last executing test programs: 4m57.864839222s ago: executing program 32 (id=1650): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x10) close(0x3) 4m55.388428751s ago: executing program 33 (id=1718): mkdir(&(0x7f0000000000)='my_debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_debugfs\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_debugfs/asoc/components\x00', 0x0, 0x0) read(r0, &(0x7f0000000500), 0x400) 4m40.141165079s ago: executing program 34 (id=2206): r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x60000726) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) 4m26.411342103s ago: executing program 1 (id=2674): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='!*:*', 0x4) 4m26.313976905s ago: executing program 1 (id=2666): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000000)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x787, &(0x7f0000001000)="$eJzs3ctrXNUfAPDvnSRNk/b3SwRB6yogaKB0YmpsFVxUXIhgoaBr22EyDTWTTMlMShMCtojgRlBxIeimax9159bHVv8LF9JSNS1WXEjkzqOdNjPppM3MBPL5wMmcc++dnPOdcx/nzr3MDWDPmkj/ZCIORcRHScRYfXoSEUPV3GDEidpyt9fX8mlKYmPjzT+S6jK31tfy0fSe1IF64cmI+PH9iMOZzfWWV1bnc8ViYalenqosnJ8qr6weObeQmyvMFRaPTc/MHD3+wvFjOxfrX7+sHrz+8WvPfnPin/eeuPrhT0mciIP1ec1x7JSJmKh/JkPpR3iPV3e6sj5L+t0AHkq6aQ7UtvI4FGMxUM21MdLLlgEA3fJuRGwAAHtM4vgPAHtM43uAW+tr+Ubq7zcSvXXjlYjYX4u/cX2zNmewfs1uf/U66Oit5J4rI0lEjO9A/RMR8cV3b3+Vpqj3g2tpQC9cuhwRZ8YnNu//k033LGzXc1vN3BiuvkzcN3mvHX+gn75Pxz8vthr/Ze6Mf6LF+Ge4xbb7MB68/Weu7UA1baXjv5eb7m273RR/3fhAvfS/6phvKDl7rlhI923/j4jJGBpOy9PVRVuP3CZv/nuzXf3N478/P3nny7T+9PXuEplrg8P3vmc2V8k9atwNNy5HPDXYKv7kTv8nbca/pzqs4/WXPvi83bw0/jTeRtocf3dtXIl4pmX/3+3LZMv7E6eqq8NUY6Vo4dtfPxttV39z/6cprb9xLtALaf+Pbh3/eNJ8v2Z5+3X8fGXsh3bzHhx/6/V/X/JWNb+vPu1irlJZmo7Yl7yxefrRu+9tlBvLp/FPPt16+69V23r9T88Jz3QY/+D1379++Pi7K41/dlv9v/3M1dvzA+3q76z/Z6q5yfqUTvZ/nTbwUT47AAAAAAAAAAAAAAAAAAAAAAAAAOhUJiIORpLJ3slnMtls7Rnej8doplgqVw6fLS0vzkb1WdnjMZRp/NTlWNPvoU7Xfw+/UT56X/n5iHgsIj4dHqmWs/lScbbfwQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA3YE2z/9P/Tbc79YBAF2zv98NAAB6zvEfAPae7R3/R7rWDgCgd5z/A8De0/Hx/0x32wEA9I7zfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrs1MmTadr4e30tn5ZnL6wsz5cuHJktlOezC8v5bL60dD47VyrNFQvZfGmh7T+6VHsplkrnZ2Jx+eJUpVCuTJVXVk8vlJYXK6fPLeTmCqcLQz2LDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6V15Znc8Vi4UlmS0zI7ujGbsmMxi7ohkyXcs07yVG+reDAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjl/gsAAP//IIYqoQ==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 4m25.803101277s ago: executing program 1 (id=2683): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x44, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback=0xac1414aa}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008800}, 0x0) 4m25.675406041s ago: executing program 1 (id=2686): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 4m25.655282291s ago: executing program 1 (id=2687): openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x541b, 0x0) 4m24.707935083s ago: executing program 1 (id=2697): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)={0x18, r1, 0x1, 0x4070bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80d0}, 0x4800) 4m24.652927635s ago: executing program 35 (id=2697): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)={0x18, r1, 0x1, 0x4070bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80d0}, 0x4800) 4m9.12035109s ago: executing program 8 (id=3302): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x18b341, 0x84) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) setxattr$incfs_metadata(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) 4m8.539056754s ago: executing program 8 (id=3319): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0xffe0}], 0x1, &(0x7f0000000140)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}], 0x58, 0x4855}, 0x24000052) 4m8.175123573s ago: executing program 8 (id=3336): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 4m8.120713614s ago: executing program 8 (id=3339): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a0001803a641d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 4m8.024946486s ago: executing program 8 (id=3342): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 4m7.944269628s ago: executing program 8 (id=3344): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c00048038000180080001006e6174002c00028008000540000000000800014000000000080006400000000d08000240ffff000a080006"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) 3m52.652273708s ago: executing program 36 (id=3344): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c00048038000180080001006e6174002c00028008000540000000000800014000000000080006400000000d08000240ffff000a080006"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) 3m12.798038938s ago: executing program 5 (id=4887): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setresuid(0xee00, 0xee00, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) 3m12.551216703s ago: executing program 5 (id=4889): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100000001}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x64}, 0x1, 0x0, 0x0, 0xb0}, 0x20008894) 3m12.522992734s ago: executing program 5 (id=4890): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, 0x0, 0x0, 0x0, 0x3d}, 0x4044890) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a118001500060014ea000000120800030043000040a8002b000a", 0x35}], 0x1}, 0x20000880) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 3m12.27716613s ago: executing program 5 (id=4895): bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x5, 0x8, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x4}, 0x50) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0xf}, 0x10040, 0x0, 0x0, 0x9, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 3m12.27676235s ago: executing program 5 (id=4897): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x1224, 0xffffffff, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 3m12.198596932s ago: executing program 5 (id=4902): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)) 2m57.102618918s ago: executing program 37 (id=4902): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)) 2m23.210298206s ago: executing program 2 (id=5782): mlockall(0x3) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x9f4c7000) setuid(0xee00) mlock(&(0x7f0000ffb000/0x1000)=nil, 0xffffffffdf004fff) 2m20.880145831s ago: executing program 2 (id=5810): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) read$usbmon(r0, 0x0, 0x28) 2m20.797143353s ago: executing program 2 (id=5811): sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000004080)={0x0, 0x0, &(0x7f0000004040)={&(0x7f00000000c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 2m20.597600607s ago: executing program 2 (id=5816): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x1) 2m20.533998209s ago: executing program 2 (id=5818): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x4, r0, &(0x7f00000011c0), 0xfffffffffffffffe) 2m20.204011387s ago: executing program 2 (id=5819): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xff, 0x1, 0x0, 0x0, 0x0, 0x2, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x11afe0, 0x1224, 0x0, 0x5, 0x5, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000380)={[{@init_itable}, {@dioread_lock}, {@nogrpid}, {@abort}, {@jqfmt_vfsv0}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x7}}, {@bh}, {@data_err_ignore}]}, 0x1, 0x56f, &(0x7f0000003780)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) 2m20.040818971s ago: executing program 38 (id=5819): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xff, 0x1, 0x0, 0x0, 0x0, 0x2, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x11afe0, 0x1224, 0x0, 0x5, 0x5, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000380)={[{@init_itable}, {@dioread_lock}, {@nogrpid}, {@abort}, {@jqfmt_vfsv0}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x7}}, {@bh}, {@data_err_ignore}]}, 0x1, 0x56f, &(0x7f0000003780)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) 1m4.690805746s ago: executing program 6 (id=7630): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1c, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m4.471539941s ago: executing program 6 (id=7635): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb9b, &(0x7f0000002380)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) fallocate(r0, 0x10, 0xffff, 0x8001) lseek(r0, 0x0, 0x4) 1m4.236941557s ago: executing program 6 (id=7639): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r2, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000060000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) 1m3.919788365s ago: executing program 6 (id=7647): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000007c0)='./file0\x00', 0xa00000, &(0x7f0000000ec0)=ANY=[], 0x1, 0x1b2, &(0x7f0000000300)="$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") r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc040ff0b, &(0x7f0000000180)) 1m3.708821859s ago: executing program 6 (id=7653): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) 1m3.329133538s ago: executing program 6 (id=7663): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b000000ff000000324902007f00000001"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000)=0x7d8, &(0x7f0000000180)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pS \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, &(0x7f0000000200)=""/197, &(0x7f0000000380), &(0x7f0000000300), 0x2, r1}, 0x38) 1m3.191788242s ago: executing program 39 (id=7663): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b000000ff000000324902007f00000001"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000)=0x7d8, &(0x7f0000000180)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pS \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, &(0x7f0000000200)=""/197, &(0x7f0000000380), &(0x7f0000000300), 0x2, r1}, 0x38) 2.506389431s ago: executing program 9 (id=8870): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1567, @dev={0xfe, 0x80, '\x00', 0x13}, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) 2.414805383s ago: executing program 9 (id=8872): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a000000040000000400000004"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, 0x1}, 0xc) 2.277909987s ago: executing program 9 (id=8875): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xec}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.759689379s ago: executing program 0 (id=8885): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x4, @perf_config_ext={0x0, 0x16}, 0x1a1ed, 0x0, 0x11000, 0x1, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000080)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)={0x20, 0x12, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0xd, 0x2e, 0x0, 0x0, @str='\xd0@:-}-+)\x00'}]}, 0x20}], 0x1}, 0x0) 1.674591831s ago: executing program 0 (id=8888): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40004000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800800034000000002"], 0xb4}}, 0x20008044) 1.587656973s ago: executing program 9 (id=8900): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x87}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r1, 0x0, &(0x7f0000001780)=""/4096}, 0x20) 1.515175295s ago: executing program 9 (id=8894): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000, 0x6, &(0x7f0000ffb000/0x4000)=nil) 1.423399117s ago: executing program 0 (id=8898): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x74, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x2417, 0x26121}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x74}, 0x1, 0x0, 0x0, 0x20004000}, 0x14) 1.353391979s ago: executing program 3 (id=8902): setns(0xc9, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000240)=0x7, 0x4) sendto$inet(r0, 0x0, 0x0, 0x8810, &(0x7f0000000c40)={0x2, 0x4e20, @multicast1}, 0x10) 1.277079791s ago: executing program 0 (id=8905): io_uring_setup(0x5ba8, &(0x7f0000000280)={0x0, 0xfc9f, 0x40, 0x1, 0x2fc}) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000640)=""/201, 0xc9}], 0x1) close(0x3) 1.236220671s ago: executing program 3 (id=8906): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000001c0)={r1, @in6={{0xa, 0x4e20, 0x3, @empty, 0x8}}, 0x0, 0x8002}, 0x90) 1.153021653s ago: executing program 0 (id=8909): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @remote}, 0x4}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x3, @local, 0x94a}}, 0x0, 0x0, 0x4e, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) 1.148739123s ago: executing program 3 (id=8910): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_ublk_setup_io_uring(0x155b, &(0x7f0000000500)={0x0, 0xa355, 0x10000, 0x3, 0x136}, &(0x7f0000000100), &(0x7f0000000440), &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, 0x0, &(0x7f00000000c0)) 1.041997956s ago: executing program 0 (id=8912): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timer_create(0x0, 0x0, &(0x7f0000000300)) 981.258348ms ago: executing program 3 (id=8915): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x40, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x4, 0x4, 0x4}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1, r0}, 0xc) 935.663019ms ago: executing program 7 (id=8916): mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f00000002c0)="303132333a616263643a30106fc68237d3890426c12b0afabbfc81eb73a95e0cfa02394295d4383f35af5a52d706da8f706f", 0x32) 814.802321ms ago: executing program 7 (id=8918): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv6/conf/syz_tun/disable_ipv6\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)="e7", 0x1) 704.461024ms ago: executing program 7 (id=8919): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2}}, 0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 608.245736ms ago: executing program 7 (id=8920): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xac, 0x0, &(0x7f0000000180)="b461802305624431ed337301000000010000986919d5d5fe00c6fc6ef8eef9757a601bee936390009c5bbd000000003632b69f0eb2062818f298ed60abbc6f6322cbfac4000000000000008163063239d18657d8f6f274d1347d38650608e39d2f8e61c96bbe67808cf339089d46844de51517a756705ab535c084ee3da160dffccc6ecbc132908c2d4588aec206fc5ae73940dfd53875423d82d19a374aa73c2bfcc1a8ac5e2f2a70f201ae", 0x0, 0x404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4002}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 545.708938ms ago: executing program 7 (id=8921): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x279, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 544.468958ms ago: executing program 4 (id=8931): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x5, 0x0, 0xfffffffe, {0x0, 0xea60}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "cb00"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x5, 0x609f, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {}, 0x1, @can={{0x3, 0x1}, 0x1, 0x3, 0x0, 0x0, "6ee7ba2197db18bc"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x44801) 512.690199ms ago: executing program 3 (id=8922): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000006c0)={0x0, 0x3}, 0x8) 418.838681ms ago: executing program 4 (id=8923): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x40) write(r0, &(0x7f00000004c0)="aedfdaa5886d88b7834f2d16cc863974e2ccd2bbbb16129cd8062f61a6c643903120ac92ad2c5dbd047ecb61ffb89d18109db23876bc5b326c74cb1a5636d7d1e4ccc3a95e7adc258c015c4479a03be2d2118231", 0x54) 335.243152ms ago: executing program 7 (id=8924): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 332.175043ms ago: executing program 4 (id=8935): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f00000011c0)=[{{&(0x7f0000000300)={0x2, 0x4e22, @private=0xa010102}, 0x10, &(0x7f0000001080)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1}}, {{&(0x7f00000010c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000001180)="1b", 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10, &(0x7f0000000a00)=[{&(0x7f0000000240)="a3", 0x1}], 0x1}}], 0x3, 0x4000800) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={r1, 0x8}, 0x8) 227.541745ms ago: executing program 4 (id=8925): bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb000008000500"], 0xd0}}, 0x571f68543cec8180) 227.412165ms ago: executing program 3 (id=8926): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=@newlink={0x54, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18488}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @empty}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000c830}, 0x4080) 88.923799ms