last executing test programs: 10.436388069s ago: executing program 3 (id=6530): r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x5}, 0x10) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff02000000000000", 0x1e5) 10.409430492s ago: executing program 3 (id=6531): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000300)=0xffffffff, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 10.394871283s ago: executing program 3 (id=6532): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001a000100000000000000000002000000000000000000000008000100e000000108000300", @ANYRES32=r1], 0x34}}, 0x0) 10.334989058s ago: executing program 3 (id=6533): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 10.334575798s ago: executing program 3 (id=6535): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x26e1, 0x0) 10.316538269s ago: executing program 3 (id=6536): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@assoc_value, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value, &(0x7f00000000c0)=0x8) 4.615799041s ago: executing program 1 (id=6609): futex(&(0x7f000000cffc), 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x1, 0x10b, 0x1, 0x0, &(0x7f0000000040), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000000)={0x0, 0x989680}, &(0x7f0000048000), 0x0) 4.333536144s ago: executing program 4 (id=6620): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) lstat(0x0, 0x0) 4.282134159s ago: executing program 0 (id=6623): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r0}, 0x18) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 235.60083ms ago: executing program 4 (id=6625): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000003201"], 0x138) 235.4845ms ago: executing program 1 (id=6626): pipe(&(0x7f0000000600)={0xffffffffffffffff}) r1 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r1, r1, 0x0, r0, r0) 235.37142ms ago: executing program 2 (id=6627): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000100)=0x5, 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f00000002c0)=@hci={0x1f, 0x3, 0x3}, 0x80, 0x0}, 0x9cdc2384056b48b8) 235.26019ms ago: executing program 0 (id=6628): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, &(0x7f00000002c0)=""/109, 0x6d, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000180)) 235.14201ms ago: executing program 2 (id=6629): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockname(r0, 0x0, 0x0) 208.448443ms ago: executing program 4 (id=6630): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x173) write$binfmt_elf64(r0, &(0x7f0000000400)=ANY=[], 0x9a) truncate(&(0x7f0000000000)='./file1\x00', 0x7) 193.513084ms ago: executing program 1 (id=6631): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe04, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) ftruncate(0xffffffffffffffff, 0x7) 193.271934ms ago: executing program 2 (id=6632): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000080), 0x4) sendmmsg$unix(r0, &(0x7f0000001900)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@abs={0x1}, 0x6e, &(0x7f00000014c0)=[{&(0x7f0000000180)="230d6a3fd6689c721561a3ffc4f21184c2ec4a86a7477a97c5fcae07b93ee162b18c58b24452cf7ccb55abffa52e78cfb71dfc115c59133970ef899e8f60e6bf5715fd52c36d3b0286f97efbc655b4ae267b64411989584dc0a30e7ffb081f58e226d607ce06accd97e809c51ebae802256e5298ada33070e7cba9acf3", 0x7d}, {&(0x7f0000000200)="77b131ab3bd44b857b3d14a198b7139fc66100771c33745b2371577e80182b30e99b96d9b03ac4fbd259017ea5c58a118485ffc80579e6f6b7e077fbc696c6ea0f2fb5d757bd0cec8febc0e6be8398ffef288ded8c39b449953b8ef4e2a2dcc1f47ac08ee97c8f991ab899b276cc9a511a17a22bd6b8cfe756b2c28f536d30e9b028dd3062075b9a8bd7d98672030d2ff6ff4a01f668285d3c95ce", 0x9b}, {&(0x7f00000002c0)="a88509b234416266033c5ff4b326ae12715c0e2bc4f1c2b32e182b1e12456c3a17e1589700ff4dfc115feda82187ff896d58adf448d4cefc6aa8fb687fdc262c19916d18afcfb67ca80fc4b1956d578ced759d3cd274bc21000d65a8ac95f5f75c747b1baf5a69dd154886859c5a1d0b6b09620309ffc4ad11d3f57035dd15a925136b52d2a1da79f62abdf234922071747632afa6b932ff96a715c57454d90adc94b2a7036ca4abb84dba3879df42a21d942dce8ae633c070", 0xb9}, {&(0x7f0000000380)="6e2a84960bb56a93793f91aa7741bed2eb73be41b179a6b4202415e3b3ec74b03d855d91", 0x24}, {&(0x7f00000003c0)="4528e2174af4c344c497a4", 0xb}, {&(0x7f0000001980)="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", 0xfe1}], 0x6}}], 0x2, 0x0) 179.290905ms ago: executing program 0 (id=6633): r0 = syz_io_uring_setup(0x1e36, &(0x7f00000006c0)={0x0, 0x0, 0x1, 0x0, 0x177}, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) io_uring_enter(r0, 0x219, 0x0, 0x7, 0x0, 0x0) 142.119529ms ago: executing program 4 (id=6634): unshare(0x20000400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r0, 0x50, 0x0}, 0x10) 141.743629ms ago: executing program 2 (id=6635): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 127.05097ms ago: executing program 0 (id=6636): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b100b4ab50a", @ANYRES32, @ANYRES8=r0], 0xfe33) 126.72857ms ago: executing program 1 (id=6637): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/address_bits', 0x0, 0x0) getdents(r0, 0x0, 0x0) 92.300103ms ago: executing program 4 (id=6638): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x9a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0) 92.006382ms ago: executing program 2 (id=6639): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000001900fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @empty=0xe0000001}, {0x0, 0x17c1, 0x8}}}}}, 0x0) 48.362906ms ago: executing program 4 (id=6640): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) ioctl$TIOCSSOFTCAR(r0, 0x5432, 0x0) 47.925446ms ago: executing program 0 (id=6641): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x9) 28.845898ms ago: executing program 1 (id=6642): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockname(r0, 0x0, 0x0) 525.33µs ago: executing program 2 (id=6643): unshare(0x68040200) r0 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]}, 0x2a8) 326.2µs ago: executing program 0 (id=6644): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) write$cgroup_subtree(r0, 0x0, 0x0) 0s ago: executing program 1 (id=6645): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x9a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbff02000000000000000000000000000100004e22006490"], 0x0) kernel console output (not intermixed with test programs): t sctp_sack_info instead [ 103.129904][T12791] loop3: detected capacity change from 0 to 128 [ 103.242878][T12822] IPVS: Unknown mcast interface: [ 103.250045][T12824] loop1: detected capacity change from 0 to 764 [ 103.263682][T12824] rock: directory entry would overflow storage [ 103.269961][T12824] rock: sig=0x4f50, size=4, remaining=3 [ 103.275608][T12824] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 103.362651][T12843] loop4: detected capacity change from 0 to 128 [ 103.369973][T12843] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 103.383793][T12843] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 103.429631][T12854] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12854 comm=syz.1.4333 [ 103.519799][T12873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4342'. [ 103.546365][T12875] usb usb8: usbfs: process 12875 (syz.1.4344) did not claim interface 0 before use [ 103.565458][T12879] loop3: detected capacity change from 0 to 4096 [ 103.576740][T12879] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.610668][T12885] bpf: Bad value for 'uid' [ 103.631592][ T3270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.724232][T12916] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4363'. [ 103.807493][T12935] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4370'. [ 103.942574][T12951] loop1: detected capacity change from 0 to 8192 [ 103.957436][T12951] syz.1.4381: attempt to access beyond end of device [ 103.957436][T12951] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 103.971029][T12951] Buffer I/O error on dev loop1, logical block 57847, async page read [ 103.985469][T12951] syz.1.4381: attempt to access beyond end of device [ 103.985469][T12951] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 103.999018][T12951] Buffer I/O error on dev loop1, logical block 57847, async page read [ 103.999326][T12951] syz.1.4381: attempt to access beyond end of device [ 103.999326][T12951] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 103.999357][T12951] Buffer I/O error on dev loop1, logical block 57847, async page read [ 104.000750][T12951] syz.1.4381: attempt to access beyond end of device [ 104.000750][T12951] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 104.000828][T12951] Buffer I/O error on dev loop1, logical block 57847, async page read [ 104.050960][T12975] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 104.131563][T12991] loop0: detected capacity change from 0 to 512 [ 104.149776][T12991] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.164088][T12991] ext4 filesystem being mounted at /869/control supports timestamps until 2038-01-19 (0x7fffffff) [ 104.178428][T12991] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 3: comm syz.0.4400: path /869/control: bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 104.215380][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 104.215399][ T29] audit: type=1326 audit(1729100844.757:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12999 comm="syz.1.4403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1ce1dff9 code=0x7ffc0000 [ 104.245066][ T29] audit: type=1326 audit(1729100844.757:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12999 comm="syz.1.4403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1ce1dff9 code=0x7ffc0000 [ 104.268721][ T29] audit: type=1326 audit(1729100844.757:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12999 comm="syz.1.4403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f6a1ce1dff9 code=0x7ffc0000 [ 104.292289][ T29] audit: type=1326 audit(1729100844.757:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12999 comm="syz.1.4403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1ce1dff9 code=0x7ffc0000 [ 104.315878][ T29] audit: type=1326 audit(1729100844.757:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12999 comm="syz.1.4403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1ce1dff9 code=0x7ffc0000 [ 104.345878][ T3268] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.548894][T13051] loop1: detected capacity change from 0 to 1024 [ 104.567101][T13051] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.579301][T13051] ext4 filesystem being mounted at /964/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.587424][T13058] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4429'. [ 104.625231][T13060] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.631492][ T3265] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.682314][T13060] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.703753][ T29] audit: type=1326 audit(1729100845.247:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13073 comm="syz.1.4437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1ce1dff9 code=0x7ffc0000 [ 104.729454][ T29] audit: type=1326 audit(1729100845.277:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13073 comm="syz.1.4437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1ce1dff9 code=0x7ffc0000 [ 104.773406][ T29] audit: type=1326 audit(1729100845.277:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13073 comm="syz.1.4437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f6a1ce1dff9 code=0x7ffc0000 [ 104.797171][ T29] audit: type=1326 audit(1729100845.277:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13073 comm="syz.1.4437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1ce1dff9 code=0x7ffc0000 [ 104.820775][ T29] audit: type=1326 audit(1729100845.277:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13073 comm="syz.1.4437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f6a1ce1dff9 code=0x7ffc0000 [ 104.847961][T13060] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.859459][T13087] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 104.866750][T13087] IPv6: NLM_F_CREATE should be set when creating new route [ 104.874014][T13087] IPv6: NLM_F_CREATE should be set when creating new route [ 104.900425][T13060] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.953849][T13060] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.967048][T13060] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.978514][T13060] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.992134][T13060] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.113820][T13117] loop4: detected capacity change from 0 to 1024 [ 112.121608][T13118] loop3: detected capacity change from 0 to 128 [ 112.128302][T13118] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 112.150890][T13118] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 112.151700][T13117] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 112.187043][T13117] JBD2: no valid journal superblock found [ 112.192825][T13117] EXT4-fs (loop4): Could not load journal inode [ 112.271712][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 112.271728][ T29] audit: type=1400 audit(1729100852.817:1014): avc: denied { ioctl } for pid=13138 comm="syz.4.4465" path="socket:[36183]" dev="sockfs" ino=36183 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 112.361444][T13140] loop3: detected capacity change from 0 to 8192 [ 112.374253][T13150] loop0: detected capacity change from 0 to 2048 [ 112.407914][T13119] chnl_net:caif_netlink_parms(): no params data found [ 112.439822][T13150] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.457446][ T29] audit: type=1400 audit(1729100853.007:1015): avc: denied { read } for pid=13146 comm="syz.0.4468" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 112.482125][ T3268] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.510999][T13172] netlink: 'syz.0.4476': attribute type 29 has an invalid length. [ 112.518932][T13172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4476'. [ 112.542361][T13119] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.549540][T13119] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.565829][T13119] bridge_slave_0: entered allmulticast mode [ 112.572781][T13119] bridge_slave_0: entered promiscuous mode [ 112.583452][T13181] netlink: 'syz.0.4476': attribute type 29 has an invalid length. [ 112.591469][T13181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4476'. [ 112.604139][T13119] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.611374][T13119] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.621108][T13119] bridge_slave_1: entered allmulticast mode [ 112.647264][T13119] bridge_slave_1: entered promiscuous mode [ 112.653489][T13191] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 112.680264][T13119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.690218][T13191] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 112.704010][T13119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.704110][T13197] loop4: detected capacity change from 0 to 512 [ 112.725082][T13197] EXT4-fs: Ignoring removed nomblk_io_submit option [ 112.733166][T13197] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 112.749188][T13197] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a85ec028, mo2=0002] [ 112.750669][T13119] team0: Port device team_slave_0 added [ 112.757288][T13197] System zones: 0-2, 18-18, 34-34 [ 112.768301][T13197] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1138: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 112.773138][T13119] team0: Port device team_slave_1 added [ 112.792005][T13197] EXT4-fs (loop4): 1 truncate cleaned up [ 112.798384][T13197] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.813006][T13119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.820088][T13119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.846128][T13119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.858437][ T3271] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.858763][T13119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.874450][T13119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.900448][T13119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.931027][T13119] hsr_slave_0: entered promiscuous mode [ 112.937300][T13119] hsr_slave_1: entered promiscuous mode [ 112.943553][T13119] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.951271][T13119] Cannot create hsr debugfs directory [ 112.991418][T13223] loop1: detected capacity change from 0 to 512 [ 113.007607][T13223] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.4500: attempt to clear invalid blocks 1 len 1 [ 113.023481][T13223] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4500: bg 0: block 343: padding at end of block bitmap is not set [ 113.039596][T13223] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 113.049341][T13223] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.4500: invalid indirect mapped block 1819239214 (level 0) [ 113.070239][T13223] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.4500: invalid indirect mapped block 1819239214 (level 1) [ 113.088552][T13223] EXT4-fs (loop1): 1 truncate cleaned up [ 113.093566][T13119] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.096022][T13223] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.141130][T13223] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4500'. [ 113.167203][ T3265] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.218200][T13119] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.235025][T13251] netlink: 'syz.0.4513': attribute type 10 has an invalid length. [ 113.278926][T13119] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.294404][T13257] loop1: detected capacity change from 0 to 764 [ 113.301492][T13257] rock: directory entry would overflow storage [ 113.307755][T13257] rock: sig=0x4654, size=5, remaining=4 [ 113.370469][T13269] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4522'. [ 113.408361][T13119] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.429833][T13276] loop0: detected capacity change from 0 to 512 [ 113.450133][T13276] EXT4-fs error (device loop0): __ext4_iget:4952: inode #11: block 16: comm syz.0.4526: invalid block [ 113.467535][T13276] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.4526: couldn't read orphan inode 11 (err -117) [ 113.481633][T13276] EXT4-fs (loop0): 1 truncate cleaned up [ 113.487856][T13276] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.539117][T13119] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 113.565700][T13119] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 113.593952][T13119] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 113.609090][ T3268] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.626616][T13119] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 113.657882][ T29] audit: type=1400 audit(1729100854.207:1016): avc: denied { getattr } for pid=13305 comm="syz.3.4542" name="[io_uring]" dev="anon_inodefs" ino=35412 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 113.680277][T13119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.696251][T13119] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.720445][T13312] loop0: detected capacity change from 0 to 1024 [ 113.733725][T13312] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 113.746959][ T336] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.754059][ T336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.767358][T13312] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 113.789024][T13119] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 113.799574][T13119] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 113.815145][ T336] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.822364][ T336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.835816][T13312] EXT4-fs (loop0): invalid journal inode [ 113.841653][T13312] EXT4-fs (loop0): can't get journal size [ 113.856686][T13312] EXT4-fs error (device loop0): ext4_protect_reserved_inode:182: inode #2: comm syz.0.4538: blocks 48-48 from inode overlap system zone [ 113.878662][T13312] EXT4-fs (loop0): failed to initialize system zone (-117) [ 113.882175][T13119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.904558][T13312] EXT4-fs (loop0): mount failed [ 113.974778][T13119] veth0_vlan: entered promiscuous mode [ 114.000645][T13119] veth1_vlan: entered promiscuous mode [ 114.016017][T13354] tipc: MTU too low for tipc bearer [ 114.050208][T13119] veth0_macvtap: entered promiscuous mode [ 114.077744][T13119] veth1_macvtap: entered promiscuous mode [ 114.103939][T13119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.113002][T13373] loop4: detected capacity change from 0 to 512 [ 114.114527][T13119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.130330][T13375] atomic_op ffff888113ec4d28 conn xmit_atomic 0000000000000000 [ 114.130568][T13119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.148605][T13119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.158459][T13119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.169053][T13119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.178940][T13119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.189504][T13119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.199473][T13119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.200751][T13379] loop0: detected capacity change from 0 to 512 [ 114.209953][T13119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.227775][T13373] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 114.227986][T13379] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 114.248096][T13379] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 114.258920][T13373] EXT4-fs (loop4): 1 truncate cleaned up [ 114.258940][T13379] EXT4-fs (loop0): group descriptors corrupted! [ 114.264912][T13373] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.285308][T13119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.317582][T13119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.328185][T13119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.338136][T13119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.348693][T13119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.358679][T13119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.369354][T13119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.379210][T13119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.389703][T13119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.399567][T13119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.410212][T13119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.422470][T13119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.431192][T13119] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.440020][T13119] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.448806][T13119] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.457857][T13119] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.480921][T13395] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4576'. [ 114.553306][T13405] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 114.777875][T13426] netlink: 'syz.3.4590': attribute type 29 has an invalid length. [ 114.818028][T13426] netlink: 'syz.3.4590': attribute type 29 has an invalid length. [ 114.829838][T13427] loop1: detected capacity change from 0 to 2048 [ 114.850337][T13417] loop0: detected capacity change from 0 to 8192 [ 114.874926][ T29] audit: type=1400 audit(1729100855.417:1017): avc: denied { lock } for pid=13429 comm="syz.2.4593" path="socket:[36966]" dev="sockfs" ino=36966 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 114.927623][T13427] loop1: p2 < > p4 [ 114.942924][T13427] loop1: p4 size 8192 extends beyond EOD, truncated [ 114.950427][T13417] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 114.959129][T13417] FAT-fs (loop0): Filesystem has been set read-only [ 114.981589][ T3271] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.014512][T13436] loop3: detected capacity change from 0 to 4096 [ 115.042861][T13436] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.070471][T13447] loop0: detected capacity change from 0 to 512 [ 115.074125][T13445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4600'. [ 115.090465][T13447] EXT4-fs (loop0): orphan cleanup on readonly fs [ 115.098080][T13447] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #4: comm syz.0.4598: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 115.116124][T13452] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4603'. [ 115.127743][ T3270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.140439][T13447] EXT4-fs error (device loop0): ext4_quota_enable:7056: comm syz.0.4598: Bad quota inode: 4, type: 1 [ 115.152204][T13447] EXT4-fs warning (device loop0): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 115.175504][T13447] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 115.182691][T13447] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 115.207944][T13456] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4605'. [ 115.217049][T13456] 0ªX¹¦À: renamed from caif0 [ 115.222283][T13447] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 115.263131][T13456] 0ªX¹¦À: entered allmulticast mode [ 115.268744][T13456] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 115.302980][T13477] loop2: detected capacity change from 0 to 512 [ 115.329831][T13482] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4617'. [ 115.339013][T13482] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4617'. [ 115.350355][T13477] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.368113][T13477] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.419068][T13119] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.419791][T13496] netlink: 'syz.4.4623': attribute type 10 has an invalid length. [ 115.436091][T13496] netlink: 'syz.4.4623': attribute type 19 has an invalid length. [ 115.448357][ T29] audit: type=1400 audit(1729100855.997:1018): avc: denied { recv } for pid=13494 comm="syz.4.4623" saddr=10.128.0.163 src=30030 daddr=10.128.0.210 dest=52424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 115.474008][ T29] audit: type=1400 audit(1729100855.997:1019): avc: denied { read write } for pid=3265 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 115.482527][T13497] loop3: detected capacity change from 0 to 4096 [ 115.498241][ T29] audit: type=1400 audit(1729100855.997:1020): avc: denied { open } for pid=3265 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 115.498280][ T29] audit: type=1400 audit(1729100855.997:1021): avc: denied { ioctl } for pid=3265 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 115.554450][ T29] audit: type=1400 audit(1729100856.067:1022): avc: denied { mounton } for pid=13495 comm="syz.3.4624" path="/895/bus" dev="tmpfs" ino=4593 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 115.580810][T13497] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.599393][ T29] audit: type=1400 audit(1729100856.147:1023): avc: denied { mount } for pid=13495 comm="syz.3.4624" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 115.645793][ T3270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.674530][T13516] loop3: detected capacity change from 0 to 128 [ 115.695973][T13510] netlink: 'syz.1.4630': attribute type 29 has an invalid length. [ 115.704792][T13510] netlink: 'syz.1.4630': attribute type 29 has an invalid length. [ 115.828517][T13536] loop2: detected capacity change from 0 to 256 [ 115.836189][T13536] FAT-fs (loop2): Directory bread(block 1285) failed [ 115.857762][T13536] FAT-fs (loop2): Directory bread(block 1285) failed [ 115.884981][T13543] loop4: detected capacity change from 0 to 2048 [ 115.893513][T13543] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 115.902435][T13447] EXT4-fs warning (device loop0): ext4_multi_mount_protect:332: MMP startup interrupted, failing mount [ 115.902435][T13447] [ 115.929905][ T3268] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.204920][T13610] loop2: detected capacity change from 0 to 1024 [ 116.212706][T13610] EXT4-fs: Ignoring removed orlov option [ 116.218656][T13610] EXT4-fs: Ignoring removed nomblk_io_submit option [ 116.233860][T13607] loop1: detected capacity change from 0 to 512 [ 116.251320][T13607] EXT4-fs warning (device loop1): ext4_enable_quotas:7097: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 116.266494][T13607] EXT4-fs (loop1): mount failed [ 116.268133][T13610] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e018, mo2=0002] [ 116.282744][T13610] System zones: 0-1, 3-12 [ 116.288683][T13610] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.310345][T13610] VFS: Lookup of 'file0' in ext4 loop2 would have caused loop [ 116.337879][T13119] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.473659][T13656] loop0: detected capacity change from 0 to 512 [ 116.511394][T13656] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.524308][T13656] ext4 filesystem being mounted at /932/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.549754][ T3268] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.563150][T13673] loop2: detected capacity change from 0 to 512 [ 116.569901][T13673] journal_path: Lookup failure for './file1' [ 116.575996][T13673] EXT4-fs: error: could not find journal device path [ 116.679333][T13693] cgroup: name respecified [ 116.771040][T13712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.795958][T13712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.897580][T13732] loop4: detected capacity change from 0 to 2048 [ 116.902504][T13737] program syz.1.4736 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 116.930205][T13743] netlink: 'syz.1.4739': attribute type 29 has an invalid length. [ 116.953095][T13732] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.984604][ T3271] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.049824][T13765] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13765 comm=syz.3.4747 [ 117.063305][T13768] loop2: detected capacity change from 0 to 1024 [ 117.101397][T13768] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.116177][T13775] loop4: detected capacity change from 0 to 1024 [ 117.134866][T13775] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.138962][T13778] loop1: detected capacity change from 0 to 512 [ 117.154043][T13778] EXT4-fs: Ignoring removed mblk_io_submit option [ 117.162430][ T3271] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.171621][T13778] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 117.182233][T13119] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.195298][T13778] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 117.205547][T13778] System zones: 1-12 [ 117.216748][T13778] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.4755: corrupted in-inode xattr: e_value size too large [ 117.274174][T13778] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.4755: couldn't read orphan inode 15 (err -117) [ 117.308413][T13778] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.354568][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 117.354588][ T29] audit: type=1400 audit(1729100857.887:1118): avc: denied { read } for pid=13811 comm="syz.4.4769" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 117.384181][ T29] audit: type=1400 audit(1729100857.887:1119): avc: denied { open } for pid=13811 comm="syz.4.4769" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 117.408027][ T29] audit: type=1400 audit(1729100857.887:1120): avc: denied { ioctl } for pid=13811 comm="syz.4.4769" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 117.433553][ T29] audit: type=1400 audit(1729100857.897:1121): avc: denied { cpu } for pid=13809 comm="syz.2.4771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 117.453189][ T29] audit: type=1400 audit(1729100857.977:1122): avc: denied { name_bind } for pid=13822 comm="syz.0.4776" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 117.454261][ T3265] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.475143][ T29] audit: type=1400 audit(1729100857.977:1123): avc: denied { node_bind } for pid=13822 comm="syz.0.4776" saddr=fc02::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 117.530360][ T29] audit: type=1400 audit(1729100858.077:1124): avc: denied { write } for pid=13827 comm="syz.4.4779" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 117.530709][T13830] Dead loop on virtual device ip6_vti0, fix it urgently! [ 117.601573][T13840] __nla_validate_parse: 10 callbacks suppressed [ 117.601590][T13840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4783'. [ 117.616914][T13840] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4783'. [ 117.621195][ T29] audit: type=1400 audit(1729100858.167:1125): avc: denied { read append } for pid=13842 comm="syz.2.4784" name="ppp" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 117.625916][T13840] validate_nla: 2 callbacks suppressed [ 117.625931][T13840] netlink: 'syz.4.4783': attribute type 15 has an invalid length. [ 117.679715][T13847] tipc: Enabling of bearer rejected, failed to enable media [ 117.716145][ T29] audit: type=1400 audit(1729100858.177:1126): avc: denied { ioctl open } for pid=13842 comm="syz.2.4784" path="/dev/ppp" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 117.740045][ T29] audit: type=1400 audit(1729100858.257:1127): avc: denied { map } for pid=13853 comm="syz.2.4790" path="socket:[38356]" dev="sockfs" ino=38356 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 117.813602][T13872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.823989][T13872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.833809][T13875] netlink: 'syz.1.4800': attribute type 4 has an invalid length. [ 117.833828][T13875] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4800'. [ 117.873545][T13879] loop0: detected capacity change from 0 to 128 [ 117.873976][T13879] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 117.932364][T13888] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4806'. [ 118.305915][T13944] netlink: 'syz.3.4832': attribute type 4 has an invalid length. [ 118.313777][T13944] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.4832'. [ 118.359961][T13950] program syz.4.4835 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 118.385961][T13954] netlink: 'syz.3.4837': attribute type 4 has an invalid length. [ 118.393767][T13954] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4837'. [ 118.404834][T13958] program syz.4.4839 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 118.480361][T13972] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4846'. [ 118.489418][T13972] netlink: 184 bytes leftover after parsing attributes in process `syz.4.4846'. [ 118.498575][T13972] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4846'. [ 118.834613][T14023] ieee802154 phy0 wpan0: encryption failed: -22 [ 119.082038][T14069] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 119.362512][T14087] loop2: detected capacity change from 0 to 128 [ 119.841644][T14149] loop4: detected capacity change from 0 to 2048 [ 119.850515][T14149] EXT4-fs: Ignoring removed mblk_io_submit option [ 119.879095][T14149] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.919119][T14158] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.933339][ T3271] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.960597][T14164] loop4: detected capacity change from 0 to 1024 [ 119.974480][T14158] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.986924][T14164] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.008134][T14164] EXT4-fs (loop4): resizing filesystem from 512 to 0 blocks [ 120.015589][T14164] EXT4-fs warning (device loop4): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 120.039219][T14158] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.057524][ T3271] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.080755][T14158] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.152502][T14158] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.167590][T14158] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.182521][T14158] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.198253][T14158] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.308293][T14209] loop0: detected capacity change from 0 to 4096 [ 120.315207][T14209] EXT4-fs: Ignoring removed nobh option [ 120.323607][T14220] loop3: detected capacity change from 0 to 1024 [ 120.330466][T14220] EXT4-fs: Ignoring removed orlov option [ 120.336234][T14220] EXT4-fs: Ignoring removed nomblk_io_submit option [ 120.345167][T14209] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.353404][T14220] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.362770][T14209] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.4954: Failed to acquire dquot type 1 [ 120.384874][ T3270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.410118][ T3268] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.186435][T14293] loop3: detected capacity change from 0 to 256 [ 121.194466][T14293] FAT-fs (loop3): Directory bread(block 1285) failed [ 121.254381][T14301] random: crng reseeded on system resumption [ 121.256801][T14303] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4995'. [ 121.371101][T14313] pimreg: entered allmulticast mode [ 121.382749][T14313] pimreg: left allmulticast mode [ 121.383401][T14315] atomic_op ffff8881782a6928 conn xmit_atomic 0000000000000000 [ 121.598803][T14361] loop2: detected capacity change from 0 to 2048 [ 121.627839][T14361] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.663527][T14377] tmpfs: Bad value for 'size' [ 121.695576][T13119] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.826258][T14417] tipc: Enabled bearer , priority 0 [ 121.943657][T14435] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.954146][T14435] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.019248][T14435] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.029652][T14435] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.070435][T14435] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.080919][T14435] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.131767][T14435] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.142173][T14435] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.208937][T14435] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.209070][T14490] loop1: detected capacity change from 0 to 1024 [ 122.217247][T14435] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.240677][T14490] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.241236][T14435] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.261071][T14435] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.274061][T14435] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.282337][T14435] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.293870][T14435] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.302135][T14435] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.321297][ T3265] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.368629][T14504] loop4: detected capacity change from 0 to 128 [ 122.438716][T14520] loop3: detected capacity change from 0 to 512 [ 122.451047][T14520] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 122.464043][T14520] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 122.480854][T14520] EXT4-fs (loop3): 1 truncate cleaned up [ 122.486990][T14520] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.515561][ T3270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.521682][T14530] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.561035][T14530] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.576524][T14538] loop4: detected capacity change from 0 to 512 [ 122.582146][T14544] loop2: detected capacity change from 0 to 512 [ 122.598102][T14544] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 122.606145][T14544] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 122.614815][T14538] EXT4-fs (loop4): too many log groups per flexible block group [ 122.622569][T14538] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 122.630987][T14530] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.631293][T14544] System zones: 0-1, 15-15, 18-18, 34-34 [ 122.648635][T14538] EXT4-fs (loop4): mount failed [ 122.657932][T14544] EXT4-fs (loop2): orphan cleanup on readonly fs [ 122.664731][T14544] __quota_error: 77 callbacks suppressed [ 122.664807][T14544] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 122.681451][T14556] xt_bpf: check failed: parse error [ 122.681528][T14544] EXT4-fs warning (device loop2): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 122.701342][T14544] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 122.713234][T14530] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.724866][T14544] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.5112: bad orphan inode 16 [ 122.736998][T14544] ext4_test_bit(bit=15, block=18) = 1 [ 122.742432][T14544] is_bad_inode(inode)=0 [ 122.746645][T14544] NEXT_ORPHAN(inode)=0 [ 122.750731][T14544] max_ino=32 [ 122.754016][T14544] i_nlink=2 [ 122.759430][T14544] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 122.776961][ T29] audit: type=1400 audit(1729100863.327:1203): avc: denied { create } for pid=14567 comm="syz.4.5120" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 122.798302][ T29] audit: type=1400 audit(1729100863.327:1204): avc: denied { write } for pid=14567 comm="syz.4.5120" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 122.801259][T14544] devpts: called with bogus options [ 122.819427][ T29] audit: type=1400 audit(1729100863.327:1205): avc: denied { read } for pid=14567 comm="syz.4.5120" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 122.846076][ T29] audit: type=1400 audit(1729100863.347:1206): avc: denied { mounton } for pid=14543 comm="syz.2.5112" path="/113/file2/file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 122.869739][ T29] audit: type=1400 audit(1729100863.347:1207): avc: denied { mount } for pid=14543 comm="syz.2.5112" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 122.892002][ T29] audit: type=1400 audit(1729100863.347:1208): avc: denied { remount } for pid=14543 comm="syz.2.5112" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 122.912128][ T29] audit: type=1400 audit(1729100863.397:1209): avc: denied { unmount } for pid=13119 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 122.920965][T14530] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.944624][T14530] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.952854][T13119] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic f300, entries 1, max 4(0), depth 0(0) [ 122.957364][T14530] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.975380][T13119] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic f300, entries 1, max 4(0), depth 0(0) [ 123.008539][T14530] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.044061][T14585] __nla_validate_parse: 1 callbacks suppressed [ 123.044083][T14585] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.5130'. [ 123.059679][T14585] tc_dump_action: action bad kind [ 123.120341][ T29] audit: type=1400 audit(1729100863.667:1210): avc: denied { execute } for pid=14601 comm="syz.1.5134" name="file0" dev="tmpfs" ino=5574 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 123.143135][ T29] audit: type=1400 audit(1729100863.687:1211): avc: denied { execute_no_trans } for pid=14601 comm="syz.1.5134" path="/1085/file0" dev="tmpfs" ino=5574 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 123.379321][T14620] random: crng reseeded on system resumption [ 123.443885][T14624] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.483783][T14628] xt_TPROXY: Can be used only with -p tcp or -p udp [ 123.530863][T14624] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.558467][T14636] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5150'. [ 123.567563][T14636] netlink: 43 bytes