last executing test programs: 1.98785356s ago: executing program 4 (id=9048): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x700, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "01"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x60}, 0x1, 0x7}, 0x0) 1.959225942s ago: executing program 4 (id=9049): futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x3) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 1.123276349s ago: executing program 3 (id=9087): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd70000000000021040000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) 916.090836ms ago: executing program 3 (id=9088): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xf, 0x204031, 0xffffffffffffffff, 0x2d5c000) mbind(&(0x7f00001e7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x3, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 887.088848ms ago: executing program 3 (id=9089): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x7fe2, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @local}, 0x10) 876.593309ms ago: executing program 1 (id=9090): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) close(r1) 831.292083ms ago: executing program 3 (id=9091): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='kfree\x00', r0}, 0xe) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010328bd7000fedbdf251c0000000c00018008000100", @ANYRES32=r3], 0x20}}, 0x10) 825.336653ms ago: executing program 3 (id=9093): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000f0000000401a80016000800014009001120036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x8000) 786.264936ms ago: executing program 1 (id=9095): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) 785.768606ms ago: executing program 1 (id=9096): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = io_uring_setup(0x4d3f, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x1, 0x6}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000500), 0x66) 759.619929ms ago: executing program 3 (id=9098): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000000)=0x1, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x6, @private1, 0xd1}, 0x1c) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={r2, 0x7}, 0x8) 736.4817ms ago: executing program 1 (id=9099): r0 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001900)=""/4101, 0x1005}], 0x1}, 0x2192) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xfdef) 736.074761ms ago: executing program 0 (id=9100): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8614, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x1}}, './file0\x00'}) 653.974717ms ago: executing program 1 (id=9103): r0 = socket$nl_route(0x10, 0x3, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010000700"/20, @ANYRES32=0x0, @ANYBLOB="040101000000000014000300766c616e30000000000000000000000008000a00", @ANYRES32=r2], 0x3c}}, 0x0) 653.486147ms ago: executing program 0 (id=9113): mount$bpf(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000006c0), 0x112140d, &(0x7f0000000880)=ANY=[@ANYBLOB]) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x78) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) 634.244129ms ago: executing program 0 (id=9106): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) 300.685065ms ago: executing program 4 (id=9126): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000140)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@quota}, {@resuid}, {@lazytime}]}, 0x1, 0x445, &(0x7f0000000200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000009c0)="3bf58d7d45d32cfe1da7c797b82f16713d1cb80b3fa1bda74e3977b40e7af46b4c60b70d7a79ed5d8c48f52a50185980d6", 0x31) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 0s ago: executing program 0 (id=9127): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_context(r2, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) kernel console output (not intermixed with test programs): root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae25b8eb69 code=0x7ffc0000 [ 171.846785][ T29] audit: type=1326 audit(171.801:5806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18154 comm="syz.3.6009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae25b8eb69 code=0x7ffc0000 [ 171.869866][ T29] audit: type=1326 audit(171.801:5807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18154 comm="syz.3.6009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae25b8eb69 code=0x7ffc0000 [ 171.909338][T18157] ALSA: seq fatal error: cannot create timer (-19) [ 171.922100][T18163] vhci_hcd: invalid port number 255 [ 172.088943][T18197] loop3: detected capacity change from 0 to 128 [ 172.120346][T18199] vhci_hcd: invalid port number 254 [ 172.125575][T18199] vhci_hcd: invalid port number 254 [ 172.266679][T18211] loop3: detected capacity change from 0 to 4096 [ 172.343291][T18211] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.390548][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.409355][T18241] usb usb7: usbfs: process 18241 (syz.0.6048) did not claim interface 0 before use [ 172.446469][T18248] __nla_validate_parse: 4 callbacks suppressed [ 172.446536][T18248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6050'. [ 172.544395][T18257] loop4: detected capacity change from 0 to 1024 [ 172.554496][T18257] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 172.565413][T18257] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 172.568252][T18262] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6057'. [ 172.579996][T18257] JBD2: no valid journal superblock found [ 172.589664][T18257] EXT4-fs (loop4): Could not load journal inode [ 172.622108][T18262] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6057'. [ 172.663607][T18271] ip6gretap0: entered promiscuous mode [ 172.665672][T18268] hub 2-0:1.0: USB hub found [ 172.676251][T18271] ip6gretap0: left promiscuous mode [ 172.681767][T18268] hub 2-0:1.0: 8 ports detected [ 172.686835][T18274] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 172.693376][T18274] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 172.701073][T18274] vhci_hcd vhci_hcd.0: Device attached [ 172.709389][T18276] vhci_hcd: connection closed [ 172.709517][T13056] vhci_hcd: stop threads [ 172.718538][T13056] vhci_hcd: release socket [ 172.723019][T13056] vhci_hcd: disconnect device [ 172.846654][T18300] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 172.923408][T18314] loop3: detected capacity change from 0 to 128 [ 172.936460][T18316] loop7: detected capacity change from 0 to 16384 [ 172.948544][T18314] bio_check_eod: 1 callbacks suppressed [ 172.948557][T18314] syz.3.6079: attempt to access beyond end of device [ 172.948557][T18314] loop3: rw=0, sector=121, nr_sectors = 120 limit=128 [ 172.982204][T13056] kworker/u8:62: attempt to access beyond end of device [ 172.982204][T13056] loop3: rw=1, sector=241, nr_sectors = 800 limit=128 [ 173.004409][T18316] I/O error, dev loop7, sector 7168 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 173.015302][T18316] I/O error, dev loop7, sector 7424 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 173.025391][T18316] I/O error, dev loop7, sector 7168 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 173.034926][T18316] Buffer I/O error on dev loop7, logical block 896, async page read [ 173.069422][T18315] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 173.079155][T18315] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 173.087552][T18315] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 173.095824][T18326] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6084'. [ 173.095929][T18315] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 173.107096][T18326] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6084'. [ 173.113091][T18315] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 173.113111][T18315] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 173.113125][T18315] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 173.113139][T18315] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 173.155347][T18315] Buffer I/O error on dev loop7, logical block 7, lost async page write [ 173.163774][T18315] Buffer I/O error on dev loop7, logical block 8, lost async page write [ 173.174395][T18315] I/O error, dev loop7, sector 1024 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 173.189939][T18315] I/O error, dev loop7, sector 2048 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 173.202863][T18315] I/O error, dev loop7, sector 3072 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 173.217001][T18315] I/O error, dev loop7, sector 4096 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 173.231244][T18315] I/O error, dev loop7, sector 5120 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 173.244347][T18315] I/O error, dev loop7, sector 6144 op 0x1:(WRITE) flags 0x800 phys_seg 128 prio class 0 [ 173.258495][T18332] netlink: 'syz.3.6086': attribute type 21 has an invalid length. [ 173.278316][T18332] netlink: 'syz.3.6086': attribute type 1 has an invalid length. [ 173.286149][T18332] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6086'. [ 173.342899][T18348] netlink: 'syz.0.6095': attribute type 1 has an invalid length. [ 173.937261][T18390] openvswitch: netlink: Message has 6 unknown bytes. [ 173.956072][T18392] atomic_op ffff88811db57528 conn xmit_atomic 0000000000000000 [ 174.210409][T18408] rdma_op ffff88811db57580 conn xmit_rdma 0000000000000000 [ 174.309466][T18420] netlink: 165 bytes leftover after parsing attributes in process `syz.1.6126'. [ 174.444700][T18435] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6134'. [ 174.494748][T18441] C: renamed from team_slave_0 [ 174.518680][T18441] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6135'. [ 174.635078][T18467] loop3: detected capacity change from 0 to 512 [ 174.671764][T18467] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.703940][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.799762][T18493] wireguard0: entered promiscuous mode [ 174.805263][T18493] wireguard0: entered allmulticast mode [ 174.852854][T18506] IPVS: Error connecting to the multicast addr [ 174.928610][T18523] syz_tun: entered promiscuous mode [ 174.934563][T18523] batadv_slave_0: entered promiscuous mode [ 174.960300][T18530] program syz.4.6176 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 174.978329][T18530] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 175.047827][T18548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6185'. [ 175.078899][T18554] netlink: 'syz.3.6188': attribute type 21 has an invalid length. [ 175.178505][T18560] loop3: detected capacity change from 0 to 8192 [ 175.196849][T18574] loop4: detected capacity change from 0 to 512 [ 175.197119][T18560] syz.3.6192: attempt to access beyond end of device [ 175.197119][T18560] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 175.219369][T18560] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 175.227322][T18560] FAT-fs (loop3): Filesystem has been set read-only [ 175.241345][T18560] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 175.249981][T18560] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 175.258608][T18574] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.319214][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.353636][T18589] loop4: detected capacity change from 0 to 256 [ 175.775683][T18658] rdma_op ffff88811c8b7180 conn xmit_rdma 0000000000000000 [ 175.805747][T18647] SELinux: failed to load policy [ 175.850823][T18669] rdma_op ffff888102bff180 conn xmit_rdma 0000000000000000 [ 175.869903][T18672] SELinux: failed to load policy [ 175.881039][T18670] loop4: detected capacity change from 0 to 4096 [ 175.908885][T18670] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.910087][T18680] sd 0:0:1:0: device reset [ 175.937987][T18670] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #15: comm syz.4.6241: corrupted inode contents [ 175.952666][T18686] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 175.954249][T18670] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #15: comm syz.4.6241: mark_inode_dirty error [ 175.959189][T18686] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 175.959257][T18686] vhci_hcd vhci_hcd.0: Device attached [ 175.990109][T18670] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #15: comm syz.4.6241: corrupted inode contents [ 176.002370][T18687] vhci_hcd: connection closed [ 176.002636][T13047] vhci_hcd: stop threads [ 176.011624][T13047] vhci_hcd: release socket [ 176.016111][T13047] vhci_hcd: disconnect device [ 