ago: executing program 4 (id=8927): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r1, 0x20, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8001}}, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, r0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 15.51907ms ago: executing program 4 (id=8928): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000440)={0x0, 0x2, 0x5, "420f79f00e"}, 0xd) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 0s ago: executing program 9 (id=8929): bpf$ITER_CREATE(0xb, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050002000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a30000000004c000000060a010400000000000000000500000008000b400000000024000480200001800d00010073796e70726f7879000000000c00028008000340000000050900010073797a30"], 0xc0}, 0x1, 0x0, 0x0, 0x20020014}, 0x0) kernel console output (not intermixed with test programs): invalid start cluster (i_pos 322, start 00008005) [ 272.007056][T21138] FAT-fs (loop9): Filesystem has been set read-only [ 272.016703][T21138] FAT-fs (loop9): error, invalid access to FAT (entry 0x00008005) [ 273.165483][T21179] netlink: 27 bytes leftover after parsing attributes in process `syz.9.7020'. [ 273.297200][T21191] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7027'. [ 273.382163][T21181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.402790][T21181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.548506][T21207] loop9: detected capacity change from 0 to 512 [ 274.141938][ T28] audit: type=1400 audit(2000000617.786:2517): avc: denied { listen } for pid=21231 comm="syz.9.7043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 274.217835][ T28] audit: type=1400 audit(2000000617.786:2518): avc: denied { ioctl } for pid=21231 comm="syz.9.7043" path="socket:[62419]" dev="sockfs" ino=62419 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 274.296572][T21242] loop6: detected capacity change from 0 to 512 [ 274.740871][T21263] loop6: detected capacity change from 0 to 1024 [ 274.812707][T21263] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.843791][ T28] audit: type=1400 audit(2000000618.486:2519): avc: denied { write } for pid=21261 comm="syz.6.7059" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 274.927695][ T7461] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.430851][ T28] audit: type=1400 audit(2000000619.076:2520): avc: denied { mounton } for pid=21305 comm="syz.9.7077" path="/dev/snd/seq" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 275.960539][ T28] audit: type=1326 audit(2000000619.606:2521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21329 comm="syz.9.7089" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa54676e0d9 code=0x7fc00000 [ 276.032357][ T28] audit: type=1326 audit(2000000619.606:2522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21329 comm="syz.9.7089" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7fa54676e0d9 code=0x7fc00000 [ 276.082019][ T28] audit: type=1326 audit(2000000619.606:2523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21329 comm="syz.9.7089" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa54676e0d9 code=0x7fc00000 [ 276.123604][ T28] audit: type=1326 audit(2000000619.606:2524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21329 comm="syz.9.7089" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa54676e0d9 code=0x7fc00000 [ 276.224867][ T28] audit: type=1326 audit(2000000619.606:2525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21329 comm="syz.9.7089" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa54676e0d9 code=0x7fc00000 [ 276.279077][ T28] audit: type=1326 audit(2000000619.606:2526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21329 comm="syz.9.7089" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa54676e0d9 code=0x7fc00000 [ 276.778932][T21369] loop3: detected capacity change from 0 to 512 [ 276.798567][T21371] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7105'. [ 276.826819][T21369] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.850764][T21369] ext4 filesystem being mounted at /442/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.983333][T15336] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.089230][T21386] loop6: detected capacity change from 0 to 512 [ 277.125084][T21386] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c198, mo2=0002] [ 277.133468][T21386] System zones: 1-12 [ 277.139610][T21386] EXT4-fs error (device loop6): ext4_iget_extra_inode:5180: inode #15: comm syz.6.7113: corrupted in-inode xattr: e_value size too large [ 277.162816][T21386] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 277.165935][T21386] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.7113: couldn't read orphan inode 15 (err -117) [ 277.175465][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 277.175508][ C1] EXT4-fs (loop6): initial error at time 2000000620: ext4_iget_extra_inode:5180: inode 15 [ 277.175557][ C1] EXT4-fs (loop6): last error at time 2000000620: ext4_iget_extra_inode:5180: inode 15 [ 277.222001][T21386] loop6: lost filesystem error report for type 5 error -117 [ 277.224604][T21386] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.338240][T21395] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21395 comm=syz.9.7116 [ 277.465462][ T7461] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.997895][T21470] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 279.051356][T21472] netlink: 172 bytes leftover after parsing attributes in process `syz.0.7151'. [ 279.087549][T21472] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7151'. [ 279.195123][T21479] loop0: detected capacity change from 0 to 512 [ 279.238890][T21479] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.259225][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 279.259241][ T28] audit: type=1400 audit(2000000622.906:2553): avc: denied { write } for pid=21478 comm="syz.0.7154" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 279.689256][T18104] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.287027][T21505] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 280.513006][T21509] size and base must be multiples of 4 kiB [ 280.538931][T21509] CPU: 1 UID: 0 PID: 21509 Comm: syz.0.7166 Not tainted syzkaller #0 PREEMPT(lazy) [ 280.539003][T21509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 280.539023][T21509] Call Trace: [ 280.539035][T21509] [ 280.539053][T21509] __dump_stack+0x1d/0x30 [ 280.539081][T21509] dump_stack_lvl+0x95/0xd0 [ 280.539123][T21509] dump_stack+0x15/0x1b [ 280.539148][T21509] mtrr_del+0xbf/0xd0 [ 280.539179][T21509] mtrr_ioctl+0xb62/0xfb0 [ 280.539225][T21509] ? __pfx_mtrr_ioctl+0x10/0x10 [ 280.539253][T21509] ? proc_reg_poll+0x191/0x1a0 [ 280.539344][T21509] proc_reg_unlocked_ioctl+0x123/0x1b0 [ 280.539376][T21509] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 280.539410][T21509] __se_sys_ioctl+0xce/0x140 [ 280.539446][T21509] __x64_sys_ioctl+0x43/0x50 [ 280.539469][T21509] x64_sys_call+0x1563/0x3020 [ 280.539579][T21509] do_syscall_64+0x136/0x3c0 [ 280.539616][T21509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.539643][T21509] RIP: 0033:0x7f8c06f6e0d9 [ 280.539669][T21509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.539699][T21509] RSP: 002b:00007f8c059c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 280.539726][T21509] RAX: ffffffffffffffda RBX: 00007f8c071f5fa0 RCX: 00007f8c06f6e0d9 [ 280.539745][T21509] RDX: 0000200000000040 RSI: 0000000040104d04 RDI: 0000000000000003 [ 280.539762][T21509] RBP: 00007f8c07005024 R08: 0000000000000000 R09: 0000000000000000 [ 280.539780][T21509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.539833][T21509] R13: 00007f8c071f6038 R14: 00007f8c071f5fa0 R15: 00007ffeaa558838 [ 280.539856][T21509] [ 281.153296][T21529] loop9: detected capacity change from 0 to 1024 [ 281.178784][T21529] EXT4-fs: Ignoring removed orlov option [ 281.245485][T21529] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.269563][T21535] loop6: detected capacity change from 0 to 2048 [ 281.342779][T21535] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.373940][ T28] audit: type=1400 audit(2000000625.016:2554): avc: denied { write } for pid=21528 comm="syz.9.7172" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 281.448951][T21535] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 281.474430][ T28] audit: type=1400 audit(2000000625.016:2555): avc: denied { write } for pid=21528 comm="syz.9.7172" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 281.534315][T21535] EXT4-fs (loop6): Remounting filesystem read-only [ 281.556630][ T28] audit: type=1400 audit(2000000625.066:2556): avc: denied { write } for pid=21534 comm="syz.6.7177" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 281.907250][T21560] loop9: detected capacity change from 0 to 128 [ 281.943068][T21560] ext4 filesystem being mounted at /694/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 282.108944][ T28] audit: type=1400 audit(2000000625.746:2557): avc: denied { write } for pid=21559 comm="syz.9.7185" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 282.617418][T21579] loop3: detected capacity change from 0 to 1024 [ 282.633568][T21579] EXT4-fs: Ignoring removed orlov option [ 282.642162][T21581] loop0: detected capacity change from 0 to 128 [ 282.677867][T21581] EXT4-fs: Ignoring removed nobh option [ 282.710876][ T28] audit: type=1400 audit(2000000626.356:2558): avc: denied { write } for pid=21578 comm="syz.3.7194" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 282.750601][ T28] audit: type=1400 audit(2000000626.356:2559): avc: denied { write } for pid=21578 comm="syz.3.7194" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 282.767768][T21581] ext4 filesystem being mounted at /277/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 282.806315][ T28] audit: type=1400 audit(2000000626.456:2560): avc: denied { write } for pid=21580 comm="syz.0.7195" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 282.845055][ T28] audit: type=1400 audit(2000000626.496:2561): avc: denied { write } for pid=21580 comm="syz.0.7195" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 282.913269][ T28] audit: type=1400 audit(2000000626.556:2562): avc: denied { write } for pid=21580 comm="syz.0.7195" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 283.040483][T21594] loop5: detected capacity change from 0 to 7 [ 283.217585][T21597] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 283.312023][ T23] team_slave_0: entered promiscuous mode [ 283.317806][ T23] team_slave_1: entered promiscuous mode [ 283.803059][T21595] Invalid logical block size (40709) [ 284.458970][T21645] loop0: detected capacity change from 0 to 128 [ 284.524825][T21645] ext4 filesystem being mounted at /287/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 284.658680][T21654] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 284.666372][T21654] syzkaller0: linktype set to 270 [ 284.806215][T21660] option changes via remount are deprecated (pid=21658 comm=syz.0.7227) [ 284.954240][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 284.954317][ T28] audit: type=1400 audit(2000000628.606:2566): avc: denied { connect } for pid=21670 comm="syz.6.7232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 285.001792][T21675] netlink: 72 bytes leftover after parsing attributes in process `syz.7.7234'. [ 285.034491][T21675] netlink: 32 bytes leftover after parsing attributes in process `syz.7.7234'. [ 285.154332][T21686] vxcan0: tx address claim with dlc 0 [ 286.102540][T21745] netlink: 104 bytes leftover after parsing attributes in process `syz.6.7263'. [ 286.687202][T21781] loop6: detected capacity change from 0 to 512 [ 286.728016][T21781] EXT4-fs: Ignoring removed orlov option [ 286.757671][T21781] EXT4-fs mount: 10 callbacks suppressed [ 286.757692][T21781] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 286.787283][ T28] audit: type=1400 audit(2000000630.436:2567): avc: denied { lock } for pid=21786 comm="syz.7.7283" path="socket:[64250]" dev="sockfs" ino=64250 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 286.884755][ T7461] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.309321][T21804] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1) [ 287.734602][T21829] sctp: [Deprecated]: syz.7.7301 (pid 21829) Use of int in max_burst socket option. [ 287.734602][T21829] Use struct sctp_assoc_value instead [ 287.814788][T21830] pimreg: entered allmulticast mode [ 287.841680][T21828] pimreg: left allmulticast mode [ 288.231165][T21859] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7315'. [ 288.476899][T21863] loop3: detected capacity change from 0 to 8192 [ 288.531039][T21882] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7325'. [ 288.581418][T21886] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=21886 comm=syz.7.7327 [ 288.768159][T21901] loop6: detected capacity change from 0 to 128 [ 288.850074][T21905] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7336'. [ 288.958494][T21914] SELinux: policydb table sizes (1,18) do not match mine (8,7) [ 288.983295][T21914] SELinux: failed to load policy [ 289.189495][ T28] audit: type=1400 audit(2000000632.836:2568): avc: denied { ioctl } for pid=21929 comm="syz.0.7348" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 289.703383][T21963] scsi_dev_info_list_add_str: bad dev info string 'endo€â*r' '' '' [ 289.925830][T21972] netlink: 116 bytes leftover after parsing attributes in process `syz.6.7363'. [ 290.066034][T21986] netlink: 'syz.7.7368': attribute type 3 has an invalid length. [ 290.079181][T21990] loop6: detected capacity change from 0 to 128 [ 290.086961][ T28] audit: type=1400 audit(2000000633.736:2569): avc: denied { write } for pid=21961 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.164678][T21990] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 290.191141][ T28] audit: type=1400 audit(2000000633.836:2570): avc: denied { write } for pid=21998 comm="syz.0.7374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 290.215921][T21990] ext4 filesystem being mounted at /1185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.337903][ T28] audit: type=1400 audit(2000000633.976:2571): avc: denied { write } for pid=22006 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.404797][ T28] audit: type=1400 audit(2000000633.986:2572): avc: denied { write } for pid=21989 comm="syz.6.7370" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 290.459925][T22013] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7378'. [ 290.492746][T22013] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7378'. [ 290.697390][ T7461] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 290.767186][ T28] audit: type=1400 audit(2000000634.406:2573): avc: denied { write } for pid=22011 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.865626][T22040] loop3: detected capacity change from 0 to 512 [ 290.894338][T22040] EXT4-fs: Ignoring removed nobh option [ 290.923889][ T28] audit: type=1400 audit(2000000634.566:2574): avc: denied { write } for pid=22043 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.973606][T22040] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 291.028037][T22040] EXT4-fs (loop3): 1 truncate cleaned up [ 291.043874][T22040] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.095762][T22057] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7392'. [ 291.104420][ T28] audit: type=1400 audit(2000000634.756:2575): avc: denied { write } for pid=22038 comm="syz.3.7387" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 291.129490][ T28] audit: type=1400 audit(2000000634.756:2576): avc: denied { write } for pid=22038 comm="syz.3.7387" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 291.153839][ T28] audit: type=1400 audit(2000000634.756:2577): avc: denied { write } for pid=22038 comm="syz.3.7387" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 291.176686][ T28] audit: type=1400 audit(2000000634.756:2578): avc: denied { rename } for pid=22038 comm="syz.3.7387" name="file3" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 291.238642][T15336] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.125433][T22132] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7415'. [ 292.559673][T22173] autofs4:pid:22173:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(8.0), cmd(0xc018937b) [ 292.596930][T22173] autofs4:pid:22173:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937b) [ 