leftover after parsing attributes in process `syz.1.5150'. [ 123.577092][T14636] netlink: 'syz.1.5150': attribute type 5 has an invalid length. [ 123.580188][T14639] loop4: detected capacity change from 0 to 512 [ 123.585021][T14636] netlink: 43 bytes leftover after parsing attributes in process `syz.1.5150'. [ 123.618192][T14639] EXT4-fs (loop4): too many log groups per flexible block group [ 123.625969][T14639] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 123.633325][T14639] EXT4-fs (loop4): mount failed [ 123.646896][T14624] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.680504][T14624] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.681494][T14655] loop1: detected capacity change from 0 to 512 [ 123.707698][T14655] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.5162: corrupted in-inode xattr: invalid ea_ino [ 123.709029][T14660] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5163'. [ 123.721514][T14655] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.5162: couldn't read orphan inode 15 (err -117) [ 123.730178][T14660] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5163'. [ 123.730199][T14660] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5163'. [ 123.770939][T14655] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.788252][T14655] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.5162: invalid indirect mapped block 234881024 (level 0) [ 123.837349][T14624] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.851358][T14624] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.856820][T14678] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 123.864852][T14624] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.889054][T14624] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.906773][T14682] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5173'. [ 124.023505][T14706] syz.4.5185[14706] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 124.023605][T14706] syz.4.5185[14706] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 124.035464][T14706] syz.4.5185[14706] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 124.063002][T14710] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.084491][T14710] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.100226][T14712] bond_slave_0: entered promiscuous mode [ 124.105950][T14712] bond_slave_1: entered promiscuous mode [ 124.114311][T14712] bond_slave_0: left promiscuous mode [ 124.119776][T14712] bond_slave_1: left promiscuous mode [ 124.129425][T14714] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5189'. [ 124.140397][T14710] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.150336][T14710] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.217193][T14710] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.227165][T14710] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.298377][T14710] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.308226][T14710] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.409070][T14758] loop4: detected capacity change from 0 to 128 [ 124.419192][T14758] ext4 filesystem being mounted at /1227/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 124.527735][ T56] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.540116][T14774] loop4: detected capacity change from 0 to 512 [ 124.554625][T14774] EXT4-fs: Ignoring removed bh option [ 124.576246][T14774] ext4 filesystem being mounted at /1230/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.588720][ T56] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.701385][ T56] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.766621][T14780] chnl_net:caif_netlink_parms(): no params data found [ 124.779120][ T56] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.816183][T14780] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.823300][T14780] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.830735][T14780] bridge_slave_0: entered allmulticast mode [ 124.837413][T14780] bridge_slave_0: entered promiscuous mode [ 124.844387][T14780] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.851548][T14780] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.858867][T14780] bridge_slave_1: entered allmulticast mode [ 124.865450][T14780] bridge_slave_1: entered promiscuous mode [ 124.885729][T14780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.896593][T14780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.920435][T14780] team0: Port device team_slave_0 added [ 124.932108][T14780] team0: Port device team_slave_1 added [ 124.946160][ T56] bridge_slave_1: left allmulticast mode [ 124.951877][ T56] bridge_slave_1: left promiscuous mode [ 124.957685][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.965618][ T56] bridge_slave_0: left allmulticast mode [ 124.971377][ T56] bridge_slave_0: left promiscuous mode [ 124.977129][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.059216][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.070188][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.080484][ T56] bond0 (unregistering): Released all slaves [ 125.096363][T14780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.103364][T14780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.129340][T14780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.140904][T14780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.147947][T14780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.173932][T14780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.192435][ T56] hsr_slave_0: left promiscuous mode [ 125.198414][ T56] hsr_slave_1: left promiscuous mode [ 125.204155][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.211763][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.219313][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.226883][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.236572][ T56] veth1_macvtap: left promiscuous mode [ 125.242065][ T56] veth0_macvtap: left promiscuous mode [ 125.247652][ T56] veth1_vlan: left promiscuous mode [ 125.252871][ T56] veth0_vlan: left promiscuous mode [ 125.339127][ T56] team0 (unregistering): Port device team_slave_1 removed [ 125.349387][ T56] team0 (unregistering): Port device team_slave_0 removed [ 125.399200][T14780] hsr_slave_0: entered promiscuous mode [ 125.405406][T14780] hsr_slave_1: entered promiscuous mode [ 125.411354][T14780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.419028][T14780] Cannot create hsr debugfs directory [ 125.490124][T14825] loop3: detected capacity change from 0 to 512 [ 125.506686][T14825] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 125.514780][T14825] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 125.522931][T14825] System zones: 0-1, 15-15, 18-18, 34-34 [ 125.528959][T14825] EXT4-fs (loop3): orphan cleanup on readonly fs [ 125.535577][T14825] EXT4-fs warning (device loop3): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 125.550228][T14825] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 125.557176][T14825] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.5235: bad orphan inode 16 [ 125.567417][T14825] ext4_test_bit(bit=15, block=18) = 1 [ 125.572839][T14825] is_bad_inode(inode)=0 [ 125.577032][T14825] NEXT_ORPHAN(inode)=0 [ 125.581100][T14825] max_ino=32 [ 125.584346][T14825] i_nlink=2 [ 125.591768][T14825] devpts: called with bogus options [ 125.605056][ T3270] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic f300, entries 1, max 4(0), depth 0(0) [ 125.622963][ T3270] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic f300, entries 1, max 4(0), depth 0(0) [ 125.689400][T13933] bridge0: port 3(syz_tun) entered disabled state [ 125.698550][T13933] syz_tun (unregistering): left allmulticast mode [ 125.705179][T13933] syz_tun (unregistering): left promiscuous mode [ 125.711715][T13933] bridge0: port 3(syz_tun) entered disabled state [ 125.749772][T14780] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 125.758181][T14780] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 125.767095][T14780] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 125.776062][T14780] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 125.818601][T14780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.825934][T14833] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5239'. [ 125.841939][T14780] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.852949][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.860268][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.871726][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.878822][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.942123][T14780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.011730][T14780] veth0_vlan: entered promiscuous mode [ 126.020582][T14780] veth1_vlan: entered promiscuous mode [ 126.036613][T14780] veth0_macvtap: entered promiscuous mode [ 126.044342][T14780] veth1_macvtap: entered promiscuous mode [ 126.055038][T14780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.065605][T14780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.075482][T14780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.085928][T14780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.095756][T14780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.106279][T14780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.116133][T14780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.126671][T14780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.136507][T14780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.146989][T14780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.158057][T14780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.166550][T14780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.177103][T14780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.186968][T14780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.197474][T14780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.207349][T14780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.217971][T14780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.228127][T14780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.238657][T14780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.248598][T14780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.259198][T14780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.270071][T14780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.281996][T14780] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.291056][T14780] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.299859][T14780] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.308588][T14780] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.399993][T14852] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 126.632671][T14881] loop4: detected capacity change from 0 to 8192 [ 126.640108][T14881] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 126.991484][T14710] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.999827][T14710] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.019165][T14710] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.027581][T14710] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.041029][T14710] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.049330][T14710] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.065343][T14710] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.073619][T14710] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.101919][T14906] loop1: detected capacity change from 0 to 512 [ 127.122167][T14913] tipc: Enabling of bearer rejected, failed to enable media [ 127.148281][T14906] ext4 filesystem being mounted at /1105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.198824][T14928] loop4: detected capacity change from 0 to 1024 [ 127.205988][T14928] EXT4-fs: Ignoring removed oldalloc option [ 127.222293][T14928] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 127.281508][T14944] loop1: detected capacity change from 0 to 256 [ 127.294096][T14944] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000001) [ 127.420133][T14969] loop0: detected capacity change from 0 to 512 [ 127.436614][T14969] EXT4-fs (loop0): too many log groups per flexible block group [ 127.444313][T14969] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 127.451184][T14969] EXT4-fs (loop0): mount failed [ 127.953855][ T28] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.957216][T14982] loop1: detected capacity change from 0 to 1024 [ 128.013295][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 128.013310][ T29] audit: type=1400 audit(1729100868.557:1237): avc: denied { audit_read } for pid=14991 comm="syz.0.5304" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 128.054689][ T28] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.128742][ T28] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.243708][ T28] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.336184][ T28] bridge_slave_1: left allmulticast mode [ 128.342033][ T28] bridge_slave_1: left promiscuous mode [ 128.347987][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.364236][ T28] bridge_slave_0: left allmulticast mode [ 128.370098][ T28] bridge_slave_0: left promiscuous mode [ 128.375803][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.447759][T15067] loop2: detected capacity change from 0 to 256 [ 128.463958][T15069] __nla_validate_parse: 1 callbacks suppressed [ 128.463979][T15069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5336'. [ 128.480915][T15067] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 128.491282][T15067] FAT-fs (loop2): Filesystem has been set read-only [ 128.502874][ T29] audit: type=1400 audit(1729100869.047:1238): avc: denied { write } for pid=15073 comm="syz.0.5339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 128.523315][ T29] audit: type=1400 audit(1729100869.047:1239): avc: denied { nlmsg_write } for pid=15073 comm="syz.0.5339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 128.553665][ T29] audit: type=1326 audit(1729100869.097:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15077 comm="syz.4.5341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feebe43dff9 code=0x7ffc0000 [ 128.571641][T15081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5343'. [ 128.578772][ T29] audit: type=1326 audit(1729100869.097:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15077 comm="syz.4.5341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feebe43dff9 code=0x7ffc0000 [ 128.609736][ T29] audit: type=1326 audit(1729100869.097:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15077 comm="syz.4.5341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feebe43dff9 code=0x7ffc0000 [ 128.624550][T15086] vhci_hcd: default hub control req: 0100 v0000 i0000 l0 [ 128.633583][ T29] audit: type=1326 audit(1729100869.097:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15077 comm="syz.4.5341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feebe43dff9 code=0x7ffc0000 [ 128.663963][ T29] audit: type=1326 audit(1729100869.097:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15077 comm="syz.4.5341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feebe43dff9 code=0x7ffc0000 [ 128.672966][T15088] netlink: 'syz.4.5346': attribute type 1 has an invalid length. [ 128.687480][ T29] audit: type=1326 audit(1729100869.097:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15077 comm="syz.4.5341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7feebe43cadf code=0x7ffc0000 [ 128.687580][ T29] audit: type=1326 audit(1729100869.097:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15077 comm="syz.4.5341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feebe43dff9 code=0x7ffc0000 [ 128.757764][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.768706][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.779330][ T28] bond0 (unregistering): Released all slaves [ 128.798109][T15055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5331'. [ 128.808528][T15082] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.818391][T15082] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.856840][T15100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.867455][T15100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.877380][T15100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.887860][T15100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.897784][T15100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.908473][T15100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.918515][T15100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.929062][T15100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.938938][T15100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.949511][T15100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.962115][T15082] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.971935][T15082] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.986625][ T28] tipc: Disabling bearer [ 128.991942][ T28] tipc: Left network mode [ 129.009343][T15112] xt_CT: You must specify a L4 protocol and not use inversions on it [ 129.011462][T15082] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.029428][T15082] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.040587][T14994] chnl_net:caif_netlink_parms(): no params data found [ 129.049568][ T28] IPVS: stopping backup sync thread 5014 ... [ 129.072727][ T28] hsr_slave_0: left promiscuous mode [ 129.078789][ T28] hsr_slave_1: left promiscuous mode [ 129.079300][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.079407][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.079796][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.079880][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.083498][T15119] loop1: detected capacity change from 0 to 164 [ 129.122958][ T28] veth1_macvtap: left promiscuous mode [ 129.128496][ T28] veth0_macvtap: left promiscuous mode [ 129.128574][ T28] veth1_vlan: left promiscuous mode [ 129.128612][ T28] veth0_vlan: left promiscuous mode [ 129.225111][T15139] loop2: detected capacity change from 0 to 128 [ 129.244411][T15137] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65522 sclass=netlink_xfrm_socket pid=15137 comm=syz.1.5369 [ 129.246656][T15139] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 129.275014][T15139] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 129.342296][ T28] team0 (unregistering): Port device team_slave_1 removed [ 129.358659][ T28] team0 (unregistering): Port device team_slave_0 removed [ 129.367934][T15156] loop1: detected capacity change from 0 to 128 [ 129.381232][T15156] ext4 filesystem being mounted at /1128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.438407][T15082] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.448280][T15082] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.485046][T14994] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.492248][T14994] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.506820][T14994] bridge_slave_0: entered allmulticast mode [ 129.513637][T14994] bridge_slave_0: entered promiscuous mode [ 129.520957][T14994] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.522798][T15172] netlink: 'syz.4.5383': attribute type 28 has an invalid length. [ 129.528102][T14994] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.543267][T14994] bridge_slave_1: entered allmulticast mode [ 129.550208][T14994] bridge_slave_1: entered promiscuous mode [ 129.589807][T14994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.612898][T14994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.663996][T14994] team0: Port device team_slave_0 added [ 129.671035][T14994] team0: Port device team_slave_1 added [ 129.706857][T14994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.713910][T14994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.739859][T14994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.751502][T14994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.758595][T14994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.784611][T14994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.830605][T14994] hsr_slave_0: entered promiscuous mode [ 129.836935][T14994] hsr_slave_1: entered promiscuous mode [ 129.845772][T14994] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 129.853351][T14994] Cannot create hsr debugfs directory [ 129.917831][T15210] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5400'. [ 129.981237][ T28] IPVS: stop unused estimator thread 0... [ 129.988714][T15218] netlink: 756 bytes leftover after parsing attributes in process `syz.2.5404'. [ 130.034692][T15225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5407'. [ 130.043599][T15227] syz.2.5408 uses obsolete (PF_INET,SOCK_PACKET) [ 130.094898][T15236] loop1: detected capacity change from 0 to 512 [ 130.108343][T15236] ext4 filesystem being mounted at /1141/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.122663][T15236] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5412'. [ 130.154695][T15247] netlink: 'syz.4.5416': attribute type 4 has an invalid length. [ 130.162610][T15247] netlink: 'syz.4.5416': attribute type 2 has an invalid length. [ 130.171946][T15249] loop2: detected capacity change from 0 to 512 [ 130.181065][T15249] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 130.194791][T15249] EXT4-fs (loop2): orphan cleanup on readonly fs [ 130.210972][T15249] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5418: bg 0: block 248: padding at end of block bitmap is not set [ 130.226813][T15249] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.5418: Failed to acquire dquot type 1 [ 130.239191][T14994] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 130.249808][T15249] EXT4-fs (loop2): 1 truncate cleaned up [ 130.257588][T14994] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 130.273794][T15260] loop4: detected capacity change from 0 to 4096 [ 130.278236][T15249] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5418'. [ 130.280830][T15260] EXT4-fs: Ignoring removed nomblk_io_submit option [ 130.300704][T14994] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 130.309801][T14994] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 130.336610][T15260] EXT4-fs error (device loop4): ext4_empty_dir:3105: inode #12: block 80: comm syz.4.5422: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 130.348168][T14994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.368839][T14994] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.378785][ T336] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.385899][T15260] EXT4-fs warning (device loop4): ext4_empty_dir:3107: inode #12: comm syz.4.5422: directory missing '..' [ 130.385938][ T336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.416659][T14994] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 130.427112][T14994] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 130.441100][ T336] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.448294][ T336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.536434][T14994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.580884][T15290] veth0_vlan: left promiscuous mode [ 130.589477][T15290] veth0_vlan: entered promiscuous mode [ 130.642021][T14994] veth0_vlan: entered promiscuous mode [ 130.652705][T14994] veth1_vlan: entered promiscuous mode [ 130.666391][T14994] veth0_macvtap: entered promiscuous mode [ 130.684526][T14994] veth1_macvtap: entered promiscuous mode [ 130.700482][T14994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.710975][T14994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.720845][T14994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.731307][T14994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.741231][T14994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.751943][T14994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.762061][T14994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.773025][T14994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.783091][T14994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.793665][T14994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.804825][T14994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.816325][T14994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.827102][T14994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.837198][T14994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.847763][T14994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.857734][T14994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.857755][T14994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.857775][T14994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.857792][T14994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.857810][T14994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.857877][T14994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.859155][T14994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.862212][T14994] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.862293][T14994] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.862330][T14994] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.862422][T14994] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.870651][T15320] loop4: detected capacity change from 0 to 2048 [ 130.990042][T15320] EXT4-fs mount: 22 callbacks suppressed [ 130.990058][T15320] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.020774][ T3271] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.061964][T15340] loop3: detected capacity change from 0 to 512 [ 131.098172][T15340] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.115525][T15340] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.132205][T15340] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #2: comm syz.3.5453: corrupted inode contents [ 131.151569][T15340] EXT4-fs error (device loop3): ext4_dirty_inode:5984: inode #2: comm syz.3.5453: mark_inode_dirty error [ 131.173060][T15359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5461'. [ 131.192352][T15340] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #2: comm syz.3.5453: corrupted inode contents [ 131.202272][T15363] loop4: detected capacity change from 0 to 256 [ 131.219805][T15363] FAT-fs (loop4): Directory bread(block 64) failed [ 131.227033][T15363] FAT-fs (loop4): Directory bread(block 65) failed [ 131.233676][T15340] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.5453: mark_inode_dirty error [ 131.244888][T15363] FAT-fs (loop4): Directory bread(block 66) failed [ 131.244919][T15363] FAT-fs (loop4): Directory bread(block 67) failed [ 131.244948][T15363] FAT-fs (loop4): Directory bread(block 68) failed [ 131.261827][T15368] syz.2.5467[15368] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 131.265194][T15363] FAT-fs (loop4): Directory bread(block 69) failed [ 131.270898][T15368] syz.2.5467[15368] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 131.278832][T15363] FAT-fs (loop4): Directory bread(block 70) failed [ 131.290779][T15368] syz.2.5467[15368] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 131.295637][T15363] FAT-fs (loop4): Directory bread(block 71) failed [ 131.320327][T15363] FAT-fs (loop4): Directory bread(block 72) failed [ 131.327359][T15371] loop2: detected capacity change from 0 to 512 [ 131.328843][T15363] FAT-fs (loop4): Directory bread(block 73) failed [ 131.334704][T14994] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.355873][T15363] syz.4.5464: attempt to access beyond end of device [ 131.355873][T15363] loop4: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 131.364588][T15371] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.5467: bg 0: block 5: invalid block bitmap [ 131.371567][T15363] syz.4.5464: attempt to access beyond end of device [ 131.371567][T15363] loop4: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 131.387156][T15371] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 131.422581][T15380] netlink: 'syz.1.5472': attribute type 11 has an invalid length. [ 131.426789][T15371] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.5467: invalid indirect mapped block 3 (level 2) [ 131.444106][T15371] EXT4-fs (loop2): 1 orphan inode deleted [ 131.449994][T15371] EXT4-fs (loop2): 1 truncate cleaned up [ 131.456286][T15371] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.478862][T15386] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5475'. [ 131.551305][T14780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.565647][T15082] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.574022][T15082] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.586380][T15082] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.594670][T15082] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.620075][T15402] loop4: detected capacity change from 0 to 512 [ 131.631721][T15082] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.640116][T15082] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.654553][T15082] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.662865][T15082] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.684460][T15402] EXT4-fs error (device loop4): ext4_orphan_get:1388: inode #15: comm syz.4.5483: casefold flag without casefold feature [ 131.703035][T15402] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.5483: couldn't read orphan inode 