last executing test programs: 1m4.828420723s ago: executing program 4 (id=13): r0 = mq_open(&(0x7f0000000080)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxse\xee\x0f\xcd\xce6\xbf\xfa;\xb9-a\xb8\xef\x8de\x14\xbc\x9ej\xa1q\xa2\xa5\t\x98\x8a\x8f>\xba', 0x6e93ebbbcc088cf2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0xec}) mq_timedsend(r0, 0x0, 0x0, 0xf, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) 1m4.806086524s ago: executing program 4 (id=14): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000100000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m4.657380161s ago: executing program 4 (id=19): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000680)={{0x1, 0x0, 0xfffffef9}}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r1, &(0x7f00000002c0)=""/109, 0x6d, 0x0) 1m4.601873503s ago: executing program 4 (id=23): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1m4.45434494s ago: executing program 4 (id=28): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0) 1m4.127564804s ago: executing program 4 (id=31): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) shutdown(r0, 0x1) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) 55.480377595s ago: executing program 3 (id=279): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) msgget$private(0x0, 0x184) 55.265048445s ago: executing program 3 (id=283): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r0}, 0x10) r1 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r1, 0x0, 0x79) 55.226282036s ago: executing program 3 (id=284): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x8d, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 55.026660285s ago: executing program 3 (id=288): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x4) 54.955144348s ago: executing program 3 (id=289): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0xfffffff8) close_range(r0, 0xffffffffffffffff, 0x0) 54.704099299s ago: executing program 3 (id=295): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff}) 54.700273529s ago: executing program 32 (id=295): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff}) 48.642992319s ago: executing program 33 (id=31): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) shutdown(r0, 0x1) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) 1.753506004s ago: executing program 1 (id=2945): r0 = socket(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x4, [], 0xfd, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x2, 0x2], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20008010) 1.659858539s ago: executing program 1 (id=2947): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000004c0)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x4e20, 0x7, @mcast2, 0x3}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0x5}}, 0x20) 1.659776579s ago: executing program 1 (id=2948): r0 = socket$vsock_stream(0x28, 0x1, 0x0) creat(&(0x7f0000000280)='./bus\x00', 0x6) r1 = dup2(r0, r0) mount$9p_fd(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x800810, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 1.638545319s ago: executing program 1 (id=2949): bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x8, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x4, 0x7}, 0x13748, 0x10000, 0x0, 0x6, 0xe, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x5437, 0x0) 1.543738023s ago: executing program 1 (id=2953): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r1, 0x1, 0x24, &(0x7f0000000fc0)=r0, 0x4) 991.866037ms ago: executing program 0 (id=2985): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0xee01, &(0x7f0000000100)={0x8000000000000000, 0x3f4e5183, 0xca, 0x0, 0x2, 0x9, 0x4ac, 0x1000000000000001, 0x9d}) chown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 835.692284ms ago: executing program 0 (id=2993): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x40b, 0x70bd2b, 0x500, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xc}]}}}]}, 0x3c}}, 0x0) 764.118387ms ago: executing program 0 (id=2995): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x3, {0x1, 0x1}, 0x2}, 0x18) 763.622857ms ago: executing program 0 (id=2998): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x3, @empty, 0x8}, {0xa, 0x4e24, 0x4, @local, 0x80000000}, r1, 0x6fb}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @local, 0x2}, r1, 0xb}}, 0x48) 757.003677ms ago: executing program 2 (id=3000): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) 702.568709ms ago: executing program 2 (id=3002): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x4}) write$sndseq(r0, &(0x7f0000000080)=[{0x84, 0x77, 0x6, 0x0, @time={0xfffffffe, 0x7}, {}, {}, @raw32}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x3a6, @tick=0x6fc9f737}) 702.27368ms ago: executing program 0 (id=3004): r0 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmsg(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x2) 702.09038ms ago: executing program 2 (id=3005): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r0) 701.997019ms ago: executing program 0 (id=3006): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x11, 0x4, 0x4, 0x2, 0x10, r0, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 701.93809ms ago: executing program 1 (id=3007): sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000005c0)=[{0x6}]}) socket$nl_route(0x10, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0502103, &(0x7f00000001c0)) 657.788672ms ago: executing program 2 (id=3011): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) 605.210044ms ago: executing program 2 (id=3014): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000d40)=@filter={'filter\x00', 0x2, 0x4, 0x4a8, 0xffffffff, 0x0, 0xf0, 0xf0, 0xfeffffff, 0xffffffff, 0x3d8, 0x3d8, 0x3d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [0xff, 0xff, 0x0, 0xffffff00], [], 'pimreg0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x2f2, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev={0xac, 0x14, 0x14, 0x1d}, 'caif0\x00', {0x7}}}}, {{@ipv6={@mcast1, @loopback, [], [0x0, 0x0, 0xffffffff], 'netdevsim0\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f6531877000001e770b689f173dfa40b58c10327e3121114449fd20ba2be6eb0cde72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x602, 'system_u:object_r:boot_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508) 543.778696ms ago: executing program 2 (id=3018): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x6, @mcast2, 0x6}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) read(r0, &(0x7f0000001400)=""/4046, 0xffd8) 341.420495ms ago: executing program 5 (id=3023): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r1}, 0x10) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="2400000002010108000000000000000005000006040001800c0019"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24000000) 341.134795ms ago: executing program 5 (id=3024): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) 295.032117ms ago: executing program 5 (id=3027): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000400)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="0100000000000002000005000000180001801400020073797a5f74756e000000000000000000080005000a0f00005c0003800400010054000380"], 0x90}}, 0x4000000) 294.828117ms ago: executing program 6 (id=3028): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) lsm_set_self_attr(0x66, &(0x7f0000000500)=ANY=[@ANYBLOB="6500000000000000030000000000000043"], 0x43, 0x0) 276.748458ms ago: executing program 5 (id=3029): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 220.054051ms ago: executing program 6 (id=3030): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000080)='[', 0x1, 0x20000010, &(0x7f00000000c0)={0xa, 0x4e20, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e04, 0x1, @empty, 0x8001}}, 0xfb70, 0x5}, &(0x7f0000000280)=0x90) 219.915771ms ago: executing program 5 (id=3031): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfb, 0x323, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) 219.609121ms ago: executing program 6 (id=3040): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x65) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000540000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) 93.239386ms ago: executing program 5 (id=3032): r0 = socket(0x1e, 0x805, 0x0) connect$tipc(r0, 0x0, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000240)=""/201, 0xffffff47) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x10000000000001, 0x0, 0x0, 0x2) 93.088036ms ago: executing program 6 (id=3033): bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000000100)='.\x00', &(0x7f0000001440), 0x200800, &(0x7f0000000080)={'trans=rdma,', {'port', 0x3d, 0x4e20}}) 72.777076ms ago: executing program 6 (id=3034): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) 0s ago: executing program 6 (id=3035): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000200)={0x0, 0x6, 0x3, ';E/'}, 0xb) kernel console output (not intermixed with test programs): 00-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.293179][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.429238][ T4504] bpf: Bad value for 'gid' [ 41.586948][ T4524] __nla_validate_parse: 1 callbacks suppressed [ 41.586964][ T4524] netlink: 20 bytes leftover after parsing attributes in process `syz.5.405'. [ 41.637068][ T4528] SELinux: Context system_u:object_r:modules_dep_t:s0 is not valid (left unmapped). [ 41.738475][ T4540] tipc: Started in network mode [ 41.743421][ T4540] tipc: Node identity ac14140f, cluster identity 4711 [ 41.762871][ T4540] tipc: New replicast peer: 255.255.255.255 [ 41.769001][ T4540] tipc: Enabled bearer , priority 10 [ 41.775717][ T4540] netlink: 12 bytes leftover after parsing attributes in process `syz.2.412'. [ 41.784648][ T4540] tipc: Disabling bearer [ 42.057783][ T4578] netlink: 'syz.0.436': attribute type 10 has an invalid length. [ 42.068715][ T4578] ipvlan0: entered allmulticast mode [ 42.074042][ T4578] veth0_vlan: entered allmulticast mode [ 42.177365][ T4578] team0: Device ipvlan0 failed to register rx_handler [ 42.306587][ T4597] loop0: detected capacity change from 0 to 512 [ 42.362399][ T4597] EXT4-fs (loop0): orphan cleanup on readonly fs [ 42.403108][ T4597] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 42.449182][ T4597] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #15: comm syz.0.430: corrupted inode contents [ 42.475965][ T4597] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #15: comm syz.0.430: mark_inode_dirty error [ 42.487532][ T4597] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #15: comm syz.0.430: corrupted inode contents [ 42.510639][ T4597] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2996: inode #15: comm syz.0.430: mark_inode_dirty error [ 42.529271][ T4597] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2999: inode #15: comm syz.0.430: mark inode dirty (error -117) [ 42.548554][ T4597] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 42.567793][ T4597] EXT4-fs (loop0): 1 orphan inode deleted [ 42.599923][ T4597] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 42.654007][ T4618] tap0: tun_chr_ioctl cmd 1074025677 [ 42.659735][ T4618] tap0: linktype set to 805 [ 42.678406][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.768931][ T29] kauditd_printk_skb: 101 callbacks suppressed [ 42.769004][ T29] audit: type=1400 audit(1763581524.056:566): avc: denied { listen } for pid=4629 comm="syz.0.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 42.811520][ T4635] loop0: detected capacity change from 0 to 1024 [ 42.859033][ T4635] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 42.874871][ T4635] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.910087][ T4635] EXT4-fs error (device loop0): ext4_free_blocks:6706: comm syz.0.447: Freeing blocks not in datazone - block = 0, count = 16 [ 42.936280][ T588] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:6: bg 0: block 112: padding at end of block bitmap is not set [ 42.961100][ T588] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 42.973312][ T588] EXT4-fs (loop0): This should not happen!! Data will be lost [ 42.973312][ T588] [ 42.983034][ T588] EXT4-fs (loop0): Total free blocks count 0 [ 42.989102][ T588] EXT4-fs (loop0): Free/Dirty block details [ 42.994991][ T588] EXT4-fs (loop0): free_blocks=16 [ 43.000031][ T588] EXT4-fs (loop0): dirty_blocks=16 [ 43.005129][ T588] EXT4-fs (loop0): Block reservation details [ 43.011119][ T588] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 43.025470][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 43.676598][ T4647] chnl_net:caif_netlink_parms(): no params data found [ 43.695670][ T2282] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.735451][ T4663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.453'. [ 43.800528][ T2282] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.812547][ T4670] process 'syz.0.456' launched './file1' with NULL argv: empty string added [ 43.846968][ T29] audit: type=1400 audit(1763581525.126:567): avc: denied { execute_no_trans } for pid=4669 comm="syz.0.456" path="/131/file1" dev="tmpfs" ino=692 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 43.909401][ T4647] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.916570][ T4647] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.939828][ T29] audit: type=1400 audit(1763581525.226:568): avc: denied { read write } for pid=4677 comm="syz.0.461" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 43.939899][ T4678] random: crng reseeded on system resumption [ 43.969347][ T4647] bridge_slave_0: entered allmulticast mode [ 43.975885][ T4647] bridge_slave_0: entered promiscuous mode [ 43.983799][ T29] audit: type=1400 audit(1763581525.226:569): avc: denied { ioctl open } for pid=4677 comm="syz.0.461" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 44.018727][ T2282] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.040720][ T4647] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.047870][ T4647] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.058219][ T4647] bridge_slave_1: entered allmulticast mode [ 44.066156][ T29] audit: type=1400 audit(1763581525.346:570): avc: denied { getopt } for pid=4684 comm="syz.2.