292.625027][T22178] loop9: detected capacity change from 0 to 256 [ 292.821024][T22189] loop9: detected capacity change from 0 to 1024 [ 292.846930][T22189] EXT4-fs: Ignoring removed bh option [ 292.894469][T22189] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.998820][T12685] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.240358][T22226] loop6: detected capacity change from 0 to 512 [ 293.260043][T22226] EXT4-fs: inline encryption not supported [ 293.281113][T22226] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 293.303522][T22226] EXT4-fs (loop6): 1 truncate cleaned up [ 293.353298][T22226] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.386870][T22238] loop9: detected capacity change from 0 to 128 [ 293.453337][T22238] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 293.501852][T22238] ext4 filesystem being mounted at /738/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 293.564261][T12685] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 293.660651][T22256] loop9: detected capacity change from 0 to 512 [ 293.694931][T22256] FAT-fs (loop9): data area starts beyond volume (3104 > 128) [ 293.719152][T22256] FAT-fs (loop9): Can't find a valid FAT filesystem [ 293.781887][T22256] xt_hashlimit: size too large, truncated to 1048576 [ 293.865718][T22267] tun0: tun_chr_ioctl cmd 1074025677 [ 293.886531][T22267] tun0: linktype set to 823 [ 294.065864][ T7461] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.124224][T22285] netlink: 'syz.0.7460': attribute type 29 has an invalid length. [ 294.164219][T22285] netlink: 'syz.0.7460': attribute type 29 has an invalid length. [ 294.200134][T22285] netlink: 'syz.0.7460': attribute type 29 has an invalid length. [ 294.666220][T22321] loop0: detected capacity change from 0 to 256 [ 294.752064][T22328] loop6: detected capacity change from 0 to 256 [ 294.824310][T22328] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 322, start 00008005) [ 294.854573][T22328] FAT-fs (loop6): Filesystem has been set read-only [ 294.891785][T22328] FAT-fs (loop6): error, invalid access to FAT (entry 0x00008005) [ 295.038920][T22345] loop0: detected capacity change from 0 to 512 [ 295.067737][T22345] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 295.119038][T22345] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.7479: bad orphan inode 131083 [ 295.136795][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 295.136813][ T28] audit: type=1400 audit(2000000638.786:2596): avc: denied { write } for pid=22349 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 295.198537][T22345] loop0: lost filesystem error report for type 5 error -117 [ 295.201574][T22345] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.354652][T22345] EXT4-fs (loop0): shut down requested (2) [ 295.421549][T18104] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.614199][ T28] audit: type=1400 audit(2000000639.256:2597): avc: denied { write } for pid=22356 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 295.753553][T22389] size and base must be multiples of 4 kiB [ 295.780257][T22389] CPU: 1 UID: 0 PID: 22389 Comm: syz.6.7487 Not tainted syzkaller #0 PREEMPT(lazy) [ 295.780301][T22389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 295.780449][T22389] Call Trace: [ 295.780460][T22389] [ 295.780473][T22389] __dump_stack+0x1d/0x30 [ 295.780504][T22389] dump_stack_lvl+0x95/0xd0 [ 295.780574][T22389] dump_stack+0x15/0x1b [ 295.780599][T22389] mtrr_del+0xbf/0xd0 [ 295.780627][T22389] mtrr_ioctl+0xb62/0xfb0 [ 295.780705][T22389] ? __pfx_mtrr_ioctl+0x10/0x10 [ 295.780732][T22389] ? proc_reg_poll+0x191/0x1a0 [ 295.780763][T22389] proc_reg_unlocked_ioctl+0x123/0x1b0 [ 295.780829][T22389] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 295.780862][T22389] __se_sys_ioctl+0xce/0x140 [ 295.780887][T22389] __x64_sys_ioctl+0x43/0x50 [ 295.780911][T22389] x64_sys_call+0x1563/0x3020 [ 295.780999][T22389] do_syscall_64+0x136/0x3c0 [ 295.781079][T22389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.781106][T22389] RIP: 0033:0x7f7e9710e0d9 [ 295.781129][T22389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.781154][T22389] RSP: 002b:00007f7e95b67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 295.781202][T22389] RAX: ffffffffffffffda RBX: 00007f7e97395fa0 RCX: 00007f7e9710e0d9 [ 295.781219][T22389] RDX: 0000200000000040 RSI: 0000000040104d04 RDI: 0000000000000003 [ 295.781297][T22389] RBP: 00007f7e971a5024 R08: 0000000000000000 R09: 0000000000000000 [ 295.781316][T22389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 295.781334][T22389] R13: 00007f7e97396038 R14: 00007f7e97395fa0 R15: 00007ffef726a278 [ 295.781361][T22389] [ 295.970456][ T28] audit: type=1400 audit(2000000639.606:2598): avc: denied { write } for pid=22388 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 296.369808][T22413] loop3: detected capacity change from 0 to 256 [ 296.611079][ T28] audit: type=1326 audit(2000000640.256:2599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22420 comm="syz.6.7501" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e9710e0d9 code=0x7fc00000 [ 296.669825][ T28] audit: type=1326 audit(2000000640.286:2600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22420 comm="syz.6.7501" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f7e9710e0d9 code=0x7fc00000 [ 296.746284][ T28] audit: type=1326 audit(2000000640.286:2601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22420 comm="syz.6.7501" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e9710e0d9 code=0x7fc00000 [ 296.811528][ T28] audit: type=1326 audit(2000000640.286:2602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22420 comm="syz.6.7501" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e9710e0d9 code=0x7fc00000 [ 296.866080][ T28] audit: type=1326 audit(2000000640.286:2603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22420 comm="syz.6.7501" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e9710e0d9 code=0x7fc00000 [ 296.983483][ T28] audit: type=1326 audit(2000000640.286:2604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22420 comm="syz.6.7501" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e9710e0d9 code=0x7fc00000 [ 297.061090][ T28] audit: type=1326 audit(2000000640.286:2605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22420 comm="syz.6.7501" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e9710e0d9 code=0x7fc00000 [ 297.755872][T22465] loop0: detected capacity change from 0 to 2048 [ 297.823267][T22465] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.839907][T22469] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7513'. [ 298.140081][T22482] loop3: detected capacity change from 0 to 256 [ 298.197467][T22482] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 322, start 00008005) [ 298.222748][T22482] FAT-fs (loop3): Filesystem has been set read-only [ 298.231013][T22482] FAT-fs (loop3): error, invalid access to FAT (entry 0x00008005) [ 298.269353][T22484] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7517'. [ 298.585319][ T68] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 298.609805][ T68] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 298.648864][ T68] EXT4-fs (loop0): This should not happen!! Data will be lost [ 298.648864][ T68] [ 298.661064][ T68] EXT4-fs (loop0): Total free blocks count 0 [ 298.667929][ T68] EXT4-fs (loop0): Free/Dirty block details [ 298.699456][ T68] EXT4-fs (loop0): free_blocks=4096 [ 298.720840][ T68] EXT4-fs (loop0): dirty_blocks=688 [ 298.735849][ T68] EXT4-fs (loop0): Block reservation details [ 298.745141][ T68] EXT4-fs (loop0): i_reserved_data_blocks=43 [ 298.753548][ T120] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 656 with error 28 [ 298.791881][T18104] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 299.074928][T22512] SELinux: failed to load policy [ 299.236191][T22528] loop0: detected capacity change from 0 to 512 [ 299.283022][T22528] EXT4-fs: Ignoring removed nobh option [ 299.313887][T22528] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 299.328037][T22528] EXT4-fs (loop0): 1 truncate cleaned up [ 299.335821][T22528] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.465868][T22538] loop6: detected capacity change from 0 to 2048 [ 299.486335][T18104] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.536359][T22538] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.940239][T22561] loop0: detected capacity change from 0 to 8192 [ 300.056367][T22566] loop3: detected capacity change from 0 to 128 [ 300.094928][T22566] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 300.109277][ T3426] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 300.130646][T22566] ext4 filesystem being mounted at /532/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 300.187799][ T3426] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 300.194623][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 300.194662][ T28] audit: type=1400 audit(2000000643.836:2640): avc: denied { write } for pid=22565 comm="syz.3.7554" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 300.202319][ T3426] EXT4-fs (loop6): This should not happen!! Data will be lost [ 300.202319][ T3426] [ 300.238146][ T3426] EXT4-fs (loop6): Total free blocks count 0 [ 300.244640][ T3426] EXT4-fs (loop6): Free/Dirty block details [ 300.250591][ T3426] EXT4-fs (loop6): free_blocks=4096 [ 300.259857][ T3426] EXT4-fs (loop6): dirty_blocks=656 [ 300.262557][T22570] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 300.267773][ T3426] EXT4-fs (loop6): Block reservation details [ 300.283333][T22570] SELinux: failed to load policy [ 300.304131][ T3426] EXT4-fs (loop6): i_reserved_data_blocks=41 [ 300.316867][ T3426] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 624 with error 28 [ 300.382460][ T7461] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 300.444349][T15336] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 301.746409][T22623] program syz.3.7588 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 303.885426][T22684] loop3: detected capacity change from 0 to 128 [ 304.000237][T22687] loop6: detected capacity change from 0 to 1024 [ 304.015038][T22687] EXT4-fs: Ignoring removed orlov option [ 304.071782][T22687] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.092173][ T28] audit: type=1400 audit(2000000647.746:2641): avc: denied { write } for pid=22685 comm="syz.6.7604" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 304.117250][ T28] audit: type=1400 audit(2000000647.746:2642): avc: denied { execute } for pid=22685 comm="syz.6.7604" path="/1228/file1/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 304.166071][T22699] loop0: detected capacity change from 0 to 128 [ 304.191183][T22699] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 304.205306][T22699] ext4 filesystem being mounted at /363/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 304.271034][ T28] audit: type=1400 audit(2000000647.916:2643): avc: denied { write } for pid=22697 comm="syz.0.7610" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 304.313448][ T7461] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.366972][T18104] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09. [ 304.578327][T22727] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7623'. [ 304.591554][T22727] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7623'. [ 304.642369][T22731] loop6: detected capacity change from 0 to 128 [ 304.663086][T22731] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 304.735723][T22731] ext4 filesystem being mounted at /1230/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.740532][T22736] loop3: detected capacity change from 0 to 128 [ 304.775220][T22738] loop9: detected capacity change from 0 to 512 [ 304.823712][T22738] FAT-fs (loop9): Invalid FSINFO signature: 0x41613352, 0x61417272 (sector = 1) [ 304.870200][ T7461] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 304.976982][T22743] loop0: detected capacity change from 0 to 512 [ 304.989876][T22743] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 305.001783][ T30] FAT-fs (loop9): Invalid FSINFO signature: 0x41613352, 0x61417272 (sector = 1) [ 305.033587][T22743] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.7631: bad orphan inode 131083 [ 305.064588][T22743] loop0: lost filesystem error report for type 5 error -117 [ 305.081880][T22743] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.136821][T22753] loop6: detected capacity change from 0 to 4096 [ 305.154725][T22743] EXT4-fs (loop0): Online defrag not supported for non-extent files [ 305.163032][ T28] audit: type=1400 audit(2000000648.806:2644): avc: denied { write } for pid=22742 comm="syz.0.7631" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 305.163072][ T28] audit: type=1400 audit(2000000648.806:2645): avc: denied { write } for pid=22742 comm="syz.0.7631" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 305.227488][T22757] option changes via remount are deprecated (pid=22756 comm=syz.3.7636) [ 305.228190][T22753] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.273819][ T28] audit: type=1400 audit(2000000648.916:2646): avc: denied { write } for pid=22752 comm="syz.6.7635" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 305.339640][T18104] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.375882][ T7461] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.396951][T22761] netlink: 'syz.3.7637': attribute type 15 has an invalid length. [ 305.427572][ T28] audit: type=1400 audit(2000000649.066:2647): avc: denied { read } for pid=22762 comm="syz.9.7642" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 305.506220][ T28] audit: type=1400 audit(2000000649.066:2648): avc: denied { open } for pid=22762 comm="syz.9.7642" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 305.603940][ T28] audit: type=1400 audit(2000000649.106:2649): avc: denied { ioctl } for pid=22762 comm="syz.9.7642" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 305.690887][T22778] loop6: detected capacity change from 0 to 128 [ 305.908020][ T7461] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 305.916753][T22792] sg_write: data in/out 360448/136 bytes for SCSI command 0x0-- guessing data in; [ 305.916753][T22792] program syz.3.7654 not setting count and/or reply_len properly [ 305.941829][ T7461] FAT-fs (loop6): Filesystem has been set read-only [ 305.948828][ T7461] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 309.206313][ T68] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.220167][T22816] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7662'. [ 309.266759][ T68] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.338981][T22833] loop0: detected capacity change from 0 to 256 [ 309.371332][ T68] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.377167][T22833] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 309.385829][T22839] loop9: detected capacity change from 0 to 512 [ 309.420442][T22839] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 309.461939][T22839] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 309.482261][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 309.488759][ C1] EXT4-fs (loop9): initial error at time 2000000653: ext4_mb_generate_buddy:1317 [ 309.498212][ C1] EXT4-fs (loop9): last error at time 2000000653: ext4_mb_generate_buddy:1317 [ 309.504345][T22839] EXT4-fs (loop9): 1 truncate cleaned up [ 309.529149][T22839] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.545083][ T68] netdevsim netdevsim6 netdevsim0 (unregistering): left allmulticast mode [ 309.555537][ T68] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.557374][T22845] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7674'. [ 309.675397][ T28] audit: type=1400 audit(2000000653.316:2650): avc: denied { write } for pid=22838 comm="syz.9.7681" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 309.718261][T12685] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.825791][ T68] netdevsim netdevsim10 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.933171][ T28] audit: type=1400 audit(2000000653.586:2651): avc: denied { write } for pid=22865 comm="syz.9.7683" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 309.940362][T22868] random: crng reseeded on system resumption [ 309.994255][T22871] loop3: detected capacity change from 0 to 128 [ 310.019034][ T28] audit: type=1400 audit(2000000653.586:2652): avc: denied { open } for pid=22865 