176.022800][T18670] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #15: comm syz.4.6241: mark_inode_dirty error [ 176.034940][T18670] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #15: comm syz.4.6241: corrupted inode contents [ 176.047893][T18670] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #15: comm syz.4.6241: mark_inode_dirty error [ 176.061486][T18670] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #15: comm syz.4.6241: corrupted inode contents [ 176.073696][T18670] EXT4-fs error (device loop4): ext4_truncate:4666: inode #15: comm syz.4.6241: mark_inode_dirty error [ 176.086067][T18670] EXT4-fs error (device loop4): ext4_evict_inode:265: comm syz.4.6241: couldn't truncate inode 15 (err -117) [ 176.131635][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.146125][T18701] batadv3: entered promiscuous mode [ 176.151432][T18701] batadv3: entered allmulticast mode [ 176.163685][T18699] syzkaller1: entered promiscuous mode [ 176.169193][T18699] syzkaller1: entered allmulticast mode [ 176.227078][T18711] atomic_op ffff88811c8b5d28 conn xmit_atomic 0000000000000000 [ 176.252467][T18713] syz_tun: entered promiscuous mode [ 176.258348][T18713] batadv_slave_0: entered promiscuous mode [ 176.266499][T18713] debugfs: 'hsr0' already exists in 'hsr' [ 176.272350][T18713] Cannot create hsr debugfs directory [ 176.296686][T18718] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 176.318109][T18718] syz_tun (unregistering): left promiscuous mode [ 176.400160][ T29] kauditd_printk_skb: 211 callbacks suppressed [ 176.400172][ T29] audit: type=1400 audit(177.388:6019): avc: denied { write } for pid=18731 comm="syz.0.6270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 176.451773][ T29] audit: type=1400 audit(177.438:6020): avc: denied { read } for pid=18741 comm="syz.2.6273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 176.492094][T18748] usb usb7: usbfs: process 18748 (syz.0.6276) did not claim interface 0 before use [ 176.539524][ T3298] block device autoloading is deprecated and will be removed. [ 176.630154][T18751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.638808][T18751] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 176.706028][T18758] loop4: detected capacity change from 0 to 512 [ 176.732174][T18758] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.759842][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.779821][T18766] loop3: detected capacity change from 0 to 2048 [ 176.793000][T18766] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.810529][ T29] audit: type=1400 audit(177.798:6021): avc: denied { write } for pid=18765 comm="syz.3.6283" path="/1265/file1/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 176.839191][T18775] loop4: detected capacity change from 0 to 1024 [ 176.859064][T18775] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 176.872151][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.885777][T18775] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 3: comm syz.4.6286: lblock 3 mapped to illegal pblock 3 (length 3) [ 176.901908][T18775] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 176.914239][T18775] EXT4-fs (loop4): This should not happen!! Data will be lost [ 176.914239][T18775] [ 176.925528][ T29] audit: type=1326 audit(177.908:6022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18782 comm="syz.3.6289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae25b8eb69 code=0x7ffc0000 [ 176.948528][ T29] audit: type=1326 audit(177.908:6023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18782 comm="syz.3.6289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7fae25b8eb69 code=0x7ffc0000 [ 176.971488][ T29] audit: type=1326 audit(177.908:6024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18782 comm="syz.3.6289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae25b8eb69 code=0x7ffc0000 [ 176.994529][ T29] audit: type=1326 audit(177.908:6025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18782 comm="syz.3.6289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae25b8eb69 code=0x7ffc0000 [ 177.017997][T18785] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: comm syz.4.6286: lblock 0 mapped to illegal pblock 0 (length 3) [ 177.031662][T18785] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 177.043968][T18785] EXT4-fs (loop4): This should not happen!! Data will be lost [ 177.043968][T18785] [ 177.148164][T18787] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 177.186519][ T29] audit: type=1326 audit(178.168:6026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18790 comm="syz.1.6293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5927e8eb69 code=0x7ffc0000 [ 177.209546][ T29] audit: type=1326 audit(178.168:6027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18790 comm="syz.1.6293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5927e8eb69 code=0x7ffc0000 [ 177.279654][ T29] audit: type=1326 audit(178.218:6028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18790 comm="syz.1.6293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f5927e8eb69 code=0x7ffc0000 [ 177.332280][T18795] netlink: 'syz.2.6295': attribute type 3 has an invalid length. [ 177.387090][T18801] hsr_slave_0 (unregistering): left promiscuous mode [ 177.420783][ T4843] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 4: comm kworker/u8:12: lblock 4 mapped to illegal pblock 4 (length 2) [ 177.435869][ T4843] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 177.448247][ T4843] EXT4-fs (loop4): This should not happen!! Data will be lost [ 177.448247][ T4843] [ 177.464305][ T9089] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 177.482367][ T9089] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 28 [ 177.494601][ T9089] EXT4-fs (loop4): This should not happen!! Data will be lost [ 177.494601][ T9089] [ 177.504331][ T9089] EXT4-fs (loop4): Total free blocks count 0 [ 177.607996][T18814] __nla_validate_parse: 7 callbacks suppressed [ 177.608022][T18814] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.6304'. [ 177.612019][T18810] SELinux: failed to load policy [ 178.134319][T18860] netlink: 'syz.1.6327': attribute type 3 has an invalid length. [ 178.201514][T18871] syzkaller0: entered promiscuous mode [ 178.207075][T18871] syzkaller0: entered allmulticast mode [ 178.374421][T18879] loop4: detected capacity change from 0 to 8192 [ 178.466987][T18894] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6342'. [ 178.476148][T18894] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6342'. [ 178.485137][T18894] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6342'. [ 178.545294][T18894] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6342'. [ 178.554347][T18894] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6342'. [ 178.563412][T18894] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6342'. [ 178.607977][T18900] hub 2-0:1.0: USB hub found [ 178.612880][T18900] hub 2-0:1.0: 8 ports detected [ 178.617517][T18894] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6342'. [ 178.626724][T18894] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6342'. [ 178.635732][T18894] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6342'. [ 178.715151][T18918] netlink: 'syz.0.6352': attribute type 1 has an invalid length. [ 178.756274][T18918] bond5: entered promiscuous mode [ 178.764335][T18918] 8021q: adding VLAN 0 to HW filter on device bond5 [ 178.799531][T18928] batadv3: entered promiscuous mode [ 178.804923][T18928] batadv3: entered allmulticast mode [ 178.808586][ T3298] block device autoloading is deprecated and will be removed. [ 178.844006][T18918] 8021q: adding VLAN 0 to HW filter on device bond5 [ 178.851619][T18918] bond5: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 178.861979][T18918] bond5: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 178.874557][T18918] bond5: (slave ip6gre1): making interface the new active one [ 178.882178][T18918] ip6gre1: entered promiscuous mode [ 178.889083][T18918] bond5: (slave ip6gre1): Enslaving as an active interface with an up link [ 179.098499][T18963] netlink: 'syz.2.6370': attribute type 4 has an invalid length. [ 179.107729][T18963] netlink: 'syz.2.6370': attribute type 4 has an invalid length. [ 179.162508][T18971] SELinux: failed to load policy [ 179.356630][T18996] block device autoloading is deprecated and will be removed. [ 179.522707][T19007] syzkaller0: entered promiscuous mode [ 179.528208][T19007] syzkaller0: entered allmulticast mode [ 179.788941][T19012] loop4: detected capacity change from 0 to 1024 [ 179.797324][T19012] EXT4-fs: Ignoring removed mblk_io_submit option [ 179.803979][T19012] EXT4-fs: inline encryption not supported [ 179.810285][T19012] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 179.821770][T19012] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.6392: bad orphan inode 11 [ 179.832080][T19012] EXT4-fs (loop4): Remounting filesystem read-only [ 179.838581][T19012] ext4_test_bit(bit=10, block=4) = 1 [ 179.843960][T19012] is_bad_inode(inode)=0 [ 179.848121][T19012] NEXT_ORPHAN(inode)=3254779904 [ 179.852990][T19012] max_ino=32 [ 179.856178][T19012] i_nlink=0 [ 179.859681][T19012] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.882234][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.975424][T19031] vhci_hcd: default hub control req: 0007 v0f00 i0006 l0 [ 180.056464][T19041] bond_slave_1: mtu less than device minimum [ 180.119864][T19036] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 180.128642][T19036] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 180.315281][T19071] block device autoloading is deprecated and will be removed. [ 180.347143][T19076] loop7: detected capacity change from 0 to 16384 [ 180.408528][T19076] I/O error, dev loop7, sector 15872 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 [ 180.419327][T19076] I/O error, dev loop7, sector 16128 op 0x0:(READ) flags 0x80700 phys_seg 3 prio class 0 [ 180.429372][T19076] I/O error, dev loop7, sector 15872 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 180.438856][T19076] buffer_io_error: 887 callbacks suppressed [ 180.438871][T19076] Buffer I/O error on dev loop7, logical block 1984, async page read [ 180.499919][T19075] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 180.509584][T19075] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 180.517934][T19075] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 180.526384][T19075] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 180.534747][T19075] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 180.543092][T19075] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 180.551433][T19075] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 180.559768][T19075] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 180.568222][T19075] Buffer I/O error on dev loop7, logical block 7, lost async page write [ 180.576948][T19075] Buffer I/O error on dev loop7, logical block 8, lost async page write [ 180.588483][T19075] I/O error, dev loop7, sector 1024 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 180.601219][T19075] I/O error, dev loop7, sector 2048 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 180.613710][T19075] I/O error, dev loop7, sector 3072 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 180.625848][T19075] I/O error, dev loop7, sector 4096 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 180.637805][T19075] I/O error, dev loop7, sector 5120 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 180.649932][T19075] I/O error, dev loop7, sector 6144 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 181.378645][T19089] 8021q: adding VLAN 0 to HW filter on device bond4 [ 181.403492][T19089] bond4: (slave batadv1): Opening slave failed [ 181.445505][T19103] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=19103 comm=syz.0.6428 [ 181.467201][ T29] kauditd_printk_skb: 501 callbacks suppressed [ 181.467216][ T29] audit: type=1107 audit(182.448:6530): pid=19102 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 181.541580][ T29] audit: type=1326 audit(182.518:6531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19108 comm="syz.2.6442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b505deb69 code=0x7ffc0000 [ 181.564560][ T29] audit: type=1326 audit(182.518:6532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19108 comm="syz.2.6442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b505deb69 code=0x7ffc0000 [ 181.587498][ T29] audit: type=1326 audit(182.518:6533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19108 