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.088216][ T4647] bridge_slave_1: entered promiscuous mode [ 44.102825][ T2282] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.141875][ T4647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.151607][ T29] audit: type=1400 audit(1763581525.436:571): avc: denied { remount } for pid=4687 comm="syz.0.465" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 44.172467][ T4688] loop0: detected capacity change from 0 to 128 [ 44.188013][ T4647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.244641][ T2282] bridge_slave_1: left allmulticast mode [ 44.250362][ T2282] bridge_slave_1: left promiscuous mode [ 44.256107][ T2282] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.269889][ T2282] bridge_slave_0: left allmulticast mode [ 44.275565][ T2282] bridge_slave_0: left promiscuous mode [ 44.281279][ T2282] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.333702][ T4700] loop0: detected capacity change from 0 to 256 [ 44.385495][ T29] audit: type=1400 audit(1763581525.666:572): avc: denied { ioctl } for pid=4704 comm="syz.2.472" path="socket:[8790]" dev="sockfs" ino=8790 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.441196][ T2282] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 44.455730][ T2282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 44.465939][ T2282] bond0 (unregistering): Released all slaves [ 44.475497][ T4647] team0: Port device team_slave_0 added [ 44.488244][ T4647] team0: Port device team_slave_1 added [ 44.516944][ T2282] hsr_slave_0: left promiscuous mode [ 44.531671][ T2282] hsr_slave_1: left promiscuous mode [ 44.539539][ T4711] x_tables: duplicate underflow at hook 1 [ 44.546444][ T2282] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.553914][ T2282] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.569001][ T2282] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.576410][ T2282] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.592912][ T2282] veth1_macvtap: left promiscuous mode [ 44.599669][ T2282] veth0_macvtap: left promiscuous mode [ 44.607482][ T2282] veth1_vlan: left promiscuous mode [ 44.614972][ T2282] veth0_vlan: left promiscuous mode [ 44.696489][ T4721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.480'. [ 44.727917][ T2282] team0 (unregistering): Port device team_slave_1 removed [ 44.737769][ T2282] team0 (unregistering): Port device team_slave_0 removed [ 44.747638][ T29] audit: type=1326 audit(1763581526.026:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4722 comm="syz.2.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff76116f749 code=0x7ffc0000 [ 44.770985][ T29] audit: type=1326 audit(1763581526.026:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4722 comm="syz.2.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff76116f749 code=0x7ffc0000 [ 44.794395][ T29] audit: type=1326 audit(1763581526.026:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4722 comm="syz.2.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7ff76116f749 code=0x7ffc0000 [ 44.832149][ T4647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.839233][ T4647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 44.865290][ T4647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.887932][ T4647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.894977][ T4647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 44.921237][ T4647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.950982][ T4647] hsr_slave_0: entered promiscuous mode [ 44.956944][ T4647] hsr_slave_1: entered promiscuous mode [ 44.968578][ T4647] debugfs: 'hsr0' already exists in 'hsr' [ 44.974402][ T4647] Cannot create hsr debugfs directory [ 45.085406][ T4741] netlink: 'syz.0.488': attribute type 2 has an invalid length. [ 45.140178][ T4647] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 45.170047][ T4647] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 45.177025][ T4747] loop0: detected capacity change from 0 to 4096 [ 45.189043][ T4750] tap0: tun_chr_ioctl cmd 1074025677 [ 45.194467][ T4750] tap0: linktype set to 0 [ 45.199188][ T4747] EXT4-fs: Ignoring removed nomblk_io_submit option [ 45.206335][ T4647] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 45.217034][ T4747] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.232463][ T4647] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 45.260208][ T4764] syz.2.498 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 45.315038][ T4647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.351955][ T4775] netlink: 32 bytes leftover after parsing attributes in process `syz.5.502'. [ 45.364117][ T4647] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.380745][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.387869][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.427963][ T4647] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 45.438512][ T4647] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.461960][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.469091][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.511771][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.593852][ T4647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.604398][ T4800] netlink: 96 bytes leftover after parsing attributes in process `syz.2.512'. [ 45.726677][ T4825] loop5: detected capacity change from 0 to 512 [ 45.729198][ T4815] SELinux: ebitmap: truncated map [ 45.766338][ T4815] SELinux: failed to load policy [ 45.774295][ T4834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.523'. [ 45.783248][ T4834] netlink: 12 bytes leftover after parsing attributes in process `syz.2.523'. [ 45.837655][ T4647] veth0_vlan: entered promiscuous mode [ 45.855288][ T4647] veth1_vlan: entered promiscuous mode [ 45.881779][ T4647] veth0_macvtap: entered promiscuous mode [ 45.893674][ T4849] loop1: detected capacity change from 0 to 512 [ 45.910504][ T4647] veth1_macvtap: entered promiscuous mode [ 45.928645][ T4849] EXT4-fs: Ignoring removed bh option [ 45.931009][ T4647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.943055][ T4849] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 45.949995][ T4647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.971484][ T4849] EXT4-fs (loop1): 1 truncate cleaned up [ 45.978094][ T4849] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.980328][ T588] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.044914][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.075586][ T588] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.105341][ T588] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.124504][ T588] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.178346][ T4868] random: crng reseeded on system resumption [ 46.209029][ T4873] loop1: detected capacity change from 0 to 512 [ 46.227921][ T4873] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 46.246353][ T4873] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.538: invalid block [ 46.293200][ T4873] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.538: invalid indirect mapped block 4294967295 (level 1) [ 46.321407][ T4887] loop2: detected capacity change from 0 to 256 [ 46.329561][ T4888] loop0: detected capacity change from 0 to 164 [ 46.337125][ T4873] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.538: invalid indirect mapped block 4294967295 (level 1) [ 46.351881][ T4888] ISOFS: unable to read i-node block [ 46.357241][ T4888] isofs_fill_super: get root inode failed [ 46.371461][ T4873] EXT4-fs (loop1): 2 truncates cleaned up [ 46.377820][ T4873] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.408901][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.428669][ T4894] netlink: 'syz.0.548': attribute type 5 has an invalid length. [ 46.499954][ T4914] loop6: detected capacity change from 0 to 512 [ 46.522108][ T4908] loop5: detected capacity change from 0 to 4096 [ 46.529105][ T4908] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.529899][ T4914] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.639595][ T4647] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.980789][ T4975] loop6: detected capacity change from 0 to 4096 [ 46.987951][ T4975] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.019483][ T4975] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.058653][ T4986] loop1: detected capacity change from 0 to 512 [ 47.083681][ T4986] EXT4-fs: Ignoring removed i_version option [ 47.089760][ T4986] EXT4-fs: Ignoring removed bh option [ 47.146951][ T4986] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.183374][ T4986] ext4 filesystem being mounted at /134/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.208736][ T5020] loop5: detected capacity change from 0 to 512 [ 47.239646][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.331319][ T4647] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.747209][ T5108] netlink: 4 bytes leftover after parsing attributes in process `syz.6.631'. [ 47.807949][ T5099] loop1: detected capacity change from 0 to 32768 [ 47.820640][ T5118] netlink: 12 bytes leftover after parsing attributes in process `syz.6.636'. [ 47.829626][ T5118] netlink: 12 bytes leftover after parsing attributes in process `syz.6.636'. [ 47.838565][ T5118] netlink: 20 bytes leftover after parsing attributes in process `syz.6.636'. [ 47.841097][ T29] kauditd_printk_skb: 268 callbacks suppressed [ 47.841109][ T29] audit: type=1400 audit(1763581529.126:844): avc: denied { mount } for pid=5119 comm="syz.5.637" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 47.875628][ T5099] loop1: p1 p2 p3 < p5 p6 > [ 47.877622][ T5123] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 47.882707][ T5099] loop1: p2 size 16775168 extends beyond EOD, truncated [ 47.890368][ T29] audit: type=1400 audit(1763581529.136:845): avc: denied { unmount } for pid=5119 comm="syz.5.637" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 47.914576][ T29] audit: type=1400 audit(1763581529.176:846): avc: denied { mount } for pid=5122 comm="syz.6.638" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 47.916048][ T5099] loop1: p5 start 4294970168 is beyond EOD, truncated [ 47.997130][ T29] audit: type=1400 audit(1763581529.276:847): avc: denied { bind } for pid=5130 comm="syz.5.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 48.034329][ T5134] netlink: 28 bytes leftover after parsing attributes in process `syz.5.644'. [ 48.043418][ T5134] netlink: 'syz.5.644': attribute type 7 has an invalid length. [ 48.051090][ T5134] netlink: 'syz.5.644': attribute type 8 has an invalid length. [ 48.058725][ T5134] netlink: 4 bytes leftover after parsing attributes in process `syz.5.644'. [ 48.075965][ T5136] netlink: 28 bytes leftover after parsing attributes in process `syz.1.643'. [ 48.084925][ T5136] netlink: 32 bytes leftover after parsing attributes in process `syz.1.643'. [ 48.093958][ T5136] netlink: 28 bytes leftover after parsing attributes in process `syz.1.643'. [ 48.103462][ T5136] netlink: 32 bytes leftover after parsing attributes in process `syz.1.643'. [ 48.129444][ T29] audit: type=1326 audit(1763581529.416:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5139 comm="syz.1.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd00a7ff749 code=0x7ffc0000 [ 48.152811][ T29] audit: type=1326 audit(1763581529.416:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5139 comm="syz.1.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd00a7ff749 code=0x7ffc0000 [ 48.176069][ T29] audit: type=1326 audit(1763581529.416:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5139 comm="syz.1.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd00a7ff749 code=0x7ffc0000 [ 48.203287][ T29] audit: type=1326 audit(1763581529.456:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5139 comm="syz.1.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd00a7ff749 code=0x7ffc0000 [ 48.226543][ T29] audit: type=1326 audit(1763581529.456:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5139 comm="syz.1.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd00a7ff749 code=0x7ffc0000 [ 48.233491][ T5142] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 48.249866][ T29] audit: type=1326 audit(1763581529.466:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5139 comm="syz.1.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7fd00a7ff749 code=0x7ffc0000 [ 48.331238][ T5154] loop5: detected capacity change from 0 to 2048 [ 48.362513][ T5162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.371977][ T5162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.427401][ T5170] IPv6: NLM_F_CREATE should be specified when creating new route [ 48.466556][ T5176] program syz.0.664 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 48.485318][ T5178] loop2: detected capacity change from 0 to 512 [ 48.491879][ T5178] EXT4-fs: Ignoring removed i_version option [ 48.500667][ T5178] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.545434][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.606324][ T5191] ip6t_srh: unknown srh match flags 4000 [ 48.667673][ T5206] loop2: detected capacity change from 0 to 512 [ 48.674900][ T5206] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 48.867975][ T5235] batadv_slave_1: entered promiscuous mode [ 48.876638][ T5234] batadv_slave_1: left promiscuous mode [ 48.982347][ T5257] sctp: [Deprecated]: syz.5.703 (pid 5257) Use of int in max_burst socket option deprecated. [ 48.982347][ T5257] Use struct sctp_assoc_value instead [ 49.023725][ T5261] loop0: detected capacity change from 0 to 1764 [ 49.090020][ T5270] vhci_hcd: invalid port number 96 [ 49.095234][ T5270] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 49.137794][ T5281] loop6: detected capacity change from 0 to 512 [ 49.180450][ T5289] veth0_to_bond: entered promiscuous mode [ 49.187454][ T5289] gretap0: entered promiscuous mode [ 49.233963][ T5295] loop0: detected capacity change from 0 to 128 [ 49.242648][ T5293] tap0: tun_chr_ioctl cmd 1074025677 [ 49.250144][ T5293] tap0: linktype set to 0 [ 49.291710][ T5301] loop0: detected capacity change from 0 to 2048 [ 49.312727][ T5301] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.345073][ T5313] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 49.353372][ T5313] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 49.362957][ T5312] netlink: 'syz.6.726': attribute type 7 has an invalid length. [ 49.370704][ T5312] netlink: 'syz.6.726': attribute type 8 has an invalid length. [ 49.382391][ T5312] gretap0: entered promiscuous mode [ 49.389074][ T5312] gretap0: left promiscuous mode [ 49.394279][ T5301] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 49.413350][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.476591][ T5319] loop5: detected capacity change from 0 to 512 [ 49.537521][ T5327] capability: warning: `syz.5.734' uses deprecated v2 capabilities in a way that may be insecure [ 49.765279][ T5350] loop6: detected capacity change from 0 to 512 [ 49.781347][ T5350] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.859167][ T4647] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.915477][ T5364] loop6: detected capacity change from 0 to 512 [ 49.924208][ T5364] EXT4-fs: Ignoring removed i_version option [ 49.930375][ T5364] EXT4-fs: Ignoring removed bh option [ 49.970827][ T5364] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.050285][ T4647] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.303961][ T5409] loop2: detected capacity change from 0 to 4096 [ 50.320861][ T5409] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.702498][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.768210][ T5484] loop6: detected capacity change from 0 to 128 [ 50.815124][ T5494] SELinux: failed to load policy [ 50.905710][ T5456] syz.6.793: attempt to access beyond end of device [ 50.905710][ T5456] loop6: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 51.007891][ T5519] program syz.1.810 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 51.234571][ T5549] loop2: detected capacity change from 0 to 512 [ 51.356513][ T5570] loop1: detected capacity change from 0 to 2048 [ 51.414773][ T5570] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.520103][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.603942][ T5616] bond0: (slave caif0): Error: Device type is different from other slaves [ 51.621879][ T5619] loop0: detected capacity change from 0 to 512 [ 51.628751][ T5616] netlink: 'syz.5.848': attribute type 10 has an invalid length. [ 51.651041][ T5619] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.667594][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.723372][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.752464][ T5616] bond0: (slave team0): Enslaving as an active interface with an up link [ 51.974218][ T5671] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=5671 comm=syz.1.873 [ 52.037858][ T5680] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 52.045113][ T5680] IPv6: NLM_F_CREATE should be set when creating new route [ 52.224595][ T5709] loop5: detected capacity change from 0 to 512 [ 52.236667][ T5709] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 52.250910][ T5714] loop1: detected capacity change from 0 to 164 [ 52.257741][ T5709] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 52.266305][ T5709] EXT4-fs (loop5): write access unavailable, skipping orphan cleanup [ 52.276515][ T5709] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 52.289156][ T5714] ISOFS: unable to read i-node block [ 52.294708][ T5714] isofs_fill_super: get root inode failed [ 52.357914][ T4178] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.510346][ T5765] loop6: detected capacity change from 0 to 256 [ 52.592591][ T5779] loop2: detected capacity change from 0 to 512 [ 52.609541][ T5779] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.916: bad orphan inode 15 [ 52.621506][ T5779] ext4_test_bit(bit=14, block=5) = 0 [ 52.627143][ T5779] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.643334][ T5779] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 52.669177][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.687092][ T5784] delete_channel: no stack [ 52.924851][ T5817] 9pnet_fd: Insufficient options for proto=fd [ 52.968329][ T29] kauditd_printk_skb: 255 callbacks suppressed [ 52.968343][ T29] audit: type=1400 audit(52.943:1109): avc: denied { sqpoll } for pid=5820 comm="syz.2.936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 53.013136][ T5830] __nla_validate_parse: 16 callbacks suppressed [ 53.013151][ T5830] netlink: 172 bytes leftover after parsing attributes in process `syz.0.937'. [ 53.079294][ T5847] netlink: 'syz.0.938': attribute type 10 has an invalid length. [ 53.087094][ T5847] netlink: 168 bytes leftover after parsing attributes in process `syz.0.938'. [ 53.103240][ T5847] team0: Port device syz_tun added [ 53.335708][ T29] audit: type=1400 audit(53.313:1110): avc: denied { module_request } for pid=5862 comm="syz.0.940" kmod="netdev-hsr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 53.476598][ T5872] loop1: detected capacity change from 0 to 2048 [ 53.491238][ T5872] EXT4-fs: Ignoring removed mblk_io_submit option [ 53.497706][ T5872] EXT4-fs: Ignoring removed i_version option [ 53.512139][ T5876] loop0: detected capacity change from 0 to 128 [ 53.520580][ T29] audit: type=1400 audit(53.333:1111): avc: denied { sys_module } for pid=5862 comm="syz.0.940" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 53.541010][ T29] audit: type=1326 audit(53.443:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5873 comm="syz.0.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f05ca8465e7 code=0x7ffc0000 [ 53.563601][ T29] audit: type=1326 audit(53.443:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5873 comm="syz.0.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f05ca7eb829 code=0x7ffc0000 [ 53.586235][ T29] audit: type=1326 audit(53.443:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5873 comm="syz.0.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f05ca8465e7 code=0x7ffc0000 [ 53.608827][ T29] audit: type=1326 audit(53.443:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5873 comm="syz.0.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f05ca7eb829 code=0x7ffc0000 [ 53.631457][ T29] audit: type=1326 audit(53.443:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5873 comm="syz.0.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ca84f749 code=0x7ffc0000 [ 53.654141][ T29] audit: type=1326 audit(53.443:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5873 comm="syz.0.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f05ca84f749 code=0x7ffc0000 [ 53.676816][ T29] audit: type=1326 audit(53.443:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5873 comm="syz.0.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f05ca8465e7 code=0x7ffc0000 [ 53.797092][ T5890] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 53.879644][ T5898] loop0: detected capacity change from 0 to 164 [ 53.902931][ T5898] Unable to read rock-ridge attributes [ 53.978289][ C0] hrtimer: interrupt took 25967 ns [ 54.132606][ T5932] netlink: 24 bytes leftover after parsing attributes in process `syz.0.971'. [ 54.146449][ T5932] IPVS: Error connecting to the multicast addr [ 54.175298][ T5941] netlink: 'syz.2.975': attribute type 1 has an invalid length. [ 54.183059][ T5941] netlink: 224 bytes leftover after parsing attributes in process `syz.2.975'. [ 54.228856][ T5949] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 54.260134][ T5956] netlink: 16 bytes leftover after parsing attributes in process `syz.5.983'. [ 54.326338][ T5971] netlink: 19 bytes leftover after parsing attributes in process `syz.0.990'. [ 54.385762][ T5983] netlink: 5 bytes leftover after parsing attributes in process `syz.0.995'. [ 54.399851][ T5985] loop5: detected capacity change from 0 to 512 [ 54.404874][ T5983] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 54.406510][ T5985] EXT4-fs: Ignoring removed orlov option [ 54.419513][ T5983] 0ªî{X¹¦: entered allmulticast mode [ 54.426698][ T5983] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 54.442860][ T5988] loop2: detected capacity change from 0 to 128 [ 54.492692][ T5998] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 54.564231][ T6006] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.571455][ T6006] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.655946][ T6018] loop2: detected capacity change from 0 to 128 [ 54.723567][ T6028] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1016'. [ 54.758583][ T6018] syz.2.1012: attempt to access beyond end of device [ 54.758583][ T6018] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 54.779548][ T6018] syz.2.1012: attempt to access beyond end of device [ 54.779548][ T6018] loop2: rw=2049, sector=185, nr_sectors = 16 limit=128 [ 54.790083][ T6041] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1022'. [ 54.793237][ T6018] syz.2.1012: attempt to access beyond end of device [ 54.793237][ T6018] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 54.817443][ T6018] syz.2.1012: attempt to access beyond end of device [ 54.817443][ T6018] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 54.831413][ T6018] syz.2.1012: attempt to access beyond end of device [ 54.831413][ T6018] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 54.845644][ T6018] syz.2.1012: attempt to access beyond end of device [ 54.845644][ T6018] loop2: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 54.859355][ T6018] syz.2.1012: attempt to access beyond end of device [ 54.859355][ T6018] loop2: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 54.873177][ T6018] syz.2.1012: attempt to access beyond end of device [ 54.873177][ T6018] loop2: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 54.886754][ T6018] syz.2.1012: attempt to access beyond end of device [ 54.886754][ T6018] loop2: rw=2049, sector=305, nr_sectors = 8 limit=128 [ 54.995750][ T6058] tmpfs: Unknown parameter 'mpo' [ 55.182562][ T6086] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1041'. [ 55.191704][ T6086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.199108][ T6086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.206733][ T6086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.214165][ T6086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.365546][ T6107] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 55.375177][ T6107] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 55.550415][ T6143] loop5: detected capacity change from 0 to 2048 [ 55.602273][ T6151] xt_hashlimit: size too large, truncated to 1048576 [ 55.609114][ T6151] xt_hashlimit: max too large, truncated to 1048576 [ 55.639224][ T6156] loop0: detected capacity change from 0 to 512 [ 55.652343][ T6158] program syz.5.1075 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.710732][ T6162] loop0: detected capacity change from 0 to 8192 [ 55.748055][ T6174] 0ªX¹¦À: renamed from caif0 [ 55.754935][ T6174] 0ªX¹¦À: entered allmulticast mode [ 55.760300][ T6174] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 55.801967][ T6180] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 55.883424][ T6188] netlink: 'syz.5.1088': attribute type 21 has an invalid length. [ 55.893038][ T6188] netlink: 'syz.5.1088': attribute type 4 has an invalid length. [ 55.900907][ T6188] netlink: 'syz.5.1088': attribute type 5 has an invalid length. [ 56.013599][ T6206] loop2: detected capacity change from 0 to 164 [ 56.031723][ T6207] Illegal XDP return value 2591598211 on prog (id 427) dev N/A, expect packet loss! [ 56.043272][ T6206] rock: directory entry would overflow storage [ 56.049530][ T6206] rock: sig=0x4d4e, size=5, remaining=4 [ 56.065227][ T6206] isofs: isofs_export_get_parent(): child directory not normalized! [ 56.159279][ T6223] loop2: detected capacity change from 0 to 164 [ 56.164417][ T6225] loop5: detected capacity change from 0 to 1024 [ 56.173415][ T6223] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 56.198563][ T820] IPVS: starting estimator thread 0... [ 56.204153][ T6227] IPVS: ip_vs_add_dest(): server weight less than zero [ 56.260254][ T6238] loop5: detected capacity change from 0 to 128 [ 56.308432][ T6228] IPVS: using max 2784 ests per chain, 139200 per kthread [ 56.344669][ T6245] loop2: detected capacity change from 0 to 512 [ 57.143526][ T6322] loop6: detected capacity change from 0 to 512 [ 57.170830][ T6324] netlink: 'syz.2.1148': attribute type 4 has an invalid length. [ 57.179804][ T6322] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.1147: Failed to acquire dquot type 1 [ 57.204955][ T6322] EXT4-fs (loop6): 1 truncate cleaned up [ 57.231143][ T6331] loop2: detected capacity change from 0 to 128 [ 57.326102][ T6339] loop6: detected capacity change from 0 to 512 [ 57.420918][ T6352] loop6: detected capacity change from 0 to 128 [ 57.427640][ T6352] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 57.455480][ T6352] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 57.500290][ T5005] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 57.606867][ T6376] loop2: detected capacity change from 0 to 128 [ 57.610552][ T6373] loop0: detected capacity change from 0 to 512 [ 57.648124][ T6373] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 57.658167][ T6373] EXT4-fs (loop0): orphan cleanup on readonly fs [ 57.666243][ T6373] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.1169: corrupted inode contents [ 57.678693][ T6373] EXT4-fs (loop0): Remounting filesystem read-only [ 57.685294][ T6373] EXT4-fs (loop0): 1 truncate cleaned up [ 57.695458][ T5856] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 57.706126][ T5856] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 57.776068][ T5856] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 57.786430][ T5842] bio_check_eod: 99 callbacks suppressed [ 57.786444][ T5842] kworker/u8:52: attempt to access beyond end of device [ 57.786444][ T5842] loop2: rw=1, sector=153, nr_sectors = 8 limit=128 [ 57.806472][ T5842] kworker/u8:52: attempt to access beyond end of device [ 57.806472][ T5842] loop2: rw=1, sector=169, nr_sectors = 8 limit=128 [ 57.819910][ T5842] kworker/u8:52: attempt to access beyond end of device [ 57.819910][ T5842] loop2: rw=1, sector=185, nr_sectors = 8 limit=128 [ 57.833582][ T5842] kworker/u8:52: attempt to access beyond end of device [ 57.833582][ T5842] loop2: rw=1, sector=201, nr_sectors = 8 limit=128 [ 57.869485][ T5842] kworker/u8:52: attempt to access beyond end of device [ 57.869485][ T5842] loop2: rw=1, sector=217, nr_sectors = 8 limit=128 [ 57.883455][ T5842] kworker/u8:52: attempt to access beyond end of device [ 57.883455][ T5842] loop2: rw=1, sector=233, nr_sectors = 8 limit=128 [ 57.900307][ T5842] kworker/u8:52: attempt to access beyond end of device [ 57.900307][ T5842] loop2: rw=1, sector=249, nr_sectors = 8 limit=128 [ 57.917324][ T5842] kworker/u8:52: attempt to access beyond end of device [ 57.917324][ T5842] loop2: rw=1, sector=265, nr_sectors = 8 limit=128 [ 57.930738][ T6413] smc: net device bond0 applied user defined pnetid SYZ0 [ 57.932213][ T5842] kworker/u8:52: attempt to access beyond end of device [ 57.932213][ T5842] loop2: rw=1, sector=281, nr_sectors = 8 limit=128 [ 57.938263][ T6413] smc: net device bond0 erased user defined pnetid SYZ0 [ 57.951919][ T5842] kworker/u8:52: attempt to access beyond end of device [ 57.951919][ T5842] loop2: rw=1, sector=297, nr_sectors = 8 limit=128 [ 58.060944][ T29] kauditd_printk_skb: 672 callbacks suppressed [ 58.060977][ T29] audit: type=1400 audit(58.043:1783): avc: denied { read write } for pid=6428 comm="syz.0.1196" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 58.091316][ T29] audit: type=1400 audit(58.043:1784): avc: denied { open } for pid=6428 comm="syz.0.1196" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 58.120682][ T29] audit: type=1400 audit(58.043:1785): avc: denied { ioctl } for pid=6428 comm="syz.0.1196" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 58.146948][ T6419] loop5: detected capacity change from 0 to 8192 [ 58.205678][ T6445] loop6: detected capacity change from 0 to 512 [ 58.237402][ T6445] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.1202: couldn't read orphan inode 26 (err -116) [ 58.249543][ T6445] EXT4-fs (loop6): Remounting filesystem read-only [ 58.272263][ T29] audit: type=1326 audit(58.243:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6452 comm="syz.1.