comm="syz.9.7683" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 310.065624][T22871] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 310.112542][T22871] ext4 filesystem being mounted at /565/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 310.185105][ T68] bridge_slave_1: left promiscuous mode [ 310.194969][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.195472][T22868] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.9.7683: No space for directory leaf checksum. Please run e2fsck -D. [ 310.221116][T15336] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 310.229949][T22868] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.9.7683: checksumming directory block 0 [ 310.244793][ T68] bridge_slave_0: left allmulticast mode [ 310.251666][ T68] bridge_slave_0: left promiscuous mode [ 310.263058][T22868] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 310.279790][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.305508][T22868] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.9.7683: No space for directory leaf checksum. Please run e2fsck -D. [ 310.347138][T22868] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.9.7683: checksumming directory block 0 [ 310.387613][ T28] audit: type=1400 audit(2000000654.036:2653): avc: denied { write } for pid=22864 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 310.425244][T22868] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 310.446802][T22868] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.9.7683: No space for directory leaf checksum. Please run e2fsck -D. [ 310.486111][T22868] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.9.7683: checksumming directory block 0 [ 310.498600][ T28] audit: type=1400 audit(2000000654.146:2654): avc: denied { write } for pid=22890 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 310.543950][T22868] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 310.582381][ C1] SELinux: failure in sel_netif_sid_slow(), invalid network interface (3) [ 310.589576][T22868] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.9.7683: No space for directory leaf checksum. Please run e2fsck -D. [ 310.621845][T22868] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.9.7683: checksumming directory block 0 [ 310.632580][ T68] gretap0 (unregistering): left allmulticast mode [ 310.635601][T22868] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 310.651905][T22868] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 310.759060][ T68] bond1 (unregistering): Released all slaves [ 310.791185][ T68] bond0 (unregistering): Released all slaves [ 310.800590][T22867] syz.7.7684 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 310.866834][ T3020] 8021q: adding VLAN 0 to HW filter on device eth5 [ 310.899769][ T68] tipc: Disabling bearer [ 310.907518][ T68] tipc: Left network mode [ 311.007153][ T68] hsr_slave_0: left promiscuous mode [ 311.022739][ T68] hsr_slave_1: left promiscuous mode [ 311.029266][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.051997][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.069311][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.079772][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.151934][ T68] veth1_macvtap: left promiscuous mode [ 311.164346][ T68] veth0_macvtap: left promiscuous mode [ 311.174798][ T68] veth1_vlan: left promiscuous mode [ 311.187263][ T68] veth0_vlan: left promiscuous mode [ 311.301023][T22922] loop3: detected capacity change from 0 to 512 [ 311.329295][T22922] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.437264][ T68] team0 (unregistering): Port device team_slave_1 removed [ 311.450835][ T68] team0 (unregistering): Port device team_slave_0 removed [ 311.484683][T15336] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.670204][T22937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7705'. [ 311.697690][T22937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7705'. [ 311.881073][T22820] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.903040][ T28] audit: type=1400 audit(2000000655.556:2655): avc: denied { remount } for pid=22951 comm="syz.3.7708" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 311.933304][T22820] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.961008][T22820] bridge_slave_0: entered allmulticast mode [ 311.990849][T22820] bridge_slave_0: entered promiscuous mode [ 312.002718][ T28] audit: type=1400 audit(2000000655.606:2656): avc: denied { write } for pid=22945 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 312.032634][T22968] program syz.0.7712 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 312.054322][T22820] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.073207][T22820] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.101400][T22820] bridge_slave_1: entered allmulticast mode [ 312.129890][T22820] bridge_slave_1: entered promiscuous mode [ 312.141019][T22975] scsi_strcpy_devinfo: vendor string '¼QTò?¬Ý]Ð+É,r' is too long [ 312.177322][ T28] audit: type=1400 audit(2000000655.826:2657): avc: denied { write } for pid=22973 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 312.210488][T22972] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7714'. [ 312.278461][T22820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.296820][T22820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.310272][ T3020] 8021q: adding VLAN 0 to HW filter on device eth6 [ 312.331578][T22988] netlink: 'syz.7.7720': attribute type 1 has an invalid length. [ 312.349782][T22988] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7720'. [ 312.374005][T22990] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 312.390768][T22820] team0: Port device team_slave_0 added [ 312.415519][T22820] team0: Port device team_slave_1 added [ 312.488657][T22820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.499470][T22820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.560573][T22820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.594298][T22820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.601880][T22820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.618917][T23008] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7726'. [ 312.630559][T22820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.763255][T22820] hsr_slave_0: entered promiscuous mode [ 312.780389][T22820] hsr_slave_1: entered promiscuous mode [ 312.796395][T22820] debugfs: 'hsr0' already exists in 'hsr' [ 312.822052][ T28] audit: type=1400 audit(2000000656.466:2658): avc: denied { write } for pid=22996 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 312.848255][T22820] Cannot create hsr debugfs directory [ 312.919493][ T28] audit: type=1400 audit(2000000656.566:2659): avc: denied { write } for pid=23020 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 312.973900][ T3020] 8021q: adding VLAN 0 to HW filter on device eth7 [ 313.063190][T23029] geneve2: entered promiscuous mode [ 313.068921][T23029] geneve2: entered allmulticast mode [ 313.136860][T23034] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 313.211840][T23040] IPv6: NLM_F_CREATE should be specified when creating new route [ 313.288854][T23044] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 313.288854][T23044] Please contact the netfilter-devel mailing list or update your nftables rules. [ 313.408120][ T28] audit: type=1400 audit(2000000657.056:2660): avc: denied { write } for pid=23035 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 313.506531][T23068] smc: net device ip6_vti0 applied user defined pnetid SYZ2 [ 313.547553][ T28] audit: type=1400 audit(2000000657.186:2661): avc: denied { write } for pid=23066 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 313.607600][ T3020] 8021q: adding VLAN 0 to HW filter on device eth8 [ 313.624520][T23072] SELinux: failed to load policy [ 313.777461][T22820] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 313.808535][T22820] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 313.831833][T22820] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 313.864393][T22820] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 313.898394][T22820] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 313.929278][T22820] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 313.939829][T23093] netlink: 104 bytes leftover after parsing attributes in process `syz.7.7750'. [ 313.952909][T22820] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 313.989925][T22820] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 314.019086][ T28] audit: type=1400 audit(2000000657.666:2662): avc: denied { write } for pid=23078 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 314.201608][T22820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.267442][ T3020] 8021q: adding VLAN 0 to HW filter on device eth13 [ 314.301246][T22820] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.365257][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.372438][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.440436][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.447645][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.239668][T22820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.675597][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 315.675616][ T28] audit: type=1400 audit(2000000659.326:2666): avc: denied { write } for pid=23151 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 315.870633][ T28] audit: type=1400 audit(2000000659.516:2667): avc: denied { write } for pid=23176 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 316.121283][T23188] loop9: detected capacity change from 0 to 1024 [ 316.145369][T23188] EXT4-fs: inline encryption not supported [ 316.180431][T23188] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 316.210386][T23188] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #3: block 2: comm syz.9.7765: lblock 2 mapped to illegal pblock 2 (length 1) [ 316.241696][T23188] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 316.242254][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 316.257986][ C0] EXT4-fs (loop9): initial error at time 2000000659: ext4_map_blocks:791: inode 3: block 2 [ 316.268084][ C0] EXT4-fs (loop9): last error at time 2000000659: ext4_map_blocks:791: inode 3: block 2 [ 316.281039][T23188] Quota error (device loop9): qtree_write_dquot: dquota write failed [ 316.316094][T23188] EXT4-fs error (device loop9): __ext4_get_inode_loc:4886: comm syz.9.7765: Invalid inode table block 1 in block_group 0 [ 316.343585][T22820] veth0_vlan: entered promiscuous mode [ 316.368370][T23188] loop9: lost filesystem error report for type 5 error -117 [ 316.371759][T23188] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 316.408088][T23188] loop9: lost filesystem error report for type 5 error -117 [ 316.410041][T23188] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #3: comm syz.9.7765: mark_inode_dirty error [ 316.490674][T23188] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 316.490995][T23188] Quota error (device loop9): v2_write_file_info: Can't write info structure [ 316.537583][T22820] veth1_vlan: entered promiscuous mode [ 316.542787][T23188] EXT4-fs error (device loop9): ext4_acquire_dquot:7041: comm syz.9.7765: Failed to acquire dquot type 0 [ 316.568698][ T28] audit: type=1400 audit(2000000660.216:2668): avc: denied { write } for pid=23185 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 316.604400][T23188] loop9: lost filesystem error report for type 5 error -117 [ 316.604703][T23188] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 316.611477][T22820] veth0_macvtap: entered promiscuous mode [ 316.612518][T23188] loop9: lost filesystem error report for type 5 error -117 [ 316.656706][T23188] EXT4-fs error (device loop9): ext4_evict_inode:267: inode #11: comm syz.9.7765: mark_inode_dirty error [ 316.678052][T23188] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 316.678279][T23188] EXT4-fs warning (device loop9): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 316.689499][T22820] veth1_macvtap: entered promiscuous mode [ 316.698586][T23188] EXT4-fs (loop9): 1 orphan inode deleted [ 316.711328][T23188] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.729951][ T28] audit: type=1400 audit(2000000660.386:2669): avc: denied { write } for pid=23212 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 316.751116][T22820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.763567][ T68] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 316.766483][T22820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.824179][ T68] Quota error (device loop9): remove_tree: Can't read quota data block 1 [ 316.852706][ T68] EXT4-fs error (device loop9): ext4_release_dquot:7077: comm kworker/u8:4: Failed to release dquot type 0 [ 316.867359][T23216] loop0: detected capacity change from 0 to 512 [ 316.879677][T23216] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 316.898050][ T68] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #3: block 2: comm kworker/u8:4: lblock 2 mapped to illegal pblock 2 (length 1) [ 316.931408][T23216] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.7771: bad orphan inode 131083 [ 316.931524][ T68] Quota error (device loop9): qtree_write_dquot: dquota write failed [ 316.951545][ T362] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.962021][ T68] EXT4-fs error (device loop9): ext4_write_dquot:7021: comm kworker/u8:4: Failed to commit dquot type 0 [ 316.963887][ T120] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.975238][T23216] loop0: lost filesystem error report for type 5 error -117 [ 316.984868][ T68] Quota error (device loop9): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync! [ 316.998719][T23216] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.005943][ T120] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.031775][T12685] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.045787][ T362] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.063515][ T28] audit: type=1400 audit(2000000660.696:2670): avc: denied { write } for pid=23215 comm="syz.0.7771" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 317.099310][T12685] EXT4-fs error (device loop9): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 317.116117][T12685] loop9: lost filesystem error report for type 5 error -117 [ 317.119399][T12685] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 317.163151][T23216] EXT4-fs error (device loop0): ext4_check_all_de:659: inode #12: block 7: comm syz.0.7771: bad entry in directory: directory entry overrun - offset=16, inode=1560281102, rec_len=1024, size=124 fake=0 [ 317.170734][T12685] loop9: lost filesystem error report for type 5 error -117 [ 317.200180][T23231] netlink: 1371 bytes leftover after parsing attributes in process `syz.7.7775'. [ 317.218961][T12685] EXT4-fs error (device loop9): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 317.273458][T12685] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 317.299155][T18104] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.688070][T23271] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7788'. [ 317.713489][T23271] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7788'. [ 317.799512][T23278] SELinux: policydb table sizes (1,18) do not match mine (8,7) [ 317.836379][T23278] SELinux: failed to load policy [ 318.378157][T23328] loop3: detected capacity change from 0 to 164 [ 318.395734][T23328] ISOFS: unable to read i-node block [ 318.405793][T23332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7808'. [ 318.411780][T23328] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 319.018111][T23377] loop0: detected capacity change from 0 to 512 [ 319.047116][T23377] EXT4-fs: Ignoring removed nomblk_io_submit option [ 319.079831][T23377] EXT4-fs: Ignoring removed mblk_io_submit option [ 319.114177][T23377] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 319.139953][T23377] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 319.178461][T23377] EXT4-fs (loop0): 1 truncate cleaned up [ 319.201417][T23377] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.225649][T23377] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #2: block 4: comm syz.0.7825: lblock 0 mapped to illegal pblock 4 (length 1) [ 319.252598][T23377] EXT4-fs (loop0): Remounting filesystem read-only [ 319.310600][T18104] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.161920][T23454] loop9: detected capacity change from 0 to 1024 [ 