last executing test programs: 1m19.068302105s ago: executing program 1 (id=2628): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/current\x00') pread64(r1, 0x0, 0x0, 0x0) 1m19.064056364s ago: executing program 1 (id=2631): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bond_slave_1\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x12, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1, 0x9, 0xff, 0x0, 0x0, 0x9], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1m18.993084406s ago: executing program 1 (id=2633): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000640)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) link(0x0, 0x0) 1m18.992290186s ago: executing program 1 (id=2637): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000ddff00850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) set_robust_list(&(0x7f0000000140)={0x0, 0x1}, 0x18) 1m18.927958707s ago: executing program 1 (id=2642): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) creat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x12) unlink(&(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m18.911155617s ago: executing program 1 (id=2644): r0 = syz_io_uring_setup(0x3ac6, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x10100, 0x4, 0x37c}, &(0x7f0000000080)=0x0, &(0x7f0000000440)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(r0, 0x92, 0x0, 0x0, 0x0, 0x0) 1m3.874143791s ago: executing program 32 (id=2644): r0 = syz_io_uring_setup(0x3ac6, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x10100, 0x4, 0x37c}, &(0x7f0000000080)=0x0, &(0x7f0000000440)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(r0, 0x92, 0x0, 0x0, 0x0, 0x0) 1m3.511617108s ago: executing program 4 (id=3148): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000001880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000200000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="02131b090900000025bd7000fcdbdf25070078"], 0x48}}, 0xc4) 1m3.439691479s ago: executing program 4 (id=3152): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x30000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x1c}, 0x0, 0x0, 0x800020, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1m3.060782945s ago: executing program 4 (id=3162): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) setreuid(0xffffffffffffffff, 0xee00) 1m3.001362246s ago: executing program 4 (id=3163): sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="2400000004080108000000000000000002000008060002405ca1000005000300ff"], 0x24}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x40000c0) 1m2.935037377s ago: executing program 4 (id=3164): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) creat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x12) unlink(&(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m2.894001137s ago: executing program 4 (id=3167): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000880)={0x0, 0x6}, 0x8) 47.330126941s ago: executing program 33 (id=3167): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000880)={0x0, 0x6}, 0x8) 21.629620838s ago: executing program 2 (id=4118): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000000000000013"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='\a'], 0x48}}, 0x0) 21.52870812s ago: executing program 2 (id=4122): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bond_slave_1\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x12, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1, 0x9, 0xff, 0x0, 0x0, 0x9], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 21.363316473s ago: executing program 2 (id=4130): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x30000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x1c}, 0x0, 0x0, 0x800020, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 21.069896398s ago: executing program 2 (id=4148): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xb, 0x8, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r2, &(0x7f00000001c0), 0x0}, 0x20) 21.032433028s ago: executing program 2 (id=4152): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) creat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x12) unlink(&(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 20.971533509s ago: executing program 2 (id=4157): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x3, 0x0, 0x7fff7ffc}]}) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x2000002, &(0x7f0000000640)=ANY=[], 0x5, 0x329, &(0x7f00000000c0)="$eJzs3E1rK1UYwPEnL02TXG4mC1EUpAfdqIuhja7lBmlBDFjaRmwFYdpONGRMSiZUImLryq34Ddy4KF12V1C/QDfudONGV90ILixSPJJ5aSftJNak6cvt/wdlTs9znuk5TBqeEzJz/P7XnzRqrlmzOpLMKkmIiJyIFCUpoURwTHrtjETtyquP/vz5xeXVtXfKlcr8klIL5ZXXS0qpwsz3n36eC4YdTstR8cPjP0q/HT179PzxPysf111Vd1Wz1VGWWm/92rHWHVtt1t2GqdSiY1uurepN12778ZYfrzmtra2uspqbj/Nbbdt1ldXsqobdVZ2W6rS7yvrIqjeVaZrqcV7iZGJ7H6rq3tKSVR4xeeOaJ4NR/a21HhLWibKVEpHcpUh1b6LzAgAAd9LF+j/ZK+lHqv+l4NX/vcHn9f/+Sz92Hr13UAjq/8NMXP3/xi/+ufrq/6yITKD+73e5Irr3dv7P4LHqf9wNM5f3tIm+39rtspUP/n89X36wP+s1qP8BAAAAAAAAAAAAAAAAAAAAALgPTrQ2tNZGeAx+Xjsf4fcNSN+9qXliMgZcf2NaRLK9q6+HXn/cc8ura5L1btxLF0Scr7ar21X/6Md/Dx8tMCuGnHqvh0CvHd55pHqK8oOzE+TvbFdTXqRck7o4YsucGFK8mK/1wtuV+Tnl68+fknw0vySGPBOfX4rNz8grL0fyTTHkpw1piSObvdf1qT7L/2JOqbferVzIz3njAAAAAAB4GpjqTOz+3TQHxf38s/11/+cDIpH9+Wzs/jxtvJC+3bUDAAAAAPBQuN3PGpbj2O34RkI7djsnQ8eM2UiPlj41bEwqssKrnjDjfd9FZHIrHdIIv0jRyERCWfk26B7lzOH6JzPnpIySNSN62p/VOH89/Nho0BhZnPT1Sg8IPffNd39Fep5c/cyJ4Km90dCbB9n/WOnEGlNXevPQqTHffQAAAADcpLDoz7lhz5PbnRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/QkMeApa/rcWK3vUYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgrvg3AAD//3xXBXQ=") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 5.148375216s ago: executing program 34 (id=4157): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x3, 0x0, 0x7fff7ffc}]}) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x2000002, &(0x7f0000000640)=ANY=[], 0x5, 0x329, &(0x7f00000000c0)="$eJzs3E1rK1UYwPEnL02TXG4mC1EUpAfdqIuhja7lBmlBDFjaRmwFYdpONGRMSiZUImLryq34Ddy4KF12V1C/QDfudONGV90ILixSPJJ5aSftJNak6cvt/wdlTs9znuk5TBqeEzJz/P7XnzRqrlmzOpLMKkmIiJyIFCUpoURwTHrtjETtyquP/vz5xeXVtXfKlcr8klIL5ZXXS0qpwsz3n36eC4YdTstR8cPjP0q/HT179PzxPysf111Vd1Wz1VGWWm/92rHWHVtt1t2GqdSiY1uurepN12778ZYfrzmtra2uspqbj/Nbbdt1ldXsqobdVZ2W6rS7yvrIqjeVaZrqcV7iZGJ7H6rq3tKSVR4xeeOaJ4NR/a21HhLWibKVEpHcpUh1b6LzAgAAd9LF+j/ZK+lHqv+l4NX/vcHn9f/+Sz92Hr13UAjq/8NMXP3/xi/+ufrq/6yITKD+73e5Irr3dv7P4LHqf9wNM5f3tIm+39rtspUP/n89X36wP+s1qP8BAAAAAAAAAAAAAAAAAAAAALgPTrQ2tNZGeAx+Xjsf4fcNSN+9qXliMgZcf2NaRLK9q6+HXn/cc8ura5L1btxLF0Scr7ar21X/6Md/Dx8tMCuGnHqvh0CvHd55pHqK8oOzE+TvbFdTXqRck7o4YsucGFK8mK/1wtuV+Tnl68+fknw0vySGPBOfX4rNz8grL0fyTTHkpw1piSObvdf1qT7L/2JOqbferVzIz3njAAAAAAB4GpjqTOz+3TQHxf38s/11/+cDIpH9+Wzs/jxtvJC+3bUDAAAAAPBQuN3PGpbj2O34RkI7djsnQ8eM2UiPlj41bEwqssKrnjDjfd9FZHIrHdIIv0jRyERCWfk26B7lzOH6JzPnpIySNSN62p/VOH89/Nho0BhZnPT1Sg8IPffNd39Fep5c/cyJ4Km90dCbB9n/WOnEGlNXevPQqTHffQAAAADcpLDoz7lhz5PbnRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/QkMeApa/rcWK3vUYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgrvg3AAD//3xXBXQ=") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 1.443918056s ago: executing program 3 (id=4339): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000000c0)=@sg0, 0x0, 0x0) 1.331258189s ago: executing program 3 (id=4347): r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x0, 0x3}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x10, 0x2004, @fd_index=0x7, 0xd1b, 0x0, 0x0, 0x0, 0x1, {0x66e8, r3}}) io_uring_enter(r0, 0x48e9, 0x0, 0x2, 0x0, 0x0) 1.27860691s ago: executing program 3 (id=4349): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001a80)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x1, {0x0, 0x1, 0x2}}, 0x18) sendmmsg$inet6(r0, &(0x7f0000003a40)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="a8", 0x1}, {&(0x7f00000013c0)="e4d816cae51937", 0x7}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20048040) 1.271115339s ago: executing program 5 (id=4351): pselect6(0x0, 0x0, &(0x7f00000001c0)={0x76e2, 0x18, 0x1, 0x3, 0x5, 0x4, 0x100000001, 0xeb7}, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001800007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000038000900000000000000000004000000040000000c0001"], 0x34}}, 0x0) 1.182231261s ago: executing program 0 (id=4355): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40095505, 0x0) 507.031202ms ago: executing program 7 (id=4390): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0x78}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 481.323902ms ago: executing program 7 (id=4392): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000740)={'wpan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)={0x30, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x14, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7fff}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c045}, 0x4804) 480.702452ms ago: executing program 6 (id=4393): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') write$binfmt_script(r0, &(0x7f0000000600)={'#! ', './file0'}, 0xb) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000240)=""/135, 0x87}], 0x1, 0x0, 0x0) 465.477872ms ago: executing program 6 (id=4394): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2b0, &(0x7f0000000280)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x94) 459.702682ms ago: executing program 7 (id=4395): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000004c0)=@newqdisc={0x40, 0x24, 0xd0f, 0xfffffff9, 0x25dfdbfe, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x5, 0x4}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_LIMIT={0x8, 0x2, 0x2}, @TCA_PIE_ALPHA={0x8, 0x4, 0xb}]}}]}, 0x40}}, 0x20000000) 440.214623ms ago: executing program 7 (id=4396): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000a00)={'filter\x00', 0x7, 0x4, 0x3f0, 0x1f8, 0x1f8, 0xe8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xbf66}}}, {{@arp={@loopback, @broadcast, 0xffffff00, 0x0, 0x3, 0x2, {@mac=@remote, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0x9f4b81bf77d97340, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x5f, 0x6, 0xa1, 0x81, 0x10, 0x0, 'wg0\x00', 'team_slave_0\x00', {}, {}, 0x0, 0x30}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @mac=@remote, @local, @multicast2, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private=0xa010100, @multicast1, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 419.551313ms ago: executing program 0 (id=4397): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r1, 0x8008551c, &(0x7f0000000180)={0x1, 0x18, 0x0, 0x1, 0x0, 0x0, 0x0}) 414.622413ms ago: executing program 5 (id=4398): perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x505b8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x586e, 0x2, @perf_config_ext={0x6, 0x400000008}, 0x4c58, 0x5, 0x0, 0x1, 0x2, 0x20005, 0x10, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 405.143233ms ago: executing program 7 (id=4399): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) timerfd_create(0x7, 0x800) 387.200464ms ago: executing program 7 (id=4400): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='mm_page_free\x00', r0}, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 386.596374ms ago: executing program 0 (id=4410): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x8010) 367.927134ms ago: executing program 5 (id=4401): socket$xdp(0x2c, 0x3, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x20040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f00000000c0)) 331.961025ms ago: executing program 6 (id=4402): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x7fffffff}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0xeb4, 0x30, 0xb, 0x0, 0x0, {}, [{0xea0, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xb, 0x0, 0x0, 0x0, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe54, 0x2, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x1}, [{}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0x40}, {}, {}, {}, {}, {}, {}, {0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x9, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {0x6}, {0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffc}, {0x0, 0x0, 0x8001}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x1, 0x0, 0x0, 0x401}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {0x0, 0x0, 0x0, 0x1d4ce113}, {}, {0x400}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1000000}, {}, {0x2}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x400000}, {}, {}, {}, {0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x4000}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x1}, {0x0, 0x3}, {0x0, 0x0, 0x3}], [{}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {0x6}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x721119ea02b29831}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x3}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb4}}, 0x4000) 331.377235ms ago: executing program 5 (id=4413): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006118bc000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x3b) 305.783035ms ago: executing program 6 (id=4403): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) 291.805655ms ago: executing program 5 (id=4404): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x7, &(0x7f00000190c0)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000100850000008600000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) 276.804106ms ago: executing program 0 (id=4416): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xffffffffffffffff) 272.226446ms ago: executing program 5 (id=4405): r0 = memfd_create(&(0x7f0000000b80)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r0, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 218.908217ms ago: executing program 0 (id=4406): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000640)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@discard}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r0, &(0x7f0000000380)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0x0, 0x0) close(r0) 218.782307ms ago: executing program 3 (id=4407): unshare(0x8000000) semget$private(0x0, 0x1, 0x0) semtimedop(0x0, &(0x7f0000000280)=[{0x0, 0x1000, 0x1000}], 0x1, 0x0) unshare(0x2c040000) 218.568987ms ago: executing program 6 (id=4408): syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)="68dd64c90b429cb3f3cfb5da5670a7ba950bb63afa52eca5658cfb9239a617fb6b2307af22e4a4c3619ce5074ce9735e1366d74c6273a6972918f84ddb59d62da9e4f4751b533e9c918c66a530a3ad3182f83b173322b983ecb5bfce58d273917de8e0bcea3541d50573c810c990bad830041c69f6f8209b18ed175560c37d4001b7c48801") r0 = perf_event_open$cgroup(&(0x7f00000001c0)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$PERF_EVENT_IOC_ID(r0, 0x4008240b, &(0x7f00000013c0)) 186.098577ms ago: executing program 3 (id=4409): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73"], 0x38}, 0x1, 0x0, 0x0, 0x20000087}, 0x0) 309.77µs ago: executing program 0 (id=4411): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) timerfd_create(0x7, 0x800) 152.72µs ago: executing program 3 (id=4412): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x30000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x1c}, 0x0, 0x0, 0x800020, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 0s ago: executing program 6 (id=4414): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x22) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33) kernel console output (not intermixed with test programs): dm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 95.237216][T10262] loop2: detected capacity change from 0 to 1024 [ 95.238837][ T29] audit: type=1400 audit(1753699995.773:1741): avc: denied { read } for pid=10259 comm="syz.4.2964" lport=8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 95.302392][T10262] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.352755][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.393881][T10278] netlink: 268 bytes leftover after parsing attributes in process `syz.3.2972'. [ 95.422748][T10269] atomic_op ffff888105292928 conn xmit_atomic 0000000000000000 [ 95.430383][ T29] audit: type=1400 audit(1753699995.983:1742): avc: denied { bind } for pid=10263 comm="syz.4.2967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 95.449944][ T29] audit: type=1400 audit(1753699995.983:1743): avc: denied { write } for pid=10263 comm="syz.4.2967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 95.496067][ T29] audit: type=1400 audit(1753699996.053:1744): avc: denied { ioctl } for pid=10281 comm="syz.2.2973" path="socket:[25150]" dev="sockfs" ino=25150 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 95.521764][ T29] audit: type=1400 audit(1753699996.053:1745): avc: denied { bind } for pid=10281 comm="syz.2.2973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 95.612047][ T29] audit: type=1400 audit(1753699996.173:1746): avc: denied { kexec_image_load } for pid=10285 comm="syz.0.2976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 95.752082][ T29] audit: type=1400 audit(1753699996.313:1747): avc: denied { mount } for pid=10293 comm="syz.4.2980" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 95.825560][T10297] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2981'. [ 95.835577][T10297] openvswitch: netlink: Message has 8 unknown bytes. [ 96.067023][T10317] bridge_slave_0: default FDB implementation only supports local addresses [ 96.116014][T10321] SELinux: policydb version -372095312 does not match my version range 15-34 [ 96.125753][T10321] SELinux: failed to load policy [ 96.332670][T10338] loop4: detected capacity change from 0 to 1024 [ 96.350333][T10338] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.390247][T10342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3002'. [ 96.485427][T10354] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3007'. [ 96.495199][T10354] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3007'. [ 96.504261][T10354] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3007'. [ 96.549837][T10354] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3007'. [ 96.654210][T10365] loop3: detected capacity change from 0 to 1764 [ 96.757069][T10383] loop0: detected capacity change from 0 to 1024 [ 97.511628][T10396] netlink: 'syz.4.3024': attribute type 11 has an invalid length. [ 97.547863][T10395] loop0: detected capacity change from 0 to 4096 [ 97.622816][T10395] EXT4-fs (loop0): shut down requested (2) [ 97.878400][T10430] batman_adv: batadv0: Adding interface: dummy0 [ 97.884804][T10430] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.912294][T10430] batman_adv: batadv0: Interface activated: dummy0 [ 98.454807][T10512] Invalid ELF header magic: != ELF [ 98.501482][T10516] __nla_validate_parse: 7 callbacks suppressed [ 98.501500][T10516] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3049'. [ 98.555294][T10523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3050'. [ 98.564437][T10523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3050'. [ 98.654319][T10533] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.740156][ T3385] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 98.747693][ T3385] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 98.755856][ T3385] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 98.763335][ T3385] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 98.770814][ T3385] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 98.778230][ T3385] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 98.786383][ T3385] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 98.793901][ T3385] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 98.801373][ T3385] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 98.808814][ T3385] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 98.817009][ T3385] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 98.824577][ T3385] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 98.832077][ T3385] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 98.839501][ T3385] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 98.847658][ T3385] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 98.855253][ T3385] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 98.862713][ T3385] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 98.870194][ T3385] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 98.878392][ T3385] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 98.885880][ T3385] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 98.893347][ T3385] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 98.901467][ T3385] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 98.909062][ T3385] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 98.916744][ T3385] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 98.924287][ T3385] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 98.932575][ T3385] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 98.940064][ T3385] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 98.947536][ T3385] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 98.955032][ T3385] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 98.963213][ T3385] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 98.970903][ T3385] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 98.978335][ T3385] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 98.985785][ T3385] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 98.993947][ T3385] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 99.001390][ T3385] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 99.008896][ T3385] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 99.016462][ T3385] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 99.024725][ T3385] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 99.032200][ T3385] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 99.039733][ T3385] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 99.047251][ T3385] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 99.055471][ T3385] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 99.062970][ T3385] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 99.077866][ T3385] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 99.391504][T10602] random: crng reseeded on system resumption [ 99.407172][T10602] Restarting kernel threads ... [ 99.414035][T10602] Done restarting kernel threads. [ 100.014957][T10626] loop4: detected capacity change from 0 to 512 [ 100.033081][T10628] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3074'. [ 100.054448][T10626] __quota_error: 25 callbacks suppressed [ 100.054470][T10626] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 100.074865][T10626] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 100.091276][T10626] EXT4-fs (loop4): mount failed [ 100.188478][T10644] loop0: detected capacity change from 0 to 1024 [ 100.205033][T10646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3083'. [ 100.214098][T10646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3083'. [ 100.245607][ T29] audit: type=1400 audit(1753700000.803:1773): avc: denied { append } for pid=10647 comm="syz.3.3084" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 100.253316][T10649] loop3: detected capacity change from 0 to 128 [ 100.297203][ T29] audit: type=1400 audit(1753700000.853:1774): avc: denied { create } for pid=10652 comm="syz.2.3086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 100.298746][T10654] delete_channel: no stack [ 100.337759][T10644] EXT4-fs mount: 5 callbacks suppressed [ 100.337781][T10644] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.367275][ T29] audit: type=1400 audit(1753700000.923:1775): avc: denied { read } for pid=10652 comm="syz.2.3086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 100.438069][T10661] netlink: 'syz.4.3091': attribute type 1 has an invalid length. [ 100.476513][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.618724][T10682] loop0: detected capacity change from 0 to 256 [ 100.637415][T10683] netlink: 'syz.2.3101': attribute type 3 has an invalid length. [ 100.646041][T10683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3101'. [ 100.707681][ T29] audit: type=1400 audit(1753700001.263:1776): avc: denied { read } for pid=10688 comm="syz.2.3105" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 100.807554][T10697] loop2: detected capacity change from 0 to 512 [ 100.854091][T10697] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 100.862085][T10697] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 100.883415][T10697] System zones: 0-1, 15-15, 18-18, 34-34 [ 100.894645][T10697] EXT4-fs (loop2): orphan cleanup on readonly fs [ 100.901366][T10697] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 100.911582][T10697] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 100.926236][T10697] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 100.933211][T10697] EXT4-fs error (device loop2): ext4_orphan_get:1419: comm syz.2.3109: bad orphan inode 16 [ 100.954186][T10697] ext4_test_bit(bit=15, block=18) = 1 [ 100.959693][T10697] is_bad_inode(inode)=0 [ 100.963984][T10697] NEXT_ORPHAN(inode)=0 [ 100.966013][T10705] x_tables: duplicate underflow at hook 1 [ 100.968079][T10697] max_ino=32 [ 100.977780][T10697] i_nlink=2 [ 100.981369][T10697] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 101.010561][ T29] audit: type=1400 audit(1753700001.563:1777): avc: denied { read } for pid=10696 comm="syz.2.3109" name="file2" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 101.041217][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.080789][ T29] audit: type=1400 audit(1753700001.633:1778): avc: denied { setopt } for pid=10712 comm="syz.2.3114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 101.126161][T10711] loop4: detected capacity change from 0 to 2048 [ 101.152648][T10718] netlink: 'syz.0.3117': attribute type 4 has an invalid length. [ 101.170908][ T29] audit: type=1400 audit(1753700001.723:1779): avc: denied { create } for pid=10717 comm="syz.3.3118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 101.191510][ T29] audit: type=1400 audit(1753700001.723:1780): avc: denied { connect } for pid=10717 comm="syz.3.3118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 101.252149][T10711] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.281397][T10711] ext4 filesystem being mounted at /649/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.313373][T10711] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3115: bg 0: block 345: padding at end of block bitmap is not set [ 101.344115][T10728] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3119'. [ 101.418562][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.501392][T10736] loop3: detected capacity change from 0 to 512 [ 101.542802][T10736] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.559782][T10736] ext4 filesystem being mounted at /698/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.575866][T10744] loop4: detected capacity change from 0 to 512 [ 101.616583][T10736] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.3124: corrupted xattr block 19: overlapping e_value [ 101.647921][T10744] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.664138][T10736] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 101.695845][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.709526][T10736] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.3124: corrupted xattr block 19: overlapping e_value [ 101.750929][T10736] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 101.763650][T10736] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.3124: corrupted xattr block 19: overlapping e_value [ 101.809137][T10736] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 101.861524][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.887278][T10772] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3138'. [ 101.916394][T10767] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3138'. [ 101.955782][T10778] loop3: detected capacity change from 0 to 1024 [ 101.984517][T10778] EXT4-fs: inline encryption not supported [ 101.994311][T10778] EXT4-fs: Ignoring removed bh option [ 102.027574][T10778] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.064265][ T3334] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.124726][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.135189][T10799] tipc: Enabling of bearer rejected, failed to enable media [ 102.156540][ T3334] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.256610][ T3334] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.272557][T10810] netlink: 'syz.4.3152': attribute type 10 has an invalid length. [ 102.372941][T10814] netlink: 'syz.4.3152': attribute type 10 has an invalid length. [ 102.394074][T10810] team0: Port device dummy0 added [ 102.401237][ T3334] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.419779][T10818] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 102.436546][T10773] chnl_net:caif_netlink_parms(): no params data found [ 102.454727][T10814] team0: Port device dummy0 removed [ 102.475587][T10814] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 102.612256][T10834] loop3: detected capacity change from 0 to 1024 [ 102.621423][T10773] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.628562][T10773] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.661545][T10834] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.679571][T10773] bridge_slave_0: entered allmulticast mode [ 102.700126][T10773] bridge_slave_0: entered promiscuous mode [ 102.731248][T10773] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.738357][T10773] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.763202][T10773] bridge_slave_1: entered allmulticast mode [ 102.779780][T10773] bridge_slave_1: entered promiscuous mode [ 102.789930][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.798308][T10846] loop2: detected capacity change from 0 to 4096 [ 102.812656][ T3334] bridge_slave_1: left allmulticast mode [ 102.818354][ T3334] bridge_slave_1: left promiscuous mode [ 102.824901][ T3334] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.841244][ T3334] bridge_slave_0: left allmulticast mode [ 102.847080][ T3334] bridge_slave_0: left promiscuous mode [ 102.853456][ T3334] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.883392][T10846] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.928468][T10846] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #15: comm syz.2.3165: corrupted inode contents [ 102.943183][T10851] SELinux: failed to load policy [ 102.989605][T10846] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #15: comm syz.2.3165: mark_inode_dirty error [ 103.018807][T10846] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #15: comm syz.2.3165: corrupted inode contents [ 103.032756][T10854] program