last executing test programs: 1.137211448s ago: executing program 0 (id=309): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc0900000000000045090100002000009500000000000000bf9800000000000056090000000000008500000785000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.091833919s ago: executing program 0 (id=313): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = dup(r0) bind$inet(r1, &(0x7f00000009c0)={0x2, 0x4e20, @local}, 0x10) 1.048725469s ago: executing program 0 (id=316): r0 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb0, 0x24, 0xf0b, 0x0, 0xfffffffe, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xbb80}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}]}]}]}}]}, 0xb0}}, 0x0) 1.012378121s ago: executing program 0 (id=318): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) 891.312762ms ago: executing program 1 (id=326): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x3}]}, 0x44}}, 0x0) 822.132984ms ago: executing program 1 (id=329): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x34, r1, 0x1, 0x70bd2d, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x5}]}, 0x34}}, 0x4044890) 784.434644ms ago: executing program 1 (id=330): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=@getlink={0x24, 0x12, 0x18efde40b3708357, 0x0, 0x0, {}, [@IFLA_PHYS_SWITCH_ID={0x4}]}, 0x24}}, 0x0) 713.396436ms ago: executing program 1 (id=333): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{}, 0x0, 0x0}, 0x20) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r0, &(0x7f0000000540)}, 0x20) 675.811107ms ago: executing program 1 (id=334): syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000"], 0x0) r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000000)) 604.127378ms ago: executing program 2 (id=338): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10e, &(0x7f0000000340)={[{@init_itable_val={'init_itable', 0x3d, 0x957}}, {@noinit_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x52}}, {@stripe={'stripe', 0x3d, 0x8}}, {@orlov}, {@grpid}]}, 0x4, 0x46b, &(0x7f00000009c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) lseek(r0, 0x5, 0x4) 589.730279ms ago: executing program 4 (id=339): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0xfffffffc}, 0x1c) 549.067399ms ago: executing program 4 (id=340): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2000844, &(0x7f0000000100)={[{@fat=@time_offset={'time_offset', 0x3d, 0x4f7}}, {}, {@nodots}, {@dots}, {@nodots}, {@nodots}, {}, {@dots}, {@fat=@quiet}, {@fat=@fmask={'fmask', 0x3d, 0x1fe}}, {@fat=@nfs_stale_rw}, {@fat=@usefree}, {@dots}, {@fat=@check_strict}, {@fat=@allow_utime={'allow_utime', 0x3d, 0xdac}}, {@fat=@nocase}]}, 0x21, 0x23d, &(0x7f0000000400)="$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") r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000000000000000030005000000000002000000ac1414aa000000000000000001001500000000000100140000000000010016"], 0x68}, 0x1, 0x7}, 0x0) 421.057582ms ago: executing program 2 (id=343): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280140003"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 400.184882ms ago: executing program 4 (id=344): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x24, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5e20}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x24}}, 0x0) 370.283703ms ago: executing program 4 (id=346): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4048000) r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0204000902000000e4a17c45c8d260c9", 0x10}], 0x7}, 0x0) 336.485603ms ago: executing program 4 (id=348): setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) clock_settime(0x100000000000000, &(0x7f0000000000)={0xfe1ecc7f}) 327.217374ms ago: executing program 2 (id=349): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r0, 0x0, 0x4, 0x0) waitid(0x1, r0, 0x0, 0x8, 0x0) 306.614534ms ago: executing program 4 (id=350): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='sessionid\x00') exit(0xfffffffffffffffd) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/239, 0xef}], 0x1, 0x2, 0x2) 242.033225ms ago: executing program 3 (id=353): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001"], 0x18}, 0x0) 223.965045ms ago: executing program 3 (id=354): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000380)='.\x00', 0x10000840) inotify_add_watch(r0, &(0x7f0000000400)='.\x00', 0xa4000021) 206.252066ms ago: executing program 3 (id=355): r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000040000020f00000005002e000100000005002f000000000008000300", @ANYRES32=r1], 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 190.179476ms ago: executing program 3 (id=356): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000000c0)=0x3, 0x2) 172.718937ms ago: executing program 3 (id=357): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 146.481727ms ago: executing program 0 (id=358): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000009180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 113.416838ms ago: executing program 2 (id=359): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007665746800000000040002800800030000bf1c000a0001"], 0x48}}, 0x0) 103.810758ms ago: executing program 0 (id=360): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x1000, 