320.190140][T23454] EXT4-fs: Ignoring removed nomblk_io_submit option [ 320.238760][T23454] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 320.373666][T23454] EXT4-fs: Ignoring removed bh option [ 320.428898][T23454] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 320.515618][T12685] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.773582][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 320.773599][ T28] audit: type=1400 audit(2000000664.426:2682): avc: denied { write } for pid=23460 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 320.956304][ T28] audit: type=1400 audit(2000000664.606:2683): avc: denied { write } for pid=23494 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 321.220015][T23514] netlink: 'syz.0.7864': attribute type 1 has an invalid length. [ 321.348735][T23528] loop9: detected capacity change from 0 to 164 [ 321.372975][T23528] Unable to read rock-ridge attributes [ 321.400467][T23531] loop5: detected capacity change from 0 to 7 [ 321.459634][ T28] audit: type=1400 audit(2000000665.106:2684): avc: denied { write } for pid=23506 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 321.666587][ T28] audit: type=1400 audit(2000000665.306:2685): avc: denied { write } for pid=23542 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 321.886671][T23559] netlink: 'syz.3.7881': attribute type 14 has an invalid length. [ 322.176316][ T28] audit: type=1400 audit(2000000665.826:2686): avc: denied { write } for pid=23557 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 322.270444][ T28] audit: type=1400 audit(2000000665.916:2687): avc: denied { write } for pid=23574 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 322.497525][ T28] audit: type=1400 audit(2000000666.146:2688): avc: denied { write } for pid=23577 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 322.576984][ T28] audit: type=1400 audit(2000000666.226:2689): avc: denied { write } for pid=23588 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 322.905750][T23607] netlink: 36 bytes leftover after parsing attributes in process `syz.9.7890'. [ 322.938604][T23607] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.946155][T23607] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.273912][T23634] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7902'. [ 323.458951][ T28] audit: type=1400 audit(2000000667.106:2690): avc: denied { read } for pid=23647 comm="syz.0.7908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 323.576320][T23657] loop4: detected capacity change from 0 to 256 [ 323.649273][T23657] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 323.664600][T23657] FAT-fs (loop4): Filesystem has been set read-only [ 323.686198][T23657] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 323.708199][T23657] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 323.726407][T23657] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 323.736288][T23657] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 323.745695][ T28] audit: type=1400 audit(2000000667.396:2691): avc: denied { setopt } for pid=23665 comm="syz.0.7915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 323.849171][T23672] loop4: detected capacity change from 0 to 512 [ 323.851306][T23671] loop0: detected capacity change from 0 to 2048 [ 323.860059][T23672] EXT4-fs: inline encryption not supported [ 323.876632][T23672] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 323.928443][T23671] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.943718][T23672] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.7917: bad orphan inode 15 [ 323.961521][T23672] loop4: lost filesystem error report for type 5 error -117 [ 323.966543][T23671] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 323.968127][T23672] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.999653][T18104] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.019779][T23672] EXT4-fs error (device loop4): __ext4_new_inode:1081: comm syz.4.7917: reserved inode found cleared - inode=18 [ 324.094915][T22820] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.105227][T23684] loop9: detected capacity change from 0 to 1024 [ 324.201558][T23684] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.323439][T12685] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.377887][T23695] loop0: detected capacity change from 0 to 1024 [ 324.393325][T23695] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 324.448200][T23695] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #11: comm syz.0.7926: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 324.467281][T23695] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 324.472259][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 324.488034][ C0] EXT4-fs (loop0): initial error at time 2000000668: ext4_ext_check_inode:521: inode 11 [ 324.490958][T23695] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.7926: couldn't read orphan inode 11 (err -117) [ 324.497873][ C0] EXT4-fs (loop0): last error at time 2000000668: ext4_ext_check_inode:521: inode 11 [ 324.533041][T23695] loop0: lost filesystem error report for type 5 error -117 [ 324.537106][T23695] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.821286][T23725] sit0: entered allmulticast mode [ 324.844504][T23725] sit0: entered promiscuous mode [ 324.988452][T18104] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.089584][T23736] loop4: detected capacity change from 0 to 128 [ 325.120341][T23739] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7946'. [ 325.147639][T23736] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 325.157862][T23742] loop9: detected capacity change from 0 to 1024 [ 325.179521][T23742] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 325.268708][T23742] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 325.284823][T23736] ext4 filesystem being mounted at /44/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 325.307087][T23742] jbd2_journal_init_inode: Cannot locate journal superblock [ 325.316738][T23742] EXT4-fs (loop9): Could not load journal inode [ 325.399148][T22820] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 325.825916][T23793] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7972'. [ 325.841900][T23793] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7972'. [ 325.856097][T23793] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7972'. [ 326.129863][T23814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7981'. [ 326.147972][T23814] hsr_slave_0: left promiscuous mode [ 326.161421][T23814] hsr_slave_1: left promiscuous mode [ 326.451958][T23837] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 326.557603][T23847] loop3: detected capacity change from 0 to 512 [ 326.578585][T23847] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 326.637164][T23847] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.7997: bg 0: block 104: invalid block bitmap [ 326.671045][T23847] loop3: lost filesystem error report for type 5 error -117 [ 326.671833][T23847] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 326.679411][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 326.679455][ C0] EXT4-fs (loop3): initial error at time 2000000670: ext4_validate_block_bitmap:432 [ 326.679484][ C0] EXT4-fs (loop3): last error at time 2000000670: ext4_validate_block_bitmap:432 [ 326.715740][T23847] loop3: lost filesystem error report for type 5 error -117 [ 326.720700][T23847] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.7997: invalid indirect mapped block 1 (level 1) [ 326.744583][T23847] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 326.745600][T23847] EXT4-fs (loop3): 1 truncate cleaned up [ 326.791421][T23847] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.861937][T23862] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 326.869301][T23862] IPv6: NLM_F_CREATE should be set when creating new route [ 326.876803][T23862] IPv6: NLM_F_CREATE should be set when creating new route [ 326.884073][T23862] IPv6: NLM_F_CREATE should be set when creating new route [ 326.924476][T23862] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 326.926079][T15336] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.129684][T23873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8006'. [ 327.162791][T23873] syz_tun: refused to change device tx_queue_len [ 327.227330][T23878] loop4: detected capacity change from 0 to 1024 [ 327.254609][T23880] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8013'. [ 327.263872][T23878] EXT4-fs (loop4): invalid inodes per group: 2 [ 327.263872][T23878] [ 327.344320][T23884] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8015'. [ 327.662791][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 327.662809][ T28] audit: type=1400 audit(2000000671.316:2696): avc: denied { write } for pid=23887 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 327.737766][T23899] scsi_strcpy_devinfo: vendor string '¼QTò?¬Ý]Ð+É,r' is too long [ 327.781064][ T28] audit: type=1400 audit(2000000671.426:2697): avc: denied { map } for pid=23902 comm="syz.7.8020" path="socket:[71515]" dev="sockfs" ino=71515 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 327.881607][ T28] audit: type=1400 audit(2000000671.446:2698): avc: denied { write } for pid=23906 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 327.970408][ T28] audit: type=1400 audit(2000000671.466:2699): avc: denied { recv } for pid=15336 comm="syz-executor" saddr=10.128.0.163 src=40864 daddr=10.128.0.175 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 328.279690][T23947] device-mapper: ioctl: name not supplied when creating device [ 328.538758][T23968] netlink: 36 bytes leftover after parsing attributes in process `syz.7.8047'. [ 328.565395][T23968] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8047'. [ 328.601157][T23978] loop3: detected capacity change from 0 to 512 [ 328.609832][T23979] xt_hashlimit: size too large, truncated to 1048576 [ 328.675803][T23978] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.701541][ T28] audit: type=1400 audit(2000000672.346:2700): avc: denied { write } for pid=23975 comm="syz.3.8051" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 328.936104][T23992] batman_adv: batadv0: Adding interface: dummy0 [ 328.962095][T23992] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.013773][T23992] batman_adv: batadv0: Interface activated: dummy0 [ 329.094523][T15336] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.243928][T24049] loop9: detected capacity change from 0 to 2048 [ 330.287313][T24049] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 331.017370][T12685] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.135217][T24074] sctp: [Deprecated]: syz.0.8092 (pid 24074) Use of int in max_burst socket option. [ 331.135217][T24074] Use struct sctp_assoc_value instead [ 331.152674][T24073] loop3: detected capacity change from 0 to 1024 [ 331.196564][T24073] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 331.282902][T24073] EXT4-fs (loop3): shut down requested (2) [ 331.324747][ T28] audit: type=1400 audit(2000000674.976:2701): avc: denied { write } for pid=24070 comm="syz.3.8091" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 331.588578][ T28] audit: type=1400 audit(2000000675.236:2702): avc: denied { write } for pid=24086 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 331.644676][ T28] audit: type=1400 audit(2000000675.296:2703): avc: denied { write } for pid=24106 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 332.069573][T15336] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.400645][T24134] loop3: detected capacity change from 0 to 136 [ 332.417282][T24137] loop0: detected capacity change from 0 to 512 [ 332.473308][T24137] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 332.554457][T24137] EXT4-fs (loop0): shut down requested (2) [ 332.561280][T24137] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 332.571124][T24137] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 332.592117][ T28] audit: type=1400 audit(2000000676.236:2704): avc: denied { attach_queue } for pid=24145 comm="syz.9.8116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 332.599314][T24137] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=13 [ 332.638072][T24137] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=13 [ 332.671718][T24152] netlink: 'syz.4.8118': attribute type 3 has an invalid length. [ 332.696259][ T28] audit: type=1400 audit(2000000676.306:2705): avc: denied { setattr } for pid=24135 comm="syz.0.8113" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 332.785534][T18104] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.889624][T24166] tipc: Enabling of bearer rejected, media not registered [ 333.134328][T24186] loop0: detected capacity change from 0 to 128 [ 333.250146][T24191] loop9: detected capacity change from 0 to 128 [ 333.261028][T24191] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 333.270460][T24191] System zones: 1-3, 19-19, 35-36 [ 333.277146][T24191] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 333.291388][T24191] ext4 filesystem being mounted at /860/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 333.303855][ T28] audit: type=1400 audit(2000000676.946:2706): avc: denied { write } for pid=24164 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 333.340623][T24191] EXT4-fs warning (device loop9): ext4_group_add:1735: No reserved GDT blocks, can't resize [ 333.425978][ T28] audit: type=1400 audit(2000000677.076:2707): avc: denied { write } for pid=24195 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 333.924995][T24211] loop3: detected capacity change from 0 to 512 [ 333.939186][ T28] audit: type=1400 audit(2000000677.586:2708): avc: denied { write } for pid=24199 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 334.018716][T24211] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.039407][T12685] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 334.059866][T24211] ext4 filesystem being mounted at /658/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 334.166441][T15336] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.171623][ T28] audit: type=1400 audit(2000000677.816:2709): avc: denied { write } for pid=24221 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 334.271556][ T3410] kernel write not supported for file /snd/seq (pid: 3410 comm: kworker/1:6) [ 334.410866][ T28] audit: type=1400 audit(2000000678.056:2710): avc: denied { read } for pid=24241 comm="syz.4.8146" path="socket:[72185]" dev="sockfs" ino=72185 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 334.498898][ T28] audit: type=1400 audit(2000000678.106:2711): avc: denied { bind } for pid=24244 comm="syz.7.8147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 334.547253][T24251] SELinux: security_context_str_to_sid (measure) failed with errno=-22 [ 334.615259][ T28] audit: type=1400 audit(2000000678.266:2712): avc: denied { read } for pid=24254 comm="syz.0.8152" path="socket:[73109]" dev="sockfs" ino=73109 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 334.749052][T24266] loop3: detected capacity change from 0 to 512 [ 334.810814][T24266] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.829927][ T28] audit: type=1400 audit(2000000678.476:2713): avc: denied { write } for pid=24235 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 334.859499][T24266] ext4 filesystem being mounted at /661/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 334.899178][ T28] audit: type=1400 audit(2000000678.546:2714): avc: denied { write } for pid=24265 comm="syz.3.8154" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 335.018731][T15336] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.047985][T24283] nftables ruleset with unbound chain [ 335.131094][T24289] loop3: detected capacity change from 0 to 256 [ 335.161932][T24293] netlink: 'syz.9.8163': attribute type 2 has an invalid length. [ 335.178222][T24293] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8163'. [ 335.203781][T24295] loop0: detected capacity change from 0 to 512 [ 335.241955][T24295] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 335.300390][T24295] EXT4-fs (loop0): 1 truncate cleaned up [ 335.331472][T24295] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 335.514537][T18104] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.566090][ T3410] IPVS: starting estimator thread 0... [ 