last executing test programs: 35.128624599s ago: executing program 2 (id=243): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r0}, 0x18) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578"], 0x10) 35.015658997s ago: executing program 2 (id=248): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2e0, 0x12c, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) 34.897812156s ago: executing program 2 (id=257): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="03040000b50000000100fefffeefffff"], 0xc8) sendmsg$sock(r0, &(0x7f0000001540)={&(0x7f0000000140)=@pppoe={0x2a, 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, 'lo\x00'}}, 0x80, 0x0}, 0x0) 34.806999642s ago: executing program 2 (id=262): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 34.729092648s ago: executing program 2 (id=268): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x82, &(0x7f0000000040)="1a00000000000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000640)="1985", 0x2, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 34.533260472s ago: executing program 2 (id=278): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0, 0x0, 0x1}, 0x18) setresuid(0xee01, 0x0, 0x0) faccessat2(0xffffffffffffff9c, 0x0, 0x1, 0x100) 34.473000607s ago: executing program 32 (id=278): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0, 0x0, 0x1}, 0x18) setresuid(0xee01, 0x0, 0x0) faccessat2(0xffffffffffffff9c, 0x0, 0x1, 0x100) 16.845542307s ago: executing program 1 (id=1133): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='generic_add_lease\x00', r0}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) 16.804198719s ago: executing program 1 (id=1136): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf6ebfb138881d28d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) unshare(0x22020400) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) 16.669240719s ago: executing program 1 (id=1143): unshare(0x2c020400) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r1, 0x4) 16.419848897s ago: executing program 1 (id=1151): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f0000000340)=ANY=[@ANYBLOB="726f6469722c756e695f786c6174653d312c726f6469722c756e695f786c6174653d302c636865636b3d72656c617865642c73686f72746e616d653d77696e6e742c6e6f636173652c73686f72746e616d653d6c6f7765722c747a3d5554432c756e695f786c6174653d312c73686f77657865632c6e6f6e756d7461696c00002c007d88658bba9f86c7bbf19329c9a2a1c1511e3af2126ad5803a0f4e3d8521dd3f1b515a0673be6fb14db7c6534edf0e5e1d29e4f05d5c82fd3e0372c644e7ba7ccec22efc923b0beac1490e"], 0x0, 0x29f, &(0x7f0000000580)="$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") mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) 16.320690145s ago: executing program 1 (id=1155): r0 = socket$inet_sctp(0x2, 0x1, 0x84) io_setup(0x8, &(0x7f0000000540)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000002f00)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000080)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000000)='m', 0x1}], 0x1, 0x0, 0x0, 0x804c8c0}, 0x24000000) 16.118408289s ago: executing program 1 (id=1168): sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x20, 0x0, 0x603, 0x70bd2f, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x4}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xf}]}, 0x20}}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000e3ff0b000000180005"], 0x2c}}, 0x0) 16.118305399s ago: executing program 33 (id=1168): sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x20, 0x0, 0x603, 0x70bd2f, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x4}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xf}]}, 0x20}}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000e3ff0b000000180005"], 0x2c}}, 0x0) 832.77624ms ago: executing program 3 (id=1840): semtimedop(0x0, &(0x7f0000000240)=[{0x0, 0x81, 0x1000}], 0x1, 0x0) r0 = semget(0x3, 0x4, 0x200) semop(r0, &(0x7f00000018c0)=[{0x0, 0x3ff, 0x1800}], 0x1) semop(0x0, &(0x7f0000001900)=[{0x0, 0xab, 0x1000}], 0x1) 755.760165ms ago: executing program 3 (id=1844): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0xaf, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) timer_delete(0x0) 701.926909ms ago: executing program 3 (id=1849): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) 670.976321ms ago: executing program 3 (id=1852): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6, 0x5}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0xa1, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x3, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 506.109983ms ago: executing program 6 (id=1863): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) 447.908597ms ago: executing program 0 (id=1865): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = getpgrp(0x0) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x375}) kcmp(r1, r0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) 447.401097ms ago: executing program 5 (id=1868): unshare(0x22020600) r0 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) 418.96847ms ago: executing program 4 (id=1869): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='mm_page_alloc\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="050000000600000008000000ae"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xd, 0x2, 0x4, 0x4006, 0x5, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 417.17688ms ago: executing program 5 (id=1870): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast1, 0x4}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 399.627281ms ago: executing program 6 (id=1871): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000180)={[{@check_relaxed}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@session={'session', 0x3d, 0x22}}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@overriderock}, {@map_acorn}, {@check_strict}, {}, {@gid}, {@cruft}, {@overriderock}, {@utf8}]}, 0x1, 0xa00, &(0x7f00000003c0)="$eJzs3UtsXFf9B/Dv9SNx3SpJ2/z7L1XbTFKSuq1xbIcmRF2UxJ4kLn4g25EasWhK46AQQ6EBqa2QmkqIFRVIIBawq1jBplI3dIO6gx2sWCChrthXrMLK6M6M49eMx3YdO00/n+h67uN3z/nd58mMr+eEz5eF/SumFhZqwxanL/5hBzLmLnZ29JP3P3ivHN69mT3pzPPFn5KeJJWkK8mjSffI6PTURJuCrieXk3ycFEn2pv66IZdT/CIPLE1/nOJ3Zb0t7dloybSzwBfabp9/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwNypGRgcHh4o9GZu8+HKlLqmsMTI6PVVkYWHtksV16j6q9fpdfNS23qQoh/T0LHb1/ejBpcWPJKkcyeP1qcdrHZKnJ2/f/8iBFx7u6lhcv1U2n8nejRd74623r786Pz/3RuuQhXfq27A9ud1lzlcnx2amxibOnK9WxmamKqdPnhw8fuHcTOXc2Hh15tLMbHWiMjJdPTM7NV3pG3mmMnT69IlKdeDS1MXJ86MD49XFmae+Mjw4eLLy0sA3q2emZ6Ymj780MDNyYWx8fGzyfC2mXFzGnCpPxG+MzVZmq2cmKpWr1+bnTqzKqXP1zi6DhtptSRk03C5oeHB4eGhoeHjo3Ubv2bdnnHz+9POnBge7BlfJmog7dNJyd7mv9WHe5js4bF1Hvf3Pd8czlslczMupNP03ktFMZyoTLZY3LLb/R49X1613efvfaOW7li1+rPxxJE82JntatP8tctm5fzfyVt7O9bya+cxnLm/sekY7++98qpnMWGYylbFM5ExtTqUxp5LTOZmTGcwruZBDmUkl5zKW8VQzk0uZyWyqtTNqJNOp5kxmM5XpVNKXkTyTSoZyOqdzIpVUM5BLmcrFTOZ8RnOmVsrVXKvt9xPr5Hg7aGgjQcPrBK1uzMtzfXPtf/Ve/Z8gG7b9N3HYooVG+7+nfWjfyE4kBAAAAGy7L/01+w4+9Jd/JUWeqH0uf25svPribqcFAAAAbKPa43qPly/d5dgTPbX3/4O7nRYAAACwjYra39gVSXpzqD62+JdQPgQAAACAe0Tt9/9Ppji0NMP7fwAAALjHtP+O/bYRRf/i1/9WrtRfrzQi6lNF77mx8erAyNT4C0M5VvuWgSRPrC2tMym6a39+8GwO16MO99Zfe5dKLOvsKaOGBl4YyrM50tiQvqfKl6f6mkQO1yOfrkc+vTyyMysiT5SRAHCvO7JOe7zR9v/Z9Ncj+h+rNfldjzVpgwe1rABwt7jdx85/G12aNWn/GxFPtmr/v7rO+/8y4qFcPVR/pGAgr+X1zOdK+tN44uBQs1IXeyOoP4bQ3+bTgN7GIwt/P9WR/jWfB/Tc3tblsXMZTn/TTwSWlVss5nCiHtd5Z44BAOy0I+u2wxtr//vbvP/v9UghANxVbvdgv4mRdzYTPPfGjd3eRgBgJa00AAAAAAAAAAAAAAAAAAAAAAAAAAAAbL8NfYH/344l8/NzyRY6C9jySM9mMlx/pCM7lPOuj3Qm2a3aX8ym1yqP8Weo9I/3NVb/9+7v+XtuZJdvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOyIIulsNr8j2ZtkMMnxnc/qzrm52wlsl8qeLa1W3MqtvJl9254PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAXXOP7/ztSf72/PitdHcnRJJeTfGu3c9xOt3Y7gTujaB/yvXrg0vf/dyTdWSjSVT/sKbpHRqenJsqiir3l8k/e/+C9cmhf9tpeFcoCyhpWdC7RqGHZnO6Vaz1YW6t3dO7G9R+9/oPK6NnaiXl29tz46MT56a8vBT5SfJhUUh8WLeb7k6N//uWy2Y2OEooPyy1tbnW952r1jq6t9/+brd2i3g24Nj83XNY0W3159sffv/bmskUP5XDyVF/St7Km75RDi5oOr96fKxWfFj8r9uU3uVw7/uXeKBaK8hDtr23/fVevzc8NvPb6/JXbOb2zIqcDOZTkStKz8ZwOtT43a2ddR3dZ62AtqPxxsE1561pW4lCL/fpg7ZTp3dQ2VNpcX232eyOjE00z+tUPH86xTR/pY21qbKr4tPhncSH/yE+X9f/RUR7/o2l6dTYpoha57ExZvmzF5dVRj6xt+fDyBa+sLrPlVckd8PN8O1+7ffw7lt3/G8dqZ+5Hy2psfl0km78ufr9/TYuypNYiHVzVIjXuPq3WaeR5sB7VIs//y3P1MjdxR3muXYt9h67/3xZ9+U9u6v8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4+xVJZ7P5HcnRJAeS7C+nK8nC6pibW6ivo7fYSprbZis5f/4ULTe0uJVbeTP7djojAAAAAAAAAO6Ms6OfvP/Be+VQ+318Z77c0VhSSbqSHCh+3T0yOj010aag7uTy4q/0ezaXw+XyxwNL0x+XU4+2WWl3Hx8AgM+1/wUAAP//p2dujQ==") bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 399.24135ms ago: executing program 0 (id=1872): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10002, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) 362.450233ms ago: executing program 5 (id=1873): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x48, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x2c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x40}]}]}, 0x48}}, 0x4000000) 319.955476ms ago: executing program 5 (id=1884): r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x773}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 309.947637ms ago: executing program 6 (id=1875): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) acct(&(0x7f0000000180)='./cgroup.cpu/cgroup.procs\x00') 306.702308ms ago: executing program 0 (id=1876): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0x6, 0x0, 0x1, 0xffffff80}) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) 290.553139ms ago: executing program 5 (id=1877): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,check=s,tz=UTC,nodots,nodots,nodots,quiet,nodots,nodots,nodots,nodots,dots,nodots,nodots,dots,nodots,errors=continue,dots,dots,dots,debug,\x00'/154], 0xfd, 0x1bf, &(0x7f0000000840)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$nfs(&(0x7f0000000100)='...', &(0x7f0000000140)='./file0\x00', 0x0, 0x2000, 0x0) mount$nfs(&(0x7f0000000100)='...', &(0x7f0000000140)='./file0\x00', 0x0, 0x2000, 0x0) 288.749109ms ago: executing program 4 (id=1878): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000600)='kfree\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r1, 0x0, 0x29, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c0000000000000c548dc7914cb11ad63bf3707164aac03", 0x0, 0x86, 0x0, 0x31, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x50) 216.966764ms ago: executing program 4 (id=1879): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000c40)='sys_enter\x00', r1}, 0x18) set_robust_list(&(0x7f0000000140)={0x0, 0x7}, 0x18) 216.721604ms ago: executing program 5 (id=1880): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x0, 0xa, 0x0, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x10000}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 216.479884ms ago: executing program 6 (id=1881): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) listen(r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 208.861414ms ago: executing program 3 (id=1882): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000004000038008000140000000000800024000"], 0x110}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="e0000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800010000000000140004800500030007000000050003000100000008000200010000000800020001000000a00008"], 0xe0}}, 0x0) 163.948918ms ago: executing program 0 (id=1883): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r0}, 0x9) nanosleep(&(0x7f0000000000)={0x0, 0x989680}, 0x0) 163.758138ms ago: executing program 4 (id=1885): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x2, 0x9, 0x8, 0x0, "1c"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x60}, 0x1, 0x7}, 0x0) 154.772949ms ago: executing program 3 (id=1886): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6825, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x101, 0x20750, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x6}, 0x10012c, 0x80, 0x33f8, 0x1, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r0, 0x2) socket(0xa, 0x3, 0x3a) 154.529559ms ago: executing program 4 (id=1887): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000180)={[{@check_relaxed}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@session={'session', 0x3d, 0x22}}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@overriderock}, {@map_acorn}, {@check_strict}, {}, {@gid}, {@cruft}, {@overriderock}, {@utf8}]}, 0x1, 0xa00, &(0x7f00000003c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 154.441109ms ago: executing program 0 (id=1888): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCATTACH(r0, 0x4004743d, 0x0) 143.384299ms ago: executing program 6 (id=1889): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(0xffffffffffffffff, 0xc17a) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0xf00, 0xec, 0x2, 0x0, 0x0}) 86.999374ms ago: executing program 4 (id=1890): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newsa={0xf0, 0x10, 0x1, 0x8000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x2, 0x0, 0x4e20, 0x50, 0x0, 0x20, 0x0, 0x16}, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x33}, @in=@local, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000, 0x0, 0x0, 0x10000}, {0x401, 0x9}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x90}}, 0xf0}}, 0x24000058) 50.456316ms ago: executing program 0 (id=1891): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, r0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x2a1, 0x21, &(0x7f0000000240)={0x0, 0x6, 0xd, 0x360}, 0x8, 0x7, 0x7f, 0x0, 0x1, 0x101, 