last executing test programs: 1m17.099944791s ago: executing program 1 (id=783): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c900200000000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ff"]) 1m16.500301996s ago: executing program 1 (id=789): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8004) 1m15.720350051s ago: executing program 1 (id=796): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'ip6tnl0\x00', 0x0, 0x29, 0x1c, 0x5, 0x3, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x7, 0x80, 0x7f, 0x2c}}) 1m15.441382788s ago: executing program 1 (id=799): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x15, 0x0, 0x1) 1m14.941607297s ago: executing program 1 (id=805): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1010000, &(0x7f0000000240)=ANY=[@ANYBLOB='iocharset=cp864,iocharset=ate=1,iocharset=cp857,dos1xfloppy,utf8=1,utf8=0,uni_xlate=1,uni_xlate=0,uni_xlate=1,shortname=winnt,codepage=1251,utf8=0,shortname=lower,utf8=0,check=strict,iocharset=cp936,\x00'/212], 0x1, 0x36b, &(0x7f0000000500)="$eJzs3U1oY0UcAPB/+tKkXdD2JgpC9CZo2e5NL7ZIFxZ7UQl+HMTgdlWSKrRYbA+b1oPiUfCoJ28KevAgHkVQxJsHr64gq+JB97bg4kjy8vGapN3uYivF3w+aTGfmP/N/HySv4WX6wlI0L07HpWvXrsbMTCnKS48txfVSzEcWfbsxrjKhDgA4Ha6nFH+m3GjbzOSQ0gmkBQAco+77/0sRUYv5vObNrw/rn7z7A8Cp1/v7f/awPgd8DhDx2rGkBAAcs7HP/+/f11zp/pT7v5YLdwUAAKfVU88+9/jyasSTtdpMxPrbW/WtejwybF++FK9EK9bibMzFjYj8QqHzUOo+nr+wunK2Vqu145f5qEfEVC+wnl8pLGfd+GosxlzM9+J7Vxsppez8Z6sri7WuiNhtd+eP9dJWfTrO9Ob/8UysDS88+oN0nyIurK6cq/UGqK/349sRe8MbFTr5L8RcfP/iYJiU+ncwrq5cXuwnPYzfqlfj4mAvHPgJCAAAAAAAAAAAAAAAAAAAAAAA3JaF2sD8YP2c1HnOV8pZWJjQ3l0fJ4/vrQ+0l68PlKopUvrjjYfq72Sxb32g0fV5tiwkCAAAAAAAAAAAAAAAAAAAAAOb25VotFprG5vbO81iob2xuT0VEZ2aV7/95KvZGO9zk0I5n6IaMZii1pt2p9lIWb9zyiLGw7PO5P2ajz4fZFzsUx1sxcQ0qgc3tVp33Pfz+8Oae7P+yH8P+2QxeQOzQhqPjoy8fmee0q3sqEHhXLGmOj77lZRSoeatYvjl58cHjFJE+dYP3E5zKg7ukzqFb66+fHd/7ze+TLkHHpx7+sp7H/7WbLQ6M0f3CFY2Nm+kZqPU73yE2XvDpe4hGJ4bpcgLpeKZUD5swL39NY3sh9+fuefd7462E1Kx5vXO+TzSJ8s359PR8Epe6KQ50jQ7DJ/ubURrbXrCyX+zwm0c07s++OLjlH769chTDE2NvWyU/p1XHwAAAAAAAAAAAAAAAAAAoKjwXfHel67becP0YVEPP3FC6QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAiRj+//9CYW83RmqOUvirPSGquraxGVH5rzcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/uX8CAAD//3wwZok=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) 1m14.417086887s ago: executing program 1 (id=808): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@dioread_nolock}, {@nodelalloc}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noauto_da_alloc}, {@commit={'commit', 0x3d, 0x80000001}}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@errors_remount}, {@grpquota}, {@noblock_validity}, {@errors_continue}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@data_err_ignore}]}, 0x11, 0x562, &(0x7f0000000480)="$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") 1m14.385534419s ago: executing program 32 (id=808): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@dioread_nolock}, {@nodelalloc}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noauto_da_alloc}, {@commit={'commit', 0x3d, 0x80000001}}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@errors_remount}, {@grpquota}, {@noblock_validity}, {@errors_continue}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@data_err_ignore}]}, 0x11, 0x562, &(0x7f0000000480)="$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") 3.403217133s ago: executing program 0 (id=1546): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r0, &(0x7f0000000100), 0x41000004, 0x0) 3.121772279s ago: executing program 0 (id=1551): syz_open_dev$evdev(0x0, 0x0, 0x802) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100002b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) 3.047839763s ago: executing program 0 (id=1552): mkdir(0x0, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB="000005000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x25dfdbfd, {{@in=@multicast1, @in=@remote, 0x3, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x1, 0x0, 0x80}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tmpl={0x184, 0x5, [{{@in=@multicast2, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x34ff, 0x0, 0x2}, {{@in=@local, 0x0, 0x3c}, 0xa, @in6=@empty, 0x2, 0x0, 0x0, 0x0, 0x800, 0x800, 0xfffffffc}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@loopback, 0x3503, 0x3, 0x2, 0x0, 0x0, 0x200}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x0, 0x1, 0x1, 0x0, 0xabf, 0x1000000}, {{@in6=@loopback, 0x4d4, 0x3c}, 0x0, @in=@multicast1, 0x3, 0x0, 0x1, 0x8, 0xb, 0x0, 0x400}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x33}, 0x2, @in=@remote, 0x0, 0x1, 0x2, 0x0, 0x1}]}]}, 0x23c}}, 0x4000) 2.133250846s ago: executing program 5 (id=1560): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bind$unix(0xffffffffffffffff, 0x0, 0x0) munmap(&(0x7f0000584000/0x800000)=nil, 0x800000) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x545, &(0x7f0000001300)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc3}}) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x3) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sync() 1.980950265s ago: executing program 5 (id=1561): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r0 = open(&(0x7f0000000100)='./file1\x00', 0x109042, 0x88) fallocate(r0, 0x10, 0x0, 0x7000000) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 1.980777145s ago: executing program 5 (id=1562): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/fib_triestat\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000740)=""/208, 0xd0}], 0x1, 0x80, 0x9) 1.924048489s ago: executing program 5 (id=1564): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) close(r3) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 1.923783709s ago: executing program 2 (id=1566): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000000000000000800090001"], 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x80a, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b0000", 0x17}], 0x1}, 0x0) 1.907980119s ago: executing program 2 (id=1567): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x40}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x4001) socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}}, 0x20004055) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x40810) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.870479532s ago: executing program 2 (id=1568): r0 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r0, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002280), 0x68c01, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, 0x0) write$binfmt_format(r2, &(0x7f0000006240)='-1\x00', 0x3) fstat(r1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r3, 0x0, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x45833af90e4a19ff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) 1.811901815s ago: executing program 2 (id=1569): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmsg(r0, &(0x7f0000001040)={0x0, 0x0, 0x0}, 0x1) r1 = getpgid(0x0) r2 = syz_pidfd_open(r1, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) setns(r3, 0x66020000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001bb500b9a01", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = accept4$nfc_llcp(r3, 0x0, &(0x7f0000000200), 0x80000) ftruncate(r5, 0x2) r6 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, 0x0, 0x25, 0x5}, 0x14) sched_setscheduler(r6, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x10, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x200, {0x0, 0x0, 0x0, r10, {0xfff2, 0x9}, {0x10}, {0x9, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) umount2(&(0x7f0000000040)='.\x00', 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) 1.251391268s ago: executing program 0 (id=1570): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x586, &(0x7f0000000900)="$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") chdir(&(0x7f00000003c0)='./bus\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r3, 0x1, 0x38, &(0x7f0000006080)=""/241, &(0x7f0000000280)=0xf1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x108) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r4 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xffffffff, 0x10, 0x7}) 950.205175ms ago: executing program 2 (id=1575): openat(0xffffffffffffff9c, 0x0, 0x442, 0x40) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x1000000, &(0x7f00000000c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x80000001, 0x4, 0x6, 0x10008, r0, 0x101, '\x00', 0x0, r0, 0x0, 0x1, 0x1, 0xff4e, @void, @value, @value=r0}, 0x50) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0xf4ff) 775.990136ms ago: executing program 3 (id=1579): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000040)={[{@data_err_ignore}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x10000005}}, {@nolazytime}, {@nobh}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$eJzs281rHOUfAPDvTF7a/vqS/Gp9aa0aLUJQTJq0ag9eFAWRioIe6jEm2xK6baSJYmuxqYgnQQp6Fo+if4E3EUQ9CV49eZJC0V7aeorM7Ey72WYTYzadmP18YHafZ+bZnee7z7w8+zy7AXStoewhidgREb9GxEAju7jAUOPp+tXzkzeunp9MYmHhtT+SvNy1q+cny6Ll67YXmeE0Iv0wKXay2OzZcycn6vXamSI/OnfqrdHZs+eeeOfUxInaidrp8SNHDh8ae/qp8Sc7EmcW17V978/s3/viG5denjx26c0fv87qu6PY3hxHpwxlgf+5kGvd9mind1axnU3ppLfCirAqPRGRNVdffv4PRE/caryBeOGDSisHrKvs3rSl/eb5BWATS6LqGgDVKG/02fffcrlDXY8N4cqzjS9AWdzXi6WxpTfSokxfy/fbThqKiGPzf32eLbFO4xAAAM0+nvzsaH9EvHfjq5eyvsdARJTjQffkj7/lj7uKOZTBiPh/ROyOiLsiYk9E3F2UvTci7ltjfW7v/6SX1/iWy8r6f88Uc1uL+39l7y8Ge4rczjz+vuT4dL12sPhMhqNvS5YfW2Yf3z7/yyfttjX3/7Il23/ZFyzqcbm3ZYBuamJuIu+UdsCVixH7epeKP7k5E5BExN6I2Le6t95VJqYf+3J/u0Irx7+MDswzLXyRhTefxT8fLfGXkub5yenb5idHt0a9dnC0PCpu99PPH73abv9rir8DrtQaz03t31pkMGmer53t7P7/5fGf9iev5/PM/cW6dyfm5s6MRfQnR/P8ovXjt15b5svy2fE/fGDp83938Zos/vsjIjuIH4iIByPioaLuD0fEIxFxYJkYf3hu5fgjraj9L0ZMLXn9u3n8t7T/6hM9J7//pt3+/1n7H85Tw8Wa/Pq3gqWqk10uWiu4ls8OAAAA/ivS/DfwSTpyM52mIyON3/Dvif+l9ZnZucePz7x9eqrxW/nB6EvLka6BYjy0Pl2vjSXzxTs2xkfHi7Hicrz0UDFu/GnPtjw/MjlTn6o4duh229uc/5nfe6quHbDOti25drz/jlcEqEDrPHq6OHvhlXAxgM3K/7Whe61w/jf/DwbYZNz/oXstdf5faMmbC4DNyf0fupfzH7pU+l3VNQAq5P4PXWkt/+tfx8TWjVGNahIbtVHyRESZSDdEfSTWKVH1lQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAz/g4AAP//K2Lmiw==") 775.683046ms ago: executing program 2 (id=1580): mkdir(0x0, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB="000005000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x25dfdbfd, {{@in=@multicast1, @in=@remote, 0x3, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x1, 0x0, 0x80}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tmpl={0x184, 0x5, [{{@in=@multicast2, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x34ff, 0x0, 0x2}, {{@in=@local, 0x0, 0x3c}, 0xa, @in6=@empty, 0x2, 0x0, 0x0, 0x0, 0x800, 0x800, 0xfffffffc}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@loopback, 0x3503, 0x3, 0x2, 0x0, 0x0, 0x200}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x0, 0x1, 0x1, 0x0, 0xabf, 0x1000000}, {{@in6=@loopback, 0x4d4, 0x3c}, 0x0, @in=@multicast1, 0x3, 0x0, 0x1, 0x8, 0xb, 0x0, 0x400}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x33}, 0x2, @in=@remote, 0x0, 0x1, 0x2, 0x0, 0x1}]}]}, 0x23c}}, 0x4000) 775.485186ms ago: executing program 3 (id=1581): socket$inet6(0xa, 0x3, 0xff) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@data_err_ignore}, {@debug}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x4e8, &(0x7f00000016c0)="$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") r0 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r0, 0x2007ffc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @loopback}, 0x80004, 0x0, 0xffffffff}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000100), 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendfile(r0, r0, 0x0, 0x2000000000006) creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000140)='mountstats\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0xf0ffffffffffff, 0x0, 0x88d0}, 0x40010) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) 617.510184ms ago: executing program 3 (id=1582): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x18c, 0x30, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [{0x94, 0x1, [@m_mirred={0x90, 0x6, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x947, 0xffffffffffffffff, 0x94, 0xc43}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x1, 0x5, 0x8001, 0xaf4}, 0x2}}]}, {0x21, 0x6, "cc81c7e04bd8de9bfd134ac033898f89eb6191b423db628fbaf263ee7f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, {0xe4, 0x1, [@m_simple={0xe0, 0x2, 0x0, 0x0, {{0xb}, {0xb4, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xa4, 0x3, '\xbb\xbb\x9b\xbb\xbb\xbbk\xf4\x92\x87#2S\x80\xc3\xf7\x8c\x1e\xba9\xaf}i\x9a\x01\x9f\x19\xe3\xbcw\x94\xb4\xef\x15\xc4\xd7b\xad N\xfe\xae\x01n\x98P\xb8\x12\x1d$\xb2\rF\xccW\x15\xf3\xcc\xb4\x15\a\xf1u\x88\xbc\xbb\xae\xfb\v A\x8aT\xdaD\x80\xddC\xedm4\xcb1\xde\x14\f\x15\xe6\x93\xb5v_\xcb\xf8\xf8a\xaa8\x8ba\xab\x94e\a\xa4\xc5\xdev#\x03e\xd1\xf2\x02\x82\xde~=\x87\x80g\x9c(\xf7\xf4\xe6\xd2\xdf\xd3%\xec\x8c\b6&\xa3\xad\x83\xae\x92\x14\xabh\xef\xdf\xd8gF\xd6\xc1-\xfbt\x13\x028\xda\xfb\\\xbc'}, @TCA_DEF_DATA={0xb, 0x3, 'mirred\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4008880}, 0x20000080) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="b70000000000000007"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 588.651636ms ago: executing program 3 (id=1583): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000440)=[{0x6, 0x0, 0x0, 0x20000}]}, 0x10) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) sendto$inet(r1, &(0x7f00000023c0)="8ce2ad4d4f95e0", 0x7, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) 571.896247ms ago: executing program 3 (id=1584): r0 = syz_io_uring_setup(0x94f, &(0x7f00000016c0), &(0x7f0000000080)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x231a, 0x0, 0x0, 0x0, 0x0) 500.119161ms ago: executing program 3 (id=1585): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 447.208085ms ago: executing program 4 (id=1589): r0 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r0, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002280), 0x68c01, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, 0x0) write$binfmt_format(r2, &(0x7f0000006240)='-1\x00', 0x3) fstat(r1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r3, 0x0, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) 283.857854ms ago: executing program 5 (id=1590): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@abort}, {@nodelalloc}]}, 0x1, 0x25f, &(0x7f0000000380)="$eJzs3U9oFFccB/DfzO42TbKUtL0USv9AKaUNhPRW6CW9tBAoIZRSaAsppfTSYoSY4M148uJBj6KSk5cg3oweJZfgRRE8Rc0hXgQNHgweVFzZnQ3knyZmNzvifD6w2ZnJm/d7w8z3TQiZbACF1RcRQxFRioj+iKhERLK+wefZq6+5OtO9MBZRq/3yMGm0y9Yza/v1RsR0RHwXEfNpEv+VI6bm/lh+vPjTV8cnK1+em/u9u6MH2bSyvPTz6tmRYxeHv526fvP+SBJDUd1wXO2XbLOtnER8sB/F3hBJOe8RsBujhy/cquf+w4j4opH/SqSRnbwTE+/MV+KbMy/b9+SDGx93cqxA+9Vqlfo9cLoGFE4aEdVI0oGIyJbTdGAg+xn+dqkn/X984lD/v+OTB/7Je6YC2qUasfTj5a5LvZvyf6+U5R94S2W/lFr6dXT2Tn1htZT3gICO+CR7q9//+/868nXIPxSO/ENxyT8Ul/xDcck/FJf8Q3HJPxTE8+Yf+63bJP9QXPIPxbXn/J96tn+DAjpiff4BgGKpde3pqeH2PoQM5CLv+QcAAAAAAAAAAAAAAAAAANhqpnthbO3Vnh7LO7a4ejpi5Yes6db6pcbnEUe82/ja8yjZ0GOyqwqv9udnLXbQovM5P3393t1861/7NNfyjf96N300IgbL5a3XX9K8/vbu/R2+X/m7xQKvKdm0/v1vna2/2dPZfOsPL0Zcqc8/g9vNP2l81Hjffv6p1s9fi/UPPmmxAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADrmRQAAAP//bpp05Q==") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) symlink(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x80) 283.625184ms ago: executing program 4 (id=1591): munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) 276.020614ms ago: executing program 5 (id=1592): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000180)='./file1\x00', 0x300001a, &(0x7f0000001e80)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0xfc, 0x2c3, &(0x7f0000000b00)="$eJzs3U9rY1UUAPDzkjR91UWKuFEEH+jCVZm6ddMqI4hdKRHUjcXpgCRloIWCI1hnNZ/Apfg13Lpz7TcQxJ3gbgapXHn/msQmnahpBzq/36a3995z38k7j2SVk89eORzduZfFg0e/RJ5n0dmJnXicxWZ0ovVN9AIAuDkepxR/pIhYq//Plo7sda4uKwDgKtWf/7WnnQsAcD0+/PiT93f39m5/UBR5vDR4eDLMIuLw4cmwXt+9G1/EOA7iVgziLCKdq8fvvrd3O3pFaTNePzw9GZ7MnL/7e2xU8dsxiM358dtFrYkfRpR/1+K5KGL37lp71CBenB//5pz4GPbjjdem8t+KQfz8edyLcdyJMnYS//V2UbyTvn301aflZcr4rBPD9WpfYyMida+tKAAAAAAAAAAAAAAAAAAAAAAA3HhbRZHV7Xuq/j3lVNN/p3tWrW8Vrc3Z/jx1/Hm/4Lo/UIqmRc9piu/a/jq3iqJIzcZJfC9e7vlhAQAAAAAAAAAAAAAAAAAAACgdf3l/tD8eHxz970F3tD9uuwG0X+v/rwfuTM28GvdH+93FB64vf63pbgNlrpdujl4vVnBbnjyIHzfKfA6Ojn+rZvKZPd83+f77k9cnxf2oCW8Ls9JX8cLb5xkWzVJ7k0f72ZOulbeF+2F6qR9Lp5FlMzNVbccHR6l6JM7SbE3zBTezv4K7UT6j/efnLv2VUlrunLd+rWvUzGRVi43l0lhrBguflvxiLX5afODct4s/U0rdVbzvAAAAAAAAAAAAAAAAAAAAF81+cfofHlwa2rmypAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgmk1+/78d5BExO3NhcNoEX7anGfTj6Pgpv0QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACeAX8HAAD///NmSpE=") inotify_add_watch(0xffffffffffffffff, 0x0, 0x400017e) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) 266.536645ms ago: executing program 4 (id=1593): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) syz_clone3(&(0x7f0000000300)={0x1000800, &(0x7f0000000000), 0x0, &(0x7f00000000c0)=0x0, {0x3f}, 0x0, 0x0, &(0x7f0000000100)=""/58, &(0x7f0000000280)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}, 0x58) prlimit64(r1, 0xd, &(0x7f0000000140)={0x2000000089e8, 0x2}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r5}]}, 0x20}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x192}}, 0x20}}, 0x0) 211.848668ms ago: executing program 4 (id=1594): ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000000040)={0x4}) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x1, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000006000000010000007f00000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={r0, &(0x7f0000000080), &(0x7f0000000140)=""/241}, 0x20) 117.971154ms ago: executing program 4 (id=1595): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x2b, 0x13, 0x3, 0xffffffff, 0xb, 0xa9, 0x5, 0x2, 0x1}) 86.081685ms ago: executing program 4 (id=1596): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000340)='\x00', 0xfffffffffffffeab, 0x404e0c5, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000900)='.U/]', 0x4, 0x8012, 0x0, 0x0) 85.363745ms ago: executing program 0 (id=1597): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000140)) 0s ago: executing program 0 (id=1598): r0 = socket(0x10, 0x3, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xf30, 0x111, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xc, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0xb, {[@global=@item_4={0x3, 0x1, 0x5, "da8f7d37"}, @global=@item_012={0x2, 0x1, 0x4, "c1ba"}, @global=@item_012={0x0, 0x1, 0x9}, @global=@item_012={0x1, 0x1, 0x4, "9e"}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x1, 0x1, {0x22, 0xb61}}}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @loopback, 0xa}, 0x1c) sendmsg$nl_route(r0, 0x0, 0x4800) kernel console output (not intermixed with test programs): t3 file system using the ext4 subsystem [ 79.938850][ T4977] netlink: 4 bytes leftover after parsing attributes in process `syz.4.481'. [ 79.949736][ T4974] EXT4-fs (loop3): 1 truncate cleaned up [ 79.965838][ T4974] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.980104][ T4977] bond0: (slave syz_tun): Releasing backup interface [ 79.982354][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 79.982393][ T28] audit: type=1400 audit(1770971903.273:235): avc: denied { ioctl } for pid=4972 comm="syz.3.483" path="/93/file0/memory.stat" dev="loop3" ino=18 ioctlcmd=0x6628 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 80.055974][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.077817][ T4984] netlink: 'syz.4.485': attribute type 10 has an invalid length. [ 80.113880][ T4987] support for the xor transformation has been removed. [ 80.184497][ T28] audit: type=1400 audit(1770971903.473:236): avc: denied { create } for pid=4992 comm="syz.3.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 80.209457][ T4995] loop2: detected capacity change from 0 to 256 [ 80.221107][ T4996] loop4: detected capacity change from 0 to 1024 [ 80.227907][ T4996] EXT4-fs: Ignoring removed orlov option [ 80.236909][ T28] audit: type=1400 audit(1770971903.533:237): avc: denied { module_request } for pid=4988 comm="syz.2.488" kmod="nls_i" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 80.263592][ T28] audit: type=1400 audit(1770971903.533:238): avc: denied { setopt } for pid=4992 comm="syz.3.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 80.290684][ T4995] FAT-fs (loop2): IO charset i not found [ 80.297198][ T4996] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.324459][ T28] audit: type=1400 audit(1770971903.613:239): avc: denied { mounton } for pid=4994 comm="syz.4.490" path="/95/file1/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 80.344535][ T4996] Trying to write to read-only block-device loop4 [ 80.382736][ T28] audit: type=1400 audit(1770971903.673:240): avc: denied { perfmon } for pid=5007 comm="syz.0.493" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 80.382794][ T4996] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 80.428383][ T28] audit: type=1400 audit(1770971903.703:241): avc: denied { bpf } for pid=5007 comm="syz.0.493" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 80.455289][ T28] audit: type=1400 audit(1770971903.743:242): avc: denied { rmdir } for pid=3311 comm="syz-executor" name="lost+found" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.479038][ T28] audit: type=1400 audit(1770971903.743:243): avc: denied { unlink } for pid=3311 comm="syz-executor" name="file1" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 80.508917][ T28] audit: type=1400 audit(1770971903.753:244): avc: denied { unmount } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 80.533029][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.547962][ T5012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.496'. [ 80.628438][ T5020] loop0: detected capacity change from 0 to 512 [ 80.658407][ T5020] EXT4-fs: Ignoring removed bh option [ 80.669055][ T5020] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 80.685071][ T5020] EXT4-fs (loop0): 1 truncate cleaned up [ 80.691475][ T5020] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.764265][ T5025] loop1: detected capacity change from 0 to 1024 [ 80.800768][ T5025] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 80.827214][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.838548][ T5025] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.927659][ T405] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: comm kworker/u8:6: lblock 0 mapped to illegal pblock 0 (length 1) [ 80.967802][ T5032] loop0: detected capacity change from 0 to 128 [ 81.006464][ T5034] mmap: syz.2.504 (5034) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 81.093554][ T5032] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 81.096123][ T405] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 81.118228][ T405] EXT4-fs (loop1): This should not happen!! Data will be lost [ 81.118228][ T405] [ 81.128940][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 81.165311][ T5032] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.255268][ T3306] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 81.288536][ T5050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.509'. [ 81.696019][ T5058] loop4: detected capacity change from 0 to 128 [ 82.194522][ T5068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.236895][ T5068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.425923][ T5079] loop1: detected capacity change from 0 to 512 [ 82.446723][ T5079] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.478712][ T5079] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.517237][ T5084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.524'. [ 82.592878][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.702544][ T5093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.528'. [ 82.713994][ T5095] loop1: detected capacity change from 0 to 512 [ 82.735222][ T5093] netlink: 20 bytes leftover after parsing attributes in process `syz.0.528'. [ 82.769807][ T5095] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 82.924714][ T5098] netlink: 'syz.0.529': attribute type 10 has an invalid length. [ 83.463532][ T5116] loop1: detected capacity change from 0 to 512 [ 83.472921][ T5116] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 83.484232][ T5116] EXT4-fs (loop1): 1 truncate cleaned up [ 83.497987][ T5116] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.553594][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.571702][ T5124] loop2: detected capacity change from 0 to 512 [ 83.585777][ T5124] EXT4-fs: Ignoring removed bh option [ 83.598152][ T5124] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 83.619997][ T5124] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.540: corrupted in-inode xattr: e_value size too large [ 83.647427][ T5124] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 83.647599][ T5124] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.540: couldn't read orphan inode 15 (err -117) [ 83.671734][ T5124] loop2: lost filesystem error report for type 5 error -117 [ 83.672419][ T5124] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.707744][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.776007][ T5133] loop2: detected capacity change from 0 to 512 [ 83.808354][ T5133] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 83.820504][ T5133] EXT4-fs (loop2): invalid journal inode [ 83.826821][ T5133] EXT4-fs (loop2): can't get journal size [ 83.852104][ T5133] EXT4-fs (loop2): 1 truncate cleaned up [ 83.866811][ T5133] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.915300][ T5133] EXT4-fs warning (device loop2): ext4_group_add:1736: No reserved GDT blocks, can't resize [ 83.940356][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.032302][ T5136] loop3: detected capacity change from 0 to 512 [ 84.063547][ T5136] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 84.078236][ T5136] EXT4-fs (loop3): 1 truncate cleaned up [ 84.084550][ T5136] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.098395][ T5136] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.559530][ T5160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.595160][ T5160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.223595][ T5187] ip6t_rpfilter: unknown options [ 87.374712][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 87.374730][ T28] audit: type=1400 audit(1770971910.663:253): avc: denied { ioctl } for pid=5205 comm="syz.1.571" path="socket:[9752]" dev="sockfs" ino=9752 ioctlcmd=0xf508 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 87.423666][ T5208] loop4: detected capacity change from 0 to 1024 [ 87.492494][ T5214] loop1: detected capacity change from 0 to 1024 [ 87.764272][ T5214] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 87.776550][ T5214] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.791392][ T5214] EXT4-fs error (device loop1): ext4_lookup:1785: inode #15: comm syz.1.575: inode has both inline data and extents flags [ 87.825797][ T5220] loop0: detected capacity change from 0 to 2048 [ 87.917827][ T5220] EXT4-fs: Ignoring removed i_version option [ 87.979967][ T5214] EXT4-fs (loop1): Remounting filesystem read-only [ 88.000786][ T5228] loop3: detected capacity change from 0 to 256 [ 88.016788][ T5220] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.071596][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 88.089004][ T5228] vfat: Bad value for 'gid' [ 88.097491][ T5220] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.123085][ T5228] vfat: Bad value for 'gid' [ 88.208465][ T5233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.221938][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.256326][ T5233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.277639][ T5240] __nla_validate_parse: 4 callbacks suppressed [ 88.277658][ T5240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.583'. [ 88.305015][ T5240] netlink: 20 bytes leftover after parsing attributes in process `syz.3.583'. [ 88.319607][ T5240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.583'. [ 88.361574][ T5240] netlink: 20 bytes leftover after parsing attributes in process `syz.3.583'. [ 88.396071][ T28] audit: type=1400 audit(1770971911.683:254): avc: denied { create } for pid=5247 comm="syz.2.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 88.421778][ T5250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.587'. [ 88.435680][ T28] audit: type=1400 audit(1770971911.723:255): avc: denied { sys_admin } for pid=5247 comm="syz.2.586" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 88.549957][ T5259] loop2: detected capacity change from 0 to 512 [ 88.766057][ T5259] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 88.919258][ T5259] EXT4-fs (loop2): 1 truncate cleaned up [ 88.938325][ T5265] loop1: detected capacity change from 0 to 136 [ 88.959759][ T5265] ISOFS: Unable to identify CD-ROM format. [ 89.070634][ T5259] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.149492][ T28] audit: type=1400 audit(1770971912.443:256): avc: denied { add_name } for pid=5258 comm="syz.2.591" name="blkio.bfq.avg_queue_size" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 89.227553][ T5269] loop1: detected capacity change from 0 to 512 [ 89.238289][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.250931][ T5269] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 89.277379][ T5269] EXT4-fs (loop1): blocks per group (34) and clusters per group (32768) inconsistent [ 89.358484][ T5274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.598'. [ 89.372039][ T5274] netlink: 20 bytes leftover after parsing attributes in process `syz.0.598'. [ 89.382722][ T5274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.598'. [ 89.403667][ T5274] netlink: 20 bytes leftover after parsing attributes in process `syz.0.598'. [ 89.406634][ T5276] loop1: detected capacity change from 0 to 1024 [ 89.422325][ T5279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.599'. [ 89.498586][ T5282] loop0: detected capacity change from 0 to 2048 [ 89.562897][ T28] audit: type=1400 audit(1770971912.853:257): avc: denied { block_suspend } for pid=5283 comm="syz.2.601" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 89.595980][ T5282] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.669636][ T5296] netlink: 'syz.3.605': attribute type 10 has an invalid length. [ 89.681175][ T5282] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.704965][ T28] audit: type=1400 audit(1770971912.973:258): avc: denied { create } for pid=5293 comm="syz.1.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 89.793538][ T5282] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #2: block 16: comm syz.0.600: bad entry in directory: directory entry overrun - offset=108, inode=646161, rec_len=4096, size=4096 fake=0 [ 89.976450][ T28] audit: type=1400 audit(1770971912.993:259): avc: denied { connect } for pid=5293 comm="syz.1.