0xa}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {}, {0x0, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0xfffffffd, 0x0, 0x0, 0x70bd28}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x18}}]}, 0x1a0}}, 0x800) 85.920218ms ago: executing program 2 (id=361): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0xc0, &(0x7f0000000100)=ANY=[@ANYBLOB="646f74732c6e66732c71756965742c6e6f646f74732c636865636b3d7374726963742c6e66733d7374616c655f72772c646f74732c6572726f72733d636f6e74696e7565008000000000000074732c00"], 0x1, 0x23d, &(0x7f0000000a40)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x20, 0x103) 18.66549ms ago: executing program 1 (id=362): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1d}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.22575ms ago: executing program 2 (id=363): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) getpgrp(0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=364): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x880, &(0x7f00000001c0)=ANY=[@ANYBLOB='shortname=lower,iocharset=iso8859-1,fmask=00000000000000000000066,uni_xlate=1,uni_xlate=0,fmask=00000000000000000000003,uid=', @ANYRESHEX=0x0, @ANYBLOB=',uni_xlate=0,utf8=1,check=strict,nonumtail=0,rodir,errors=continue,shortname=lower,umaQk=00000000000000000000007,rodir,sys_immutable,\x00'], 0x4, 0x2dc, &(0x7f0000000bc0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) creat(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x36) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.73' (ED25519) to the list of known hosts. [ 33.180112][ T29] audit: type=1400 audit(1759240494.753:62): avc: denied { mounton } for pid=3289 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.181396][ T3289] cgroup: Unknown subsys name 'net' [ 33.203144][ T29] audit: type=1400 audit(1759240494.753:63): avc: denied { mount } for pid=3289 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.230768][ T29] audit: type=1400 audit(1759240494.783:64): avc: denied { unmount } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.351934][ T3289] cgroup: Unknown subsys name 'cpuset' [ 33.358293][ T3289] cgroup: Unknown subsys name 'rlimit' [ 33.489736][ T29] audit: type=1400 audit(1759240495.063:65): avc: denied { setattr } for pid=3289 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.513026][ T29] audit: type=1400 audit(1759240495.063:66): avc: denied { create } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.533542][ T29] audit: type=1400 audit(1759240495.063:67): avc: denied { write } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.554539][ T29] audit: type=1400 audit(1759240495.073:68): avc: denied { read } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.563894][ T3293] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 33.574932][ T29] audit: type=1400 audit(1759240495.083:69): avc: denied { mounton } for pid=3289 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.608617][ T29] audit: type=1400 audit(1759240495.083:70): avc: denied { mount } for pid=3289 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 33.632122][ T29] audit: type=1400 audit(1759240495.163:71): avc: denied { relabelto } for pid=3293 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 33.660256][ T3289] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.453572][ T3300] chnl_net:caif_netlink_parms(): no params data found [ 35.485803][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 35.530628][ T3299] chnl_net:caif_netlink_parms(): no params data found [ 35.549291][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 35.590742][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.597856][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.605253][ T3308] bridge_slave_0: entered allmulticast mode [ 35.611749][ T3308] bridge_slave_0: entered promiscuous mode [ 35.620940][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.628064][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.635684][ T3308] bridge_slave_1: entered allmulticast mode [ 35.642147][ T3308] bridge_slave_1: entered promiscuous mode [ 35.690705][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.697995][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.705191][ T3300] bridge_slave_0: entered allmulticast mode [ 35.711830][ T3300] bridge_slave_0: entered promiscuous mode [ 35.720383][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.727600][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.734766][ T3300] bridge_slave_1: entered allmulticast mode [ 35.741029][ T3300] bridge_slave_1: entered promiscuous mode [ 35.755383][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.764694][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 35.778489][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.785775][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.792954][ T3299] bridge_slave_0: entered allmulticast mode [ 35.799535][ T3299] bridge_slave_0: entered promiscuous mode [ 35.812770][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.830167][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.837358][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.844690][ T3299] bridge_slave_1: entered allmulticast mode [ 35.851220][ T3299] bridge_slave_1: entered promiscuous mode [ 