f3c775720 [ 189.479445][T15204] RBP: 00007f7f3bc47da0 R08: 00007f7f3bc46090 R09: 0000000000000006 [ 189.479458][T15204] R10: 0000001b3172421c R11: 000000000000000c R12: 000000000002e330 [ 189.479474][T15204] R13: 00007f7f3bc4609c R14: 000000000002e05e R15: 00007ffce78380a0 [ 189.479531][T15204] [ 189.728002][T15204] memory: usage 307200kB, limit 307200kB, failcnt 176 [ 189.744350][T15204] memory+swap: usage 301552kB, limit 9007199254740988kB, failcnt 0 [ 189.752411][T15204] kmem: usage 288236kB, limit 9007199254740988kB, failcnt 0 [ 189.848794][T15204] Memory cgroup stats for /syz5: [ 189.849097][T15204] cache 0 [ 189.888698][T15204] rss 0 [ 189.900204][T15204] shmem 0 [ 189.910272][T15268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5166'. [ 189.933691][T15204] mapped_file 0 [ 189.937228][T15204] dirty 0 [ 189.940380][T15204] writeback 0 [ 189.954271][T15204] workingset_refault_anon 1345 [ 189.979791][T15204] workingset_refault_file 0 [ 189.998277][T15204] swap 606208 [ 190.013373][T15204] swapcached 6115328 [ 190.024775][T15204] pgpgin 122405 [ 190.032757][T15204] pgpgout 122405 [ 190.037742][T15204] pgfault 145537 [ 190.041628][T15204] pgmajfault 183 [ 190.045330][T15204] inactive_anon 0 [ 190.056835][T15204] active_anon 0 [ 190.083286][T15204] inactive_file 0 [ 190.090207][T15204] active_file 0 [ 190.095160][T15204] unevictable 0 [ 190.101807][T15204] hierarchical_memory_limit 314572800 [ 190.110286][T15204] hierarchical_memsw_limit 9223372036854771712 [ 190.140296][T15204] total_cache 0 [ 190.143880][T15204] total_rss 0 [ 190.147195][T15204] total_shmem 0 [ 190.151115][T15204] total_mapped_file 0 [ 190.158277][T15204] total_dirty 0 [ 190.168154][T15204] total_writeback 0 [ 190.172321][T15204] total_workingset_refault_anon 1345 [ 190.183597][T15204] total_workingset_refault_file 0 [ 190.195117][T15204] total_swap 606208 [ 190.200568][T15204] total_swapcached 6115328 [ 190.208311][T15204] total_pgpgin 122405 [ 190.218021][T15204] total_pgpgout 122405 [ 190.228172][T15204] total_pgfault 145537 [ 190.232360][T15204] total_pgmajfault 183 [ 190.236462][T15204] total_inactive_anon 0 [ 190.253331][T15204] total_active_anon 0 [ 190.262681][T15204] total_inactive_file 0 [ 190.274166][T15204] total_active_file 0 [ 190.278390][T15204] total_unevictable 0 [ 190.285669][T15204] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.5137,pid=15204,uid=0 [ 190.302830][T15204] Memory cgroup out of memory: Killed process 15204 (syz.5.5137) total-vm:96228kB, anon-rss:1236kB, file-rss:22104kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 190.342968][T15290] Failed to initialize the IGMP autojoin socket (err -2) [ 190.622654][T15309] loop5: detected capacity change from 0 to 1024 [ 190.632195][T15308] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5183'. [ 190.681429][T15309] ext4: Bad value for 'auto_da_alloc' [ 191.055998][T15348] loop4: detected capacity change from 0 to 2048 [ 191.107553][T15348] EXT4-fs mount: 3 callbacks suppressed [ 191.107573][T15348] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.127994][T15348] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.5202: pblk 93 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(4) [ 191.163098][T15359] loop5: detected capacity change from 0 to 1024 [ 191.193728][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.203671][T15359] EXT4-fs: Ignoring removed bh option [ 191.231728][T15359] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 191.288294][T15359] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce028, mo2=0000] [ 191.311515][T15359] System zones: 0-1, 3-12 [ 191.326002][T15369] loop4: detected capacity change from 0 to 1024 [ 191.334870][T15359] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #3: block 1: comm syz.5.5209: lblock 1 mapped to illegal pblock 1 (length 1) [ 191.364030][T15369] EXT4-fs: Ignoring removed bh option [ 191.377286][T15359] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 191.377383][T15359] EXT4-fs (loop5): Remounting filesystem read-only [ 191.386571][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 191.386594][ C1] EXT4-fs (loop5): initial error at time 2000000004: ext4_map_blocks:833: inode 3: block 1 [ 191.386623][ C1] EXT4-fs (loop5): last error at time 2000000004: ext4_map_blocks:833: inode 3: block 1 [ 191.453071][T15369] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.466830][T15359] EXT4-fs (loop5): 1 orphan inode deleted [ 