syz.3.3169 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.054183][T10846] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #15: comm syz.2.3165: mark_inode_dirty error [ 103.077279][ T3334] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.093983][ T3334] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.105009][ T3334] bond0 (unregistering): Released all slaves [ 103.119699][T10846] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #15: comm syz.2.3165: corrupted inode contents [ 103.134431][T10773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.141122][T10846] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #15: comm syz.2.3165: mark_inode_dirty error [ 103.146355][T10773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.172644][T10846] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #15: comm syz.2.3165: corrupted inode contents [ 103.188517][ T3334] tipc: Disabling bearer [ 103.194687][ T3334] tipc: Left network mode [ 103.207268][T10846] EXT4-fs error (device loop2): ext4_truncate:4597: inode #15: comm syz.2.3165: mark_inode_dirty error [ 103.225692][T10773] team0: Port device team_slave_0 added [ 103.233019][T10846] EXT4-fs error (device loop2) in ext4_setattr:5986: Corrupt filesystem [ 103.233219][T10773] team0: Port device team_slave_1 added [ 103.252389][T10852] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #15: comm syz.2.3165: corrupted inode contents [ 103.275037][ T3334] hsr_slave_0: left promiscuous mode [ 103.286267][ T3334] hsr_slave_1: left promiscuous mode [ 103.293396][ T3334] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.300891][ T3334] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.322219][ T3309] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 103.341575][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.351142][ T3334] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.358616][ T3334] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.380914][ T3334] veth1_macvtap: left promiscuous mode [ 103.386523][ T3334] veth0_macvtap: left promiscuous mode [ 103.401729][ T3334] veth1_vlan: left promiscuous mode [ 103.407052][ T3334] veth0_vlan: left promiscuous mode [ 103.424663][T10864] xt_connbytes: Forcing CT accounting to be enabled [ 103.446746][T10864] Cannot find set identified by id 0 to match [ 103.533757][ T3334] team0 (unregistering): Port device team_slave_1 removed [ 103.552898][ T3334] team0 (unregistering): Port device team_slave_0 removed [ 103.624529][T10773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.632344][T10773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.658363][T10773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.711123][T10773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.718108][T10773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.744755][T10773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.832128][T10773] hsr_slave_0: entered promiscuous mode [ 103.838401][T10773] hsr_slave_1: entered promiscuous mode [ 103.850892][T10773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.858578][T10773] Cannot create hsr debugfs directory [ 104.009616][ T3334] IPVS: stop unused estimator thread 0... [ 104.016596][T10773] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 104.036567][T10773] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 104.046721][T10773] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 104.056508][T10773] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 104.157068][T10773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.187015][T10773] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.207981][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.215221][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.252951][ T141] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.260068][ T141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.375596][T10773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.547265][T10773] veth0_vlan: entered promiscuous mode [ 104.557372][T10773] veth1_vlan: entered promiscuous mode [ 104.579375][T10773] veth0_macvtap: entered promiscuous mode [ 104.589236][T10773] veth1_macvtap: entered promiscuous mode [ 104.603416][T10773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.615661][T10773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.627058][T10773] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.636791][T10773] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.645660][T10773] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.654514][T10773] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.771692][T10935] __nla_validate_parse: 2 callbacks suppressed [ 104.771714][T10935] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3195'. [ 104.829643][T10939] loop2: detected capacity change from 0 to 164 [ 104.851343][T10939] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 104.865250][T10939] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 104.879669][T10939] Symlink component flag not implemented [ 104.886252][T10939] Symlink component flag not implemented [ 104.893431][T10939] Symlink component flag not implemented (7) [ 104.899531][T10939] Symlink component flag not implemented (116) [ 104.972977][T10954] SELinux: policydb version 0 does not match my version range 15-34 [ 104.984360][T10954] SELinux: failed to load policy [ 105.042857][T10958] 9pnet: Could not find request transport: f [ 105.077794][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 105.077813][ T29] audit: type=1400 audit(1753700005.633:1894): avc: denied { create } for pid=10964 comm="syz.5.3209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 105.110013][ T29] audit: type=1400 audit(1753700005.633:1895): avc: denied { setopt } for pid=10964 comm="syz.5.3209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 105.130607][ T29] audit: type=1400 audit(1753700005.633:1896): avc: denied { ioctl } for pid=10964 comm="syz.5.3209" path="socket:[27835]" dev="sockfs" ino=27835 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 105.145166][T10967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3210'. [ 105.165538][T10967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3210'. [ 105.224765][T10974] netlink: 268 bytes leftover after parsing attributes in process `syz.3.3214'. [ 105.235249][ T29] audit: type=1400 audit(2000000000.020:1897): avc: denied { create } for pid=10973 comm="syz.3.3214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 105.256320][ T29] audit: type=1400 audit(2000000000.020:1898): avc: denied { write } for pid=10973 comm="syz.3.3214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 105.277017][ T29] audit: type=1400 audit(2000000000.020:1899): avc: denied { nlmsg_write } for pid=10973 comm="syz.3.3214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 105.305914][ T29] audit: type=1400 audit(2000000000.060:1900): avc: denied { create } for pid=10976 comm="syz.2.3215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 105.326149][ T29] audit: type=1400 audit(2000000000.060:1901): avc: denied { connect } for pid=10976 comm="syz.2.3215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 105.345894][ T29] audit: type=1400 audit(2000000000.060:1902): avc: denied { write } for pid=10976 comm="syz.2.3215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 105.366344][ T29] audit: type=1400 audit(2000000000.060:1903): avc: denied { read } for pid=10976 comm="syz.2.3215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 105.638394][T11010] netlink: 'syz.3.3231': attribute type 13 has an invalid length. [ 105.713112][T11010] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.720549][T11010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.727936][T11010] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.735144][T11010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.852254][T11010] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 105.958409][T11027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3238'. [ 105.981915][T11027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3238'. [ 106.147442][T11054] netlink: 'syz.0.3250': attribute type 13 has an invalid length. [ 106.208484][T11054] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.215649][T11054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.311805][T11054] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 106.413193][T11074] netlink: 'syz.5.3270': attribute type 13 has an invalid length. [ 106.459561][T11074] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 106.606662][T11089] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 118.357724][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 118.357742][ T29] audit: type=1400 audit(2000000013.150:1954): avc: denied { execmem } for pid=11106 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 118.409055][ T29] audit: type=1400 audit(2000000013.200:1955): avc: denied { mounton } for pid=11107 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 118.538756][T11107] chnl_net:caif_netlink_parms(): no params data found [ 118.576732][T11107] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.583971][T11107] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.591329][T11107] bridge_slave_0: entered allmulticast mode [ 118.597821][T11107] bridge_slave_0: entered promiscuous mode [ 118.605272][T11107] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.612465][T11107] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.619697][T11107] bridge_slave_1: entered allmulticast mode [ 118.626350][T11107] bridge_slave_1: entered promiscuous mode [ 118.645568][T11107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.655927][T11107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.676386][T11107] team0: Port device team_slave_0 added [ 118.683757][T11107] team0: Port device team_slave_1 added [ 118.699834][T11107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.706855][T11107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.733832][T11107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.745066][T11107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.752054][T11107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.779134][T11107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.807740][T11107] hsr_slave_0: entered promiscuous mode [ 118.814411][T11107] hsr_slave_1: entered promiscuous mode [ 118.820261][T11107] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.827918][T11107] Cannot create hsr debugfs directory [ 118.897731][T11107] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 118.907471][T11107] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 118.916197][T11107] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 118.925159][T11107] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 118.942854][T11107] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.950026][T11107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.957448][T11107] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.964575][T11107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.996300][T11107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.008894][ T141] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.016975][ T141] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.028429][T11107] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.039262][ T141] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.046696][ T141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.057921][ T141] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.065092][ T141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.132869][T11107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.243766][T11107] veth0_vlan: entered promiscuous mode [ 119.252246][T11107] veth1_vlan: entered promiscuous mode [ 119.269935][T11107] veth0_macvtap: entered promiscuous mode [ 119.277789][T11107] veth1_macvtap: entered promiscuous mode [ 119.291339][T11107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.303747][T11107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.313575][T11107] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.322512][T11107] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.331385][T11107] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.340107][T11107] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.416725][T11158] netlink: 'syz.6.3274': attribute type 13 has an invalid length. [ 119.425650][T11154] sch_tbf: burst 0 is lower than device lo mtu (76) ! [ 119.455767][ T29] audit: type=1400 audit(2000000014.250:1956): avc: denied { shutdown } for pid=11159 comm="syz.5.3282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 119.483692][T11162] loop3: detected capacity change from 0 to 512 [ 119.494726][T11158] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 119.521120][T11162] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.3283: corrupted inode contents [ 119.580839][T11162] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #16: comm syz.3.3283: mark_inode_dirty error [ 119.606507][T11162] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.3283: corrupted inode contents [ 119.620932][T11162] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.3283: mark_inode_dirty error [ 119.651448][T11162] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.3283: corrupted inode contents [ 119.675449][T11162] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 119.682920][ T29] audit: type=1326 audit(2000000014.470:1957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11184 comm="syz.2.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba6e5e9a9 code=0x7ffc0000 [ 119.708302][ T29] audit: type=1326 audit(2000000014.470:1958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11184 comm="syz.2.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba6e5e9a9 code=0x7ffc0000 [ 119.745392][T11162] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.3283: corrupted inode contents [ 119.762133][ T29] audit: type=1326 audit(2000000014.480:1959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11184 comm="syz.2.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcba6e5e9a9 code=0x7ffc0000 [ 119.770532][T11162] EXT4-fs error (device loop3): ext4_truncate:4597: inode #16: comm syz.3.3283: mark_inode_dirty error [ 119.786528][ T29] audit: type=1326 audit(2000000014.480:1960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11184 comm="syz.2.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba6e5e9a9 code=0x7ffc0000 [ 119.821313][ T29] audit: type=1326 audit(2000000014.480:1961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11184 comm="syz.2.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcba6e5e9a9 code=0x7ffc0000 [ 119.844921][ T29] audit: type=1326 audit(2000000014.530:1962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11184 comm="syz.2.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba6e5e9a9 code=0x7ffc0000 [ 119.868476][ T29] audit: type=1326 audit(2000000014.530:1963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11184 comm="syz.2.