comm="syz.2.6442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b505deb69 code=0x7ffc0000 [ 181.589331][T19111] loop4: detected capacity change from 0 to 4096 [ 181.610400][ T29] audit: type=1326 audit(182.518:6534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19108 comm="syz.2.6442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b505deb69 code=0x7ffc0000 [ 181.610429][ T29] audit: type=1326 audit(182.518:6535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19108 comm="syz.2.6442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b505deb69 code=0x7ffc0000 [ 181.620044][ T29] audit: type=1326 audit(182.528:6536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19108 comm="syz.2.6442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b505deb69 code=0x7ffc0000 [ 181.685375][ T29] audit: type=1326 audit(182.528:6537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19108 comm="syz.2.6442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b505deb69 code=0x7ffc0000 [ 181.708271][ T29] audit: type=1326 audit(182.528:6538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19108 comm="syz.2.6442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b505deb69 code=0x7ffc0000 [ 181.731171][ T29] audit: type=1326 audit(182.528:6539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19108 comm="syz.2.6442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b505deb69 code=0x7ffc0000 [ 181.770118][T19111] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.869522][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.910323][T19129] ./file0: Can't open blockdev [ 182.117277][T19185] 0{X: renamed from gretap0 [ 182.123596][T19185] 0{X: entered allmulticast mode [ 182.130783][T19185] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 182.277745][T19209] vhci_hcd: default hub control req: 0007 v0f00 i0006 l0 [ 182.331911][T19219] loop7: detected capacity change from 0 to 16384 [ 182.423066][T19229] netlink: 'syz.3.6481': attribute type 1 has an invalid length. [ 182.467878][T19229] bond7: entered promiscuous mode [ 182.489848][T19229] 8021q: adding VLAN 0 to HW filter on device bond7 [ 182.514280][T19233] 8021q: adding VLAN 0 to HW filter on device bond7 [ 182.570831][T19233] bond7: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 182.581203][T19233] bond7: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 182.641698][T19233] bond7: (slave ip6gre2): making interface the new active one [ 182.649245][T19233] ip6gre2: entered promiscuous mode [ 182.656320][T19233] bond7: (slave ip6gre2): Enslaving as an active interface with an up link [ 182.922252][T19254] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 182.926715][T19256] hub 9-0:1.0: USB hub found [ 182.941766][T19254] SELinux: failed to load policy [ 182.949862][T19256] hub 9-0:1.0: 8 ports detected [ 183.130900][T19271] loop3: detected capacity change from 0 to 512 [ 183.143505][T19271] EXT4-fs (loop3): too many log groups per flexible block group [ 183.151211][T19271] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 183.168803][T19271] EXT4-fs (loop3): mount failed [ 183.200221][T19271] loop3: detected capacity change from 0 to 512 [ 183.224103][T19271] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 288: padding at end of block bitmap is not set [ 183.240465][T19271] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 183.250101][T19271] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm +}[@: attempt to clear invalid blocks 1024 len 1 [ 183.251607][T19289] __nla_validate_parse: 6 callbacks suppressed [ 183.251621][T19289] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6503'. [ 183.285304][T19271] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm +}[@: invalid indirect mapped block 1819239214 (level 0) [ 183.287582][T19289] netlink: 'syz.1.6503': attribute type 1 has an invalid length. [ 183.306624][T19289] netlink: 'syz.1.6503': attribute type 2 has an invalid length. [ 183.313304][T19271] EXT4-fs (loop3): 1 truncate cleaned up [ 183.314354][T19289] netlink: 'syz.1.6503': attribute type 3 has an invalid length. [ 183.327743][T19289] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6503'. [ 183.330958][T19271] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.403173][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.449430][T19296] netlink: 'syz.1.6507': attribute type 1 has an invalid length. [ 183.576543][T19313] loop3: detected capacity change from 0 to 512 [ 183.610098][T19313] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 183.622417][T19313] EXT4-fs (loop3): 1 orphan inode deleted [ 183.628195][T19313] EXT4-fs (loop3): 1 truncate cleaned up [ 183.634862][T19313] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.663297][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.886421][T19322] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6518'. [ 183.897519][T19320] loop4: detected capacity change from 0 to 512 [ 183.908143][T19322] netlink: 'syz.3.6518': attribute type 1 has an invalid length. [ 183.915940][T19322] netlink: 'syz.3.6518': attribute type 2 has an invalid length. [ 183.923743][T19322] netlink: 'syz.3.6518': attribute type 3 has an invalid length. [ 183.925158][T19320] EXT4-fs (loop4): too many log groups per flexible block group [ 183.931552][T19322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6518'. [ 183.940066][T19320] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 183.956348][T19320] EXT4-fs (loop4): mount failed [ 183.990212][T19333] random: crng reseeded on system resumption [ 184.028693][T19340] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6523'. [ 184.041240][T19320] loop4: detected capacity change from 0 to 512 [ 184.053199][T19320] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 288: padding at end of block bitmap is not set [ 184.069681][T19320] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 184.079226][T19320] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm +}[@: attempt to clear invalid blocks 1024 len 1 [ 184.104988][T19320] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm +}[@: invalid indirect mapped block 1819239214 (level 0) [ 184.121165][T19320] EXT4-fs (loop4): 1 truncate cleaned up [ 184.127323][T19320] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.156615][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.185986][T19360] loop3: detected capacity change from 0 to 128 [ 184.193393][T19360] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 184.207734][T19360] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 184.257744][T19375] binfmt_misc: register: failed to install interpreter file ./file0 [ 184.302291][T19380] loop3: detected capacity change from 0 to 1024 [ 184.323266][T19380] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.361722][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.478801][T19402] loop3: detected capacity change from 0 to 8192 [ 184.516276][T19413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6554'. [ 184.525821][T19402] loop3: p1 < > p2 p4 [ 184.529987][T19402] loop3: partition table partially beyond EOD, truncated [ 184.537376][T19402] loop3: p1 start 408832 is beyond EOD, truncated [ 184.543817][T19402] loop3: p2 size 8388352 extends beyond EOD, truncated [ 184.589996][T19422] sd 0:0:1:0: device reset [ 184.595316][T19420] loop3: detected capacity change from 0 to 2048 [ 184.616602][T19420] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.779859][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.970823][T19469] hub 9-0:1.0: USB hub found [ 184.975586][T19469] hub 9-0:1.0: 8 ports detected [ 185.005637][T19475] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6580'. [ 185.022582][T19475] 8021q: adding VLAN 0 to HW filter on device bond8 [ 185.040218][T19475] bond8: (slave batadv2): Opening slave failed [ 185.073921][T19482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6584'. [ 185.634941][T19510] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=19510 comm=syz.0.6594 [ 185.647584][T19510] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=19510 comm=syz.0.6594 [ 185.714032][T19524] loop3: detected capacity change from 0 to 512 [ 185.722778][T19524] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 185.732587][T19524] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 185.741053][T19524] EXT4-fs (loop3): 1 truncate cleaned up [ 185.748440][T19524] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.775664][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.914698][T19543] smc: net device bond0 applied user defined pnetid SYZ2 [ 185.931911][T19543] smc: net device bond0 erased user defined pnetid SYZ2 [ 185.952823][T19540] loop3: detected capacity change from 0 to 128 [ 185.972433][T19540] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 186.047304][ T3298] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 187.920177][T19609] loop4: detected capacity change from 0 to 512 [ 187.937223][T19609] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 187.976942][T19609] EXT4-fs (loop4): 1 truncate cleaned up [ 188.021707][T19609] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.037066][ T29] kauditd_printk_skb: 111 callbacks suppressed [ 188.037079][ T29] audit: type=1400 audit(189.018:6651): avc: denied { create } for pid=19615 comm="syz.1.6637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 188.062627][ T29] audit: type=1400 audit(189.018:6652): avc: denied { connect } for pid=19615 comm="syz.1.6637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 188.169706][ T29] audit: type=1400 audit(189.078:6653): avc: denied { bind } for pid=19615 comm="syz.1.6637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 188.188838][ T29] audit: type=1400 audit(189.118:6654): avc: denied { setattr } for pid=19608 comm="syz.4.6635" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 188.230062][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.260703][T19620] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6640'. [ 188.292415][T19620] 8021q: adding VLAN 0 to HW filter on device bond4 [ 188.373237][T19620] bond4: (slave batadv1): Opening slave failed [ 188.415735][ T29] audit: type=1400 audit(189.388:6655): avc: denied { read } for pid=19626 comm="syz.1.6645" lport=58987 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 188.439559][T19636] netlink: 'syz.0.6648': attribute type 12 has an invalid length. [ 188.447514][T19636] netlink: 'syz.0.6648': attribute type 29 has an invalid length. [ 188.455330][T19636] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6648'. [ 188.464367][T19636] netlink: 'syz.0.6648': attribute type 1 has an invalid length. [ 188.472116][T19636] netlink: 'syz.0.6648': attribute type 2 has an invalid length. [ 188.503644][ T29] audit: type=1400 audit(189.488:6656): avc: denied { read write } for pid=19632 comm="syz.4.6647" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 188.526759][ T29] audit: type=1400 audit(189.488:6657): avc: denied { open } for pid=19632 comm="syz.4.6647" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 188.550096][ T29] audit: type=1326 audit(189.488:6658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19639 comm="syz.0.6649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f212275eb69 code=0x7ffc0000 [ 188.573026][ T29] audit: type=1326 audit(189.488:6659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19639 comm="syz.0.6649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f212275eb69 code=0x7ffc0000 [ 188.595911][ T29] audit: type=1326 audit(189.488:6660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19639 comm="syz.0.6649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f212275eb69 code=0x7ffc0000 [ 188.651742][T19652] netlink: 'syz.1.6652': attribute type 13 has an invalid length. [ 188.659725][T19652] netlink: 'syz.1.6652': attribute type 17 has an invalid length. [ 188.668119][T19650] netlink: 'syz.2.6654': attribute type 16 has an invalid length. [ 188.676052][T19650] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.6654'. [ 188.695927][T19652] 0{X: left allmulticast mode [ 188.711994][T19652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.724221][T19652] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 188.754474][T19657] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6655'. [ 188.763484][T19657] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6655'. [ 188.781787][T19666] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6655'. [ 188.790801][T19666] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6655'. [ 188.834816][T19671] loop3: detected capacity change from 0 to 512 [ 