191.480000][T15359] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.518145][T15369] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5210: bg 0: block 64: padding at end of block bitmap is not set [ 191.534551][ T4576] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.637139][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.697277][T15394] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5223'. [ 191.768689][T15400] loop1: detected capacity change from 0 to 512 [ 191.801195][T15400] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.5226: bg 0: block 169: padding at end of block bitmap is not set [ 191.829082][T15400] loop1: lost filesystem error report for type 5 error -117 [ 191.834083][T15400] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.5226: Failed to acquire dquot type 0 [ 191.841603][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 191.841629][ C1] EXT4-fs (loop1): initial error at time 2000000005: ext4_validate_block_bitmap:441 [ 191.841654][ C1] EXT4-fs (loop1): last error at time 2000000005: ext4_validate_block_bitmap:441 [ 191.880799][T15400] loop1: lost filesystem error report for type 5 error -117 [ 191.885339][T15400] EXT4-fs (loop1): 1 truncate cleaned up [ 191.899075][T15400] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.913510][T15400] ext4 filesystem being mounted at /1023/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.955796][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.999713][T15418] team0: Cannot enslave team device to itself [ 192.078620][T15425] netlink: 'syz.1.5236': attribute type 10 has an invalid length. [ 192.406743][T15459] netlink: 67 bytes leftover after parsing attributes in process `syz.4.5250'. [ 192.420355][T15461] netlink: 'syz.3.5252': attribute type 2 has an invalid length. [ 192.428492][T15461] netlink: 'syz.3.5252': attribute type 1 has an invalid length. [ 192.436359][T15461] netlink: 'syz.3.5252': attribute type 2 has an invalid length. [ 192.444691][T15461] netlink: 199808 bytes leftover after parsing attributes in process `syz.3.5252'. [ 192.538321][T15459] ip6gretap0: left promiscuous mode [ 192.549091][T15459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.570985][T15459] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.586110][T15459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.611461][T15459] wireguard: wg0: Could not create IPv4 socket [ 192.625185][T15459] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 192.644001][ T28] kauditd_printk_skb: 46 callbacks suppressed [ 192.644020][ T28] audit: type=1400 audit(2000000006.200:1724): avc: denied { bind } for pid=15472 comm="syz.3.5258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 192.749783][T15486] loop0: detected capacity change from 0 to 256 [ 192.784420][T15490] tipc: Enabling of bearer rejected, failed to enable media [ 192.865478][ T28] audit: type=1400 audit(2000000006.420:1725): avc: denied { create } for pid=15499 comm="syz.3.5272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 192.914224][ T28] audit: type=1400 audit(2000000006.460:1726): avc: denied { bind } for pid=15499 comm="syz.3.5272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 192.941239][T15504] loop1: detected capacity change from 0 to 512 [ 192.954729][T15492] loop4: detected capacity change from 0 to 8192 [ 192.961479][T15504] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 192.987155][T15504] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.5275: bad orphan inode 131083 [ 193.003241][T15492] loop4: p1 p2 p3 [ 193.011872][T15504] loop1: lost filesystem error report for type 5 error -117 [ 193.012611][T15504] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.024294][T15492] loop4: p1 start 51379968 is beyond EOD, [ 193.084593][ T28] audit: type=1400 audit(2000000006.640:1727): avc: denied { write } for pid=15503 comm="syz.1.5275" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 193.128382][T15492] truncated [ 193.159290][T15492] loop4: p3 size 100663552 extends beyond EOD, truncated [ 193.190508][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.354820][ T28] audit: type=1400 audit(2000000006.910:1728): avc: denied { write } for pid=15515 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 193.430104][T15542] loop0: detected capacity change from 0 to 512 [ 193.453079][ T28] audit: type=1400 audit(2000000007.010:1729): avc: denied { write } for pid=15547 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 