0x0}) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) 0s ago: executing program 6 (id=1892): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x7, 0x0, 0x81, 0xffffffff}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.34' (ED25519) to the list of known hosts. [ 34.835104][ T29] audit: type=1400 audit(1764089188.887:62): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 34.836325][ T3303] cgroup: Unknown subsys name 'net' [ 34.857908][ T29] audit: type=1400 audit(1764089188.887:63): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.885384][ T29] audit: type=1400 audit(1764089188.907:64): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 35.044849][ T3303] cgroup: Unknown subsys name 'cpuset' [ 35.051218][ T3303] cgroup: Unknown subsys name 'rlimit' [ 35.203474][ T29] audit: type=1400 audit(1764089189.247:65): avc: denied { setattr } for pid=3303 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.226814][ T29] audit: type=1400 audit(1764089189.257:66): avc: denied { create } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.247314][ T29] audit: type=1400 audit(1764089189.257:67): avc: denied { write } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.267738][ T29] audit: type=1400 audit(1764089189.257:68): avc: denied { read } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.287433][ T3306] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 35.287996][ T29] audit: type=1400 audit(1764089189.257:69): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 35.321616][ T29] audit: type=1400 audit(1764089189.257:70): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 35.336894][ T3303] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.344835][ T29] audit: type=1400 audit(1764089189.347:71): avc: denied { relabelto } for pid=3306 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 37.066870][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 37.112400][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 37.159771][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 37.181430][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 37.229062][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.236194][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.243504][ T3323] bridge_slave_0: entered allmulticast mode [ 37.250360][ T3323] bridge_slave_0: entered promiscuous mode [ 37.259207][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.266351][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.273535][ T3323] bridge_slave_1: entered allmulticast mode [ 37.279967][ T3323] bridge_slave_1: entered promiscuous mode [ 37.296499][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.303692][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.310851][ T3313] bridge_slave_0: entered allmulticast mode [ 37.317393][ T3313] bridge_slave_0: entered promiscuous mode [ 37.326621][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.333686][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.340900][ T3313] bridge_slave_1: entered allmulticast mode [ 37.347311][ T3313] bridge_slave_1: entered promiscuous mode [ 37.379735][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 37.389943][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.407613][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.420716][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.438216][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.447405][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.454505][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.461685][ T3318] bridge_slave_0: entered allmulticast mode [ 37.468161][ T3318] bridge_slave_0: entered promiscuous mode [ 37.496328][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.503476][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.510627][ T3318] bridge_slave_1: entered allmulticast mode [ 37.517117][ T3318] bridge_slave_1: entered promiscuous mode [ 37.534305][ T3323] team0: Port device team_slave_0 added [ 37.540075][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.547158][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.554378][ T3317] bridge_slave_0: entered allmulticast mode [ 37.560699][ T3317] bridge_slave_0: entered promiscuous mode [ 37.572304][ T3313] team0: Port device team_slave_0 added [ 37.586518][ T3323] team0: Port device team_slave_1 added [ 37.592345][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.599442][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.606579][ T3317] bridge_slave_1: entered allmulticast mode [ 37.613006][ T3317] bridge_slave_1: entered promiscuous mode [ 37.625006][ T3313] team0: Port device team_slave_1 added [ 37.655647][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.673790][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.683200][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.690213][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.716297][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.732635][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.742003][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.749176][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.775101][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.792209][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.801732][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.808772][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.835066][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.850841][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.858324][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.885318][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.908034][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.915174][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.922332][ T3314] bridge_slave_0: entered allmulticast mode [ 37.928831][ T3314] bridge_slave_0: entered promiscuous mode [ 37.942921][ T3318] team0: Port device team_slave_0 added [ 37.956160][ T3317] team0: Port device team_slave_0 added [ 37.963110][ T3317] team0: Port device team_slave_1 added [ 37.969199][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.976277][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.983483][ T3314] bridge_slave_1: entered allmulticast mode [ 37.989946][ T3314] bridge_slave_1: entered promiscuous mode [ 38.002656][ T3318] team0: Port device team_slave_1 added [ 38.039544][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.046533][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.072473][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.089394][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.111735][ T3323] hsr_slave_0: entered promiscuous mode [ 38.117907][ T3323] hsr_slave_1: entered promiscuous mode [ 38.124244][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.131202][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.157289][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.177656][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.189080][ T3313] hsr_slave_0: entered promiscuous mode [ 38.195222][ T3313] hsr_slave_1: entered promiscuous mode [ 38.201000][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 38.206861][ T3313] Cannot create hsr debugfs directory [ 38.212716][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.219685][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.245700][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.276647][ T3314] team0: Port device team_slave_0 added [ 38.282589][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.289614][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.315563][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.342158][ T3314] team0: Port device team_slave_1 added [ 38.360788][ T3317] hsr_slave_0: entered promiscuous mode [ 38.366860][ T3317] hsr_slave_1: entered promiscuous mode [ 38.372662][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 38.378507][ T3317] Cannot create hsr debugfs directory [ 38.395618][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.402680][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.428632][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.453804][ T3318] hsr_slave_0: entered promiscuous mode [ 38.459851][ T3318] hsr_slave_1: entered promiscuous mode [ 38.465845][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 38.471572][ T3318] Cannot create hsr debugfs directory [ 38.482647][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.489669][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.515873][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.586894][ T3314] hsr_slave_0: entered promiscuous mode [ 38.592940][ T3314] hsr_slave_1: entered promiscuous mode [ 38.599271][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 38.605061][ T3314] Cannot create hsr debugfs directory [ 38.747010][ T3323] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 38.765894][ T3323] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 38.774675][ T3323] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 38.786003][ T3323] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 38.802228][ T3313] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.811318][ T3313] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.828971][ T3313] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.837952][ T3313] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.858172][ T3318] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.869599][ T3318] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.879773][ T3318] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.892784][ T3318] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.931163][ T3317] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.945311][ T3317] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.961980][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.973230][ T3317] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.982592][ T3317] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.013428][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.030100][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.037219][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.046813][ T3314] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.065463][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.072556][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.085301][ T3314] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.097741][ T3314] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.106780][ T3314] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.120945][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.148420][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.159763][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.176037][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.199363][ T2315] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.206465][ T2315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.217102][ T2315] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.224311][ T2315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.233316][ T2315] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.240494][ T2315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.251579][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.258744][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.289385][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.318708][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.328626][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.351769][ T3318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.365328][ T2315] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.372486][ T2315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.382578][ T2315] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.389682][ T2315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.401874][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.421012][ T3317] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.431461][ T3317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.476109][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.535921][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.560930][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.568045][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.580992][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.589827][ T382] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.597127][ T382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.610610][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.624851][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.676734][ T3323] veth0_vlan: entered promiscuous mode [ 39.689209][ T3323] veth1_vlan: entered promiscuous mode [ 39.717263][ T3323] veth0_macvtap: entered promiscuous mode [ 39.733392][ T3323] veth1_macvtap: entered promiscuous mode [ 39.763890][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.775715][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.799745][ T3317] veth0_vlan: entered promiscuous mode [ 39.820554][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.830593][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.852517][ T3317] veth1_vlan: entered promiscuous mode [ 39.860016][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 39.860032][ T29] audit: type=1400 audit(1764089193.907:81): avc: denied { mounton } for pid=3323 