35.876689][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.890837][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.897966][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.905176][ T3311] bridge_slave_0: entered allmulticast mode [ 35.911662][ T3311] bridge_slave_0: entered promiscuous mode [ 35.926665][ T3308] team0: Port device team_slave_0 added [ 35.933643][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.943614][ T3308] team0: Port device team_slave_1 added [ 35.954423][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.961592][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.968849][ T3311] bridge_slave_1: entered allmulticast mode [ 35.975511][ T3311] bridge_slave_1: entered promiscuous mode [ 35.994764][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.017123][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.024117][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.050257][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.067324][ T3300] team0: Port device team_slave_0 added [ 36.074191][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.098574][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.105579][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.131622][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.143242][ T3300] team0: Port device team_slave_1 added [ 36.158170][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.173113][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.180193][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.187525][ T3306] bridge_slave_0: entered allmulticast mode [ 36.194103][ T3306] bridge_slave_0: entered promiscuous mode [ 36.200730][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.207843][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.215063][ T3306] bridge_slave_1: entered allmulticast mode [ 36.221661][ T3306] bridge_slave_1: entered promiscuous mode [ 36.235207][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.250532][ T3299] team0: Port device team_slave_0 added [ 36.277538][ T3299] team0: Port device team_slave_1 added [ 36.284356][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.294109][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.301136][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.327149][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.343516][ T3311] team0: Port device team_slave_0 added [ 36.355867][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.370222][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.377333][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.403328][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.419767][ T3311] team0: Port device team_slave_1 added [ 36.431170][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.438169][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.464350][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.480206][ T3308] hsr_slave_0: entered promiscuous mode [ 36.486305][ T3308] hsr_slave_1: entered promiscuous mode [ 36.509109][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.516196][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.542284][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.569747][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.576797][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.602776][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.614241][ T3306] team0: Port device team_slave_0 added [ 36.620142][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.627137][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.653078][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.665684][ T3306] team0: Port device team_slave_1 added [ 36.723579][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.730580][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.756605][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.769262][ T3300] hsr_slave_0: entered promiscuous mode [ 36.775530][ T3300] hsr_slave_1: entered promiscuous mode [ 36.781595][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 36.787337][ T3300] Cannot create hsr debugfs directory [ 36.795105][ T3299] hsr_slave_0: entered promiscuous mode [ 36.801068][ T3299] hsr_slave_1: entered promiscuous mode [ 36.807096][ T3299] debugfs: 'hsr0' already exists in 'hsr' [ 36.812867][ T3299] Cannot create hsr debugfs directory [ 36.828362][ T3311] hsr_slave_0: entered promiscuous mode [ 36.834435][ T3311] hsr_slave_1: entered promiscuous mode [ 36.840177][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 36.845944][ T3311] Cannot create hsr debugfs directory [ 36.852095][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.859211][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.885295][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.979165][ T3306] hsr_slave_0: entered promiscuous mode [ 36.985245][ T3306] hsr_slave_1: entered promiscuous mode [ 36.991201][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 36.996985][ T3306] Cannot create hsr debugfs directory [ 37.133116][ T3308] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.142925][ T3308] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.155402][ T3308] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.166488][ T3308] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.188789][ T3311] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.204354][ T3311] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.214184][ T3311] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.225800][ T3311] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.250691][ T3300] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.259480][ T3300] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.268880][ T3300] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.280867][ T3300] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.334761][ T3299] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.349439][ T3299] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.370479][ T3299] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.385965][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.394435][ T3299] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.406591][ T3306] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.416032][ T3306] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.435347][ T3306] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.448742][ T3306] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.463997][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.480290][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.488329][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.504681][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.511846][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.520709][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.527877][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.555873][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.564761][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.605955][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.613094][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.623459][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.630539][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.639734][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.646804][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.655793][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.662861][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.703926][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.723399][ T3311] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.733852][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.770667][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.790631][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.803490][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.817417][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.824652][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.843740][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.850942][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.860074][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.867237][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.879671][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.898150][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.908262][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.915468][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.935897][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.983406][ T3306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.119759][ T3311] veth0_vlan: entered promiscuous mode [ 38.140613][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.154675][ T3308] veth0_vlan: entered promiscuous mode [ 38.170782][ T3311] veth1_vlan: entered promiscuous mode [ 38.183824][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.196257][ T3308] veth1_vlan: entered promiscuous mode [ 38.253208][ T3300] veth0_vlan: entered promiscuous mode [ 38.261725][ T3300] veth1_vlan: entered promiscuous mode [ 38.268729][ T3311] veth0_macvtap: entered promiscuous mode [ 38.285651][ T3308] veth0_macvtap: entered promiscuous mode [ 38.297204][ T3300] veth0_macvtap: entered promiscuous mode [ 38.304871][ T3311] veth1_macvtap: entered promiscuous mode [ 38.316435][ T3300] veth1_macvtap: entered promiscuous mode [ 38.328562][ T3308] veth1_macvtap: entered promiscuous mode [ 38.336951][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.357365][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.374332][ T3299] veth0_vlan: entered promiscuous mode [ 38.382747][ T3299] veth1_vlan: entered promiscuous mode [ 38.389467][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.402143][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.412733][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.423570][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.439433][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.451558][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.465198][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.474993][ T3306] veth0_vlan: entered promiscuous mode [ 38.484772][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 38.484788][ T29] audit: type=1400 audit(1759240500.063:81): avc: denied { mounton } for pid=3311 comm="syz-executor" path="/root/syzkaller.6g8X1h/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 38.490075][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.496358][ T29] audit: type=1400 audit(1759240500.063:82): avc: denied { mount } for pid=3311 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 38.545871][ T29] audit: type=1400 audit(1759240500.063:83): avc: denied { mounton } for pid=3311 comm="syz-executor" path="/root/syzkaller.6g8X1h/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 38.571145][ T29] audit: type=1400 audit(1759240500.063:84): avc: denied { mount } for pid=3311 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 38.593249][ T29] audit: type=1400 audit(1759240500.063:85): avc: denied { mounton } for pid=3311 comm="syz-executor" path="/root/syzkaller.6g8X1h/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 38.619955][ T29] audit: type=1400 audit(1759240500.063:86): avc: denied { mounton } for pid=3311 comm="syz-executor" path="/root/syzkaller.6g8X1h/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4577 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 38.647423][ T29] audit: type=1400 audit(1759240500.063:87): avc: denied { unmount } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 38.669770][ T29] audit: type=1400 audit(1759240500.243:88): avc: denied { mounton } for pid=3311 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 38.692628][ T29] audit: type=1400 audit(1759240500.243:89): avc: denied { mount } for pid=3311 comm="syz-executor" name="/" dev="gadgetfs" ino=4578 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 38.718681][ T3311] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.726596][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.748724][ T3299] veth0_macvtap: entered promiscuous mode [ 38.764499][ T3306] veth1_vlan: entered promiscuous mode [ 38.766182][ T29] audit: type=1400 audit(1759240500.343:90): avc: denied { read write } for pid=3311 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.808934][ T3299] veth1_macvtap: entered promiscuous mode [ 38.830163][ T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.857553][ T3306] veth0_macvtap: entered promiscuous mode [ 38.863500][ T3472] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2'. [ 38.876752][ T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.887538][ T3306] veth1_macvtap: entered promiscuous mode [ 38.901637][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.917531][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.931622][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.943793][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.953593][ T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.971024][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.979567][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.999861][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.030009][ T291] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.070548][ T291] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.082795][ T3485] loop1: detected capacity change from 0 to 512 [ 39.099170][ T291] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.150508][ T291] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.170941][ T291] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.182370][ T291] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.182442][ T3485] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.10: corrupted in-inode xattr: invalid ea_ino [ 39.192367][ T291] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.214246][ T291] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.227361][ T3500] loop4: detected capacity change from 0 to 512 [ 39.233918][ T291] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.262119][ T3485] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.10: couldn't read orphan inode 15 (err -117) [ 39.283874][ T3500] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.297017][ T3500] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 39.341491][ T3485] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.383381][ T3500] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 39.417847][ T3500] EXT4-fs (loop4): 1 truncate cleaned up [ 39.443058][ T3500] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.474849][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.505518][ T3531] netlink: 'syz.0.28': attribute type 2 has an invalid length. [ 39.535379][ T3531] netlink: 'syz.0.28': attribute type 2 has an invalid length. [ 39.570667][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.632413][ T3545] syz.3.33 (3545) used greatest stack depth: 10344 bytes left [ 39.700897][ T3551] netlink: 24 bytes leftover after parsing attributes in process `syz.2.37'. [ 39.833188][ T3566] netlink: 'syz.2.44': attribute type 32 has an invalid length. [ 39.840938][ T3566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.44'. [ 39.861256][ T3566] (unnamed net_device) (uninitialized): option coupled_control: invalid value (17) [ 39.870257][ T3570] loop0: detected capacity change from 0 to 1024 [ 39.889612][ T3570] EXT4-fs: Ignoring removed nomblk_io_submit option [ 39.923679][ T3576] loop3: detected capacity change from 0 to 128 [ 39.942991][ T3570] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.979135][ T3570] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.46: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 39.996324][ T3576] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 40.007502][ T3570] EXT4-fs (loop0): Remounting filesystem read-only [ 40.024571][ T3576] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 40.024592][ T3576] FAT-fs (loop3): Filesystem has been set read-only [ 40.024627][ T3576] syz.3.48: attempt to access beyond end of device [ 40.024627][ T3576] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 40.062912][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.068535][ T3591] loop3: detected capacity change from 0 to 512 [ 40.116034][ T3591] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.144559][ T3591] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.184170][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.307580][ T3614] netlink: 'syz.3.64': attribute type 7 has an invalid length. [ 40.308742][ T3613] loop1: detected capacity change from 0 to 512 [ 40.315347][ T3614] netlink: 'syz.3.64': attribute type 8 has an invalid length. [ 40.350745][ T3613] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.365580][ T3613] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.406415][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.125304][ T3638] netlink: 808 bytes leftover after parsing attributes in process `syz.2.74'. [ 41.322489][ T3603] kexec: Could not allocate swap buffer [ 41.448027][ T3666] vhci_hcd: default hub control req: 8001 v0000 i0003 l14 [ 41.524873][ T3676] loop4: detected capacity change from 0 to 512 [ 41.550470][ T3604] syz.0.55 (3604) used greatest stack depth: 7512 bytes left [ 41.571384][ T3676] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 41.596404][ T3676] EXT4-fs (loop4): 1 truncate cleaned up [ 41.624806][ T3682] loop1: detected capacity change from 0 to 8192 [ 41.626058][ T3676] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.662237][ T3690] netlink: 'syz.0.97': attribute type 2 has an invalid length. [ 41.669920][ T3690] netlink: 44 bytes leftover after parsing attributes in process `syz.0.97'. [ 41.672132][ T3676] EXT4-fs error (device loop4): ext4_ext_precache:632: inode #15: comm syz.4.91: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 41.702317][ T3682] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 41.724080][ T3682] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 41.740599][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.746961][ T3682] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 41.760426][ T3694] loop3: detected capacity change from 0 to 256 [ 41.767309][ T3682] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 41.777875][ T3682] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 41.787040][ T3682] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 41.796804][ T3682] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 41.816827][ T3682] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 41.825915][ T3682] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 41.906223][ T3707] netlink: 'syz.1.104': attribute type 1 has an invalid length. [ 42.183886][ T3708] mmap: syz.3.105 (3708) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 42.235374][ T3738] netlink: 'syz.1.119': attribute type 6 has an invalid length. [ 42.277972][ T3740] netlink: 64 bytes leftover after parsing attributes in process `syz.4.120'. [ 42.340808][ T3747] loop4: detected capacity change from 0 to 256 [ 42.384339][ T3754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.126'. [ 42.394989][ T3755] loop3: detected capacity change from 0 to 512 [ 42.404453][ T3755] EXT4-fs: Ignoring removed mblk_io_submit option [ 42.418528][ T3757] netlink: 12 bytes leftover after parsing attributes in process `syz.4.128'. [ 42.427511][ T3757] netlink: 60 bytes leftover after parsing attributes in process `syz.4.128'. [ 42.447103][ T3755] EXT4-fs (loop3): orphan cleanup on readonly fs [ 42.453556][ T3755] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 42.475287][ T3755] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.127: attempt to clear invalid blocks 2 len 1 [ 42.488373][ T3763] netlink: 28 bytes leftover after parsing attributes in process `syz.1.130'. [ 42.498929][ T3755] EXT4-fs (loop3): Remounting filesystem read-only [ 42.507234][ T3755] EXT4-fs (loop3): 1 truncate cleaned up [ 42.514139][ T3755] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.548221][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.690075][ T3784] loop1: detected capacity change from 0 to 512 [ 42.712242][ T3784] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 42.744505][ T3784] EXT4-fs (loop1): 1 truncate cleaned up [ 42.760789][ T3784] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.854030][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.934774][ T3817] random: crng reseeded on system resumption [ 43.005727][ T3828] loop1: detected capacity change from 0 to 512 [ 43.038900][ T3828] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.051635][ T3828] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.114389][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.268769][ T3861] loop1: detected capacity change from 0 to 512 [ 43.318235][ T3869] capability: warning: `syz.2.180' uses deprecated v2 capabilities in a way that may be insecure [ 43.456918][ T3885] loop0: detected capacity change from 0 to 764 [ 43.500472][ T29] kauditd_printk_skb: 105 callbacks suppressed [ 43.500491][ T29] audit: type=1400 audit(1759240505.073:196): avc: denied { connect } for pid=3893 comm="syz.4.