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd00a7ff749 code=0x7ffc0000 [ 58.295361][ T29] audit: type=1326 audit(58.243:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6452 comm="syz.1.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd00a7ff749 code=0x7ffc0000 [ 58.298506][ T6460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.318180][ T29] audit: type=1326 audit(58.243:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6452 comm="syz.1.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7fd00a7ff749 code=0x7ffc0000 [ 58.349081][ T29] audit: type=1326 audit(58.243:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6452 comm="syz.1.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd00a7ff749 code=0x7ffc0000 [ 58.371917][ T29] audit: type=1326 audit(58.243:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6452 comm="syz.1.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd00a7ff749 code=0x7ffc0000 [ 58.375256][ T6460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.455790][ T29] audit: type=1400 audit(58.433:1791): avc: denied { associate } for pid=6474 comm="syz.6.1216" name="sockcreate" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 58.608501][ T6470] loop5: detected capacity change from 0 to 32768 [ 58.622230][ T6488] loop6: detected capacity change from 0 to 1024 [ 58.638803][ T6488] EXT4-fs: Ignoring removed oldalloc option [ 58.644872][ T6488] EXT4-fs: Ignoring removed bh option [ 58.672232][ T6491] loop1: detected capacity change from 0 to 8192 [ 58.723286][ T6496] tc_dump_action: action bad kind [ 58.824681][ T6514] loop1: detected capacity change from 0 to 512 [ 58.851279][ T29] audit: type=1326 audit(58.833:1792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6519 comm="syz.2.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff76116f749 code=0x7ffc0000 [ 58.886691][ T6524] __nla_validate_parse: 9 callbacks suppressed [ 58.886706][ T6524] netlink: 7 bytes leftover after parsing attributes in process `syz.5.1239'. [ 58.902578][ T6524] netlink: 7 bytes leftover after parsing attributes in process `syz.5.1239'. [ 58.916781][ T6514] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 58.946521][ T6514] EXT4-fs (loop1): mount failed [ 59.023376][ T820] hid_parser_main: 8 callbacks suppressed [ 59.023392][ T820] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 59.036583][ T820] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 59.044029][ T820] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 59.051442][ T820] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 59.058830][ T820] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 59.066207][ T820] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 59.073598][ T820] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 59.080999][ T820] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 59.088493][ T820] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 59.095875][ T820] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 59.105189][ T6552] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1251'. [ 59.105186][ T820] hid-generic 0003:0004:0000.0002: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 59.123307][ T6552] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1251'. [ 59.137185][ T6555] loop2: detected capacity change from 0 to 1024 [ 59.139288][ T6559] loop6: detected capacity change from 0 to 128 [ 59.159579][ T6555] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 59.239582][ T6572] program syz.1.1260 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.304032][ T6579] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 59.311364][ T6579] IPv6: NLM_F_CREATE should be set when creating new route [ 59.318588][ T6579] IPv6: NLM_F_CREATE should be set when creating new route [ 59.325780][ T6579] IPv6: NLM_F_CREATE should be set when creating new route [ 59.338155][ T6579] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 59.375581][ T6590] loop6: detected capacity change from 0 to 512 [ 59.400677][ T6590] EXT4-fs warning (device loop6): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 59.421225][ T6590] EXT4-fs (loop6): mount failed [ 59.505272][ T6611] loop0: detected capacity change from 0 to 128 [ 59.533095][ T6616] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1278'. [ 59.627741][ T6623] loop1: detected capacity change from 0 to 1024 [ 59.662793][ T6630] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1283'. [ 59.689192][ T6633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1285'. [ 59.891421][ T6658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1297'. [ 60.180965][ T6688] pimreg: entered allmulticast mode [ 60.187447][ T6688] pimreg: left allmulticast mode [ 60.375863][ T6714] loop5: detected capacity change from 0 to 256 [ 60.423638][ T6718] loop5: detected capacity change from 0 to 2048 [ 60.479383][ T6718] GPT:first_usable_lbas don't match. [ 60.484704][ T6718] GPT:34 != 290 [ 60.488151][ T6718] GPT: Use GNU Parted to correct GPT errors. [ 60.494219][ T6718] loop5: p1 p2 p3 [ 60.658986][ T6734] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1334'. [ 60.701800][ T6740] loop1: detected capacity change from 0 to 1024 [ 60.708954][ T6740] EXT4-fs: Ignoring removed mblk_io_submit option [ 60.719833][ T6743] loop6: detected capacity change from 0 to 128 [ 60.733899][ T6746] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1339'. [ 60.736105][ T6740] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 61.246407][ T6831] bond1 (unregistering): Released all slaves [ 61.426074][ T6840] loop6: detected capacity change from 0 to 512 [ 61.439899][ T6842] loop5: detected capacity change from 0 to 512 [ 61.481751][ T6840] EXT4-fs: Cannot change quota options when quota turned on [ 61.609081][ T6867] loop2: detected capacity change from 0 to 128 [ 61.965503][ T6902] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6902 comm=syz.1.1404 [ 62.100266][ T6920] loop6: detected capacity change from 0 to 4096 [ 62.106899][ T6920] EXT4-fs: Ignoring removed nomblk_io_submit option [ 62.202257][ T6939] loop1: detected capacity change from 0 to 256 [ 62.231191][ T6939] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 62.244700][ T6939] FAT-fs (loop1): error, corrupted file size (i_pos 196, 4096) [ 62.252454][ T6939] FAT-fs (loop1): Filesystem has been set read-only [ 62.267522][ T6947] 9pnet: Could not find request transport: tc [ 62.486709][ T6995] pimreg: entered allmulticast mode [ 62.503290][ T6995] pimreg: left allmulticast mode [ 62.534582][ T7007] loop5: detected capacity change from 0 to 256 [ 62.663140][ T7025] netlink: 'syz.5.1463': attribute type 5 has an invalid length. [ 62.727065][ T7037] random: crng reseeded on system resumption [ 62.742646][ T7039] loop2: detected capacity change from 0 to 1024 [ 62.753534][ T7041] pimreg: entered allmulticast mode [ 62.770668][ T7039] EXT4-fs: Ignoring removed mblk_io_submit option [ 62.785017][ T7041] pimreg: left allmulticast mode [ 63.059663][ T7090] loop2: detected capacity change from 0 to 128 [ 63.069410][ T7090] EXT4-fs: Ignoring removed nobh option [ 63.076327][ T7094] can0: slcan on ptm0. [ 63.080837][ T7096] pimreg: entered allmulticast mode [ 63.088793][ T7096] pimreg: left allmulticast mode [ 63.129727][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 63.129779][ T29] audit: type=1400 audit(63.113:1927): avc: denied { connect } for pid=7100 comm="syz.2.1496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 63.169313][ T7103] loop6: detected capacity change from 0 to 512 [ 63.181070][ T29] audit: type=1400 audit(63.163:1928): avc: denied { create } for pid=7102 comm="syz.6.1497" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 63.200772][ T29] audit: type=1400 audit(63.163:1929): avc: denied { setattr } for pid=7102 comm="syz.6.1497" name="file1" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 63.222073][ T29] audit: type=1400 audit(63.163:1930): avc: denied { add_name } for pid=7102 comm="syz.6.1497" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 63.242074][ T7093] can0 (unregistered): slcan off ptm0. [ 63.328441][ T7125] loop5: detected capacity change from 0 to 164 [ 63.340909][ T7125] Unsupported NM flag settings (240) [ 63.358089][ T29] audit: type=1400 audit(63.333:1931): avc: denied { mounton } for pid=7124 comm="syz.5.1508" path="/265/file0/file0" dev="loop5" ino=1856 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=dir permissive=1 [ 63.475900][ T7145] pimreg: tun_chr_ioctl cmd 2147767520 [ 63.522407][ T29] audit: type=1400 audit(63.503:1932): avc: denied { read } for pid=7148 comm="syz.5.1520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 63.675643][ T7168] wireguard0: entered promiscuous mode [ 63.681173][ T7168] wireguard0: entered allmulticast mode [ 64.253721][ T29] audit: type=1326 audit(64.233:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7192 comm="syz.5.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f217bb1f749 code=0x7ffc0000 [ 64.276540][ T29] audit: type=1326 audit(64.233:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7192 comm="syz.5.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f217bb1f749 code=0x7ffc0000 [ 64.358305][ T29] audit: type=1326 audit(64.273:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7192 comm="syz.5.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f217bb1f749 code=0x7ffc0000 [ 64.381064][ T29] audit: type=1326 audit(64.273:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7192 comm="syz.5.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f217bb1f749 code=0x7ffc0000 [ 64.487617][ T7228] __nla_validate_parse: 10 callbacks suppressed [ 64.487633][ T7228] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1554'. [ 64.533914][ T7234] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1556'. [ 64.611622][ T7250] loop2: detected capacity change from 0 to 1024 [ 64.618253][ T7250] EXT4-fs: inline encryption not supported [ 64.843808][ T7285] loop1: detected capacity change from 0 to 2048 [ 65.037191][ T7310] loop5: detected capacity change from 0 to 512 [ 65.049934][ T7316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1594'. [ 65.183335][ T7345] loop5: detected capacity change from 0 to 512 [ 65.370943][ T7362] loop5: detected capacity change from 0 to 512 [ 65.449433][ T7369] loop1: detected capacity change from 0 to 128 [ 65.478189][ T7372] loop5: detected capacity change from 0 to 1024 [ 65.513462][ T7374] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1621'. [ 65.730985][ T7394] loop2: detected capacity change from 0 to 1024 [ 65.737775][ T7394] EXT4-fs: Ignoring removed orlov option [ 65.791801][ T7394] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: comm syz.2.1628: lblock 0 mapped to illegal pblock 0 (length 4) [ 65.845941][ T7394] EXT4-fs error (device loop2): ext4_ext_remove_space:2955: inode #15: comm syz.2.1628: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 65.895399][ T3317] EXT4-fs unmount: 37 callbacks suppressed [ 65.895415][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 65.906187][ T7411] gtp0: entered promiscuous mode [ 65.915369][ T7411] gtp0: entered allmulticast mode [ 65.950957][ T7417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1640'. [ 65.959977][ T7419] xt_hashlimit: max too large, truncated to 1048576 [ 66.060844][ T7439] program syz.5.1650 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 66.072458][ T7437] 9pnet: Could not find request transport: 01777777777777777777777 [ 66.096247][ T7446] netlink: 'syz.0.1653': attribute type 5 has an invalid length. [ 66.120491][ T7452] loop5: detected capacity change from 0 to 1024 [ 66.137112][ T7452] EXT4-fs: Ignoring removed nobh option [ 66.142785][ T7452] EXT4-fs: Ignoring removed bh option [ 66.215194][ T7472] sctp: [Deprecated]: syz.0.1666 (pid 7472) Use of struct sctp_assoc_value in delayed_ack socket option. [ 66.215194][ T7472] Use struct sctp_sack_info instead [ 66.217391][ T7473] loop2: detected capacity change from 0 to 164 [ 66.259169][ T7473] Unable to read rock-ridge attributes [ 66.279394][ T7481] loop5: detected capacity change from 0 to 512 [ 66.295459][ T7478] loop1: detected capacity change from 0 to 512 [ 66.307276][ T7478] journal_path: Non-blockdev passed as './bus' [ 66.313581][ T7478] EXT4-fs: error: could not find journal device path [ 66.321451][ T7484] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1671'. [ 66.360116][ T7498] loop5: detected capacity change from 0 to 256 [ 66.424922][ T7513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1685'. [ 66.484787][ T7526] loop5: detected capacity change from 0 to 512 [ 66.500206][ T7525] loop1: detected capacity change from 0 to 2048 [ 66.517839][ T7525] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.531559][ T7525] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.1691: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 66.551650][ T7525] EXT4-fs (loop1): Remounting filesystem read-only [ 66.562834][ T7536] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 66.594814][ T7543] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1698'. [ 66.605326][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.626466][ T7543] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 66.749544][ T7570] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1710'. [ 66.760406][ T7570] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1710'. [ 66.832527][ T7582] loop5: detected capacity change from 0 to 1024 [ 66.853387][ T7582] EXT4-fs: inline encryption not supported [ 66.939173][ T7590] loop5: detected capacity change from 0 to 8192 [ 66.996979][ T7606] 9pnet_fd: Insufficient options for proto=fd [ 67.177715][ T7633] netlink: 'syz.6.1741': attribute type 10 has an invalid length. [ 67.190276][ T7635] loop2: detected capacity change from 0 to 512 [ 67.200174][ T7635] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 67.216794][ T7633] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 67.219183][ T7635] EXT4-fs (loop2): mount failed [ 67.279128][ T7644] can0: slcan on ptm0. [ 67.338431][ T7644] can0 (unregistered): slcan off ptm0. [ 67.381228][ T7655] SELinux: policydb version 0 does not match my version range 15-35 [ 67.389601][ T7655] SELinux: failed to load policy [ 67.445578][ T7664] loop6: detected capacity change from 0 to 136 [ 67.453268][ T7664] Attempt to read inode for relocated directory [ 67.583598][ T7694] loop2: detected capacity change from 0 to 736 [ 67.612822][ T7699] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 67.612822][ T7699] program syz.2.1769 not setting count and/or reply_len properly [ 67.681347][ T7711] --map-set only usable from mangle table [ 67.859348][ T7735] netem: incorrect ge model size [ 67.864325][ T7735] netem: change failed [ 67.914838][ T7737] loop5: detected