comm="syz-executor" path="/root/syzkaller.zPDV3u/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 39.871397][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.890365][ T29] audit: type=1400 audit(1764089193.907:82): avc: denied { mount } for pid=3323 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 39.911475][ T3313] veth0_vlan: entered promiscuous mode [ 39.931717][ T29] audit: type=1400 audit(1764089193.907:83): avc: denied { mounton } for pid=3323 comm="syz-executor" path="/root/syzkaller.zPDV3u/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 39.948375][ T3318] veth0_vlan: entered promiscuous mode [ 39.957081][ T29] audit: type=1400 audit(1764089193.907:84): avc: denied { mount } for pid=3323 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 39.975629][ T3317] veth0_macvtap: entered promiscuous mode [ 39.984323][ T29] audit: type=1400 audit(1764089193.907:85): avc: denied { mounton } for pid=3323 comm="syz-executor" path="/root/syzkaller.zPDV3u/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 39.993246][ T2315] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.016688][ T29] audit: type=1400 audit(1764089193.907:86): avc: denied { mounton } for pid=3323 comm="syz-executor" path="/root/syzkaller.zPDV3u/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4363 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 40.032252][ T3313] veth1_vlan: entered promiscuous mode [ 40.053005][ T29] audit: type=1400 audit(1764089193.907:87): avc: denied { unmount } for pid=3323 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 40.067060][ T3317] veth1_macvtap: entered promiscuous mode [ 40.077956][ T29] audit: type=1400 audit(1764089193.977:88): avc: denied { mounton } for pid=3323 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 40.087849][ T3318] veth1_vlan: entered promiscuous mode [ 40.106461][ T29] audit: type=1400 audit(1764089193.977:89): avc: denied { mount } for pid=3323 comm="syz-executor" name="/" dev="gadgetfs" ino=4389 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 40.122585][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.149947][ T3323] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.157562][ T2315] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.180256][ T3318] veth0_macvtap: entered promiscuous mode [ 40.188156][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.203669][ T3318] veth1_macvtap: entered promiscuous mode [ 40.216028][ T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.230326][ T29] audit: type=1400 audit(1764089194.277:90): avc: denied { read write } for pid=3323 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 40.260547][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.269619][ T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.285616][ T31] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.296332][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.315930][ T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.338254][ T52] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.347778][ T3313] veth0_macvtap: entered promiscuous mode [ 40.368188][ T52] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.379543][ T3490] loop2: detected capacity change from 0 to 256 [ 40.398260][ T3314] veth0_vlan: entered promiscuous mode [ 40.406872][ T52] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.416584][ T3313] veth1_macvtap: entered promiscuous mode [ 40.429085][ T52] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.438890][ T3314] veth1_vlan: entered promiscuous mode [ 40.452023][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.470197][ T3490] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 40.478177][ T3490] FAT-fs (loop2): Filesystem has been set read-only [ 40.480289][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.495134][ T3490] FAT-fs (loop2): error, clusters badly computed (0 != 128) [ 40.506587][ T3314] veth0_macvtap: entered promiscuous mode [ 40.528046][ T3314] veth1_macvtap: entered promiscuous mode [ 40.543786][ T3439] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.555211][ T3439] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.583520][ T3439] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.593871][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.611063][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.614365][ T31] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.614413][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.614579][ T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.614986][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.615476][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.909547][ T3527] loop1: detected capacity change from 0 to 1024 [ 40.919551][ T3527] ======================================================= [ 40.919551][ T3527] WARNING: The mand mount option has been deprecated and [ 40.919551][ T3527] and is ignored by this kernel. Remove the mand [ 40.919551][ T3527] option from the mount to silence this warning. [ 40.919551][ T3527] ======================================================= [ 40.991288][ T3527] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 41.030670][ T3527] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.064681][ T3527] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 3: comm syz.1.18: lblock 3 mapped to illegal pblock 3 (length 3) [ 41.080866][ T3540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22'. [ 41.104894][ T3527] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 41.117349][ T3527] EXT4-fs (loop1): This should not happen!! Data will be lost [ 41.117349][ T3527] [ 41.132394][ T3543] EXT4-fs error (device loop1): ext4_free_blocks:6706: comm syz.1.18: Freeing blocks not in datazone - block = 3, count = 3 [ 41.150746][ T3543] EXT4-fs error (device loop1): ext4_free_blocks:6706: comm syz.1.18: Freeing blocks not in datazone - block = 0, count = 16 [ 41.190599][ T12] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 112: padding at end of block bitmap is not set [ 41.207266][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 29 with max blocks 39 with error 28 [ 41.219914][ T12] EXT4-fs (loop1): This should not happen!! Data will be lost [ 41.219914][ T12] [ 41.229656][ T12] EXT4-fs (loop1): Total free blocks count 0 [ 41.235690][ T12] EXT4-fs (loop1): Free/Dirty block details [ 41.241600][ T12] EXT4-fs (loop1): free_blocks=0 [ 41.246577][ T12] EXT4-fs (loop1): dirty_blocks=64 [ 41.251713][ T12] EXT4-fs (loop1): Block reservation details [ 41.336319][ T3552] netlink: 48 bytes leftover after parsing attributes in process `syz.1.27'. [ 41.369807][ T3556] netlink: 'syz.1.29': attribute type 10 has an invalid length. [ 41.377903][ T3556] lo: entered promiscuous mode [ 41.384188][ T3556] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 41.532018][ T3572] ip6gretap0: entered promiscuous mode [ 41.542440][ T3572] ip6gretap0: left promiscuous mode [ 41.742935][ T3596] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 42.080888][ T3617] netlink: 7 bytes leftover after parsing attributes in process `syz.2.58'. [ 42.090019][ T3617] netlink: 7 bytes leftover after parsing attributes in process `syz.2.58'. [ 42.112245][ T3619] loop3: detected capacity change from 0 to 512 [ 42.146546][ T3619] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.164372][ T3619] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.235542][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.265965][ T3636] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.432459][ T3656] 9pnet: Could not find request transport: r [ 42.529608][ T3663] macvtap0: refused to change device tx_queue_len [ 42.916985][ T3636] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.978608][ T3636] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.043548][ T3636] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.141437][ T3439] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.157702][ T3439] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.170054][ T3439] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.187232][ T3439] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.424065][ T3725] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 43.424391][ T3724] IPVS: stopping master sync thread 3725 ... [ 43.754235][ T3746] syz.3.116 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 43.914323][ T3753] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.119'. [ 43.971730][ T3762] netlink: 104 bytes leftover after parsing attributes in process `syz.2.121'. [ 44.069786][ T3771] raw_sendmsg: syz.3.128 forgot to set AF_INET. Fix it! [ 44.090821][ T3774] loop1: detected capacity change from 0 to 1024 [ 44.123988][ T3774] EXT4-fs: inline encryption not supported [ 44.129987][ T3774] EXT4-fs: Ignoring removed i_version option [ 44.136108][ T3774] EXT4-fs: Ignoring removed bh option [ 44.176437][ T3774] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.232006][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.315353][ T3799] af_packet: tpacket_rcv: packet too big, clamped from 46 to 4294967286. macoff=82 [ 44.370386][ C1] hrtimer: interrupt took 18903 ns [ 44.399690][ T3792] syz.4.137 (3792) used greatest stack depth: 10128 bytes left [ 44.551606][ T3828] loop2: detected capacity change from 0 to 512 [ 44.569424][ T3828] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.599231][ T3828] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 44.607368][ T3828] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 44.666741][ T3828] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 44.676373][ T3828] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 44.751034][ T3828] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 44.768201][ T3828] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.153: dx entry: limit 65535 != root limit 120 [ 44.780306][ T3828] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.153: Corrupt directory, running e2fsck is recommended [ 44.816763][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.825414][ T3849] loop1: detected capacity change from 0 to 128 [ 45.012215][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 45.012232][ T29] audit: type=1400 audit(1764089199.057:220): avc: denied { setopt } for pid=3868 comm="syz.1.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 45.253318][ T3897] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 45.264326][ T3902] netlink: 12 bytes leftover after parsing attributes in process `syz.0.186'. [ 45.318771][ T3906] loop2: detected capacity change from 0 to 1024 [ 45.325325][ T3897] 8021q: adding VLAN 0 to HW filter on device bond1 [ 45.338833][ T3906] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 45.349762][ T3897] bond0: (slave bond1): Enslaving as an active interface with an up link [ 45.358530][ T3906] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 45.387048][ T3906] JBD2: no valid journal superblock found [ 45.392843][ T3906] EXT4-fs (loop2): Could not load journal inode [ 45.414127][ T3916] Zero length message leads to an empty skb [ 45.431747][ T29] audit: type=1400 audit(1764089199.477:221): avc: denied { read } for pid=3919 comm="syz.3.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 45.458898][ T3906] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 45.549262][ T3929] netlink: 8 bytes leftover after parsing attributes in process `syz.4.198'. [ 45.579669][ T29] audit: type=1400 audit(1764089199.627:222): avc: denied { create } for pid=3932 comm="syz.0.