15 (err -117) [ 131.719173][T15402] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.721839][T15415] loop1: detected capacity change from 0 to 512 [ 131.749789][ T3271] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.761527][T15415] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 131.784336][T15415] System zones: 0-2, 18-18, 34-34 [ 131.799261][T15429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.812928][T15415] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.5488: bg 0: block 248: padding at end of block bitmap is not set [ 131.829933][T15429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.845051][T15415] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.5488: Failed to acquire dquot type 1 [ 131.872333][T15415] EXT4-fs (loop1): 1 truncate cleaned up [ 131.879934][T15415] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.894575][T15415] ext4 filesystem being mounted at /1156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.966418][ T3265] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.979481][T15451] loop4: detected capacity change from 0 to 512 [ 132.011017][T15451] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.025377][T15451] ext4 filesystem being mounted at /1323/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.038114][T15451] devtmpfs: Too few inodes for current use [ 132.104012][ T3271] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.449398][T15544] RDS: rds_bind could not find a transport for ::a:0:0, load rds_tcp or rds_rdma? [ 132.513817][T15557] loop4: detected capacity change from 0 to 512 [ 132.534460][T15557] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 132.579041][T15557] EXT4-fs (loop4): 1 truncate cleaned up [ 132.599820][T15557] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.637041][T15557] EXT4-fs error (device loop4): ext4_ext_precache:631: inode #15: comm syz.4.5553: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 132.756207][ T3271] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.822102][T15602] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 132.907127][T15608] loop3: detected capacity change from 0 to 8192 [ 132.944581][T15624] loop1: detected capacity change from 0 to 128 [ 132.955488][T15624] EXT4-fs: Ignoring removed nobh option [ 132.981958][T15624] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 132.995747][T15624] ext4 filesystem being mounted at /1178/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 133.040523][ T3265] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 133.049594][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 133.049640][ T29] audit: type=1400 audit(1729100873.587:1282): avc: denied { create } for pid=15642 comm="syz.2.5596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 133.075533][ T29] audit: type=1400 audit(1729100873.587:1283): avc: denied { connect } for pid=15642 comm="syz.2.5596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 133.095372][ T29] audit: type=1400 audit(1729100873.587:1284): avc: denied { ioctl } for pid=15642 comm="syz.2.5596" path="socket:[45454]" dev="sockfs" ino=45454 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 133.257771][ T29] audit: type=1400 audit(1729100873.767:1285): avc: denied { mount } for pid=15670 comm="syz.3.5612" name="/" dev="hugetlbfs" ino=46212 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 133.280900][ T29] audit: type=1400 audit(1729100873.777:1286): avc: denied { unmount } for pid=14994 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 133.427648][T15702] loop1: detected capacity change from 0 to 512 [ 133.435909][T15702] EXT4-fs: Ignoring removed bh option [ 133.502531][T15702] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.516853][T15702] ext4 filesystem being mounted at /1182/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.565735][ T3265] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.655664][T15753] __nla_validate_parse: 6 callbacks suppressed [ 133.655683][T15753] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5648'. [ 133.682825][T15748] loop3: detected capacity change from 0 to 8192 [ 133.690873][T15748] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 133.828111][T15788] loop4: detected capacity change from 0 to 512 [ 133.860475][T15788] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.868252][ T29] audit: type=1400 audit(1729100874.407:1287): avc: denied { remount } for pid=15795 comm="syz.1.5671" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 133.878354][T15788] ext4 filesystem being mounted at /1358/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.925395][ T29] audit: type=1400 audit(1729100874.467:1288): avc: denied { unmount } for pid=3265 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 133.932587][ T3271] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.162794][ T29] audit: type=1326 audit(1729100874.707:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15856 comm="syz.2.5699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32c7afdff9 code=0x7ffc0000 [ 134.174542][T15859] netlink: 'syz.3.5700': attribute type 2 has an invalid length. [ 134.186516][ T29] audit: type=1326 audit(1729100874.707:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15856 comm="syz.2.5699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32c7afdff9 code=0x7ffc0000 [ 134.194086][T15859] netlink: 38 bytes leftover after parsing attributes in process `syz.3.5700'. [ 134.237403][T15857] loop2: detected capacity change from 0 to 512 [ 134.275360][ T29] audit: type=1326 audit(1729100874.777:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15856 comm="syz.2.5699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f32c7afdff9 code=0x7ffc0000 [ 134.275726][T15857] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.316571][T15857] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.384187][T14780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.414590][T15893] loop3: detected capacity change from 0 to 1024 [ 134.421499][T15893] EXT4-fs: Ignoring removed oldalloc option [ 134.423356][T15895] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5711'. [ 134.470664][T15893] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 134.518555][T15893] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.561630][T14994] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.572934][T15928] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5731'. [ 134.618656][T15936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5734'. [ 134.852987][T15989] vhci_hcd: default hub control req: 0100 v0000 i0000 l0 [ 134.957547][T16014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5773'. [ 134.978701][T16018] loop4: detected capacity change from 0 to 256 [ 135.007096][T16018] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 135.007136][T16018] FAT-fs (loop4): Filesystem has been set read-only [ 135.053211][T16034] devtmpfs: Bad value for 'nr_blocks' [ 135.155718][T16055] netlink: 'syz.3.5793': attribute type 1 has an invalid length. [ 135.193283][T16065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5796'. [ 135.276186][T16080] loop2: detected capacity change from 0 to 1024 [ 135.308464][T16080] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.358503][T16099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.369223][T16099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.369241][T16099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.369258][T16099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.369297][T16099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.369311][T16099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.369330][T16099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.369346][T16099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.369437][T16099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.369454][T16099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.383428][T14780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.420266][T16104] xt_CT: You must specify a L4 protocol and not use inversions on it [ 135.718645][T16158] loop4: detected capacity change from 0 to 128 [ 135.747342][T16158] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 135.758448][T16166] netlink: 58 bytes leftover after parsing attributes in process `syz.2.5845'. [ 135.775474][T16158] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 135.898801][T16188] netlink: 756 bytes leftover after parsing attributes in process `syz.4.5855'. [ 135.961827][T16197] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5859'. [ 136.390547][T16272] tipc: Invalid UDP bearer configuration [ 136.390561][T16272] tipc: Enabling of bearer rejected, failed to enable media [ 136.524471][T16303] loop4: detected capacity change from 0 to 512 [ 136.532209][T16299] loop2: detected capacity change from 0 to 512 [ 136.543719][T16303] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 136.558382][T16303] EXT4-fs (loop4): orphan cleanup on readonly fs [ 136.565795][T16303] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5912: bg 0: block 248: padding at end of block bitmap is not set [ 136.581518][T16299] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.591206][T16306] loop3: detected capacity change from 0 to 4096 [ 136.601459][T16306] EXT4-fs: Ignoring removed nomblk_io_submit option [ 136.602309][T16299] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.619153][T16303] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.5912: Failed to acquire dquot type 1 [ 136.633717][T16306] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.652483][T16303] EXT4-fs (loop4): 1 truncate cleaned up [ 136.681752][T16303] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 136.688743][T16306] EXT4-fs error (device loop3): ext4_empty_dir:3105: inode #12: block 80: comm syz.3.5913: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 136.715444][T16306] EXT4-fs warning (device loop3): ext4_empty_dir:3107: inode #12: comm syz.3.5913: directory missing '..' [ 136.732350][T14780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.751389][ T3271] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.762972][T14994] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.794533][T16331] veth0_vlan: left promiscuous mode [ 136.802325][T16331] veth0_vlan: entered promiscuous mode [ 136.862103][T16350] netlink: 'syz.3.5931': attribute type 3 has an invalid length. [ 137.013400][T16385] netlink: 'syz.0.5949': attribute type 11 has an invalid length. [ 137.164977][T16418] loop2: detected capacity change from 0 to 256 [ 137.190765][T16423] syz.4.5967[16423] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.190928][T16423] syz.4.5967[16423] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.219531][T16418] FAT-fs (loop2): Directory bread(block 64) failed [ 137.236220][T16423] syz.4.5967[16423] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.255425][T16418] FAT-fs (loop2): Directory bread(block 65) failed [ 137.276160][T16418] FAT-fs (loop2): Directory bread(block 66) failed [ 137.282888][T16418] FAT-fs (loop2): Directory bread(block 67) failed [ 137.289604][T16418] FAT-fs (loop2): Directory bread(block 68) failed [ 137.296329][T16418] FAT-fs (loop2): Directory bread(block 69) failed [ 137.302938][T16418] FAT-fs (loop2): Directory bread(block 70) failed [ 137.309721][T16418] FAT-fs (loop2): Directory bread(block 71) failed [ 137.316468][T16418] FAT-fs (loop2): Directory bread(block 72) failed [ 137.324537][T16418] FAT-fs (loop2): Directory bread(block 73) failed [ 137.398069][T16418] syz.2.5961: attempt to access beyond end of device [ 137.398069][T16418] loop2: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 137.430826][T16418] syz.2.5961: attempt to access beyond end of device [ 137.430826][T16418] loop2: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 137.575167][T16489] syz.3.5999[16489] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.576954][T16489] syz.3.5999[16489] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.593951][T16489] syz.3.5999[16489] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.611570][T16489] loop3: detected capacity change from 0 to 512 [ 137.642278][T16489] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.5999: bg 0: block 5: invalid block bitmap [ 137.655005][T16489] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 137.663974][T16489] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.5999: invalid indirect mapped block 3 (level 2) [ 137.677474][T16489] EXT4-fs (loop3): 1 orphan inode deleted [ 137.683235][T16489] EXT4-fs (loop3): 1 truncate cleaned up [ 137.689326][T16489] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.720323][T14994] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.094083][T16576] sctp: [Deprecated]: syz.2.6040 (pid 16576) Use of struct sctp_assoc_value in delayed_ack socket option. [ 138.094083][T16576] Use struct sctp_sack_info instead [ 138.126295][T16576] sctp: [Deprecated]: syz.2.6040 (pid 16576) Use of struct sctp_assoc_value in delayed_ack socket option. [ 138.126295][T16576] Use struct sctp_sack_info instead [ 138.222387][T16598] tipc: Started in network mode [ 138.227384][T16598] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 138.237226][T16598] tipc: Enabling of bearer rejected, failed to enable media [ 138.367398][T16617] loop3: detected capacity change from 0 to 512 [ 138.405467][T16617] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 138.439124][T16617] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.452970][T16617] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.455052][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 138.455069][ T29] audit: type=1400 audit(1729100878.997:1338): avc: denied { map } for pid=16626 comm="syz.1.6063" path="socket:[48734]" dev="sockfs" ino=48734 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 138.493060][ T29] audit: type=1400 audit(1729100878.997:1339): avc: denied { read } for pid=16626 comm="syz.1.6063" path="socket:[48734]" dev="sockfs" ino=48734 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 138.520248][ T29] audit: type=1400 audit(1729100879.037:1340): avc: denied { shutdown } for pid=16630 comm="syz.2.6065" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 138.557382][T14994] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.652514][ T29] audit: type=1400 audit(1729100879.187:1341): avc: denied { create } for pid=16657 comm="syz.4.6079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 138.672326][ T29] audit: type=1400 audit(1729100879.187:1342): avc: denied { ioctl } for pid=16657 comm="syz.4.6079" path="socket:[49205]" dev="sockfs" ino=49205 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 