last executing test programs: 25.827565062s ago: executing program 2 (id=626): r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r1, 0x0, 0x9}, 0x18) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r4}) 25.806947702s ago: executing program 2 (id=627): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10) close(r2) 25.784906313s ago: executing program 2 (id=628): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000004180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004140)=""/63, 0x3f}, 0x4}], 0x1, 0x2b, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 25.706795223s ago: executing program 2 (id=630): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 25.682366784s ago: executing program 2 (id=631): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0xfdfe, 0x7, @remote, 0x4}, 0x1c) connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 24.911721264s ago: executing program 2 (id=644): r0 = socket$kcm(0x29, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x2e3, &(0x7f0000000280)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) mkdir(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000580)="89", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}], 0x2, 0x0) close(r0) 24.903765885s ago: executing program 32 (id=644): r0 = socket$kcm(0x29, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x2e3, &(0x7f0000000280)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) mkdir(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000580)="89", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}], 0x2, 0x0) close(r0) 1.357554222s ago: executing program 5 (id=1204): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x21004a, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.324871702s ago: executing program 5 (id=1205): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xff, 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 1.247537103s ago: executing program 5 (id=1211): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r0 = syz_io_uring_setup(0x1458, &(0x7f00000004c0)={0x0, 0x4, 0x10180, 0x2000, 0x3ae}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x6a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2040, 0x1}) io_uring_enter(r0, 0x2d3e, 0xfffffffd, 0x0, 0x0, 0x0) 1.196341244s ago: executing program 5 (id=1214): rt_sigaction(0x19, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x1239, &(0x7f0000001900)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') 1.149110525s ago: executing program 4 (id=1215): clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0x100000df, @empty}, 0x1c) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 686.171531ms ago: executing program 1 (id=1217): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_clone(0x82004000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 685.850831ms ago: executing program 5 (id=1218): creat(&(0x7f00000000c0)='./file0\x00', 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xe, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='security.selinux\x00', 0x0, 0x0) 684.981661ms ago: executing program 3 (id=1228): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x4c, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0x6, 0x4}, {}, {0xd, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_MASK={0x8}, @TCA_FW_INDEV={0x14, 0x3, 'veth0_macvtap\x00'}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c021}, 0x2004c8d4) 644.900252ms ago: executing program 0 (id=1219): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x3000046, &(0x7f0000006740)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@jqfmt_vfsold}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@nobarrier}, {@jqfmt_vfsold}, {@nojournal_checksum}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") utimes(&(0x7f0000000740)='./file0\x00', 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) close_range(r0, 0xffffffffffffffff, 0x0) 643.720132ms ago: executing program 5 (id=1220): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x404, &(0x7f0000000200)={[{@data_err_ignore}, {@mb_optimize_scan}]}, 0x1, 0x5e6, &(0x7f0000001200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) 607.500162ms ago: executing program 0 (id=1221): socket$kcm(0x2, 0x200000000000001, 0x106) r0 = syz_io_uring_setup(0x6440, &(0x7f0000000500)={0x0, 0xd52b, 0x10100, 0x0, 0x93}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x2, 0x0, 0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x11, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40010000, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 591.518932ms ago: executing program 3 (id=1222): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 508.980724ms ago: executing program 0 (id=1223): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0xd) close_range(r1, 0xffffffffffffffff, 0x0) 493.240104ms ago: executing program 1 (id=1224): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r0}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000001000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r4}, 0x10) close(r1) 486.180004ms ago: executing program 0 (id=1225): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x90}, 0x0) 457.691014ms ago: executing program 3 (id=1226): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) 395.777805ms ago: executing program 1 (id=1229): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r4, @ANYBLOB="080003"], 0x44}}, 0x0) 395.165205ms ago: executing program 1 (id=1230): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) eventfd(0x7) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x100}, 0x0) write(r0, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) 362.522136ms ago: executing program 0 (id=1231): bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000002380)="$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") r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x7fffffffffffffff) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c00) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0x14, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x300}, 0x14}}, 0x0) 309.005166ms ago: executing program 3 (id=1232): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x14, r3, 0x505, 0x0, 0x25dfdbfd}, 0x14}}, 0x10) 305.924827ms ago: executing program 3 (id=1233): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x10, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000003c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r3}}, 0x18) 294.508607ms ago: executing program 1 (id=1234): rt_sigaction(0x19, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x1239, &(0x7f0000001900)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') 289.173146ms ago: executing program 4 (id=1235): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r2, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x402, 0x200000002000}) 263.285617ms ago: executing program 4 (id=1236): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/25]}, 0x91) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x2000) 202.005438ms ago: executing program 4 (id=1237): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r1, 0x0) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000780)=""/243, 0x11000}], 0x1}, 0x142) 122.000019ms ago: executing program 4 (id=1238): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/10, 0xa}], 0x1}, 0x5}], 0x1, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r2, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r3, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) 121.312029ms ago: executing program 3 (id=1239): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f00000003c0)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@journal_dev={'journal_dev', 0x3d, 0xb83}}, {@data_err_ignore}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x60000009, 0x5979f5f9aa0e54f5, 0x0, 0x0, 0x0}, 0x50) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 41.02919ms ago: executing program 4 (id=1240): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0x204000, 0x1000}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001040)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0xc, 0x0, 0x1, [{0xfffffffffffffd60}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6]}}]}}]}, 0x94}}, 0x0) 24.77912ms ago: executing program 1 (id=1241): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) perf_event_open(0x0, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000400)=ANY=[@ANYBLOB="010003000588687663710180c2000000"]) 0s ago: executing program 0 (id=1242): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kmem_cache_free\x00', r1, 0x0, 0x800}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007009300000000000c0001"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.24' (ED25519) to the list of known hosts. [ 24.290391][ T29] audit: type=1400 audit(1749460719.758:62): avc: denied { mounton } for pid=3296 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.291156][ T3296] cgroup: Unknown subsys name 'net' [ 24.313149][ T29] audit: type=1400 audit(1749460719.758:63): avc: denied { mount } for pid=3296 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.340562][ T29] audit: type=1400 audit(1749460719.788:64): avc: denied { unmount } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.481505][ T3296] cgroup: Unknown subsys name 'cpuset' [ 24.487541][ T3296] cgroup: Unknown subsys name 'rlimit' [ 24.607259][ T29] audit: type=1400 audit(1749460720.078:65): avc: denied { setattr } for pid=3296 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.630984][ T29] audit: type=1400 audit(1749460720.078:66): avc: denied { create } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.651584][ T29] audit: type=1400 audit(1749460720.078:67): avc: denied { write } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.672005][ T29] audit: type=1400 audit(1749460720.078:68): avc: denied { read } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.692789][ T29] audit: type=1400 audit(1749460720.088:69): avc: denied { mounton } for pid=3296 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.700377][ T3299] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.718409][ T29] audit: type=1400 audit(1749460720.088:70): avc: denied { mount } for pid=3296 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.751842][ T29] audit: type=1400 audit(1749460720.198:71): avc: denied { relabelto } for pid=3299 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.790401][ T3296] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.590248][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 26.662799][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 26.702614][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.709802][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.717037][ T3306] bridge_slave_0: entered allmulticast mode [ 26.723467][ T3306] bridge_slave_0: entered promiscuous mode [ 26.743527][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.750626][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.758147][ T3306] bridge_slave_1: entered allmulticast mode [ 26.764423][ T3306] bridge_slave_1: entered promiscuous mode [ 26.788014][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 26.827871][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 26.837428][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.857683][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.864802][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.872175][ T3308] bridge_slave_0: entered allmulticast mode [ 26.878867][ T3308] bridge_slave_0: entered promiscuous mode [ 26.895490][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.914264][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.921616][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.929016][ T3308] bridge_slave_1: entered allmulticast mode [ 26.935481][ T3308] bridge_slave_1: entered promiscuous mode [ 26.965711][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 26.983618][ T3306] team0: Port device team_slave_0 added [ 26.990414][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.011264][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.022025][ T3306] team0: Port device team_slave_1 added [ 27.027941][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.035269][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.042550][ T3318] bridge_slave_0: entered allmulticast mode [ 27.048866][ T3318] bridge_slave_0: entered promiscuous mode [ 27.058044][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.065272][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.072592][ T3312] bridge_slave_0: entered allmulticast mode [ 27.078947][ T3312] bridge_slave_0: entered promiscuous mode [ 27.094268][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.101454][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.109549][ T3318] bridge_slave_1: entered allmulticast mode [ 27.116280][ T3318] bridge_slave_1: entered promiscuous mode [ 27.126464][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.133643][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.140868][ T3312] bridge_slave_1: entered allmulticast mode [ 27.147332][ T3312] bridge_slave_1: entered promiscuous mode [ 27.182698][ T3308] team0: Port device team_slave_0 added [ 27.189783][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.199749][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.207472][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.234164][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.248531][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.258417][ T3308] team0: Port device team_slave_1 added [ 27.265155][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.279426][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.286459][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.312710][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.326589][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.366913][ T3312] team0: Port device team_slave_0 added [ 27.374013][ T3312] team0: Port device team_slave_1 added [ 27.385156][ T3318] team0: Port device team_slave_0 added [ 27.391739][ T3318] team0: Port device team_slave_1 added [ 27.397949][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.405013][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.431620][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.451472][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.458588][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.465806][ T3316] bridge_slave_0: entered allmulticast mode [ 27.472168][ T3316] bridge_slave_0: entered promiscuous mode [ 27.483628][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.490625][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.516785][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.536415][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.543521][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.550664][ T3316] bridge_slave_1: entered allmulticast mode [ 27.556987][ T3316] bridge_slave_1: entered promiscuous mode [ 27.576613][ T3306] hsr_slave_0: entered promiscuous mode [ 27.582669][ T3306] hsr_slave_1: entered promiscuous mode [ 27.588955][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.596074][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.622701][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.638408][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.645406][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.672670][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.690624][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.697995][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.724507][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.736161][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.746134][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.753243][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.780080][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.808822][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.829810][ T3308] hsr_slave_0: entered promiscuous mode [ 27.836178][ T3308] hsr_slave_1: entered promiscuous mode [ 27.842594][ T3308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.850465][ T3308] Cannot create hsr debugfs directory [ 27.869082][ T3316] team0: Port device team_slave_0 added [ 27.886958][ T3312] hsr_slave_0: entered promiscuous mode [ 27.892988][ T3312] hsr_slave_1: entered promiscuous mode [ 27.898958][ T3312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.906731][ T3312] Cannot create hsr debugfs directory [ 27.923976][ T3316] team0: Port device team_slave_1 added [ 27.953738][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.960719][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.986790][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.999569][ T3318] hsr_slave_0: entered promiscuous mode [ 28.005549][ T3318] hsr_slave_1: entered promiscuous mode [ 28.011258][ T3318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.018835][ T3318] Cannot create hsr debugfs directory [ 28.042252][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.049287][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.075855][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.147702][ T3316] hsr_slave_0: entered promiscuous mode [ 28.153782][ T3316] hsr_slave_1: entered promiscuous mode [ 28.160187][ T3316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.167854][ T3316] Cannot create hsr debugfs directory [ 28.253961][ T3306] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.274418][ T3306] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.283122][ T3306] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.298674][ T3306] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.323474][ T3308] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.343067][ T3308] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.351911][ T3308] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.365569][ T3308] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.374227][ T3312] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.385006][ T3312] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.398658][ T3312] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.408385][ T3312] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.439888][ T3318] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.452247][ T3318] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.469275][ T3318] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.480728][ T3318] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.495930][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.526833][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.538017][ T3316] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.547267][ T3316] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.558041][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.565286][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.574259][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.581349][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.597805][ T3316] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.607178][ T3316] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.665960][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.677841][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.691486][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.715424][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.742324][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.749430][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.759685][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.769864][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.782391][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.789523][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.798529][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.805666][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.822009][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.829392][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.839144][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.846328][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.855923][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.863026][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.888456][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.912913][ T3312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.946882][ T3318] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.957606][ T3318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.972515][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.007621][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.042595][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.062785][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.069900][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.086278][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.093503][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.117950][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.172112][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.191738][ T3306] veth0_vlan: entered promiscuous mode [ 29.201507][ T3306] veth1_vlan: entered promiscuous mode [ 29.250106][ T3312] veth0_vlan: entered promiscuous mode [ 29.277325][ T3312] veth1_vlan: entered promiscuous mode [ 29.293918][ T3306] veth0_macvtap: entered promiscuous mode [ 29.306524][ T3306] veth1_macvtap: entered promiscuous mode [ 29.319723][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.342622][ T3312] veth0_macvtap: entered promiscuous mode [ 29.350492][ T3312] veth1_macvtap: entered promiscuous mode [ 29.365440][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.394498][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.409258][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.424782][ T3308] veth0_vlan: entered promiscuous mode [ 29.438090][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.446535][ T3306] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.455832][ T3306] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.464671][ T3306] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.473512][ T3306] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.487765][ T3318] veth0_vlan: entered promiscuous mode [ 29.499215][ T3318] veth1_vlan: entered promiscuous mode [ 29.507108][ T3308] veth1_vlan: entered promiscuous mode [ 29.514849][ T3312] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.523864][ T3312] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.532665][ T3312] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.541593][ T3312] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.571713][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 29.571728][ T29] audit: type=1400 audit(1749460725.048:81): avc: denied { mounton } for pid=3312 comm="syz-executor" path="/root/syzkaller.SbMT0G/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 29.602741][ T29] audit: type=1400 audit(1749460725.048:82): avc: denied { mount } for pid=3312 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 29.616191][ T3318] veth0_macvtap: entered promiscuous mode [ 29.624804][ T29] audit: type=1400 audit(1749460725.048:83): avc: denied { mounton } for pid=3312 comm="syz-executor" path="/root/syzkaller.SbMT0G/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 29.633680][ T3318] veth1_macvtap: entered promiscuous mode [ 29.655841][ T29] audit: type=1400 audit(1749460725.048:84): avc: denied { mount } for pid=3312 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 29.669716][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.683676][ T29] audit: type=1400 audit(1749460725.048:85): avc: denied { mounton } for pid=3312 comm="syz-executor" path="/root/syzkaller.SbMT0G/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 29.694211][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.718737][ T29] audit: type=1400 audit(1749460725.048:86): avc: denied { mounton } for pid=3312 comm="syz-executor" path="/root/syzkaller.SbMT0G/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 29.733267][ T3308] veth0_macvtap: entered promiscuous mode [ 29.753562][ T29] audit: type=1400 audit(1749460725.048:87): avc: denied { unmount } for pid=3312 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 29.771409][ T3316] veth0_vlan: entered promiscuous mode [ 29.786404][ T3316] veth1_vlan: entered promiscuous mode [ 29.792422][ T29] audit: type=1400 audit(1749460725.258:88): avc: denied { mounton } for pid=3312 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 29.815365][ T29] audit: type=1400 audit(1749460725.258:89): avc: denied { mount } for pid=3312 comm="syz-executor" name="/" dev="gadgetfs" ino=4355 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 29.815690][ T3318] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.846490][ T3318] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.855386][ T3318] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.864342][ T3318] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.875780][ T3308] veth1_macvtap: entered promiscuous mode [ 29.884183][ T3312] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.906306][ T29] audit: type=1400 audit(1749460725.378:90): avc: denied { read write } for pid=3306 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 29.961948][ T3316] veth0_macvtap: entered promiscuous mode [ 29.973815][ T3316] veth1_macvtap: entered promiscuous mode [ 29.987243][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.002010][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.022633][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.034338][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.049088][ T3316] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.057893][ T3316] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.066709][ T3316] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.075851][ T3316] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.093029][ T3308] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.101985][ T3308] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.110926][ T3308] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.119674][ T3308] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.172274][ T3490] ALSA: seq fatal error: cannot create timer (-22) [ 30.237908][ T3494] netlink: 96 bytes leftover after parsing attributes in process `syz.1.11'. [ 30.610750][ T3483] netlink: 'syz.2.6': attribute type 4 has an invalid length. [ 30.882515][ T3558] Zero length message leads to an empty skb [ 30.907065][ T3544] loop0: detected capacity change from 0 to 8192 [ 30.919258][ T3544] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 30.989121][ T3568] SELinux: security_context_str_to_sid (÷ÿ) failed with errno=-22 [ 31.022954][ T3571] sd 0:0:1:0: device reset [ 31.096969][ T3576] Â: renamed from pim6reg1 [ 31.193985][ T3583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.221055][ T3583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.304744][ T3589] netlink: 4 bytes leftover after parsing attributes in process `syz.4.52'. [ 31.313557][ T3589] netlink: 4 bytes leftover after parsing attributes in process `syz.4.52'. [ 31.337995][ T3591] process 'syz.3.53' launched './file0' with NULL argv: empty string added [ 31.342239][ T3589] netlink: 4 bytes leftover after parsing attributes in process `syz.4.52'. [ 31.430900][ T3593] vhci_hcd: invalid port number 96 [ 31.436279][ T3593] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 31.471825][ T3604] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 31.540182][ T3611] netlink: 87 bytes leftover after parsing attributes in process `syz.4.62'. [ 31.589605][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.602095][ T23] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 31.721393][ C0] vcan0: j1939_tp_rxtimer: 0xffff8881191a2400: rx timeout, send abort [ 31.834187][ T3635] netlink: 128 bytes leftover after parsing attributes in process `syz.2.72'. [ 31.847387][ T3619] hid-generic 0000:0000:0000.0001: pid 3619 passed too large report [ 31.963683][ T3653] loop1: detected capacity