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.602561][ T29] audit: type=1400 audit(1764089199.647:223): avc: denied { read } for pid=3932 comm="syz.0.200" path="socket:[6225]" dev="sockfs" ino=6225 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.663785][ T29] audit: type=1400 audit(1764089199.707:224): avc: denied { append } for pid=3944 comm="syz.4.203" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 45.665763][ T3945] random: crng reseeded on system resumption [ 45.689604][ T29] audit: type=1400 audit(1764089199.707:225): avc: denied { open } for pid=3944 comm="syz.4.203" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 45.906000][ T3970] loop3: detected capacity change from 0 to 2048 [ 45.928866][ T3970] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.942046][ T3970] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.187440][ T37] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 345: padding at end of block bitmap is not set [ 46.202292][ T37] EXT4-fs (loop3): Remounting filesystem read-only [ 46.245216][ T3976] loop1: detected capacity change from 0 to 512 [ 46.257039][ T3976] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002] [ 46.272217][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.281252][ T3976] System zones: 1-12 [ 46.281541][ T3976] EXT4-fs error (device loop1): dx_probe:791: inode #2: comm syz.1.216: Directory hole found for htree index block 0 [ 46.302015][ T3976] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 46.311335][ T3976] EXT4-fs error (device loop1): dx_probe:791: inode #2: comm syz.1.216: Directory hole found for htree index block 0 [ 46.326778][ T3976] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 46.339459][ T3976] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.360374][ T3983] netlink: 12 bytes leftover after parsing attributes in process `syz.4.218'. [ 46.374306][ T3976] EXT4-fs (loop1): shut down requested (1) [ 46.380631][ T29] audit: type=1400 audit(1764089200.427:226): avc: denied { remount } for pid=3975 comm="syz.1.216" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 46.383445][ T3981] netlink: 40 bytes leftover after parsing attributes in process `syz.3.215'. [ 46.414139][ T29] audit: type=1400 audit(1764089200.457:227): avc: denied { read } for pid=2985 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 46.436174][ T29] audit: type=1400 audit(1764089200.457:228): avc: denied { search } for pid=2985 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 46.457766][ T29] audit: type=1400 audit(1764089200.457:229): avc: denied { search } for pid=2985 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 46.490756][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.569225][ T3998] netlink: 28 bytes leftover after parsing attributes in process `syz.3.225'. [ 46.578788][ T3998] netem: change failed [ 46.633171][ T4004] process 'syz.4.228' launched './file0' with NULL argv: empty string added [ 46.678234][ T4011] loop2: detected capacity change from 0 to 764 [ 46.702799][ T4011] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 46.728524][ T4014] vhci_hcd: invalid port number 23 [ 46.733788][ T4014] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 46.746748][ T4011] Symlink component flag not implemented [ 46.753249][ T4011] Symlink component flag not implemented (7) [ 46.761315][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.768884][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.776351][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.783816][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.791336][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.798774][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.806322][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.813994][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.821422][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.828860][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.862037][ T23] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 46.931400][ T4028] fido_id[4028]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 46.962026][ T4038] SELinux: failed to load policy [ 47.146169][ T4061] mmap: syz.4.254 (4061) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 47.162699][ T4065] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4065 comm=syz.0.256 [ 47.189366][ T4069] erspan0: entered promiscuous mode [ 47.275597][ T4078] loop0: detected capacity change from 0 to 128 [ 47.303196][ T4078] EXT4-fs: Ignoring removed nobh option [ 47.333125][ T4078] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.368645][ T4078] ext4 filesystem being mounted at /33/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 47.398682][ T3314] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.410852][ T4092] netem: incorrect gi model size [ 47.415901][ T4092] netem: change failed [ 47.446297][ T4098] netlink: 28 bytes leftover after parsing attributes in process `syz.3.274'. [ 47.512424][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.541009][ T4108] netlink: 12 bytes leftover after parsing attributes in process `syz.4.279'. [ 47.607466][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.676764][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.730187][ T4125] loop4: detected capacity change from 0 to 1764 [ 47.755478][ T4132] team_slave_0: entered promiscuous mode [ 47.761196][ T4132] team_slave_1: entered promiscuous mode [ 47.769021][ T4132] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 47.782004][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.966463][ T52] bridge_slave_1: left allmulticast mode [ 47.972191][ T52] bridge_slave_1: left promiscuous mode [ 47.978027][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.021290][ T52] bridge_slave_0: left allmulticast mode [ 48.027150][ T52] bridge_slave_0: left promiscuous mode [ 48.033057][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.266405][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 48.284296][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 48.308699][ T4204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.314'. [ 48.321160][ T52] bond0 (unregistering): Released all slaves [ 48.330787][ T4204] netlink: 312 bytes leftover after parsing attributes in process `syz.3.314'. [ 48.339839][ T4204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.314'. [ 48.420008][ T52] hsr_slave_0: left promiscuous mode [ 48.430360][ T52] hsr_slave_1: left promiscuous mode [ 48.439587][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.447071][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.474188][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.481644][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.512539][ T52] veth1_macvtap: left promiscuous mode [ 48.524082][ T52] veth0_macvtap: left promiscuous mode [ 48.529692][ T52] veth1_vlan: left promiscuous mode [ 48.548356][ T52] veth0_vlan: left promiscuous mode [ 48.735857][ T52] team0 (unregistering): Port device team_slave_1 removed [ 48.754856][ T52] team0 (unregistering): Port device team_slave_0 removed [ 48.876210][ T4128] chnl_net:caif_netlink_parms(): no params data found [ 48.896962][ T4260] loop4: detected capacity change from 0 to 512 [ 48.913241][ T4258] loop1: detected capacity change from 0 to 4096 [ 48.926967][ T4258] journal_path: Non-blockdev passed as './file1' [ 48.933384][ T4258] EXT4-fs: error: could not find journal device path [ 48.977890][ T4266] loop3: detected capacity change from 0 to 512 [ 49.108623][ T4128] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.115821][ T4128] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.131573][ T4128] bridge_slave_0: entered allmulticast mode [ 49.138511][ T4128] bridge_slave_0: entered promiscuous mode [ 49.145649][ T4128] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.152754][ T4128] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.173376][ T4128] bridge_slave_1: entered allmulticast mode [ 49.180372][ T4128] bridge_slave_1: entered promiscuous mode [ 49.192053][ T4291] batadv_slave_1: entered promiscuous mode [ 49.212258][ T4128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.224821][ T4289] batadv_slave_1: left promiscuous mode [ 49.250507][ T4128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.269930][ T4295] netlink: 8 bytes leftover after parsing attributes in process `syz.4.334'. [ 49.279750][ T4295] netlink: 8 bytes leftover after parsing attributes in process `syz.4.334'. [ 49.336948][ T4301] loop4: detected capacity change from 0 to 1024 [ 49.353073][ T4128] team0: Port device team_slave_0 added [ 49.363653][ T4301] EXT4-fs: Ignoring removed i_version option [ 49.384331][ T4301] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 49.386322][ T4128] team0: Port device team_slave_1 added [ 49.435574][ T4301] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.336: Invalid block bitmap block 0 in block_group 0 [ 49.483391][ T4301] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.336: Failed to acquire dquot type 0 [ 49.495555][ T4128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.502610][ T4128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.528629][ T4128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.541019][ T4128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.548310][ T4128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.552808][ T4301] EXT4-fs error (device loop4): ext4_free_blocks:6706: comm syz.4.336: Freeing blocks not in datazone - block = 0, count = 4096 [ 49.574358][ T4128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.620896][ T4301] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.336: Invalid inode bitmap blk 0 in block_group 0 [ 49.634735][ T4301] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 49.645330][ T12] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:0: Failed to release dquot type 0 [ 49.659251][ T4301] EXT4-fs (loop4): 1 orphan inode deleted [ 49.692796][ T4301] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.715942][ T4128] hsr_slave_0: entered promiscuous mode [ 49.722250][ T4128] hsr_slave_1: entered promiscuous mode [ 49.732178][ T4128] debugfs: 'hsr0' already exists in 'hsr' [ 49.738009][ T4128] Cannot create hsr debugfs directory [ 49.758745][ T4301] syz.4.336 (4301) used greatest stack depth: 9408 bytes left [ 49.798686][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.909814][ T4128] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 49.928969][ T4128] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 49.939901][ T4128] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 49.968929][ T4128] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 50.041571][ T29] kauditd_printk_skb: 171 callbacks suppressed [ 50.041586][ T29] audit: type=1400 audit(1764089204.087:398): avc: denied { write } for pid=4374 comm="syz.4.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 50.052526][ T4128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.080156][ T4128] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.105199][ T2315] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.112375][ T2315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.135472][ T29] audit: type=1400 audit(1764089204.187:399): avc: denied { setopt } for pid=4381 comm="syz.0.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.166151][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.173259][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.177093][ T29] audit: type=1400 audit(1764089204.207:400): avc: denied { read } for pid=4381 comm="syz.0.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.199975][ T29] audit: type=1326 audit(1764089204.227:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4386 comm="syz.0.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2089daf749 code=0x7ffc0000 [ 50.223390][ T29] audit: type=1326 audit(1764089204.227:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4386 comm="syz.0.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2089daf749 code=0x7ffc0000 [ 50.247017][ T29] audit: type=1326 audit(1764089204.227:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4386 comm="syz.0.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2089daf749 code=0x7ffc0000 [ 50.270804][ T29] audit: type=1326 audit(1764089204.227:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4386 comm="syz.0.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2089daf749 code=0x7ffc0000 [ 50.294373][ T29] audit: type=1326 audit(1764089204.227:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4386 comm="syz.0.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2089daf749 code=0x7ffc0000 [ 50.317754][ T29] audit: type=1326 audit(1764089204.257:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4386 comm="syz.0.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2089daf749 code=0x7ffc0000 [ 50.341159][ T29] audit: type=1326 audit(1764089204.257:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4386 comm="syz.0.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2089daf749 code=0x7ffc0000 [ 50.365969][ T4388] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 50.423534][ T4128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.442703][ T4401] Illegal XDP return value 4294967274 on prog (id 174) dev N/A, expect packet loss! [ 50.470403][ T4403] loop1: detected capacity change from 0 to 1024 [ 50.487537][ T4403] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 50.498554][ T4403] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 50.512913][ T4403] JBD2: no valid journal superblock found [ 50.518736][ T4403] EXT4-fs (loop1): Could not load journal inode [ 50.566202][ T4421] loop0: detected capacity change from 0 to 512 [ 50.617660][ T4421] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 50.652083][ T4421] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.684361][ T4128] veth0_vlan: entered promiscuous mode [ 50.704138][ T4437] Invalid logical block size (32768) [ 50.711360][ T4128] veth1_vlan: entered promiscuous mode [ 50.729840][ T4128] veth0_macvtap: entered promiscuous mode [ 50.738130][ T4128] veth1_macvtap: entered promiscuous mode [ 50.748966][ T4444] usb usb5: usbfs: process 4444 (syz.4.383) did not claim interface 0 before use [ 50.773333][ T4128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.793625][ T4128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.815776][ T37] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.849206][ T37] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.868199][ T37] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.886543][ T37] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.907428][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 50.952470][ T4469] 9pnet_fd: p9_fd_create_unix (4469): problem connecting socket: ./file0: -2 [ 50.994449][ T4477] 9pnet_fd: Insufficient options for proto=fd [ 51.072252][ T4485] loop3: detected capacity change from 0 to 512 [ 51.111994][ T4485] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 51.125170][ T4485] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 51.158848][ T4485] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 51.198366][ T4485] EXT4-fs (loop3): 1 truncate cleaned up [ 51.211648][ T4485] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.252023][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.399925][ T4520] __nla_validate_parse: 4 callbacks suppressed [ 51.399977][ T4520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.414'. [ 51.421828][ T4522] netlink: 'syz.5.415': attribute type 4 has an invalid length. [ 51.429659][ T4522] netlink: 152 bytes leftover after parsing attributes in process `syz.5.415'. [ 51.442983][ T4522] .