188.871505][T19671] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.914054][T19671] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.6663: bg 0: block 64: padding at end of block bitmap is not set [ 188.952575][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.156393][T19712] validate_nla: 1 callbacks suppressed [ 189.156409][T19712] netlink: 'syz.3.6680': attribute type 4 has an invalid length. [ 189.251318][T19723] rdma_op ffff88811ac1f980 conn xmit_rdma 0000000000000000 [ 190.450990][T19805] netlink: 'syz.2.6723': attribute type 4 has an invalid length. [ 190.464177][T19805] netlink: 'syz.2.6723': attribute type 4 has an invalid length. [ 190.478414][T19809] vlan0: entered allmulticast mode [ 191.302828][T19844] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6741'. [ 191.436565][T19852] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6745'. [ 191.594671][ T4835] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d [ 191.799144][T19881] serio: Serial port ptm0 [ 192.099603][T19913] loop3: detected capacity change from 0 to 1024 [ 192.106624][T19913] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 192.118862][T19913] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 192.129380][T19913] System zones: 0-1, 3-36 [ 192.135737][T19913] EXT4-fs (loop3): orphan cleanup on readonly fs [ 192.143278][T19913] EXT4-fs (loop3): 1 orphan inode deleted [ 192.149429][T19913] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 192.177005][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.552831][T19947] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 192.739109][T19969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6797'. [ 192.801711][T19981] loop3: detected capacity change from 0 to 1024 [ 192.808714][T19981] EXT4-fs: Ignoring removed orlov option [ 192.814602][T19981] EXT4-fs: Ignoring removed nomblk_io_submit option [ 192.850691][T19981] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.888136][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.902997][T19999] netlink: 'syz.0.6809': attribute type 1 has an invalid length. [ 192.966684][T20010] smc: net device bond0 applied user defined pnetid SYZ0 [ 192.977856][T20010] smc: net device bond0 erased user defined pnetid SYZ0 [ 193.168700][ T29] kauditd_printk_skb: 231 callbacks suppressed [ 193.168713][ T29] audit: type=1400 audit(524482.142:6892): avc: denied { read } for pid=20032 comm="syz.0.6823" name="event2" dev="devtmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 193.211072][ T29] audit: type=1400 audit(524482.142:6893): avc: denied { open } for pid=20032 comm="syz.0.6823" path="/dev/input/event2" dev="devtmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 193.235014][ T29] audit: type=1400 audit(524482.171:6894): avc: denied { ioctl } for pid=20032 comm="syz.0.6823" path="/dev/input/event2" dev="devtmpfs" ino=248 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 193.320482][ T29] audit: type=1400 audit(524482.297:6895): avc: denied { setopt } for pid=20042 comm="syz.3.6829" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 193.362041][ T29] audit: type=1400 audit(524482.326:6896): avc: denied { relabelfrom } for pid=20040 comm="syz.2.6828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 193.381673][ T29] audit: type=1400 audit(524482.326:6897): avc: denied { relabelto } for pid=20040 comm="syz.2.6828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 193.471313][T20054] __nla_validate_parse: 5 callbacks suppressed [ 193.471380][T20054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6834'. [ 193.529548][ T29] audit: type=1400 audit(524482.490:6898): avc: denied { name_bind } for pid=20062 comm="syz.1.6839" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 193.561770][T20061] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6836'. [ 193.576323][ T29] audit: type=1400 audit(524482.529:6899): avc: denied { read } for pid=20062 comm="syz.1.6839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 193.602999][T20069] netlink: 'syz.0.6841': attribute type 1 has an invalid length. [ 193.621604][ T29] audit: type=1400 audit(524482.568:6900): avc: denied { setopt } for pid=20066 comm="syz.2.6840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 193.624022][T20071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.650573][T20071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.676992][ T3298] block device autoloading is deprecated and will be removed. [ 193.689610][ T29] audit: type=1400 audit(524482.645:6901): avc: denied { create } for pid=20070 comm="syz.0.6842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 193.760213][T20078] loop3: detected capacity change from 0 to 512 [ 193.782822][T20078] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 193.794193][T20078] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.6845: casefold flag without casefold feature [ 193.808740][T20078] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.6845: couldn't read orphan inode 15 (err -117) [ 193.821271][T20078] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.976394][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.079862][T20093] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 194.232102][T20102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6856'. [ 194.490067][T20123] syzkaller0: entered promiscuous mode [ 194.495641][T20123] syzkaller0: entered allmulticast mode [ 195.143184][T20152] sd 0:0:1:0: device reset [ 195.313637][T20168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6886'. [ 195.385626][T20178] rdma_op ffff888127c1ed80 conn xmit_rdma 0000000000000000 [ 195.464243][T20190] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 195.840111][T20221] syzkaller0: entered promiscuous mode [ 195.845667][T20221] syzkaller0: entered allmulticast mode [ 195.975930][T20234] $H: renamed from bond0 [ 196.003028][T20238] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6917'. [ 196.012176][T20238] netlink: 'syz.2.6917': attribute type 7 has an invalid length. [ 196.019946][T20238] netlink: 'syz.2.6917': attribute type 8 has an invalid length. [ 196.027730][T20238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6917'. [ 196.102940][T20251] block device autoloading is deprecated and will be removed. [ 196.110653][T20251] syz.2.6923: attempt to access beyond end of device [ 196.110653][T20251] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 196.136754][ T3309] block device autoloading is deprecated and will be removed. [ 196.176562][T20256] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 196.252999][T20272] loop4: detected capacity change from 0 to 512 [ 196.278486][T20272] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.331407][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.332961][T20284] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.6937'. [ 196.432713][T20286] Falling back ldisc for ttyS3. [ 196.438008][T20291] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6942'. [ 196.701140][T20318] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 197.239415][T20373] Falling back ldisc for ttyS3. [ 197.267789][T20375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6977'. [ 197.490417][T20389] netlink: 'syz.3.6984': attribute type 4 has an invalid length. [ 197.500735][T20389] netlink: 'syz.3.6984': attribute type 4 has an invalid length. [ 197.571116][T20394] netlink: 'syz.3.6987': attribute type 3 has an invalid length. [ 197.597017][T20390] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6982'. [ 197.632967][T20400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.662194][T20400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.810971][T20409] sd 0:0:1:0: device reset [ 197.868856][T20417] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 198.306946][T20508] loop3: detected capacity change from 0 to 512 [ 198.316757][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 198.316839][ T29] audit: type=1326 audit(524487.151:7078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20507 comm="syz.3.7039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fae25b8d7ca code=0x7ffc0000 [ 198.350934][ T29] audit: type=1326 audit(524487.180:7079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20507 comm="syz.3.7039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fae25b8d7ca code=0x7ffc0000 [ 198.373958][ T29] audit: type=1326 audit(524487.180:7080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20507 comm="syz.3.7039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fae25b8d3d7 code=0x7ffc0000 [ 198.397220][ T29] audit: type=1326 audit(524487.180:7081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20507 comm="syz.3.7039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fae25b9030a code=0x7ffc0000 [ 198.452576][T20508] EXT4-fs (loop3): orphan cleanup on readonly fs [ 198.459570][T20508] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.7039: bg 0: block 248: padding at end of block bitmap is not set [ 198.475560][ T29] audit: type=1400 audit(524487.297:7082): avc: denied { read write } for pid=3309 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 198.499482][ T29] audit: type=1400 audit(524487.297:7083): avc: denied { open } for pid=3309 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 198.523380][ T29] audit: type=1400 audit(524487.297:7084): avc: denied { ioctl } for pid=3309 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 198.561920][T20508] Quota error (device loop3): write_blk: dquota write failed [ 198.569471][T20508] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 198.573175][ T29] audit: type=1400 audit(524487.337:7085): avc: denied { map_create } for pid=20518 comm="syz.2.7045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 198.579476][T20508] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.7039: Failed to acquire dquot type 1 [ 198.670534][T20508] EXT4-fs (loop3): 1 truncate cleaned up [ 198.689523][T20508] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 198.752784][T20543] __nla_validate_parse: 1 callbacks suppressed [ 198.752799][T20543] netlink: 108 bytes leftover after parsing attributes in process `syz.1.7055'. [ 198.768237][T20543] netlink: 108 bytes leftover after parsing attributes in process `syz.1.7055'. [ 198.777325][T20543] netlink: 108 bytes leftover after parsing attributes in process `syz.1.7055'. [ 198.786861][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.824638][T20550] netlink: 'syz.3.7058': attribute type 2 has an invalid length. [ 198.832411][T20550] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7058'. [ 198.869359][T20560] serio: Serial port ptm0 [ 198.967975][T20571] netlink: 'syz.4.7068': attribute type 4 has an invalid length. [ 198.987926][T20575] SELinux: Context system_u:object_r:pam_exec_t:s0 is not valid (left unmapped). [ 199.002406][T20571] netlink: 'syz.4.7068': attribute type 4 has an invalid length. [ 199.013049][T20577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7071'. [ 199.022061][T20577] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7071'. [ 199.062444][T20577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7071'. [ 199.071319][T20577] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7071'. [ 199.331737][T20602] hub 9-0:1.0: USB hub found [ 199.340395][T20602] hub 9-0:1.0: 8 ports detected [ 199.522678][T20626] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 199.811795][T20642] netlink: 108 bytes leftover after parsing attributes in process `syz.0.7101'. [ 199.820922][T20642] netlink: 108 bytes leftover after parsing attributes in process `syz.0.7101'. [ 200.403283][T20665] 9pnet: Could not find request transport: f [ 200.414437][T20668] loop3: detected capacity change from 0 to 512 [ 200.422631][T20668] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 200.431824][T20668] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 200.455224][T20668] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 200.465037][T20668] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 200.473364][T20668] System zones: 0-2, 18-18, 34-35 [ 200.479313][T20668] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.523142][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.937471][T20745] random: crng reseeded on system resumption [ 201.356498][T20787] loop4: detected capacity change from 0 to 128 [ 201.374203][T20789] netlink: 'syz.2.7166': attribute type 21 has an invalid length. [ 201.775032][T20835] loop4: detected capacity change from 0 to 1024 [ 201.819365][T20835] EXT4-fs: Ignoring removed nomblk_io_submit option [ 