change from 0 to 1024 [ 31.971199][ T3653] ======================================================= [ 31.971199][ T3653] WARNING: The mand mount option has been deprecated and [ 31.971199][ T3653] and is ignored by this kernel. Remove the mand [ 31.971199][ T3653] option from the mount to silence this warning. [ 31.971199][ T3653] ======================================================= [ 32.012690][ T3655] Illegal XDP return value 4294967294 on prog (id 56) dev N/A, expect packet loss! [ 32.032981][ T3653] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.047459][ T3653] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.069428][ T3663] loop0: detected capacity change from 0 to 512 [ 32.111584][ T3653] Direct I/O collision with buffered writes! File: /file1 Comm: syz.1.79 [ 32.124490][ T3663] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.139058][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.148657][ T3663] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 32.171513][ T3663] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.84: corrupted inode contents [ 32.187414][ T3663] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.84: mark_inode_dirty error [ 32.209757][ T3663] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.84: corrupted inode contents [ 32.221423][ C0] vcan0: j1939_tp_rxtimer: 0xffff8881191a2600: rx timeout, send abort [ 32.229800][ C0] vcan0: j1939_tp_rxtimer: 0xffff8881191a2400: abort rx timeout. Force session deactivation [ 32.242904][ T3663] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.84: mark_inode_dirty error [ 32.266315][ T3663] syz.0.84 (3663) used greatest stack depth: 10952 bytes left [ 32.278895][ T3679] capability: warning: `syz.2.88' uses deprecated v2 capabilities in a way that may be insecure [ 32.311451][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.422074][ T3688] netlink: 16 bytes leftover after parsing attributes in process `syz.0.91'. [ 32.518133][ T3698] geneve2: entered promiscuous mode [ 32.523518][ T3698] geneve2: entered allmulticast mode [ 32.524195][ C0] hrtimer: interrupt took 46174 ns [ 32.612505][ T3707] netem: change failed [ 32.729749][ C0] vcan0: j1939_tp_rxtimer: 0xffff8881191a2600: abort rx timeout. Force session deactivation [ 33.492545][ T3795] SELinux: failed to load policy [ 33.569527][ T3805] netem: change failed [ 33.663647][ T3815] netlink: 'syz.1.134': attribute type 2 has an invalid length. [ 33.671655][ T3815] netlink: 'syz.1.134': attribute type 1 has an invalid length. [ 33.679719][ T3815] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.134'. [ 33.930747][ T3842] netlink: 'syz.4.141': attribute type 7 has an invalid length. [ 33.938885][ T3842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.141'. [ 34.497698][ T3892] serio: Serial port ptm0 [ 34.723459][ T29] kauditd_printk_skb: 311 callbacks suppressed [ 34.723477][ T29] audit: type=1326 audit(1749460730.198:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3897 comm="syz.1.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff7233a58e7 code=0x7ffc0000 [ 34.726816][ T3900] netlink: 96 bytes leftover after parsing attributes in process `syz.4.146'. [ 34.730212][ T29] audit: type=1326 audit(1749460730.198:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3897 comm="syz.1.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff72334ab19 code=0x7ffc0000 [ 34.785978][ T29] audit: type=1326 audit(1749460730.198:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3897 comm="syz.1.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff7233a58e7 code=0x7ffc0000 [ 34.809560][ T29] audit: type=1326 audit(1749460730.198:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3897 comm="syz.1.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff72334ab19 code=0x7ffc0000 [ 34.833133][ T29] audit: type=1326 audit(1749460730.198:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3897 comm="syz.1.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7233ae929 code=0x7ffc0000 [ 34.857553][ T29] audit: type=1326 audit(1749460730.198:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3897 comm="syz.1.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7233ae929 code=0x7ffc0000 [ 35.033622][ T29] audit: type=1326 audit(1749460730.358:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3897 comm="syz.1.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7233ae929 code=0x7ffc0000 [ 35.059172][ T29] audit: type=1326 audit(1749460730.358:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3897 comm="syz.1.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7233ae929 code=0x7ffc0000 [ 35.084299][ T29] audit: type=1326 audit(1749460730.358:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3897 comm="syz.1.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7233ae929 code=0x7ffc0000 [ 35.108300][ T29] audit: type=1400 audit(1749460730.388:411): avc: denied { name_connect } for pid=3903 comm="syz.1.147" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 35.279095][ T3931] loop2: detected capacity change from 0 to 2048 [ 35.292952][ T3933] loop0: detected capacity change from 0 to 2048 [ 35.321530][ T3931] EXT4-fs (loop2): failed to initialize system zone (-117) [ 35.335972][ T3931] EXT4-fs (loop2): mount failed [ 35.363025][ T3298] loop0: p1 < > p4 [ 35.377505][ T3298] loop0: p4 size 8388608 extends beyond EOD, truncated [ 35.414421][ T3933] loop0: p1 < > p4 [ 35.419768][ T3933] loop0: p4 size 8388608 extends beyond EOD, truncated [ 35.515417][ T3614] udevd[3614]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 35.527836][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 35.574443][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 35.587388][ T3614] udevd[3614]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 35.633008][ T3950] program syz.0.167 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 35.860530][ T3967] openvswitch: netlink: Message has 6 unknown bytes. [ 35.975800][ T3978] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 36.164738][ T3984] ip6gre1: entered promiscuous mode [ 36.199890][ T3981] syz.2.178 uses obsolete (PF_INET,SOCK_PACKET) [ 36.375794][ T3993] loop1: detected capacity change from 0 to 512 [ 36.418788][ T3996] netdevsim netdevsim0: Direct firmware load for „ failed with error -2 [ 36.432518][ T3993] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 36.482654][ T3993] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 36.483264][ T3998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.499948][ T3993] System zones: 0-2, 18-18, 34-34 [ 36.524620][ T3993] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.542182][ T3998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.560336][ T3993] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.635036][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.175233][ T4020] __nla_validate_parse: 5 callbacks suppressed [ 37.175291][ T4020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.192'. [ 37.196753][ T4020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.192'. [ 37.295998][ T4020] wireguard0: entered promiscuous mode [ 37.303387][ T4020] wireguard0: entered allmulticast mode [ 37.352303][ T4020] syz.1.192 (4020) used greatest stack depth: 10568 bytes left [ 38.317898][ T4119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.344035][ T4119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.564841][ T4140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.206'. [ 38.645631][ T4146] netlink: 28 bytes leftover after parsing attributes in process `syz.0.209'. [ 38.732278][ T4155] netlink: 4 bytes leftover after parsing attributes in process `syz.3.213'. [ 38.736224][ T4159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.215'. [ 38.770096][ T4155] netlink: 12 bytes leftover after parsing attributes in process `syz.3.213'. [ 38.997042][ T4181] loop2: detected capacity change from 0 to 512 [ 39.011998][ T4181] EXT4-fs: Ignoring removed nomblk_io_submit option [ 39.032021][ T4181] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.045510][ T4181] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 39.074981][ T4181] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 39.112564][ T4181] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 39.182915][ T4181] EXT4-fs (loop2): 1 truncate cleaned up [ 39.192206][ T4192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.230'. [ 39.192558][ T4181] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.403933][ T4202] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.457326][ T4202] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.491787][ T4206] netlink: 12 bytes leftover after parsing attributes in process `syz.3.236'. [ 39.512032][ T4206] netlink: 12 bytes leftover after parsing attributes in process `syz.3.236'. [ 39.534324][ T4202] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.643751][ T4202] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.717839][ T4202] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.732708][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 39.732727][ T29] audit: type=1400 audit(1749460735.208:527): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 39.734687][ T4202] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.770276][ T29] audit: type=1400 audit(1749460735.238:528): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 39.771661][ T4202] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.803851][ T4202] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.834820][ T4229] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.835934][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.861071][ T29] audit: type=1400 audit(1749460735.338:529): avc: denied { mount } for pid=4230 comm="syz.4.248" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 39.913873][ T29] audit: type=1400 audit(1749460735.338:530): avc: denied { bind } for pid=4228 comm="syz.3.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 39.933457][ T29] audit: type=1400 audit(1749460735.338:531): avc: denied { name_bind } for pid=4228 comm="syz.3.246" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 39.954373][ T29] audit: type=1400 audit(1749460735.338:532): avc: denied { node_bind } for pid=4228 comm="syz.3.246" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 40.058069][ T29] audit: type=1400 audit(1749460735.528:533): avc: denied { accept } for pid=4241 comm="syz.0.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 40.238618][ T29] audit: type=1326 audit(1749460735.708:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4258 comm="syz.0.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74adcce929 code=0x7ffc0000 [ 40.262021][ T29] audit: type=1326 audit(1749460735.708:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4258 comm="syz.0.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74adcce929 code=0x7ffc0000 [ 40.286508][ T29] audit: type=1326 audit(1749460735.758:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4258 comm="syz.0.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f74adcce929 code=0x7ffc0000 [ 40.735509][ T4294] SELinux: failed to load policy [ 40.777653][ T4297] loop9: detected capacity change from 0 to 7 [ 40.784261][ T4297] Buffer I/O error on dev loop9, logical block 0, async page read [ 40.792534][ T4297] Buffer I/O error on dev loop9, logical block 0, async page read [ 40.800422][ T4297] loop9: unable to read partition table [ 40.819146][ T4297] loop_reread_partitions: partition scan of loop9 (þ被üŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 40.819146][ T4297] Uªÿÿÿÿÿÿ) failed (rc=-5) [ 40.834599][ T3298] Buffer I/O error on dev loop9, logical block 0, async page read [ 40.843739][ T3298] Buffer I/O error on dev loop9, logical block 0, async page read [ 40.852358][ T3298] Buffer I/O error on dev loop9, logical block 0, async page read [ 40.860568][ T3298] Buffer I/O error on dev loop9, logical block 0, async page read [ 40.880707][ T3298] Buffer I/O error on dev loop9, logical block 0, async page read [ 40.897581][ T3298] Buffer I/O error on dev loop9, logical block 0, async page read [ 40.909279][ T3298] Buffer I/O error on dev loop9, logical block 0, async page read [ 40.917806][ T3298] Buffer I/O error on dev loop9, logical block 0, async page read [ 40.963026][ T4303] syzkaller0: entered promiscuous mode [ 40.968568][ T4303] syzkaller0: entered allmulticast mode [ 42.177272][ T4374] loop1: detected capacity change from 0 to 1024 [ 42.187733][ T4374] EXT4-fs: Ignoring removed nobh option [ 42.193529][ T4374] EXT4-fs: Ignoring removed bh option [ 42.283371][ T4374] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.404935][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.139520][ T4397] bridge: RTM_NEWNEIGH with invalid ether address [ 43.169482][ T4399] sctp: [Deprecated]: syz.0.322 (pid 4399) Use of int in max_burst socket option deprecated. [ 43.169482][ T4399] Use struct sctp_assoc_value instead [ 43.412131][ T4413] team_slave_0: entered promiscuous mode [ 43.418000][ T4413] team_slave_1: entered promiscuous mode [ 43.472444][ T4413] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 43.494061][ T4413] team0: Device macvtap1 is already an upper device of the team interface [ 43.522657][ T4413] team_slave_0: left promiscuous mode [ 43.528156][ T4413] team_slave_1: left promiscuous mode [ 43.566240][ T4422] wireguard1: entered promiscuous mode [ 43.572113][ T4422] wireguard1: entered allmulticast mode [ 43.583210][ T4425] loop4: detected capacity change from 0 to 512 [ 43.621942][ T4425] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.651789][ T4413] syz.3.328 (4413) used greatest stack depth: 10528 bytes left [ 43.675297][ T4425] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.334: inode #13: comm syz.4.334: iget: illegal inode # [ 43.725549][ T4425] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.334: couldn't read orphan inode 13 (err -117) [ 43.756887][ T4435] loop3: detected capacity change from 0 to 2048 [ 43.762252][ T4425] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.810226][ T4435] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.847513][ T4435] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 43.855605][ T4425] EXT4-fs error (device loop4): ext4_resize_begin:60: comm syz.4.334: resize_inode disabled but reserved GDT blocks non-zero [ 43.876599][ T4435] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 28 [ 43.888939][ T4435] EXT4-fs (loop3): This should not happen!! Data will be lost [ 43.888939][ T4435] [ 43.898684][ T4435] EXT4-fs (loop3): Total free blocks count 0 [ 43.904683][ T4435] EXT4-fs (loop3): Free/Dirty block details [ 43.910637][ T4435] EXT4-fs (loop3): free_blocks=2415919504 [ 43.916487][ T4435] EXT4-fs (loop3): dirty_blocks=16 [ 43.921793][ T4435] EXT4-fs (loop3): Block reservation details [ 43.927781][ T4435] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 43.965919][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.001232][ T4443] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 44.031365][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.148192][ T4452] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 44.173133][ T4452] netlink: 'syz.1.344': attribute type 4 has an invalid length. [ 44.681334][ T4488] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 45.065568][ T4523] loop3: detected capacity change from 0 to 2048 [ 45.107566][ T4523] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.344720][ T29] kauditd_printk_skb: 101 callbacks suppressed [ 45.344737][ T29] audit: type=1400 audit(1749460740.818:638): avc: denied { write } for pid=4541 comm="syz.4.380" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 45.374846][ T4543] loop2: detected capacity change from 0 to 512 [ 45.400450][ T4546] __nla_validate_parse: 1 callbacks suppressed [ 45.400470][ T4546] netlink: 14528 bytes leftover after parsing attributes in process `syz.1.381'. [ 45.438534][ T4543] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.466597][ T4543] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.542651][ T29] audit: type=1400 audit(1749460741.018:639): avc: denied { read append open } for pid=4536 comm="syz.2.378" path="/77/file1/hugetlb.1GB.usage_in_bytes" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 45.617112][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.626524][ T29] audit: type=1326 audit(1749460741.068:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4557 comm="syz.4.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408fc4e929 code=0x7ffc0000 [ 45.650451][ T29] audit: type=1326 audit(1749460741.068:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4557 comm="syz.4.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408fc4e929 code=0x7ffc0000 [ 45.674784][ T29] audit: type=1326 audit(1749460741.068:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4557 comm="syz.4.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f408fc4e929 code=0x7ffc0000 [ 45.698155][ T29] audit: type=1326 audit(1749460741.068:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4557 comm="syz.4.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408fc4e929 code=0x7ffc0000 [ 45.721696][ T29] audit: type=1326 audit(1749460741.068:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4557 comm="syz.4.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408fc4e929 code=0x7ffc0000 [ 45.746541][ T29] audit: type=1326 audit(1749460741.068:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4557 comm="syz.4.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f408fc4e929 code=0x7ffc0000 [ 45.771047][ T29] audit: type=1326 audit(1749460741.068:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4557 comm="syz.4.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408fc4e929 code=0x7ffc0000 [ 45.794620][ T29] audit: type=1326 audit(1749460741.068:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4557 comm="syz.4.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408fc4e929 code=0x7ffc0000 [ 45.861205][ T4565] netlink: 'syz.3.389': attribute type 21 has an invalid length. [ 45.869039][ T4565] netlink: 132 bytes leftover after parsing attributes in process `syz.3.389'. [ 45.999474][ T4578] team_slave_0: entered promiscuous mode [ 46.005242][ T4578] team_slave_1: entered promiscuous mode [ 46.019937][ T4578] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 46.028433][ T4578] team0: Device macvtap1 is already an upper device of the team interface [ 46.038347][ T4578] team_slave_0: left promiscuous mode [ 46.044006][ T4578] team_slave_1: left promiscuous mode [ 46.078648][ T4579] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.134769][ T4579] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.134942][ T4593] 9p: Unknown Cache mode or invalid value m [ 46.159770][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.204138][ T4579] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.253730][ T4579] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.378226][ T4617] SELinux: failed to load policy [ 46.405078][ T4579] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.422190][ T4620] sd 0:0:1:0: device reset [ 46.450497][ T4579] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.470843][ T4579] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.490507][ T4579] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.589954][ T4629] loop3: detected capacity change from 0 to 512 [ 46.600725][ T4629] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 46.618178][ T4629] EXT4-fs (loop3): 1 truncate cleaned up [ 46.625485][ T4629] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.677096][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.084989][ T4659] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.135575][ T4659] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.195835][ T4659] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.252679][ T4659] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.267224][ T4678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.438'. [ 47.334163][ T4659] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.360983][ T4659] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.374520][ T4659] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.397235][ T4659] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.430952][ T4690] netlink: 24 bytes leftover after parsing attributes in process `syz.1.443'. [ 47.464313][ T4692] 9p: Unknown Cache mode or invalid value m [ 47.541972][ T4702] netlink: 52 bytes leftover after parsing attributes in process `syz.0.449'. [ 47.597934][ T4710] loop4: detected capacity change from 0 to 512 [ 47.610104][ T4710] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.623372][ T4712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.452'. [ 47.632996][ T4710] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 47.635002][ T4715] loop3: detected capacity change from 0 to 128 [ 47.652549][ T4710] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 47.669058][ T4710] EXT4-fs (loop4): 1 truncate cleaned up [ 47.675581][ T4710] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.721753][ T4715] syz.3.455: attempt to access beyond end of device [ 47.721753][ T4715] loop3: rw=0, sector=121, nr_sectors = 120 limit=128 [ 47.753655][ T3864] kworker/u8:39: attempt to access beyond end of device [ 47.753655][ T3864] loop3: rw=1, sector=241, nr_sectors = 800 limit=128 [ 47.812655][ T4725] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.844943][ T4725] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.866327][ T4734] netlink: 24 bytes leftover after parsing attributes in process `syz.0.460'. [ 47.879927][ T4735] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4735 comm=syz.3.461 [ 47.905682][ T4725] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.929843][ T4739] wireguard0: entered promiscuous mode [ 47.935523][ T4739] wireguard0: entered allmulticast mode [ 47.975432][ T4725] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.046976][ T4725] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.059569][ T4725] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.071039][ T4725] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.083776][ T4725] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.136433][ T4749] loop2: detected capacity change from 0 to 512 [ 48.156043][ T4749] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.180734][ T4749] ext4 filesystem being mounted at /83/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.221458][ T4760] ref_ctr_offset mismatch. inode: 0x216 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 48.367438][ T4770] loop3: detected capacity change from 0 to 2048 [ 48.383005][ T4772] vhci_hcd: invalid port number 96 [ 48.384353][ T4770] EXT4-fs: Ignoring removed bh option [ 48.388180][ T4772] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 48.413108][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.462653][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.498687][ T4770] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.701631][ T4778] wireguard0: entered promiscuous mode [ 48.709005][ T4778] wireguard0: entered allmulticast mode [ 48.928948][ T4778] syz.2.478 (4778) used greatest stack depth: 10376 bytes left [ 49.166805][ T3864] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 49.182503][ T3864] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 49.194804][ T3864] EXT4-fs (loop3): This should not happen!! Data will be lost [ 49.194804][ T3864] [ 49.204493][ T3864] EXT4-fs (loop3): Total free blocks count 0 [ 49.210488][ T3864] EXT4-fs (loop3): Free/Dirty block details [ 49.216431][ T3864] EXT4-fs (loop3): free_blocks=2415919104 [ 49.222212][ T3864] EXT4-fs (loop3): dirty_blocks=8224 [ 49.227576][ T3864] EXT4-fs (loop3): Block reservation details [ 49.233637][ T3864] EXT4-fs (loop3): i_reserved_data_blocks=514 [ 49.249733][ T3864] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 49.526384][ T4829] netlink: 'syz.1.506': attribute type 1 has an invalid length. [ 49.541310][ T4829] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.560150][ T4829] bond1: (slave veth5): Enslaving as an active interface with a down link [ 49.576760][ T4829] bond1: (slave dummy0): making interface the new active one [ 49.585199][ T4828] vhci_hcd: invalid port number 96 [ 49.590448][ T4828] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 49.598392][ T4829] dummy0: entered promiscuous mode [ 49.604946][ T4829] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 49.630146][ T4829] syz.1.506 (4829) used greatest stack depth: 10056 bytes left [ 49.764759][ T4838] loop1: detected capacity change from 0 to 512 [ 49.774498][ T4838] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 49.794925][ T4838] EXT4-fs (loop1): 1 truncate cleaned up [ 49.801888][ T4838] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.872605][ T4849] block device autoloading is deprecated and will be removed. [ 49.916701][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.982146][ T4855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.507'. [ 49.997436][ T4857] loop0: detected capacity change from 0 to 512 [ 50.017040][ T4857] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 50.038089][ T4857] EXT4-fs (loop0): 1 truncate cleaned up [ 50.055236][ T4857] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.171953][ T4869] netlink: 12 bytes leftover after parsing attributes in process `syz.3.513'. [ 50.233748][ T4865] wireguard0: entered promiscuous mode [ 50.239883][ T4865] wireguard0: entered allmulticast mode [ 50.458387][ T4880] loop1: detected capacity change from 0 to 128 [ 50.506316][ T4880] syz.1.517: attempt to access beyond end of device [ 50.506316][ T4880] loop1: rw=0, sector=121, nr_sectors = 120 limit=128 [ 50.553386][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.567399][ T3873] kworker/u8:48: attempt to access beyond end of device [ 50.567399][ T3873] loop1: rw=1, sector=241, nr_sectors = 800 limit=128 [ 50.591859][ T4876] Set syz1 is full, maxelem 65536 reached [ 50.629580][ T4882] netlink: 'syz.1.519': attribute type 3 has an invalid length. [ 50.749413][ T4895] loop2: detected capacity change from 0 to 128 [ 50.782350][ T4899] capability: warning: `syz.0.525' uses 32-bit capabilities (legacy support in use) [ 50.848578][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 50.848596][ T29] audit: type=1400 audit(1749460746.318:798): avc: denied { watch watch_reads } for pid=4907 comm="syz.4.529" path="/108/file0" dev="tmpfs" ino=572 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 51.360593][ T29] audit: type=1400 audit(1749460746.828:799): avc: denied { write } for pid=4913 comm="syz.0.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 51.385884][ T4923] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.398843][ T4926] netlink: 96 bytes leftover after parsing attributes in process `syz.3.538'. [ 51.414245][ T29] audit: type=1400 audit(1749460746.888:800): avc: denied { mounton } for pid=4929 comm="syz.1.540" path="/120/file0" dev="tmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 51.429292][ T4932] loop3: detected capacity change from 0 to 512 [ 51.445198][ T4932] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 51.461521][ T4932] EXT4-fs (loop3): 1 truncate cleaned up [ 51.467689][ T4932] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.491604][ T4923] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.580938][ T29] audit: type=1400 audit(1749460747.048:801): avc: denied { create } for pid=4940 comm="syz.1.