`: renamed from bond0 (while UP) [ 51.619918][ T4559] SELinux: Context Ü is not valid (left unmapped). [ 51.652871][ T4563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.434'. [ 51.676991][ T4565] syz.5.435 (4565) used greatest stack depth: 9160 bytes left [ 51.753065][ T4577] netlink: 28 bytes leftover after parsing attributes in process `syz.3.441'. [ 51.762207][ T4577] netlink: 28 bytes leftover after parsing attributes in process `syz.3.441'. [ 51.902972][ T4599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.449'. [ 51.971033][ T4612] random: crng reseeded on system resumption [ 51.998893][ T4616] netlink: 16 bytes leftover after parsing attributes in process `syz.4.459'. [ 52.010324][ T4616] netlink: 16 bytes leftover after parsing attributes in process `syz.4.459'. [ 52.141391][ T4641] capability: warning: `syz.4.471' uses deprecated v2 capabilities in a way that may be insecure [ 52.323021][ T4664] tipc: Started in network mode [ 52.328023][ T4664] tipc: Node identity ac14140f, cluster identity 4711 [ 52.360200][ T4664] tipc: New replicast peer: 255.255.255.32 [ 52.366275][ T4664] tipc: Enabled bearer , priority 10 [ 52.380027][ T4666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.484'. [ 52.388941][ T4666] netlink: 12 bytes leftover after parsing attributes in process `syz.1.484'. [ 52.570898][ T36] kernel read not supported for file /newroot/93/file0 (pid: 36 comm: kworker/1:1) [ 52.640808][ T4700] xt_hashlimit: max too large, truncated to 1048576 [ 52.839269][ T4733] capability: warning: `syz.5.513' uses 32-bit capabilities (legacy support in use) [ 52.896991][ T4741] loop5: detected capacity change from 0 to 128 [ 52.905310][ T4740] netlink: 'syz.1.517': attribute type 1 has an invalid length. [ 52.923373][ T4741] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 52.965865][ T4741] ext4 filesystem being mounted at /30/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 53.036341][ T4749] batman_adv: batadv0: Adding interface: vlan3 [ 53.042664][ T4749] batman_adv: batadv0: The MTU of interface vlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.067934][ T4749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.078428][ T4749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.088361][ T4749] batman_adv: batadv0: Not using interface vlan3 (retrying later): interface not active [ 53.208247][ T4128] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 53.396779][ T4794] program syz.3.542 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 53.514936][ T3416] tipc: Node number set to 2886997007 [ 53.538416][ T10] kernel write not supported for file /sg0 (pid: 10 comm: kworker/0:1) [ 53.577844][ T4810] SELinux: Context system_u:object is not valid (left unmapped). [ 53.761689][ T4836] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27766 sclass=netlink_route_socket pid=4836 comm=syz.0.560 [ 53.766767][ T4837] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.781606][ T4837] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.831244][ T4836] netlink: 'syz.0.560': attribute type 29 has an invalid length. [ 53.868923][ T4842] loop4: detected capacity change from 0 to 512 [ 53.875517][ T4839] netlink: 'syz.0.560': attribute type 29 has an invalid length. [ 53.946975][ T4842] EXT4-fs (loop4): orphan cleanup on readonly fs [ 53.957599][ T4842] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm GPL: couldn't read orphan inode 26 (err -116) [ 54.010373][ T4842] EXT4-fs (loop4): Remounting filesystem read-only [ 54.052943][ T4842] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 54.147260][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.236156][ T4890] loop4: detected capacity change from 0 to 128 [ 54.261734][ T4890] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 54.330990][ T4890] ext4 filesystem being mounted at /104/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 54.473825][ T3323] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 54.485960][ T4918] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 54.491966][ T4916] loop5: detected capacity change from 0 to 1024 [ 54.501190][ T4916] EXT4-fs: Ignoring removed orlov option [ 54.518347][ T4916] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.626035][ T4934] loop1: detected capacity change from 0 to 128 [ 54.633853][ T4128] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.656739][ T4934] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 54.679141][ T4934] ext4 filesystem being mounted at /139/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 54.689486][ T4945] loop5: detected capacity change from 0 to 512 [ 54.734520][ T4945] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 54.775422][ T4945] EXT4-fs (loop5): 1 truncate cleaned up [ 54.781457][ T4945] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.831455][ T3318] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 54.873209][ T4128] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.972362][ T4987] loop1: detected capacity change from 0 to 1024 [ 54.982445][ T4987] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 54.996115][ T4987] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.628: Invalid block bitmap block 0 in block_group 0 [ 55.009830][ T4987] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.628: Failed to acquire dquot type 0 [ 55.021999][ T4987] EXT4-fs error (device loop1): ext4_free_blocks:6706: comm syz.1.628: Freeing blocks not in datazone - block = 0, count = 4096 [ 55.035627][ T4987] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.628: Invalid inode bitmap blk 0 in block_group 0 [ 55.050463][ T4987] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 55.060115][ T37] __quota_error: 149 callbacks suppressed [ 55.060141][ T37] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-7 [ 55.075169][ T37] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:2: Failed to release dquot type 0 [ 55.088232][ T4987] EXT4-fs (loop1): 1 orphan inode deleted [ 55.101849][ T4987] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.129642][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.202290][ T29] audit: type=1400 audit(1764089209.247:555): avc: denied { connect } for pid=5010 comm="syz.1.639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 55.352238][ T29] audit: type=1400 audit(1764089209.397:556): avc: denied { read write } for pid=3323 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 55.386025][ T29] audit: type=1400 audit(1764089209.397:557): avc: denied { open } for pid=3323 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 55.410235][ T29] audit: type=1400 audit(1764089209.397:558): avc: denied { ioctl } for pid=3323 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 55.435897][ T29] audit: type=1400 audit(1764089209.427:559): avc: denied { map_create } for pid=5034 comm="syz.4.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 55.455414][ T29] audit: type=1400 audit(1764089209.427:560): avc: denied { perfmon } for pid=5034 comm="syz.4.651" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 55.476435][ T29] audit: type=1400 audit(1764089209.427:561): avc: denied { map_read map_write } for pid=5034 comm="syz.4.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 55.496357][ T29] audit: type=1400 audit(1764089209.437:562): avc: denied { prog_load } for pid=5034 comm="syz.4.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 55.515316][ T29] audit: type=1400 audit(1764089209.437:563): avc: denied { bpf } for pid=5034 comm="syz.4.651" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 55.716791][ T5065] loop0: detected capacity change from 0 to 128 [ 55.771702][ T5073] syz.0.669 uses obsolete (PF_INET,SOCK_PACKET) [ 55.982250][ T5102] netlink: 'syz.5.683': attribute type 1 has an invalid length. [ 56.051170][ T5112] loop1: detected capacity change from 0 to 512 [ 56.074313][ T5112] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 56.094841][ T5112] EXT4-fs (loop1): orphan cleanup on readonly fs [ 56.114569][ T5112] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.688: Block bitmap for bg 0 marked uninitialized [ 56.140020][ T5112] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 56.152353][ T5112] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.688: invalid indirect mapped block 131072 (level 0) [ 56.173694][ T5112] EXT4-fs (loop1): 1 orphan inode deleted [ 56.181046][ T5112] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 56.233607][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.306683][ T5145] loop5: detected capacity change from 0 to 1024 [ 56.313746][ T5145] EXT4-fs: Ignoring removed orlov option [ 56.337016][ T5145] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.391980][ T4128] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.508904][ T5177] veth1_to_batadv: entered promiscuous mode [ 56.548603][ T5183] __nla_validate_parse: 12 callbacks suppressed [ 56.548650][ T5183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.720'. [ 56.564004][ T5183] netlink: 'syz.4.720': attribute type 18 has an invalid length. [ 56.571827][ T5183] netlink: 4 bytes leftover after parsing attributes in process `syz.4.720'. [ 56.591754][ T5187] IPv6: NLM_F_CREATE should be specified when creating new route [ 56.743187][ T5214] netlink: 4 bytes leftover after parsing attributes in process `syz.5.734'. [ 56.842909][ T5233] netlink: 4 bytes leftover after parsing attributes in process `syz.4.741'. [ 56.962440][ T5251] loop5: detected capacity change from 0 to 2048 [ 56.970319][ T5252] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 57.000051][ T5251] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.068536][ T5265] 9pnet_fd: Insufficient options for proto=fd [ 57.085111][ T4128] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.279630][ T5290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.768'. [ 57.288521][ T5290] netlink: 36 bytes leftover after parsing attributes in process `syz.1.768'. [ 57.517041][ T5315] netlink: 312 bytes leftover after parsing attributes in process `syz.4.779'. [ 57.761137][ T5337] loop0: detected capacity change from 0 to 128 [ 57.770391][ T5337] vfat: Unknown parameter 'short' [ 58.182769][ T5373] netlink: 8 bytes leftover after parsing attributes in process `syz.5.806'. [ 58.191779][ T5373] netlink: 36 bytes leftover after parsing attributes in process `syz.5.806'. [ 58.243586][ T5378] netlink: 12 bytes leftover after parsing attributes in process `syz.5.808'. [ 58.333822][ T5380] syz.5.809 (5380) used greatest stack depth: 9088 bytes left [ 58.353065][ T5382] loop5: detected capacity change from 0 to 1024 [ 58.360113][ T5382] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.368165][ T5382] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 58.376783][ T5382] System zones: 0-1, 3-36 [ 58.382392][ T5382] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.413330][ T4128] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.584546][ T5389] xt_hashlimit: max too large, truncated to 1048576 [ 58.875752][ T5402] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 59.032813][ T5417] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5417 comm=syz.3.827 [ 60.118570][ T29] kauditd_printk_skb: 257 callbacks suppressed [ 60.118598][ T29] audit: type=1400 audit(1764089214.167:821): avc: denied { create } for pid=5533 comm="syz.3.878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 60.163976][ T29] audit: type=1400 audit(1764089214.187:822): avc: denied { create } for pid=5537 comm="syz.0.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 60.164970][ T5540] loop1: detected capacity change from 0 to 512 [ 60.183402][ T29] audit: type=1400 audit(1764089214.187:823): avc: denied { write } for pid=5537 comm="syz.0.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 60.247939][ T5540] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 60.264305][ T5540] System zones: 0-2, 18-18, 34-35 [ 60.270965][ T5540] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.305996][ T29] audit: type=1326 audit(1764089214.347:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5547 comm="syz.3.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160503f749 code=0x7ffc0000 [ 60.329384][ T29] audit: type=1326 audit(1764089214.347:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5547 comm="syz.3.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160503f749 code=0x7ffc0000 [ 60.353349][ T29] audit: type=1326 audit(1764089214.347:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5547 comm="syz.3.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f160503f749 code=0x7ffc0000 [ 60.376608][ T29] audit: type=1326 audit(1764089214.347:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5547 comm="syz.3.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160503f749 code=0x7ffc0000 [ 60.399892][ T29] audit: type=1326 audit(1764089214.347:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5547 comm="syz.3.