335.660096][T24323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.683807][T24323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.693248][T24315] IPVS: using max 2400 ests per chain, 120000 per kthread [ 335.745391][T24325] loop3: detected capacity change from 0 to 128 [ 335.774983][T24325] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 335.795276][T24325] ext4 filesystem being mounted at /666/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 335.832863][T24325] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 335.866715][T24335] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 335.880618][T24335] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 336.161162][T24359] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 336.165690][T24358] loop3: detected capacity change from 0 to 256 [ 336.228483][T24358] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 336.257295][T24361] EXT4-fs: Ignoring removed oldalloc option [ 336.278198][T24358] FAT-fs (loop3): Filesystem has been set read-only [ 336.312880][T24361] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.313314][T24358] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 336.326005][T24361] ext4 filesystem being mounted at /489/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.362822][T24358] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 336.398209][T24358] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 336.407405][T24358] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 336.440409][T24368] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.8193: bg 0: block 345: padding at end of block bitmap is not set [ 336.459949][T24368] EXT4-fs (loop0): Remounting filesystem read-only [ 336.642896][T18104] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.097917][T24424] xt_hashlimit: size too large, truncated to 1048576 [ 337.565004][T24448] set_capacity_and_notify: 1 callbacks suppressed [ 337.565027][T24448] loop3: detected capacity change from 0 to 512 [ 337.603075][T24448] EXT4-fs: inline encryption not supported [ 337.641502][T24448] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 337.678164][T24448] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.8230: bad orphan inode 15 [ 337.728854][T24448] loop3: lost filesystem error report for type 5 error -117 [ 337.730270][T24448] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.767394][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 337.767423][ T28] audit: type=1400 audit(2000000681.416:2719): avc: denied { write } for pid=24447 comm="syz.3.8230" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 337.767431][T24448] EXT4-fs error (device loop3): __ext4_new_inode:1081: comm syz.3.8230: reserved inode found cleared - inode=18 [ 337.859468][T15336] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.942590][T24463] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8236'. [ 338.525585][T24493] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 338.799175][T24504] loop4: detected capacity change from 0 to 512 [ 338.840550][T24504] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 338.864243][T24504] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 338.928200][ T49] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 339.728736][T24537] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8272'. [ 339.739070][T24536] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8271'. [ 339.750004][T24537] netlink: 'syz.7.8272': attribute type 5 has an invalid length. [ 339.765047][T24536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8271'. [ 339.781200][T24537] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8272'. [ 339.781676][T24541] netlink: 76 bytes leftover after parsing attributes in process `syz.9.8273'. [ 339.814108][T24536] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 339.864434][T10701] netdevsim netdevsim100 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.879218][T10701] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.900709][T10701] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.918790][T10701] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.947228][T10701] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 340.112552][T24562] netlink: 'syz.0.8279': attribute type 14 has an invalid length. [ 340.141840][T24565] loop9: detected capacity change from 0 to 512 [ 340.169624][T24565] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 340.186256][T24565] EXT4-fs (loop9): 1 truncate cleaned up [ 340.215950][T24565] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.273090][T24565] EXT4-fs (loop9): shut down requested (2) [ 340.285269][ T28] audit: type=1400 audit(2000000683.936:2720): avc: denied { ioctl } for pid=24569 comm="syz.7.8282" path="socket:[73638]" dev="sockfs" ino=73638 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 340.585646][T12685] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.765225][T24585] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8290'. [ 340.869694][T24597] netlink: 71 bytes leftover after parsing attributes in process `syz.4.8295'. [ 341.001724][T24611] netlink: 'syz.3.8301': attribute type 1 has an invalid length. [ 341.191754][T24623] loop3: detected capacity change from 0 to 136 [ 341.210495][T24623] Attempt to read inode for relocated directory [ 341.253961][T24623] syz.3.8308: attempt to access beyond end of device [ 341.253961][T24623] loop3: rw=8912896, sector=335544428, nr_sectors = 4 limit=136 [ 341.269972][T24627] loop0: detected capacity change from 0 to 128 [ 341.295720][T24627] FAT-fs (loop0): Directory bread(block 1048) failed [ 341.300403][T24629] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8311'. [ 341.314926][T24623] syz.3.8308: attempt to access beyond end of device [ 341.314926][T24623] loop3: rw=8388608, sector=335544428, nr_sectors = 4 limit=136 [ 341.332883][T24623] syz.3.8308: attempt to access beyond end of device [ 341.332883][T24623] loop3: rw=8388608, sector=335544428, nr_sectors = 4 limit=136 [ 341.336305][T24627] FAT-fs (loop0): Directory bread(block 1049) failed [ 341.398106][T24627] FAT-fs (loop0): Directory bread(block 1050) failed [ 341.417524][T24627] FAT-fs (loop0): Directory bread(block 1051) failed [ 341.440066][T24627] FAT-fs (loop0): Directory bread(block 1052) failed [ 341.468936][T24634] loop4: detected capacity change from 0 to 512 [ 341.475596][T24627] FAT-fs (loop0): Directory bread(block 1053) failed [ 341.475626][T24627] FAT-fs (loop0): Directory bread(block 1054) failed [ 341.475689][T24627] FAT-fs (loop0): Directory bread(block 1055) failed [ 341.542090][T24634] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 341.552043][T24634] EXT4-fs (loop4): orphan cleanup on readonly fs [ 341.553135][T24627] FAT-fs (loop0): Directory bread(block 1048) failed [ 341.570918][T24634] Quota error (device loop4): find_block_dqentry: Quota for id 0 referenced but not present [ 341.586279][T24634] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 341.597107][T24634] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.8313: Failed to acquire dquot type 1 [ 341.609783][T24634] loop4: lost filesystem error report for type 5 error -5 [ 341.609966][T24627] FAT-fs (loop0): Directory bread(block 1049) failed [ 341.617321][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 341.617356][ C1] EXT4-fs (loop4): initial error at time 2000000685: ext4_acquire_dquot:7041 [ 341.617387][ C1] EXT4-fs (loop4): last error at time 2000000685: ext4_acquire_dquot:7041 [ 341.632550][T24634] EXT4-fs (loop4): Remounting filesystem read-only [ 341.739318][T24634] EXT4-fs (loop4): 1 truncate cleaned up [ 341.763583][T24634] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 341.885149][T24655] loop3: detected capacity change from 0 to 512 [ 341.895941][T24634] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=16 [ 341.925798][T24634] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=16 [ 341.963386][T24661] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=16 [ 341.996869][ T28] audit: type=1400 audit(2000000685.646:2721): avc: denied { read } for pid=24633 comm="syz.4.8313" name="file2" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 342.077634][T22820] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.295650][T24680] IPv6: addrconf: prefix option has invalid lifetime [ 342.309621][ T28] audit: type=1400 audit(2000000685.946:2722): avc: denied { getopt } for pid=24681 comm="syz.0.8334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 342.420016][T24686] loop4: detected capacity change from 0 to 1024 [ 342.467552][T24686] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 342.520671][T24686] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 342.613319][ T28] audit: type=1400 audit(2000000686.256:2723): avc: denied { write } for pid=24685 comm="syz.4.8336" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 342.631393][T24686] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: comm syz.4.8336: lblock 0 mapped to illegal pblock 0 (length 1) [ 342.671434][T24686] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #15: comm syz.4.8336: lblock 0 mapped to illegal pblock 0 (length 1) [ 342.707388][T24696] loop3: detected capacity change from 0 to 512 [ 342.747056][T24696] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 342.790646][T24696] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.8340: bad orphan inode 131083 [ 342.843337][T24696] loop3: lost filesystem error report for type 5 error -117 [ 342.845075][T24696] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.879227][T24696] EXT4-fs (loop3): shut down requested (2) [ 343.220642][T15336] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.241046][T22820] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 343.569116][T24723] netlink: 100 bytes leftover after parsing attributes in process `syz.4.8353'. [ 343.690071][T24729] loop4: detected capacity change from 0 to 512 [ 343.709209][T24729] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 343.761051][T24729] EXT4-fs (loop4): shut down requested (1) [ 343.932088][T22820] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 344.181614][T24750] netlink: 32 bytes leftover after parsing attributes in process `syz.7.8366'. [ 344.190049][T24752] program syz.4.8365 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 344.214411][T24753] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8368'. [ 344.271274][T24755] loop0: detected capacity change from 0 to 512 [ 344.347068][T24755] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.375023][T24755] ext4 filesystem being mounted at /533/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.456635][ T28] audit: type=1400 audit(2000000688.106:2724): avc: denied { write } for pid=24754 comm="syz.0.8367" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 344.494163][T24755] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.8367: bg 0: block 217: padding at end of block bitmap is not set [ 344.509447][T24773] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.8367: bg 0: block 217: padding at end of block bitmap is not set [ 344.559106][ T28] audit: type=1400 audit(2000000688.166:2725): avc: denied { write } for pid=24754 comm="syz.0.8367" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 344.649301][T24779] loop4: detected capacity change from 0 to 512 [ 344.699325][T18104] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.750240][T24779] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.773972][T24779] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.802500][ T28] audit: type=1400 audit(2000000688.446:2726): avc: denied { write } for pid=24778 comm="syz.4.8378" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 344.946020][T22820] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.622819][T24818] netlink: 60 bytes leftover after parsing attributes in process `syz.9.8395'. [ 345.687465][T24820] netlink: 'syz.9.8396': attribute type 12 has an invalid length. [ 345.723154][T24820] netlink: 'syz.9.8396': attribute type 29 has an invalid length. [ 345.731786][T24820] netlink: 148 bytes leftover after parsing attributes in process `syz.9.8396'. [ 345.750578][T24820] netlink: 'syz.9.8396': attribute type 3 has an invalid length. [ 345.774140][T24820] netlink: 'syz.9.8396': attribute type 2 has an invalid length. [ 345.789294][T24820] netlink: 35 bytes leftover after parsing attributes in process `syz.9.8396'. [ 345.893870][ T3410] kernel write not supported for file /snd/seq (pid: 3410 comm: kworker/1:6) [ 345.911072][T24828] loop3: detected capacity change from 0 to 1024 [ 345.976014][T24828] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.074091][T15336] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.137094][ T28] audit: type=1400 audit(2000000689.786:2727): avc: denied { append } for pid=24851 comm="syz.4.8411" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 346.207697][T24856] loop9: detected capacity change from 0 to 1024 [ 346.245390][T24856] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 346.371935][T12685] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 346.409364][ T28] audit: type=1400 audit(2000000690.056:2728): avc: denied { append } for pid=24871 comm="syz.7.8419" name="control" dev="devtmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 346.607203][T24890] loop0: detected capacity change from 0 to 256 [ 346.657100][T24890] syz.0.8428: attempt to access beyond end of device [ 346.657100][T24890] loop0: rw=2049, sector=1800, nr_sectors = 4 limit=256 [ 346.715342][T24895] loop4: detected capacity change from 0 to 512 [ 346.776672][T24895] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.811816][T24900] loop9: detected capacity change from 0 to 2048 [ 346.826661][T24895] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 346.846069][ T28] audit: type=1400 audit(2000000690.496:2729): avc: denied { write } for pid=24894 comm="syz.4.8430" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 346.889706][T24900] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.907540][T24900] ext4 filesystem being mounted at /899/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 346.940853][T24900] EXT4-fs (loop9): shut down requested (2) [ 346.948169][T24900] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=12 [ 346.958815][T24900] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=12 [ 347.128808][ T120] kworker/u8:5: attempt to access beyond end of device [ 347.128808][ T120] loop0: rw=1, sector=1800, nr_sectors = 4 limit=256 [ 347.146265][T12685] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.153575][T22820] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.197246][T24906] netlink: 'syz.3.8436': attribute type 4 has an invalid length. [ 347.218831][T24906] netlink: 'syz.3.8436': attribute type 11 has an invalid length. [ 347.246725][T24908] ip_tables: iptables: counters copy to user failed while replacing table [ 347.260100][T24906] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.8436'. [ 347.374433][ T28] audit: type=1400 audit(2000000691.026:2730): avc: denied { read } for pid=24914 comm="syz.4.8438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 347.456528][T24922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8441'. [ 347.485507][T24922] netlink: 'syz.0.8441': attribute type 5 has an invalid length. [ 347.513726][T24922] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8441'. [ 347.573386][T10701] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.596753][T10701] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.626268][T10701] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.658556][T10701] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.665104][T24937] loop3: detected capacity change from 0 to 164 [ 347.709220][T24937] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 347.760155][T24937] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 347.805376][T24937] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 347.825085][T24943] program syz.0.8452 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 347.879338][ T28] audit: type=1400 audit(2000000691.526:2731): avc: denied { read } for pid=24944 comm="syz.9.8453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 347.991481][T24949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8455'. [ 348.024892][T24949] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8455'. [ 348.041657][T24952] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8456'. [ 348.044686][T24953] sg_write: data