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 51.613509][ T29] audit: type=1400 audit(1749460747.078:802): avc: denied { sys_admin } for pid=4940 comm="syz.1.544" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 51.652200][ T4923] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.715452][ T4923] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.787212][ T29] audit: type=1326 audit(1749460747.258:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4947 comm="syz.1.546" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff7233ae929 code=0x0 [ 51.820268][ T4923] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.833822][ T4923] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.846742][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.846944][ T4923] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.870217][ T4923] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.887350][ T4950] loop3: detected capacity change from 0 to 512 [ 51.924518][ T4950] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.937686][ T4950] ext4 filesystem being mounted at /111/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.965720][ T29] audit: type=1326 audit(1749460747.438:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4949 comm="syz.3.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436ebfe929 code=0x7ffc0000 [ 52.025809][ T4955] netlink: 12 bytes leftover after parsing attributes in process `syz.2.548'. [ 52.035568][ T4955] netlink: 28 bytes leftover after parsing attributes in process `syz.2.548'. [ 52.044619][ T4955] netlink: 12 bytes leftover after parsing attributes in process `syz.2.548'. [ 52.059775][ T29] audit: type=1326 audit(1749460747.468:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4949 comm="syz.3.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f436ebfe929 code=0x7ffc0000 [ 52.083283][ T29] audit: type=1326 audit(1749460747.468:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4949 comm="syz.3.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436ebfe929 code=0x7ffc0000 [ 52.106597][ T29] audit: type=1326 audit(1749460747.468:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4949 comm="syz.3.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f436ebfe929 code=0x7ffc0000 [ 52.130529][ T4955] netlink: 28 bytes leftover after parsing attributes in process `syz.2.548'. [ 52.139531][ T4955] netlink: 'syz.2.548': attribute type 6 has an invalid length. [ 52.273369][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.560013][ T4969] wireguard0: entered promiscuous mode [ 52.567115][ T4969] wireguard0: entered allmulticast mode [ 52.710656][ T4979] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 52.854207][ T4989] loop1: detected capacity change from 0 to 512 [ 52.910668][ T4989] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.958762][ T4989] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 53.066130][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.308465][ T5012] wireguard1: entered promiscuous mode [ 53.316217][ T5012] wireguard1: entered allmulticast mode [ 53.371371][ T5021] netlink: 32 bytes leftover after parsing attributes in process `syz.0.576'. [ 53.399245][ T5023] netlink: 12 bytes leftover after parsing attributes in process `syz.0.577'. [ 53.462412][ T5029] atomic_op ffff888119d26928 conn xmit_atomic 0000000000000000 [ 53.685824][ T5041] loop4: detected capacity change from 0 to 2048 [ 53.704114][ T5041] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.743862][ T5046] loop1: detected capacity change from 0 to 8192 [ 53.838314][ T5053] loop1: detected capacity change from 0 to 512 [ 53.852067][ T5053] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 53.866527][ T5053] EXT4-fs (loop1): 1 truncate cleaned up [ 53.914245][ T5053] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.074569][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.205388][ T5067] loop4: detected capacity change from 0 to 128 [ 54.235696][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.262364][ T5066] syz.4.595: attempt to access beyond end of device [ 54.262364][ T5066] loop4: rw=34817, sector=102, nr_sectors = 32 limit=128 [ 54.299306][ T5069] SELinux: ebitmap: truncated map [ 54.305794][ T5069] SELinux: failed to load policy [ 54.328924][ T5072] loop1: detected capacity change from 0 to 1024 [ 54.343138][ T5072] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.401732][ T5076] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.422817][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.479819][ T5076] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.533728][ T5076] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.593755][ T5076] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.660609][ T5076] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.680938][ T5085] loop1: detected capacity change from 0 to 512 [ 54.682245][ T5076] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.703252][ T5085] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.709725][ T5076] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.717088][ T5085] ext4 filesystem being mounted at /140/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.729829][ T5076] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.802954][ T5092] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 54.810135][ T5085] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.602: corrupted inode contents [ 54.824969][ T5085] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.602: mark_inode_dirty error [ 54.836908][ T5085] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.602: corrupted inode contents [ 54.854489][ T5085] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.602: corrupted inode contents [ 54.866803][ T5085] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.602: mark_inode_dirty error [ 54.881839][ T5085] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.602: corrupted inode contents [ 54.895296][ T5085] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.602: mark_inode_dirty error [ 54.907589][ T5085] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.602: corrupted inode contents [ 54.920545][ T5085] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.602: mark_inode_dirty error [ 54.960020][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.986001][ T5100] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.091628][ T5100] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.132460][ T5100] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.182472][ T5100] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.288822][ T5111] veth1_macvtap: left promiscuous mode [ 55.296667][ T5111] macsec0: entered promiscuous mode [ 55.556568][ T5128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.620'. [ 56.034193][ T5152] netlink: 96 bytes leftover after parsing attributes in process `syz.1.632'. [ 56.249120][ T5162] loop1: detected capacity change from 0 to 256 [ 56.266982][ T5162] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 56.303855][ T5162] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 56.312743][ T5162] FAT-fs (loop1): Filesystem has been set read-only [ 56.517202][ T5169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.640'. [ 56.644716][ T3621] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4 [ 56.652575][ T3621] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2 [ 56.679994][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 56.680010][ T29] audit: type=1326 audit(1749460752.148:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5174 comm="syz.0.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74adcce929 code=0x7ffc0000 [ 56.721458][ T3851] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.736014][ T3621] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 56.743907][ T3621] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 56.751818][ T3621] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 56.759777][ T3621] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 56.767748][ T3621] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 56.770879][ T29] audit: type=1326 audit(1749460752.188:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5174 comm="syz.0.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74adcce929 code=0x7ffc0000 [ 56.775720][ T3621] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 56.798762][ T29] audit: type=1326 audit(1749460752.188:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5174 comm="syz.0.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74adcce929 code=0x7ffc0000 [ 56.806577][ T3621] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 56.829939][ T29] audit: type=1326 audit(1749460752.188:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5174 comm="syz.0.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74adcce929 code=0x7ffc0000 [ 56.837937][ T3621] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 56.861317][ T29] audit: type=1326 audit(1749460752.198:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5174 comm="syz.0.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74adcce929 code=0x7ffc0000 [ 56.868990][ T3621] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 56.892196][ T29] audit: type=1326 audit(1749460752.198:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5174 comm="syz.0.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f74adcce929 code=0x7ffc0000 [ 56.899867][ T3621] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 56.899914][ T3621] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 56.923224][ T29] audit: type=1326 audit(1749460752.198:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5174 comm="syz.0.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74adcce929 code=0x7ffc0000 [ 56.930983][ T3621] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 56.931006][ T3621] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 56.931028][ T3621] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 56.938731][ T29] audit: type=1326 audit(1749460752.198:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5174 comm="syz.0.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74adcce929 code=0x7ffc0000 [ 57.053780][ T3851] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.064852][ T29] audit: type=1400 audit(1749460752.488:891): avc: denied { mounton } for pid=5178 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 57.086816][ T3621] hid-generic 0000:3000000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 57.113748][ T5183] fido_id[5183]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 57.154419][ T3851] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.230788][ T3851] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.365186][ T29] audit: type=1326 audit(1749460752.818:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5200 comm="syz.1.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7233ae929 code=0x7ffc0000 [ 57.402932][ T3851] bridge_slave_1: left allmulticast mode [ 57.408715][ T3851] bridge_slave_1: left promiscuous mode [ 57.414578][ T3851] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.468163][ T3851] bridge_slave_0: left allmulticast mode [ 57.474027][ T3851] bridge_slave_0: left promiscuous mode [ 57.479796][ T3851] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.612617][ T3851] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 57.626471][ T3851] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 57.639450][ T3851] bond0 (unregistering): Released all slaves [ 57.685807][ T5178] chnl_net:caif_netlink_parms(): no params data found [ 57.708422][ T3851] hsr_slave_0: left promiscuous mode [ 57.714437][ T3851] hsr_slave_1: left promiscuous mode [ 57.721309][ T3851] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.728898][ T3851] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.763305][ T3851] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.770866][ T3851] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.781527][ T3851] veth1_macvtap: left promiscuous mode [ 57.787080][ T3851] veth0_macvtap: left promiscuous mode [ 57.793691][ T3851] veth1_vlan: left promiscuous mode [ 57.799110][ T3851] veth0_vlan: left promiscuous mode [ 57.811163][ T5220] program syz.0.657 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 57.867972][ T3851] team0 (unregistering): Port device team_slave_1 removed [ 57.882413][ T3851] team0 (unregistering): Port device team_slave_0 removed [ 57.925517][ T5218] all: renamed from bridge_slave_0 (while UP) [ 57.976044][ T5178] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.983189][ T5178] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.991599][ T5178] bridge_slave_0: entered allmulticast mode [ 57.998096][ T5178] bridge_slave_0: entered promiscuous mode [ 58.009665][ T5178] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.016985][ T5178] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.025507][ T5178] bridge_slave_1: entered allmulticast mode [ 58.032375][ T5178] bridge_slave_1: entered promiscuous mode [ 58.067455][ T5178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.078533][ T5178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.125901][ T5178] team0: Port device team_slave_0 added [ 58.141561][ T5178] team0: Port device team_slave_1 added [ 58.181085][ T5178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.188343][ T5178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.215578][ T5178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.241743][ T5178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.248873][ T5178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.275301][ T5178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.335888][ T5178] hsr_slave_0: entered promiscuous mode [ 58.342446][ T5178] hsr_slave_1: entered promiscuous mode [ 58.348639][ T5178] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.357345][ T5178] Cannot create hsr debugfs directory [ 58.504204][ T5251] wireguard0: entered promiscuous mode [ 58.510761][ T5251] wireguard0: entered allmulticast mode [ 58.552052][ T5260] vhci_hcd: invalid port number 224 [ 58.568999][ T5178] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 58.578494][ T5262] loop3: detected capacity change from 0 to 128 [ 58.590696][ T5178] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 58.607871][ T5178] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 58.626648][ T5178] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 58.651830][ T5178] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.659006][ T5178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.666433][ T5178] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.673641][ T5178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.714884][ T5178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.723649][ T3851] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.731301][ T3851] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.746570][ T5178] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.755875][ T3851] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.763146][ T3851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.780172][ T3851] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.787351][ T3851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.865650][ T5178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.959492][ T5293] syzkaller1: entered promiscuous mode [ 58.965199][ T5293] syzkaller1: entered allmulticast mode [ 59.096153][ T5178] veth0_vlan: entered promiscuous mode [ 59.112156][ T5178] veth1_vlan: entered promiscuous mode [ 59.131883][ T5178] veth0_macvtap: entered promiscuous mode [ 59.143619][ T5178] veth1_macvtap: entered promiscuous mode [ 59.155899][ T5178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.169017][ T5178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.179965][ T5178] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.188855][ T5178] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.197686][ T5178] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.207613][ T5178] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.278003][ T5316] loop5: detected capacity change from 0 to 128 [ 59.318597][ T3382] kernel write not supported for file /380/attr/exec (pid: 3382 comm: kworker/0:3) [ 59.340285][ T5322] netlink: 20 bytes leftover after parsing attributes in process `syz.0.691'. [ 59.387677][ T5100] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.401878][ T5100] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.434901][ T5100] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.465838][ T5100] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.771953][ T5350] netlink: 12 bytes leftover after parsing attributes in process `syz.4.703'. [ 60.388713][ T5387] -1: renamed from syzkaller0 [ 60.465766][ T5395] veth1_macvtap: left promiscuous mode [ 60.471550][ T5395] macsec0: entered promiscuous mode [ 60.477013][ T5395] macsec0: entered allmulticast mode [ 60.572534][ T5403] netlink: 4 bytes leftover after parsing attributes in process `syz.5.728'. [ 60.583240][ T5403] netlink: 4 bytes leftover after parsing attributes in process `syz.5.728'. [ 60.636127][ T5403] netlink: 4 bytes leftover after parsing attributes in process `syz.5.728'. [ 60.669604][ T5403] netlink: 4 bytes leftover after parsing attributes in process `syz.5.728'. [ 60.681267][ T5411] netlink: 16 bytes leftover after parsing attributes in process `syz.0.730'. [ 60.750457][ T5403] netlink: 4 bytes leftover after parsing attributes in process `syz.5.728'. [ 60.775015][ T5405] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.727'. [ 60.785065][ T5405] netlink: zone id is out of range [ 60.790291][ T5405] netlink: zone id is out of range [ 60.798732][ T5405] netlink: zone id is out of range [ 60.814499][ T5405] netlink: del zone limit has 8 unknown bytes [ 60.828975][ T5426] netlink: 'syz.4.736': attribute type 1 has an invalid length. [ 60.836807][ T5426] netlink: 'syz.4.736': attribute type 4 has an invalid length. [ 60.862656][ T5426] netlink: 'syz.4.736': attribute type 1 has an invalid length. [ 60.870361][ T5426] netlink: 'syz.4.736': attribute type 4 has an invalid length. [ 60.935419][ T5434] loop4: detected capacity change from 0 to 8192 [ 61.031356][ T3851] dummy0: left promiscuous mode [ 61.052972][ T5442] loop4: detected capacity change from 0 to 8192 [ 61.183598][ T5458] loop3: detected capacity change from 0 to 512 [ 61.190650][ T5458] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 61.199884][ T5458] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 61.209004][ T5458] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 61.223515][ T5458] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 61.231889][ T5458] System zones: 0-2, 18-18, 34-35 [ 61.240658][ T5458] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.283854][ T5458] EXT4-fs warning (device loop3): ext4_lookup:1799: Inconsistent encryption contexts: 12/14 [ 61.300012][ T5458] EXT4-fs warning (device loop3): ext4_lookup:1799: Inconsistent encryption contexts: 12/14 [ 61.319261][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.407239][ T5473] macvlan1: entered promiscuous mode [ 61.415027][ T5473] ipvlan0: entered promiscuous mode [ 61.421959][ T5473] ipvlan0: left promiscuous mode [ 61.436731][ T5473] macvlan1: left promiscuous mode [ 61.456873][ T5479] pimreg: entered allmulticast mode [ 61.465943][ T5479] pimreg: left allmulticast mode [ 61.665659][ T5495] loop3: detected capacity change from 0 to 1024 [ 61.721974][ T5495] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.752962][ T5491] SELinux: failed to load policy [ 61.758007][ T29] kauditd_printk_skb: 158 callbacks suppressed [ 61.758023][ T29] audit: type=1400 audit(1749460757.228:1051): avc: denied { load_policy } for pid=5489 comm="syz.0.765" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 61.804987][ T5495] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.823900][ T5506] __nla_validate_parse: 5 callbacks suppressed [ 61.823968][ T5506] netlink: 4 bytes leftover after parsing attributes in process `syz.4.768'. [ 61.839842][ T29] audit: type=1400 audit(1749460757.278:1052): avc: denied { mount } for pid=5494 comm="syz.3.766" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 61.862024][ T29] audit: type=1400 audit(1749460757.288:1053): avc: denied { open } for pid=5502 comm="syz.1.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 61.881546][ T29] audit: type=1400 audit(1749460757.288:1054): avc: denied { kernel } for pid=5502 comm="syz.1.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 61.900996][ T29] audit: type=1400 audit(1749460757.298:1055): avc: denied { create } for pid=5501 comm="syz.4.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 61.920531][ T29] audit: type=1400 audit(1749460757.298:1056): avc: denied { ioctl } for pid=5501 comm="syz.4.768" path="socket:[11155]" dev="sockfs" ino=11155 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 61.945988][ T29] audit: type=1400 audit(1749460757.298:1057): avc: denied { bind } for pid=5501 comm="syz.4.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 61.965247][ T29] audit: type=1400 audit(1749460757.298:1058): avc: denied { setopt } for pid=5501 comm="syz.4.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 61.984827][ T29] audit: type=1400 audit(1749460757.298:1059): avc: denied { write } for pid=5501 comm="syz.4.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 61.997620][ T5505] loop1: detected capacity change from 0 to 512 [ 62.012145][ T29] audit: type=1400 audit(1749460757.458:1060): avc: denied { add_name } for pid=5494 comm="syz.3.766" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 62.045152][ T5505] EXT4-fs error (device loop1): ext4_orphan_get:1419: comm syz.1.769: bad orphan inode 11 [ 62.056065][ T5505] ext4_test_bit(bit=10, block=4) = 1 [ 62.061457][ T5505] is_bad_inode(inode)=0 [ 62.065680][ T5505] NEXT_ORPHAN(inode)=2080374784 [ 62.070708][ T5505] max_ino=32 [ 62.073924][ T5505] i_nlink=0 [ 62.098592][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.116910][ T5505] EXT4-fs (loop1): 1 truncate cleaned up [ 62.127031][ T5509] netlink: 96 bytes leftover after parsing attributes in process `syz.5.772'. [ 62.137459][ T5505] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.175402][ T5513] loop3: detected capacity change from 0 to 1024 [ 62.186634][ T5513] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 62.197880][ T5513] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 62.218988][ T5513] JBD2: no valid journal superblock found [ 62.224993][ T5513] EXT4-fs (loop3): Could not load journal inode [ 62.233933][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.257732][ T5513] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 62.288956][ T5519] loop1: detected capacity change from 0 to 2048 [ 62.327465][ T5521] loop3: detected capacity change from 0 to 128 [ 62.335668][ T5521] EXT4-fs: test_dummy_encryption option not supported [ 62.344392][ T5523] netlink: 'syz.0.778': attribute type 3 has an invalid length. [ 62.345079][ T5519] Alternate GPT is invalid, using primary GPT. [ 62.359599][ T5519] loop1: p2 p3 p7 [ 62.384911][ T2998] Alternate GPT is invalid, using primary GPT. [ 62.391401][ T2998] loop1: p2 p3 p7 [ 62.415756][ T5527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.439195][ T5527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.448496][ T3626] udevd[3626]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 62.448610][ T5202] udevd[5202]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 62.466572][ T3614] udevd[3614]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 62.529994][ T3614] udevd[3614]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 62.530064][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 62.558807][ T5202] udevd[5202]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 62.623987][ T5536] loop3: detected capacity change from 0 to 8192 [ 62.673658][ T5539] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 62.694343][ T5539] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 63.459806][ T5562] loop1: detected capacity change from 0 to 256 [ 63.466748][ T5562] FAT-fs (loop1): bogus number of FAT sectors [ 63.472947][ T5562] FAT-fs (loop1): Can't find a valid FAT filesystem [ 63.607273][ T5574] netlink: 'syz.3.800': attribute type 1 has an invalid length. [ 63.666141][ T5582] loop1: detected capacity change from 0 to 512 [ 63.673383][ T5582] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.683145][ T5582] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 63.695743][ T5582] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 63.717371][ T5582] EXT4-fs (loop1): 1 truncate cleaned up [ 63.723742][ T5582] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.768920][ T5582] 9pnet: Could not find request transport: fd0xffffffffffffffff0xffffffffffffffff [ 63.801854][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.992139][ T5613] bridge0: port 3(bond0) entered blocking state [ 63.998514][ T5613] bridge0: port 3(bond0) entered disabled state [ 64.026212][ T5613] bond0: entered allmulticast mode [ 64.031536][ T5613] bond_slave_0: entered allmulticast mode [ 64.037405][ T5613] bond_slave_1: entered allmulticast mode [ 64.062023][ T5613] bond0: entered promiscuous mode [ 64.065767][ T5616] loop4: detected capacity change from 0 to 2048 [ 64.067193][ T5613] bond_slave_0: entered promiscuous mode [ 64.079355][ T5613] bond_slave_1: entered promiscuous mode [ 64.097779][ T5616] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.118080][ T5613] bridge0: port 3(bond0) entered blocking state [ 64.123202][ T5616] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.817: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 64.124435][ T5613] bridge0: port 3(bond0) entered forwarding state [ 64.152354][ T5618] bond0: left allmulticast mode [ 64.157304][ T5618] bond_slave_0: left allmulticast mode [ 64.162962][ T5618] bond_slave_1: left allmulticast mode [ 64.168466][ T5618] bond0: left promiscuous mode [ 64.173375][ T5618] bond_slave_0: left promiscuous mode [ 64.178832][ T5618] bond_slave_1: left promiscuous mode [ 64.184448][ T5618] bridge0: port 3(bond0) entered disabled state [ 64.197044][ T5616] EXT4-fs (loop4): Remounting filesystem read-only [ 64.275660][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.368267][ T5626] batman_adv: batadv0: Adding interface: dummy0 [ 64.387935][ T5626] batman_adv: batadv0: Interface activated: dummy0 [ 64.535057][ T5638] xt_hashlimit: max too large, truncated to 1048576 [ 64.896441][ T5664] loop1: detected capacity change from 0 to 1024 [ 64.923801][ T5664] EXT4-fs: Ignoring removed nobh option [ 64.929549][ T5664] EXT4-fs: Ignoring removed bh option [ 64.964260][ T5664] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.201118][ T5679] mmap: syz.0.834 (5679) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 65.335111][ T5685] SELinux: failed to load policy [ 65.548690][ T5662] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.835: Allocating blocks 497-513 which overlap fs metadata [ 65.671067][ T5661] EXT4-fs (loop1): pa ffff888106e4d230: logic 484, phys. 241, len 17 [ 65.679487][ T5661] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 65.716797][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.188717][ T5751] netlink: 12 bytes leftover after parsing attributes in process `syz.1.873'. [ 66.704819][ T5808] 9pnet: p9_errstr2errno: server reported unknown error 18446744 [ 66.941849][ T29] kauditd_printk_skb: 196 callbacks suppressed [ 66.941869][ T29] audit: type=1400 audit(1749460762.418:1257): avc: denied { bind } for pid=5823 comm="syz.0.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 66.969111][ T29] audit: type=1400 audit(1749460762.438:1258): avc: denied { listen } for pid=5823 comm="syz.0.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 66.989000][ T29] audit: type=1400 audit(1749460762.438:1259): avc: denied { write } for pid=5823 comm="syz.0.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 67.008676][ T29] audit: type=1400 audit(1749460762.438:1260): avc: denied { accept } for pid=5823 comm="syz.0.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 67.028533][ T29] audit: type=1400 audit(1749460762.438:1261): avc: denied { read } for pid=5823 comm="syz.0.