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160503f749 code=0x7ffc0000 [ 60.424542][ T5540] ext4 filesystem being mounted at /194/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.492705][ T5556] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 60.505463][ T5556] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.512641][ T5556] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.514699][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.550671][ T29] audit: type=1400 audit(1764089214.597:829): avc: denied { search } for pid=5557 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.573059][ T29] audit: type=1400 audit(1764089214.597:830): avc: denied { search } for pid=5557 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.727302][ T5589] program syz.1.901 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 60.817146][ T5604] loop3: detected capacity change from 0 to 512 [ 60.869709][ T5604] EXT4-fs (loop3): too many log groups per flexible block group [ 60.891019][ T5604] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 60.909663][ T5604] EXT4-fs (loop3): mount failed [ 61.368053][ T5680] loop3: detected capacity change from 0 to 128 [ 61.383352][ T5680] syz.3.930: attempt to access beyond end of device [ 61.383352][ T5680] loop3: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 61.407506][ T5680] syz.3.930: attempt to access beyond end of device [ 61.407506][ T5680] loop3: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 61.421005][ T5680] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 61.443713][ T5680] syz.3.930: attempt to access beyond end of device [ 61.443713][ T5680] loop3: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 61.457959][ T5680] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 61.477946][ T5680] syz.3.930: attempt to access beyond end of device [ 61.477946][ T5680] loop3: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 61.510481][ T5680] syz.3.930: attempt to access beyond end of device [ 61.510481][ T5680] loop3: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 61.523953][ T5680] Buffer I/O error on dev loop3, logical block 83, lost async page write [ 61.550330][ T5680] syz.3.930: attempt to access beyond end of device [ 61.550330][ T5680] loop3: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 61.563789][ T5680] Buffer I/O error on dev loop3, logical block 84, lost async page write [ 61.597387][ T5680] syz.3.930: attempt to access beyond end of device [ 61.597387][ T5680] loop3: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 61.622632][ T5680] syz.3.930: attempt to access beyond end of device [ 61.622632][ T5680] loop3: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 61.636172][ T5680] Buffer I/O error on dev loop3, logical block 95, lost async page write [ 61.657286][ T5680] syz.3.930: attempt to access beyond end of device [ 61.657286][ T5680] loop3: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 61.670665][ T5680] Buffer I/O error on dev loop3, logical block 96, lost async page write [ 61.703707][ T5680] syz.3.930: attempt to access beyond end of device [ 61.703707][ T5680] loop3: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 61.736202][ T5680] Buffer I/O error on dev loop3, logical block 99, lost async page write [ 61.754925][ T5680] Buffer I/O error on dev loop3, logical block 100, lost async page write [ 61.781596][ T5680] Buffer I/O error on dev loop3, logical block 111, lost async page write [ 61.790242][ T5680] Buffer I/O error on dev loop3, logical block 112, lost async page write [ 61.982687][ T5733] __nla_validate_parse: 8 callbacks suppressed [ 61.982704][ T5733] netlink: 228 bytes leftover after parsing attributes in process `syz.3.943'. [ 62.039620][ T5737] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 62.324049][ T5778] erspan0: entered promiscuous mode [ 62.338968][ T5780] IPVS: rr: FWM 3 0x00000003 - no destination available [ 62.346086][ C0] IPVS: rr: FWM 3 0x00000003 - no destination available [ 62.357460][ T3395] IPVS: starting estimator thread 0... [ 62.463992][ T5782] IPVS: using max 2400 ests per chain, 120000 per kthread [ 62.640104][ T5820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.984'. [ 62.709491][ T5828] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 62.734368][ T5831] netlink: 16 bytes leftover after parsing attributes in process `syz.4.989'. [ 62.743445][ T5831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.989'. [ 62.831399][ T5847] netlink: 'syz.4.995': attribute type 1 has an invalid length. [ 62.869010][ T5852] loop5: detected capacity change from 0 to 512 [ 62.875739][ T5852] EXT4-fs: Ignoring removed nobh option [ 62.904473][ T5852] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.920499][ T5862] loop4: detected capacity change from 0 to 128 [ 62.927539][ T5852] ext4 filesystem being mounted at /118/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 62.939882][ T5862] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 62.969775][ T5852] EXT4-fs error (device loop5): ext4_find_dest_de:2052: inode #2: block 3: comm syz.5.1000: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 62.989058][ T5862] ext4 filesystem being mounted at /215/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 63.015601][ T4128] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.030244][ T3323] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 63.057948][ T5867] loop3: detected capacity change from 0 to 512 [ 63.085261][ T5874] loop4: detected capacity change from 0 to 512 [ 63.092678][ T5875] loop5: detected capacity change from 0 to 512 [ 63.100391][ T5875] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 63.110678][ T5874] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c098, mo2=0002] [ 63.119978][ T5874] System zones: 0-2, 18-18, 34-35 [ 63.127121][ T5867] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1007: bg 0: block 248: padding at end of block bitmap is not set [ 63.127458][ T5875] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 63.142120][ T5874] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.157771][ T5875] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1008: bg 0: block 248: padding at end of block bitmap is not set [ 63.183526][ T5867] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.1007: Failed to acquire dquot type 1 [ 63.194206][ T5875] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.1008: Failed to acquire dquot type 1 [ 63.204740][ T5867] EXT4-fs (loop3): 1 truncate cleaned up [ 63.206301][ T5874] ext4 filesystem being mounted at /217/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.222604][ T5867] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.245372][ T5875] EXT4-fs (loop5): 1 truncate cleaned up [ 63.247883][ T5867] ext4 filesystem being mounted at /222/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.262315][ T5875] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 63.277561][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.297212][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.315798][ T4128] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 63.325742][ T31] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:1: Failed to release dquot type 1 [ 63.467512][ T5901] loop1: detected capacity change from 0 to 1024 [ 63.508493][ T5901] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.568391][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.599725][ T5918] loop5: detected capacity change from 0 to 512 [ 63.606826][ T5918] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 63.626016][ T5921] ipvlan0: entered promiscuous mode [ 63.647094][ T5918] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 63.666254][ T5918] EXT4-fs (loop5): 1 truncate cleaned up [ 63.673746][ T5918] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.704040][ T4128] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.723640][ T5929] loop1: detected capacity change from 0 to 2048 [ 63.775892][ T5929] Alternate GPT is invalid, using primary GPT. [ 63.782360][ T5929] loop1: p2 p3 p7 [ 63.792031][ T5937] netlink: 'syz.0.1033': attribute type 21 has an invalid length. [ 63.814335][ T5937] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1033'. [ 63.823474][ T5937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1033'. [ 63.861686][ T5942] netlink: 268 bytes leftover after parsing attributes in process `syz.4.1036'. [ 63.871149][ T5942] unsupported nla_type 65024 [ 63.962580][ T5954] loop5: detected capacity change from 0 to 512 [ 63.970184][ T5954] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 63.979318][ T5954] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 64.001997][ T5954] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 64.010157][ T5954] System zones: 0-2, 18-18, 34-35 [ 64.017928][ T5954] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 64.043730][ T4128] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.312773][ T6002] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 64.393247][ T6018] loop5: detected capacity change from 0 to 2048 [ 64.400069][ T6018] EXT4-fs: Ignoring removed bh option [ 64.405583][ T6014] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 64.412833][ T6014] IPv6: NLM_F_CREATE should be set when creating new route [ 64.420111][ T6014] IPv6: NLM_F_CREATE should be set when creating new route [ 64.427344][ T6014] IPv6: NLM_F_CREATE should be set when creating new route [ 64.455004][ T6014] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 64.463967][ T6018] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.502158][ T6018] EXT4-fs (loop5): shut down requested (2) [ 64.520449][ T4128] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.605293][ T6049] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1082'. [ 64.614526][ T6049] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1082'. [ 64.623493][ T6049] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1082'. [ 64.657999][ T6058] ªªªªª»: renamed from veth0_vlan (while UP) [ 64.675367][ T6061] loop3: detected capacity change from 0 to 512 [ 64.682142][ T6061] ext4: Unknown parameter 'pcr' [ 64.684386][ T6055] loop5: detected capacity change from 0 to 736 [ 64.751366][ T6073] loop4: detected capacity change from 0 to 128 [ 64.816741][ T6084] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.182375][ T6151] loop4: detected capacity change from 0 to 164 [ 65.329853][ T29] kauditd_printk_skb: 222 callbacks suppressed [ 65.329867][ T29] audit: type=1326 audit(1764089219.377:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6168 comm="syz.0.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2089daf749 code=0x7ffc0000 [ 65.382822][ T29] audit: type=1326 audit(1764089219.377:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6168 comm="syz.0.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2089daf749 code=0x7ffc0000 [ 65.406382][ T29] audit: type=1326 audit(1764089219.377:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6168 comm="syz.0.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2089daf749 code=0x7ffc0000 [ 65.430346][ T29] audit: type=1326 audit(1764089219.417:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6168 comm="syz.0.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2089daf749 code=0x7ffc0000 [ 65.453834][ T29] audit: type=1326 audit(1764089219.417:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6168 comm="syz.0.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f2089daf749 code=0x7ffc0000 [ 65.477650][ T29] audit: type=1326 audit(1764089219.417:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6168 comm="syz.0.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2089daf749 code=0x7ffc0000 [ 65.501215][ T29] audit: type=1326 audit(1764089219.417:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6168 comm="syz.0.