last executing test programs: 2.712778212s ago: executing program 4 (id=784): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x40, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00', r0}, 0x10) clock_nanosleep(0x9, 0x0, 0x0, 0x0) 2.629595902s ago: executing program 4 (id=788): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000300)='./bus\x00', 0x15d) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x143042, 0xfe) ftruncate(r1, 0x2008002) sendfile(r0, r1, 0x0, 0x80000001) 1.975696439s ago: executing program 4 (id=803): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xd4) r2 = dup2(r1, r1) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r2, 0x1276, 0x0) 1.877757429s ago: executing program 2 (id=804): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x280) 1.857607459s ago: executing program 2 (id=806): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) time(0x0) 1.853443148s ago: executing program 3 (id=807): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000002600)={0x20, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4840}, 0x4000804) 1.747833508s ago: executing program 3 (id=808): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="04ec1a", 0x3, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bic\x00', 0x4) shutdown(r0, 0x1) 1.747635868s ago: executing program 2 (id=809): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'tunl0\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8, &(0x7f00000002c0)=0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x40000000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='cachefiles_mark_inactive\x00', r3, 0x0, 0x8000}, 0x18) io_submit(r2, 0x8, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="0300ffff0000", 0x6}]) 1.732954348s ago: executing program 3 (id=810): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) chroot(&(0x7f0000000180)='./bus\x00') 1.693735588s ago: executing program 3 (id=811): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x21000e, &(0x7f00000002c0)={[{@discard}, {@nodiscard}, {@init_itable}, {@abort}, {@discard}, {@norecovery}, {@lazytime}, {@data_err_abort}]}, 0xde, 0x529, &(0x7f00000008c0)="$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") open(&(0x7f0000000000)='./file1\x00', 0x1c927e, 0xb4) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) unshare(0x60000480) 1.547002487s ago: executing program 0 (id=814): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4ca31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000008000"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='mm_page_alloc\x00', r0}, 0x10) syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d) 1.546778127s ago: executing program 2 (id=815): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000050000000900000001000000", @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000680), 0x64, 0x50a, &(0x7f00000009c0)="$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") 1.475416917s ago: executing program 0 (id=817): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000009"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x4c050) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) r3 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x805) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0xc4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000003c0)) 1.389711827s ago: executing program 4 (id=818): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000840)='\x00', 0x81000) renameat2(r1, &(0x7f0000000140)='./file1\x00', r1, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 1.389414526s ago: executing program 0 (id=819): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f0000000380)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16=0x0, @ANYRES16, @ANYBLOB="15c420384ff84ae384b6918d38761a46dfd886a5c96dc64e041858e5d8403e3cc411a1c2b386cfa5f7423799e8b5d885099aff3716e0d5738d8c6a4cc7ea4781a1d5ce81ae1cb6", @ANYRES32], 0x1, 0x2ee, &(0x7f00000006c0)="$eJzs3M9PE1sUwPHTH5S2BMri5b28l7xwoxvdTKC6VhoDibGJBKnxR2IywFSbji2ZaTA1RnTl1vhHuCAs2ZEo/wAbd7px446NiQtZGMd0OkNpGUBKaRG+n4TMYe49nXtnBnLuhGHzzuvHxbyt5fWKhONKQiIiWyLDEhZfyNuG3TgmO72QiwPfPv5/6+69G5lsdmJaqcnMzKW0Umpo5N2TZwmv21q/bAw/2Pya/rLx98a/mz9nHhVsVbBVqVxRupotf67os6ah5gt2UVNqyjR021CFkm1Y9fZyvT1vlhcWqkovzQ8mFyzDtpVeqqqiUVWVsqpYVRV5qBdKStM0NZgUHCS3PD2tZ9pMnuvwYHBMLCujR0Qksaslt9yTAQEAgJ5qrf/DojpZ/6+cW68M3F4d8ur/tVhQ/X/5U/2zmur/uIgE1v/+8QPrf/1w9f/uiuhsOVL9j5NhJLZrV6gR1hqtjJ70fn5dL++vjLoB9T8AAAAAAAAAAAAAAAAAAAAAAH+CLcdJOY6T8rf+V7+IxEXE/z4gNSIiV3swZHTQEa4/ToHGi3vRIRHz1WJuMVffeh3WRcQUQ0YlJT/c+8FTi/03j1TNsLw3l7z8pcVcxG3J5KXg5o9Jqk9a8x1n8np2YkzVNef3SXJnflpS8ldwfjowPyYXzu/I1yQlH+akLKbMu+No5D8fU+razWxLfsLtBwAAAADAaaCpbYHrd03bq72ev72+bn0+EGmsr0cD1+dR+S/a27kDAAAAAHBW2NWnRd00DWufICEH92k/iB7TJ/sz/N0s/28Zjm+m+wT+wZua4t7Ojp+W0CFOyx5BWNrJGqnNRh11Fv5jo736yNR4965g0zD+efP2e+cOcWU1fsBM2w8i+98AfV37BQQAAACgaxpFv79nvLcDAgAAAAAAAAAAAAAAAAAAAAAAAAAAAADgDOrGv0nr9RwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAk+JXAAAA//+qDgR1") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock2(&(0x7f0000004000/0x4000)=nil, 