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 90.039544][ T5282] EXT4-fs (loop0): Remounting filesystem read-only [ 90.094160][ T28] audit: type=1400 audit(1770971912.993:260): avc: denied { write } for pid=5293 comm="syz.1.604" path="socket:[9206]" dev="sockfs" ino=9206 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 90.122712][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.967504][ T5319] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 90.967504][ T5319] The task syz.0.608 (5319) triggered the difference, watch for misbehavior. [ 91.083059][ T5324] loop2: detected capacity change from 0 to 512 [ 91.111905][ T5324] EXT4-fs: Ignoring removed nobh option [ 91.156168][ T5324] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 91.217787][ T5324] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.614: iget: bad i_size value: 38620345925642 [ 91.268331][ T5324] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 91.268499][ T5324] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.614: couldn't read orphan inode 15 (err -117) [ 91.313207][ T5324] loop2: lost filesystem error report for type 5 error -117 [ 91.313893][ T5324] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.830591][ T5329] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 91.847257][ T28] audit: type=1400 audit(1770971915.113:261): avc: denied { shutdown } for pid=5332 comm="syz.1.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 92.075354][ T4758] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 464 with error 28 [ 92.090811][ T5339] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 92.237083][ T4758] EXT4-fs (loop2): This should not happen!! Data will be lost [ 92.237083][ T4758] [ 92.247343][ T5339] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.276887][ T4758] EXT4-fs (loop2): Total free blocks count 0 [ 92.303270][ T4758] EXT4-fs (loop2): Free/Dirty block details [ 92.324586][ T4758] EXT4-fs (loop2): free_blocks=0 [ 92.335573][ T3306] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 92.356949][ T4758] EXT4-fs (loop2): dirty_blocks=464 [ 92.362261][ T4758] EXT4-fs (loop2): Block reservation details [ 92.387102][ T4758] EXT4-fs (loop2): i_reserved_data_blocks=464 [ 92.442445][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.852256][ T5345] set_capacity_and_notify: 1 callbacks suppressed [ 92.852277][ T5345] loop4: detected capacity change from 0 to 8192 [ 93.394658][ T5354] loop2: detected capacity change from 0 to 1024 [ 93.420197][ T5354] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 93.440454][ T5354] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.463735][ T5362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.481297][ T5362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.544574][ T5370] __nla_validate_parse: 7 callbacks suppressed [ 93.544595][ T5370] netlink: 36 bytes leftover after parsing attributes in process `syz.4.627'. [ 93.584038][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.625278][ T28] audit: type=1400 audit(1770971916.923:262): avc: denied { map } for pid=5375 comm="syz.2.630" path="socket:[10261]" dev="sockfs" ino=10261 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 93.682162][ T5379] loop2: detected capacity change from 0 to 512 [ 93.738216][ T5379] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 93.753102][ T28] audit: type=1400 audit(1770971917.043:263): avc: denied { setopt } for pid=5381 comm="syz.4.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 93.773786][ T5379] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 93.793867][ T5379] System zones: 0-1, 15-15, 18-18, 34-34 [ 93.801468][ T5387] netlink: 'syz.3.634': attribute type 10 has an invalid length. [ 93.822381][ T5379] EXT4-fs (loop2): orphan cleanup on readonly fs [ 93.927281][ T5379] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 93.947390][ T5379] EXT4-fs warning (device loop2): ext4_enable_quotas:7233: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 93.978439][ T5379] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 93.994723][ T5379] EXT4-fs (loop2): 1 truncate cleaned up [ 94.000864][ T5379] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 94.152947][ T5379] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 94.176514][ T28] audit: type=1400 audit(1770971917.443:264): avc: denied { remount } for pid=5378 comm="syz.2.631" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 94.217189][ T5379] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 94.243662][ T5397] loop3: detected capacity change from 0 to 512 [ 94.256316][ T5395] loop0: detected capacity change from 0 to 1024 [ 94.279830][ T5399] netlink: 36 bytes leftover after parsing attributes in process `syz.1.639'. [ 94.356038][ T5395] EXT4-fs: Ignoring removed nomblk_io_submit option [ 94.383862][ T5397] EXT4-fs error (device loop3): __ext4_fill_super:5565: inode #2: comm syz.3.638: inode has both inline data and extents flags [ 94.430540][ T5395] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 94.451113][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.476994][ T5397] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 94.477513][ T5397] EXT4-fs (loop3): get root inode failed [ 94.505667][ T5395] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 94.560307][ T5397] EXT4-fs (loop3): mount failed [ 94.595338][ T5395] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #11: comm syz.0.636: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 94.618101][ T5395] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 94.618415][ T5395] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.636: couldn't read orphan inode 11 (err -117) [ 94.641986][ T5395] loop0: lost filesystem error report for type 5 error -117 [ 94.643056][ T5395] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.717545][ T5395] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.636: Invalid block bitmap block 0 in block_group 0 [ 94.752597][ T5415] loop4: detected capacity change from 0 to 512 [ 94.761999][ T5415] EXT4-fs: test_dummy_encryption option not supported [ 94.778323][ T5419] netlink: 68 bytes leftover after parsing attributes in process `syz.3.642'. [ 94.795149][ T5395] Quota error (device loop0): write_blk: dquota write failed [ 94.830303][ T5395] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 94.861297][ T5395] EXT4-fs error (device loop0): ext4_acquire_dquot:6998: comm syz.0.636: Failed to acquire dquot type 0 [ 94.887646][ T5425] loop1: detected capacity change from 0 to 764 [ 94.912599][ T28] audit: type=1400 audit(1770971918.203:265): avc: denied { mount } for pid=5424 comm="syz.1.645" name="/" dev="loop1" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 94.961490][ T5395] syz.0.636 (5395) used greatest stack depth: 9608 bytes left [ 94.991679][ T5435] netlink: 'syz.1.649': attribute type 10 has an invalid length. [ 94.994263][ T28] audit: type=1400 audit(1770971918.253:266): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 95.024091][ T4737] EXT4-fs error (device loop0): __ext4_get_inode_loc:4830: comm kworker/u8:15: Invalid inode table block 12884901889 in block_group 0 [ 95.062426][ T5438] netlink: 36 bytes leftover after parsing attributes in process `syz.2.652'. [ 95.072354][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.169358][ T5444] netlink: 4 bytes leftover after parsing attributes in process `syz.1.654'. [ 95.192112][ T5444] bond0: (slave syz_tun): Releasing backup interface [ 95.306273][ T28] audit: type=1400 audit(1770971918.603:267): avc: denied { write } for pid=5452 comm="syz.1.658" name="tcp6" dev="proc" ino=4026532699 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 95.430183][ T5464] netlink: 272 bytes leftover after parsing attributes in process `syz.2.661'. [ 95.430442][ T28] audit: type=1400 audit(1770971918.723:268): avc: denied { nlmsg_read } for pid=5463 comm="syz.2.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 95.522081][ T5474] netlink: 'syz.0.664': attribute type 10 has an invalid length. [ 95.571360][ T5481] loop1: detected capacity change from 0 to 128 [ 95.588149][ T5479] netlink: 36 bytes leftover after parsing attributes in process `syz.3.666'. [ 95.653109][ T5485] netlink: 'syz.2.669': attribute type 4 has an invalid length. [ 95.684436][ T5489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.694828][ T5485] netlink: 17 bytes leftover after parsing attributes in process `syz.2.669'. [ 95.723712][ T5489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.729150][ T5491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.751686][ T5491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.774468][ T5495] loop4: detected capacity change from 0 to 512 [ 95.797571][ T5500] loop3: detected capacity change from 0 to 512 [ 95.826480][ T5500] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.856126][ T5500] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 95.889551][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.941896][ T5513] netlink: 'syz.2.678': attribute type 10 has an invalid length. [ 96.049900][ T5523] EXT4-fs (loop2): 1 truncate cleaned up [ 96.081759][ T5523] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.196304][ T5342] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 96.282850][ T5530] netlink: 36 bytes leftover after parsing attributes in process `syz.0.683'. [ 96.459326][ T5536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.479751][ T5536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.790464][ T5543] lo: entered allmulticast mode [ 96.929944][ T5546] EXT4-fs: Ignoring removed bh option [ 97.000460][ T5546] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.039921][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.323548][ T5558] EXT4-fs: Ignoring removed oldalloc option [ 97.456794][ T5558] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.582522][ T5568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.613371][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.627968][ T5568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.843482][ T5581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.691'. [ 98.457302][ T5591] random: crng reseeded on system resumption [ 98.839456][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.013119][ T5602] 8021q: adding VLAN 0 to HW filter on device bond2 [ 99.028036][ T5602] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 99.230292][ T5624] __nla_validate_parse: 5 callbacks suppressed [ 99.230312][ T5624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.710'. [ 99.286037][ T5627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.296508][ T5624] netlink: 20 bytes leftover after parsing attributes in process `syz.4.710'. [ 99.316651][ T5627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.324658][ T5624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.710'. [ 99.333582][ T5624] netlink: 20 bytes leftover after parsing attributes in process `syz.4.710'. [ 99.570895][ T5636] netlink: 4 bytes leftover after parsing attributes in process `syz.4.714'. [ 99.631000][ T5641] set_capacity_and_notify: 3 callbacks suppressed [ 99.631040][ T5641] loop0: detected capacity change from 0 to 1024 [ 99.644785][ T5641] EXT4-fs: Ignoring removed bh option [ 99.686310][ T5641] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.799994][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 99.800021][ T28] audit: type=1400 audit(1770971923.093:277): avc: denied { setopt } for pid=5646 comm="syz.3.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 100.127340][ T5652] 8021q: adding VLAN 0 to HW filter on device bond4 [ 100.151751][ T5654] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 100.441413][ T5667] loop2: detected capacity change from 0 to 1024 [ 100.454682][ T5667] EXT4-fs: Ignoring removed orlov option [ 100.478175][ T5667] EXT4-fs warning (device loop2): ext4_multi_mount_protect:288: Invalid MMP block in superblock [ 100.742507][ T28] audit: type=1400 audit(1770971924.033:278): avc: denied { read } for pid=5670 comm="syz.1.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 100.811083][ T5673] netlink: 'syz.1.727': attribute type 10 has an invalid length. [ 101.183634][ T5677] netlink: 36 bytes leftover after parsing attributes in process `syz.1.739'. [ 101.215719][ T5679] loop2: detected capacity change from 0 to 1024 [ 101.245332][ T5679] EXT4-fs: Ignoring removed oldalloc option [ 101.296618][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.307223][ T5679] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 101.319812][ T5679] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.352024][ T5679] EXT4-fs error (device loop2): ext4_lookup:1785: inode #15: comm syz.2.729: inode has both inline data and extents flags [ 101.376555][ T5686] netlink: 4 bytes leftover after parsing attributes in process `syz.1.730'. [ 101.397132][ T5688] loop0: detected capacity change from 0 to 512 [ 101.418012][ T5692] EXT4-fs error (device loop2): ext4_lookup:1785: inode #15: comm syz.2.729: inode has both inline data and extents flags [ 101.432770][ T5688] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 101.449594][ T5690] 8021q: adding VLAN 0 to HW filter on device bond3 [ 101.485754][ T5695] loop1: detected capacity change from 0 to 512 [ 101.515204][ T5690] bond2: (slave dummy0): Releasing backup interface [ 101.525972][ T5695] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.539259][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 101.557014][ T5695] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.559961][ T5690] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 101.633978][ T5695] EXT4-fs error (device loop1): ext4_lookup:1785: inode #15: comm syz.1.733: invalid fast symlink length 10 [ 101.660521][ T5707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.674324][ T5707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.695343][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.711702][ T5709] netlink: 36 bytes leftover after parsing attributes in process `syz.4.741'. [ 102.495750][ T5735] netlink: 4 bytes leftover after parsing attributes in process `syz.3.746'. [ 102.572178][ T5739] loop3: detected capacity change from 0 to 256 [ 102.619115][ T5739] FAT-fs (loop3): codepage cp874 not found [ 102.698019][ T5742] loop1: detected capacity change from 0 to 1024 [ 102.716207][ T5742] EXT4-fs: Ignoring removed orlov option [ 102.747426][ T5742] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.749178][ T5744] 8021q: adding VLAN 0 to HW filter on device bond1 [ 102.772113][ T5744] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 102.847144][ T5742] EXT4-fs error (device loop1): __ext4_new_inode:1279: comm syz.1.749: failed to insert inode 15: doubly allocated? [ 102.874213][ T28] audit: type=1400 audit(1770971926.163:279): avc: denied { mounton } for pid=5748 comm="syz.3.751" path="/proc/386/task" dev="proc" ino=11670 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 102.900792][ T5742] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 102.910832][ T28] audit: type=1400 audit(1770971926.193:280): avc: denied { associate } for pid=5754 comm="syz.3.751" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 102.993927][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.023888][ T5757] netlink: 'syz.2.754': attribute type 10 has an invalid length. [ 103.046772][ T5759] netlink: 36 bytes leftover after parsing attributes in process `syz.1.753'. [ 103.455071][ T28] audit: type=1400 audit(1770971926.743:281): avc: denied { read write } for pid=5774 comm="syz.3.761" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 103.544648][ T5778] netlink: 'syz.2.762': attribute type 1 has an invalid length. [ 103.663612][ T5781] bond4: (slave dummy0): Releasing backup interface [ 103.703536][ T28] audit: type=1400 audit(1770971926.743:282): avc: denied { open } for pid=5774 comm="syz.3.761" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 103.784372][ T5778] 8021q: adding VLAN 0 to HW filter on device bond5 [ 103.903614][ T5788] netlink: 'syz.1.765': attribute type 10 has an invalid length. [ 104.044568][ T5794] loop2: detected capacity change from 0 to 1024 [ 104.078016][ T5794] EXT4-fs: Ignoring removed orlov option [ 104.137500][ T5797] loop0: detected capacity change from 0 to 256 [ 104.154354][ T5794] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.362342][ T5797] FAT-fs (loop0): codepage cp1255 not found [ 104.379703][ T5794] EXT4-fs error (device loop2): __ext4_new_inode:1279: comm syz.2.766: failed to insert inode 15: doubly allocated? [ 104.483820][ T5794] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 104.720657][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.249198][ T5811] loop1: detected capacity change from 0 to 512 [ 105.274370][ T5811] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.277364][ T5815] netlink: 'syz.2.774': attribute type 7 has an invalid length. [ 105.295021][ T5815] netlink: 'syz.2.774': attribute type 8 has an invalid length. [ 105.316221][ T5811] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.612031][ T5822] netlink: 'syz.2.775': attribute type 1 has an invalid length. [ 105.759359][ T5822] 8021q: adding VLAN 0 to HW filter on device bond6 [ 105.820122][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.963547][ T5835] loop4: detected capacity change from 0 to 512 [ 106.163417][ T5841] loop1: detected capacity change from 0 to 2048 [ 106.476570][ T5847] __nla_validate_parse: 5 callbacks suppressed [ 106.476600][ T5847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.785'. [ 106.550495][ T5847] netlink: 20 bytes leftover after parsing attributes in process `syz.3.785'. [ 106.570062][ T5847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.785'. [ 106.592108][ T5841] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.599932][ T5847] netlink: 20 bytes leftover after parsing attributes in process `syz.3.785'. [ 106.614888][ T5841] ext4 filesystem being mounted at /160/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.630784][ T5851] loop4: detected capacity change from 0 to 512 [ 106.663425][ T5853] loop4: detected capacity change from 0 to 1024 [ 106.672691][ T5853] EXT4-fs: Ignoring removed orlov option [ 106.695130][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.832353][ T5861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.842371][ T5861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.856972][ T28] audit: type=1400 audit(1770971930.043:283): avc: denied { accept } for pid=5855 comm="syz.2.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 106.911069][ T5865] netlink: 'syz.1.789': attribute type 1 has an invalid length. [ 106.958309][ T5865] 8021q: adding VLAN 0 to HW filter on device bond2 [ 106.982489][ T28] audit: type=1400 audit(1770971930.273:284): avc: denied { name_bind } for pid=5855 comm="syz.2.786" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 107.004998][ T5865] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 107.365401][ T5877] loop3: detected capacity change from 0 to 1024 [ 107.373310][ T5877] EXT4-fs: Ignoring removed bh option [ 107.389419][ T5877] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.687277][ T5891] loop0: detected capacity change from 0 to 512 [ 107.710773][ T5891] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 107.720793][ T5893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.797'. [ 107.776727][ T5891] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.790986][ T5895] loop1: detected capacity change from 0 to 2048 [ 107.811100][ T5891] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 3: comm syz.0.798: path (unknown): bad entry in directory: directory entry overrun - offset=12, inode=514, rec_len=2048, size=2048 fake=0 [ 107.838987][ T5895] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.855032][ T5891] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 12: comm syz.0.798: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 107.876095][ T5895] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.883018][ T28] audit: type=1400 audit(1770971930.413:285): avc: denied { execmem } for pid=5871 comm="syz.3.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 107.893337][ T5891] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 13: comm syz.0.798: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 107.905793][ T28] audit: type=1400 audit(1770971930.573:286): avc: denied { prog_load } for pid=5872 comm="syz.4.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 107.905825][ T28] audit: type=1400 audit(1770971930.583:287): avc: denied { bpf } for pid=5872 comm="syz.4.795" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 107.905911][ T28] audit: type=1400 audit(1770971930.593:289): avc: denied { map_create } for pid=5871 comm="syz.3.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 107.905936][ T28] audit: type=1400 audit(1770971930.593:290): avc: denied { map_read map_write } for pid=5871 comm="syz.3.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 108.017254][ T28] audit: type=1400 audit(1770971930.593:291): avc: denied { module_request } for pid=5871 comm="syz.3.794" kmod=6E65746465762DFA scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 108.050311][ T28] audit: type=1400 audit(1770971930.583:288): avc: denied { perfmon } for pid=5872 comm="syz.4.795" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 108.097938][ T28] audit: type=1400 audit(1770971930.603:292): avc: denied { prog_run } for pid=5872 comm="syz.4.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 108.130893][ T5903] loop4: detected capacity change from 0 to 128 [ 108.205928][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.230410][ T3304] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 16: comm syz-executor: path /163/file0: bad entry in directory: directory entry overrun - offset=108, inode=646161, rec_len=4096, size=4096 fake=0 [ 108.264531][ T3306] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 108.281229][ T3304] EXT4-fs error (device loop1): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 108.294180][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.303845][ T3304] EXT4-fs error (device loop1): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 108.328276][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.816432][ T5911] netlink: 'syz.0.806': attribute type 3 has an invalid length. [ 108.824242][ T5911] netlink: 'syz.0.806': attribute type 3 has an invalid length. [ 108.899028][ T5920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.810'. [ 108.907967][ T5920] netlink: 20 bytes leftover after parsing attributes in process `syz.3.810'. [ 108.978508][ T5920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.810'. [ 108.994903][ T5920] netlink: 20 bytes leftover after parsing attributes in process `syz.3.810'. [ 109.084588][ T5935] loop4: detected capacity change from 0 to 1024 [ 109.091529][ T5935] EXT4-fs: Ignoring removed bh option [ 109.149119][ T5941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.813'. [ 109.221609][ T5943] FAT-fs (loop0): Directory bread(block 64) failed [ 109.229783][ T5943] FAT-fs (loop0): Directory bread(block 65) failed [ 109.241264][ T5943] FAT-fs (loop0): Directory bread(block 66) failed [ 109.254443][ T5943] FAT-fs (loop0): Directory bread(block 67) failed [ 109.261286][ T5943] FAT-fs (loop0): Directory bread(block 68) failed [ 109.270078][ T5943] FAT-fs (loop0): Directory bread(block 69) failed [ 109.276925][ T5943] FAT-fs (loop0): Directory bread(block 70) failed [ 109.283523][ T5943] FAT-fs (loop0): Directory bread(block 71) failed [ 109.290547][ T5943] FAT-fs (loop0): Directory bread(block 72) failed [ 109.297541][ T5943] FAT-fs (loop0): Directory bread(block 73) failed [ 109.319688][ T5943] syz.0.815: attempt to access beyond end of device [ 109.319688][ T5943] loop0: rw=2049, sector=1224, nr_sectors = 4 limit=256 [ 109.333778][ T5943] syz.0.815: attempt to access beyond end of device [ 109.333778][ T5943] loop0: rw=0, sector=1224, nr_sectors = 4 limit=256 [ 109.363942][ T5918] chnl_net:caif_netlink_parms(): no params data found [ 109.430665][ T5949] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.448427][ T5949] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.472011][ T5918] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.482161][ T5918] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.489643][ T5918] bridge_slave_0: entered allmulticast mode [ 109.496660][ T5918] bridge_slave_0: entered promiscuous mode [ 109.503878][ T5918] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.511036][ T5918] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.518376][ T5918] bridge_slave_1: entered allmulticast mode [ 109.525056][ T5918] bridge_slave_1: entered promiscuous mode [ 109.544163][ T5918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.554838][ T5918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.576167][ T5918] team0: Port device team_slave_0 added [ 109.582829][ T5918] team0: Port device team_slave_1 added [ 109.600054][ T5918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.607078][ T5918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.633130][ T5918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.644699][ T5918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.651767][ T5918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.677988][ T5918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.720602][ T5918] hsr_slave_0: entered promiscuous mode [ 109.736690][ T5918] hsr_slave_1: entered promiscuous mode [ 109.742556][ T5918] debugfs: 'hsr0' already exists in 'hsr' [ 109.765612][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.790262][ T5918] Cannot create hsr debugfs directory [ 109.816963][ T5960] netlink: 'syz.4.820': attribute type 1 has an invalid length. [ 109.842954][ T5962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.859687][ T5962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.879776][ T5960] 8021q: adding VLAN 0 to HW filter on device bond4 [ 109.908430][ T5960] bond3: (slave dummy0): Releasing backup interface [ 109.946266][ T5960] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 110.052918][ T5970] EXT4-fs: Ignoring removed i_version option [ 110.072952][ T5970] EXT4-fs: Ignoring removed bh option [ 110.115922][ T5970] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.118155][ T5918] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 110.138274][ T5918] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 110.148466][ T5918] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 110.157398][ T5970] ext4 filesystem being mounted at /166/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.168701][ T5918] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 110.194793][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.261163][ T5980] SELinux: failed to load policy [ 110.313607][ T5918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.338135][ T5986] netlink: 'syz.4.826': attribute type 10 has an invalid length. [ 110.355585][ T5918] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.370060][ T4746] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.377182][ T4746] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.484174][ T4741] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.491310][ T4741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.528962][ T5918] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 110.539997][ T5918] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 110.586181][ T5991] set_capacity_and_notify: 3 callbacks suppressed [ 110.586202][ T5991] loop2: detected capacity change from 0 to 1024 [ 110.599534][ T5991] EXT4-fs: Ignoring removed bh option [ 110.625462][ T5991] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.632243][ T5918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.767299][ T5918] veth0_vlan: entered promiscuous mode [ 110.775864][ T5918] veth1_vlan: entered promiscuous mode [ 110.792762][ T5918] veth0_macvtap: entered promiscuous mode [ 110.800603][ T5918] veth1_macvtap: entered promiscuous mode [ 110.812926][ T5918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.824080][ T5918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.834142][ T4737] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.848581][ T4737] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.862740][ T4737] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.874809][ T4737] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.932247][ T6015] netlink: 'syz.0.838': attribute type 10 has an invalid length. [ 111.051148][ T6028] netlink: 'syz.0.841': attribute type 10 has an invalid length. [ 111.062945][ T6030] loop5: detected capacity change from 0 to 512 [ 111.092035][ T6032] loop0: detected capacity change from 0 to 512 [ 111.127140][ T6030] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.147340][ T6032] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.831: inode has both inline data and extents flags [ 111.161001][ T6030] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.171404][ T6032] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 111.171533][ T6032] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.831: couldn't read orphan inode 15 (err -117) [ 111.208856][ T6032] loop0: lost filesystem error report for type 5 error -117 [ 111.209456][ T6032] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.285863][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.326892][ T5918] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.386017][ T6041] netlink: 'syz.5.833': attribute type 1 has an invalid length. [ 111.452394][ T6044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.475290][ T6044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.710031][ T6046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.718697][ T6046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.032964][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.162833][ T6050] SELinux: failed to load policy [ 112.519223][ T6075] __nla_validate_parse: 2 callbacks suppressed [ 112.519242][ T6075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.847'. [ 112.544893][ T6075] netlink: 20 bytes leftover after parsing attributes in process `syz.4.847'. [ 112.567929][ T6075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.847'. [ 112.576911][ T6079] loop2: detected capacity change from 0 to 1024 [ 112.577486][ T6075] netlink: 20 bytes leftover after parsing attributes in process `syz.4.847'. [ 112.584349][ T6079] EXT4-fs: Ignoring removed bh option [ 112.610953][ T6079] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.669501][ T6083] loop4: detected capacity change from 0 to 1024 [ 112.674189][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 112.674223][ T28] audit: type=1400 audit(1770971935.963:349): avc: denied { mount } for pid=6051 comm="syz.0.837" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 112.759810][ T28] audit: type=1400 audit(1770971936.053:350): avc: denied { create } for pid=6085 comm="syz.4.