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2089daf749 code=0x7ffc0000 [ 65.536886][ T29] audit: type=1400 audit(1764089219.587:1055): avc: denied { write } for pid=6179 comm="syz.5.1145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 65.632477][ T6196] loop1: detected capacity change from 0 to 128 [ 65.639214][ T6195] netlink: 'syz.4.1148': attribute type 30 has an invalid length. [ 65.652910][ T6195] bond1: option arp_missed_max: invalid value (0) [ 65.659447][ T6195] bond1: option arp_missed_max: allowed values 1 - 255 [ 65.667699][ T6195] bond1 (unregistering): Released all slaves [ 65.681687][ T29] audit: type=1400 audit(1764089219.727:1056): avc: denied { mounton } for pid=6194 comm="syz.1.1151" path="/245/file0" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 65.716256][ T29] audit: type=1400 audit(1764089219.757:1057): avc: denied { write } for pid=6203 comm="syz.0.1154" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 65.872590][ T6226] loop3: detected capacity change from 0 to 256 [ 65.898862][ T3439] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.935540][ T3439] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.985706][ T3439] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.024340][ T6245] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 66.045747][ T3439] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.188547][ T6267] loop0: detected capacity change from 0 to 512 [ 66.214641][ T3439] bridge_slave_1: left allmulticast mode [ 66.220527][ T3439] bridge_slave_1: left promiscuous mode [ 66.226486][ T3439] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.235064][ T3439] bridge_slave_0: left allmulticast mode [ 66.240739][ T3439] bridge_slave_0: left promiscuous mode [ 66.246529][ T3439] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.249592][ T6267] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.268506][ T6267] ext4 filesystem being mounted at /213/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.292906][ T6267] EXT4-fs error (device loop0): ext4_add_entry:2417: inode #12: comm syz.0.1182: Directory hole found for htree leaf block 0 [ 66.306622][ T6267] EXT4-fs (loop0): Remounting filesystem read-only [ 66.336827][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.351865][ T2315] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 66.426513][ T3439] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.436985][ T3439] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.446810][ T3439] bond0 (unregistering): Released all slaves [ 66.457209][ T6237] chnl_net:caif_netlink_parms(): no params data found [ 66.517611][ T3439] hsr_slave_0: left promiscuous mode [ 66.530111][ T3439] hsr_slave_1: left promiscuous mode [ 66.542649][ T3439] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.550293][ T3439] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.560272][ T3439] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.567777][ T3439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.590029][ T3439] veth1_macvtap: left promiscuous mode [ 66.597500][ T3439] veth0_macvtap: left promiscuous mode [ 66.605917][ T3439] veth1_vlan: left promiscuous mode [ 66.614603][ T3439] veth0_vlan: left promiscuous mode [ 66.716122][ T3439] team0 (unregistering): Port device team_slave_1 removed [ 66.738593][ T3439] team0 (unregistering): Port device team_slave_0 removed [ 66.840692][ T6237] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.847901][ T6237] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.875149][ T6237] bridge_slave_0: entered allmulticast mode [ 66.887559][ T6237] bridge_slave_0: entered promiscuous mode [ 66.899913][ T6237] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.907110][ T6237] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.915337][ T6237] bridge_slave_1: entered allmulticast mode [ 66.922001][ T6237] bridge_slave_1: entered promiscuous mode [ 66.958601][ T6237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.976279][ T6237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.022601][ T6237] team0: Port device team_slave_0 added [ 67.032702][ T6237] team0: Port device team_slave_1 added [ 67.079378][ T6237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.086492][ T6237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.112712][ T6237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.124312][ T6237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.131294][ T6237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.157360][ T6237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.252196][ T6237] hsr_slave_0: entered promiscuous mode [ 67.274535][ T6237] hsr_slave_1: entered promiscuous mode [ 67.298200][ T6237] debugfs: 'hsr0' already exists in 'hsr' [ 67.304017][ T6237] Cannot create hsr debugfs directory [ 67.457539][ T6237] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 67.487437][ T6237] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 67.518173][ T6237] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 67.535100][ T6336] loop5: detected capacity change from 0 to 128 [ 67.536796][ T6237] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 67.541720][ T6336] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 67.592069][ T6330] __nla_validate_parse: 10 callbacks suppressed [ 67.592084][ T6330] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1209'. [ 67.607506][ T6330] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1209'. [ 67.643947][ T6330] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1209'. [ 67.672517][ T6237] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.679822][ T6237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.687196][ T6237] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.694362][ T6237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.761860][ T6237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.785527][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.795948][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.806603][ T6356] loop0: detected capacity change from 0 to 2048 [ 67.830403][ T6237] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.849648][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.856757][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.868705][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.875914][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.984079][ T6367] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1223'. [ 68.011699][ T6237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.019444][ T6374] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1225'. [ 68.204994][ T6397] loop3: detected capacity change from 0 to 128 [ 68.229848][ T6397] ext4 filesystem being mounted at /289/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 68.429337][ T6237] veth0_vlan: entered promiscuous mode [ 68.455519][ T6237] veth1_vlan: entered promiscuous mode [ 68.518090][ T6237] veth0_macvtap: entered promiscuous mode [ 68.527223][ T6237] veth1_macvtap: entered promiscuous mode [ 68.549519][ T6237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.568438][ T6429] loop0: detected capacity change from 0 to 128 [ 68.576384][ T6237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.593683][ T6429] ext4 filesystem being mounted at /228/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 68.628863][ T31] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.673163][ T31] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.705880][ T31] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.743169][ T6435] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1243'. [ 68.755082][ T31] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.806888][ T6437] loop6: detected capacity change from 0 to 512 [ 68.900578][ T6437] ext4 filesystem being mounted at /0/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.110354][ T6463] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 69.169962][ T6463] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 69.236880][ T6481] loop0: detected capacity change from 0 to 128 [ 69.265952][ T6483] loop4: detected capacity change from 0 to 2048 [ 69.507048][ T6513] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 69.600751][ T6528] loop6: detected capacity change from 0 to 1024 [ 69.641022][ T6528] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 16: block 145:freeing already freed block (bit 9); block bitmap corrupt. [ 69.808058][ T6550] loop0: detected capacity change from 0 to 1024 [ 69.826421][ T6550] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.1294: Failed to acquire dquot type 0 [ 69.893440][ T6550] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 69.932197][ T6550] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #13: comm syz.0.1294: corrupted inode contents [ 69.954441][ T6550] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #13: comm syz.0.1294: mark_inode_dirty error [ 69.956888][ T6561] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1298'. [ 69.994133][ T6550] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #13: comm syz.0.1294: corrupted inode contents [ 70.045228][ T6550] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #13: comm syz.0.1294: mark_inode_dirty error [ 70.086332][ T6550] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #13: comm syz.0.1294: corrupted inode contents [ 70.118852][ T6550] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 70.163490][ T6550] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #13: comm syz.0.1294: corrupted inode contents [ 70.191875][ T6550] EXT4-fs error (device loop0): ext4_truncate:4637: inode #13: comm syz.0.1294: mark_inode_dirty error [ 70.233300][ T6550] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 70.274227][ T6550] EXT4-fs (loop0): 1 truncate cleaned up [ 70.295369][ T6579] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 70.395211][ T6582] loop4: detected capacity change from 0 to 2048 [ 70.467973][ T6589] netlink: 'syz.0.1310': attribute type 3 has an invalid length. [ 70.486395][ T6589] netlink: 'syz.0.1310': attribute type 3 has an invalid length. [ 70.505715][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 70.505733][ T29] audit: type=1400 audit(1764089224.557:1180): avc: denied { connect } for pid=6591 comm="syz.3.1311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 70.565896][ T29] audit: type=1400 audit(1764089224.617:1181): avc: denied { name_connect } for pid=6593 comm="syz.3.1312" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 70.603838][ T29] audit: type=1326 audit(1764089224.647:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6596 comm="syz.4.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f233244f749 code=0x7ffc0000 [ 70.627335][ T29] audit: type=1326 audit(1764089224.647:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6596 comm="syz.4.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f233244f749 code=0x7ffc0000 [ 70.678697][ T29] audit: type=1326 audit(1764089224.697:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6596 comm="syz.4.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f233244f749 code=0x7ffc0000 [ 70.702258][ T29] audit: type=1326 audit(1764089224.697:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6596 comm="syz.4.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f233244f749 code=0x7ffc0000 [ 70.725983][ T29] audit: type=1326 audit(1764089224.697:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6596 comm="syz.4.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f233244f749 code=0x7ffc0000 [ 70.749472][ T29] audit: type=1326 audit(1764089224.697:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6596 comm="syz.4.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f233244f749 code=0x7ffc0000 [ 70.772977][ T29] audit: type=1326 audit(1764089224.697:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6596 comm="syz.4.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f233244f749 code=0x7ffc0000 [ 70.796439][ T29] audit: type=1326 audit(1764089224.697:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6596 comm="syz.4.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f233244f749 code=0x7ffc0000 [ 70.909206][ T6619] tipc: New replicast peer: 255.255.255.255 [ 70.915499][ T6619] tipc: Enabled bearer , priority 10 [ 71.067262][ T6644] loop3: detected capacity change from 0 to 512 [ 71.114350][ T6644] EXT4-fs: Ignoring removed nomblk_io_submit option [ 71.125637][ T6644] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 71.133589][ T6644] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 71.152450][ T6644] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 71.162326][ T6644] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 71.173560][ T6644] EXT4-fs mount: 14 callbacks suppressed [ 71.173580][ T6644] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 71.201800][ T6644] EXT4-fs: Ignoring removed nomblk_io_submit option [ 71.214034][ T6644] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 71.273645][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.369855][ T6673] loop0: detected capacity change from 0 to 1024 [ 71.376911][ T6673] EXT4-fs: Ignoring removed nomblk_io_submit option [ 71.395616][ T6673] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.457013][ T6673] SELinux: Context system_u:object_r:restorecond_var_run_t:s0 is not valid (left unmapped). [ 71.474913][ T6686] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 71.557058][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.676030][ T6708] xt_CT: You must specify a L4 protocol and not use inversions on it [ 71.833983][ T6729] netlink: 'syz.6.1375': attribute type 39 has an invalid length. [ 71.913377][ T6741] loop0: detected capacity change from 0 to 128 [ 71.920003][ T6736] dummy0: entered allmulticast mode [ 71.927404][ T6741] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.939914][ T6736] dummy0: left allmulticast mode [ 71.945563][ T6741] ext4 filesystem being mounted at /261/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 71.983213][ T3314] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.340597][ T6780] loop4: detected capacity change from 0 to 1024 [ 72.348833][ T6780] EXT4-fs: Ignoring removed nomblk_io_submit option [ 72.376443][ T6780] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.407795][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.546823][ T6806] loop4: detected capacity change from 0 to 1024 [ 72.594581][ T6806] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 72.606814][ T6806] ext4 filesystem being mounted at /298/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.637507][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 73.133402][ T6885] loop3: detected capacity change from 0 to 1024 [ 73.156104][ T6885] EXT4-fs: Ignoring removed orlov option [ 73.165030][ T6885] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.196629][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.228696][ T6894] loop4: detected capacity change from 0 to 128 [ 73.259410][ T6897] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1452'. [ 73.299431][ T6890] Process accounting resumed [ 73.961238][ T6983] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check. [ 74.195166][ T7016] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check. [ 74.770541][ T7106] netlink: 'syz.4.1548': attribute type 6 has an invalid length. [ 75.192707][ T7143] loop0: detected capacity change from 0 to 128 [ 75.443039][ T7174] netlink: 488 bytes leftover after parsing attributes in process `syz.0.1576'. [ 75.452200][ T7174] netlink: 488 bytes leftover after parsing attributes in process `syz.0.1576'. [ 75.518361][ T29] kauditd_printk_skb: 283 callbacks suppressed [ 75.518453][ T29] audit: type=1400 audit(1764089229.567:1473): avc: denied { setopt } for pid=7175 comm="syz.6.1577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 75.548981][ T29] audit: type=1400 audit(1764089229.597:1474): avc: denied { write } for pid=7175 comm="syz.6.1577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 75.569663][ T29] audit: type=1326 audit(1764089229.617:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7167 comm="syz.3.1573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160503f749 code=0x7ffc0000 [ 75.593224][ T29] audit: type=1326 audit(1764089229.617:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7167 comm="syz.3.1573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160503f749 code=0x7ffc0000 [ 75.651570][ T29] audit: type=1400 audit(1764089229.697:1477): avc: denied { create } for pid=7188 comm="syz.0.1583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 75.676496][ T29] audit: type=1400 audit(1764089229.727:1478): avc: denied { write } for pid=7188 comm="syz.0.1583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 75.696781][ T29] audit: type=1400 audit(1764089229.727:1479): avc: denied { nlmsg_write } for pid=7188 comm="syz.0.1583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 75.720686][ T7193] loop3: detected capacity change from 0 to 128 [ 75.737322][ T7195] netlink: 'syz.6.1586': attribute type 6 has an invalid length. [ 75.747495][ T29] audit: type=1400 audit(1764089229.787:1480): avc: denied { mounton } for pid=7192 comm="syz.3.1585" path="/350/file0" dev="tmpfs" ino=1798 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 75.770430][ T29] audit: type=1400 audit(1764089229.787:1481): avc: denied { mount } for pid=7192 comm="syz.3.1585" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 75.807743][ T29] audit: type=1400 audit(1764089229.857:1482): avc: denied { create } for pid=7197 comm="syz.0.1587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 75.974002][ T7216] blkio.reset_stats is deprecated [ 76.474609][ T7280] loop3: detected capacity change from 0 to 2048 [ 76.496198][ T7280] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.545024][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.638934][ T7308] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 76.686048][ T7316] loop6: detected capacity change from 0 to 2048 [ 76.695772][ T7316] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.727206][ T6237] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.826558][ T7332] netlink: 748 bytes leftover after parsing attributes in process `syz.6.1649'. [ 76.835837][ T7332] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 76.939502][ T7342] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1654'. [ 77.375947][ T7347] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 77.381605][ T7349] loop5: detected capacity change from 0 to 2048 [ 77.382525][ T7347] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 77.396442][ T7347] vhci_hcd vhci_hcd.0: Device attached [ 77.407130][ T7350] vhci_hcd: connection closed [ 77.407451][ T52] vhci_hcd: stop threads [ 77.408191][ T7349] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.412326][ T52] vhci_hcd: release socket [ 77.433059][ T52] vhci_hcd: disconnect device [ 77.449930][ T4128] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.513859][ T7363] netlink: 748 bytes leftover after parsing attributes in process `syz.0.1660'. [ 77.522976][ T7363] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 77.579688][ T7374] atomic_op ffff8881056e8928 conn xmit_atomic 0000000000000000 [ 77.772488][ T7410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1680'. [ 77.966998][ T7423] netlink: 'syz.6.1686': attribute type 6 has an invalid length. [ 78.148217][ T7449] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1696'. [ 78.157406][ T7449] netlink: 'syz.3.1696': attribute type 7 has an invalid length. [ 78.165209][ T7449] netlink: 'syz.3.1696': attribute type 8 has an invalid length. [ 78.173002][ T7449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1696'. [ 78.242432][ T7461] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 78.249020][ T7461] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 78.256843][ T7461] vhci_hcd vhci_hcd.0: Device attached [ 78.288087][ T7464] vhci_hcd: connection closed [ 78.294135][ T2315] vhci_hcd: stop threads [ 78.303125][ T2315] vhci_hcd: release socket [ 78.307629][ T2315] vhci_hcd: disconnect device [ 78.529562][ T7497] sctp: [Deprecated]: syz.5.1714 (pid 7497) Use of struct sctp_assoc_value in delayed_ack socket option. [ 78.529562][ T7497] Use struct sctp_sack_info instead [ 78.559161][ T7499] loop6: detected capacity change from 0 to 512 [ 78.568848][ T7499] EXT4-fs: Ignoring removed nomblk_io_submit option [ 78.576983][ T7499] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 78.584992][ T7499] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 78.597759][ T7499] EXT4-fs (loop6): couldn't mount RDWR because of unsupported optional features (80) [ 78.607299][ T7499] EXT4-fs (loop6): Skipping orphan cleanup due to unknown ROCOMPAT features [ 78.616582][ T7499] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 78.633098][ T7499] EXT4-fs: Ignoring removed nomblk_io_submit option [ 78.647102][ T7499] EXT4-fs (loop6): couldn't mount RDWR because of unsupported optional features (80) [ 78.677637][ T6237] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.745748][ T7522] sctp: [Deprecated]: syz.6.1723 (pid 7522) Use of int in maxseg socket option. [ 78.745748][ T7522] Use struct sctp_assoc_value instead [ 78.967621][ T7553] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 78.974198][ T7553] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 78.981939][ T7553] vhci_hcd vhci_hcd.0: Device attached [ 78.989891][ T7555] vhci_hcd: connection closed [ 79.003230][ T2315] vhci_hcd: stop threads [ 79.012319][ T2315] vhci_hcd: release socket [ 79.016815][ T2315] vhci_hcd: disconnect device [ 79.170298][ T7580] netlink: 'syz.3.1752': attribute type 39 has an invalid length. [ 79.275243][ T7595] loop5: detected capacity change from 0 to 1024 [ 79.287528][ T7595] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 79.300191][ T7595] ext4 filesystem being mounted at /257/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.320060][ T7595] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: comm syz.5.1759: lblock 0 mapped to illegal pblock 0 (length 1) [ 79.333646][ T7595] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 79.346064][ T7595] EXT4-fs (loop5): This should not happen!! Data will be lost [ 79.346064][ T7595] [ 79.364025][ T7595] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: comm syz.5.1759: lblock 0 mapped to illegal pblock 0 (length 1) [ 79.484595][ T7595] EXT4-fs error (device loop5): ext4_ext_remove_space:2955: inode #15: comm syz.5.1759: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 79.553970][ T7595] EXT4-fs error (device loop5) in ext4_setattr:6050: Corrupt filesystem [ 79.630163][ T4128] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 79.690443][ T7622] netlink: 'syz.4.1769': attribute type 5 has an invalid length. [ 79.828554][ T7645] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1780'. [ 79.886998][ T7651] netlink: 'syz.0.1783': attribute type 5 has an invalid length. [ 80.275327][ T7691] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.358396][ T7691] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.418522][ T7691] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.484617][ T7691] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.561265][ T2315] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.575023][ T2315] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.615427][ T2315] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.623676][ T2315] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.742066][ T7717] IPv6: NLM_F_CREATE should be specified when creating new route [ 80.814529][ T7727] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 80.838646][ T29] kauditd_printk_skb: 170 callbacks suppressed [ 80.838663][ T29] audit: type=1400 audit(1764089490.889:1653): avc: denied { watch watch_reads } for pid=7728 comm="syz.4.1820" path="/375" dev="tmpfs" ino=1919 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 80.890126][ T29] audit: type=1400 audit(1764089490.939:1654): avc: denied { read } for pid=7734 comm="syz.4.1823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 80.992501][ T29] audit: type=1400 audit(1764089491.039:1655): avc: denied { write } for pid=7746 comm="syz.6.1829" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.060843][ T29] audit: type=1400 audit(1764089491.109:1656): avc: denied { connect } for pid=7749 comm="syz.0.1830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 81.080637][ T29] audit: type=1400 audit(1764089491.109:1657): avc: denied { write } for pid=7749 comm="syz.0.1830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 81.109411][ T7760] SELinux: Context system_u:object_r:hald_keymap_exec_t:s0 is not valid (left unmapped). [ 81.114094][ T29] audit: type=1400 audit(1764089491.159:1658): avc: denied { mac_admin } for pid=7759 comm="syz.3.1835" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 81.182554][ T29] audit: type=1400 audit(1764089491.169:1659): avc: denied { relabelto } for pid=7759 comm="syz.3.1835" name="" dev="pipefs" ino=19804 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:hald_keymap_exec_t:s0" [ 81.210000][ T29] audit: type=1326 audit(1764089491.219:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7761 comm="syz.4.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f233244f749 code=0x7ffc0000 [ 81.233954][ T29] audit: type=1326 audit(1764089491.219:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7761 comm="syz.4.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f233244f749 code=0x7ffc0000 [ 81.257428][ T29] audit: type=1326 audit(1764089491.219:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7761 comm="syz.4.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f233244f749 code=0x7ffc0000 [ 81.416528][ T7801] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.470133][ T7801] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.524873][ T7810] Process accounting resumed [ 81.549461][ T7801] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.597548][ T7801] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.652642][ T7847] loop6: detected capacity change from 0 to 1764 [ 81.684035][ T31] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.717356][ T31] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.754048][ T31] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.765959][ T7857] loop5: detected capacity change from 0 to 256 [ 81.776405][ T31] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.814674][ T7860] Process accounting resumed [ 81.844333][ T7870] netlink: 'syz.3.1882': attribute type 1 has an invalid length. [ 81.905157][ T7881] vhci_hcd: invalid port number 236 [ 81.917921][ T7877] loop4: detected capacity change from 0 to 1764 [ 81.995284][ T7884] ================================================================== [ 82.003421][ T7884] BUG: KCSAN: data-race in memcpy_and_pad / rcu_tasks_trace_pregp_step [ 82.011709][ T7884] [ 82.014042][ T7884] write to 0xffff88811a6bd6dc of 4 bytes by task 28 on cpu 0: [ 82.021494][ T7884] rcu_tasks_trace_pregp_step+0x1ac/0x920 [ 82.027228][ T7884] rcu_tasks_wait_gp+0x8b/0x530 [ 82.032095][ T7884] rcu_tasks_one_gp+0x7f6/0x8e0 [ 82.036958][ T7884] rcu_tasks_kthread+0xf7/0x110 [ 82.041830][ T7884] kthread+0x489/0x510 [ 82.045917][ T7884] ret_from_fork+0x122/0x1b0 [ 82.050602][ T7884] ret_from_fork_asm+0x1a/0x30 [ 82.055390][ T7884] [ 82.057715][ T7884] read to 0xffff88811a6bd280 of 3264 bytes by task 7884 on cpu 1: [ 82.065517][ T7884] memcpy_and_pad+0x48/0x80 [ 82.070050][ T7884] arch_dup_task_struct+0x2c/0x40 [ 82.075081][ T7884] dup_task_struct+0x83/0x6b0 [ 82.079771][ T7884] copy_process+0x399/0x2000 [ 82.084397][ T7884] kernel_clone+0x16c/0x5c0 [ 82.088927][ T7884] __se_sys_clone3+0x1c2/0x200 [ 82.093715][ T7884] __x64_sys_clone3+0x31/0x40 [ 82.098414][ T7884] x64_sys_call+0x1fc9/0x3000 [ 82.103130][ T7884] do_syscall_64+0xd2/0x200 [ 82.107643][ T7884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.113550][ T7884] [ 82.115870][ T7884] Reported by Kernel Concurrency Sanitizer on: [ 82.122033][ T7884] CPU: 1 UID: 0 PID: 7884 Comm: syz.0.1891 Not tainted syzkaller #0 PREEMPT(voluntary) [ 82.131760][ T7884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 82.141819][ T7884] ================================================================== [ 82.156764][ T7887] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1893'. [ 82.216951][ T7889] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 82.224625][ T7889] vhci_hcd: invalid port number 96 [ 82.229770][ T7889] vhci_hcd: default hub control req: 0006 v000d i0060 l0