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7fcba6e5e9a9 code=0x7ffc0000 [ 119.902511][T11162] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 119.923641][T11162] EXT4-fs (loop3): 1 truncate cleaned up [ 119.939255][T11162] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.968831][ T12] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 119.985498][T11203] netlink: 404 bytes leftover after parsing attributes in process `syz.2.3301'. [ 120.023340][T11162] ext4 filesystem being mounted at /740/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.084673][T11215] loop6: detected capacity change from 0 to 512 [ 120.101933][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.115728][T11215] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 120.132589][T11215] System zones: 1-12 [ 120.141563][T11215] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm syz.6.3308: error while reading EA inode 32 err=-116 [ 120.157164][T11215] EXT4-fs (loop6): Remounting filesystem read-only [ 120.164581][T11215] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 120.180118][T11215] EXT4-fs (loop6): 1 orphan inode deleted [ 120.187289][T11215] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.202836][T11231] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3325'. [ 120.292238][T11107] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.336443][T11253] loop0: detected capacity change from 0 to 512 [ 120.365907][T11253] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.3324: corrupted inode contents [ 120.380335][T11253] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #16: comm syz.0.3324: mark_inode_dirty error [ 120.393779][T11253] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.3324: corrupted inode contents [ 120.407878][T11253] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.3324: mark_inode_dirty error [ 120.422607][T11253] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.3324: corrupted inode contents [ 120.445958][T11253] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 120.464885][T11253] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.3324: corrupted inode contents [ 120.486837][T11253] EXT4-fs error (device loop0): ext4_truncate:4597: inode #16: comm syz.0.3324: mark_inode_dirty error [ 120.502049][T11253] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 120.532986][T11253] EXT4-fs (loop0): 1 truncate cleaned up [ 120.540050][T11253] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.554081][ T3444] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1 [ 120.554120][T11253] ext4 filesystem being mounted at /621/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.583627][T11279] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3337'. [ 120.613732][T11281] netlink: 'syz.2.3338': attribute type 5 has an invalid length. [ 120.631087][T11283] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3339'. [ 120.640037][T11283] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3339'. [ 120.677852][T11283] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3339'. [ 120.686840][T11283] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3339'. [ 120.707551][T11291] netlink: 'syz.2.3343': attribute type 1 has an invalid length. [ 120.715517][T11291] netlink: 'syz.2.3343': attribute type 2 has an invalid length. [ 120.740168][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.825414][T11303] 9pnet: Could not find request transport: 0xffffffffffffffff [ 120.876669][T11318] program syz.3.3356 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.917702][T11327] netlink: 'syz.5.3361': attribute type 5 has an invalid length. [ 120.918602][T11324] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3358'. [ 120.983171][T11335] netdevsim netdevsim5: Direct firmware load for ./file0/file1 failed with error -2 [ 121.022712][T11341] loop6: detected capacity change from 0 to 512 [ 121.057396][T11345] 9pnet: Could not find request transport: 0xffffffffffffffff [ 121.072176][T11341] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #16: comm syz.6.3368: corrupted inode contents [ 121.086442][T11341] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #16: comm syz.6.3368: mark_inode_dirty error [ 121.098818][T11341] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #16: comm syz.6.3368: corrupted inode contents [ 121.110954][T11341] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.3368: mark_inode_dirty error [ 121.123544][T11341] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #16: comm syz.6.3368: corrupted inode contents [ 121.135757][T11341] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 121.144523][T11341] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #16: comm syz.6.3368: corrupted inode contents [ 121.157397][T11341] EXT4-fs error (device loop6): ext4_truncate:4597: inode #16: comm syz.6.3368: mark_inode_dirty error [ 121.168766][T11341] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 121.178286][T11341] EXT4-fs (loop6): 1 truncate cleaned up [ 121.185089][T11341] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.198199][T11341] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.198338][ T3444] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1 [ 121.233668][T11107] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.255861][T11359] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3383'. [ 121.296313][T11365] loop3: detected capacity change from 0 to 512 [ 121.319830][T11365] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 121.328790][T11365] System zones: 1-12 [ 121.334227][T11365] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.3374: error while reading EA inode 32 err=-116 [ 121.349563][T11365] EXT4-fs (loop3): Remounting filesystem read-only [ 121.356364][T11365] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 121.375195][T11365] EXT4-fs (loop3): 1 orphan inode deleted [ 121.386336][T11365] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.430120][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.516160][T11383] loop5: detected capacity change from 0 to 8192 [ 121.614865][T11411] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3409'. [ 121.642019][T11415] netlink: 'syz.6.3401': attribute type 5 has an invalid length. [ 121.655115][T11419] netdevsim netdevsim3: Direct firmware load for ./file0/file1 failed with error -2 [ 121.661803][T11418] program syz.2.3402 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.755345][T11427] netlink: 'syz.3.3416': attribute type 5 has an invalid length. [ 121.764056][T11424] loop5: detected capacity change from 0 to 512 [ 121.793546][T11424] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.3405: corrupted inode contents [ 121.806064][T11424] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #16: comm syz.5.3405: mark_inode_dirty error [ 121.818048][T11424] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.3405: corrupted inode contents [ 121.831208][T11424] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.3405: mark_inode_dirty error [ 121.842934][T11424] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.3405: corrupted inode contents [ 121.855085][T11424] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 121.864657][T11424] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.3405: corrupted inode contents [ 121.876774][T11424] EXT4-fs error (device loop5): ext4_truncate:4597: inode #16: comm syz.5.3405: mark_inode_dirty error [ 121.888045][T11424] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 121.897881][T11424] EXT4-fs (loop5): 1 truncate cleaned up [ 121.904056][T11424] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.917116][ T3444] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1 [ 121.928721][T11424] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.971373][T10773] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.995693][T11439] loop0: detected capacity change from 0 to 512 [ 122.009377][T11439] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 122.019262][T11439] System zones: 1-12 [ 122.025119][T11439] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.3406: error while reading EA inode 32 err=-116 [ 122.038774][T11439] EXT4-fs (loop0): Remounting filesystem read-only [ 122.046117][T11439] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 122.056445][T11439] EXT4-fs (loop0): 1 orphan inode deleted [ 122.062685][T11439] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.136238][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.474739][T11510] loop5: detected capacity change from 0 to 512 [ 122.484569][T11510] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 122.493618][T11510] System zones: 1-12 [ 122.503017][T11510] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.3443: error while reading EA inode 32 err=-116 [ 122.520962][T11510] EXT4-fs (loop5): Remounting filesystem read-only [ 122.527590][T11510] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 122.553070][T11510] EXT4-fs (loop5): 1 orphan inode deleted [ 122.564036][T11510] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.602818][T10773] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.825153][T11548] loop2: detected capacity change from 0 to 512 [ 122.831948][T11550] loop5: detected capacity change from 0 to 128 [ 122.833680][T11548] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 122.838660][T11550] vfat: Unknown parameter '' [ 122.846624][T11548] System zones: 1-12 [ 122.857390][T11548] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.3463: error while reading EA inode 32 err=-116 [ 122.870746][T11548] EXT4-fs (loop2): Remounting filesystem read-only [ 122.877382][T11548] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 122.888435][T11548] EXT4-fs (loop2): 1 orphan inode deleted [ 122.894733][T11548] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.928292][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.954328][T11554] loop0: detected capacity change from 0 to 8192 [ 122.996431][T11562] loop2: detected capacity change from 0 to 512 [ 123.009197][T11562] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 123.018625][T11562] System zones: 1-12 [ 123.026249][T11562] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.3477: error while reading EA inode 32 err=-116 [ 123.029840][T11569] netlink: 'syz.5.3469': attribute type 1 has an invalid length. [ 123.047246][T11569] netlink: 'syz.5.3469': attribute type 2 has an invalid length. [ 123.055429][T11562] EXT4-fs (loop2): Remounting filesystem read-only [ 123.062830][T11562] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 123.073516][T11562] EXT4-fs (loop2): 1 orphan inode deleted [ 123.079727][T11562] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.109187][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.144440][T11576] loop2: detected capacity change from 0 to 512 [ 123.153200][T11576] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 123.161504][T11576] System zones: 1-12 [ 123.166253][T11576] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.3484: error while reading EA inode 32 err=-116 [ 123.179364][T11576] EXT4-fs (loop2): Remounting filesystem read-only [ 123.186644][T11576] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 123.196927][T11576] EXT4-fs (loop2): 1 orphan inode deleted [ 123.211766][T11576] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.236828][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.269622][T11588] loop0: detected capacity change from 0 to 512 [ 123.277760][T11588] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 123.286536][T11588] System zones: 1-12 [ 123.291443][T11588] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.3490: error while reading EA inode 32 err=-116 [ 123.305032][T11588] EXT4-fs (loop0): Remounting filesystem read-only [ 123.311637][T11588] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 123.321843][T11588] EXT4-fs (loop0): 1 orphan inode deleted [ 123.328132][T11588] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.355811][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.376373][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 123.376392][ T29] audit: type=1400 audit(2000000018.170:2064): avc: denied { create } for pid=11600 comm="syz.0.3493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 123.448505][T11599] loop2: detected capacity change from 0 to 8192 [ 124.050549][ T29] audit: type=1400 audit(2000000018.840:2065): avc: denied { map } for pid=11620 comm="syz.6.3492" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=29405 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 124.075756][ T29] audit: type=1400 audit(2000000018.840:2066): avc: denied { read write } for pid=11620 comm="syz.6.3492" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=29405 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 124.119327][ T29] audit: type=1326 audit(2000000018.870:2067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11622 comm="syz.6.3494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3ba84e9a9 code=0x7ffc0000 [ 124.143684][ T29] audit: type=1326 audit(2000000018.870:2068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11622 comm="syz.6.3494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3ba84e9a9 code=0x7ffc0000 [ 124.167573][ T29] audit: type=1326 audit(2000000018.870:2069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11622 comm="syz.6.3494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fa3ba84e9a9 code=0x7ffc0000 [ 124.191855][ T29] audit: type=1326 audit(2000000018.870:2070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11622 comm="syz.6.3494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3ba84e9a9 code=0x7ffc0000 [ 124.215557][ T29] audit: type=1326 audit(2000000018.870:2071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11622 comm="syz.6.3494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3ba84e9a9 code=0x7ffc0000 [ 124.239821][ T29] audit: type=1326 audit(2000000018.870:2072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11622 comm="syz.6.3494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa3ba84e9a9 code=0x7ffc0000 [ 124.263437][ T29] audit: type=1326 audit(2000000018.870:2073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11622 comm="syz.6.3494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3ba84e9a9 code=0x7ffc0000 [ 125.564273][T11662] program syz.0.3509 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 125.659286][T11674] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.726604][T11692] loop2: detected capacity change from 0 to 512 [ 125.740119][T11692] EXT4-fs: Ignoring removed nobh option [ 125.765224][T11692] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #3: comm syz.2.3524: corrupted inode contents [ 125.792121][T11703] loop5: detected capacity change from 0 to 512 [ 125.800097][T11692] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #3: comm syz.2.3524: mark_inode_dirty error [ 125.815494][T11692] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #3: comm syz.2.3524: corrupted inode contents [ 125.829498][T11692] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.3524: mark_inode_dirty error [ 125.843068][T11692] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.3524: Failed to acquire dquot type 0 [ 125.860619][T11703] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.865179][T11692] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.3524: corrupted inode contents [ 125.873452][T11703] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.894602][T11692] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #16: comm syz.2.3524: mark_inode_dirty error [ 125.908997][T11692] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.3524: corrupted inode contents [ 