in/out 294976/136 bytes for SCSI command 0x0-- guessing data in; [ 348.044686][T24953] program syz.9.8466 not setting count and/or reply_len properly [ 348.065798][T24952] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.200976][T24958] loop0: detected capacity change from 0 to 512 [ 348.231060][T24958] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.8459: inode has both inline data and extents flags [ 348.269547][T24958] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 348.269938][T24958] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.8459: couldn't read orphan inode 15 (err -117) [ 348.279310][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 348.279341][ C0] EXT4-fs (loop0): initial error at time 2000000691: ext4_orphan_get:1399: inode 15 [ 348.279384][ C0] EXT4-fs (loop0): last error at time 2000000691: ext4_orphan_get:1399: inode 15 [ 348.316709][T24958] loop0: lost filesystem error report for type 5 error -117 [ 348.322611][T24958] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.353873][T24970] loop3: detected capacity change from 0 to 256 [ 348.383946][ T28] audit: type=1400 audit(2000000692.026:2732): avc: denied { write } for pid=24956 comm="syz.0.8459" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 348.654339][T18104] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.811585][T24994] netlink: 92 bytes leftover after parsing attributes in process `syz.3.8476'. [ 348.857794][T24996] mtrr: base(0x12000) is not aligned on a size(0x6000) boundary [ 348.988362][T25000] loop4: detected capacity change from 0 to 512 [ 349.029559][T25000] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0002] [ 349.076239][T25000] System zones: 1-12 [ 349.091113][T25000] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.8479: error while reading EA inode 32 err=-116 [ 349.113628][T25000] loop4: lost filesystem error report for type 5 error -117 [ 349.115518][T25000] EXT4-fs (loop4): Remounting filesystem read-only [ 349.123376][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 349.123398][ C1] EXT4-fs (loop4): initial error at time 2000000692: ext4_xattr_inode_iget:446 [ 349.123428][ C1] EXT4-fs (loop4): last error at time 2000000692: ext4_xattr_inode_iget:446 [ 349.178388][T25000] EXT4-fs warning (device loop4): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 349.194791][T25000] EXT4-fs (loop4): 1 orphan inode deleted [ 349.222146][T25000] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.277147][T22820] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.290756][ T28] audit: type=1400 audit(2000000692.936:2733): avc: denied { write } for pid=25007 comm="syz.3.8482" name="instances" dev="tracefs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 349.365164][T25011] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8483'. [ 349.609232][T25029] loop3: detected capacity change from 0 to 512 [ 349.983403][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 349.983436][ T28] audit: type=1400 audit(2000000693.636:2736): avc: denied { setopt } for pid=25049 comm="syz.7.8501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 350.116998][ T28] audit: type=1400 audit(2000000693.766:2737): avc: denied { read } for pid=25057 comm="syz.3.8505" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 350.149323][ T28] audit: type=1400 audit(2000000693.766:2738): avc: denied { open } for pid=25057 comm="syz.3.8505" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 350.181865][ T28] audit: type=1400 audit(2000000693.796:2739): avc: denied { ioctl } for pid=25057 comm="syz.3.8505" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 350.279692][T25065] loop4: detected capacity change from 0 to 128 [ 350.307204][T25065] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 350.342467][ T28] audit: type=1326 audit(2000000693.986:2740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25069 comm="syz.7.8511" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0639c1e0d9 code=0x7ffc0000 [ 350.355541][T25065] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 350.388183][ T28] audit: type=1326 audit(2000000694.036:2741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25069 comm="syz.7.8511" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0639c1e0d9 code=0x7ffc0000 [ 350.434292][ T28] audit: type=1326 audit(2000000694.036:2742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25069 comm="syz.7.8511" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0639c1e0d9 code=0x7ffc0000 [ 350.461394][ T28] audit: type=1326 audit(2000000694.036:2743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25069 comm="syz.7.8511" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f0639c1e0d9 code=0x7ffc0000 [ 350.489688][T25074] program syz.0.8513 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 350.499883][ T28] audit: type=1326 audit(2000000694.036:2744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25069 comm="syz.7.8511" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0639c1e0d9 code=0x7ffc0000 [ 350.552057][ T28] audit: type=1326 audit(2000000694.036:2745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25069 comm="syz.7.8511" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0639c1e0d9 code=0x7ffc0000 [ 350.615738][T22820] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 352.649096][T25160] netlink: 76 bytes leftover after parsing attributes in process `syz.7.8549'. [ 353.213330][T25208] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8568'. [ 353.237604][T25208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8568'. [ 353.372165][ T3410] kernel write not supported for file /full (pid: 3410 comm: kworker/1:6) [ 353.535373][T25230] scsi_strcpy_devinfo: vendor string '¼QTò?¬Ý]Ð+É,r' is too long [ 353.669036][T25240] netlink: 'syz.9.8585': attribute type 20 has an invalid length. [ 353.744027][T25246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8596'. [ 353.820930][T25250] loop9: detected capacity change from 0 to 512 [ 353.857149][T25250] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.019682][T25260] loop3: detected capacity change from 0 to 512 [ 354.055079][T25260] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 354.069965][T25260] System zones: 0-2, 18-18, 34-35 [ 354.089346][T25262] serio: Serial port ttyS3 [ 354.097267][T25260] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.121730][T25260] ext4 filesystem being mounted at /768/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 354.259421][T15336] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.420230][T25277] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8601'. [ 354.447774][T25277] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8601'. [ 354.471478][T25280] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8601'. [ 354.490778][T25280] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8601'. [ 354.514000][T12685] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.781726][T25296] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8609'. [ 354.866375][T25300] loop3: detected capacity change from 0 to 128 [ 355.015278][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 355.015296][ T28] audit: type=1400 audit(2000000698.730:2757): avc: denied { create } for pid=25306 comm="syz.3.8614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 355.093725][ T28] audit: type=1400 audit(2000000698.760:2758): avc: denied { sys_admin } for pid=25306 comm="syz.3.8614" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 355.170160][T25310] loop4: detected capacity change from 0 to 512 [ 355.217190][T25310] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 355.250084][T25310] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.267428][T25310] ext4 filesystem being mounted at /193/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 355.366242][T22820] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.394739][T25320] netlink: 'syz.0.8619': attribute type 2 has an invalid length. [ 355.537665][T25328] netlink: 16 bytes leftover after parsing attributes in process `syz.9.8624'. [ 355.700163][T25340] loop3: detected capacity change from 0 to 512 [ 355.732830][T25340] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 355.834763][T25340] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.8629: bad orphan inode 131083 [ 355.850812][T25340] loop3: lost filesystem error report for type 5 error -117 [ 355.852959][T25340] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.027001][T25355] loop9: detected capacity change from 0 to 512 [ 356.234172][T25366] loop4: detected capacity change from 0 to 512 [ 356.264655][T25366] EXT4-fs: Ignoring removed bh option [ 356.300961][T25366] EXT4-fs: Ignoring removed nomblk_io_submit option [ 356.327899][T25366] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.8641: inode has both inline data and extents flags [ 356.381141][T25366] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 356.381475][T25366] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.8641: couldn't read orphan inode 15 (err -117) [ 356.387631][T25379] loop9: detected capacity change from 0 to 512 [ 356.390963][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 356.415809][ C1] EXT4-fs (loop4): initial error at time 2000000700: ext4_orphan_get:1399: inode 15 [ 356.425475][ C1] EXT4-fs (loop4): last error at time 2000000700: ext4_orphan_get:1399: inode 15 [ 356.496124][T25379] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.509154][T25366] loop4: lost filesystem error report for type 5 error -117 [ 356.511739][T25366] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.543385][T25379] ext4 filesystem being mounted at /929/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 356.625493][ T28] audit: type=1400 audit(2000000700.340:2759): avc: denied { write } for pid=25378 comm="syz.9.8647" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 356.655054][T25366] EXT4-fs error (device loop4): __ext4_add_entry:2412: inode #2: comm syz.4.8641: Directory hole found for htree leaf block 0 [ 356.714464][T22820] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.719674][ T28] audit: type=1400 audit(2000000700.370:2760): avc: denied { write } for pid=25364 comm="syz.4.8641" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 356.835511][ T28] audit: type=1400 audit(2000000700.530:2761): avc: denied { bind } for pid=25387 comm="syz.4.8650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 357.498789][T12685] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.658194][T25416] __nla_validate_parse: 1 callbacks suppressed [ 357.658215][T25416] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8663'. [ 357.699834][T25418] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8664'. [ 357.735678][T25418] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8664'. [ 357.860038][ T28] audit: type=1326 audit(2000000701.570:2762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25427 comm="syz.9.8669" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa54676e0d9 code=0x0 [ 358.251627][T15336] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.400272][T25446] autofs4:pid:25446:validate_dev_ioctl: invalid path supplied for cmd(0xc018937b) [ 358.487945][T25448] netlink: 'syz.0.8678': attribute type 2 has an invalid length. [ 359.346535][T25486] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8695'. [ 359.558891][ T28] audit: type=1326 audit(2000000703.270:2763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25500 comm="syz.4.8703" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d860e0d9 code=0x7ffc0000 [ 359.611043][ T28] audit: type=1326 audit(2000000703.270:2764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25500 comm="syz.4.8703" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d860e0d9 code=0x7ffc0000 [ 359.664495][ T28] audit: type=1326 audit(2000000703.310:2765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25500 comm="syz.4.8703" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d860e0d9 code=0x7ffc0000 [ 359.706900][T25502] loop4: detected capacity change from 0 to 2048 [ 359.726892][ T28] audit: type=1326 audit(2000000703.310:2766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25500 comm="syz.4.8703" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d860e0d9 code=0x7ffc0000 [ 359.784979][T25502] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 359.974089][T22820] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.021368][T25515] netlink: 'syz.7.8707': attribute type 10 has an invalid length. [ 360.039782][T25515] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8707'. [ 360.071101][T25515] dummy0: entered promiscuous mode [ 360.090485][T25515] bridge0: port 3(dummy0) entered blocking state [ 360.109459][T25515] bridge0: port 3(dummy0) entered disabled state [ 360.137210][T25515] dummy0: entered allmulticast mode [ 360.163221][T25515] bridge0: port 3(dummy0) entered blocking state [ 360.169712][T25515] bridge0: port 3(dummy0) entered forwarding state [ 360.734981][T25541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8719'. [ 361.288874][T25549] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8721'. [ 361.359301][T25554] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25554 comm=syz.3.8725 [ 361.495493][T25565] device-mapper: ioctl: name not supplied when creating device [ 361.875946][T25583] netlink: 'syz.3.8737': attribute type 1 has an invalid length. [ 362.356123][T25614] vhci_hcd vhci_hcd.3: invalid port number 236 [ 362.454765][T25621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.469863][T25618] loop9: detected capacity change from 0 to 4096 [ 362.484703][T25618] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.498700][T25621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.526228][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 362.526247][ T28] audit: type=1400 audit(2000000706.240:2798): avc: denied { write } for pid=25617 comm="syz.9.8752" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 362.909241][T25630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8757'. [ 362.928898][T25630] netlink: 'syz.3.8757': attribute type 30 has an invalid length. [ 362.960403][T25630] vxlan0: entered promiscuous mode [ 362.964012][T25633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8757'. [ 362.981728][T25630] vxlan0: entered allmulticast mode [ 362.989786][T25632] program syz.0.8758 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 363.022401][ T362] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.031464][ T362] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.063429][ T362] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.088668][ T362] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.090044][T25633] netlink: 'syz.3.8757': attribute type 30 has an invalid length. [ 363.496904][T25618] EXT4-fs error (device loop9): ext4_do_update_inode:5742: inode #15: comm syz.9.8752: corrupted inode contents [ 363.527863][T25618] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 363.528367][T25618] EXT4-fs error (device loop9): ext4_dirty_inode:6639: inode #15: comm syz.9.8752: mark_inode_dirty error [ 363.561172][T25618] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 363.561610][T25618] EXT4-fs error (device loop9): ext4_do_update_inode:5742: inode #15: comm syz.9.8752: corrupted inode contents [ 363.590224][T25618] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 363.590665][T25618] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #15: comm syz.9.8752: mark_inode_dirty error [ 363.610961][T25665] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8773'. [ 363.635059][T25618] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 363.635995][T25618] EXT4-fs error (device loop9): ext4_do_update_inode:5742: inode #15: comm syz.9.8752: corrupted inode contents [ 363.659581][T25618] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 363.660104][T25618] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #15: comm syz.9.8752: mark_inode_dirty error [ 363.726834][T25618] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 363.730671][T25618] EXT4-fs error (device loop9): ext4_do_update_inode:5742: inode #15: comm syz.9.8752: corrupted inode contents [ 363.801252][T25618] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 363.806596][ T28] audit: type=1400 audit(2000000707.520:2799): avc: denied { mount } for pid=25671 comm="syz.3.8777" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 363.856134][T25618] EXT4-fs