capacity change from 0 to 1024 [ 67.930405][ T7737] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 67.941403][ T7737] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 67.952893][ T7737] JBD2: no valid journal superblock found [ 67.958794][ T7737] EXT4-fs (loop5): Could not load journal inode [ 68.062797][ T7754] loop5: detected capacity change from 0 to 512 [ 68.088203][ T7758] loop5: detected capacity change from 0 to 128 [ 68.292512][ T5005] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.345649][ T29] kauditd_printk_skb: 661 callbacks suppressed [ 68.345664][ T29] audit: type=1400 audit(68.323:2597): avc: denied { mounton } for pid=7765 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 68.418886][ T29] audit: type=1400 audit(68.393:2598): avc: denied { name_bind } for pid=7772 comm="syz.1.1805" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 68.453578][ T7777] loop1: detected capacity change from 0 to 512 [ 68.469494][ T5005] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.520997][ T5005] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.612005][ T5005] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.697334][ T5005] bridge_slave_1: left allmulticast mode [ 68.703151][ T5005] bridge_slave_1: left promiscuous mode [ 68.708831][ T5005] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.716638][ T5005] bridge_slave_0: left allmulticast mode [ 68.722329][ T5005] bridge_slave_0: left promiscuous mode [ 68.728063][ T5005] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.786865][ T7799] netlink: 'syz.6.1813': attribute type 11 has an invalid length. [ 68.803031][ T29] audit: type=1400 audit(68.763:2599): avc: denied { create } for pid=7792 comm="syz.5.1812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 68.822393][ T29] audit: type=1400 audit(68.763:2600): avc: denied { ioctl } for pid=7792 comm="syz.5.1812" path="socket:[18782]" dev="sockfs" ino=18782 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 68.850530][ T5005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 68.861799][ T5005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 68.872685][ T5005] bond0 (unregistering): Released all slaves [ 68.904623][ T7765] chnl_net:caif_netlink_parms(): no params data found [ 68.935633][ T5005] tipc: Left network mode [ 68.940921][ T7808] program syz.6.1816 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 68.970641][ T7811] pimreg1: tun_chr_ioctl cmd 1074025681 [ 68.986631][ T5005] hsr_slave_0: left promiscuous mode [ 69.002720][ T5005] hsr_slave_1: left promiscuous mode [ 69.009930][ T5005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.017308][ T5005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.026391][ T5005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.033878][ T5005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.044908][ T5005] veth1_macvtap: left promiscuous mode [ 69.050419][ T5005] veth0_macvtap: left promiscuous mode [ 69.056018][ T5005] veth1_vlan: left promiscuous mode [ 69.061667][ T5005] veth0_vlan: left promiscuous mode [ 69.124417][ T5005] team0 (unregistering): Port device team_slave_1 removed [ 69.134245][ T5005] team0 (unregistering): Port device team_slave_0 removed [ 69.183262][ T7825] vlan2: entered promiscuous mode [ 69.188334][ T7825] bond0: entered promiscuous mode [ 69.193359][ T7825] bond_slave_0: entered promiscuous mode [ 69.199059][ T7825] bond_slave_1: entered promiscuous mode [ 69.220717][ T7765] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.227897][ T7765] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.235151][ T7765] bridge_slave_0: entered allmulticast mode [ 69.241663][ T7765] bridge_slave_0: entered promiscuous mode [ 69.250227][ T7765] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.257285][ T7765] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.264697][ T7765] bridge_slave_1: entered allmulticast mode [ 69.285394][ T7765] bridge_slave_1: entered promiscuous mode [ 69.309537][ T7765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.320026][ T7765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.342620][ T7765] team0: Port device team_slave_0 added [ 69.349457][ T7765] team0: Port device team_slave_1 added [ 69.366976][ T29] audit: type=1400 audit(69.343:2601): avc: denied { mount } for pid=7835 comm="syz.0.1828" name="/" dev="configfs" ino=1010 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 69.404852][ T29] audit: type=1400 audit(69.373:2602): avc: denied { search } for pid=7835 comm="syz.0.1828" name="/" dev="configfs" ino=1010 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 69.426517][ T29] audit: type=1400 audit(69.373:2603): avc: denied { setattr } for pid=7835 comm="syz.0.1828" name="/" dev="configfs" ino=1010 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 69.441099][ T7843] loop5: detected capacity change from 0 to 136 [ 69.457229][ T7765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.464261][ T7765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.490326][ T7765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.500896][ T7843] Attempt to read inode for relocated directory [ 69.501872][ T7765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.514206][ T7765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.540327][ T7765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.583525][ T7765] hsr_slave_0: entered promiscuous mode [ 69.591313][ T7765] hsr_slave_1: entered promiscuous mode [ 69.597470][ T7765] debugfs: 'hsr0' already exists in 'hsr' [ 69.603249][ T7765] Cannot create hsr debugfs directory [ 69.619469][ T29] audit: type=1400 audit(69.603:2604): avc: denied { setopt } for pid=7849 comm="syz.5.1834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 69.710460][ T7856] __nla_validate_parse: 13 callbacks suppressed [ 69.710476][ T7856] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1836'. [ 69.894539][ T7765] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.903930][ T7870] loop6: detected capacity change from 0 to 128 [ 69.912648][ T7870] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 69.914394][ T7765] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.933953][ T7765] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.943311][ T7765] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.944127][ T4647] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 69.971417][ T7765] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.978516][ T7765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.010625][ T7765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.020821][ T5005] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.028982][ T7886] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 70.035340][ T7886] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 70.051521][ T7765] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.071100][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.078198][ T5856] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.095096][ T7891] loop5: detected capacity change from 0 to 512 [ 70.097803][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.108511][ T5856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.127402][ T29] audit: type=1326 audit(70.103:2605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7893 comm="syz.5.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f217bb1f749 code=0x7ffc0000 [ 70.150227][ T29] audit: type=1326 audit(70.103:2606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7893 comm="syz.5.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f217bb1f749 code=0x7ffc0000 [ 70.151917][ T7765] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.183589][ T7765] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.235482][ T7905] capability: warning: `syz.1.1853' uses 32-bit capabilities (legacy support in use) [ 70.268940][ T7765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.319491][ T7916] usb usb8: usbfs: process 7916 (syz.6.1856) did not claim interface 4 before use [ 70.368828][ T7765] veth0_vlan: entered promiscuous mode [ 70.380252][ T7765] veth1_vlan: entered promiscuous mode [ 70.401773][ T7765] veth0_macvtap: entered promiscuous mode [ 70.411398][ T7765] veth1_macvtap: entered promiscuous mode [ 70.425586][ T7765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.437829][ T7765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.449979][ T5842] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.463078][ T5842] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.495144][ T5842] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.510479][ T5842] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.051783][ T7999] netlink: 'syz.2.1892': attribute type 10 has an invalid length. [ 71.068883][ T8005] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1894'. [ 71.081349][ T7999] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 71.127367][ T8012] SELinux: Context Ü is not valid (left unmapped). [ 71.168808][ T8019] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1899'. [ 71.226330][ T8029] loop1: detected capacity change from 0 to 512 [ 71.235233][ T8029] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.271068][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.392298][ T7895] kernel read not supported for file /583/net/netfilter (pid: 7895 comm: kworker/0:4) [ 71.468782][ T8060] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1920'. [ 71.477762][ T8060] netlink: 'syz.5.1920': attribute type 5 has an invalid length. [ 71.557443][ T8074] netlink: 'syz.1.1927': attribute type 10 has an invalid length. [ 71.571216][ T8074] team0: Port device dummy0 added [ 71.651297][ T8086] loop2: detected capacity change from 0 to 8192 [ 71.668216][ T8086] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 71.677075][ T8086] FAT-fs (loop2): Filesystem has been set read-only [ 71.809498][ T8128] loop1: detected capacity change from 0 to 128 [ 72.145086][ T8171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1971'. [ 72.172952][ T8175] IPv6: NLM_F_CREATE should be specified when creating new route [ 72.220315][ T8181] loop2: detected capacity change from 0 to 512 [ 72.248095][ T8181] EXT4-fs (loop2): orphan cleanup on readonly fs [ 72.267494][ T8181] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1977: bg 0: block 248: padding at end of block bitmap is not set [ 72.282945][ T8181] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.1977: Failed to acquire dquot type 1 [ 72.294972][ T8181] EXT4-fs (loop2): 1 truncate cleaned up [ 72.301347][ T8181] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.354937][ T8181] syz.2.1977 (8181) used greatest stack depth: 9200 bytes left [ 72.412176][ T7765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.501212][ T8206] loop2: detected capacity change from 0 to 256 [ 72.510177][ T8202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1986'. [ 72.520221][ T8208] random: crng reseeded on system resumption [ 72.526317][ T8204] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1987'. [ 72.648686][ T8224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1998'. [ 72.746454][ T8238] syz.5.2004 uses obsolete (PF_INET,SOCK_PACKET) [ 72.779807][ T8240] SELinux: failed to load policy [ 72.820459][ T8249] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2009'. [ 72.861464][ T8254] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2007'. [ 73.068145][ T8279] loop6: detected capacity change from 0 to 512 [ 73.076868][ T8279] ------------[ cut here ]------------ [ 73.082457][ T8279] EA inode 11 i_nlink=2 [ 73.082690][ T8279] WARNING: CPU: 1 PID: 8279 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x36a/0x380 [ 73.097077][ T8279] Modules linked in: [ 73.101478][ T8279] CPU: 1 UID: 0 PID: 8279 Comm: syz.6.2022 Not tainted syzkaller #0 PREEMPT(voluntary) [ 73.111235][ T8279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 73.121334][ T8279] RIP: 0010:ext4_xattr_inode_update_ref+0x36a/0x380 [ 73.128037][ T8279] Code: 90 49 8d 7e 40 e8 06 f8 b8 ff 4d 8b 6e 40 4c 89 e7 e8 1a f3 b8 ff 41 8b 56 48 48 c7 c7 76 d5 55 86 4c 89 ee e8 f7 f3 67 ff 90 <0f> 0b 90 90 e9 ff fe ff ff e8 78 f2 b5 03 0f 1f 84 00 00 00 00 00 [ 73.147760][ T8279] RSP: 0018:ffffc9000137b5a0 EFLAGS: 00010246 [ 73.153914][ T8279] RAX: 8b679a2ec04bab00 RBX: ffff88811a8a3170 RCX: 0000000000080000 [ 73.161953][ T8279] RDX: ffffc90002f59000 RSI: 000000000000458a RDI: 000000000000458b [ 73.169938][ T8279] RBP: 0000000000000002 R08: 0001c9000137b427 R09: 0000000000000000 [ 73.177995][ T8279] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff88811a8a3120 [ 73.186005][ T8279] R13: 000000000000000b R14: ffff88811a8a30d8 R15: 0000000000000001 [ 73.193979][ T8279] FS: 00007fb6ca99f6c0(0000) GS:ffff8882aef11000(0000) knlGS:0000000000000000 [ 73.202933][ T8279] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 73.209519][ T8279] CR2: 00007fb6cbf22a60 CR3: 0000000116996000 CR4: 00000000003506f0 [ 73.217499][ T8279] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 73.225554][ T8279] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 73.233547][ T8279] Call Trace: [ 73.236874][ T8279] [ 73.239881][ T8279] ext4_xattr_set_entry+0x77f/0x1020 [ 73.245172][ T8279] ext4_xattr_ibody_set+0x184/0x3c0 [ 73.250561][ T8279] ext4_expand_extra_isize_ea+0xcbb/0x11f0 [ 73.256469][ T8279] __ext4_expand_extra_isize+0x246/0x280 [ 73.262175][ T8279] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 73.267731][ T8279] ext4_evict_inode+0x80e/0xd90 [ 73.272691][ T8279] ? __pfx_ext4_evict_inode+0x10/0x10 [ 73.278050][ T8279] evict+0x2e3/0x550 [ 73.281987][ T8279] ? __dquot_initialize+0x146/0x7c0 [ 73.287186][ T8279] iput+0x4ed/0x650 [ 73.291012][ T8279] ext4_process_orphan+0x1a9/0x1c0 [ 73.296182][ T8279] ext4_orphan_cleanup+0x6a8/0xa00 [ 73.301347][ T8279] ext4_fill_super+0x3483/0x3810 [ 73.306272][ T8279] ? snprintf+0x86/0xb0 [ 73.310444][ T8279] ? set_blocksize+0x1a8/0x310 [ 73.315231][ T8279] ? sb_set_blocksize+0xe3/0x100 [ 73.320238][ T8279] ? setup_bdev_super+0x30e/0x370 [ 73.325331][ T8279] ? __pfx_ext4_fill_super+0x10/0x10 [ 73.330696][ T8279] get_tree_bdev_flags+0x291/0x300 [ 73.335807][ T8279] ? __pfx_ext4_fill_super+0x10/0x10 [ 73.341102][ T8279] get_tree_bdev+0x1f/0x30 [ 73.345511][ T8279] ext4_get_tree+0x1c/0x30 [ 73.349976][ T8279] vfs_get_tree+0x57/0x1d0 [ 73.354449][ T8279] do_new_mount+0x24d/0x660 [ 73.358969][ T8279] path_mount+0x4a5/0xb70 [ 73.363409][ T8279] ? user_path_at+0x109/0x130 [ 73.368066][ T8279] __se_sys_mount+0x28c/0x2e0 [ 73.372790][ T8279] __x64_sys_mount+0x67/0x80 [ 73.377378][ T8279] x64_sys_call+0x2b51/0x3000 [ 73.382065][ T8279] do_syscall_64+0xd2/0x200 [ 73.386569][ T8279] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 73.392644][ T8279] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 73.398458][ T8279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.404450][ T8279] RIP: 0033:0x7fb6cbf40eea [ 73.408867][ T8279] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.428481][ T8279] RSP: 002b:00007fb6ca99ee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 73.436876][ T8279] RAX: ffffffffffffffda RBX: 00007fb6ca99eef0 RCX: 00007fb6cbf40eea [ 73.444855][ T8279] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fb6ca99eeb0 [ 73.452865][ T8279] RBP: 0000200000000180 R08: 00007fb6ca99eef0 R09: 0000000000800700 [ 73.460854][ T8279] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 73.468976][ T8279] R13: 00007fb6ca99eeb0 R14: 000000000000046f R15: 000000000000002c [ 73.476948][ T8279] [ 73.480047][ T8279] ---[ end trace 0000000000000000 ]--- [ 73.485603][ T8279] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #18: comm syz.6.2022: iget: bad extra_isize 90 (inode size 256) [ 73.500307][ T8279] EXT4-fs (loop6): Remounting filesystem read-only [ 73.506947][ T8279] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -30) [ 73.516793][ T8279] EXT4-fs (loop6): 1 orphan inode deleted [ 73.523091][ T8279] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.564272][ T4647] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.642555][ T29] kauditd_printk_skb: 333 callbacks suppressed [ 73.642604][ T29] audit: type=1326 audit(73.623:2938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8304 comm="syz.6.