201.862854][T20835] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.887703][T20856] tipc: Enabled bearer , priority 0 [ 201.963344][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.982803][T20868] tipc: Disabling bearer [ 202.150812][T20890] SELinux: failed to load policy [ 202.299589][T20930] IPVS: Error connecting to the multicast addr [ 202.541981][T20974] loop4: detected capacity change from 0 to 2048 [ 202.555422][T20983] syzkaller1: entered promiscuous mode [ 202.560931][T20983] syzkaller1: entered allmulticast mode [ 202.575214][T20974] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.7246: bad orphan inode 61 [ 202.624045][T20974] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.698111][T20993] 9pnet_fd: Insufficient options for proto=fd [ 202.752914][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.827257][T21012] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 202.931856][T21024] netlink: 'syz.0.7270': attribute type 1 has an invalid length. [ 203.068875][T21044] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address [ 203.082899][T21044] bond5: (slave wireguard0): Error -95 calling set_mac_address [ 203.473571][ T29] kauditd_printk_skb: 356 callbacks suppressed [ 203.473585][ T29] audit: type=1326 audit(524492.209:7442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21090 comm="syz.1.7297" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5927e8eb69 code=0x0 [ 203.528802][ T29] audit: type=1326 audit(524492.268:7443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21094 comm="syz.4.7299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db984eb69 code=0x7ffc0000 [ 203.553742][ T29] audit: type=1326 audit(524492.268:7444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21094 comm="syz.4.7299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db984eb69 code=0x7ffc0000 [ 203.576979][ T29] audit: type=1326 audit(524492.268:7445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21094 comm="syz.4.7299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f9db984eb69 code=0x7ffc0000 [ 203.579481][T21098] syz.1.7297: attempt to access beyond end of device [ 203.579481][T21098] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 203.600251][ T29] audit: type=1326 audit(524492.268:7446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21094 comm="syz.4.7299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db984eb69 code=0x7ffc0000 [ 203.636465][ T29] audit: type=1326 audit(524492.288:7447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21094 comm="syz.4.7299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db984eb69 code=0x7ffc0000 [ 203.662644][ T29] audit: type=1326 audit(524492.396:7448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21100 comm="syz.4.7301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db984eb69 code=0x7ffc0000 [ 203.687534][ T29] audit: type=1326 audit(524492.396:7449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21100 comm="syz.4.7301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db984eb69 code=0x7ffc0000 [ 203.710752][ T29] audit: type=1326 audit(524492.396:7450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21100 comm="syz.4.7301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f9db984eb69 code=0x7ffc0000 [ 203.714789][T21103] loop4: detected capacity change from 0 to 128 [ 203.734069][ T29] audit: type=1326 audit(524492.396:7451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21100 comm="syz.4.7301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db984eb69 code=0x7ffc0000 [ 203.744849][T21103] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 203.810747][ T3309] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 203.972184][T21106] netlink: 'syz.3.7303': attribute type 1 has an invalid length. [ 203.979981][T21106] __nla_validate_parse: 8 callbacks suppressed [ 203.979996][T21106] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7303'. [ 204.101154][T21131] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 204.108972][T21131] SELinux: failed to load policy [ 204.300994][T21167] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 204.337334][T21172] pimreg: entered allmulticast mode [ 204.344671][T21172] pimreg: left allmulticast mode [ 204.366027][T21176] netlink: 176 bytes leftover after parsing attributes in process `syz.2.7335'. [ 204.467743][T21188] pimreg: entered allmulticast mode [ 204.493503][T21188] pimreg: left allmulticast mode [ 204.555307][T21200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7348'. [ 204.564364][T21200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7348'. [ 204.724947][T21213] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 204.820528][T21233] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7363'. [ 205.445348][T21257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7381'. [ 205.445867][T21253] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 205.558700][T13021] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 205.583888][T21271] netlink: 200 bytes leftover after parsing attributes in process `syz.1.7376'. [ 205.866133][T21304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7393'. [ 205.988417][T21312] loop3: detected capacity change from 0 to 256 [ 206.025570][T21312] syz.3.7397: attempt to access beyond end of device [ 206.025570][T21312] loop3: rw=2049, sector=256, nr_sectors = 288 limit=256 [ 206.048358][T21312] syz.3.7397: attempt to access beyond end of device [ 206.048358][T21312] loop3: rw=2049, sector=608, nr_sectors = 416 limit=256 [ 206.065400][T21312] syz.3.7397: attempt to access beyond end of device [ 206.065400][T21312] loop3: rw=2049, sector=1056, nr_sectors = 448 limit=256 [ 206.407378][T21332] SELinux: failed to load policy [ 206.546871][T21359] netlink: 'syz.1.7416': attribute type 3 has an invalid length. [ 206.639531][T21372] netlink: 'syz.1.7422': attribute type 3 has an invalid length. [ 206.795775][T21384] tipc: Enabled bearer , priority 0 [ 206.809376][T21387] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7421'. [ 206.846812][T21387] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7421'. [ 206.882066][T21394] tipc: Disabling bearer [ 207.015973][T21407] 9pnet: p9_errstr2errno: server reported unknown error tat [ 207.189705][T21429] netlink: 'syz.3.7448': attribute type 10 has an invalid length. [ 207.424340][T21436] tipc: Enabling of bearer rejected, failed to enable media [ 207.739024][T21485] ip6gre2: entered allmulticast mode [ 207.795514][T21497] binfmt_misc: register: failed to install interpreter file ./file0/file0 [ 208.072963][T21527] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 208.285225][T21576] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 208.288247][T21575] syzkaller1: entered promiscuous mode [ 208.298348][T21575] syzkaller1: entered allmulticast mode [ 208.306528][T21576] SELinux: failed to load policy [ 208.316418][T21575] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 208.351201][T21584] loop4: detected capacity change from 0 to 2048 [ 208.363834][T21584] EXT4-fs: Ignoring removed nobh option [ 208.382675][T21584] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.412466][T21595] batadv_slave_1: entered promiscuous mode [ 208.419264][T21594] batadv_slave_1: left promiscuous mode [ 208.447781][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.579983][ T29] kauditd_printk_skb: 247 callbacks suppressed [ 208.580051][ T29] audit: type=1326 audit(524497.246:7699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21597 comm="syz.1.7523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5927e8eb69 code=0x7fc00000 [ 208.596986][T21617] loop4: detected capacity change from 0 to 1024 [ 208.647752][T21617] EXT4-fs: inline encryption not supported [ 208.656595][T21617] EXT4-fs: Ignoring removed bh option [ 208.694454][T21617] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.730944][T21629] loop3: detected capacity change from 0 to 512 [ 208.738775][T21629] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 208.742667][ T29] audit: type=1400 audit(524497.394:7700): avc: denied { mounton } for pid=21628 comm="syz.3.7537" path="/1498/bus" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 208.773061][ T29] audit: type=1400 audit(524497.404:7701): avc: denied { ioctl } for pid=21615 comm="syz.4.7532" path="/1405/file1/file1" dev="loop4" ino=15 ioctlcmd=0x662a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 208.773945][T21629] EXT4-fs (loop3): 1 truncate cleaned up [ 208.804678][T21629] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.818137][T21629] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.829694][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.858315][ T29] audit: type=1400 audit(524497.513:7702): avc: denied { ioctl } for pid=21632 comm="syz.2.7539" path="socket:[61786]" dev="sockfs" ino=61786 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 208.886467][ T29] audit: type=1400 audit(524497.542:7703): avc: denied { unmount } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 208.933666][ T29] audit: type=1326 audit(524497.582:7704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21640 comm="syz.4.7542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db984eb69 code=0x7ffc0000 [ 208.956942][ T29] audit: type=1326 audit(524497.582:7705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21640 comm="syz.4.7542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db984eb69 code=0x7ffc0000 [ 208.980242][ T29] audit: type=1326 audit(524497.582:7706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21640 comm="syz.4.7542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f9db984eb69 code=0x7ffc0000 [ 209.003535][ T29] audit: type=1326 audit(524497.582:7707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21640 comm="syz.4.7542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db984eb69 code=0x7ffc0000 [ 209.040472][ T29] audit: type=1400 audit(524497.691:7708): avc: denied { create } for pid=21644 comm="syz.4.7544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 209.180711][T21661] dvmrp0: entered allmulticast mode [ 209.189787][T21663] blktrace: Concurrent blktraces are not allowed on sg0 [ 209.239650][T21667] ALSA: seq fatal error: cannot create timer (-19) [ 209.441931][T21694] serio: Serial port ptm0 [ 209.785243][T21740] netlink: 'syz.2.7580': attribute type 3 has an invalid length. [ 209.858636][T21749] loop4: detected capacity change from 0 to 2048 [ 209.869144][ T9] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 209.876992][ T9] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 209.884776][ T9] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 209.892560][ T9] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 209.900445][ T9] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 209.908235][ T9] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 209.915996][ T9] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 209.923727][ T9] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 209.931510][ T9] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 209.939295][ T9] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 209.948303][ T9] hid-generic 0000:007F:FFFFFFFE.