125.925241][T11692] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.3524: mark_inode_dirty error [ 125.937065][T11692] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.3524: corrupted inode contents [ 125.950258][T11692] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 125.959993][T11692] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.3524: corrupted inode contents [ 125.981417][T11713] __nla_validate_parse: 10 callbacks suppressed [ 125.981437][T11713] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3535'. [ 125.996928][T11713] netlink: 140 bytes leftover after parsing attributes in process `syz.6.3535'. [ 126.006610][T11692] EXT4-fs error (device loop2): ext4_truncate:4597: inode #16: comm syz.2.3524: mark_inode_dirty error [ 126.019306][T11692] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 126.028782][T11692] EXT4-fs (loop2): 1 truncate cleaned up [ 126.041465][T11703] EXT4-fs error (device loop5): ext4_empty_dir:3078: inode #12: comm syz.5.3529: Directory hole found for htree leaf block 0 [ 126.049112][T11692] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.076369][T11692] ext4 filesystem being mounted at /783/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.089974][T10773] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.113643][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.147415][T11725] loop2: detected capacity change from 0 to 512 [ 126.175034][T11725] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.196571][T11725] ext4 filesystem being mounted at /784/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.216119][T11725] EXT4-fs error (device loop2): ext4_empty_dir:3078: inode #12: comm syz.2.3549: Directory hole found for htree leaf block 0 [ 126.246823][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.562462][ C0] hrtimer: interrupt took 38247 ns [ 126.788538][T11825] loop5: detected capacity change from 0 to 1024 [ 126.829012][T11825] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.847882][T11825] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.3585: inode #2846570127: comm syz.5.3585: iget: illegal inode # [ 126.912200][T11825] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.3585: error while reading EA inode 2846570127 err=-117 [ 126.988846][T11825] EXT4-fs error (device loop5): ext4_xattr_block_list:762: inode #15: comm syz.5.3585: corrupted xattr block 113: invalid header [ 127.062437][T10773] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.119557][T11862] loop2: detected capacity change from 0 to 512 [ 127.323381][T11890] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3617'. [ 127.338911][T11892] nfs4: Bad value for 'source' [ 127.456758][T11902] loop6: detected capacity change from 0 to 128 [ 127.469937][T11902] vfat: Unknown parameter '' [ 127.878355][T11931] loop0: detected capacity change from 0 to 128 [ 127.898657][T11931] vfat: Unknown parameter '' [ 128.034265][T11940] netlink: 'syz.0.3648': attribute type 6 has an invalid length. [ 128.084320][T11942] program syz.2.3640 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 128.186144][T11952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.194755][T11952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.229719][T11956] SELinux: syz.2.3657 (11956) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 128.391155][T11974] program syz.6.3654 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 128.546600][T11997] loop3: detected capacity change from 0 to 2048 [ 128.547557][T11998] bond1: entered promiscuous mode [ 128.553388][T11997] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 128.558212][T11998] bond1: entered allmulticast mode [ 128.573591][T11998] 8021q: adding VLAN 0 to HW filter on device bond1 [ 128.611841][T11998] bond1 (unregistering): Released all slaves [ 128.642071][ T29] kauditd_printk_skb: 109 callbacks suppressed [ 128.642094][ T29] audit: type=1326 audit(2000000023.440:2181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12005 comm="syz.6.3669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3ba84e9a9 code=0x7ffc0000 [ 128.673812][ T29] audit: type=1326 audit(2000000023.470:2182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12005 comm="syz.6.3669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7fa3ba84e9a9 code=0x7ffc0000 [ 128.697524][ T29] audit: type=1326 audit(2000000023.470:2183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12005 comm="syz.6.3669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3ba84e9a9 code=0x7ffc0000 [ 128.722035][ T29] audit: type=1326 audit(2000000023.470:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12005 comm="syz.6.3669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3ba84e9a9 code=0x7ffc0000 [ 128.853850][T12022] loop3: detected capacity change from 0 to 1024 [ 128.873477][T12022] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.897975][T12022] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.3689: inode #2846570127: comm syz.3.3689: iget: illegal inode # [ 128.943291][T12022] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.3689: error while reading EA inode 2846570127 err=-117 [ 128.961188][ T29] audit: type=1400 audit(2000000023.740:2185): avc: denied { create } for pid=12033 comm="syz.5.3681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 128.988194][T12036] EXT4-fs error (device loop3): ext4_xattr_block_list:762: inode #15: comm syz.3.3689: corrupted xattr block 113: invalid header [ 129.034183][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.272476][T12061] loop2: detected capacity change from 0 to 128 [ 129.285496][T12061] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 129.305767][T12061] ext4 filesystem being mounted at /823/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 129.339888][ T29] audit: type=1400 audit(2000000024.130:2186): avc: denied { read append open } for pid=12060 comm="syz.2.3704" path="/823/mnt/memory.numa_stat" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 129.378579][ T3309] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 129.491781][T12085] netlink: 45 bytes leftover after parsing attributes in process `syz.3.3703'. [ 129.519790][T12086] netlink: 'syz.2.3702': attribute type 6 has an invalid length. [ 129.674396][T12098] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12098 comm=syz.3.3713 [ 129.675393][ T29] audit: type=1400 audit(2000000024.470:2187): avc: denied { nlmsg_tty_audit } for pid=12097 comm="syz.3.3713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 129.743732][T12102] loop2: detected capacity change from 0 to 128 [ 129.875522][ T29] audit: type=1400 audit(2000000024.670:2188): avc: denied { bind } for pid=12115 comm="syz.0.3720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 129.960642][T12120] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 130.002437][ T29] audit: type=1400 audit(2000000024.800:2189): avc: denied { mount } for pid=12119 comm="syz.5.3722" name="/" dev="ramfs" ino=31913 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 130.100426][T12132] loop3: detected capacity change from 0 to 512 [ 130.145214][T12132] EXT4-fs: Ignoring removed mblk_io_submit option [ 130.175433][T12132] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 130.224708][T12132] EXT4-fs (loop3): 1 truncate cleaned up [ 130.240208][ T29] audit: type=1326 audit(2000000025.030:2190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12141 comm="syz.2.3732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcba6e55967 code=0x7ffc0000 [ 130.308173][T12148] nfs4: Bad value for 'source' [ 130.387084][T12132] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.581770][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.835957][T12184] veth1_to_team: entered promiscuous mode [ 130.867940][T12184] bond_slave_0: entered promiscuous mode [ 130.908564][T12184] bond_slave_0: left promiscuous mode [ 130.925379][T12184] veth1_to_team: left promiscuous mode [ 130.982307][T12195] bond1: entered promiscuous mode [ 130.987424][T12195] bond1: entered allmulticast mode [ 130.994424][T12195] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.010560][T12195] bond1 (unregistering): Released all slaves [ 131.078306][T12202] netlink: 264 bytes leftover after parsing attributes in process `syz.5.3759'. [ 131.382804][T12230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.414745][T12230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.655270][T12220] loop5: detected capacity change from 0 to 65536 [ 131.857979][T12251] atomic_op ffff888114bcdd28 conn xmit_atomic 0000000000000000 [ 132.065664][T12271] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3803'. [ 132.201803][T12296] loop5: detected capacity change from 0 to 512 [ 132.208233][T12295] loop6: detected capacity change from 0 to 512 [ 132.219165][T12296] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #15: comm syz.5.3801: casefold flag without casefold feature [ 132.232058][T12296] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.3801: couldn't read orphan inode 15 (err -117) [ 132.246021][T12296] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.275154][T10773] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.345155][T12308] netlink: 268 bytes leftover after parsing attributes in process `syz.6.3806'. [ 132.357215][T12309] tipc: Started in network mode [ 132.362242][T12309] tipc: Node identity ff, cluster identity 4711 [ 132.368519][T12309] tipc: Enabling of bearer rejected, failed to enable media [ 132.427346][T12319] netlink: 'syz.6.3813': attribute type 6 has an invalid length. [ 132.484026][T12326] netlink: 'syz.6.3816': attribute type 6 has an invalid length. [ 132.976281][T12379] netlink: 'syz.3.3842': attribute type 6 has an invalid length. [ 133.013494][ T3444] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.035063][T12387] SELinux: syz.3.3847 (12387) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 133.083262][T12392] loop0: detected capacity change from 0 to 128 [ 133.114474][ T3444] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.166849][ T3444] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.213876][ T3444] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.240119][T12415] loop0: detected capacity change from 0 to 512 [ 133.247821][T12415] EXT4-fs: Ignoring removed mblk_io_submit option [ 133.274751][T12415] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 133.302961][T12415] EXT4-fs (loop0): 1 truncate cleaned up [ 133.309318][T12415] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.337903][T12425] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3859'. [ 133.337982][ T3444] bridge_slave_1: left allmulticast mode [ 133.347027][T12425] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3859'. [ 133.347048][T12425] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3859'. [ 133.353442][ T3444] bridge_slave_1: left promiscuous mode [ 133.377216][ T3444] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.388791][ T3444] bridge_slave_0: left allmulticast mode [ 133.394558][ T3444] bridge_slave_0: left promiscuous mode [ 133.400406][ T3444] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.416080][T12425] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3859'. [ 133.425161][T12425] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3859'. [ 133.434151][T12425] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3859'. [ 133.445365][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.470294][T12425] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3859'. [ 133.544216][ T3444] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.554158][ T3444] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.564343][ T3444] bond0 (unregistering): Released all slaves [ 133.576412][T12428] bridge_slave_0: default FDB implementation only supports local addresses [ 133.603628][T12395] chnl_net:caif_netlink_parms(): no params data found [ 133.639488][ T3444] hsr_slave_0: left promiscuous mode [ 133.651908][ T3444] hsr_slave_1: left promiscuous mode [ 133.657623][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 133.657637][ T29] audit: type=1400 audit(2000000028.450:2342): avc: denied { append } for pid=12451 comm="syz.3.3883" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 133.658165][ T3444] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.695264][ T3444] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.717078][T12454] loop5: detected capacity change from 0 to 2048 [ 133.725571][T12454] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 133.734794][ T3444] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.743030][ T3444] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.756409][ T3444] veth1_macvtap: left promiscuous mode [ 133.762853][ T29] audit: type=1326 audit(2000000028.560:2343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12457 comm="syz.3.3873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fad62e9a9 code=0x7ffc0000 [ 133.764273][ T3444] veth0_macvtap: left promiscuous mode [ 133.794323][ T29] audit: type=1326 audit(2000000028.560:2344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12457 comm="syz.3.3873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fad62e9a9 code=0x7ffc0000 [ 133.795610][ T3444] veth1_vlan: left promiscuous mode [ 133.828147][T12461] loop5: detected capacity change from 0 to 128 [ 133.836880][ T29] audit: type=1326 audit(2000000028.590:2345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12457 comm="syz.3.3873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f7fad62e9a9 code=0x7ffc0000 [ 133.861243][ T29] audit: type=1326 audit(2000000028.590:2346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12457 comm="syz.3.3873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fad62e9a9 code=0x7ffc0000 [ 133.862239][ T3444] veth0_vlan: left promiscuous mode [ 133.884945][ T29] audit: type=1326 audit(2000000028.590:2347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12457 comm="syz.3.3873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fad62e9a9 code=0x7ffc0000 [ 133.918328][T12461] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 133.930963][T12461] ext4 filesystem being mounted at /162/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 133.982918][T10773] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 134.062405][ T3444] team0 (unregistering): Port device team_slave_1 removed [ 134.080756][ T3444] team0 (unregistering): Port device team_slave_0 removed [ 134.114285][ T29] audit: type=1400 audit(2000000028.910:2348): avc: denied { write } for pid=12478 comm="syz.5.3886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 134.176589][ T29] audit: type=1400 audit(2000000028.970:2349): avc: denied { setopt } for pid=12483 comm="syz.2.3889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 134.179118][T12485] netlink: 'syz.3.3887': attribute type 11 has an invalid length. [ 134.198894][ T29] audit: type=1400 audit(2000000028.990:2350): avc: denied { ioctl } for pid=12483 comm="syz.2.3889" path="socket:[32906]" dev="sockfs" ino=32906 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 134.230077][T12482] loop5: detected capacity change from 0 to 1764 [ 134.305459][T12496] loop3: detected capacity change from 0 to 1024 [ 134.326651][T12496] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.339503][T12395] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.347480][T12395] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.363079][T12395] bridge_slave_0: entered allmulticast mode [ 134.369808][T12395] bridge_slave_0: entered promiscuous mode [ 134.377028][ T29] audit: type=1400 audit(2000000029.170:2351): avc: denied { map } for pid=12495 comm="syz.3.3893" path="/831/file0/cgroup.controllers" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 134.383580][T12395] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.409025][T12395] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.419338][T12395] bridge_slave_1: entered allmulticast mode [ 134.426223][T12395] bridge_slave_1: entered promiscuous mode [ 134.427750][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.453375][T12507] loop3: detected capacity change from 0 to 128 [ 134.463824][T12507] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 134.477516][T12507] ext4 filesystem being mounted at /832/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 134.478409][T12395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.499406][T12395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.509971][ T3302] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 134.531816][T12512] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 134.542128][T12395] team0: Port device team_slave_0 added [ 134.549571][T12395] team0: Port device team_slave_1 added [ 134.577138][T12395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.584876][T12395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.611613][T12395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.626831][T12395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.633941][T12395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.660836][T12395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.675218][T12520] netlink: 'syz.5.3903': attribute type 11 has an invalid length. [ 134.710925][T12521] openvswitch: netlink: Message has 8 unknown bytes. [ 134.724159][T12395] hsr_slave_0: entered promiscuous mode [ 134.734479][T12395] hsr_slave_1: entered promiscuous mode [ 134.746271][T12395] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.758684][T12395] Cannot create hsr debugfs directory [ 134.817165][T12541] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12541 comm=syz.5.3911 [ 135.044771][T12395] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 135.054650][T12395] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 135.063789][T12395] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 135.073564][T12395] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 135.089783][T12395] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.097016][T12395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.104364][T12395] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.111441][T12395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.141520][T12395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.153757][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.161776][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.174687][T12395] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.186283][ T3334] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.193534][ T3334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.204427][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.211558][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.278413][T12395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.391367][T12395] veth0_vlan: entered promiscuous mode [ 135.399227][T12395] veth1_vlan: entered promiscuous mode [ 135.417913][T12395] veth0_macvtap: entered promiscuous mode [ 135.425711][T12395] veth1_macvtap: entered promiscuous mode [ 135.438539][T12395] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.451550][T12395] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.463302][T12395] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.472108][T12395] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.480966][T12395] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.489686][T12395] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.563768][T12571] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 135.589040][T12575] loop6: detected capacity change from 0 to 128 [ 135.601845][T12575] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 135.621502][T12575] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 135.660775][T12395] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 135.685882][T12592] netlink: 'syz.6.3918': attribute type 11 has an invalid length. [ 135.802084][T12609] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.041500][T12625] loop5: detected capacity change from 0 to 1024 [ 136.048487][T12625] EXT4-fs: Ignoring removed oldalloc option [ 136.068271][T12625] EXT4-fs: Ignoring removed bh option [ 136.095457][T12625] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.122501][T12625] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 136.169831][T10773] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.185640][T12636] loop2: detected capacity change from 0 to 1024 [ 136.194084][T12636] EXT4-fs: inline encryption not supported [ 136.200218][T12636] EXT4-fs: Ignoring removed bh option [ 136.223468][T12636] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.266065][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.762595][T12649] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 136.762640][T12645] random: crng reseeded on system resumption [ 136.770161][T12645] Restarting kernel threads ... [ 136.778871][T12650] loop0: detected capacity change from 0 to 1024 [ 136.802590][T12645] Done restarting kernel threads. [ 136.831035][T12650] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.929959][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.060111][T12667] loop2: detected capacity change from 0 to 4096 [ 137.086436][T12676] Invalid ELF header magic: != ELF [ 137.099178][T12680] __nla_validate_parse: 11 callbacks suppressed [ 137.099264][T12680] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3959'. [ 137.113095][T12667] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.157920][T12667] EXT4-fs (loop2): shut down requested (2) [ 137.177801][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.196339][T12687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3972'. [ 137.392054][T12727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3983'. [ 137.402050][T12727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3983'. [ 137.754057][T12792] batman_adv: batadv0: Adding interface: dummy0 [ 137.760533][T12792] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.801031][T12792] batman_adv: batadv0: Interface activated: dummy0 [ 137.941015][T12821] loop0: detected capacity change from 0 to 128 [ 138.617294][T12902] delete_channel: no stack [ 138.627865][T12903] netlink: 'syz.0.4018': attribute type 3 has an invalid length. [ 138.635775][T12903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4018'. [ 138.668972][T12909] loop3: detected capacity change from 0 to 1024 [ 138.679110][T12909] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.712528][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.725063][T12917] loop0: detected capacity change from 0 to 512 [ 138.734969][T12919] netlink: 'syz.3.4015': attribute type 1 has an invalid length. [ 138.736577][T12917] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 138.817622][T12927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4021'. [ 138.818106][T12930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4030'. [ 138.826671][T12927] netlink: 26 bytes leftover after parsing attributes in process `syz.3.4021'. [ 138.835653][T12930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4030'. [ 138.892144][T12934] loop3: detected capacity change from 0 to 1024 [ 138.898998][T12934] EXT4-fs: Ignoring removed oldalloc option [ 138.905034][T12934] EXT4-fs: Ignoring removed bh option [ 138.923425][T12934] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.953472][T12934] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 138.988905][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.534278][T12940] random: crng reseeded on system resumption [ 139.545907][T12940] Restarting kernel threads ... [ 139.551031][T12940] Done restarting kernel threads. [ 139.747318][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 139.747336][ T29] audit: type=1400 audit(2000000034.540:2399): avc: denied { name_bind } for pid=12960 comm="syz.2.4033" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 139.783713][T12965] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4046'. [ 139.815219][T12968] loop6: detected capacity change from 0 to 512 [ 139.831653][T12968] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 139.839610][T12968] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 139.849380][T12968] System zones: 0-1, 15-15, 18-18, 34-34 [ 139.856012][T12968] EXT4-fs (loop6): orphan cleanup on readonly fs [ 139.864000][T12968] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0 [ 139.873399][T12968] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 139.888721][T12968] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 139.895555][T12968] EXT4-fs error (device loop6): ext4_orphan_get:1419: comm syz.6.4047: bad orphan inode 16 [ 139.905732][T12968] ext4_test_bit(bit=15, block=18) = 1 [ 139.911814][T12968] is_bad_inode(inode)=0 [ 139.915978][T12968] NEXT_ORPHAN(inode)=0 [ 139.920089][T12968] max_ino=32 [ 139.923368][T12968] i_nlink=2 [ 139.926885][T12968] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 139.942929][ T29] audit: type=1400 audit(2000000034.740:2400): avc: denied { read } for pid=12967 comm="syz.6.4047" name="file2" dev="loop6" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 139.974865][T12395] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.405614][T12980] x_tables: duplicate underflow at hook 1 [ 140.417450][T12982] random: crng reseeded on system resumption [ 140.432342][T12982] Restarting kernel threads ... [ 140.438730][T12982] Done restarting kernel threads. [ 140.478461][ T29] audit: type=1326 audit(2000000035.270:2401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12988 comm="syz.2.4055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba6e5e9a9 code=0x7ffc0000 [ 140.502826][ T29] audit: type=1326 audit(2000000035.270:2402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12988 comm="syz.2.4055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba6e5e9a9 code=0x7ffc0000 [ 140.540413][ T29] audit: type=1326 audit(2000000035.270:2403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12988 comm="syz.2.4055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7fcba6e5e9a9 code=0x7ffc0000 [ 140.564913][ T29] audit: type=1326 audit(2000000035.270:2404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12988 comm="syz.2.4055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba6e5e9a9 code=0x7ffc0000 [ 140.588673][ T29] audit: type=1326 audit(2000000035.270:2405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12988 comm="syz.2.4055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba6e5e9a9 code=0x7ffc0000 [ 141.826606][T13117] loop6: detected capacity change from 0 to 512 [ 141.844417][T13117] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 141.878208][ T29] audit: type=1400 audit(2000000036.670:2406): avc: denied { setopt } for pid=13125 comm="syz.0.4064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 141.913864][T13121] loop2: detected capacity change from 0 to 2048 [ 141.935811][T13121] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.985577][T13139] netlink: 'syz.5.4054': attribute type 4 has an invalid length. [ 141.993426][ T29] audit: type=1400 audit(2000000036.770:2407): avc: denied { write } for pid=13125 comm="syz.0.4064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 142.038436][T13142] loop3: detected capacity change from 0 to 256 [ 142.060129][T13121] ext4 filesystem being mounted at /899/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.114543][T13121] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4058: bg 0: block 345: padding at end of block bitmap is not set [ 142.196231][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.266809][T13166] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4070'. [ 142.351714][T13176] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4075'. [ 142.419816][T13189] dummy0: entered allmulticast mode [ 142.422624][T13188] loop0: detected capacity change from 0 to 512 [ 142.425724][T13189] dummy0: left allmulticast mode [ 142.438108][T13188] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.466045][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.240319][T13210] loop2: detected capacity change from 0 to 512 [ 143.267587][T13210] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.285045][T13210] ext4 filesystem being mounted at /904/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.298499][T13217] loop3: detected capacity change from 0 to 512 [ 143.342323][T13223] loop6: detected capacity change from 0 to 2048 [ 143.353405][T13217] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 143.361550][T13217] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 143.375916][T13225] tipc: Enabling of bearer rejected, failed to enable media [ 143.393035][T13223] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.405453][T13217] System zones: 0-1, 15-15, 18-18, 34-34 [ 143.415598][T13223] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.426426][T13217] EXT4-fs (loop3): orphan cleanup on readonly fs [ 143.435380][T13217] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 143.436218][T13210] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.4090: corrupted xattr block 19: overlapping e_value [ 143.450902][T13217] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 143.471117][T13217] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.4093: bad orphan inode 16 [ 143.474594][T13223] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.4097: bg 0: block 345: padding at end of block bitmap is not set [ 143.482261][T13210] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 143.504850][T13210] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.4090: corrupted xattr block 19: overlapping e_value [ 143.519451][T13210] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 143.526617][T13217] ext4_test_bit(bit=15, block=18) = 1 [ 143.534632][T13217] is_bad_inode(inode)=0 [ 143.538891][T13217] NEXT_ORPHAN(inode)=0 [ 143.543015][T13217] max_ino=32 [ 143.546267][T13217] i_nlink=2 [ 143.549868][T13217] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 143.563505][T13210] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.4090: corrupted xattr block 19: overlapping e_value [ 143.665103][T13210] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 143.699174][T12395] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.723043][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.752021][T13247] loop6: detected capacity change from 0 to 512 [ 143.777819][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.788518][T13247] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.824812][T12395] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.912774][T13262] loop6: detected capacity change from 0 to 1024 [ 143.920368][T13262] EXT4-fs: inline encryption not supported [ 143.928530][T13262] EXT4-fs: Ignoring removed