0x40ef, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) 1.162973915s ago: executing program 1 (id=821): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xa}}}}]}, 0x4c}}, 0x0) 1.105765205s ago: executing program 2 (id=822): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x0, 0x2000}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 1.032481595s ago: executing program 1 (id=823): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='kfree\x00', r2}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000014000100736974300000000000000000000000001400010073697430000000000000000000000000080002400000000008000140000000000900020073797a31000000000900010073797a30"], 0xa8}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x20000000005, 0x10}, 0xd8) 997.359965ms ago: executing program 4 (id=824): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f00000002c0)}, 0x20) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000b00)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @remote}}, {{0xa, 0x0, 0x0, @remote}}]}, 0x190) syz_emit_ethernet(0x3e, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount(0x0, 0x0, &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x1c, 0x20, 0x301}, 0x1c}}, 0x0) 893.717654ms ago: executing program 1 (id=825): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000680)={{0x1}, 0xbd, 0x0, 'id0\x00', 'timer1\x00', 0x0, 0x0, 0x0, 0xc00000000000000}) 836.850704ms ago: executing program 0 (id=826): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374"], 0x140}}, 0x0) 486.562422ms ago: executing program 3 (id=827): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 425.707082ms ago: executing program 1 (id=828): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = eventfd2(0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) io_submit(r2, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffd, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r1}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) shutdown(r0, 0x0) 393.968822ms ago: executing program 3 (id=829): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}}, 0x20040000) 360.268372ms ago: executing program 1 (id=830): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000380), &(0x7f00000003c0)=r3}, 0x20) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fcff7f00000000002100000009001f0070687930000000000c0005000000000000000000050020"], 0x34}}, 0x0) 269.248081ms ago: executing program 0 (id=831): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x25dfdbfb, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_OIF={0x8, 0x5, r1}]}, 0x28}}, 0x0) 269.026111ms ago: executing program 1 (id=832): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000840)='./file0\x00', 0x801, &(0x7f0000000080), 0x64, 0x518, &(0x7f0000000200)="$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") write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000740)=0xffffffffffffffff, 0x12) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x2, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ppoll(0x0, 0x0, &(0x7f00000003c0)={0x0, 0x989680}, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) llistxattr(&(0x7f0000000140)='./file1\x00', 0x0, 0x0) 44.1043ms ago: executing program 2 (id=833): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) getdents(r0, 0x0, 0x0) lseek(r0, 0x7ff, 0x1) getdents64(r0, 0x0, 0x10) 42.14963ms ago: executing program 4 (id=834): socketpair(0x23, 0x80009, 0x88, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x101000, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x0, 0x0, 0x0, 0xee01}}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}}}, 0xb8}}, 0x4000) 0s ago: executing program 0 (id=835): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) getxattr(0x0, &(0x7f0000000340)=@random={'os2.', 'GPL\x00'}, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.55' (ED25519) to the list of known hosts. [ 21.512673][ T23] audit: type=1400 audit(1738307007.050:66): avc: denied { mounton } for pid=342 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.514166][ T342] cgroup1: Unknown subsys name 'net' [ 21.535104][ T23] audit: type=1400 audit(1738307007.050:67): avc: denied { mount } for pid=342 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.540391][ T342] cgroup1: Unknown subsys name 'net_prio' [ 21.563793][ T23] audit: type=1400 audit(1738307007.110:68): avc: denied { read } for pid=145 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 21.567822][ T342] cgroup1: Unknown subsys name 'devices' [ 21.595252][ T23] audit: type=1400 audit(1738307007.130:69): avc: denied { unmount } for pid=342 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.758204][ T342] cgroup1: Unknown subsys name 'hugetlb' [ 21.763788][ T342] cgroup1: Unknown subsys name 