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6cbf3f749 code=0x7ffc0000 [ 73.672897][ T29] audit: type=1326 audit(73.653:2939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8304 comm="syz.6.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fb6cbf3f749 code=0x7ffc0000 [ 73.695671][ T29] audit: type=1326 audit(73.653:2940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8304 comm="syz.6.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6cbf3f749 code=0x7ffc0000 [ 73.718394][ T29] audit: type=1326 audit(73.653:2941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8304 comm="syz.6.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6cbf3f749 code=0x7ffc0000 [ 73.742286][ T29] audit: type=1326 audit(73.723:2942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8304 comm="syz.6.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fb6cbf3f749 code=0x7ffc0000 [ 73.764914][ T29] audit: type=1326 audit(73.723:2943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8304 comm="syz.6.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6cbf3f749 code=0x7ffc0000 [ 73.788362][ T29] audit: type=1326 audit(73.723:2944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8304 comm="syz.6.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6cbf3f749 code=0x7ffc0000 [ 73.822827][ T8315] IPv6: NLM_F_CREATE should be specified when creating new route [ 73.875885][ T29] audit: type=1400 audit(73.853:2945): avc: denied { relabelfrom } for pid=8320 comm="syz.0.2041" name="" dev="pipefs" ino=20466 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 73.976321][ T8335] pimreg: tun_chr_ioctl cmd 1074025678 [ 73.981874][ T8335] pimreg: group set to 0 [ 74.042458][ T29] audit: type=1326 audit(74.013:2946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8342 comm="syz.6.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6cbf3f749 code=0x7ffc0000 [ 74.065856][ T29] audit: type=1326 audit(74.013:2947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8342 comm="syz.6.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7fb6cbf3f749 code=0x7ffc0000 [ 74.323598][ T8390] syz.2.2074 (8390) used greatest stack depth: 8848 bytes left [ 74.348647][ T8393] xt_CT: You must specify a L4 protocol and not use inversions on it [ 74.420888][ T8404] loop1: detected capacity change from 0 to 128 [ 74.494822][ T8411] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 74.604045][ T8422] loop2: detected capacity change from 0 to 512 [ 74.613031][ T8422] EXT4-fs: Ignoring removed bh option [ 74.618968][ T8422] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 74.636563][ T8422] EXT4-fs (loop2): 1 truncate cleaned up [ 74.643283][ T8422] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.656374][ T8423] loop1: detected capacity change from 0 to 1024 [ 74.688103][ T7765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.814018][ T8431] loop2: detected capacity change from 0 to 8192 [ 74.927448][ T8442] tipc: Started in network mode [ 74.932388][ T8442] tipc: Node identity ac141413, cluster identity 4711 [ 74.956688][ T8444] loop1: detected capacity change from 0 to 764 [ 74.968495][ T8442] tipc: Enabling of bearer rejected, failed to enable media [ 75.019670][ T8444] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 75.030319][ T8444] Symlink component flag not implemented [ 75.036231][ T8444] Symlink component flag not implemented (7) [ 75.090639][ T8458] program syz.1.2105 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.141326][ T8465] loop1: detected capacity change from 0 to 128 [ 75.147918][ T8465] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 75.161737][ T8465] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 75.368548][ T8485] __nla_validate_parse: 7 callbacks suppressed [ 75.368563][ T8485] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2117'. [ 75.409454][ T8485] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2117'. [ 75.632639][ T8507] netlink: 348 bytes leftover after parsing attributes in process `syz.1.2127'. [ 75.935435][ T8534] loop6: detected capacity change from 0 to 2048 [ 75.997313][ T8538] loop1: detected capacity change from 0 to 512 [ 76.006935][ T8534] EXT4-fs: Ignoring removed mblk_io_submit option [ 76.013420][ T8534] EXT4-fs: Ignoring removed i_version option [ 76.020797][ T8540] program syz.0.2141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.030708][ T8538] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 76.050532][ T8538] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 76.063380][ T8534] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.080290][ T8538] System zones: 1-12 [ 76.091378][ T8538] EXT4-fs (loop1): 1 truncate cleaned up [ 76.118805][ T8538] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.135747][ T4647] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.186683][ T8553] netlink: 'syz.0.2146': attribute type 3 has an invalid length. [ 76.195102][ T8553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2146'. [ 76.280116][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.468146][ T8589] loop2: detected capacity change from 0 to 512 [ 76.509811][ T8589] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.544199][ T8599] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2167'. [ 76.553219][ T8599] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2167'. [ 76.595845][ T8608] loop1: detected capacity change from 0 to 512 [ 76.608209][ T8589] EXT4-fs (loop2): shut down requested (0) [ 76.614337][ T8608] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 76.625950][ T8589] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 76.634928][ T8589] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 76.643909][ T8589] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=13 [ 76.652834][ T8589] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 76.671589][ T8589] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 76.680597][ T8589] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=13 [ 76.729996][ T7765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.902287][ T8647] tap0: tun_chr_ioctl cmd 1074025677 [ 76.908199][ T8647] tap0: linktype set to 774 [ 76.973387][ T8660] program syz.2.2195 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 77.091217][ T8678] program syz.5.2204 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 77.153045][ T8687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2218'. [ 77.164556][ T8689] program syz.1.2208 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 77.203979][ T8694] loop1: detected capacity change from 0 to 1024 [ 77.219399][ T8694] EXT4-fs: Ignoring removed orlov option [ 77.235362][ T8694] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 77.250231][ T8694] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.267144][ T8694] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.282882][ T8710] program syz.2.2217 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 77.376992][ T8724] loop5: detected capacity change from 0 to 512 [ 77.507747][ T8744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2229'. [ 77.526772][ T8744] netlink: 312 bytes leftover after parsing attributes in process `syz.0.2229'. [ 77.535910][ T8744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2229'. [ 77.587037][ T8756] program syz.2.2234 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 77.629766][ T8762] veth1_to_batadv: entered promiscuous mode [ 77.692566][ T8766] loop2: detected capacity change from 0 to 512 [ 77.721349][ T8774] random: crng reseeded on system resumption [ 77.749019][ T8766] EXT4-fs (loop2): too many log groups per flexible block group [ 77.756822][ T8766] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 77.764912][ T8766] EXT4-fs (loop2): mount failed [ 77.790192][ T8782] program syz.1.2249 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 78.100512][ T8835] loop6: detected capacity change from 0 to 1024 [ 78.120240][ T8835] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.142745][ T4647] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.447649][ T8899] netlink: 'syz.0.2301': attribute type 1 has an invalid length. [ 78.530815][ T8918] bridge_slave_0: default FDB implementation only supports local addresses [ 78.568652][ T8924] loop5: detected capacity change from 0 to 512 [ 78.644987][ T8943] loop5: detected capacity change from 0 to 512 [ 78.651635][ T8943] EXT4-fs: Ignoring removed nomblk_io_submit option [ 78.659497][ T8943] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 78.667411][ T8943] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 78.675721][ T8943] EXT4-fs (loop5): write access unavailable, skipping orphan cleanup [ 78.684337][ T8943] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 78.699383][ T8943] EXT4-fs: Ignoring removed nomblk_io_submit option [ 78.716449][ T4178] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.797403][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 78.797415][ T29] audit: type=1326 audit(78.773:3024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8954 comm="syz.2.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227a6df749 code=0x7ffc0000 [ 78.827049][ T29] audit: type=1326 audit(78.773:3025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8954 comm="syz.2.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f227a6df749 code=0x7ffc0000 [ 78.850593][ T29] audit: type=1326 audit(78.773:3026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8954 comm="syz.2.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227a6df749 code=0x7ffc0000 [ 78.873393][ T29] audit: type=1326 audit(78.773:3027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8954 comm="syz.2.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227a6df749 code=0x7ffc0000 [ 78.896852][ T29] audit: type=1326 audit(78.773:3028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8954 comm="syz.2.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f227a6df749 code=0x7ffc0000 [ 78.920251][ T29] audit: type=1326 audit(78.773:3029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8954 comm="syz.2.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227a6df749 code=0x7ffc0000 [ 78.942941][ T29] audit: type=1326 audit(78.773:3030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8954 comm="syz.2.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227a6df749 code=0x7ffc0000 [ 78.966274][ T8965] netdevsim netdevsim1: Direct firmware load for ..€ failed with error -2 [ 78.974839][ T29] audit: type=1326 audit(78.773:3031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8954 comm="syz.2.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f227a6df749 code=0x7ffc0000 [ 78.998186][ T29] audit: type=1326 audit(78.773:3032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8954 comm="syz.2.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227a6df749 code=0x7ffc0000 [ 79.021481][ T29] audit: type=1326 audit(78.773:3033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8954 comm="syz.2.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227a6df749 code=0x7ffc0000 [ 79.211676][ T8974] loop1: detected capacity change from 0 to 32768 [ 79.536404][ T8993] loop1: detected capacity change from 0 to 32768 [ 79.582994][ T9009] bond1: invalid ARP target 0.0.0.0 specified for addition [ 79.590309][ T9009] bond1: option arp_ip_target: invalid value (0) [ 79.629379][ T9003] loop6: detected capacity change from 0 to 32768 [ 79.637222][ T9009] bond1 (unregistering): Released all slaves [ 79.755083][ T9025] netlink: 'syz.1.2361': attribute type 4 has an invalid length. [ 79.791880][ T9028] loop6: detected capacity change from 0 to 4096 [ 79.811046][ T9028] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.826138][ T9028] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #15: comm syz.6.2362: corrupted inode contents [ 79.839646][ T9028] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #15: comm syz.6.2362: mark_inode_dirty error [ 79.851927][ T9028] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #15: comm syz.6.2362: corrupted inode contents [ 79.869750][ T9028] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #15: comm syz.6.2362: mark_inode_dirty error [ 79.881585][ T9028] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #15: comm syz.6.2362: corrupted inode contents [ 79.893719][ T9028] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #15: comm syz.6.2362: mark_inode_dirty error [ 79.907267][ T9028] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #15: comm syz.6.2362: corrupted inode contents [ 79.919381][ T9028] EXT4-fs error (device loop6): ext4_truncate:4637: inode #15: comm syz.6.2362: mark_inode_dirty error [ 79.931465][ T9028] EXT4-fs error (device loop6) in ext4_setattr:6050: Corrupt filesystem [ 79.940085][ T9037] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #15: comm syz.6.2362: corrupted inode contents [ 79.957286][ T9037] EXT4-fs warning (device loop6): swap_inode_boot_loader:480: couldn't mark inode #15 dirty (err -117) [ 79.988177][ T9045] loop1: detected capacity change from 0 to 764 [ 80.000649][ T4647] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.011757][ T9045] Symlink component flag not implemented [ 80.025984][ T9045] Symlink component flag not implemented (116) [ 80.328927][ T9104] program syz.0.2394 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.361601][ T9112] loop0: detected capacity change from 0 to 1024 [ 80.381278][ T9112] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.438160][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.479855][ T9128] __nla_validate_parse: 5 callbacks suppressed [ 80.479914][ T9128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2404'. [ 80.538046][ T9131] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2406'. [ 80.555554][ T9137] loop5: detected capacity change from 0 to 1024 [ 80.555858][ T9137] EXT4-fs: Ignoring removed i_version option [ 80.671069][ T9147] loop1: detected capacity change from 0 to 256 [ 80.689429][ T9149] loop5: detected capacity change from 0 to 1024 [ 80.825926][ T9157] loop1: detected capacity change from 0 to 2048 [ 80.993366][ T9170] loop5: detected capacity change from 0 to 256 [ 81.062778][ T9175] loop5: detected capacity change from 0 to 512 [ 81.073855][ T9181] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2430'. [ 81.073874][ T9181] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2430'. [ 81.074258][ T9181] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2430'. [ 81.074315][ T9181] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2430'. [ 81.079093][ T8972] Bluetooth: hci0: command 0x1003 tx timeout [ 81.079125][ T3925] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 81.170688][ T9189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2434'. [ 81.308760][ T9217] loop1: detected capacity change from 0 to 512 [ 81.320980][ T9217] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.337874][ T9217] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #18: comm syz.1.2447: corrupted inode contents [ 81.350037][ T9217] EXT4-fs (loop1): Remounting filesystem read-only [ 81.356580][ T9217] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -30) [ 81.402075][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.500004][ T9237] IPv6: Can't replace route, no match found [ 81.525230][ T9239] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2457'. [ 81.694955][ T9262] loop2: detected capacity change from 0 to 512 [ 81.702378][ T9262] EXT4-fs: Ignoring removed oldalloc option [ 81.722479][ T9262] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.748684][ T9258] loop0: detected capacity change from 0 to 8192 [ 81.756589][ T9262] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2469: bg 0: block 217: padding at end of block bitmap is not set [ 81.790963][ T9262] EXT4-fs (loop2): Remounting filesystem read-only [ 81.813627][ T7765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.830616][ T9280] loop0: detected capacity change from 0 to 164 [ 81.905304][ T9294] program syz.1.2481 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 81.995591][ T9292] loop2: detected capacity change from 0 to 32768 [ 82.016192][ T9308] loop1: detected capacity change from 0 to 512 [ 82.023111][ T9308] EXT4-fs: Ignoring removed bh option [ 82.046894][ T9312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2491'. [ 82.073648][ T9308] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.2488: corrupted in-inode xattr: invalid ea_ino [ 82.090216][ T9308] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.2488: couldn't read orphan inode 15 (err -117) [ 82.103301][ T9308] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.120652][ T9318] loop2: detected capacity change from 0 to 1024 [ 82.129203][ T9318] EXT4-fs: Ignoring removed bh option [ 82.134659][ T9318] EXT4-fs: inline encryption not supported [ 82.142063][ T9321] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2493'. [ 82.152343][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.159461][ T9318] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 82.176898][ T9318] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 82.211201][ T9318] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.2490: lblock 2 mapped to illegal pblock 2 (length 1) [ 82.242850][ T9318] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.2490: lblock 0 mapped to illegal pblock 48 (length 1) [ 82.271761][ T9318] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.2490: Failed to acquire dquot type 0 [ 82.284625][ T9318] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 82.307821][ T9318] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.2490: mark_inode_dirty error [ 82.322713][ T9318] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 82.335718][ T9343] loop5: detected capacity change from 0 to 512 [ 82.342086][ T9318] EXT4-fs (loop2): 1 orphan inode deleted [ 82.348851][ T9318] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.351480][ T9333] loop1: detected capacity change from 0 to 32768 [ 82.367795][ T5005] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:24: lblock 1 mapped to illegal pblock 1 (length 1) [ 82.382667][ T5005] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:24: Failed to release dquot type 0 [ 82.398988][ T9318] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 82.417114][ T7765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.543019][ T9369] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.2516' sets config #1 [ 82.575224][ T9376] loop2: detected capacity change from 0 to 512 [ 82.589527][ T9376] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 82.619489][ T9376] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 82.659333][ T9376] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2518: bg 0: block 248: padding at end of block bitmap is not set [ 82.683477][ T9386] loop6: detected capacity change from 0 to 1024 [ 82.690159][ T9386] EXT4-fs: Ignoring removed nomblk_io_submit option [ 82.694783][ T9376] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.2518: Failed to acquire dquot type 1 [ 82.712653][ T9376] EXT4-fs (loop2): 1 truncate cleaned up [ 82.725203][ T9386] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.738056][ T9378] loop1: detected capacity change from 0 to 32768 [ 82.742341][ T9376] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 82.771579][ T7765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 82.787737][ T4647] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.817237][ T9397] loop2: detected capacity change from 0 to 512 [ 82.840820][ T9397] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 82.848962][ T9397] EXT4-fs (loop2): orphan cleanup on readonly fs [ 82.855603][ T9397] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 82.872290][ T9397] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 82.880536][ T9397] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #13: comm syz.2.2525: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 82.899315][ T9397] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.2525: couldn't read orphan inode 13 (err -117) [ 82.915332][ T9403] netlink: 'syz.1.2528': attribute type 39 has an invalid length. [ 82.923910][ T9397] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 82.939095][ T9397] EXT4-fs (loop2): shut down requested (2) [ 82.955490][ T7765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.981668][ T9408] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 83.056531][ T9417] loop1: detected capacity change from 0 to 1024 [ 83.071932][ T9417] EXT4-fs: Ignoring removed bh option [ 83.078636][ T9420] loop2: detected capacity change from 0 to 1024 [ 83.089828][ T9417] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.103055][ T9420] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 83.122900][ T9417] EXT4-fs error (device loop1): ext4_lookup:1779: inode #2: comm syz.1.2536: bad inode number: 12 [ 83.135044][ T9420] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: comm syz.2.2538: lblock 0 mapped to illegal pblock 0 (length 1) [ 83.149303][ T9417] EXT4-fs (loop1): Remounting filesystem read-only [ 83.155913][ T9420] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 83.168350][ T9420] EXT4-fs (loop2): This should not happen!! Data will be lost [ 83.168350][ T9420] [ 83.207367][ T7765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 83.218093][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.250669][ T9441] erspan0: entered promiscuous mode [ 83.333049][ T9456] loop5: detected capacity change from 0 to 128 [ 83.407630][ T9466] SELinux: failed to load policy [ 83.460783][ T9476] 9pnet: Could not find request transport: r [ 83.748046][ T9533] loop2: detected capacity change from 0 to 1024 [ 83.765892][ T9533] EXT4-fs: Ignoring removed orlov option [ 83.795447][ T9533] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.820912][ T9513] loop1: detected capacity change from 0 to 32768 [ 83.821216][ T9533] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.064871][ T9559] netlink: 'syz.2.2600': attribute type 1 has an invalid length. [ 84.081800][ T9561] netlink: 'syz.6.2601': attribute type 1 has an invalid length. [ 84.093386][ T9563] netlink: 'syz.1.2602': attribute type 14 has an invalid length. [ 84.219961][ T9578] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 84.220399][ T9579] loop0: detected capacity change from 0 to 732 [ 84.234894][ T9579] iso9660: Unknown parameter ' ' [ 84.326158][ T9582] loop6: detected capacity change from 0 to 512 [ 84.377015][ T29] kauditd_printk_skb: 155 callbacks suppressed [ 84.377037][ T29] audit: type=1400 audit(92.350:3184): avc: denied { watch } for pid=9595 comm="syz.0.2619" path="/565/file1" dev="tmpfs" ino=2903 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 84.541358][ T29] audit: type=1326 audit(92.480:3185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9605 comm="syz.2.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227a6df749 code=0x7ffc0000 [ 84.564972][ T29] audit: type=1326 audit(92.480:3186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9605 comm="syz.2.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f227a6df749 code=0x7ffc0000 [ 84.587644][ T29] audit: type=1326 audit(92.480:3187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9605 comm="syz.2.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227a6df749 code=0x7ffc0000 [ 84.640793][ T9615] loop6: detected capacity change from 0 to 512 [ 84.647291][ T9615] EXT4-fs: Ignoring removed bh option [ 84.662484][ T9618] loop2: detected capacity change from 0 to 512 [ 84.663205][ T9621] program syz.0.2629 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 84.694403][ T9615] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.707250][ T9618] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.2627: iget: bad i_size value: 38620345925642 [ 84.720971][ T9618] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.2627: couldn't read orphan inode 15 (err -117) [ 84.734871][ T9618] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.754407][ T4647] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.777851][ T7895] IPVS: starting estimator thread 0... [ 84.783646][ T9632] loop0: detected capacity change from 0 to 1024 [ 84.806861][ T9639] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.2627: bg 0: block 5: invalid block bitmap [ 84.820742][ T9639] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1540 with error 28 [ 84.820765][ T9639] EXT4-fs (loop2): This should not happen!! Data will be lost [ 84.820765][ T9639] [ 84.820783][ T9639] EXT4-fs (loop2): Total free blocks count 0 [ 84.820862][ T9639] EXT4-fs (loop2): Free/Dirty block details [ 84.820872][ T9639] EXT4-fs (loop2): free_blocks=0 [ 84.820882][ T9639] EXT4-fs (loop2): dirty_blocks=1595 [ 84.820894][ T9639] EXT4-fs (loop2): Block reservation details [ 84.820905][ T9639] EXT4-fs (loop2): i_reserved_data_blocks=1595 [ 84.823842][ T9640] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9640 comm=syz.6.2634 [ 84.839472][ T29] audit: type=1400 audit(92.800:3188): avc: denied { nlmsg_read } for pid=9638 comm="syz.6.2634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 84.849169][ T9632] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.850682][ T29] audit: type=1400 audit(92.830:3189): avc: denied { audit_write } for pid=9638 comm="syz.6.2634" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 84.910842][ T9635] IPVS: using max 2784 ests per chain, 139200 per kthread [ 84.923513][ T29] audit: type=1400 audit(92.840:3190): avc: denied { read } for pid=9631 comm="syz.0.2633" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 84.945512][ T5005] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 1540 with max blocks 52 with error 28 [ 85.012646][ T9647] loop6: detected capacity change from 0 to 512 [ 85.034473][ T9653] smc: net device bond0 applied user defined pnetid SYZ0 [ 85.042354][ T9653] smc: net device bond0 erased user defined pnetid SYZ0 [ 85.043418][ T9655] loop5: detected capacity change from 0 to 512 [ 85.056954][ T9655] EXT4-fs: Ignoring removed bh option [ 85.066220][ T9647] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.094555][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.112847][ T9647] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 85.122449][ T9647] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 85.130200][ T9647] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 85.172060][ T9671] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 85.182843][ T4647] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.229298][ T9682] sg_write: data in/out 156/1 bytes for SCSI command 0x0-- guessing data in; [ 85.229298][ T9682] program syz.1.2654 not setting count and/or reply_len properly [ 85.249475][ T9684] loop5: detected capacity change from 0 to 128 [ 85.309149][ T9694] loop2: detected capacity change from 0 to 512 [ 85.315786][ T9694] EXT4-fs: Ignoring removed oldalloc option [ 85.325638][ T9694] EXT4-fs: Mount option(s) incompatible with ext2 [ 85.359696][ T29] audit: type=1326 audit(93.330:3191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9699 comm="syz.1.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd00a7ff749 code=0x7ffc0000 [ 85.382616][ T29] audit: type=1326 audit(93.330:3192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9699 comm="syz.1.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd00a7ff749 code=0x7ffc0000 [ 85.519748][ T29] audit: type=1326 audit(93.390:3193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9699 comm="syz.1.