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 112.800862][ T28] audit: type=1400 audit(1770971936.053:351): avc: denied { bind } for pid=6085 comm="syz.4.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 112.916822][ T6092] loop4: detected capacity change from 0 to 512 [ 113.239357][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.275519][ T6097] loop6: detected capacity change from 0 to 8 [ 113.653566][ T6102] netlink: 36 bytes leftover after parsing attributes in process `syz.0.856'. [ 113.663853][ T6102] netlink: 'syz.0.856': attribute type 10 has an invalid length. [ 113.723791][ T28] audit: type=1400 audit(1770971937.013:352): avc: denied { create } for pid=6104 comm="syz.2.857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 113.778772][ T28] audit: type=1400 audit(1770971937.033:353): avc: denied { create } for pid=6104 comm="syz.2.857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 113.779288][ T6107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.858'. [ 113.815501][ T28] audit: type=1400 audit(1770971937.113:354): avc: denied { connect } for pid=6104 comm="syz.2.857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 113.835206][ T28] audit: type=1400 audit(1770971937.113:355): avc: denied { write } for pid=6104 comm="syz.2.857" path="socket:[13479]" dev="sockfs" ino=13479 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 113.897425][ T28] audit: type=1400 audit(1770971937.193:356): avc: denied { getopt } for pid=6109 comm="syz.0.859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 114.412953][ T28] audit: type=1400 audit(1770971937.703:357): avc: denied { ioctl } for pid=6121 comm="syz.2.864" path="socket:[12460]" dev="sockfs" ino=12460 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 114.675706][ T6124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.685206][ T6124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.694331][ T28] audit: type=1400 audit(1770971937.983:358): avc: denied { mounton } for pid=6123 comm="syz.5.865" path="/proc/13/task" dev="proc" ino=13505 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 115.117071][ T6136] netlink: 36 bytes leftover after parsing attributes in process `syz.4.868'. [ 115.364385][ T6137] netlink: 4 bytes leftover after parsing attributes in process `syz.3.869'. [ 115.384355][ T6139] hub 8-0:1.0: USB hub found [ 115.389171][ T6139] hub 8-0:1.0: 8 ports detected [ 115.419831][ T6136] netlink: 'syz.4.868': attribute type 10 has an invalid length. [ 115.430823][ T6137] bond1: (slave dummy0): Releasing backup interface [ 115.869734][ T6145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.870'. [ 115.885017][ T6145] netlink: 20 bytes leftover after parsing attributes in process `syz.4.870'. [ 116.533169][ T6158] loop4: detected capacity change from 0 to 2048 [ 116.676789][ T6172] netlink: 'syz.5.881': attribute type 10 has an invalid length. [ 116.712808][ T6172] syz_tun: entered promiscuous mode [ 116.729450][ T6172] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 116.908215][ T4779] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.923445][ T4779] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.963211][ T4779] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.008126][ T4779] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.030055][ T6192] loop0: detected capacity change from 0 to 1024 [ 117.036753][ T6192] EXT4-fs: Ignoring removed bh option [ 117.128471][ T6198] loop3: detected capacity change from 0 to 1024 [ 117.135936][ T6198] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 117.160426][ T6192] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.247129][ T6205] loop3: detected capacity change from 0 to 512 [ 117.266639][ T6205] EXT4-fs error (device loop3): ext4_acquire_dquot:6998: comm syz.3.893: Failed to acquire dquot type 1 [ 117.278170][ T6205] loop3: lost filesystem error report for type 5 error -5 [ 117.278693][ T6205] EXT4-fs (loop3): 1 truncate cleaned up [ 117.292448][ T6205] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.305511][ T6205] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.331989][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.380493][ T6209] netlink: 'syz.5.895': attribute type 10 has an invalid length. [ 118.371923][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 118.371944][ T28] audit: type=1400 audit(1770971941.263:368): avc: denied { create } for pid=6216 comm="syz.5.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 118.647170][ T6229] __nla_validate_parse: 8 callbacks suppressed [ 118.647238][ T6229] netlink: 8 bytes leftover after parsing attributes in process `syz.5.901'. [ 118.702407][ T6231] loop3: detected capacity change from 0 to 512 [ 118.709324][ T6229] netlink: 20 bytes leftover after parsing attributes in process `syz.5.901'. [ 118.719527][ T28] audit: type=1400 audit(1770971941.263:369): avc: denied { write } for pid=6216 comm="syz.5.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 118.737622][ T6231] EXT4-fs: Ignoring removed i_version option [ 118.745125][ T6229] netlink: 8 bytes leftover after parsing attributes in process `syz.5.901'. [ 118.749150][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.754120][ T6229] netlink: 20 bytes leftover after parsing attributes in process `syz.5.901'. [ 118.772608][ T6231] EXT4-fs: Ignoring removed bh option [ 118.809058][ T28] audit: type=1400 audit(1770971942.103:370): avc: denied { read write } for pid=6232 comm="syz.5.904" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 118.873647][ T6231] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.886796][ T28] audit: type=1400 audit(1770971942.103:371): avc: denied { open } for pid=6232 comm="syz.5.904" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 118.911370][ T6231] ext4 filesystem being mounted at /180/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 118.948058][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.005675][ T6243] netlink: 20 bytes leftover after parsing attributes in process `syz.3.907'. [ 119.016341][ T6243] netlink: 'syz.3.907': attribute type 10 has an invalid length. [ 119.088530][ T6249] loop0: detected capacity change from 0 to 256 [ 119.119108][ T6249] FAT-fs (loop0): codepage cp857 not found [ 119.180996][ T6252] loop3: detected capacity change from 0 to 2048 [ 119.194820][ T6256] loop0: detected capacity change from 0 to 512 [ 119.210872][ T6252] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.235200][ T6256] EXT4-fs: Ignoring removed mblk_io_submit option [ 119.258643][ T6256] EXT4-fs: inline encryption not supported [ 119.272096][ T6256] EXT4-fs: test_dummy_encryption option not supported [ 119.279522][ T6252] ext4 filesystem being mounted at /184/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.333312][ T28] audit: type=1400 audit(1770971942.623:372): avc: denied { map } for pid=6251 comm="syz.3.911" path="/184/file0/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 119.360409][ T6261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.915'. [ 119.388612][ T6261] netlink: 20 bytes leftover after parsing attributes in process `syz.0.915'. [ 119.399705][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.411500][ T6261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.915'. [ 119.421125][ T6261] netlink: 20 bytes leftover after parsing attributes in process `syz.0.915'. [ 119.501445][ T28] audit: type=1400 audit(1770971942.793:373): avc: denied { allowed } for pid=6263 comm="syz.3.916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 119.544646][ T6270] loop5: detected capacity change from 0 to 1024 [ 119.551553][ T6270] EXT4-fs: Ignoring removed bh option [ 120.338451][ T6270] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.382670][ T6281] netlink: 20 bytes leftover after parsing attributes in process `syz.4.919'. [ 120.430865][ T6281] netlink: 'syz.4.919': attribute type 10 has an invalid length. [ 120.479809][ T28] audit: type=1400 audit(1770971942.813:374): avc: denied { sqpoll } for pid=6263 comm="syz.3.916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 120.499182][ T28] audit: type=1400 audit(1770971942.813:375): avc: denied { create } for pid=6263 comm="syz.3.916" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 120.520276][ T28] audit: type=1400 audit(1770971942.813:376): avc: denied { map } for pid=6263 comm="syz.3.916" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=13847 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 121.216566][ T28] audit: type=1400 audit(1770971942.813:377): avc: denied { read write } for pid=6263 comm="syz.3.916" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=13847 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 121.244008][ T5918] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.698243][ T6303] loop5: detected capacity change from 0 to 512 [ 121.798356][ T6303] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 121.819552][ T6304] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 121.860285][ T6303] EXT4-fs warning (device loop5): dx_probe:837: inode #2: comm syz.5.926: Unimplemented hash flags: 0x0001 [ 121.889724][ T6303] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.926: Corrupt directory, running e2fsck is recommended [ 121.943952][ T6312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.954380][ T6312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.983404][ T5918] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.058192][ T6314] netlink: 'syz.5.933': attribute type 10 has an invalid length. [ 122.248081][ T6320] loop3: detected capacity change from 0 to 1024 [ 122.254926][ T6320] EXT4-fs: Ignoring removed bh option [ 122.282378][ T6320] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.345303][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.418445][ T6335] SELinux: failed to load policy [ 122.543898][ T6338] hub 8-0:1.0: USB hub found [ 122.548877][ T6338] hub 8-0:1.0: 8 ports detected [ 123.318799][ T6353] netlink: 'syz.0.945': attribute type 10 has an invalid length. [ 123.515347][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 123.515364][ T28] audit: type=1400 audit(1770971946.813:387): avc: denied { map } for pid=6356 comm="syz.0.947" path="socket:[13922]" dev="sockfs" ino=13922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 123.580351][ T28] audit: type=1400 audit(1770971946.813:388): avc: denied { read write } for pid=6356 comm="syz.0.947" path="socket:[13922]" dev="sockfs" ino=13922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 123.758280][ T6363] loop4: detected capacity change from 0 to 1024 [ 123.759326][ T6368] loop3: detected capacity change from 0 to 512 [ 123.765527][ T6363] EXT4-fs: Ignoring removed bh option [ 123.848311][ T6368] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.951: inode has both inline data and extents flags [ 123.878938][ T6368] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 123.886996][ T6368] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.951: couldn't read orphan inode 15 (err -117) [ 123.909928][ T6368] loop3: lost filesystem error report for type 5 error -117 [ 123.910480][ T6368] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.934657][ T28] audit: type=1400 audit(1770971947.223:389): avc: denied { setattr } for pid=6367 comm="syz.3.951" path="/195/file0/file1" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 123.969584][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.001194][ T6374] loop3: detected capacity change from 0 to 512 [ 124.007804][ T6374] EXT4-fs: Ignoring removed i_version option [ 124.018827][ T6374] EXT4-fs: Ignoring removed bh option [ 124.040077][ T6374] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.059371][ T6374] ext4 filesystem being mounted at /196/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 124.071285][ T6378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.086702][ T6374] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.094930][ T6378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.224964][ T6386] __nla_validate_parse: 8 callbacks suppressed [ 124.225057][ T6386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.958'. [ 124.242237][ T6386] netlink: 'syz.2.958': attribute type 10 has an invalid length. [ 124.659756][ T6398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.960'. [ 124.824115][ T6394] loop5: detected capacity change from 0 to 8192 [ 124.841398][ T6394] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 124.860119][ T6394] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 124.868324][ T6394] FAT-fs (loop5): Filesystem has been set read-only [ 124.875580][ T6394] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 124.930999][ T6409] loop2: detected capacity change from 0 to 512 [ 124.955613][ T6409] EXT4-fs: Ignoring removed i_version option [ 124.963590][ T6409] EXT4-fs: Ignoring removed bh option [ 124.977608][ T6409] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.990458][ T6409] ext4 filesystem being mounted at /184/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 125.022703][ T6409] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.231263][ T6423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.970'. [ 125.245176][ T6423] netlink: 'syz.0.970': attribute type 10 has an invalid length. [ 125.260583][ T28] audit: type=1400 audit(1770971948.553:390): avc: denied { read } for pid=6421 comm="syz.3.971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 125.330236][ T6426] netlink: 28 bytes leftover after parsing attributes in process `syz.3.972'. [ 125.431782][ T6428] loop3: detected capacity change from 0 to 512 [ 125.459985][ T6428] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.477393][ T6428] ext4 filesystem being mounted at /204/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.556037][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.604172][ T28] audit: type=1400 audit(1770971949.893:391): avc: denied { read } for pid=6444 comm="syz.3.976" name="rtc0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 126.696757][ T28] audit: type=1400 audit(1770971949.893:392): avc: denied { open } for pid=6444 comm="syz.3.976" path="/dev/rtc0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 126.779647][ T28] audit: type=1400 audit(1770971949.923:393): avc: denied { ioctl } for pid=6444 comm="syz.3.976" path="/dev/rtc0" dev="devtmpfs" ino=245 ioctlcmd=0x7002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 127.669595][ T6448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.701182][ T6448] batadv_slave_0: entered promiscuous mode [ 128.173783][ T6460] loop2: detected capacity change from 0 to 256 [ 128.208327][ T6463] netlink: 28 bytes leftover after parsing attributes in process `syz.5.983'. [ 128.226503][ T6460] FAT-fs (loop2): codepage cp869 not found [ 128.262936][ T6468] netlink: 4 bytes leftover after parsing attributes in process `syz.5.984'. [ 128.290919][ T6468] bond0: (slave syz_tun): Releasing backup interface [ 128.350730][ T28] audit: type=1400 audit(1770971951.643:394): avc: denied { write } for pid=6473 comm="syz.3.987" path="socket:[14098]" dev="sockfs" ino=14098 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 128.356197][ T6472] loop2: detected capacity change from 0 to 512 [ 128.382333][ T6472] ext4: Bad value for 'resuid' [ 128.398277][ T6472] ext4: Bad value for 'resuid' [ 128.406122][ T28] audit: type=1400 audit(1770971951.673:395): avc: denied { mounton } for pid=6471 comm="syz.2.986" path="/188/file0" dev="tmpfs" ino=1013 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 128.682010][ T6495] netlink: 28 bytes leftover after parsing attributes in process `syz.2.995'. [ 129.017852][ T28] audit: type=1400 audit(1770971952.263:396): avc: denied { block_suspend } for pid=6499 comm="syz.2.997" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 129.761087][ T28] audit: type=1400 audit(1770971953.053:397): avc: denied { write } for pid=6507 comm="syz.5.998" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 129.963694][ T6521] loop5: detected capacity change from 0 to 512 [ 129.971046][ T6522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.005210][ T6521] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 130.014083][ T6522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.023829][ T6521] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.1003: iget: bad i_size value: 38620345925642 [ 130.055310][ T6521] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 130.055497][ T6521] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1003: couldn't read orphan inode 15 (err -117) [ 130.100332][ T6521] loop5: lost filesystem error report for type 5 error -117 [ 130.100966][ T6521] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.495766][ T5918] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.552206][ T6527] loop5: detected capacity change from 0 to 512 [ 130.566215][ T6527] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.004953][ T6527] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 131.051492][ T6527] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 131.094303][ T6527] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 131.105271][ T28] audit: type=1400 audit(1770971954.343:398): avc: denied { remount } for pid=6526 comm="syz.5.1004" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 131.162533][ T5918] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.246246][ T6539] xt_hashlimit: size too large, truncated to 1048576 [ 131.295037][ T6542] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6542 comm=syz.0.1011 [ 131.600618][ T6557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.627455][ T6561] netlink: 'syz.0.1016': attribute type 10 has an invalid length. [ 131.655132][ T6557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.743876][ T28] audit: type=1400 audit(1770971955.033:399): avc: denied { read } for pid=6564 comm="syz.0.1019" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 132.163718][ T6582] loop4: detected capacity change from 0 to 128 [ 132.258005][ T28] audit: type=1400 audit(1770971955.553:400): avc: denied { view } for pid=6587 comm="syz.4.1027" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 132.336391][ T6593] netlink: 'syz.4.1029': attribute type 10 has an invalid length. [ 133.247626][ T28] audit: type=1400 audit(1770971955.923:401): avc: denied { create } for pid=6579 comm="syz.3.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 133.276946][ T28] audit: type=1400 audit(1770971956.053:402): avc: denied { setopt } for pid=6579 comm="syz.3.1024" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 133.695806][ T6609] loop4: detected capacity change from 0 to 128 [ 134.247893][ T28] audit: type=1400 audit(1770971956.183:403): avc: denied { create } for pid=6579 comm="syz.3.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 134.267755][ T28] audit: type=1400 audit(1770971956.703:404): avc: denied { read write } for pid=5918 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 134.291945][ T28] audit: type=1400 audit(1770971956.703:405): avc: denied { open } for pid=5918 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 134.467802][ T28] audit: type=1400 audit(1770971956.703:406): avc: denied { ioctl } for pid=5918 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 134.620793][ T6625] netlink: 'syz.0.1043': attribute type 10 has an invalid length. [ 134.654624][ T28] audit: type=1400 audit(1770971956.873:407): avc: denied { prog_load } for pid=6596 comm="syz.5.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 134.757118][ T28] audit: type=1400 audit(1770971956.873:408): avc: denied { bpf } for pid=6596 comm="syz.5.1031" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 134.895535][ T28] audit: type=1400 audit(1770971956.893:409): avc: denied { allowed } for pid=6600 comm="syz.4.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 135.009617][ T28] audit: type=1400 audit(1770971956.903:410): avc: denied { create } for pid=6600 comm="syz.4.1032" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 135.247622][ T28] audit: type=1400 audit(1770971956.973:411): avc: denied { name_bind } for pid=6602 comm="syz.0.1034" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 135.418442][ T28] audit: type=1400 audit(1770971956.973:412): avc: denied { node_bind } for pid=6602 comm="syz.0.1034" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 136.065332][ T6660] loop4: detected capacity change from 0 to 256 [ 136.109016][ T6662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.165353][ T6662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.192983][ T6664] netlink: 'syz.4.1057': attribute type 10 has an invalid length. [ 136.527168][ T6666] loop3: detected capacity change from 0 to 512 [ 136.539397][ T6668] loop4: detected capacity change from 0 to 256 [ 136.560574][ T6666] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.619802][ T6666] ext4 filesystem being mounted at /214/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 136.666525][ T6666] EXT4-fs error (device loop3): ext4_empty_dir:3075: inode #12: comm syz.3.1056: invalid size [ 136.714606][ T6666] EXT4-fs (loop3): Remounting filesystem read-only [ 136.752280][ T6675] loop5: detected capacity change from 0 to 1024 [ 136.777488][ T6675] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 136.792107][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.804817][ T4746] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 136.842468][ T4746] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 136.853634][ T6675] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.008241][ T4779] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: comm kworker/u8:30: lblock 0 mapped to illegal pblock 0 (length 1) [ 137.072109][ T4779] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 137.161186][ T4779] EXT4-fs (loop5): This should not happen!! Data will be lost [ 137.161186][ T4779] [ 137.248268][ T5918] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 137.551640][ T6704] netlink: 'syz.5.1069': attribute type 10 has an invalid length. [ 137.592624][ T6706] loop5: detected capacity change from 0 to 256 [ 137.758255][ T6706] FAT-fs (loop5): IO charset cp852 not found [ 138.307337][ T6716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.366630][ T6716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.714922][ T6736] netlink: 'syz.2.1080': attribute type 10 has an invalid length. [ 139.793505][ T6770] loop5: detected capacity change from 0 to 256 [ 139.811284][ T28] kauditd_printk_skb: 61 callbacks suppressed [ 139.811307][ T28] audit: type=1400 audit(1770971963.103:470): avc: denied { read } for pid=6764 comm="syz.3.1091" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 139.841083][ T6770] vfat: Unknown parameter 'nnonumtail' [ 139.872309][ T6774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1094'. [ 139.883258][ T6776] loop3: detected capacity change from 0 to 512 [ 139.954302][ T6776] EXT4-fs: Ignoring removed nobh option [ 139.978766][ T6776] EXT4-fs: Ignoring removed nomblk_io_submit option [ 140.017484][ T6774] netlink: 'syz.0.1094': attribute type 10 has an invalid length. [ 140.055587][ T28] audit: type=1400 audit(1770971963.103:471): avc: denied { open } for pid=6764 comm="syz.3.1091" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 140.220282][ T28] audit: type=1400 audit(1770971963.103:472): avc: denied { ioctl } for pid=6764 comm="syz.3.1091" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 140.225060][ T6776] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.1095: iget: bad i_size value: 38620345925642 [ 141.077078][ T28] audit: type=1400 audit(1770971963.153:473): avc: denied { create } for pid=6769 comm="syz.5.1092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 141.096992][ T28] audit: type=1400 audit(1770971963.153:474): avc: denied { create } for pid=6769 comm="syz.5.1092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 141.117735][ T28] audit: type=1400 audit(1770971963.153:475): avc: denied { setopt } for pid=6769 comm="syz.5.1092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 142.087810][ T6776] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 142.088100][ T28] audit: type=1400 audit(1770971963.153:476): avc: denied { write } for pid=6769 comm="syz.5.1092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 142.122746][ T6776] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1095: couldn't read orphan inode 15 (err -117) [ 142.182137][ T6776] loop3: lost filesystem error report for type 5 error -117 [ 142.182652][ T6776] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.205028][ T6800] loop2: detected capacity change from 0 to 512 [ 142.211768][ T6800] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 142.268424][ T28] audit: type=1400 audit(1770971963.283:477): avc: denied { ioctl } for pid=6779 comm="syz.2.1098" path="socket:[14644]" dev="sockfs" ino=14644 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 142.328853][ T6806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.377380][ T6806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.400333][ T28] audit: type=1400 audit(1770971963.283:478): avc: denied { bind } for pid=6779 comm="syz.2.1098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 142.440522][ T28] audit: type=1400 audit(1770971963.283:479): avc: denied { write } for pid=6779 comm="syz.2.1098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 142.551937][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.620233][ T6812] loop3: detected capacity change from 0 to 512 [ 142.739205][ T6812] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 142.769893][ T6812] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 134217733)! [ 142.792260][ T6812] EXT4-fs (loop3): group descriptors corrupted! [ 145.031159][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 145.031178][ T28] audit: type=1400 audit(1770971968.323:488): avc: denied { create } for pid=6826 comm="syz.3.1114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 145.119829][ T6841] loop5: detected capacity change from 0 to 512 [ 145.161438][ T6841] EXT4-fs: Ignoring removed nobh option [ 145.199799][ T6841] EXT4-fs: Ignoring removed nomblk_io_submit option [ 145.250680][ T6843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1118'. [ 145.290385][ T28] audit: type=1400 audit(1770971968.583:489): avc: denied { read } for pid=6847 comm="syz.4.1119" path="socket:[15587]" dev="sockfs" ino=15587 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 145.324672][ T6843] bond0: (slave bond_slave_0): Releasing backup interface [ 145.343390][ T6841] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.1117: iget: bad i_size value: 38620345925642 [ 145.379227][ T6841] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 145.379458][ T6841] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1117: couldn't read orphan inode 15 (err -117) [ 145.438861][ T6841] loop5: lost filesystem error report for type 5 error -117 [ 145.439477][ T6841] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.486218][ T6857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.512989][ T6857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.523255][ T5918] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.057297][ T6870] netlink: 'syz.3.1128': attribute type 10 has an invalid length. [ 146.212167][ T28] audit: type=1400 audit(1770971969.503:490): avc: denied { mount } for pid=6877 comm="syz.2.1132" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 146.750740][ T28] audit: type=1400 audit(1770971969.633:491): avc: denied { create } for pid=6882 comm="syz.4.1134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 146.771495][ T28] audit: type=1400 audit(1770971969.633:492): avc: denied { connect } for pid=6882 comm="syz.4.1134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 146.942854][ T6894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.974773][ T6894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.028989][ T6896] loop3: detected capacity change from 0 to 256 [ 147.132873][ T6900] netlink: 'syz.3.1142': attribute type 10 has an invalid length. [ 147.145431][ T6902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.164263][ T6902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.365342][ T6886] syz.4.1135 (6886) used greatest stack depth: 8960 bytes left [ 147.501955][ T6914] hub 8-0:1.0: USB hub found [ 147.506842][ T6914] hub 8-0:1.0: 8 ports detected [ 148.073041][ T6921] loop2: detected capacity change from 0 to 2048 [ 148.114992][ T4455] loop2: p1 p3 p4 [ 148.121034][ T4455] loop2: p4 size 589824 extends beyond EOD, truncated [ 148.137452][ T6921] loop2: p1 p3 p4 [ 148.143704][ T6921] loop2: p4 size 589824 extends beyond EOD, truncated [ 149.144551][ T28] audit: type=1400 audit(1770971971.723:493): avc: denied { mounton } for pid=6923 comm="syz.5.1152" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=428 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 149.848622][ T6935] netlink: 'syz.4.1154': attribute type 10 has an invalid length. [ 150.224632][ T28] audit: type=1400 audit(1770971973.213:494): avc: denied { sqpoll } for pid=6931 comm="syz.3.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 150.294621][ T28] audit: type=1326 audit(1770971973.213:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6931 comm="syz.3.1153" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f11270cbf79 code=0x0 [ 150.348750][ T28] audit: type=1326 audit(1770971973.313:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6931 comm="syz.3.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11270cbf79 code=0x7ffc0000 [ 150.372120][ T28] audit: type=1326 audit(1770971973.313:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6931 comm="syz.3.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11270cbf79 code=0x7ffc0000 [ 150.376194][ T6942] loop5: detected capacity change from 0 to 512 [ 150.444902][ T28] audit: type=1326 audit(1770971973.313:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6931 comm="syz.3.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f11270cbf79 code=0x7ffc0000 [ 150.445538][ T6942] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 150.486576][ T6944] xt_hashlimit: size too large, truncated to 1048576 [ 150.500363][ T28] audit: type=1326 audit(1770971973.323:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6931 comm="syz.3.