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 67.063503][ C1] vcan0: j1939_tp_rxtimer: 0xffff88810440c400: rx timeout, send abort [ 67.149781][ T29] audit: type=1400 audit(1749460762.618:1262): avc: denied { getopt } for pid=5833 comm="syz.5.911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 67.190925][ T29] audit: type=1400 audit(1749460762.638:1263): avc: denied { write } for pid=5833 comm="syz.5.911" lport=40909 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 67.215292][ T29] audit: type=1400 audit(1749460762.648:1264): avc: denied { setopt } for pid=5833 comm="syz.5.911" lport=40909 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 67.244034][ T5836] loop5: detected capacity change from 0 to 128 [ 67.254656][ T5836] EXT4-fs: Ignoring removed nobh option [ 67.267253][ T5836] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 67.293978][ T5836] ext4 filesystem being mounted at /54/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 67.309447][ T29] audit: type=1400 audit(1749460762.778:1265): avc: denied { create } for pid=5835 comm="syz.5.912" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 67.344717][ T5178] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 67.550583][ T29] audit: type=1400 audit(1749460763.018:1266): avc: denied { write } for pid=5853 comm="syz.0.920" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 67.563537][ C1] vcan0: j1939_tp_rxtimer: 0xffff88810440d000: rx timeout, send abort [ 67.582556][ C1] vcan0: j1939_tp_rxtimer: 0xffff88810440c400: abort rx timeout. Force session deactivation [ 67.606681][ T5854] vhci_hcd: invalid port number 96 [ 67.612450][ T5854] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 67.634679][ T5859] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 67.644636][ T5859] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 67.677539][ T5859] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 67.704325][ T5859] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 67.749991][ T5859] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 67.764438][ T5859] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 68.059284][ T5890] ipvlan2: entered promiscuous mode [ 68.061937][ T5892] 9pnet: p9_errstr2errno: server reported unknown error 18446744 [ 68.064887][ T5890] ipvlan2: entered allmulticast mode [ 68.078284][ T5890] bridge0: entered allmulticast mode [ 68.083637][ C1] vcan0: j1939_tp_rxtimer: 0xffff88810440d000: abort rx timeout. Force session deactivation [ 68.097524][ T5890] batman_adv: batadv0: Adding interface: ipvlan2 [ 68.104031][ T5890] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.129946][ T5890] batman_adv: batadv0: Interface activated: ipvlan2 [ 68.164868][ T5898] netlink: 1 bytes leftover after parsing attributes in process `syz.3.937'. [ 68.788776][ T5919] loop4: detected capacity change from 0 to 1024 [ 68.821616][ T5919] EXT4-fs: Ignoring removed nobh option [ 68.827410][ T5919] EXT4-fs: Ignoring removed bh option [ 68.891929][ T5919] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.921392][ T5923] netlink: 24 bytes leftover after parsing attributes in process `syz.0.949'. [ 69.406250][ T5918] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.947: Allocating blocks 497-513 which overlap fs metadata [ 69.515743][ T5917] EXT4-fs (loop4): pa ffff888106e4d230: logic 624, phys. 465, len 3 [ 69.523934][ T5917] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 69.571465][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.636655][ T5947] netlink: 24 bytes leftover after parsing attributes in process `syz.5.957'. [ 69.751343][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 69.768534][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 69.778604][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 69.795751][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 69.811123][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 69.821188][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 69.830952][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 69.844253][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 69.851570][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 69.858326][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 69.915794][ T5965] loop3: detected capacity change from 0 to 128 [ 69.918105][ T5944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.956'. [ 69.926956][ T5965] EXT4-fs: Ignoring removed nobh option [ 69.945703][ T5965] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 69.979925][ T5965] ext4 filesystem being mounted at /193/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 70.122902][ T3316] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 70.216558][ T5993] -1: renamed from syzkaller0 [ 70.229319][ T5986] SELinux: ebitmap: truncated map [ 70.246741][ T5986] SELinux: failed to load policy [ 70.307672][ T6001] netlink: 'syz.5.980': attribute type 5 has an invalid length. [ 70.322796][ T6001] : renamed from bond0 (while UP) [ 70.388908][ T6007] vlan2: entered allmulticast mode [ 70.556194][ T6023] syzkaller1: entered promiscuous mode [ 70.562051][ T6023] syzkaller1: entered allmulticast mode [ 70.707676][ T6011] netlink: 'syz.3.987': attribute type 10 has an invalid length. [ 70.717470][ T6011] hsr_slave_0: left promiscuous mode [ 70.724488][ T6011] hsr_slave_1: left promiscuous mode [ 70.778484][ T6049] netlink: 'syz.0.1002': attribute type 1 has an invalid length. [ 70.786438][ T6049] netlink: 'syz.0.1002': attribute type 4 has an invalid length. [ 70.802457][ T6049] netlink: 'syz.0.1002': attribute type 1 has an invalid length. [ 70.810289][ T6049] netlink: 'syz.0.1002': attribute type 4 has an invalid length. [ 70.876443][ T6059] loop1: detected capacity change from 0 to 1024 [ 70.885421][ T6059] EXT4-fs: Ignoring removed nobh option [ 70.891199][ T6059] EXT4-fs: Ignoring removed bh option [ 70.903675][ T6059] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.912602][ T6057] syzkaller1: entered promiscuous mode [ 70.922039][ T6057] syzkaller1: entered allmulticast mode [ 71.015956][ C0] vcan0: j1939_tp_rxtimer: 0xffff888118f75400: rx timeout, send abort [ 71.515970][ C0] vcan0: j1939_tp_rxtimer: 0xffff888118f75200: rx timeout, send abort [ 71.524630][ C0] vcan0: j1939_tp_rxtimer: 0xffff888118f75400: abort rx timeout. Force session deactivation [ 71.609031][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.973964][ T6088] loop4: detected capacity change from 0 to 128 [ 72.024624][ C0] vcan0: j1939_tp_rxtimer: 0xffff888118f75200: abort rx timeout. Force session deactivation [ 72.117366][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 72.117382][ T29] audit: type=1400 audit(1749460767.588:1316): avc: denied { bind } for pid=6102 comm="syz.0.1023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 72.145193][ T6104] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.183936][ T29] audit: type=1400 audit(1749460767.598:1317): avc: denied { setopt } for pid=6102 comm="syz.0.1023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 72.217134][ T29] audit: type=1400 audit(1749460767.688:1318): avc: denied { relabelfrom } for pid=6100 comm="syz.1.1022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 72.237502][ T29] audit: type=1400 audit(1749460767.688:1319): avc: denied { relabelto } for pid=6100 comm="syz.1.1022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 72.275805][ T6104] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.313158][ T6109] loop5: detected capacity change from 0 to 256 [ 72.330407][ T6109] FAT-fs (loop5): bogus number of FAT sectors [ 72.336653][ T6109] FAT-fs (loop5): Can't find a valid FAT filesystem [ 72.363200][ T6104] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.393890][ T6113] bond1: (slave dummy0): Releasing active interface [ 72.449458][ T6115] loop4: detected capacity change from 0 to 8192 [ 72.459738][ T6113] batman_adv: batadv0: Adding interface: dummy0 [ 72.466151][ T6113] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.491716][ T6113] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 72.527659][ T6104] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.553681][ T6120] loop5: detected capacity change from 0 to 128 [ 72.587483][ T6122] loop4: detected capacity change from 0 to 512 [ 72.591896][ T6104] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.618329][ T6122] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 72.628425][ T6122] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 72.643290][ T6128] loop5: detected capacity change from 0 to 512 [ 72.647651][ T6104] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.661739][ T6128] EXT4-fs: Ignoring removed bh option [ 72.675029][ T6122] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 72.684316][ T6128] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 72.693548][ T6128] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 72.702052][ T6125] loop3: detected capacity change from 0 to 8192 [ 72.714621][ T6104] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.727125][ T6104] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.750956][ T6122] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 72.783690][ T6122] System zones: 0-2, 18-18, 34-35 [ 72.783868][ T6128] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 72.799093][ T6122] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.821135][ T6122] EXT4-fs warning (device loop4): ext4_lookup:1799: Inconsistent encryption contexts: 12/14 [ 72.832558][ T6122] EXT4-fs warning (device loop4): ext4_lookup:1799: Inconsistent encryption contexts: 12/14 [ 72.853039][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.873781][ T6128] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 72.894941][ T6128] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.946737][ T6128] EXT4-fs error (device loop5): ext4_search_dir:1474: inode #12: block 32: comm syz.5.1035: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=2320, size=2048 fake=0 [ 73.016794][ T6142] macvlan1: entered promiscuous mode [ 73.023520][ T6142] ipvlan0: entered promiscuous mode [ 73.029406][ T6142] ipvlan0: left promiscuous mode [ 73.035242][ T6142] macvlan1: left promiscuous mode [ 73.035702][ T5178] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.084652][ T6149] loop5: detected capacity change from 0 to 128 [ 73.096477][ T6149] EXT4-fs: test_dummy_encryption option not supported [ 73.231709][ T6164] loop1: detected capacity change from 0 to 1024 [ 73.240938][ T6164] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 73.252513][ T6164] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 73.262966][ T6164] JBD2: no valid journal superblock found [ 73.269367][ T6164] EXT4-fs (loop1): Could not load journal inode [ 73.287195][ T6164] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 73.347532][ T6170] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.404508][ T6170] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.517663][ T6170] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.602300][ T6170] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.668248][ T6180] netlink: 'syz.4.1052': attribute type 10 has an invalid length. [ 73.678054][ T6170] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.692066][ T6180] hsr_slave_0: left promiscuous mode [ 73.698127][ T6180] hsr_slave_1: left promiscuous mode [ 73.711591][ T6170] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.724849][ T6170] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.737228][ T6170] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.867949][ T6190] all: renamed from bridge_slave_0 (while UP) [ 74.093886][ T6206] loop1: detected capacity change from 0 to 512 [ 74.108913][ T6208] $Hÿ: renamed from bond0 (while UP) [ 74.116885][ T6208] $Hÿ: entered promiscuous mode [ 74.122096][ T6208] bond_slave_0: entered promiscuous mode [ 74.127908][ T6208] bond_slave_1: entered promiscuous mode [ 74.146238][ T6206] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.180921][ T6206] ext4 filesystem being mounted at /246/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.213226][ T29] audit: type=1326 audit(1749460769.688:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6205 comm="syz.1.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7233ae929 code=0x7ffc0000 [ 74.273823][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.336931][ T29] audit: type=1326 audit(1749460769.708:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6205 comm="syz.1.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7233ae929 code=0x7ffc0000 [ 74.347212][ T6226] __nla_validate_parse: 8 callbacks suppressed [ 74.347273][ T6226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1069'. [ 74.360595][ T29] audit: type=1326 audit(1749460769.708:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6205 comm="syz.1.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7233ae929 code=0x7ffc0000 [ 74.360632][ T29] audit: type=1326 audit(1749460769.708:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6205 comm="syz.1.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7233ae929 code=0x7ffc0000 [ 74.423439][ T29] audit: type=1326 audit(1749460769.718:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6205 comm="syz.1.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7233ae929 code=0x7ffc0000 [ 74.446900][ T29] audit: type=1326 audit(1749460769.718:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6205 comm="syz.1.