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd00a7ff749 code=0x7ffc0000 [ 85.554591][ T9714] loop1: detected capacity change from 0 to 2048 [ 85.616546][ T9688] loop0: detected capacity change from 0 to 32768 [ 85.652027][ T9714] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.709260][ T5005] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 85.730742][ T5005] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 85.743620][ T5005] EXT4-fs (loop1): This should not happen!! Data will be lost [ 85.743620][ T5005] [ 85.753430][ T5005] EXT4-fs (loop1): Total free blocks count 0 [ 85.759435][ T5005] EXT4-fs (loop1): Free/Dirty block details [ 85.765324][ T5005] EXT4-fs (loop1): free_blocks=66060288 [ 85.771639][ T5005] EXT4-fs (loop1): dirty_blocks=0 [ 85.776681][ T5005] EXT4-fs (loop1): Block reservation details [ 85.782730][ T5005] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 85.802556][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.886214][ T9745] __nla_validate_parse: 10 callbacks suppressed [ 85.886230][ T9745] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2682'. [ 85.969968][ T9751] sctp: [Deprecated]: syz.2.2685 (pid 9751) Use of struct sctp_assoc_value in delayed_ack socket option. [ 85.969968][ T9751] Use struct sctp_sack_info instead [ 86.152052][ T9748] loop6: detected capacity change from 0 to 32768 [ 86.162769][ T9781] loop5: detected capacity change from 0 to 256 [ 86.183929][ T9783] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2700'. [ 86.196356][ T9786] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2702'. [ 86.233707][ T9790] loop0: detected capacity change from 0 to 1024 [ 86.251864][ T9790] EXT4-fs: Ignoring removed orlov option [ 86.265484][ T9790] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.280570][ T9790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.318208][ T9806] netlink: 'syz.2.2710': attribute type 5 has an invalid length. [ 86.342190][ T9808] netlink: 'syz.1.2712': attribute type 21 has an invalid length. [ 86.350318][ T9808] netlink: 'syz.1.2712': attribute type 1 has an invalid length. [ 86.358042][ T9808] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2712'. [ 86.410632][ T9818] loop5: detected capacity change from 0 to 764 [ 86.422302][ T9818] Symlink component flag not implemented [ 86.427956][ T9818] Symlink component flag not implemented [ 86.434683][ T9818] Symlink component flag not implemented (129) [ 86.440948][ T9818] Symlink component flag not implemented (6) [ 86.461787][ T9818] rock: directory entry would overflow storage [ 86.467985][ T9818] rock: sig=0x4f50, size=4, remaining=3 [ 86.473605][ T9818] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 86.542024][ T9833] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2724'. [ 86.560238][ T9838] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2727'. [ 86.569222][ T9838] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2727'. [ 86.588006][ T9816] loop0: detected capacity change from 0 to 32768 [ 86.627621][ T9847] loop5: detected capacity change from 0 to 512 [ 86.866307][ T9885] loop6: detected capacity change from 0 to 512 [ 86.874603][ T9885] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 86.891563][ T9885] EXT4-fs (loop6): orphan cleanup on readonly fs [ 86.900365][ T9885] EXT4-fs warning (device loop6): ext4_enable_quotas:7180: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 86.918525][ T9885] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 86.928682][ T9885] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #13: comm syz.6.2749: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 86.948393][ T9885] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.2749: couldn't read orphan inode 13 (err -117) [ 86.961967][ T9885] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 86.979262][ T9885] EXT4-fs (loop6): shut down requested (2) [ 87.024402][ T4647] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.297229][ T9933] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2771'. [ 87.333092][ T9935] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 87.494128][ T9958] loop5: detected capacity change from 0 to 8192 [ 87.541463][ T9965] loop6: detected capacity change from 0 to 512 [ 87.549034][ T9958] loop5: p2 p3 p4 [ 87.552836][ T9958] loop5: p2 start 164919041 is beyond EOD, truncated [ 87.559582][ T9958] loop5: p3 start 327679 is beyond EOD, truncated [ 87.565990][ T9958] loop5: p4 size 37048832 extends beyond EOD, truncated [ 87.580443][ T9965] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.2786: Failed to acquire dquot type 1 [ 87.592748][ T9965] EXT4-fs (loop6): 1 truncate cleaned up [ 87.598759][ T9965] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.759016][ T9989] usb usb8: usbfs: process 9989 (syz.5.2796) did not claim interface 0 before use [ 87.791991][T10001] loop5: detected capacity change from 0 to 164 [ 87.814994][T10005] loop0: detected capacity change from 0 to 512 [ 87.825678][T10005] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 87.845384][T10011] tap0: tun_chr_ioctl cmd 1074025677 [ 87.847477][T10009] loop5: detected capacity change from 0 to 512 [ 87.851348][T10011] tap0: linktype set to 773 [ 87.862696][T10005] EXT4-fs (loop0): orphan cleanup on readonly fs [ 87.869599][T10005] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.2804: iget: bad i_size value: 360287970189639680 [ 87.883070][T10005] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.2804: couldn't read orphan inode 15 (err -117) [ 87.895505][T10014] loop6: detected capacity change from 0 to 1024 [ 87.913793][T10014] EXT4-fs: inline encryption not supported [ 87.919714][T10014] EXT4-fs: Ignoring removed i_version option [ 87.934510][T10018] 9pnet: Could not find request transport: r [ 88.034176][T10038] loop2: detected capacity change from 0 to 512 [ 88.042059][T10038] EXT4-fs: Ignoring removed nobh option [ 88.070197][T10038] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #3: comm syz.2.2818: corrupted inode contents [ 88.083122][T10038] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #3: comm syz.2.2818: mark_inode_dirty error [ 88.094754][T10038] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #3: comm syz.2.2818: corrupted inode contents [ 88.106748][T10038] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.2818: mark_inode_dirty error [ 88.118434][T10038] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.2818: Failed to acquire dquot type 0 [ 88.131165][T10038] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.2818: corrupted inode contents [ 88.146102][T10038] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #16: comm syz.2.2818: mark_inode_dirty error [ 88.167676][T10038] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.2818: corrupted inode contents [ 88.181785][T10038] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.2818: mark_inode_dirty error [ 88.196469][T10038] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.2818: corrupted inode contents [ 88.215421][T10038] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 88.228797][T10038] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.2818: corrupted inode contents [ 88.245432][T10038] EXT4-fs error (device loop2): ext4_truncate:4637: inode #16: comm syz.2.2818: mark_inode_dirty error [ 88.257106][T10038] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 88.266748][T10038] EXT4-fs (loop2): 1 truncate cleaned up [ 88.386604][T10074] serio: Serial port ptm0 [ 88.390254][T10075] netlink: 277 bytes leftover after parsing attributes in process `syz.5.2834'. [ 88.459706][T10083] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.473164][T10090] bond0: entered promiscuous mode [ 88.478221][T10090] bond_slave_0: entered promiscuous mode [ 88.484070][T10090] bond_slave_1: entered promiscuous mode [ 88.491127][T10090] batadv0: entered promiscuous mode [ 88.496674][T10090] 8021q: adding VLAN 0 to HW filter on device hsr2 [ 88.526010][T10083] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.568441][T10083] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.621244][T10079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.630038][T10079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.649721][T10083] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.707158][ T5005] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.726361][T10116] loop0: detected capacity change from 0 to 128 [ 88.727502][ T5005] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.745030][T10118] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2856'. [ 88.749411][ T5005] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.764063][ T5005] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.781586][T10120] loop5: detected capacity change from 0 to 128 [ 88.802228][T10124] loop5: detected capacity change from 0 to 7 [ 88.877002][ T5856] Bluetooth: hci0: Frame reassembly failed (-84) [ 89.085242][T10163] loop0: detected capacity change from 0 to 512 [ 89.348933][T10206] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 89.356745][T10206] vhci_hcd: invalid port number 96 [ 89.361883][T10206] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 89.449162][T10217] SELinux: failed to load policy [ 89.511452][ T29] kauditd_printk_skb: 134 callbacks suppressed [ 89.511465][ T29] audit: type=1326 audit(97.490:3324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10222 comm="syz.0.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ca84f749 code=0x7ffc0000 [ 89.575080][ T29] audit: type=1326 audit(97.490:3325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10222 comm="syz.0.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ca84f749 code=0x7ffc0000 [ 89.598052][ T29] audit: type=1326 audit(97.490:3326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10222 comm="syz.0.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f05ca84f749 code=0x7ffc0000 [ 89.620965][ T29] audit: type=1326 audit(97.490:3327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10222 comm="syz.0.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ca84f749 code=0x7ffc0000 [ 89.643872][ T29] audit: type=1326 audit(97.490:3328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10222 comm="syz.0.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ca84f749 code=0x7ffc0000 [ 89.885890][T10252] loop0: detected capacity change from 0 to 128 [ 89.892425][T10252] EXT4-fs: Ignoring removed nobh option [ 90.012370][T10265] loop2: detected capacity change from 0 to 2048 [ 90.032238][T10265] EXT4-fs: Ignoring removed mblk_io_submit option [ 90.079747][ T29] audit: type=1400 audit(98.060:3329): avc: denied { rename } for pid=10264 comm="syz.2.2926" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 90.101443][ T29] audit: type=1400 audit(98.060:3330): avc: denied { unlink } for pid=10264 comm="syz.2.2926" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 90.123188][T10265] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2926: bg 0: block 234: padding at end of block bitmap is not set [ 90.162210][T10265] EXT4-fs (loop2): Remounting filesystem read-only [ 90.319812][T10299] vhci_hcd: invalid port number 96 [ 90.324960][T10299] vhci_hcd: default hub control req: 1f00 vfffc i0060 l0 [ 90.332774][ T29] audit: type=1400 audit(98.300:3331): avc: denied { execute } for pid=10298 comm="syz.1.2941" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 90.388919][ T29] audit: type=1400 audit(98.360:3332): avc: denied { ioctl } for pid=10306 comm="syz.1.2945" path="socket:[27088]" dev="sockfs" ino=27088 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 90.643029][T10334] loop5: detected capacity change from 0 to 512 [ 90.788861][ T29] audit: type=1400 audit(98.760:3333): avc: denied { read } for pid=10356 comm="syz.0.2968" path="socket:[28087]" dev="sockfs" ino=28087 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 90.847335][T10360] loop5: detected capacity change from 0 to 764 [ 90.918611][ T3925] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 90.925197][ T8972] Bluetooth: hci0: command 0x1003 tx timeout [ 90.953352][T10371] Process accounting resumed [ 90.960574][T10374] loop6: detected capacity change from 0 to 512 [ 90.977132][T10378] __nla_validate_parse: 7 callbacks suppressed [ 90.977145][T10378] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2978'. [ 91.003868][T10380] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 91.012096][T10380] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 91.039260][T10374] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c01c, mo2=0002] [ 91.047284][T10374] System zones: 1-3, 19-19, 35-38 [ 91.126566][T10398] loop0: detected capacity change from 0 to 1024 [ 91.160345][T10398] EXT4-fs: Ignoring removed nomblk_io_submit option [ 91.188452][T10398] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 91.201339][T10398] System zones: 0-1, 3-36 [ 91.247561][T10409] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2992'. [ 91.256595][T10409] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2992'. [ 91.265587][T10409] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2992'. [ 91.275226][T10409] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2992'. [ 91.284274][T10409] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2992'. [ 91.461666][T10447] loop5: detected capacity change from 0 to 512 [ 91.479859][T10449] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3012'. [ 91.527484][T10457] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 91.721350][T10471] loop6: detected capacity change from 0 to 128 [ 91.728032][T10471] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 91.741115][T10471] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 92.095354][T10501] ================================================================== [ 92.103482][T10501] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 92.111030][T10501] [ 92.113344][T10501] read-write to 0xffff888237d25ee8 of 1 bytes by task 10502 on cpu 1: [ 92.121477][T10501] folio_add_lru+0xa5/0x1f0 [ 92.125968][T10501] folio_add_lru_vma+0x49/0x70 [ 92.130722][T10501] do_wp_page+0x1550/0x2510 [ 92.135221][T10501] handle_mm_fault+0x77d/0x2be0 [ 92.140080][T10501] do_user_addr_fault+0x3fe/0x1080 [ 92.145185][T10501] exc_page_fault+0x62/0xa0 [ 92.149689][T10501] asm_exc_page_fault+0x26/0x30 [ 92.154539][T10501] __put_user_4+0xd/0x20 [ 92.158778][T10501] schedule_tail+0x40/0xa0 [ 92.163283][T10501] ret_from_fork+0x24/0x1b0 [ 92.167784][T10501] ret_from_fork_asm+0x1a/0x30 [ 92.172549][T10501] [ 92.174865][T10501] read to 0xffff888237d25ee8 of 1 bytes by task 10501 on cpu 0: [ 92.182477][T10501] __lru_add_drain_all+0x17e/0x450 [ 92.187583][T10501] lru_cache_disable+0x1f/0x30 [ 92.192337][T10501] __se_sys_mbind+0x496/0xac0 [ 92.197019][T10501] __x64_sys_mbind+0x78/0x90 [ 92.201608][T10501] x64_sys_call+0x2936/0x3000 [ 92.206282][T10501] do_syscall_64+0xd2/0x200 [ 92.210785][T10501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.217194][T10501] [ 92.219601][T10501] value changed: 0x01 -> 0x00 [ 92.224265][T10501] [ 92.226575][T10501] Reported by Kernel Concurrency Sanitizer on: [ 92.232713][T10501] CPU: 0 UID: 0 PID: 10501 Comm: syz.5.3032 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 92.244079][T10501] Tainted: [W]=WARN [ 92.247873][T10501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 92.257921][T10501] ================================================================== [ 97.558633][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 97.558677][ T29] audit: type=1400 audit(105.540:3359): avc: denied { egress } for pid=14 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 97.587917][ T29] audit: type=1400 audit(105.540:3360): avc: denied { sendto } for pid=14 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1