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11270cbf79 code=0x7ffc0000 [ 150.549509][ T6942] EXT4-fs (loop5): 1 truncate cleaned up [ 150.584813][ T28] audit: type=1326 audit(1770971973.323:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6931 comm="syz.3.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11270cbf79 code=0x7ffc0000 [ 150.608379][ T28] audit: type=1326 audit(1770971973.323:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6931 comm="syz.3.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f11270cbf79 code=0x7ffc0000 [ 150.625002][ T6942] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.633110][ T28] audit: type=1326 audit(1770971973.323:502): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6931 comm="syz.3.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11270cbf79 code=0x7ffc0000 [ 150.667849][ T28] audit: type=1326 audit(1770971973.323:503): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6931 comm="syz.3.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11270cbf79 code=0x7ffc0000 [ 150.715010][ T6951] loop2: detected capacity change from 0 to 512 [ 150.733669][ T6951] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 150.752395][ T6951] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003] [ 150.760620][ T6951] System zones: 1-2, 4-12, 8-8 [ 150.766067][ T6951] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.1159: iget: bad i_size value: 38620345925642 [ 150.779122][ T6951] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 150.783325][ T6951] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1159: couldn't read orphan inode 15 (err -117) [ 150.828537][ T6951] loop2: lost filesystem error report for type 5 error -117 [ 150.829480][ T6951] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.855380][ T5918] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.655065][ T6967] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1163'. [ 151.735357][ T6950] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.1159: bg 0: block 5: invalid block bitmap [ 151.748303][ T6950] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 4864 with max blocks 64 with error 28 [ 151.760977][ T6950] EXT4-fs (loop2): This should not happen!! Data will be lost [ 151.760977][ T6950] [ 151.770680][ T6950] EXT4-fs (loop2): Total free blocks count 0 [ 151.776728][ T6950] EXT4-fs (loop2): Free/Dirty block details [ 151.782734][ T6950] EXT4-fs (loop2): free_blocks=0 [ 151.787772][ T6950] EXT4-fs (loop2): dirty_blocks=64 [ 151.792900][ T6950] EXT4-fs (loop2): Block reservation details [ 151.798927][ T6950] EXT4-fs (loop2): i_reserved_data_blocks=64 [ 151.866715][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.003621][ T6974] loop5: detected capacity change from 0 to 512 [ 152.047627][ T6974] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 152.063124][ T6977] loop2: detected capacity change from 0 to 512 [ 152.081121][ T6974] EXT4-fs (loop5): 1 truncate cleaned up [ 152.117222][ T6977] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.247199][ T6974] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.266113][ T6977] ext4 filesystem being mounted at /224/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 152.383117][ T6977] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.1165: corrupted inode contents [ 152.395801][ T6984] netlink: 'syz.4.1168': attribute type 10 has an invalid length. [ 152.430773][ T6985] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1167'. [ 152.470177][ T6977] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #2: comm syz.2.1165: mark_inode_dirty error [ 152.582472][ T6977] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.1165: corrupted inode contents [ 152.652632][ T5918] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.663240][ T6987] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.1165: corrupted inode contents [ 152.680247][ T6987] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #2: comm syz.2.1165: mark_inode_dirty error [ 152.692306][ T6987] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.1165: corrupted inode contents [ 152.714468][ T6990] loop4: detected capacity change from 0 to 512 [ 152.721420][ T6987] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.1165: mark_inode_dirty error [ 152.733391][ T6987] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.1165: corrupted inode contents [ 152.746919][ T6990] EXT4-fs: Ignoring removed orlov option [ 152.752599][ T6990] EXT4-fs: Ignoring removed mblk_io_submit option [ 152.769241][ T6987] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #2: comm syz.2.1165: mark_inode_dirty error [ 152.851347][ T6977] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.1165: corrupted inode contents [ 152.901393][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.703763][ T7002] netlink: 288 bytes leftover after parsing attributes in process `syz.4.1172'. [ 153.741799][ T7000] hub 8-0:1.0: USB hub found [ 153.746778][ T7000] hub 8-0:1.0: 8 ports detected [ 153.855899][ T7004] loop2: detected capacity change from 0 to 512 [ 153.900895][ T7006] netlink: 'syz.3.1176': attribute type 1 has an invalid length. [ 154.008742][ T7006] 8021q: adding VLAN 0 to HW filter on device bond2 [ 154.017325][ T7004] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.117487][ T2958] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 154.142725][ T7016] loop3: detected capacity change from 0 to 1024 [ 154.158142][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.192943][ T7016] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 154.214165][ T7020] loop4: detected capacity change from 0 to 1024 [ 154.243031][ T7016] ext4 filesystem being mounted at /239/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.302603][ T7025] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1182'. [ 154.354990][ T7016] EXT4-fs error (device loop3): ext4_lookup:1785: inode #15: comm syz.3.1178: inode has both inline data and extents flags [ 154.362533][ T7025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1182'. [ 154.392353][ T7016] EXT4-fs (loop3): Remounting filesystem read-only [ 154.424400][ T7025] ip6tnl1: entered promiscuous mode [ 154.424647][ T7026] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1182'. [ 154.447823][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 154.524794][ T7026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1182'. [ 154.734237][ T7037] loop3: detected capacity change from 0 to 2048 [ 155.203820][ T7041] hub 8-0:1.0: USB hub found [ 155.208694][ T7041] hub 8-0:1.0: 8 ports detected [ 155.279695][ T7037] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.407635][ T7046] netlink: 'syz.0.1188': attribute type 1 has an invalid length. [ 155.476347][ T7037] ext4 filesystem being mounted at /241/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.551410][ T7046] 8021q: adding VLAN 0 to HW filter on device bond1 [ 155.566527][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 155.566542][ T28] audit: type=1400 audit(1770972490.860:544): avc: denied { rename } for pid=7036 comm="syz.3.1186" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 155.605053][ T7037] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #2: block 16: comm syz.3.1186: bad entry in directory: directory entry overrun - offset=108, inode=646161, rec_len=4096, size=4096 fake=0 [ 155.675079][ T28] audit: type=1400 audit(1770972490.970:545): avc: denied { getopt } for pid=7053 comm="syz.2.1191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 155.704980][ T7037] EXT4-fs (loop3): Remounting filesystem read-only [ 155.748933][ T7058] loop5: detected capacity change from 0 to 1024 [ 155.805239][ T7058] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 155.824601][ T7058] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.856002][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.891375][ T7058] EXT4-fs error (device loop5): ext4_lookup:1785: inode #15: comm syz.5.1194: inode has both inline data and extents flags [ 155.928234][ T7058] EXT4-fs (loop5): Remounting filesystem read-only [ 156.099738][ T28] audit: type=1400 audit(1770972491.240:546): avc: denied { write } for pid=7055 comm="syz.0.1192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 156.355202][ T7073] xt_hashlimit: max too large, truncated to 1048576 [ 156.362741][ T7073] xt_limit: Overflow, try lower: 0/0 [ 156.529934][ T5918] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 156.827594][ T7077] loop2: detected capacity change from 0 to 8192 [ 156.874404][ T7084] netlink: 'syz.4.1202': attribute type 1 has an invalid length. [ 156.991228][ T7089] loop3: detected capacity change from 0 to 512 [ 157.053786][ T7089] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.075564][ T7084] 8021q: adding VLAN 0 to HW filter on device bond5 [ 157.117495][ T7089] ext4 filesystem being mounted at /243/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 157.156908][ T7089] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.1204: corrupted inode contents [ 157.190805][ T7089] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #2: comm syz.3.1204: mark_inode_dirty error [ 157.205161][ T7097] hub 8-0:1.0: USB hub found [ 157.209887][ T7097] hub 8-0:1.0: 8 ports detected [ 157.225646][ T7089] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.1204: corrupted inode contents [ 157.239208][ T7089] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.1204: corrupted inode contents [ 157.260683][ T7089] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #2: comm syz.3.1204: mark_inode_dirty error [ 157.746988][ T7089] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.1204: corrupted inode contents [ 157.794650][ T7089] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.1204: mark_inode_dirty error [ 157.815288][ T7109] loop5: detected capacity change from 0 to 1024 [ 157.846418][ T7089] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.1204: corrupted inode contents [ 157.889957][ T7109] EXT4-fs: Ignoring removed bh option [ 157.901518][ T7089] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #2: comm syz.3.1204: mark_inode_dirty error [ 157.948068][ T7111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1206'. [ 157.967699][ T7104] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.1204: corrupted inode contents [ 157.980657][ T7111] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1206'. [ 158.013817][ T7111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1206'. [ 158.041709][ T7111] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1206'. [ 158.154598][ T7109] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.169793][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.221963][ T28] audit: type=1400 audit(1770972493.510:547): avc: denied { read } for pid=7117 comm="syz.2.1208" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 158.248612][ T28] audit: type=1400 audit(1770972493.510:548): avc: denied { open } for pid=7117 comm="syz.2.1208" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 159.637727][ T28] audit: type=1326 audit(1770972750.686:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7127 comm="syz.2.1210" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c1d50bf79 code=0x0 [ 159.900421][ T28] audit: type=1326 audit(1770972750.796:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7127 comm="syz.2.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c1d50bf79 code=0x7ffc0000 [ 159.956393][ T7139] 9p: Bad value for 'rfdno' [ 160.038215][ T5918] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.073646][ T28] audit: type=1326 audit(1770972750.796:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7127 comm="syz.2.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c1d50bf79 code=0x7ffc0000 [ 160.101395][ T28] audit: type=1326 audit(1770972750.796:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7127 comm="syz.2.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f6c1d50bf79 code=0x7ffc0000 [ 160.151192][ T28] audit: type=1326 audit(1770972750.796:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7127 comm="syz.2.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c1d50bf79 code=0x7ffc0000 [ 160.243413][ T7148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1218'. [ 160.252689][ T7148] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1218'. [ 160.262244][ T7148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1218'. [ 160.271417][ T7148] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1218'. [ 160.813505][ T7151] hub 8-0:1.0: USB hub found [ 160.818501][ T7151] hub 8-0:1.0: 8 ports detected [ 161.149742][ T7162] loop2: detected capacity change from 0 to 512 [ 161.185359][ T7162] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.1222: inode has both inline data and extents flags [ 161.198733][ T7162] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 161.204321][ T7162] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1222: couldn't read orphan inode 15 (err -117) [ 161.225483][ T7162] loop2: lost filesystem error report for type 5 error -117 [ 161.226120][ T7162] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.264602][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 161.264615][ T28] audit: type=1326 audit(1770972752.546:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7159 comm="syz.4.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7ad13bf79 code=0x7ffc0000 [ 161.322698][ T28] audit: type=1326 audit(1770972752.546:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7159 comm="syz.4.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7ad13bf79 code=0x7ffc0000 [ 161.346095][ T28] audit: type=1326 audit(1770972752.546:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7159 comm="syz.4.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fc7ad13bf79 code=0x7ffc0000 [ 161.369444][ T28] audit: type=1326 audit(1770972752.546:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7159 comm="syz.4.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7ad13bf79 code=0x7ffc0000 [ 161.392732][ T7169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.392974][ T7169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.407209][ T28] audit: type=1326 audit(1770972752.546:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7159 comm="syz.4.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7ad13bf79 code=0x7ffc0000 [ 161.453524][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.535475][ T28] audit: type=1326 audit(1770972752.546:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7159 comm="syz.4.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fc7ad13bf79 code=0x7ffc0000 [ 161.559110][ T28] audit: type=1326 audit(1770972752.546:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7159 comm="syz.4.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7ad13bf79 code=0x7ffc0000 [ 161.582512][ T28] audit: type=1326 audit(1770972752.546:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7159 comm="syz.4.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7ad13bf79 code=0x7ffc0000 [ 161.606224][ T28] audit: type=1326 audit(1770972752.546:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7159 comm="syz.4.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc7ad13bf79 code=0x7ffc0000 [ 161.630093][ T28] audit: type=1326 audit(1770972752.546:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7159 comm="syz.4.