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7233ae929 code=0x7ffc0000 [ 74.541159][ T6224] netlink: 'syz.5.1072': attribute type 10 has an invalid length. [ 74.553769][ T6224] hsr_slave_0: left promiscuous mode [ 74.559814][ T6224] hsr_slave_1: left promiscuous mode [ 74.735247][ T6238] loop4: detected capacity change from 0 to 1024 [ 74.746283][ T6238] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 74.757421][ T6238] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 74.773037][ T6238] JBD2: no valid journal superblock found [ 74.779010][ T6238] EXT4-fs (loop4): Could not load journal inode [ 74.811961][ T6238] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 75.050378][ T6251] loop5: detected capacity change from 0 to 512 [ 75.094021][ T6251] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.120900][ T6251] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.185114][ T5178] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.490585][ T6276] bridge0: port 3() entered blocking state [ 75.496907][ T6276] bridge0: port 3() entered disabled state [ 75.575206][ T6276] : entered allmulticast mode [ 75.580230][ T6276] bond_slave_0: entered allmulticast mode [ 75.586114][ T6276] bond_slave_1: entered allmulticast mode [ 75.642990][ T6276] : entered promiscuous mode [ 75.648028][ T6276] bond_slave_0: entered promiscuous mode [ 75.654029][ T6276] bond_slave_1: entered promiscuous mode [ 75.667544][ T6281] loop3: detected capacity change from 0 to 512 [ 75.698362][ T6284] : left allmulticast mode [ 75.703360][ T6284] bond_slave_0: left allmulticast mode [ 75.709121][ T6284] bond_slave_1: left allmulticast mode [ 75.714842][ T6284] : left promiscuous mode [ 75.719362][ T6284] bond_slave_0: left promiscuous mode [ 75.725181][ T6284] bond_slave_1: left promiscuous mode [ 75.730940][ T6284] bridge0: port 3() entered disabled state [ 75.808476][ T6281] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.833136][ T6281] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.914913][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.022972][ T6297] -1: renamed from syzkaller0 [ 76.138538][ T6305] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 76.486813][ T6316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1121'. [ 76.938520][ T6320] loop4: detected capacity change from 0 to 512 [ 76.954252][ T6320] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.969400][ T6326] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1111'. [ 76.974927][ T6320] ext4 filesystem being mounted at /218/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.032840][ T6332] loop3: detected capacity change from 0 to 128 [ 77.112112][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.152282][ T6344] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1125'. [ 77.176058][ T6344] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1125'. [ 77.214186][ T6353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1128'. [ 77.223478][ T6353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1128'. [ 77.247289][ T6353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1128'. [ 77.264941][ T6353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1128'. [ 77.282987][ T6359] loop1: detected capacity change from 0 to 164 [ 77.303757][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 77.303776][ T29] audit: type=1400 audit(1749460772.778:1442): avc: denied { mount } for pid=6361 comm="syz.4.1132" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 77.341382][ T6353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1128'. [ 77.400203][ T29] audit: type=1400 audit(1749460772.838:1443): avc: denied { mount } for pid=6358 comm="syz.1.1130" name="/" dev="loop1" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 77.423193][ T29] audit: type=1400 audit(1749460772.838:1444): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 77.455775][ T6359] syz.1.1130: attempt to access beyond end of device [ 77.455775][ T6359] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 77.470020][ T6359] syz.1.1130: attempt to access beyond end of device [ 77.470020][ T6359] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 77.533898][ T29] audit: type=1400 audit(1749460773.008:1445): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 77.589314][ T6377] $Hÿ: renamed from bond0 (while UP) [ 77.597042][ T6377] $Hÿ: entered promiscuous mode [ 77.602274][ T6377] bond_slave_0: entered promiscuous mode [ 77.608148][ T6377] bond_slave_1: entered promiscuous mode [ 77.709217][ T29] audit: type=1400 audit(1749460773.168:1446): avc: denied { create } for pid=6382 comm="syz.5.1138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 77.743083][ T6387] loop1: detected capacity change from 0 to 512 [ 77.784773][ T6387] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 77.831352][ T6387] EXT4-fs (loop1): 1 truncate cleaned up [ 77.838439][ T6387] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.933856][ T29] audit: type=1400 audit(1749460773.408:1447): avc: denied { write } for pid=6405 comm="syz.5.1148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 77.962977][ T29] audit: type=1400 audit(1749460773.408:1448): avc: denied { nlmsg_write } for pid=6405 comm="syz.5.1148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 78.025052][ T29] audit: type=1326 audit(1749460773.498:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6410 comm="syz.3.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436ebfe929 code=0x7ffc0000 [ 78.048930][ T29] audit: type=1326 audit(1749460773.498:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6410 comm="syz.3.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436ebfe929 code=0x7ffc0000 [ 78.073364][ T29] audit: type=1326 audit(1749460773.498:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6410 comm="syz.3.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f436ebfe929 code=0x7ffc0000 [ 78.117864][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.182863][ T6411] loop3: detected capacity change from 0 to 2048 [ 78.226351][ T6411] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.274216][ T6411] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.1149: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 78.324023][ T6411] EXT4-fs (loop3): Remounting filesystem read-only [ 78.413839][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.546309][ T6430] $Hÿ: renamed from bond0 (while UP) [ 78.575454][ T6430] $Hÿ: entered promiscuous mode [ 78.580553][ T6430] bond_slave_0: entered promiscuous mode [ 78.586448][ T6430] bond_slave_1: entered promiscuous mode [ 78.792931][ T6444] loop3: detected capacity change from 0 to 1024 [ 78.801430][ T6444] EXT4-fs: Ignoring removed nobh option [ 78.816167][ T6444] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.898225][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.927284][ T6459] $Hÿ: renamed from bond0 (while UP) [ 78.938084][ T6459] $Hÿ: entered promiscuous mode [ 78.943275][ T6459] bond_slave_0: entered promiscuous mode [ 78.949161][ T6459] bond_slave_1: entered promiscuous mode [ 78.973674][ T6460] sch_tbf: burst 3092 is lower than device lo mtu (65550) ! [ 79.027539][ T6462] infiniband syz!: set active [ 79.032755][ T6462] infiniband syz!: added team_slave_0 [ 79.058111][ T6470] ipvlan2: entered promiscuous mode [ 79.066345][ T6462] RDS/IB: syz!: added [ 79.073101][ T6470] bridge0: port 3(ipvlan2) entered blocking state [ 79.079784][ T6470] bridge0: port 3(ipvlan2) entered disabled state [ 79.112218][ T6462] smc: adding ib device syz! with port count 1 [ 79.126225][ T6462] smc: ib device syz! port 1 has pnetid [ 79.139708][ T6470] ipvlan2: entered allmulticast mode [ 79.145263][ T6470] bridge0: entered allmulticast mode [ 79.164499][ T6470] ipvlan2: left allmulticast mode [ 79.169885][ T6470] bridge0: left allmulticast mode [ 79.288202][ T6481] loop4: detected capacity change from 0 to 1024 [ 79.295291][ T6481] EXT4-fs: Ignoring removed nobh option [ 79.320866][ T6481] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.383112][ T6478] __nla_validate_parse: 6 callbacks suppressed [ 79.383145][ T6478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1176'. [ 79.411021][ T6478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1176'. [ 79.411176][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.519377][ T6499] $Hÿ: renamed from  [ 79.527451][ T6499] $Hÿ: entered promiscuous mode [ 79.532801][ T6499] bond_slave_0: entered promiscuous mode [ 79.538559][ T6499] bond_slave_1: entered promiscuous mode [ 79.607312][ T6503] tipc: Started in network mode [ 79.612305][ T6503] tipc: Node identity 68a, cluster identity 4711 [ 79.618743][ T6503] tipc: Node number set to 1674 [ 79.625225][ T6505] sctp: [Deprecated]: syz.1.1184 (pid 6505) Use of struct sctp_assoc_value in delayed_ack socket option. [ 79.625225][ T6505] Use struct sctp_sack_info instead [ 79.640925][ T6503] tipc: Cannot configure node identity twice [ 79.741296][ T6514] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 79.787278][ T6517] loop5: detected capacity change from 0 to 1024 [ 79.795226][ T6517] EXT4-fs: Ignoring removed nobh option [ 79.826451][ T6517] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.878742][ T6523] pim6reg1: entered promiscuous mode [ 79.884264][ T6523] pim6reg1: entered allmulticast mode [ 79.892981][ T5178] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.005278][ T6537] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1197'. [ 80.014682][ T6537] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1197'. [ 80.035456][ T6536] pim6reg1: entered promiscuous mode [ 80.040992][ T6536] pim6reg1: entered allmulticast mode [ 80.072026][ T6537] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1197'. [ 80.105752][ T6543] sch_tbf: burst 3092 is lower than device lo mtu (65550) ! [ 80.113694][ T6537] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1197'. [ 80.176140][ T6545] syzkaller0: entered promiscuous mode [ 80.181807][ T6545] syzkaller0: entered allmulticast mode [ 80.187584][ T6537] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1197'. [ 80.196839][ T6537] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1197'. [ 80.534454][ T6574] loop5: detected capacity change from 0 to 8192 [ 80.572041][ T6574] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 80.995104][ T6589] lo: entered allmulticast mode [ 81.003931][ T6587] lo: left allmulticast mode [ 81.034921][ T6595] loop5: detected capacity change from 0 to 1024 [ 81.047903][ T6595] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.097852][ T6601] ipvlan2: entered promiscuous mode [ 81.105918][ T6601] bridge0: port 3(ipvlan2) entered blocking state [ 81.112645][ T6601] bridge0: port 3(ipvlan2) entered disabled state [ 81.119831][ T6601] ipvlan2: entered allmulticast mode [ 81.125363][ T6601] bridge0: entered allmulticast mode [ 81.131395][ T6601] ipvlan2: left allmulticast mode [ 81.136497][ T6601] bridge0: left allmulticast mode [ 81.327591][ T6619] netlink: 558 bytes leftover after parsing attributes in process `syz.1.1230'. [ 81.442559][ T6631] SELinux: failed to load policy [ 81.557622][ T6637] loop3: detected capacity change from 0 to 512 [ 81.569488][ T6629] loop1: detected capacity change from 0 to 8192 [ 81.587275][ T6629] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 81.654841][ T6637] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 81.690288][ T6641] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1240'. [ 81.706393][ T6595] ================================================================== [ 81.714539][ T6595] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 81.721685][ T6595] [ 81.724200][ T6595] write to 0xffff888106f669a4 of 4 bytes by task 6604 on cpu 0: [ 81.731965][ T6595] xas_set_mark+0x12b/0x140 [ 81.736499][ T6595] __folio_start_writeback+0x1dd/0x440 [ 81.741983][ T6595] ext4_bio_write_folio+0x5ad/0x9f0 [ 81.747197][ T6595] mpage_submit_folio+0xe4/0x170 [ 81.752331][ T6595] mpage_process_page_bufs+0x39b/0x4a0 [ 81.757811][ T6595] mpage_prepare_extent_to_map+0x741/0xaa0 [ 81.763649][ T6595] ext4_do_writepages+0xa1a/0x21c0 [ 81.768860][ T6595] ext4_writepages+0x176/0x300 [ 81.773646][ T6595] do_writepages+0x1c6/0x310 [ 81.778251][ T6595] file_write_and_wait_range+0x156/0x2c0 [ 81.783913][ T6595] generic_buffers_fsync_noflush+0x45/0x120 [ 81.789833][ T6595] ext4_sync_file+0x1ab/0x690 [ 81.794531][ T6595] vfs_fsync_range+0x10d/0x130 [ 81.799333][ T6595] ext4_buffered_write_iter+0x34f/0x3c0 [ 81.804899][ T6595] ext4_file_write_iter+0xdbf/0xf00 [ 81.810109][ T6595] iter_file_splice_write+0x5f2/0x970 [ 81.815506][ T6595] direct_splice_actor+0x156/0x2a0 [ 81.820663][ T6595] splice_direct_to_actor+0x312/0x680 [ 81.826058][ T6595] do_splice_direct+0xda/0x150 [ 81.830846][ T6595] do_sendfile+0x380/0x650 [ 81.835369][ T6595] __x64_sys_sendfile64+0x105/0x150 [ 81.840666][ T6595] x64_sys_call+0xb39/0x2fb0 [ 81.845318][ T6595] do_syscall_64+0xd2/0x200 [ 81.849843][ T6595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.855855][ T6595] [ 81.858272][ T6595] read to 0xffff888106f669a4 of 4 bytes by task 6595 on cpu 1: [ 81.865919][ T6595] xas_find_marked+0x5dc/0x620 [ 81.870698][ T6595] find_get_entry+0x5d/0x380 [ 81.875320][ T6595] filemap_get_folios_tag+0x92/0x210 [ 81.880629][ T6595] mpage_prepare_extent_to_map+0x320/0xaa0 [ 81.886539][ T6595] ext4_do_writepages+0xa1a/0x21c0 [ 81.891669][ T6595] ext4_writepages+0x176/0x300 [ 81.896541][ T6595] do_writepages+0x1c6/0x310 [ 81.901145][ T6595] file_write_and_wait_range+0x156/0x2c0 [ 81.906802][ T6595] generic_buffers_fsync_noflush+0x45/0x120 [ 81.912719][ T6595] ext4_sync_file+0x1ab/0x690 [ 81.917419][ T6595] vfs_fsync_range+0x10d/0x130 [ 81.922198][ T6595] ext4_buffered_write_iter+0x34f/0x3c0 [ 81.927784][ T6595] ext4_file_write_iter+0xdbf/0xf00 [ 81.933035][ T6595] iter_file_splice_write+0x5f2/0x970 [ 81.938448][ T6595] direct_splice_actor+0x156/0x2a0 [ 81.943580][ T6595] splice_direct_to_actor+0x312/0x680 [ 81.948982][ T6595] do_splice_direct+0xda/0x150 [ 81.953768][ T6595] do_sendfile+0x380/0x650 [ 81.958213][ T6595] __x64_sys_sendfile64+0x105/0x150 [ 81.963446][ T6595] x64_sys_call+0xb39/0x2fb0 [ 81.968068][ T6595] do_syscall_64+0xd2/0x200 [ 81.972596][ T6595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.978521][ T6595] [ 81.980876][ T6595] value changed: 0x0a000021 -> 0x04000021 [ 81.986616][ T6595] [ 81.988957][ T6595] Reported by Kernel Concurrency Sanitizer on: [ 81.995118][ T6595] CPU: 1 UID: 0 PID: 6595 Comm: syz.5.1220 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 82.005891][ T6595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 82.015962][ T6595] ================================================================== [ 82.050239][ T6643] netlink: 'syz.0.1242': attribute type 1 has an invalid length. [ 82.079725][ T6637] EXT4-fs (loop3): failed to open journal device unknown-block(11,131) -6 [ 82.079866][ T6595] syz.5.1220 (6595) used greatest stack depth: 9008 bytes left [ 82.123653][ T5178] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.