193.489199][T15542] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 193.540688][T15542] EXT4-fs (loop0): 1 truncate cleaned up [ 193.547024][T15542] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.577979][ T28] audit: type=1400 audit(2000000007.130:1730): avc: denied { write } for pid=15538 comm="syz.0.5285" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 193.638777][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.663514][ T28] audit: type=1400 audit(2000000007.160:1731): avc: denied { setattr } for pid=15538 comm="syz.0.5285" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 193.686328][ T28] audit: type=1400 audit(2000000007.210:1732): avc: denied { create } for pid=15558 comm="syz.3.5292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 193.758906][ T28] audit: type=1400 audit(2000000007.220:1733): avc: denied { setopt } for pid=15558 comm="syz.3.5292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 193.797597][T15574] netlink: 200 bytes leftover after parsing attributes in process `syz.5.5296'. [ 193.959018][T15591] netlink: 'syz.3.5300': attribute type 10 has an invalid length. [ 194.497337][T15637] bridge0: entered allmulticast mode [ 194.607819][T15650] loop3: detected capacity change from 0 to 512 [ 194.617989][T15649] netlink: 'syz.4.5328': attribute type 12 has an invalid length. [ 194.648351][T15650] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.669763][T15655] syz.1.5331 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 194.697284][T15650] ext4 filesystem being mounted at /1106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.757946][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.874407][T15676] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 194.891619][T15676] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 194.895895][T15678] sg_write: data in/out 294912/136 bytes for SCSI command 0x0-- guessing data in; [ 194.895895][T15678] program syz.1.5341 not setting count and/or reply_len properly [ 195.104038][T15705] EXT4-fs (loop1): 1 truncate cleaned up [ 195.104639][T15705] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.191605][T15712] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.215983][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.312648][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.397298][T15740] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5360'. [ 195.784536][T15791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5383'. [ 195.805184][T15793] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 195.836980][T15797] netlink: 'syz.1.5385': attribute type 3 has an invalid length. [ 195.871844][T15799] set_capacity_and_notify: 4 callbacks suppressed [ 195.871922][T15799] loop4: detected capacity change from 0 to 512 [ 195.917298][T15799] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.969663][T15799] EXT4-fs warning (device loop4): ext4_group_extend:1861: can't shrink FS - resize aborted [ 196.007045][T15813] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5393'. [ 196.008851][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.043449][T15813] netlink: 'syz.1.5393': attribute type 1 has an invalid length. [ 196.051564][T15813] netlink: 'syz.1.5393': attribute type 2 has an invalid length. [ 196.126783][T15823] loop3: detected capacity change from 0 to 256 [ 196.151566][T15823] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 196.200710][T15823] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 196.216407][T15823] FAT-fs (loop3): Filesystem has been set read-only [ 196.345885][T15845] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5409'. [ 196.358779][T15845] netlink: 'syz.0.5409': attribute type 1 has an invalid length. [ 196.366779][T15845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5409'. [ 196.442477][T15855] usb usb8: check_ctrlrecip: process 15855 (syz.5.5414) requesting ep 01 but needs 81 [ 196.475069][T15855] usb usb8: usbfs: process 15855 (syz.5.5414) did not claim interface 0 before use [ 196.504283][T15855] vhci_hcd vhci_hcd.3: default hub control req: 020f v0002 i0001 l0 [ 196.582456][T15868] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5420'. [ 196.763407][T15892] netlink: 197344 bytes leftover after parsing attributes in process `syz.5.5432'. [ 197.158760][T15919] loop1: detected capacity change from 0 to 512 [ 197.250722][T15919] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.288274][T15919] ext4 filesystem being mounted at /1070/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.313774][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.416621][T15944] loop0: detected capacity change from 0 to 256 [ 197.447339][T15947] loop5: detected capacity change from 0 to 256 [ 197.543615][T15945] loop4: detected capacity change from 0 to 8192 [ 197.577476][T15957] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5462'. [ 197.601492][T15945] loop4: p2 p3 p4 < > [ 197.619537][T15945] loop4: partition table partially beyond EOD, truncated [ 197.635653][T15945] loop4: p2 size 590592 extends beyond EOD, truncated [ 197.645070][T15945] loop4: p3 start 4294967295 is beyond EOD, truncated [ 197.674033][T15945] loop4: p4 start 117440516 is beyond EOD, truncated [ 197.690686][ T28] kauditd_printk_skb: 109 callbacks suppressed [ 197.690736][ T28] audit: type=1400 audit(2000000011.250:1843): avc: denied { mounton } for pid=15966 comm="syz.0.5468" path="/1108/file1" dev="tmpfs" ino=5660 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 197.824845][T15985] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5476'. [ 197.904634][ T28] audit: type=1400 audit(2000000011.460:1844): avc: denied { watch watch_reads } for pid=15993 comm="syz.4.5480" path="/1109" dev="tmpfs" ino=5670 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 197.949107][ T4564] udevd[4564]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 198.046055][T16011] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5489'. [ 198.055362][T16011] IPv6: Can't replace route, no match found [ 198.067224][T16012] loop0: detected capacity change from 0 to 512 [ 198.083480][ T28] audit: type=1400 audit(2000000011.640:1845): avc: denied { read } for pid=16014 comm="syz.5.5491" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 198.108389][T16012] EXT4-fs: inline encryption not supported [ 198.138792][T16020] smc: net device ip6_vti0 applied user defined pnetid SYZ2 [ 198.143652][T16012] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 198.156005][T16022] validate_nla: 7 callbacks suppressed [ 198.156023][T16022] netlink: 'syz.4.5493': attribute type 2 has an invalid length. [ 198.200136][T16012] EXT4-fs (loop0): 1 truncate cleaned up [ 198.206885][T16012] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.240141][T16029] loop1: detected capacity change from 0 to 1024 [ 198.249634][T16029] EXT4-fs: Ignoring removed bh option [ 198.277404][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.297229][T16029] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.331147][T16039] SELinux: Context system_u:object_r:fsa is not valid (left unmapped). [ 198.332490][ T28] audit: type=1400 audit(2000000011.890:1846): avc: denied { mac_admin } for pid=16036 comm="syz.5.5501" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 198.361840][ T28] audit: type=1400 audit(2000000011.920:1847): avc: denied { relabelto } for pid=16036 comm="syz.5.5501" name="980" dev="tmpfs" ino=5022 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsa" [ 198.387444][ T28] audit: type=1400 audit(2000000011.920:1848): avc: denied { associate } for pid=16036 comm="syz.5.5501" name="980" dev="tmpfs" ino=5022 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsa" [ 198.440152][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.455478][ T28] audit: type=1400 audit(2000000012.010:1849): avc: denied { write } for pid=4576 comm="syz-executor" name="980" dev="tmpfs" ino=5022 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsa" [ 198.486999][ T28] audit: type=1400 audit(2000000012.010:1850): avc: denied { remove_name } for pid=4576 comm="syz-executor" name="binderfs" dev="tmpfs" ino=5026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsa" [ 198.513881][ T28] audit: type=1400 audit(2000000012.040:1851): avc: denied { write } for pid=4576 comm="syz-executor" name="980" dev="tmpfs" ino=5022 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsa" [ 198.543607][ T28] audit: type=1400 audit(2000000012.040:1852): avc: denied { write } for pid=4576 comm="syz-executor" name="980" dev="tmpfs" ino=5022 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsa" [ 198.742048][T16077] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 198.860821][T16095] netlink: 380 bytes leftover after parsing attributes in process `syz.3.5528'. [ 198.931866][T16108] loop3: detected capacity change from 0 to 512 [ 198.946854][T16108] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 198.956683][T16108] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 