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 209.980762][T21749] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.995961][T21762] loop3: detected capacity change from 0 to 128 [ 210.149112][T21772] __nla_validate_parse: 3 callbacks suppressed [ 210.149128][T21772] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7594'. [ 210.181600][T21772] IPVS: Unknown mcast interface: vcan0 [ 210.190288][T21776] netlink: 'syz.3.7596': attribute type 3 has an invalid length. [ 210.279086][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.290697][T21790] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 210.337565][T21801] netlink: 'syz.1.7608': attribute type 3 has an invalid length. [ 210.450925][T21821] loop4: detected capacity change from 0 to 512 [ 210.475505][T21821] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 210.501831][T21821] EXT4-fs (loop4): mount failed [ 210.663982][T21836] netem: change failed [ 210.723658][T21846] dvmrp0: entered allmulticast mode [ 210.738198][T21848] syzkaller1: entered promiscuous mode [ 210.743784][T21848] syzkaller1: entered allmulticast mode [ 210.946705][T21868] loop4: detected capacity change from 0 to 512 [ 210.957082][T21868] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 210.978399][T21868] EXT4-fs (loop4): 1 truncate cleaned up [ 210.984492][T21868] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.007845][T21868] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.163604][T21879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7642'. [ 211.176288][T21879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7642'. [ 211.205429][T21879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7642'. [ 211.215065][T21879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7642'. [ 211.229890][T21897] SELinux: ebitmap: truncated map [ 211.238579][T21897] SELinux: failed to load policy [ 211.330211][T21919] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 212.116694][T22009] 9pnet_fd: Insufficient options for proto=fd [ 212.150846][T22013] loop4: detected capacity change from 0 to 164 [ 212.160961][T22013] syz.4.7706: attempt to access beyond end of device [ 212.160961][T22013] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 212.175453][T22013] syz.4.7706: attempt to access beyond end of device [ 212.175453][T22013] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 212.685099][T22045] loop4: detected capacity change from 0 to 512 [ 212.691877][T22045] EXT4-fs: Ignoring removed orlov option [ 212.717384][T22045] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.802640][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.830034][T22064] Falling back ldisc for ttyS3. [ 212.884445][T22073] SELinux: failed to load policy [ 212.903231][T22076] loop4: detected capacity change from 0 to 128 [ 212.971377][T13023] kworker/u8:34: attempt to access beyond end of device [ 212.971377][T13023] loop4: rw=1, sector=145, nr_sectors = 8 limit=128 [ 212.986808][T13023] kworker/u8:34: attempt to access beyond end of device [ 212.986808][T13023] loop4: rw=1, sector=161, nr_sectors = 8 limit=128 [ 213.001510][T13023] kworker/u8:34: attempt to access beyond end of device [ 213.001510][T13023] loop4: rw=1, sector=177, nr_sectors = 8 limit=128 [ 213.015278][T13023] kworker/u8:34: attempt to access beyond end of device [ 213.015278][T13023] loop4: rw=1, sector=193, nr_sectors = 8 limit=128 [ 213.037643][T13023] kworker/u8:34: attempt to access beyond end of device [ 213.037643][T13023] loop4: rw=1, sector=209, nr_sectors = 8 limit=128 [ 213.051444][T13023] kworker/u8:34: attempt to access beyond end of device [ 213.051444][T13023] loop4: rw=1, sector=225, nr_sectors = 8 limit=128 [ 213.065366][T13023] kworker/u8:34: attempt to access beyond end of device [ 213.065366][T13023] loop4: rw=1, sector=241, nr_sectors = 8 limit=128 [ 213.070827][T22081] netlink: '+}[@': attribute type 3 has an invalid length. [ 213.099058][T13023] kworker/u8:34: attempt to access beyond end of device [ 213.099058][T13023] loop4: rw=1, sector=257, nr_sectors = 8 limit=128 [ 213.389523][T22143] sctp: [Deprecated]: syz.3.7761 (pid 22143) Use of int in maxseg socket option. [ 213.389523][T22143] Use struct sctp_assoc_value instead [ 213.753466][ T29] kauditd_printk_skb: 232 callbacks suppressed [ 213.753481][ T29] audit: type=1326 audit(524502.363:7940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22176 comm="syz.0.7776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2122755b27 code=0x7ffc0000 [ 213.792367][ T29] audit: type=1326 audit(524502.393:7941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22176 comm="syz.0.7776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f21226fad69 code=0x7ffc0000 [ 213.815579][ T29] audit: type=1326 audit(524502.393:7942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22176 comm="syz.0.7776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2122755b27 code=0x7ffc0000 [ 213.839055][ T29] audit: type=1326 audit(524502.393:7943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22176 comm="syz.0.7776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f21226fad69 code=0x7ffc0000 [ 213.862214][ T29] audit: type=1326 audit(524502.393:7944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22176 comm="syz.0.7776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f212275eb69 code=0x7ffc0000 [ 213.885554][ T29] audit: type=1326 audit(524502.393:7945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22176 comm="syz.0.7776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f212275eb69 code=0x7ffc0000 [ 213.909156][ T29] audit: type=1326 audit(524502.393:7946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22176 comm="syz.0.7776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f212275eb69 code=0x7ffc0000 [ 213.932530][ T29] audit: type=1326 audit(524502.393:7947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22176 comm="syz.0.7776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f212275eb69 code=0x7ffc0000 [ 213.955698][ T29] audit: type=1326 audit(524502.393:7948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22176 comm="syz.0.7776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f212275eb69 code=0x7ffc0000 [ 213.978964][ T29] audit: type=1326 audit(524502.393:7949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22176 comm="syz.0.7776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f212275eb69 code=0x7ffc0000 [ 214.374669][ T3349] hid-generic 0000:0D17:0000.000D: item fetching failed at offset 0/2 [ 214.388463][ T3349] hid-generic 0000:0D17:0000.000D: probe with driver hid-generic failed with error -22 [ 214.431449][T22226] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7796'. [ 214.472969][T22228] SELinux: failed to load policy [ 214.476292][T22232] vlan2: entered allmulticast mode [ 214.645312][T22267] netlink: 368 bytes leftover after parsing attributes in process `syz.0.7815'. [ 214.876050][T22312] loop4: detected capacity change from 0 to 1024 [ 214.883882][T22312] EXT4-fs: Ignoring removed nobh option [ 214.891816][T22312] EXT4-fs: Ignoring removed bh option [ 214.915696][T22312] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.939238][T22308] loop3: detected capacity change from 0 to 8192 [ 214.965460][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.976450][T22308] loop3: p1 p2 p3 p4 [ 214.980562][T22308] loop3: p1 start 4294508288 is beyond EOD, truncated [ 214.987374][T22308] loop3: p2 start 2936012800 is beyond EOD, truncated [ 214.994166][T22308] loop3: p3 start 1912602624 is beyond EOD, truncated [ 215.000958][T22308] loop3: p4 size 656640 extends beyond EOD, truncated [ 215.176908][T22366] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 215.185033][T22366] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 215.253165][T22382] loop4: detected capacity change from 0 to 1024 [ 215.271911][T22382] EXT4-fs: Ignoring removed orlov option [ 215.289836][T22382] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.318190][T22382] SELinux: policydb version -957581230 does not match my version range 15-35 [ 215.335055][T22382] SELinux: failed to load policy [ 215.347840][T22382] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 215.368947][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.455828][T22424] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7852'. [ 215.689143][T22425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7851'. [ 215.709461][T22425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7851'. [ 215.731342][T22425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7851'. [ 215.749374][T22425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7851'. [ 215.938371][T22480] SELinux: Context system_u:object_r:dhcpc_state_t:s0 is not valid (left unmapped). [ 216.001507][T22486] loop4: detected capacity change from 0 to 1024 [ 216.046941][T22486] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.065100][T22493] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 216.085707][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.204312][T22515] atomic_op ffff888127c1d128 conn xmit_atomic 0000000000000000 [ 216.255923][T22525] loop4: detected capacity change from 0 to 1024 [ 216.272689][T22525] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.323608][T22537] netlink: 'syz.3.7896': attribute type 3 has an invalid length. [ 216.333059][T22537] netlink: 'syz.3.7896': attribute type 3 has an invalid length. [ 216.400726][T22547] loop3: detected capacity change from 0 to 128 [ 216.461523][T22553] netlink: 'syz.3.7903': attribute type 1 has an invalid length. [ 216.474618][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.510388][T22559] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7906'. [ 216.599358][T22566] hub 9-0:1.0: USB hub found [ 216.607211][T22566] hub 9-0:1.0: 8 ports detected [ 216.611590][T22555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7904'. [ 216.624279][T22555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7904'. [ 216.624363][T22568] netlink: 'syz.3.7910': attribute type 1 has an invalid length. [ 216.624374][T22568] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7910'. [ 216.651091][T22555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7904'. [ 216.753406][ T3298] block device autoloading is deprecated and will be removed. [ 216.880340][T22604] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=22604 comm=syz.4.7927 [ 217.220433][T22661] ref_ctr_offset mismatch. inode: 0x1fee offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 217.822786][T22713] bond5: entered promiscuous mode [ 217.827841][T22713] bond5: entered allmulticast mode [ 217.833407][T22713] 8021q: adding VLAN 0 to HW filter on device bond5 [ 217.844422][T22713] bond5 (unregistering): Released all slaves [ 217.872145][T22722] $H: renamed from bond0 [ 217.880299][T22722] $H: entered promiscuous mode [ 217.885378][T22722] bond_slave_0: entered promiscuous mode [ 217.891365][T22722] bond_slave_1: entered promiscuous mode [ 217.897191][T22722] bridge_slave_1: entered promiscuous mode [ 217.940717][T22728] raw_sendmsg: syz.0.7978 forgot to set AF_INET. Fix it! [ 217.968082][T22735] netlink: 'syz.0.7983': attribute type 13 has an invalid length. [ 218.008175][T22735] bridge0: port 2(dummy0) entered blocking state [ 218.014595][T22735] bridge0: port 2(dummy0) entered forwarding state [ 218.031222][T22735] 8021q: adding VLAN 0 to HW filter on device $H [ 218.040618][T22735] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 218.244996][T22778] netlink: 'syz.0.8003': attribute type 1 has an invalid length. [ 218.376290][T22788] loop3: detected capacity change from 0 to 1024 [ 218.387510][T22788] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.510348][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.530588][T22800] loop3: detected capacity change from 0 to 164 [ 218.539420][T22800] bio_check_eod: 104 callbacks suppressed [ 218.539430][T22800] syz.3.8011: attempt to access beyond end of device [ 218.539430][T22800] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 218.559479][T22800] syz.3.8011: attempt to access beyond end of device [ 218.559479][T22800] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 218.763280][T16226] hid_parser_main: 33 callbacks suppressed [ 218.763292][T16226] hid-generic 0008:0006:0007.000E: unknown main item tag 0x0 [ 218.776824][T16226] hid-generic 0008:0006:0007.000E: unknown main item tag 0x0 [ 218.784399][T16226] hid-generic 0008:0006:0007.000E: unknown main item tag 0x0 [ 218.791909][T16226] hid-generic 0008:0006:0007.000E: unknown main item tag 0x0 [ 218.799292][T16226] hid-generic 0008:0006:0007.000E: unknown main item tag 0x0 [ 218.806802][T16226] hid-generic 0008:0006:0007.000E: unknown main item tag 0x0 [ 218.814221][T16226] hid-generic 0008:0006:0007.000E: unknown main item tag 0x0 [ 218.821266][ T29] kauditd_printk_skb: 202 callbacks suppressed [ 218.821280][ T29] audit: type=1400 audit(218.404:8152): avc: denied { ioctl } for pid=22815 comm="syz.4.8020" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 218.821641][T16226] hid-generic 0008:0006:0007.000E: unknown main item tag 0x0 [ 218.859570][T16226] hid-generic 0008:0006:0007.000E: unknown main item tag 0x0 [ 218.866968][T16226] hid-generic 0008:0006:0007.000E: unknown main item tag 0x0 [ 218.875188][T16226] hid-generic 0008:0006:0007.000E: hidraw0: HID v0.0b Device [syz1] on syz1 [ 218.889440][ T29] audit: type=1326 audit(218.484:8153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22818 comm="syz.2.8021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b505deb69 code=0x7ffc0000 [ 218.916899][ T29] audit: type=1326 audit(218.484:8154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22818 comm="syz.2.8021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b505deb69 code=0x7ffc0000 [ 218.939949][ T29] audit: type=1326 audit(218.484:8155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22818 comm="syz.2.8021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b505deb69 