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 43.526196][ T29] audit: type=1400 audit(1759240505.073:197): avc: denied { name_connect } for pid=3893 comm="syz.4.192" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 43.629416][ T29] audit: type=1400 audit(1759240505.133:198): avc: denied { mount } for pid=3883 comm="syz.0.187" name="/" dev="loop0" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 43.651941][ T29] audit: type=1400 audit(1759240505.203:199): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 43.755985][ T29] audit: type=1400 audit(1759240505.273:200): avc: denied { read write } for pid=3913 comm="syz.0.198" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 43.780423][ T29] audit: type=1400 audit(1759240505.273:201): avc: denied { open } for pid=3913 comm="syz.0.198" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 43.935131][ T29] audit: type=1326 audit(1759240505.513:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3938 comm="syz.1.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078b4eeec9 code=0x7ffc0000 [ 43.958438][ T29] audit: type=1326 audit(1759240505.513:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3938 comm="syz.1.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078b4eeec9 code=0x7ffc0000 [ 43.981938][ T29] audit: type=1326 audit(1759240505.513:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3938 comm="syz.1.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f078b4eeec9 code=0x7ffc0000 [ 44.005330][ T29] audit: type=1326 audit(1759240505.513:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3938 comm="syz.1.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078b4eeec9 code=0x7ffc0000 [ 44.063442][ T3951] loop3: detected capacity change from 0 to 128 [ 44.098087][ T3953] Driver unsupported XDP return value 0 on prog (id 33) dev N/A, expect packet loss! [ 44.115926][ T3951] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 44.124335][ T3951] FAT-fs (loop3): Filesystem has been set read-only [ 44.154511][ T3951] syz.3.219: attempt to access beyond end of device [ 44.154511][ T3951] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 44.176275][ T3959] loop2: detected capacity change from 0 to 164 [ 44.185340][ T3951] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 44.193287][ T3951] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 44.223841][ T3951] syz.3.219: attempt to access beyond end of device [ 44.223841][ T3951] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 44.257035][ T3951] syz.3.219: attempt to access beyond end of device [ 44.257035][ T3951] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 44.281510][ T3951] syz.3.219: attempt to access beyond end of device [ 44.281510][ T3951] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 44.296253][ T3951] syz.3.219: attempt to access beyond end of device [ 44.296253][ T3951] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 44.324669][ T3959] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 44.360831][ T3951] syz.3.219: attempt to access beyond end of device [ 44.360831][ T3951] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 44.375303][ T3951] syz.3.219: attempt to access beyond end of device [ 44.375303][ T3951] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 44.390035][ T3951] syz.3.219: attempt to access beyond end of device [ 44.390035][ T3951] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 44.411249][ T3951] syz.3.219: attempt to access beyond end of device [ 44.411249][ T3951] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 44.482111][ T3973] __nla_validate_parse: 5 callbacks suppressed [ 44.482131][ T3973] netlink: 156 bytes leftover after parsing attributes in process `syz.2.228'. [ 44.537255][ T3973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.228'. [ 44.809806][ T3993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.237'. [ 44.966178][ T4001] netlink: 108 bytes leftover after parsing attributes in process `syz.2.241'. [ 44.975511][ T4001] netlink: 20 bytes leftover after parsing attributes in process `syz.2.241'. [ 45.033611][ T3951] bio_check_eod: 5393 callbacks suppressed [ 45.033633][ T3951] syz.3.219: attempt to access beyond end of device [ 45.033633][ T3951] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 45.066726][ T3951] syz.3.219: attempt to access beyond end of device [ 45.066726][ T3951] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 45.094148][ T3951] syz.3.219: attempt to access beyond end of device [ 45.094148][ T3951] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 45.107714][ T3951] syz.3.219: attempt to access beyond end of device [ 45.107714][ T3951] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 45.185119][ T4017] netlink: 104 bytes leftover after parsing attributes in process `syz.3.245'. [ 45.236363][ T4022] loop0: detected capacity change from 0 to 512 [ 45.249053][ T4023] loop9: detected capacity change from 0 to 7 [ 45.256965][ T4023] Buffer I/O error on dev loop9, logical block 0, async page read [ 45.273890][ T4023] Buffer I/O error on dev loop9, logical block 0, async page read [ 45.281949][ T4023] loop9: unable to read partition table [ 45.289514][ T4023] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯) failed (rc=-5) [ 45.302046][ T3292] Buffer I/O error on dev loop9, logical block 0, async page read [ 45.310110][ T3292] Buffer I/O error on dev loop9, logical block 0, async page read [ 45.327696][ T4022] EXT4-fs (loop0): too many log groups per flexible block group [ 45.355657][ T3292] Buffer I/O error on dev loop9, logical block 0, async page read [ 45.357567][ T4022] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 45.364900][ T3292] Buffer I/O error on dev loop9, logical block 0, async page read [ 45.378560][ T3292] Buffer I/O error on dev loop9, logical block 0, async page read [ 45.390399][ T4030] mmap: syz.4.256 (4030): VmData 29077504 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 45.403776][ T4022] EXT4-fs (loop0): mount failed [ 46.076394][ T4109] netlink: 40 bytes leftover after parsing attributes in process `syz.0.290'. [ 46.298073][ T4129] syz.4.301 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 46.452704][ T4152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.311'. [ 46.574123][ T60] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.600990][ T60] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.609849][ T4174] loop2: detected capacity change from 0 to 128 [ 46.612266][ T60] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.629258][ T60] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.652802][ T4174] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 46.676820][ T4174] ext4 filesystem being mounted at /74/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 46.713540][ T4174] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.322: No space for directory leaf checksum. Please run e2fsck -D. [ 46.729638][ T4174] EXT4-fs error (device loop2): htree_dirblock_to_tree:1051: inode #2: comm syz.2.322: Directory block failed checksum [ 46.800692][ T3311] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.883826][ T4204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.916656][ T4204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.940624][ T4208] loop2: detected capacity change from 0 to 512 [ 46.947695][ T4208] EXT4-fs: Ignoring removed orlov option [ 46.965264][ T4208] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 46.982680][ T4208] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 47.003686][ T4213] loop4: detected capacity change from 0 to 512 [ 47.010254][ T4208] EXT4-fs (loop2): 1 orphan inode deleted [ 47.018068][ T4213] ======================================================= [ 47.018068][ T4213] WARNING: The mand mount option has been deprecated and [ 47.018068][ T4213] and is ignored by this kernel. Remove the mand [ 47.018068][ T4213] option from the mount to silence this warning. [ 47.018068][ T4213] ======================================================= [ 47.066722][ T4208] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.082292][ T4213] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 47.110578][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.367684][ T4253] loop3: detected capacity change from 0 to 128 [ 47.405362][ T4253] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.421591][ T4253] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.463797][ T4263] loop2: detected capacity change from 0 to 512 [ 47.536110][ T3306] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.556124][ T3306] ================================================================== [ 47.564352][ T3306] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 47.571919][ T3306] [ 47.574258][ T3306] read-write to 0xffff888237c25ee8 of 1 bytes by task 4274 on cpu 0: [ 47.582339][ T3306] folio_add_lru+0xa5/0x1f0 [ 47.586876][ T3306] folio_add_lru_vma+0x49/0x70 [ 47.591713][ T3306] handle_mm_fault+0x281f/0x2c20 [ 47.596690][ T3306] do_user_addr_fault+0x636/0x1090 [ 47.601846][ T3306] exc_page_fault+0x62/0xa0 [ 47.606445][ T3306] asm_exc_page_fault+0x26/0x30 [ 47.611398][ T3306] [ 47.613729][ T3306] read to 0xffff888237c25ee8 of 1 bytes by task 3306 on cpu 1: [ 47.621422][ T3306] __lru_add_drain_all+0x12b/0x3f0 [ 47.626559][ T3306] lru_add_drain_all+0x10/0x20 [ 47.631333][ T3306] invalidate_bdev+0x47/0x70 [ 47.635947][ T3306] ext4_put_super+0x624/0x7d0 [ 47.640647][ T3306] generic_shutdown_super+0xe6/0x210 [ 47.646035][ T3306] kill_block_super+0x2a/0x70 [ 47.650730][ T3306] ext4_kill_sb+0x42/0x80 [ 47.655126][ T3306] deactivate_locked_super+0x75/0x1c0 [ 47.660522][ T3306] deactivate_super+0x97/0xa0 [ 47.665322][ T3306] cleanup_mnt+0x269/0x2e0 [ 47.669758][ T3306] __cleanup_mnt+0x19/0x20 [ 47.674189][ T3306] task_work_run+0x131/0x1a0 [ 47.678795][ T3306] exit_to_user_mode_loop+0xe4/0x100 [ 47.684096][ T3306] do_syscall_64+0x1d6/0x200 [ 47.688700][ T3306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.694608][ T3306] [ 47.696938][ T3306] value changed: 0x11 -> 0x12 [ 47.701618][ T3306] [ 47.703950][ T3306] Reported by Kernel Concurrency Sanitizer on: [ 47.710201][ T3306] CPU: 1 UID: 0 PID: 3306 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 47.720191][ T3306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 47.730430][ T3306] ================================================================== [ 47.778666][ T4283] loop3: detected capacity change from 0 to 256