error (device loop9): ext4_truncate:4691: inode #15: comm syz.9.8752: mark_inode_dirty error [ 363.897956][T25618] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 363.899664][T25618] EXT4-fs error (device loop9): ext4_evict_inode:278: comm syz.9.8752: couldn't truncate inode 15 (err -117) [ 363.944742][ T28] audit: type=1400 audit(2000000707.530:2800): avc: denied { write } for pid=119 comm="kworker/0:2" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=76548 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 364.058865][T25692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8787'. [ 364.073023][T12685] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.277284][T25709] ip_tables: iptables: counters copy to user failed while replacing table [ 364.290302][T25703] bond1 (unregistering): Released all slaves [ 364.620187][ T28] audit: type=1326 audit(2000000708.330:2801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25725 comm="syz.9.8803" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa54676e0d9 code=0x0 [ 364.810843][ T28] audit: type=1400 audit(2000000708.520:2802): avc: denied { ioctl } for pid=25732 comm="syz.3.8805" path="socket:[77600]" dev="sockfs" ino=77600 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 364.837736][T25735] IPVS: Scheduler module ip_vs_ not found [ 365.000668][T25740] 8021q: adding VLAN 0 to HW filter on device bond1 [ 365.061943][T25740] bond0: (slave bond1): Enslaving as an active interface with a down link [ 365.181551][T25747] xt_hashlimit: size too large, truncated to 1048576 [ 365.726686][T25781] loop4: detected capacity change from 0 to 1024 [ 365.749685][ T28] audit: type=1400 audit(2000000709.460:2803): avc: denied { append } for pid=25785 comm="syz.3.8826" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 365.794649][T25781] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 365.828943][T25781] ext4 filesystem being mounted at /247/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 366.011235][T22820] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 366.057221][T25806] sctp: [Deprecated]: syz.3.8834 (pid 25806) Use of struct sctp_assoc_value in delayed_ack socket option. [ 366.057221][T25806] Use struct sctp_sack_info instead [ 366.230095][T25823] loop4: detected capacity change from 0 to 128 [ 366.977046][T25873] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 367.249889][T25888] loop3: detected capacity change from 0 to 128 [ 367.270763][T25888] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 367.332472][T25888] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 367.569229][T25902] netlink: 27 bytes leftover after parsing attributes in process `syz.0.8881'. [ 367.612773][T25903] tipc: Enabling of bearer rejected, failed to enable media [ 367.807320][T25909] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8877'. [ 367.899946][ T28] audit: type=1400 audit(2000000711.610:2804): avc: denied { write } for pid=25916 comm="syz.4.8887" name="kmsg" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 367.906820][T25919] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8888'. [ 367.987894][T25919] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8888'. [ 368.177183][T25943] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 368.431197][T25961] sd 0:0:1:0: PR command failed: 1026 [ 368.447118][T25961] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 368.461912][T25961] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 368.766649][T25983] loop4: detected capacity change from 0 to 128 [ 369.351850][T26005] netlink: 128 bytes leftover after parsing attributes in process `syz.4.8925'. [ 369.386716][T26005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8925'. [ 369.579856][ T2981] ================================================================== [ 369.587990][ T2981] BUG: KCSAN: data-race in atime_needs_update / inode_set_ctime_current [ 369.596357][ T2981] [ 369.598681][ T2981] write to 0xffff88811c1d1138 of 8 bytes by task 15916 on cpu 1: [ 369.606400][ T2981] inode_set_ctime_current+0x600/0x8e0 [ 369.611897][ T2981] simple_unlink+0x2d/0x80 [ 369.616331][ T2981] shmem_unlink+0x12d/0x140 [ 369.620987][ T2981] vfs_unlink+0x1c3/0x490 [ 369.625345][ T2981] filename_unlinkat+0x1dc/0x410 [ 369.630302][ T2981] __se_sys_unlink+0x2b/0xe0 [ 369.634906][ T2981] __x64_sys_unlink+0x1f/0x30 [ 369.639599][ T2981] x64_sys_call+0x2eb6/0x3020 [ 369.644390][ T2981] do_syscall_64+0x136/0x3c0 [ 369.649011][ T2981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.654921][ T2981] [ 369.657343][ T2981] read to 0xffff88811c1d1138 of 8 bytes by task 2981 on cpu 0: [ 369.665069][ T2981] atime_needs_update+0x2ef/0x3e0 [ 369.670110][ T2981] touch_atime+0x4a/0x300 [ 369.674446][ T2981] do_readlinkat+0x137/0x2f0 [ 369.679134][ T2981] __x64_sys_readlink+0x47/0x60 [ 369.684007][ T2981] x64_sys_call+0x2b51/0x3020 [ 369.688703][ T2981] do_syscall_64+0x136/0x3c0 [ 369.693332][ T2981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.699221][ T2981] [ 369.701533][ T2981] value changed: 0x00000000773596c7 -> 0x00000000773596c9 [ 369.708728][ T2981] [ 369.711043][ T2981] Reported by Kernel Concurrency Sanitizer on: [ 369.717186][ T2981] CPU: 0 UID: 0 PID: 2981 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 369.726034][ T2981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 369.736203][ T2981] ================================================================== [ 369.768679][ T28] audit: type=1400 audit(2000000713.370:2805): avc: denied { write } for pid=3284 comm="syz-executor" path="pipe:[2618]" dev="pipefs" ino=2618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 370.450370][ T49] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.587514][ T49] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.657434][ T49] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.738303][ T49] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.873129][ T49] bridge_slave_1: left allmulticast mode [ 370.878952][ T49] bridge_slave_1: left promiscuous mode [ 370.885457][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.917428][ T49] bridge_slave_0: left allmulticast mode [ 370.923222][ T49] bridge_slave_0: left promiscuous mode [ 370.930595][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.125323][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 371.141424][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 371.159523][ T49] bond0 (unregistering): Released all slaves [ 371.236267][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.248010][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.258712][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 371.275534][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.326833][ T49] veth1_macvtap: left promiscuous mode [ 371.335539][ T49] veth0_macvtap: left promiscuous mode [ 371.341374][ T49] veth1_vlan: left promiscuous mode [ 371.346854][ T49] veth0_vlan: left promiscuous mode [ 371.401710][ T28] audit: type=1400 audit(2000000715.110:2806): avc: denied { write } for pid=26015 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 371.469481][ T28] audit: type=1400 audit(2000000715.180:2807): avc: denied { write } for pid=26026 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 371.501271][ T49] team0 (unregistering): Port device team_slave_1 removed [ 371.523595][ T49] team0 (unregistering): Port device team_slave_0 removed [ 371.589099][ T3020] 8021q: adding VLAN 0 to HW filter on device eth9 [ 371.725937][ T28] audit: type=1400 audit(2000000715.440:2808): avc: denied { write } for pid=26029 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 371.760418][ T28] audit: type=1400 audit(2000000715.470:2809): avc: denied { write } for pid=26040 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 371.788396][ T3020] 8021q: adding VLAN 0 to HW filter on device eth10 [ 371.975592][ T28] audit: type=1400 audit(2000000715.690:2810): avc: denied { write } for pid=26043 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 372.012323][ T49] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.020485][ T28] audit: type=1400 audit(2000000715.730:2811): avc: denied { write } for pid=26054 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 372.045756][ T49] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.068692][ T3020] 8021q: adding VLAN 0 to HW filter on device eth11 [ 372.097075][ T49] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.107732][ T49] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.158982][ T49] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.169803][ T49] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.228993][ T49] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.239826][ T49] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.248336][ T28] audit: type=1400 audit(2000000715.960:2812): avc: denied { write } for pid=26057 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 372.299330][ T28] audit: type=1400 audit(2000000716.010:2813): avc: denied { write } for pid=26068 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 372.362071][ T3020] 8021q: adding VLAN 0 to HW filter on device eth12 [ 372.385070][ T49] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.395080][ T49] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.459889][ T49] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.472707][ T49] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.519870][ T49] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.530875][ T49] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.597828][ T3020] 8021q: adding VLAN 0 to HW filter on device eth14 [ 372.609935][ T49] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.620447][ T49] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.729931][ T49] netdevsim netdevsim100 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.741081][ T49] netdevsim netdevsim100 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.827879][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.838417][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.854887][ T3020] 8021q: adding VLAN 0 to HW filter on device eth15 [ 372.880660][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.891256][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.958811][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.969392][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.041062][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 373.041080][ T28] audit: type=1400 audit(2000000716.750:2818): avc: denied { write } for pid=26102 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 373.077131][ T28] audit: type=1400 audit(2000000716.790:2819): avc: denied { write } for pid=26113 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 373.108714][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.119276][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.134633][ T3020] 8021q: adding VLAN 0 to HW filter on device eth16 [ 373.223363][ T49] bridge_slave_1: left promiscuous mode [ 373.231674][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.242072][ T49] bridge_slave_0: left allmulticast mode [ 373.249792][ T49] bridge_slave_0: left promiscuous mode [ 373.258391][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.270895][ T49] dummy0: left allmulticast mode [ 373.276538][ T49] bridge0: port 3(dummy0) entered disabled state [ 373.285753][ T49] bridge_slave_1: left allmulticast mode [ 373.291485][ T49] bridge_slave_1: left promiscuous mode [ 373.299349][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.313917][ T28] audit: type=1400 audit(2000000717.030:2820): avc: denied { write } for pid=26116 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 373.339666][ T49] bridge_slave_0: left allmulticast mode [ 373.345608][ T49] bridge_slave_0: left promiscuous mode [ 373.351328][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.361780][ T28] audit: type=1400 audit(2000000717.060:2821): avc: denied { write } for pid=26127 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 373.388242][ T49] bridge_slave_1: left allmulticast mode [ 373.394794][ T49] bridge_slave_1: left promiscuous mode [ 373.400565][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.410405][ T49] bridge_slave_0: left allmulticast mode [ 373.416273][ T49] bridge_slave_0: left promiscuous mode [ 373.422156][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.725318][ T49] bond0 (unregistering): (slave bond1): Releasing backup interface [ 373.736213][ T49] bond0 (unregistering): Released all slaves [ 373.746324][ T49] bond1 (unregistering): Released all slaves [ 373.756896][ T3020] 8021q: adding VLAN 0 to HW filter on device eth25 [ 373.803836][ T49] tipc: Left network mode [ 373.838420][ T49] hsr_slave_0: left promiscuous mode [ 373.845810][ T49] hsr_slave_1: left promiscuous mode [ 373.853449][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.860978][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.870195][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.878151][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.888219][ T49] batman_adv: batadv0: Interface deactivated: dummy0 [ 373.896659][ T49] batman_adv: batadv0: Removing interface: dummy0 [ 373.914170][ T49] hsr_slave_0: left promiscuous mode [ 373.920740][ T49] hsr_slave_1: left promiscuous mode [ 373.940191][ T49] hsr_slave_0: left promiscuous mode [ 373.949178][ T49] hsr_slave_1: left promiscuous mode [ 373.956535][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.965784][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.970346][ T28] audit: type=1400 audit(2000000717.680:2822): avc: denied { write } for pid=26131 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 373.998044][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.006928][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 374.034056][ T28] audit: type=1400 audit(2000000717.750:2823): avc: denied { write } for pid=26142 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 374.097239][ T49] veth1_macvtap: left promiscuous mode [ 374.102994][ T49] veth0_macvtap: left promiscuous mode [ 374.108598][ T49] veth1_vlan: left promiscuous mode [ 374.113983][ T49] veth0_vlan: left promiscuous mode [ 374.120534][ T49] veth1_macvtap: left promiscuous mode [ 374.126194][ T49] veth0_macvtap: left promiscuous mode [ 374.131845][ T49] veth1_vlan: left promiscuous mode [ 374.137388][ T49] veth0_vlan: left promiscuous mode [ 374.144004][ T49] veth1_macvtap: left promiscuous mode [ 374.149589][ T49] veth0_macvtap: left promiscuous mode [ 374.155312][ T49] veth1_vlan: left promiscuous mode [ 374.160536][ T49] veth0_vlan: left promiscuous mode [ 374.393233][ T49] team0 (unregistering): Port device team_slave_1 removed [ 374.406992][ T49] team0 (unregistering): Port device team_slave_0 removed [ 374.505452][ T49] team0 (unregistering): Port device team_slave_1 removed [ 374.520570][ T49] team0 (unregistering): Port device team_slave_0 removed [ 374.621566][ T49] team0 (unregistering): Port device team_slave_1 removed [ 374.635811][ T49] team0 (unregistering): Port device team_slave_0 removed [ 374.685433][ T3020] 8021q: adding VLAN 0 to HW filter on device eth26 [ 374.833721][ T28] audit: type=1400 audit(2000000718.550:2824): avc: denied { write } for pid=26150 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 374.888594][ T28] audit: type=1400 audit(2000000718.600:2825): avc: denied { write } for pid=26162 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 374.931762][ T3020] 8021q: adding VLAN 0 to HW filter on device eth27 [ 375.071621][ T28] audit: type=1400 audit(2000000718.780:2826): avc: denied { write } for pid=26165 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 375.104603][ T28] audit: type=1400 audit(2000000718.820:2827): avc: denied { write } for pid=26176 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 375.133349][ T3020] 8021q: adding VLAN 0 to HW filter on device eth28 [ 375.268976][ T49] IPVS: stop unused estimator thread 0... [ 375.276710][ T49] IPVS: stop unused estimator thread 0... [ 375.329584][ T3020] 8021q: adding VLAN 0 to HW filter on device eth29 [ 375.508733][ T3020] 8021q: adding VLAN 0 to HW filter on device eth30 [ 375.714735][ T3020] 8021q: adding VLAN 0 to HW filter on device eth31 [ 375.888997][ T3020] 8021q: adding VLAN 0 to HW filter on device eth32 [ 376.066130][ T3020] 8021q: adding VLAN 0 to HW filter on device eth33 [ 376.253950][ T3020] 8021q: adding VLAN 0 to HW filter on device eth34