code=0x7ffc0000 [ 218.962842][ T29] audit: type=1326 audit(218.484:8156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22818 comm="syz.2.8021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b505deb69 code=0x7ffc0000 [ 218.985754][ T29] audit: type=1326 audit(218.484:8157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22818 comm="syz.2.8021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b505deb69 code=0x7ffc0000 [ 219.008629][ T29] audit: type=1326 audit(218.484:8158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22818 comm="syz.2.8021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b505deb69 code=0x7ffc0000 [ 219.031506][ T29] audit: type=1326 audit(218.484:8159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22818 comm="syz.2.8021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b505deb69 code=0x7ffc0000 [ 219.054463][ T29] audit: type=1326 audit(218.504:8160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22818 comm="syz.2.8021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b505deb69 code=0x7ffc0000 [ 219.077373][ T29] audit: type=1326 audit(218.504:8161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22818 comm="syz.2.8021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b505deb69 code=0x7ffc0000 [ 219.132729][T22827] netlink: 'syz.4.8025': attribute type 13 has an invalid length. [ 219.145953][T22827] gretap0: refused to change device tx_queue_len [ 219.152466][T22827] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 219.227309][T22836] tunl0: entered promiscuous mode [ 219.232576][T22836] netlink: 'syz.4.8029': attribute type 1 has an invalid length. [ 219.269024][T22842] hub 9-0:1.0: USB hub found [ 219.273873][T22842] hub 9-0:1.0: 8 ports detected [ 219.386427][T16226] hid-generic 0008:0006:0007.000F: hidraw0: HID v0.0b Device [syz1] on syz1 [ 219.527341][T22884] loop3: detected capacity change from 0 to 128 [ 219.564026][T22884] syz.3.8050: attempt to access beyond end of device [ 219.564026][T22884] loop3: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 219.578467][T22884] syz.3.8050: attempt to access beyond end of device [ 219.578467][T22884] loop3: rw=2049, sector=169, nr_sectors = 16 limit=128 [ 219.592787][T22884] syz.3.8050: attempt to access beyond end of device [ 219.592787][T22884] loop3: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 219.619552][T22884] syz.3.8050: attempt to access beyond end of device [ 219.619552][T22884] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 219.633492][T22884] syz.3.8050: attempt to access beyond end of device [ 219.633492][T22884] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 219.648746][T22884] syz.3.8050: attempt to access beyond end of device [ 219.648746][T22884] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 219.663376][T22884] syz.3.8050: attempt to access beyond end of device [ 219.663376][T22884] loop3: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 219.677349][T22884] syz.3.8050: attempt to access beyond end of device [ 219.677349][T22884] loop3: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 219.736992][T22912] serio: Serial port ptm0 [ 219.815056][T22929] openvswitch: netlink: Message has 6 unknown bytes. [ 220.185219][T22989] vcan0: entered allmulticast mode [ 220.205418][T22989] vcan0: left allmulticast mode [ 220.285670][T23000] tunl0: entered promiscuous mode [ 220.290881][T23000] netlink: 'syz.2.8071': attribute type 1 has an invalid length. [ 220.350347][T23010] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 220.350347][T23010] program syz.1.8074 not setting count and/or reply_len properly [ 220.546704][T23035] hub 9-0:1.0: USB hub found [ 220.558864][T23035] hub 9-0:1.0: 8 ports detected [ 220.598210][T23042] __nla_validate_parse: 12 callbacks suppressed [ 220.598225][T23042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8089'. [ 221.333135][T23124] geneve2: entered promiscuous mode [ 221.338444][T23124] geneve2: entered allmulticast mode [ 221.362840][T23131] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8125'. [ 221.371900][T23131] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8125'. [ 221.396202][T23131] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8125'. [ 221.426800][T23131] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8125'. [ 221.435859][T23131] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8125'. [ 221.446643][T23131] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8125'. [ 221.506691][T23131] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8125'. [ 221.515840][T23131] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8125'. [ 221.525822][T23131] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8125'. [ 221.944022][T23258] netlink: 'syz.1.8177': attribute type 1 has an invalid length. [ 222.264939][T23310] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 222.570016][T23321] netlink: 'syz.2.8204': attribute type 13 has an invalid length. [ 222.578559][T23321] tunl0: left promiscuous mode [ 222.587075][T23321] gretap0: refused to change device tx_queue_len [ 222.601402][T23321] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 222.844190][T23374] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 222.844473][T23371] 9pnet: Could not find request transport: 0xffffffffffffffff [ 222.866109][T23374] SELinux: failed to load policy [ 223.309459][T23434] loop3: detected capacity change from 0 to 512 [ 223.316704][T23434] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 223.333505][T23434] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.356329][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.424487][T23452] random: crng reseeded on system resumption [ 223.428760][T23454] loop3: detected capacity change from 0 to 512 [ 223.434427][T23452] Restarting kernel threads ... [ 223.441048][T23454] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.8260: casefold flag without casefold feature [ 223.441941][T23452] Done restarting kernel threads. [ 223.456193][T23454] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.8260: couldn't read orphan inode 15 (err -117) [ 223.474367][T23454] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.582712][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.714010][T23487] netlink: 'syz.4.8271': attribute type 13 has an invalid length. [ 223.724678][T23487] tunl0: left promiscuous mode [ 223.737186][T23487] gretap0: refused to change device tx_queue_len [ 223.744257][T23487] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 223.799468][T23497] 0{X: renamed from gretap0 (while UP) [ 223.806899][T23497] 0{X: entered allmulticast mode [ 223.814504][T23497] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 223.860939][ T29] kauditd_printk_skb: 282 callbacks suppressed [ 223.860953][ T29] audit: type=1400 audit(223.454:8444): avc: denied { create } for pid=23505 comm="syz.4.8281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 223.904077][ T29] audit: type=1400 audit(223.484:8445): avc: denied { connect } for pid=23505 comm="syz.4.8281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 223.904140][ T29] audit: type=1400 audit(223.484:8446): avc: denied { ioctl } for pid=23505 comm="syz.4.8281" path="socket:[66520]" dev="sockfs" ino=66520 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 223.920420][T23515] loop4: detected capacity change from 0 to 1024 [ 223.969336][T23515] EXT4-fs: inline encryption not supported [ 223.973537][ T29] audit: type=1326 audit(223.554:8447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23519 comm="syz.0.8286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f212275eb69 code=0x7ffc0000 [ 223.977587][T23515] EXT4-fs: Ignoring removed bh option [ 223.998209][ T29] audit: type=1326 audit(223.554:8448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23519 comm="syz.0.8286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f212275eb69 code=0x7ffc0000 [ 224.030138][ T29] audit: type=1326 audit(223.614:8449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23519 comm="syz.0.8286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f212275eb69 code=0x7ffc0000 [ 224.071929][T23515] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.122967][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.148456][ T29] audit: type=1400 audit(223.734:8450): avc: denied { mount } for pid=23532 comm="syz.3.8292" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 224.193530][ T29] audit: type=1326 audit(223.734:8451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23519 comm="syz.0.8286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f212275eb69 code=0x7ffc0000 [ 224.216605][ T29] audit: type=1326 audit(223.734:8452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23519 comm="syz.0.8286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f212275eb69 code=0x7ffc0000 [ 224.239542][ T29] audit: type=1326 audit(223.734:8453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23519 comm="syz.0.8286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f212275eb69 code=0x7ffc0000 [ 224.352186][T23555] ALSA: seq fatal error: cannot create timer (-22) [ 224.512604][T23599] loop3: detected capacity change from 0 to 128 [ 224.529442][T23599] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 224.546425][T23599] EXT4-fs (loop3): shut down requested (1) [ 224.564207][ T3298] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 224.608496][T23611] IPVS: Error connecting to the multicast addr [ 225.028128][T23679] 9pnet: Could not find request transport: 0xffffffffffffffff [ 225.316906][T23715] bond0: entered promiscuous mode [ 225.316993][T23715] bond0: entered allmulticast mode [ 225.317156][T23715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.325361][T23715] bond0 (unregistering): Released all slaves [ 225.402203][T23726] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 225.646723][T23753] __nla_validate_parse: 24 callbacks suppressed [ 225.646756][T23753] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8382'. [ 225.646774][T23753] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8382'. [ 225.646806][T23753] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8382'. [ 225.661225][T23753] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8382'. [ 225.697120][T23753] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8382'. [ 225.697746][T23753] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8382'. [ 225.771880][T23753] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8382'. [ 225.771898][T23753] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8382'. [ 225.771932][T23753] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8382'. [ 225.922645][T23779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8394'. [ 226.117186][T23803] atomic_op ffff888119b07528 conn xmit_atomic 0000000000000000 [ 226.154612][T23807] loop4: detected capacity change from 0 to 1024 [ 226.170654][T23807] EXT4-fs: Ignoring removed nomblk_io_submit option [ 226.184269][T23807] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.249470][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.293271][T23828] x_tables: ip_tables: udp match: only valid for protocol 17 [ 226.440511][T23839] loop4: detected capacity change from 0 to 1024 [ 226.447074][T23839] EXT4-fs: Ignoring removed orlov option [ 226.493663][T23839] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.564006][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.673489][T23877] random: crng reseeded on system resumption [ 226.699662][T23877] Restarting kernel threads ... [ 226.705140][T23877] Done restarting kernel threads. [ 226.771946][T23889] netem: change failed [ 227.014243][T23920] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 227.064019][T23930] veth0_to_team: left promiscuous mode [ 227.069544][T23930] veth0_to_team: left allmulticast mode [ 227.088077][T23930] bond7: left promiscuous mode [ 227.092912][T23930] ip6gre2: left promiscuous mode [ 227.203224][T23950] bond5: entered promiscuous mode [ 227.208297][T23950] bond5: entered allmulticast mode [ 227.213694][T23950] 8021q: adding VLAN 0 to HW filter on device bond5 [ 227.230208][T23950] bond5 (unregistering): Released all slaves [ 227.302742][T23969] random: crng reseeded on system resumption [ 227.313553][T23969] Restarting kernel threads ... [ 227.318747][T23969] Done restarting kernel threads. [ 227.428748][T23995] bond6: entered promiscuous mode [ 227.434053][T23995] bond6: entered allmulticast mode [ 227.439705][T23995] 8021q: adding VLAN 0 to HW filter on device bond6 [ 227.456341][T23995] bond6 (unregistering): Released all