198.965048][T16108] EXT4-fs (loop3): orphan cleanup on readonly fs [ 198.973260][T16108] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #13: comm syz.3.5533: iget: bad i_size value: 12154761577498 [ 198.987948][T16108] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 198.988113][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 199.003793][ C0] EXT4-fs (loop3): initial error at time 2000000012: ext4_orphan_get:1399: inode 13 [ 199.013247][ C0] EXT4-fs (loop3): last error at time 2000000012: ext4_orphan_get:1399: inode 13 [ 199.022788][T16108] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.5533: couldn't read orphan inode 13 (err -117) [ 199.034748][T16108] loop3: lost filesystem error report for type 5 error -117 [ 199.035458][T16108] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 199.074498][T16108] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.5533: dx entry: limit 65535 != root limit 120 [ 199.100316][T16108] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.5533: Corrupt directory, running e2fsck is recommended [ 199.157670][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.228775][T16126] loop1: detected capacity change from 0 to 512 [ 199.248467][T16126] EXT4-fs (loop1): 1 truncate cleaned up [ 199.269995][T16133] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5544'. [ 199.270550][T16126] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.326928][T16126] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.5542: bg 0: block 465: padding at end of block bitmap is not set [ 199.361890][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.492690][T16148] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.525459][T16148] ext4 filesystem being mounted at /1117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.565720][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.663368][T16151] loop3: p2 p3 p4 < > [ 199.668786][T16151] loop3: partition table partially beyond EOD, truncated [ 199.684169][T16151] loop3: p2 size 590592 extends beyond EOD, truncated [ 199.703980][T16151] loop3: p3 start 4294967295 is beyond EOD, truncated [ 199.726598][T16151] loop3: p4 start 117440516 is beyond EOD, truncated [ 199.782844][ T4564] udevd[4564]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 199.895524][T16192] EXT4-fs: Ignoring removed i_version option [ 199.931842][T16192] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.945784][T16192] ext4 filesystem being mounted at /1098/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.004865][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.161987][T16215] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.180015][T16215] ext4 filesystem being mounted at /1101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.237571][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.291986][ T2980] ================================================================== [ 200.300151][ T2980] BUG: KCSAN: data-race in d_make_discardable / do_readlinkat [ 200.307678][ T2980] [ 200.310031][ T2980] write to 0xffff8881075a9540 of 4 bytes by task 4792 on cpu 1: [ 200.317677][ T2980] d_make_discardable+0x4f/0x90 [ 200.322557][ T2980] simple_unlink+0x68/0x80 [ 200.326998][ T2980] shmem_unlink+0x12d/0x140 [ 200.331533][ T2980] vfs_unlink+0x1c3/0x490 [ 200.335885][ T2980] filename_unlinkat+0x1dc/0x410 [ 200.340857][ T2980] __se_sys_unlink+0x2b/0xe0 [ 200.345479][ T2980] __x64_sys_unlink+0x1f/0x30 [ 200.350182][ T2980] x64_sys_call+0x2eb6/0x3020 [ 200.354886][ T2980] do_syscall_64+0x136/0x3c0 [ 200.359513][ T2980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.365431][ T2980] [ 200.367769][ T2980] read to 0xffff8881075a9540 of 4 bytes by task 2980 on cpu 0: [ 200.375333][ T2980] do_readlinkat+0xa0/0x2f0 [ 200.379868][ T2980] __x64_sys_readlink+0x47/0x60 [ 200.384752][ T2980] x64_sys_call+0x2b51/0x3020 [ 200.389468][ T2980] do_syscall_64+0x136/0x3c0 [ 200.394096][ T2980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.400012][ T2980] [ 200.402355][ T2980] value changed: 0x08300080 -> 0x00300180 [ 200.408103][ T2980] [ 200.410441][ T2980] Reported by Kernel Concurrency Sanitizer on: [ 200.416627][ T2980] CPU: 0 UID: 0 PID: 2980 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(lazy) [ 200.427076][ T2980] Tainted: [W]=WARN [ 200.431074][ T2980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 200.441152][ T2980] ==================================================================