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7ad13bf79 code=0x7ffc0000 [ 161.774164][ T7178] loop3: detected capacity change from 0 to 1024 [ 161.781562][ T7178] EXT4-fs: Ignoring removed bh option [ 161.848843][ T7178] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.621667][ T7194] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1231'. [ 162.826495][ T7194] netlink: 'syz.4.1231': attribute type 10 has an invalid length. [ 163.859006][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.191947][ T7231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1246'. [ 164.237724][ T7231] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1246'. [ 164.255812][ T7231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1246'. [ 164.284262][ T7231] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1246'. [ 164.426504][ T7245] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1251'. [ 164.484717][ T7245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1251'. [ 165.556067][ T7285] netlink: 'syz.0.1268': attribute type 1 has an invalid length. [ 165.574369][ T7286] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 165.581624][ T7286] IPv6: NLM_F_CREATE should be set when creating new route [ 165.600526][ T7285] 8021q: adding VLAN 0 to HW filter on device bond2 [ 165.766492][ T7286] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.773748][ T7286] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.923411][ T7286] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.958742][ T7286] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.043268][ T4267] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.052263][ T4267] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.071550][ T4267] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.097655][ T4267] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.132407][ T4267] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.153598][ T4267] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.172347][ T4267] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.183872][ T4267] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.193468][ T7300] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1272'. [ 166.203305][ T7300] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1272'. [ 166.213838][ T7300] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1272'. [ 166.223258][ T7300] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1272'. [ 166.276220][ T28] kauditd_printk_skb: 133 callbacks suppressed [ 166.276238][ T28] audit: type=1400 audit(1770972757.566:726): avc: denied { execmem } for pid=7303 comm="syz.5.1274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 166.358202][ T28] audit: type=1400 audit(1770972757.626:727): avc: denied { read write } for pid=3310 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 166.393854][ T28] audit: type=1400 audit(1770972757.676:728): avc: denied { create } for pid=7305 comm="syz.3.1275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 166.788952][ T28] audit: type=1400 audit(1770972757.846:729): avc: denied { write } for pid=7305 comm="syz.3.1275" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=0 [ 166.996819][ T28] audit: type=1400 audit(1770972758.286:730): avc: denied { create } for pid=7313 comm="syz.0.1276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 167.047521][ T28] audit: type=1400 audit(1770972758.316:731): avc: denied { read write } for pid=3311 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 167.135429][ T28] audit: type=1400 audit(1770972758.326:732): avc: denied { allowed } for pid=7315 comm="syz.4.1277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 167.199158][ T28] audit: type=1400 audit(1770972758.456:733): avc: denied { create } for pid=7317 comm="syz.0.1278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 167.224366][ T7321] netlink: 'syz.0.1279': attribute type 1 has an invalid length. [ 167.254942][ T28] audit: type=1400 audit(1770972758.526:734): avc: denied { read write } for pid=3311 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 167.279574][ T28] audit: type=1400 audit(1770972758.546:735): avc: denied { allowed } for pid=7322 comm="syz.4.1281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 167.280643][ T7321] 8021q: adding VLAN 0 to HW filter on device bond3 [ 168.105560][ T7365] netlink: 'syz.3.1298': attribute type 10 has an invalid length. [ 171.208115][ T7482] ip6tnl1: left promiscuous mode [ 171.305758][ T28] kauditd_printk_skb: 239 callbacks suppressed [ 171.305775][ T28] audit: type=1400 audit(1770972762.596:975): avc: denied { execmem } for pid=7484 comm="syz.2.1350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 171.345805][ T7489] netlink: 'syz.5.1349': attribute type 4 has an invalid length. [ 171.353566][ T7489] __nla_validate_parse: 5 callbacks suppressed [ 171.353582][ T7489] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1349'. [ 171.383439][ T28] audit: type=1400 audit(1770972762.666:976): avc: denied { mount } for pid=7484 comm="syz.2.1350" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=0 [ 171.441457][ T28] audit: type=1400 audit(1770972762.716:977): avc: denied { read write } for pid=5918 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 171.492524][ T7494] netlink: 'syz.0.1352': attribute type 1 has an invalid length. [ 171.515526][ T7494] 8021q: adding VLAN 0 to HW filter on device bond4 [ 171.526093][ T7494] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1352'. [ 171.554667][ T28] audit: type=1400 audit(1770972762.846:978): avc: denied { create } for pid=7497 comm="syz.0.1353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 171.638580][ T28] audit: type=1400 audit(1770972762.926:979): avc: denied { read write } for pid=5918 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 171.671071][ T28] audit: type=1400 audit(1770972762.956:980): avc: denied { create } for pid=7501 comm="syz.5.1357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 171.710411][ T28] audit: type=1400 audit(1770972762.956:981): avc: denied { create } for pid=7501 comm="syz.5.1357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 171.841291][ T28] audit: type=1400 audit(1770972763.126:982): avc: denied { read write } for pid=5918 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 171.886033][ T28] audit: type=1400 audit(1770972763.166:983): avc: denied { execmem } for pid=7505 comm="syz.5.1358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 171.905946][ T28] audit: type=1400 audit(1770972763.196:984): avc: denied { read } for pid=7507 comm="syz.0.1359" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0 [ 171.972795][ T7514] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1362'. [ 171.986886][ T7514] vlan2: entered promiscuous mode [ 171.992092][ T7514] gretap0: entered promiscuous mode [ 172.944424][ T7546] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.964663][ T7546] batadv_slave_0: entered promiscuous mode [ 173.538240][ T7605] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.546132][ T7605] batadv_slave_0: entered promiscuous mode [ 173.611002][ T7607] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.618331][ T7607] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.680078][ T7607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.693771][ T7607] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.752062][ T4756] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.772183][ T4756] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.789593][ T4756] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.799710][ T4756] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.809687][ T4756] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.818705][ T4756] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.827867][ T4756] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.837098][ T4756] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.936732][ T7644] netlink: 'syz.2.1420': attribute type 12 has an invalid length. [ 174.209260][ T7663] netlink: 228 bytes leftover after parsing attributes in process `syz.5.1431'. [ 174.499063][ T7693] batadv_slave_0: entered promiscuous mode [ 174.803851][ T7726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1460'. [ 175.168572][ T7760] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1475'. [ 175.294668][ T7764] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1477'. [ 176.066632][ T7797] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.087029][ T7806] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1496'. [ 176.087363][ T7797] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.137271][ T7797] batadv_slave_0: left promiscuous mode [ 176.173089][ T7797] ipvlan2: left promiscuous mode [ 176.348905][ T28] kauditd_printk_skb: 383 callbacks suppressed [ 176.348965][ T28] audit: type=1400 audit(1770972767.636:1368): avc: denied { read write } for pid=5918 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 176.424605][ T28] audit: type=1400 audit(1770972767.676:1369): avc: denied { create } for pid=7810 comm="syz.5.1498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 176.494555][ T28] audit: type=1400 audit(1770972767.696:1370): avc: denied { read write } for pid=5918 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 176.554557][ T28] audit: type=1400 audit(1770972767.716:1371): avc: denied { read write } for pid=7812 comm="syz.5.1499" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 176.589348][ T7819] netlink: 'syz.5.1502': attribute type 1 has an invalid length. [ 176.616319][ T7819] 8021q: adding VLAN 0 to HW filter on device bond1 [ 176.634616][ T28] audit: type=1400 audit(1770972767.756:1372): avc: denied { read write } for pid=5918 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 176.662692][ T7819] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1502'. [ 176.692184][ T7822] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1503'. [ 176.702362][ T28] audit: type=1400 audit(1770972767.766:1373): avc: denied { allowed } for pid=7814 comm="syz.5.1500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 176.722144][ T28] audit: type=1400 audit(1770972767.766:1374): avc: denied { create } for pid=7814 comm="syz.5.1500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 176.742157][ T28] audit: type=1400 audit(1770972767.786:1375): avc: denied { read write } for pid=5918 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 176.766925][ T28] audit: type=1400 audit(1770972767.816:1376): avc: denied { read write } for pid=7816 comm="syz.5.1501" name="rtc0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=0 [ 176.790701][ T28] audit: type=1400 audit(1770972767.836:1377): avc: denied { read write } for pid=5918 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 176.852248][ T7826] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1505'. [ 177.436491][ T7860] batadv_slave_0: entered promiscuous mode [ 177.546084][ T7866] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7866 comm=syz.4.1524 [ 177.793531][ T7873] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1527'. [ 177.802695][ T7873] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1527'. [ 178.430561][ T7900] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1539'. [ 178.444286][ T7900] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1539'. [ 179.706918][ T7916] batadv_slave_0: left promiscuous mode [ 179.740257][ T7918] batadv_slave_0: entered promiscuous mode [ 179.962972][ T7928] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1549'. [ 180.034687][ T7928] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 181.287089][ T7970] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1567'. [ 181.296510][ T7970] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1567'. [ 181.519776][ T28] kauditd_printk_skb: 203 callbacks suppressed [ 181.519791][ T28] audit: type=1400 audit(1770972772.806:1581): avc: denied { create } for pid=7974 comm="syz.2.1569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 181.568989][ T28] audit: type=1400 audit(1770972772.856:1582): avc: denied { prog_load } for pid=7974 comm="syz.2.1569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 181.649951][ T28] audit: type=1400 audit(1770972772.936:1583): avc: denied { create } for pid=7974 comm="syz.2.1569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=0 [ 181.694701][ T28] audit: type=1400 audit(1770972772.986:1584): avc: denied { unmount } for pid=7974 comm="syz.2.1569" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=0 [ 182.006928][ T28] audit: type=1400 audit(1770972773.186:1585): avc: denied { read write } for pid=3310 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 182.031579][ T28] audit: type=1400 audit(1770972773.276:1586): avc: denied { execmem } for pid=7985 comm="syz.0.1570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 182.065858][ T28] audit: type=1400 audit(1770972773.286:1587): avc: denied { read } for pid=7986 comm="syz.3.1571" dev="nsfs" ino=4026532490 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 182.092185][ T28] audit: type=1400 audit(1770972773.346:1588): avc: denied { read write } for pid=3311 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 182.134065][ T28] audit: type=1400 audit(1770972773.376:1589): avc: denied { read write } for pid=3310 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 182.163876][ T28] audit: type=1400 audit(1770972773.396:1590): avc: denied { read write } for pid=7990 comm="syz.4.1572" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 182.673737][ T8024] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=8024 comm=syz.4.1587 [ 183.434723][ T8042] ================================================================== [ 183.442897][ T8042] BUG: KCSAN: data-race in touch_atime / touch_atime [ 183.449594][ T8042] [ 183.451928][ T8042] write to 0xffff88811b529260 of 4 bytes by task 8037 on cpu 0: [ 183.459559][ T8042] touch_atime+0x1d7/0x330 [ 183.464029][ T8042] shmem_file_splice_read+0x5b1/0x600 [ 183.469433][ T8042] splice_direct_to_actor+0x26e/0x670 [ 183.474872][ T8042] do_splice_direct+0x119/0x1a0 [ 183.479757][ T8042] do_sendfile+0x382/0x650 [ 183.484226][ T8042] __x64_sys_sendfile64+0x105/0x150 [ 183.489476][ T8042] x64_sys_call+0x2dc4/0x3020 [ 183.494195][ T8042] do_syscall_64+0x12c/0x370 [ 183.498814][ T8042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.504749][ T8042] [ 183.507077][ T8042] read to 0xffff88811b529260 of 4 bytes by task 8042 on cpu 1: [ 183.514634][ T8042] touch_atime+0x16c/0x330 [ 183.519106][ T8042] shmem_file_splice_read+0x5b1/0x600 [ 183.524525][ T8042] splice_direct_to_actor+0x26e/0x670 [ 183.529958][ T8042] do_splice_direct+0x119/0x1a0 [ 183.534843][ T8042] do_sendfile+0x382/0x650 [ 183.539321][ T8042] __x64_sys_sendfile64+0x105/0x150 [ 183.544562][ T8042] x64_sys_call+0x2dc4/0x3020 [ 183.549290][ T8042] do_syscall_64+0x12c/0x370 [ 183.553913][ T8042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.559828][ T8042] [ 183.562192][ T8042] value changed: 0x2abb90fd -> 0x2b54277d [ 183.567924][ T8042] [ 183.570288][ T8042] Reported by Kernel Concurrency Sanitizer on: [ 183.576470][ T8042] CPU: 1 UID: 0 PID: 8042 Comm: syz.5.1592 Not tainted syzkaller #0 PREEMPT(full) [ 183.585787][ T8042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 183.595860][ T8042] ==================================================================