138.693695][T16662] syz.3.6070[16662] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 138.699057][T16662] syz.3.6070[16662] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 138.717232][T16670] __nla_validate_parse: 20 callbacks suppressed [ 138.717250][T16670] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.6078'. [ 138.750639][T16662] syz.3.6070[16662] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 138.753702][T16659] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.6078'. [ 138.822302][T16685] loop2: detected capacity change from 0 to 128 [ 138.831280][ T29] audit: type=1326 audit(1729100879.367:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16686 comm="syz.0.6091" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2ed919dff9 code=0x0 [ 138.858349][T16685] EXT4-fs: Ignoring removed nobh option [ 138.859616][T16691] loop4: detected capacity change from 0 to 164 [ 138.871981][T16691] isofs_fill_super: root inode is not a directory. Corrupted media? [ 138.882113][T16685] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 138.905090][T16685] ext4 filesystem being mounted at /209/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 138.935379][ T29] audit: type=1400 audit(1729100879.477:1344): avc: denied { name_bind } for pid=16700 comm="syz.3.6096" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 138.981044][T14780] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 139.000015][ T29] audit: type=1400 audit(1729100879.547:1345): avc: denied { setcheckreqprot } for pid=16708 comm="syz.1.6101" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 139.021725][T16705] vhci_hcd: invalid port number 157 [ 139.027071][T16705] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 139.127917][ T29] audit: type=1400 audit(1729100879.677:1346): avc: denied { bind } for pid=16725 comm="syz.1.6109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 139.147844][ T29] audit: type=1400 audit(1729100879.677:1347): avc: denied { name_bind } for pid=16725 comm="syz.1.6109" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 139.440968][T16770] loop3: detected capacity change from 0 to 512 [ 139.494341][T16770] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.517878][T16770] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.558173][T14994] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.650421][T16800] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6144'. [ 139.679150][T16805] netlink: 'syz.4.6147': attribute type 3 has an invalid length. [ 139.737751][T16815] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6151'. [ 140.397496][T16906] loop4: detected capacity change from 0 to 256 [ 140.419853][T16908] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6197'. [ 140.582577][T16926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6203'. [ 140.750334][T16945] tipc: Enabled bearer , priority 0 [ 140.928384][T16979] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 140.935910][T16979] vhci_hcd: default hub control req: d300 v0000 i0000 l0 [ 140.987459][T16982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6233'. [ 141.013298][T16983] loop4: detected capacity change from 0 to 512 [ 141.021292][T16983] EXT4-fs: Ignoring removed nobh option [ 141.027208][T16983] EXT4-fs: dax option not supported [ 141.249523][T17012] loop3: detected capacity change from 0 to 256 [ 141.269108][T17012] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 141.279371][T17012] FAT-fs (loop3): Filesystem has been set read-only [ 141.364939][T17020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.375491][T17020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.385433][T17020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.395891][T17020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.405783][T17020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.416301][T17020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.426239][T17020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.436699][T17020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.446711][T17020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.457199][T17020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.741876][T17049] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 141.910053][T17063] loop4: detected capacity change from 0 to 1024 [ 141.938584][T17063] EXT4-fs: Ignoring removed bh option [ 141.945764][ T3342] tipc: Node number set to 1593835521 [ 142.065355][T17063] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.201415][T17098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6285'. [ 142.223585][ T3271] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.424877][T17126] hugetlbfs: Bad value 'p' for mount option 'size' [ 142.424877][T17126] [ 142.534759][T17140] netlink: 19 bytes leftover after parsing attributes in process `syz.3.6306'. [ 142.558244][T17142] devtmpfs: Bad value for 'nr_blocks' [ 142.795361][T17157] loop3: detected capacity change from 0 to 764 [ 142.879283][T17165] loop3: detected capacity change from 0 to 1024 [ 142.888434][T17165] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 142.898607][T17165] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 142.910652][T17165] EXT4-fs error (device loop3): ext4_get_journal_inode:5762: inode #32: comm syz.3.6318: iget: special inode unallocated [ 142.923599][T17165] EXT4-fs (loop3): no journal found [ 142.928860][T17165] EXT4-fs (loop3): can't get journal size [ 142.937500][T17165] EXT4-fs error (device loop3): ext4_protect_reserved_inode:160: inode #32: comm syz.3.6318: iget: special inode unallocated [ 142.951333][T17165] EXT4-fs (loop3): failed to initialize system zone (-117) [ 142.960279][T17165] EXT4-fs (loop3): mount failed [ 143.324396][T17193] loop4: detected capacity change from 0 to 512 [ 143.357750][T17193] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.398256][T17193] ext4 filesystem being mounted at /1507/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.447031][T17193] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6331'. [ 143.484464][ T3271] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.624389][T17216] loop3: detected capacity change from 0 to 512 [ 143.644645][T17216] EXT4-fs: Ignoring removed nobh option [ 143.662318][T17216] EXT4-fs: dax option not supported [ 143.703906][T17219] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 143.721858][T17219] vhci_hcd: default hub control req: d300 v0000 i0000 l0 [ 143.957425][T17234] veth0_vlan: left promiscuous mode [ 143.963067][T17234] veth0_vlan: entered promiscuous mode [ 144.186056][T17259] veth0_vlan: left promiscuous mode [ 144.203562][T17259] veth0_vlan: entered promiscuous mode [ 144.231225][T17261] __nla_validate_parse: 1 callbacks suppressed [ 144.231246][T17261] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6369'. [ 144.530857][T17300] veth0_vlan: left promiscuous mode [ 144.547411][T17300] veth0_vlan: entered promiscuous mode [ 144.590433][T17306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6379'. [ 144.608448][T17310] can0: slcan on ptm0. [ 144.645440][T17307] can0 (unregistered): slcan off ptm0. [ 144.703998][T17314] loop3: detected capacity change from 0 to 512 [ 144.724538][T17318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6386'. [ 144.759759][T17314] EXT4-fs (loop3): too many log groups per flexible block group [ 144.767501][T17314] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 144.774317][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 144.774330][ T29] audit: type=1400 audit(1729100885.307:1368): avc: denied { getopt } for pid=17324 comm="syz.1.6388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 144.800372][T17314] EXT4-fs (loop3): mount failed [ 144.843211][T17327] netlink: set zone limit has 8 unknown bytes [ 144.890201][T17339] netlink: 'syz.1.6393': attribute type 2 has an invalid length. [ 144.898059][T17339] netlink: 38 bytes leftover after parsing attributes in process `syz.1.6393'. [ 144.919607][T17345] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6397'. [ 144.933901][T17344] loop4: detected capacity change from 0 to 512 [ 144.942682][T17347] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6398'. [ 144.980407][T17344] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.003865][T17344] ext4 filesystem being mounted at /1521/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.022488][ T29] audit: type=1326 audit(1729100885.567:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17356 comm="syz.0.6401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed919dff9 code=0x7ffc0000 [ 145.047052][ T29] audit: type=1326 audit(1729100885.597:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17356 comm="syz.0.6401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed919dff9 code=0x7ffc0000 [ 145.070739][ T29] audit: type=1326 audit(1729100885.597:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17356 comm="syz.0.6401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f2ed919dff9 code=0x7ffc0000 [ 145.094314][ T29] audit: type=1326 audit(1729100885.597:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17356 comm="syz.0.6401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed919dff9 code=0x7ffc0000 [ 145.118045][ T29] audit: type=1326 audit(1729100885.597:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17356 comm="syz.0.6401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed919dff9 code=0x7ffc0000 [ 145.153267][T17344] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #2: comm syz.4.6396: corrupted inode contents [ 145.166963][T17344] EXT4-fs error (device loop4): ext4_dirty_inode:5984: inode #2: comm syz.4.6396: mark_inode_dirty error [ 145.190845][T17344] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #2: comm syz.4.6396: corrupted inode contents [ 145.203242][T17344] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.6396: mark_inode_dirty error [ 145.264666][T17366] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6404'. [ 145.344535][ T3271] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.398482][ T29] audit: type=1326 audit(1729100885.947:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17376 comm="syz.0.6413" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2ed919dff9 code=0x0 [ 146.047253][ T29] audit: type=1326 audit(1729100886.577:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17389 comm="syz.4.6411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feebe43dff9 code=0x7ffc0000 [ 146.070941][ T29] audit: type=1326 audit(1729100886.587:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17389 comm="syz.4.6411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feebe43dff9 code=0x7ffc0000 [ 146.094486][ T29] audit: type=1326 audit(1729100886.587:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17389 comm="syz.4.6411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7feebe43dff9 code=0x7ffc0000 [ 146.389909][T17438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6439'. [ 146.727869][T17487] loop3: detected capacity change from 0 to 128 [ 146.883109][T17487] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 146.899458][T17487] ext4 filesystem being mounted at /205/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 147.013221][T17515] hugetlbfs: Bad value 'p' for mount option 'size' [ 147.013221][T17515] [ 147.020956][T14994] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 147.104889][T17525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6481'. [ 147.254994][T17543] netlink: set zone limit has 8 unknown bytes [ 147.304571][T17545] loop4: detected capacity change from 0 to 512 [ 147.357432][T17545] EXT4-fs (loop4): too many log groups per flexible block group [ 147.365196][T17545] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 147.372044][T17545] EXT4-fs (loop4): mount failed [ 147.507810][T17564] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6496'. [ 147.943034][T17623] netlink: 'syz.3.6527': attribute type 1 has an invalid length. [ 147.950921][T17623] netlink: 'syz.3.6527': attribute type 2 has an invalid length. [ 149.337266][T17689] __nla_validate_parse: 10 callbacks suppressed [ 149.337287][T17689] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6559'. [ 149.801581][ T3373] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.871114][ T3373] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.948820][ T3373] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.032588][ T3373] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.146945][ T3373] bridge_slave_1: left allmulticast mode [ 150.152651][ T3373] bridge_slave_1: left promiscuous mode [ 150.158416][ T3373] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.188272][ T3373] bridge_slave_0: left allmulticast mode [ 150.194160][ T3373] bridge_slave_0: left promiscuous mode [ 150.199902][ T3373] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.368706][ T3373] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.382152][ T3373] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.401292][ T3373] bond0 (unregistering): Released all slaves [ 150.560601][ T3373] tipc: Left network mode [ 150.569218][ T3373] hsr_slave_0: left promiscuous mode [ 150.575181][ T3373] hsr_slave_1: left promiscuous mode [ 150.581017][ T3373] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.593728][ T3373] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.746074][ T3373] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.753533][ T3373] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.765396][ T3373] veth1_macvtap: left promiscuous mode [ 150.770915][ T3373] veth0_macvtap: left promiscuous mode [ 150.776521][ T3373] veth1_vlan: left promiscuous mode [ 150.781800][ T3373] veth0_vlan: left promiscuous mode [ 150.968532][ T3373] team0 (unregistering): Port device team_slave_1 removed [ 150.988272][ T3373] team0 (unregistering): Port device team_slave_0 removed [ 151.114049][T17712] chnl_net:caif_netlink_parms(): no params data found [ 151.290740][T17712] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.297887][T17712] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.305212][T17712] bridge_slave_0: entered allmulticast mode [ 151.311891][T17712] bridge_slave_0: entered promiscuous mode [ 151.321733][T17712] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.328835][T17712] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.336130][T17712] bridge_slave_1: entered allmulticast mode [ 151.342602][T17712] bridge_slave_1: entered promiscuous mode [ 151.361372][T17712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.382389][T17712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.403181][T17712] team0: Port device team_slave_0 added [ 151.536185][T17712] team0: Port device team_slave_1 added [ 151.555129][T17712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.562148][T17712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.588349][T17712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.641400][T17712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.648450][T17712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.674434][T17712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.875405][T17742] debugfs: Bad value for 'uid' [ 151.880236][T17742] debugfs: Bad value for 'uid' [ 151.915105][T17712] hsr_slave_0: entered promiscuous mode [ 151.953638][T17712] hsr_slave_1: entered promiscuous mode [ 151.973085][T17712] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 152.000349][T17746] loop4: detected capacity change from 0 to 128 [ 152.017341][T17712] Cannot create hsr debugfs directory [ 152.075811][T17746] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 152.090185][T17746] ext4 filesystem being mounted at /1572/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 152.141583][ T3271] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 152.196313][T17753] vhci_hcd: invalid port number 157 [ 152.201636][T17753] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 152.539362][T17712] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 152.562846][T17712] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 152.585044][T17712] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 152.613147][T17712] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 152.742796][T17712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.791593][T17712] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.840085][ T336] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.847234][ T336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.881993][ T336] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.889132][ T336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.099513][T17712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.206451][T17789] sg_write: data in/out 231/14 bytes for SCSI command 0x0-- guessing data in; [ 153.206451][T17789] program syz.1.6596 not setting count and/or reply_len properly [ 153.308995][T17712] veth0_vlan: entered promiscuous mode [ 153.338423][T17712] veth1_vlan: entered promiscuous mode [ 153.396664][T17712] veth0_macvtap: entered promiscuous mode [ 153.416187][T17712] veth1_macvtap: entered promiscuous mode [ 153.441497][T17712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.451999][T17712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.461921][T17712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.472434][T17712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.482352][T17712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.492826][T17712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.502671][T17712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.513129][T17712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.523034][T17712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.533598][T17712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.553478][T17712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.614540][T17712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.625226][T17712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.635085][T17712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.645662][T17712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.655598][T17712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.666091][T17712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.675938][T17712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.686459][T17712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.696304][T17712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.706769][T17712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.839069][T17712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.902937][T17712] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.911742][T17712] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.920548][T17712] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.929408][T17712] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.322763][T17893] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.6636'. [ 158.373362][ T220] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.418870][T17870] ================================================================== [ 158.427009][T17870] BUG: KCSAN: data-race in pcpu_alloc_noprof / pcpu_block_update_hint_alloc [ 158.435752][T17870] [ 158.438089][T17870] read-write to 0xffffffff88bdf3ac of 4 bytes by task 3271 on cpu 0: [ 158.446183][T17870] pcpu_block_update_hint_alloc+0x5db/0x6a0 [ 158.452126][T17870] pcpu_alloc_area+0x488/0x4b0 [ 158.456925][T17870] pcpu_alloc_noprof+0x4bb/0x10a0 [ 158.461985][T17870] xt_percpu_counter_alloc+0x79/0x110 [ 158.467385][T17870] translate_table+0x9b1/0x1040 [ 158.468579][T17917] loop4: detected capacity change from 0 to 512 [ 158.472244][T17870] do_ip6t_set_ctl+0x7cc/0x8c0 [ 158.483263][T17870] nf_setsockopt+0x195/0x1b0 [ 158.487883][T17870] ipv6_setsockopt+0x10f/0x130 [ 158.492663][T17870] tcp_setsockopt+0x93/0xb0 [ 158.497189][T17870] sock_common_setsockopt+0x64/0x80 [ 158.502399][T17870] __sys_setsockopt+0x1cc/0x240 [ 158.507270][T17870] __x64_sys_setsockopt+0x66/0x80 [ 158.512316][T17870] x64_sys_call+0x278d/0x2d60 [ 158.517012][T17870] do_syscall_64+0xc9/0x1c0 [ 158.521523][T17870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.527442][T17870] [ 158.529768][T17870] read to 0xffffffff88bdf3ac of 4 bytes by task 17870 on cpu 1: [ 158.537405][T17870] pcpu_alloc_noprof+0x9b6/0x10a0 [ 158.542447][T17870] team_init+0x89/0x690 [ 158.546615][T17870] register_netdevice+0x293/0xe30 [ 158.551652][T17870] team_newlink+0xa8/0xd0 [ 158.556004][T17870] rtnl_newlink+0xeff/0x1690 [ 158.560608][T17870] rtnetlink_rcv_msg+0x6aa/0x710 [ 158.565580][T17870] netlink_rcv_skb+0x12c/0x230 [ 158.570366][T17870] rtnetlink_rcv+0x1c/0x30 [ 158.574804][T17870] netlink_unicast+0x599/0x670 [ 158.579585][T17870] netlink_sendmsg+0x5cc/0x6e0 [ 158.584370][T17870] __sock_sendmsg+0x140/0x180 [ 158.589060][T17870] __sys_sendto+0x1d6/0x260 [ 158.593579][T17870] __x64_sys_sendto+0x78/0x90 [ 158.598271][T17870] x64_sys_call+0x2959/0x2d60 [ 158.602968][T17870] do_syscall_64+0xc9/0x1c0 [ 158.607482][T17870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.613399][T17870] [ 158.615726][T17870] value changed: 0x000000a0 -> 0x0000009f [ 158.621448][T17870] [ 158.623770][T17870] Reported by Kernel Concurrency Sanitizer on: [ 158.629921][T17870] CPU: 1 UID: 0 PID: 17870 Comm: syz-executor Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 158.640871][T17870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 158.650949][T17870] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 158.668028][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 158.668046][ T29] audit: type=1400 audit(1729100899.207:1389): avc: denied { write } for pid=3255 comm="syz-executor" path="pipe:[546]" dev="pipefs" ino=546 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 158.753567][ T29] audit: type=1400 audit(1729100899.257:1390): avc: denied { recv } for pid=17709 comm="syz-executor" saddr=10.128.0.163 src=45054 daddr=10.128.0.210 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 158.756746][T17917] EXT4-fs: error -4 creating inode table initialization thread [ 158.816067][ T220] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.884098][ T220] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.897683][T17917] EXT4-fs (loop4): mount failed [ 158.943198][T17917] tipc: Resetting bearer [ 158.956398][T17917] tipc: Disabling bearer [ 158.967669][ T220] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.087626][ T220] bridge_slave_1: left allmulticast mode [ 159.093373][ T220] bridge_slave_1: left promiscuous mode [ 159.099081][ T220] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.106941][ T220] bridge_slave_0: left allmulticast mode [ 159.112718][ T220] bridge_slave_0: left promiscuous mode [ 159.118372][ T220] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.238513][ T220] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.248822][ T220] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.258904][ T220] bond0 (unregistering): Released all slaves [ 159.309571][ T220] hsr_slave_0: left promiscuous mode [ 159.315365][ T220] hsr_slave_1: left promiscuous mode [ 159.321131][ T220] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.328645][ T220] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.336265][ T220] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.343643][ T220] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.353604][ T220] veth1_macvtap: left promiscuous mode [ 159.359147][ T220] veth0_macvtap: left promiscuous mode [ 159.364814][ T220] veth1_vlan: left promiscuous mode [ 159.370125][ T220] veth0_vlan: left promiscuous mode [ 159.453503][ T220] team0 (unregistering): Port device team_slave_1 removed [ 159.463874][ T220] team0 (unregistering): Port device team_slave_0 removed [ 159.780370][ T220] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.829542][ T220] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.898232][ T220] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.938561][ T220] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.008633][ T220] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.018416][ T220] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.097039][ T220] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.107055][ T220] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.177086][ T220] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.186968][ T220] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.217145][ T220] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.226962][ T220] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.298931][ T220] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.337131][ T220] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.397303][ T220] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.457238][ T220] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.518698][ T220] bridge_slave_1: left allmulticast mode [ 160.524357][ T220] bridge_slave_1: left promiscuous mode [ 160.530054][ T220] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.537802][ T220] bridge_slave_0: left allmulticast mode [ 160.543566][ T220] bridge_slave_0: left promiscuous mode [ 160.549329][ T220] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.557660][ T220] bridge_slave_1: left allmulticast mode [ 160.563323][ T220] bridge_slave_1: left promiscuous mode [ 160.569106][ T220] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.576822][ T220] bridge_slave_0: left allmulticast mode [ 160.582465][ T220] bridge_slave_0: left promiscuous mode [ 160.588192][ T220] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.596406][ T220] bridge_slave_1: left allmulticast mode [ 160.602136][ T220] bridge_slave_1: left promiscuous mode [ 160.607882][ T220] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.615963][ T220] bridge_slave_0: left allmulticast mode [ 160.621722][ T220] bridge_slave_0: left promiscuous mode [ 160.627432][ T220] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.127846][ T220] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.138176][ T220] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.148533][ T220] bond0 (unregistering): Released all slaves [ 161.157530][ T220] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.167753][ T220] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.177769][ T220] bond0 (unregistering): Released all slaves [ 161.186586][ T220] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.197175][ T220] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.207404][ T220] bond0 (unregistering): Released all slaves [ 161.215476][ T220] bond0 (unregistering): Released all slaves [ 161.248848][ T220] tipc: Disabling bearer [ 161.253876][ T220] tipc: Disabling bearer [ 161.259194][ T220] tipc: Left network mode [ 161.264132][ T220] tipc: Left network mode [ 161.271904][ T220] IPVS: stopping backup sync thread 6823 ... [ 161.277985][ T220] IPVS: stopping backup sync thread 4269 ... [ 161.287071][ T220] hsr_slave_0: left promiscuous mode [ 161.292905][ T220] hsr_slave_1: left promiscuous mode [ 161.298680][ T220] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.306319][ T220] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.313771][ T220] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.321250][ T220] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.330237][ T220] hsr_slave_0: left promiscuous mode [ 161.336015][ T220] hsr_slave_1: left promiscuous mode [ 161.341790][ T220] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.349230][ T220] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.356772][ T220] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.364184][ T220] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.373311][ T220] hsr_slave_0: left promiscuous mode [ 161.379089][ T220] hsr_slave_1: left promiscuous mode [ 161.384927][ T220] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.392484][ T220] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.400099][ T220] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.407658][ T220] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.419412][ T220] veth1_macvtap: left promiscuous mode [ 161.425067][ T220] veth0_macvtap: left promiscuous mode [ 161.430609][ T220] veth1_vlan: left promiscuous mode [ 161.435934][ T220] veth0_vlan: left promiscuous mode [ 161.441598][ T220] veth1_macvtap: left promiscuous mode [ 161.447106][ T220] veth0_macvtap: left promiscuous mode [ 161.452602][ T220] veth1_vlan: left promiscuous mode [ 161.457844][ T220] veth0_vlan: left promiscuous mode [ 161.463538][ T220] veth1_macvtap: left promiscuous mode [ 161.469044][ T220] veth0_macvtap: left promiscuous mode [ 161.474610][ T220] veth1_vlan: left promiscuous mode [ 161.479894][ T220] veth0_vlan: left promiscuous mode [ 161.641623][ T220] team0 (unregistering): Port device team_slave_1 removed [ 161.652430][ T220] team0 (unregistering): Port device team_slave_0 removed [ 161.713671][ T220] team0 (unregistering): Port device team_slave_1 removed [ 161.723958][ T220] team0 (unregistering): Port device team_slave_0 removed [ 161.788104][ T220] team0 (unregistering): Port device team_slave_1 removed [ 162.454433][ T220] IPVS: stop unused estimator thread 0... [ 162.460543][ T220] IPVS: stop unused estimator thread 0...