slaves [ 227.475609][T24003] loop4: detected capacity change from 0 to 128 [ 227.483868][T24003] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 227.531455][ T3309] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 227.553368][T16226] kernel write not supported for file bpf-prog (pid: 16226 comm: kworker/1:10) [ 228.114438][T24093] bond9: entered promiscuous mode [ 228.119512][T24093] bond9: entered allmulticast mode [ 228.134638][T24093] 8021q: adding VLAN 0 to HW filter on device bond9 [ 228.190329][T24093] bond9 (unregistering): Released all slaves [ 228.569132][T24125] loop4: detected capacity change from 0 to 1024 [ 228.592702][T24125] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 228.603756][T24125] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 228.631771][T24125] JBD2: no valid journal superblock found [ 228.637539][T24125] EXT4-fs (loop4): Could not load journal inode [ 228.696319][T24125] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 228.917204][T24134] loop4: detected capacity change from 0 to 32768 [ 228.976887][T24134] loop4: p2 p3 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 [ 229.040541][ T29] kauditd_printk_skb: 239 callbacks suppressed [ 229.040555][ T29] audit: type=1400 audit(228.634:8693): avc: denied { mounton } for pid=24132 comm="syz.4.8549" path="/proc/3533/task" dev="proc" ino=69437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 230.068822][ T29] audit: type=1400 audit(229.654:8694): avc: denied { setopt } for pid=24145 comm="syz.1.8554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 230.117186][T24157] loop4: detected capacity change from 0 to 1024 [ 230.125826][T24150] bond0: entered promiscuous mode [ 230.131048][T24150] bond0: entered allmulticast mode [ 230.141083][T24163] random: crng reseeded on system resumption [ 230.156615][T24150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.196624][T24150] bond0 (unregistering): Released all slaves [ 230.210110][ T29] audit: type=1400 audit(229.794:8695): avc: denied { connect } for pid=24174 comm="syz.3.8569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 230.233844][ T29] audit: type=1400 audit(229.804:8696): avc: denied { unmount } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 230.262431][ T29] audit: type=1326 audit(229.844:8697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24176 comm="syz.4.8570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db984eb69 code=0x7ffc0000 [ 230.285458][ T29] audit: type=1326 audit(229.844:8698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24176 comm="syz.4.8570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9db984eb69 code=0x7ffc0000 [ 230.308579][ T29] audit: type=1326 audit(229.844:8699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24176 comm="syz.4.8570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db984eb69 code=0x7ffc0000 [ 230.331702][ T29] audit: type=1326 audit(229.854:8700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24176 comm="syz.4.8570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db984eb69 code=0x7ffc0000 [ 230.355047][ T29] audit: type=1326 audit(229.854:8701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24176 comm="syz.4.8570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9db984eb69 code=0x7ffc0000 [ 230.378002][ T29] audit: type=1326 audit(229.854:8702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24176 comm="syz.4.8570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db984eb69 code=0x7ffc0000 [ 230.494014][T24204] ALSA: seq fatal error: cannot create timer (-19) [ 231.021688][T24304] loop3: detected capacity change from 0 to 512 [ 231.030475][T24304] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.8628: corrupted in-inode xattr: e_value size too large [ 231.046381][T24304] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.8628: couldn't read orphan inode 15 (err -117) [ 231.067227][T24304] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.108723][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.132669][T24317] bond6: entered promiscuous mode [ 231.137744][T24317] bond6: entered allmulticast mode [ 231.143188][T24317] 8021q: adding VLAN 0 to HW filter on device bond6 [ 231.159990][T24317] bond6 (unregistering): Released all slaves [ 231.378932][T24340] bond9: entered promiscuous mode [ 231.384068][T24340] bond9: entered allmulticast mode [ 231.389399][T24340] 8021q: adding VLAN 0 to HW filter on device bond9 [ 231.399240][T24340] bond9 (unregistering): Released all slaves [ 231.495475][T24350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.504059][T24350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.688013][T24354] __nla_validate_parse: 14 callbacks suppressed [ 231.688027][T24354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8647'. [ 232.090701][T24388] loop4: detected capacity change from 0 to 256 [ 232.218245][T24409] netlink: 240 bytes leftover after parsing attributes in process `syz.1.8664'. [ 232.294684][T24427] bridge3: entered allmulticast mode [ 232.449017][T24463] 9pnet: p9_errstr2errno: server reported unknown error @00000000000000000000004DB|0xffffffffffffffffmemory.events [ 233.307590][T24593] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=24593 comm=syz.2.8701 [ 233.320215][T24593] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=24593 comm=syz.2.8701 [ 233.533667][T24624] netlink: 'syz.1.8716': attribute type 1 has an invalid length. [ 233.541523][T24624] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.8716'. [ 233.617399][T24630] bond4: left promiscuous mode [ 233.622339][T24630] batadv2: left promiscuous mode [ 233.658903][T24630] bridge3: left allmulticast mode [ 233.678118][T24643] macvlan0: entered allmulticast mode [ 233.698888][T24643] macvlan0 (unregistering): left allmulticast mode [ 233.757658][T24648] netlink: 'syz.4.8726': attribute type 13 has an invalid length. [ 233.782994][T24648] 0{X: refused to change device tx_queue_len [ 233.789486][T24648] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 233.844569][T24664] vlan2: entered allmulticast mode [ 233.909026][T24676] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8740'. [ 233.960478][T24686] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8744'. [ 234.011747][ T3381] hid_parser_main: 96 callbacks suppressed [ 234.011762][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x1 [ 234.025215][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 234.032666][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 234.040161][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 234.047699][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 234.055203][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 234.062613][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 234.070065][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 234.077444][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 234.084971][ T3381] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 234.093581][ T3381] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz0] on syz1 [ 234.129953][T24709] netlink: 'syz.3.8754': attribute type 1 has an invalid length. [ 234.162262][ T29] kauditd_printk_skb: 153 callbacks suppressed [ 234.162275][ T29] audit: type=1326 audit(233.754:8856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24714 comm="syz.4.8758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db984eb69 code=0x7ffc0000 [ 234.191519][ T29] audit: type=1326 audit(233.754:8857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24714 comm="syz.4.8758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db984eb69 code=0x7ffc0000 [ 234.224962][ T29] audit: type=1326 audit(233.754:8858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24714 comm="syz.4.8758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9db984eb69 code=0x7ffc0000 [ 234.247900][ T29] audit: type=1326 audit(233.754:8859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24714 comm="syz.4.8758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db984eb69 code=0x7ffc0000 [ 234.270996][ T29] audit: type=1326 audit(233.754:8860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24714 comm="syz.4.8758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db984eb69 code=0x7ffc0000 [ 234.293957][ T29] audit: type=1326 audit(233.754:8861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24714 comm="syz.4.8758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9db984eb69 code=0x7ffc0000 [ 234.316901][ T29] audit: type=1326 audit(233.754:8862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24714 comm="syz.4.8758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db984eb69 code=0x7ffc0000 [ 234.340019][ T29] audit: type=1326 audit(233.754:8863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24714 comm="syz.4.8758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db984eb69 code=0x7ffc0000 [ 234.362002][T24718] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 234.362955][ T29] audit: type=1326 audit(233.754:8864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24714 comm="syz.4.8758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9db984eb69 code=0x7ffc0000 [ 234.393513][ T29] audit: type=1326 audit(233.754:8865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24714 comm="syz.4.8758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9db984eb69 code=0x7ffc0000 [ 234.487212][T24737] bridge0: entered allmulticast mode [ 234.494276][T24737] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8768'. [ 234.503565][T24737] geneve0: left allmulticast mode [ 234.508611][T24737] geneve0: left promiscuous mode [ 234.513915][T24737] bridge0: port 3(geneve0) entered disabled state [ 234.523718][T24737] bridge_slave_1: left promiscuous mode [ 234.529613][T24737] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.540509][T24737] bridge_slave_0: left promiscuous mode [ 234.546180][T24737] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.559623][T24737] bridge0 (unregistering): left allmulticast mode [ 234.568707][T24745] loop3: detected capacity change from 0 to 512 [ 234.575930][T24745] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 234.582155][T24747] netlink: 165 bytes leftover after parsing attributes in process `syz.1.8773'. [ 234.591126][T24745] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 234.601211][T24747] netlink: 277 bytes leftover after parsing attributes in process `syz.1.8773'. [ 234.609737][T24745] EXT4-fs (loop3): 1 truncate cleaned up [ 234.626467][T24745] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.717221][T24760] loop4: detected capacity change from 0 to 512 [ 234.730257][T24760] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 234.750998][T24760] EXT4-fs (loop4): 1 truncate cleaned up [ 234.757101][T24760] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.782426][T24760] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.792015][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.955403][T24791] netlink: 'syz.1.8791': attribute type 1 has an invalid length. [ 234.963233][T24791] netlink: 'syz.1.8791': attribute type 6 has an invalid length. [ 234.971054][T24791] netlink: 'syz.1.8791': attribute type 3 has an invalid length. [ 234.978771][T24791] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8791'. [ 235.021931][T24798] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8793'. [ 235.032006][T24798] batadv1: left allmulticast mode [ 235.037086][T24798] batadv1: left promiscuous mode [ 235.042245][T24798] bridge0: port 2(batadv1) entered disabled state [ 235.049377][T24798] bridge_slave_0: left promiscuous mode [ 235.055213][T24798] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.374163][T24820] pimreg: entered allmulticast mode [ 235.381481][T24820] pimreg: left allmulticast mode [ 235.949029][T24900] loop4: detected capacity change from 0 to 764 [ 235.993374][T24902] loop3: detected capacity change from 0 to 512 [ 236.022606][T24902] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.107746][T24912] SELinux: Context :syz0:M:18446744073709551614:{ jᴒw@+K2 -~(D@(L eD0XVlw{IڏF &t}AE$zוEUsp%KW=Q#HԩsFUg`"0q 0x04000021 [ 242.830875][T25590] [ 242.833180][T25590] Reported by Kernel Concurrency Sanitizer on: [ 242.839411][T25590] CPU: 1 UID: 0 PID: 25590 Comm: syz.4.9126 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(voluntary) [ 242.851552][T25590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 242.861595][T25590] ================================================================== [ 243.187907][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.