bh option [ 143.933664][T13261] loop3: detected capacity change from 0 to 2048 [ 143.956147][T13262] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.990226][T13261] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.003716][T13261] ext4 filesystem being mounted at /888/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.005024][T12395] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.030698][T13261] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4114: bg 0: block 345: padding at end of block bitmap is not set [ 144.088874][T13279] netlink: 7 bytes leftover after parsing attributes in process `syz.6.4117'. [ 144.120943][T13279] netlink: 7 bytes leftover after parsing attributes in process `syz.6.4117'. [ 144.149070][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.269795][T13296] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 144.344259][T13303] netlink: 'syz.2.4130': attribute type 10 has an invalid length. [ 144.361428][T13303] batman_adv: batadv0: Interface deactivated: dummy0 [ 144.384908][T13303] batman_adv: batadv0: Removing interface: dummy0 [ 144.395277][T13303] team0: Port device dummy0 added [ 144.402764][T13307] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.4129'. [ 144.414590][T13303] netlink: 'syz.2.4130': attribute type 10 has an invalid length. [ 144.430392][T13303] team0: Port device dummy0 removed [ 144.442721][T13303] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 144.452357][T13304] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.4129'. [ 144.556580][T13319] loop5: detected capacity change from 0 to 2048 [ 144.564709][T13316] dummy0: entered allmulticast mode [ 144.575460][T13316] dummy0: left allmulticast mode [ 144.581455][T13319] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.596769][T13319] ext4 filesystem being mounted at /222/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.627747][T13319] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4133: bg 0: block 345: padding at end of block bitmap is not set [ 144.726149][T10773] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.754260][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 144.754278][ T29] audit: type=1400 audit(2000000039.550:2492): avc: denied { getopt } for pid=13343 comm="syz.6.4147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 144.830055][T13350] loop6: detected capacity change from 0 to 164 [ 144.859882][T13350] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 144.880872][T13350] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 144.889391][ T29] audit: type=1400 audit(2000000039.670:2493): avc: denied { mount } for pid=13349 comm="syz.6.4150" name="/" dev="loop6" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 144.922995][T13350] Symlink component flag not implemented [ 144.928918][T13350] Symlink component flag not implemented [ 144.945179][T13350] Symlink component flag not implemented (7) [ 144.951957][T13350] Symlink component flag not implemented (116) [ 144.985151][ T29] audit: type=1400 audit(2000000039.780:2494): avc: denied { unmount } for pid=12395 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 145.040903][ T29] audit: type=1400 audit(2000000039.830:2495): avc: denied { create } for pid=13357 comm="syz.6.4155" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 145.114254][T13365] SELinux: failed to load policy [ 145.119706][ T29] audit: type=1400 audit(2000000039.910:2496): avc: denied { load_policy } for pid=13362 comm="syz.5.4158" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 145.189484][ T29] audit: type=1400 audit(2000000039.980:2497): avc: denied { execute } for pid=13366 comm="syz.5.4159" name="file0" dev="tmpfs" ino=1190 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 145.224628][ T29] audit: type=1400 audit(2000000039.980:2498): avc: denied { execute_no_trans } for pid=13366 comm="syz.5.4159" path="/229/file0" dev="tmpfs" ino=1190 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 145.249338][ T29] audit: type=1400 audit(2000000040.020:2499): avc: denied { wake_alarm } for pid=13345 comm="syz.3.4149" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 145.272100][ T29] audit: type=1400 audit(2000000040.070:2500): avc: denied { read append } for pid=13368 comm="syz.5.4160" name="mISDNtimer" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 145.295933][ T29] audit: type=1400 audit(2000000040.070:2501): avc: denied { open } for pid=13368 comm="syz.5.4160" path="/dev/mISDNtimer" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 145.399989][T13375] xt_hashlimit: max too large, truncated to 1048576 [ 145.456902][T13379] loop3: detected capacity change from 0 to 4096 [ 145.493268][T13379] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.513291][T13383] xt_TPROXY: Can be used only with -p tcp or -p udp [ 145.524125][T13379] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #15: comm syz.3.4166: corrupted inode contents [ 145.537657][T13386] program syz.5.4168 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 145.558602][T13379] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #15: comm syz.3.4166: mark_inode_dirty error [ 145.587776][T13379] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #15: comm syz.3.4166: corrupted inode contents [ 145.621837][T13379] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #15: comm syz.3.4166: mark_inode_dirty error [ 145.635544][T13379] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #15: comm syz.3.4166: corrupted inode contents [ 145.669026][T13379] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #15: comm syz.3.4166: mark_inode_dirty error [ 145.695663][T13379] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #15: comm syz.3.4166: corrupted inode contents [ 145.711724][T13379] EXT4-fs error (device loop3): ext4_truncate:4597: inode #15: comm syz.3.4166: mark_inode_dirty error [ 145.725052][T13379] EXT4-fs error (device loop3) in ext4_setattr:5986: Corrupt filesystem [ 145.736433][T13388] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #15: comm syz.3.4166: corrupted inode contents [ 145.770416][ T3302] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 145.788545][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.953706][T13416] loop0: detected capacity change from 0 to 1024 [ 145.983265][T13416] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.211125][T13434] xt_connbytes: Forcing CT accounting to be enabled [ 146.217836][T13434] Cannot find set identified by id 0 to match [ 146.278841][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.367325][T13445] loop0: detected capacity change from 0 to 512 [ 146.413230][T13445] EXT4-fs: test_dummy_encryption option not supported [ 147.322213][T13488] dummy0: entered allmulticast mode [ 147.336844][T13488] dummy0: left allmulticast mode [ 147.464577][T13479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.474182][T13479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.550599][T13514] SELinux: policydb version 0 does not match my version range 15-34 [ 147.567553][T13514] SELinux: failed to load policy [ 147.751083][T13527] loop3: detected capacity change from 0 to 164 [ 147.758555][T13527] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 147.767861][T13527] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 147.777079][T13527] Symlink component flag not implemented [ 147.782866][T13527] Symlink component flag not implemented [ 147.788611][T13527] Symlink component flag not implemented (7) [ 147.794645][T13527] Symlink component flag not implemented (116) [ 147.849429][T13531] 9pnet: Could not find request transport: f [ 147.876114][T13534] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4236'. [ 147.924659][T13538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4238'. [ 147.933701][T13538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4238'. [ 148.008901][T13542] netlink: 268 bytes leftover after parsing attributes in process `syz.5.4239'. [ 148.473645][T13572] 9pnet: Could not find request transport: f [ 148.541781][T13576] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4255'. [ 148.551598][T13576] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4255'. [ 148.589061][T13566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.602997][T13566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.304563][T13589] veth1_to_team: entered promiscuous mode [ 149.316513][T13589] bond_slave_0: entered promiscuous mode [ 149.322796][T13589] bond_slave_0: left promiscuous mode [ 149.328526][T13589] veth1_to_team: left promiscuous mode [ 149.445281][T13601] netlink: 264 bytes leftover after parsing attributes in process `syz.6.4267'. [ 149.793258][T13599] loop3: detected capacity change from 0 to 65536 [ 149.801365][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 149.801382][ T29] audit: type=1400 audit(2000000002.270:2569): avc: denied { mount } for pid=13598 comm="syz.3.4266" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 149.856661][ T29] audit: type=1400 audit(2000000002.320:2570): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 149.946345][ T29] audit: type=1326 audit(2000000002.410:2571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13609 comm="syz.5.4270" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7994c3e9a9 code=0x0 [ 150.801153][ T29] audit: type=1400 audit(2000000003.260:2572): avc: denied { write } for pid=13619 comm="syz.3.4273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 150.913091][T13629] loop0: detected capacity change from 0 to 512 [ 150.946385][T13629] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.4289: casefold flag without casefold feature [ 150.976345][T13629] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.4289: couldn't read orphan inode 15 (err -117) [ 150.993493][T13629] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.022849][ T29] audit: type=1400 audit(2000000003.490:2573): avc: denied { create } for pid=13628 comm="syz.0.4289" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 151.062072][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.213396][ T29] audit: type=1400 audit(2000000003.680:2574): avc: denied { create } for pid=13646 comm="syz.3.4286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 151.233693][ T29] audit: type=1400 audit(2000000003.680:2575): avc: denied { bind } for pid=13646 comm="syz.3.4286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 151.254675][T13648] atomic_op ffff888143e67d28 conn xmit_atomic 0000000000000000 [ 151.263890][ T29] audit: type=1400 audit(2000000003.730:2576): avc: denied { write } for pid=13646 comm="syz.3.4286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 151.477528][T13642] loop0: detected capacity change from 0 to 65536 [ 151.673228][ T29] audit: type=1326 audit(2000000004.140:2577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13655 comm="syz.6.4287" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7b85c9e9a9 code=0x0 [ 151.711460][T13659] tipc: Started in network mode [ 151.716441][T13659] tipc: Node identity ff, cluster identity 4711 [ 151.723550][T13659] tipc: Enabling of bearer rejected, failed to enable media [ 151.737481][ T29] audit: type=1400 audit(2000000004.200:2578): avc: denied { create } for pid=13662 comm="syz.5.4294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 160.603980][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 160.603998][ T29] audit: type=1400 audit(2000000013.070:2580): avc: denied { ioctl } for pid=13674 comm="syz.0.4309" path="socket:[35605]" dev="sockfs" ino=35605 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 160.639825][ T29] audit: type=1400 audit(2000000013.100:2581): avc: denied { mounton } for pid=13677 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 160.809595][T13677] chnl_net:caif_netlink_parms(): no params data found [ 160.849228][ T37] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.866912][T13677] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.874174][T13677] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.882533][T13677] bridge_slave_0: entered allmulticast mode [ 160.889127][T13677] bridge_slave_0: entered promiscuous mode [ 160.899672][ T37] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.912589][T13677] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.919741][T13677] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.928002][T13677] bridge_slave_1: entered allmulticast mode [ 160.936015][T13677] bridge_slave_1: entered promiscuous mode [ 160.945959][T13670] loop6: detected capacity change from 0 to 65536 [ 160.961721][ T37] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.975047][T13677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.986668][T13677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.011967][T13677] team0: Port device team_slave_0 added [ 161.019613][ T37] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.033411][T13677] team0: Port device team_slave_1 added [ 161.055462][T13677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.062655][T13677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.088846][T13677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.101150][T13677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.108139][T13677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.135007][T13677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.164334][T13677] hsr_slave_0: entered promiscuous mode [ 161.170518][T13677] hsr_slave_1: entered promiscuous mode [ 161.176341][T13677] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.184003][T13677] Cannot create hsr debugfs directory [ 161.217168][ T37] bridge_slave_1: left allmulticast mode [ 161.223571][ T37] bridge_slave_1: left promiscuous mode [ 161.229301][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.237157][ T37] bridge_slave_0: left allmulticast mode [ 161.242959][ T37] bridge_slave_0: left promiscuous mode [ 161.248641][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.334017][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.344780][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.354720][ T37] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 161.365483][ T37] bond0 (unregistering): Released all slaves [ 161.412191][ T37] tipc: Left network mode [ 161.420290][ T37] hsr_slave_0: left promiscuous mode [ 161.426559][ T37] hsr_slave_1: left promiscuous mode [ 161.432293][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.439780][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.447499][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.455038][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.464526][ T37] veth1_macvtap: left promiscuous mode [ 161.470022][ T37] veth0_macvtap: left promiscuous mode [ 161.475589][ T37] veth1_vlan: left promiscuous mode [ 161.480869][ T37] veth0_vlan: left promiscuous mode [ 161.544926][ T37] team0 (unregistering): Port device team_slave_1 removed [ 161.554849][ T37] team0 (unregistering): Port device team_slave_0 removed [ 161.586289][T13677] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 161.595524][T13677] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 161.604818][T13677] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 161.614771][T13677] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 161.648779][T13677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.662055][T13677] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.676637][ T141] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.683804][ T141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.692402][ T141] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.699483][ T141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.759302][T13677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.864426][T13677] veth0_vlan: entered promiscuous mode [ 161.873328][T13677] veth1_vlan: entered promiscuous mode [ 161.873747][ T37] ------------[ cut here ]------------ [ 161.885290][ T37] WARNING: CPU: 1 PID: 37 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0x94/0x100 [ 161.886733][T13677] veth0_macvtap: entered promiscuous mode [ 161.895410][ T37] Modules linked in: [ 161.903831][T13677] veth1_macvtap: entered promiscuous mode [ 161.905240][ T37] CPU: 1 UID: 0 PID: 37 Comm: kworker/u8:2 Not tainted 6.16.0-syzkaller #0 PREEMPT(voluntary) [ 161.916121][T13677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.922279][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 161.931281][T13677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.939639][ T37] Workqueue: netns cleanup_net [ 161.948899][T13677] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.952634][ T37] RIP: 0010:xfrm6_tunnel_net_exit+0x94/0x100 [ 161.961387][T13677] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.967354][ T37] Code: a2 d3 af fc 4b 83 3c 3e 00 75 19 e8 76 b0 95 fc 49 81 ff f8 07 00 00 74 1d e8 68 b0 95 fc 49 83 c7 08 eb d7 e8 5d b0 95 fc 90 <0f> 0b 90 49 81 ff f8 07 00 00 75 e3 49 81 c6 00 08 00 00 31 db 49 [ 161.976815][T13677] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.996421][ T37] RSP: 0018:ffffc90000143c78 EFLAGS: 00010293 [ 162.005848][T13677] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.011967][ T37] [ 162.011974][ T37] RAX: ffffffff84c1f3c3 RBX: ffff88810aa2a800 RCX: ffff8881008c1040 [ 162.031978][ T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888118142000 [ 162.039991][ T37] RBP: ffffffff86c8a6a0 R08: 0001ffff86848aff R09: 0000000000000000 [ 162.048064][ T37] R10: 0000001781e0c300 R11: 0000000000000800 R12: ffffffff86c8a6c0 [ 162.056203][ T37] R13: ffff88810aa2a828 R14: ffff888118142000 R15: 0000000000000000 [ 162.064778][ T37] FS: 0000000000000000(0000) GS:ffff8882aef2d000(0000) knlGS:0000000000000000 [ 162.073822][ T37] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 162.080548][ T37] CR2: 00007fa89479de9c CR3: 0000000119c52000 CR4: 00000000003506f0 [ 162.088613][ T37] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 162.097169][ T37] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 162.105241][ T37] Call Trace: [ 162.108582][ T37] [ 162.111579][ T37] ops_undo_list+0x27b/0x410 [ 162.116212][ T37] cleanup_net+0x2de/0x4d0 [ 162.121388][ T37] process_scheduled_works+0x4cb/0x9d0 [ 162.126888][ T37] worker_thread+0x582/0x770 [ 162.131550][ T37] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 162.137433][ T37] kthread+0x486/0x510 [ 162.141707][ T37] ? finish_task_switch+0xad/0x2b0 [ 162.146996][ T37] ? __pfx_worker_thread+0x10/0x10 [ 162.152802][ T37] ? __pfx_kthread+0x10/0x10 [ 162.157406][ T37] ret_from_fork+0xda/0x150 [ 162.161976][ T37] ? __pfx_kthread+0x10/0x10 [ 162.166595][ T37] ret_from_fork_asm+0x1a/0x30 [ 162.171427][ T37] [ 162.174459][ T37] ---[ end trace 0000000000000000 ]--- [ 162.181415][ T37] ------------[ cut here ]------------ [ 162.186888][ T37] WARNING: CPU: 1 PID: 37 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0xd8/0x100 [ 162.196834][ T37] Modules linked in: [ 162.200773][ T37] CPU: 1 UID: 0 PID: 37 Comm: kworker/u8:2 Tainted: G W 6.16.0-syzkaller #0 PREEMPT(voluntary) [ 162.213330][ T37] Tainted: [W]=WARN [ 162.217133][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 162.227298][ T37] Workqueue: netns cleanup_net [ 162.232128][ T37] RIP: 0010:xfrm6_tunnel_net_exit+0xd8/0x100 [ 162.238245][ T37] Code: 5e d3 af fc 49 83 3c 1e 00 75 19 e8 32 b0 95 fc 48 81 fb f8 07 00 00 74 1d e8 24 b0 95 fc 48 83 c3 08 eb d7 e8 19 b0 95 fc 90 <0f> 0b 90 48 81 fb f8 07 00 00 75 e3 e8 07 b0 95 fc 5b 41 5e 41 5f [ 162.258438][ T37] RSP: 0018:ffffc90000143c78 EFLAGS: 00010293 [ 162.264629][ T37] RAX: ffffffff84c1f407 RBX: 0000000000000008 RCX: ffff8881008c1040 [ 162.272758][ T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888118142808 [ 162.281487][ T37] RBP: ffffffff86c8a6a0 R08: 0001ffff86848aff R09: 0000000000000000 [ 162.289473][ T37] R10: 0000001781e0c300 R11: 0000000000000800 R12: ffffffff86c8a6c0 [ 162.297555][ T37] R13: ffff88810aa2a828 R14: ffff888118142800 R15: 00000000000007f8 [ 162.305568][ T37] FS: 0000000000000000(0000) GS:ffff8882aef2d000(0000) knlGS:0000000000000000 [ 162.315132][ T37] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 162.322299][ T37] CR2: 00007fa89479de9c CR3: 0000000119c52000 CR4: 00000000003506f0 [ 162.330312][ T37] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 162.338453][ T37] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 162.347023][ T37] Call Trace: [ 162.350324][ T37] [ 162.353413][ T37] ops_undo_list+0x27b/0x410 [ 162.358180][ T37] cleanup_net+0x2de/0x4d0 [ 162.362632][ T37] process_scheduled_works+0x4cb/0x9d0 [ 162.368139][ T37] worker_thread+0x582/0x770 [ 162.373503][ T37] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 162.379338][ T37] kthread+0x486/0x510 [ 162.383522][ T37] ? finish_task_switch+0xad/0x2b0 [ 162.388688][ T37] ? __pfx_worker_thread+0x10/0x10 [ 162.393932][ T37] ? __pfx_kthread+0x10/0x10 [ 162.398546][ T37] ret_from_fork+0xda/0x150 [ 162.403740][ T37] ? __pfx_kthread+0x10/0x10 [ 162.408364][ T37] ret_from_fork_asm+0x1a/0x30 [ 162.413321][ T37] [ 162.416431][ T37] ---[ end trace 0000000000000000 ]--- [ 162.429184][ T29] audit: type=1400 audit(2000000014.890:2582): avc: denied { mounton } for pid=13677 comm="syz-executor" path="/root/syzkaller.hGf3oq/syz-tmp" dev="sda1" ino=2055 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 162.430193][ T37] IPVS: stop unused estimator thread 0... [ 162.460889][ T29] audit: type=1400 audit(2000000014.930:2583): avc: denied { mount } for pid=13677 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 162.484666][ T29] audit: type=1400 audit(2000000014.930:2584): avc: denied { mount } for pid=13677 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 162.506733][ T29] audit: type=1400 audit(2000000014.930:2585): avc: denied { mounton } for pid=13677 comm="syz-executor" path="/root/syzkaller.hGf3oq/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 162.534240][ T29] audit: type=1400 audit(2000000014.930:2586): avc: denied { mounton } for pid=13677 comm="syz-executor" path="/root/syzkaller.hGf3oq/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=36891 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 162.562861][ T29] audit: type=1400 audit(2000000014.960:2587): avc: denied { mounton } for pid=13677 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 162.566602][ T37] ------------[ cut here ]------------ [ 162.585880][ T29] audit: type=1400 audit(2000000014.960:2588): avc: denied { mount } for pid=13677 comm="syz-executor" name="/" dev="gadgetfs" ino=3897 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 162.615430][ T37] WARNING: CPU: 0 PID: 37 at net/xfrm/xfrm_state.c:3284 xfrm_state_fini+0x17c/0x1f0 [ 162.624889][ T37] Modules linked in: [ 162.628893][ T37] CPU: 0 UID: 0 PID: 37 Comm: kworker/u8:2 Tainted: G W 6.16.0-syzkaller #0 PREEMPT(voluntary) [ 162.641646][ T37] Tainted: [W]=WARN [ 162.645473][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 162.655602][ T37] Workqueue: netns cleanup_net [ 162.660499][ T37] RIP: 0010:xfrm_state_fini+0x17c/0x1f0 [ 162.666148][ T37] Code: 48 8d bb 70 0e 00 00 e8 92 5e c1 fc 48 8b bb 70 0e 00 00 e8 36 c3 cd fc 5b 41 5e 41 5f 5d e9 0b 94 b3 00 cc e8 05 4f a7 fc 90 <0f> 0b 90 e9 d9 fe ff ff e8 f7 4e a7 fc 90 0f 0b 90 4c 89 f7 e8 5b [ 162.686392][ T37] RSP: 0018:ffffc90000143c60 EFLAGS: 00010293 [ 162.692503][ T37] RAX: ffffffff84b0551b RBX: ffff88810aa2a800 RCX: ffff8881008c1040 [ 162.700644][ T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88810aa2b640 [ 162.708649][ T37] RBP: ffffffff86c82460 R08: 0001ffff86848aff R09: 0000000000000000 [ 162.717257][ T37] R10: ffffc90000143be8 R11: 0001c90000143be8 R12: ffffffff86c82480 [ 162.725298][ T37] R13: ffff88810aa2a828 R14: ffff88810aa2b640 R15: ffff88810aa2a800 [ 162.733365][ T37] FS: 0000000000000000(0000) GS:ffff8882aee2d000(0000) knlGS:0000000000000000 [ 162.742896][ T37] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 162.749490][ T37] CR2: 00007f42065f57b0 CR3: 0000000119c52000 CR4: 00000000003506f0 [ 162.757494][ T37] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 162.765510][ T37] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 162.775534][ T37] Call Trace: [ 162.778826][ T37] [ 162.781809][ T37] xfrm_net_exit+0x2d/0x60 [ 162.786266][ T37] ops_undo_list+0x27b/0x410 [ 162.790956][ T37] cleanup_net+0x2de/0x4d0 [ 162.795406][ T37] process_scheduled_works+0x4cb/0x9d0 [ 162.801768][ T37] worker_thread+0x582/0x770 [ 162.806408][ T37] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 162.812289][ T37] kthread+0x486/0x510 [ 162.816435][ T37] ? finish_task_switch+0xad/0x2b0 [ 162.821620][ T37] ? __pfx_worker_thread+0x10/0x10 [ 162.826938][ T37] ? __pfx_kthread+0x10/0x10 [ 162.832147][ T37] ret_from_fork+0xda/0x150 [ 162.836686][ T37] ? __pfx_kthread+0x10/0x10 [ 162.841353][ T37] ret_from_fork_asm+0x1a/0x30 [ 162.846178][ T37] [ 162.849256][ T37] ---[ end trace 0000000000000000 ]--- [ 163.016963][ T29] audit: type=1400 audit(2000000015.480:2589): avc: denied { write } for pid=13734 comm="syz.0.4304" lport=8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 163.046930][T13741] loop3: detected capacity change from 0 to 1024 [ 163.080158][T13741] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.111327][T13746] netlink: 268 bytes leftover after parsing attributes in process `syz.5.4310'. [ 163.121935][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.009472][T13785] bridge_slave_0: default FDB implementation only supports local addresses [ 164.204136][T13755] loop7: detected capacity change from 0 to 65536 [ 164.317868][T13806] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4344'. [ 164.355617][T13809] loop0: detected capacity change from 0 to 1024 [ 164.382034][T13809] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.445205][T13827] netlink: 224 bytes leftover after parsing attributes in process `syz.7.4353'. [ 164.466324][T13830] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4351'. [ 164.475483][T13830] openvswitch: netlink: Message has 8 unknown bytes. [ 164.475601][T13829] loop6: detected capacity change from 0 to 1764 [ 164.505113][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.553508][T13837] loop7: detected capacity change from 0 to 4096 [ 164.562327][T13837] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.577727][T13837] EXT4-fs (loop7): shut down requested (2) [ 164.593219][T13677] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.639797][T13847] batman_adv: batadv0: Adding interface: dummy0 [ 164.646317][T13847] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.672722][T13847] batman_adv: batadv0: Interface activated: dummy0 [ 164.846810][T13864] Invalid ELF header magic: != ELF [ 164.890525][T13868] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4371'. [ 164.920263][T13872] loop7: detected capacity change from 0 to 128 [ 164.946088][T13876] batman_adv: batadv0: Adding interface: dummy0 [ 164.952423][T13876] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.978673][T13876] batman_adv: batadv0: Interface activated: dummy0 [ 164.991090][T13878] loop6: detected capacity change from 0 to 1024 [ 165.002695][T13878] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.030389][T12395] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.092813][T13895] x_tables: duplicate underflow at hook 1 [ 165.219403][T13913] loop6: detected capacity change from 0 to 256 [ 165.243121][T13917] x_tables: duplicate underflow at hook 1 [ 165.298564][T13925] netlink: 7 bytes leftover after parsing attributes in process `syz.0.4410'. [ 165.308564][T13925] netlink: 7 bytes leftover after parsing attributes in process `syz.0.4410'. [ 165.499895][T13950] loop0: detected capacity change from 0 to 1024 [ 165.526326][T13952] tipc: Enabling of bearer rejected, failed to enable media [ 165.540566][T13950] EXT4-fs: inline encryption not supported [ 165.556812][T13950] EXT4-fs: Ignoring removed bh option [ 165.591638][T13950] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.681798][T13957] netlink: 'syz.3.4412': attribute type 10 has an invalid length. [ 165.694996][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.722242][T13957] team0: Port device dummy0 added [ 165.741747][ T3303] ================================================================== [ 165.749895][ T3303] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 165.757525][ T3303] [ 165.759875][ T3303] read-write to 0xffff888237d25e68 of 1 bytes by task 13939 on cpu 1: [ 165.768087][ T3303] folio_add_lru+0xa5/0x1f0 [ 165.772640][ T3303] shmem_get_folio_gfp+0x7ab/0xd60 [ 165.777777][ T3303] shmem_fallocate+0x57c/0x840 [ 165.782573][ T3303] vfs_fallocate+0x410/0x450 [ 165.787186][ T3303] file_ioctl+0x453/0x530 [ 165.791546][ T3303] do_vfs_ioctl+0x943/0x11d0 [ 165.796169][ T3303] __se_sys_ioctl+0x82/0x140 [ 165.800794][ T3303] __x64_sys_ioctl+0x43/0x50 [ 165.805421][ T3303] x64_sys_call+0x19a8/0x2fb0 [ 165.810134][ T3303] do_syscall_64+0xd2/0x200 [ 165.814670][ T3303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.820589][ T3303] [ 165.822940][ T3303] read to 0xffff888237d25e68 of 1 bytes by task 3303 on cpu 0: [ 165.830504][ T3303] __lru_add_drain_all+0x12b/0x3f0 [ 165.835662][ T3303] lru_add_drain_all+0x10/0x20 [ 165.840469][ T3303] invalidate_bdev+0x47/0x70 [ 165.845094][ T3303] ext4_put_super+0x624/0x7d0 [ 165.849813][ T3303] generic_shutdown_super+0xe3/0x210 [ 165.855151][ T3303] kill_block_super+0x2a/0x70 [ 165.859860][ T3303] ext4_kill_sb+0x42/0x80 [ 165.864226][ T3303] deactivate_locked_super+0x72/0x1c0 [ 165.869735][ T3303] deactivate_super+0x97/0xa0 [ 165.874453][ T3303] cleanup_mnt+0x269/0x2e0 [ 165.878902][ T3303] __cleanup_mnt+0x19/0x20 [ 165.883352][ T3303] task_work_run+0x12e/0x1a0 [ 165.887975][ T3303] exit_to_user_mode_loop+0xe4/0x100 [ 165.893296][ T3303] do_syscall_64+0x1d6/0x200 [ 165.897910][ T3303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.903841][ T3303] [ 165.906189][ T3303] value changed: 0x13 -> 0x19 [ 165.910880][ T3303] [ 165.913220][ T3303] Reported by Kernel Concurrency Sanitizer on: [ 165.919427][ T3303] CPU: 0 UID: 0 PID: 3303 Comm: syz-executor Tainted: G W 6.16.0-syzkaller #0 PREEMPT(voluntary) [ 165.931707][ T3303] Tainted: [W]=WARN [ 165.935527][ T3303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 165.945690][ T3303] ================================================================== [ 165.963169][T13959] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.4414'. [ 165.967104][T13961] loop7: detected capacity change from 0 to 256 [ 165.983485][T13957] netlink: 'syz.3.4412': attribute type 10 has an invalid length. [ 165.997597][T13957] team0: Port device dummy0 removed [ 166.012128][T13957] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 166.022367][T13958] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.4414'.