'rlimit' [ 21.904195][ T23] audit: type=1400 audit(1738307007.440:70): avc: denied { setattr } for pid=342 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=9545 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.927211][ T23] audit: type=1400 audit(1738307007.440:71): avc: denied { mounton } for pid=342 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.951727][ T23] audit: type=1400 audit(1738307007.440:72): avc: denied { mount } for pid=342 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.957522][ T345] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 21.983295][ T23] audit: type=1400 audit(1738307007.520:73): avc: denied { relabelto } for pid=345 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.008470][ T23] audit: type=1400 audit(1738307007.520:74): avc: denied { write } for pid=345 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.050744][ T23] audit: type=1400 audit(1738307007.590:75): avc: denied { read } for pid=342 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.077668][ T342] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.612494][ T356] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.619470][ T356] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.626829][ T356] device bridge_slave_0 entered promiscuous mode [ 22.633940][ T356] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.640846][ T356] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.648046][ T356] device bridge_slave_1 entered promiscuous mode [ 22.700494][ T351] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.707538][ T351] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.714633][ T351] device bridge_slave_0 entered promiscuous mode [ 22.727233][ T351] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.734048][ T351] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.741459][ T351] device bridge_slave_1 entered promiscuous mode [ 22.765815][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.772669][ T353] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.779912][ T353] device bridge_slave_0 entered promiscuous mode [ 22.789805][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.796638][ T353] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.803952][ T353] device bridge_slave_1 entered promiscuous mode [ 22.835426][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.842523][ T354] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.849820][ T354] device bridge_slave_0 entered promiscuous mode [ 22.859653][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.866500][ T354] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.873794][ T354] device bridge_slave_1 entered promiscuous mode [ 22.880197][ T355] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.887054][ T355] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.894172][ T355] device bridge_slave_0 entered promiscuous mode [ 22.904585][ T355] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.911415][ T355] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.918686][ T355] device bridge_slave_1 entered promiscuous mode [ 23.097967][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.104795][ T354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.111928][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.118693][ T354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.143032][ T356] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.149868][ T356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.156982][ T356] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.163738][ T356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.187379][ T351] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.194199][ T351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.201328][ T351] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.208095][ T351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.219707][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.226538][ T353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.233636][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.240430][ T353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.265496][ T180] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.272755][ T180] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.280057][ T180] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.286997][ T180] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.293809][ T180] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.300818][ T180] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.307755][ T180] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.314585][ T180] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.322235][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.329468][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.355807][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.363302][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.371630][ T180] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.378455][ T180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.386415][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.394315][ T180] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.401066][ T180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.426326][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.434214][ T180] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.440968][ T180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.459072][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.467331][ T180] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.474137][ T180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.481345][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.489106][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.508503][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.516144][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.523370][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.541933][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.550034][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.558218][ T180] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.565026][ T180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.572362][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.580583][ T180] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.587410][ T180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.617158][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.625075][ T180] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.631897][ T180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.639978][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.648072][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.656083][ T180] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.662896][ T180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.670121][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.678013][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.685687][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.693544][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.727258][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.735377][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.743942][ T180] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.750770][ T180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.758520][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.766522][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.774203][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.782449][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.790485][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.798207][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.805781][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.813904][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.821919][ T180] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.828742][ T180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.835931][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.843946][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.852053][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.859685][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.878906][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.887120][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.895252][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.903264][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.911477][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.919730][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.946018][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.954031][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.962203][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.970625][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.978483][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.986430][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.994090][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.002169][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.010224][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.018395][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.035828][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.044092][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.052270][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.060364][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.068557][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.076587][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.098704][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.106890][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.107114][ T356] request_module fs-gadgetfs succeeded, but still no fs? [ 24.114885][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.130226][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.140109][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.148005][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.166113][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.174128][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.182461][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.191162][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.228887][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.237243][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.245455][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.254092][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.262395][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.271469][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.279894][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.288521][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.296809][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.304705][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.329523][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.337629][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.597745][ T382] FAULT_INJECTION: forcing a failure. [ 24.597745][ T382] name failslab, interval 1, probability 0, space 0, times 1 [ 24.610203][ T382] CPU: 1 PID: 382 Comm: syz.3.4 Not tainted 5.4.289-syzkaller-00025-g49530c73f82d #0 [ 24.619431][ T382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 24.629323][ T382] Call Trace: [ 24.632464][ T382] dump_stack+0x1d8/0x241 [ 24.636620][ T382] ? panic+0x89d/0x89d [ 24.640528][ T382] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 24.646171][ T382] should_fail+0x71f/0x880 [ 24.650420][ T382] ? setup_fault_attr+0x3d0/0x3d0 [ 24.655367][ T382] ? inet6_ifinfo_notify+0x69/0x110 [ 24.660403][ T382] should_failslab+0x5/0x20 [ 24.664756][ T382] __kmalloc_track_caller+0x4f/0x2b0 [ 24.665904][ T5] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 24.669870][ T382] ? kmem_cache_alloc+0xd9/0x250 [ 24.669879][ T382] ? inet6_ifinfo_notify+0x69/0x110 [ 24.669893][ T382] __alloc_skb+0xb4/0x4d0 [ 24.691134][ T382] ? check_preemption_disabled+0x9f/0x320 [ 24.696688][ T382] inet6_ifinfo_notify+0x69/0x110 [ 24.701683][ T382] inet6_set_link_af+0x746/0xaa0 [ 24.706454][ T382] ? inet6_validate_link_af+0x410/0x410 [ 24.711837][ T382] ? __kernel_text_address+0x94/0x100 [ 24.717042][ T382] ? validate_linkmsg+0x3d4/0x470 [ 24.721901][ T382] do_setlink+0x2e93/0x3b70 [ 24.726245][ T382] ? __nla_validate_parse+0x1af2/0x2180 [ 24.731625][ T382] ? rtnetlink_event+0x1b0/0x1b0 [ 24.736395][ T382] ? __nla_validate+0x50/0x50 [ 24.740907][ T382] ? __kasan_kmalloc+0x171/0x210 [ 24.745679][ T382] ? rtnl_newlink+0xfd/0x2060 [ 24.750200][ T382] ? rtnetlink_rcv_msg+0x983/0xc70 [ 24.755140][ T382] ? netlink_rcv_skb+0x1d5/0x420 [ 24.759916][ T382] ? netlink_unicast+0x936/0xb20 [ 24.764690][ T382] ? __nla_validate_parse+0x1af2/0x2180 [ 24.770069][ T382] ? __nla_parse+0x3a/0x50 [ 24.774322][ T382] ? inet6_validate_link_af+0x12b/0x410 [ 24.779703][ T382] ? inet6_validate_link_af+0x2b6/0x410 [ 24.785086][ T382] ? inet6_get_link_af_size+0x50/0x50 [ 24.790297][ T382] ? validate_linkmsg+0x3d4/0x470 [ 24.795152][ T382] rtnl_newlink+0x16bc/0x2060 [ 24.799671][ T382] ? rtnl_setlink+0x4f0/0x4f0 [ 24.804180][ T382] ? update_rt_migration+0x23f/0x350 [ 24.809309][ T382] ? __schedule+0xb0d/0x1320 [ 24.813741][ T382] ? check_preemption_disabled+0x9f/0x320 [ 24.819283][ T382] ? check_preemption_disabled+0x9f/0x320 [ 24.824838][ T382] ? mutex_lock+0xd6/0x110 [ 24.829090][ T382] ? mutex_trylock+0xa0/0xa0 [ 24.833515][ T382] ? ns_capable+0x70/0xe0 [ 24.837680][ T382] ? rtnetlink_rcv_msg+0x2ee/0xc70 [ 24.842631][ T382] ? rtnl_setlink+0x4f0/0x4f0 [ 24.847143][ T382] rtnetlink_rcv_msg+0x983/0xc70 [ 24.851922][ T382] ? rtnetlink_bind+0x80/0x80 [ 24.856428][ T382] ? check_preemption_disabled+0x9f/0x320 [ 24.861984][ T382] ? debug_smp_processor_id+0x20/0x20 [ 24.867193][ T382] ? debug_smp_processor_id+0x20/0x20 [ 24.872397][ T382] ? check_preemption_disabled+0x9f/0x320 [ 24.877962][ T382] ? plist_check_list+0x1f8/0x220 [ 24.882812][ T382] ? check_preemption_disabled+0x9f/0x320 [ 24.888369][ T382] ? debug_smp_processor_id+0x20/0x20 [ 24.893572][ T382] ? debug_smp_processor_id+0x20/0x20 [ 24.898786][ T382] ? switch_mm_irqs_off+0x325/0xab0 [ 24.903816][ T382] ? plist_check_list+0x1f8/0x220 [ 24.908674][ T382] ? _raw_spin_unlock_irq+0x4a/0x60 [ 24.913706][ T382] ? finish_task_switch+0x130/0x590 [ 24.918745][ T382] ? __schedule+0xb0d/0x1320 [ 24.923164][ T382] ? retint_kernel+0x1b/0x1b [ 24.927594][ T382] ? is_mmconf_reserved+0x430/0x430 [ 24.932629][ T382] ? avc_has_perm_noaudit+0x3d0/0x3d0 [ 24.937833][ T382] ? iov_iter_advance+0x258/0xb20 [ 24.942696][ T382] netlink_rcv_skb+0x1d5/0x420 [ 24.947296][ T382] ? rtnetlink_bind+0x80/0x80 [ 24.951808][ T382] ? nla_put_string+0x30/0x30 [ 24.956323][ T382] netlink_unicast+0x936/0xb20 [ 24.960921][ T382] ? netlink_detachskb+0x90/0x90 [ 24.965694][ T382] ? __virt_addr_valid+0x20e/0x2a0 [ 24.970641][ T382] netlink_sendmsg+0xa18/0xcf0 [ 24.975241][ T382] ? netlink_getsockopt+0x550/0x550 [ 24.980275][ T382] ? import_iovec+0x1bb/0x380 [ 24.984793][ T382] ? security_socket_sendmsg+0x7d/0xa0 [ 24.990082][ T382] ? netlink_getsockopt+0x550/0x550 [ 24.995115][ T382] ____sys_sendmsg+0x5ac/0x8f0 [ 24.999720][ T382] ? __sys_sendmsg_sock+0x2b0/0x2b0 [ 25.004751][ T382] ? rcu_preempt_deferred_qs+0xa4/0x2b0 [ 25.010131][ T382] ? check_preemption_disabled+0x9f/0x320 [ 25.015687][ T382] ? debug_smp_processor_id+0x20/0x20 [ 25.020897][ T382] __sys_sendmsg+0x28b/0x380 [ 25.025322][ T382] ? ____sys_sendmsg+0x8f0/0x8f0 [ 25.030100][ T382] ? schedule+0x143/0x1d0 [ 25.034260][ T382] do_syscall_64+0xca/0x1c0 [ 25.038603][ T382] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 25.044340][ T382] RIP: 0033:0x7f7e090f9da9 [ 25.048582][ T382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 25.068020][ T382] RSP: 002b:00007f7e07722038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 25.076264][ T382] RAX: ffffffffffffffda RBX: 00007f7e09313160 RCX: 00007f7e090f9da9 [ 25.084077][ T382] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000006 [ 25.091887][ T382] RBP: 00007f7e07722090 R08: 0000000000000000 R09: 0000000000000000 [ 25.099699][ T382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 25.107511][ T382] R13: 0000000000000000 R14: 00007f7e09313160 R15: 00007ffedb3ec948 [ 25.144840][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.153152][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.276103][ T5] usb 5-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 25.288362][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.305631][ T5] usb 5-1: config 0 descriptor?? [ 25.586478][ T5] ums-jumpshot 5-1:0.0: USB Mass Storage device detected [ 25.605995][ T5] ums-jumpshot 5-1:0.0: Quirks match for vid 05dc pid 0001: 2 [ 25.790298][ T5] usb 5-1: USB disconnect, device number 2 [ 25.861595][ T410] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.202220][ T417] erofs: (device loop3): mounted with opts: , root inode @ nid 36. [ 26.299433][ T422] 9pnet: Insufficient options for proto=fd [ 26.529457][ T424] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 26.541650][ T23] kauditd_printk_skb: 48 callbacks suppressed [ 26.541659][ T23] audit: type=1400 audit(1738307012.080:124): avc: denied { create } for pid=427 comm="syz.4.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.568062][ T424] ext4 filesystem being mounted at /1/bus supports timestamps until (%ptR?) (0x7fffffff) [ 26.578722][ T23] audit: type=1400 audit(1738307012.110:125): avc: denied { setopt } for pid=427 comm="syz.4.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.637070][ T23] audit: type=1400 audit(1738307012.180:126): avc: denied { getopt } for pid=423 comm="syz.2.12" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.665224][ T428] erofs: (device loop4): mounted with opts: , root inode @ nid 36. [ 26.689439][ T23] audit: type=1400 audit(1738307012.230:127): avc: denied { create } for pid=423 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 26.694893][ T435] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 26.720199][ T23] audit: type=1400 audit(1738307012.230:128): avc: denied { setopt } for pid=423 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 26.741740][ T436] FAULT_INJECTION: forcing a failure. [ 26.741740][ T436] name failslab, interval 1, probability 0, space 0, times 0 [ 26.754240][ T23] audit: type=1400 audit(1738307012.230:129): avc: denied { write } for pid=423 comm="syz.2.12" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 26.775815][ T436] CPU: 0 PID: 436 Comm: syz.0.14 Not tainted 5.4.289-syzkaller-00025-g49530c73f82d #0 [ 26.785144][ T436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 26.795039][ T436] Call Trace: [ 26.798173][ T436] dump_stack+0x1d8/0x241 [ 26.802332][ T436] ? panic+0x89d/0x89d [ 26.806237][ T436] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 26.811878][ T436] ? unwind_next_frame+0x176a/0x1ea0 [ 26.817000][ T436] should_fail+0x71f/0x880 [ 26.821252][ T436] ? setup_fault_attr+0x3d0/0x3d0 [ 26.826112][ T436] ? unwind_get_return_address_ptr+0xa0/0xa0 [ 26.831925][ T436] ? deref_stack_reg+0x15c/0x1f0 [ 26.836702][ T436] ? rtnl_newlink+0xfd/0x2060 [ 26.841213][ T436] should_failslab+0x5/0x20 [ 26.845553][ T436] kmem_cache_alloc_trace+0x28/0x260 [ 26.850675][ T436] rtnl_newlink+0xfd/0x2060 [ 26.855015][ T436] ? get_reg+0x220/0x220 [ 26.859093][ T436] ? unwind_next_frame+0x176a/0x1ea0 [ 26.864212][ T436] ? get_reg+0x105/0x220 [ 26.868292][ T436] ? unwind_next_frame+0x1ea0/0x1ea0 [ 26.873412][ T436] ? rtnl_setlink+0x4f0/0x4f0 [ 26.877927][ T436] ? unwind_get_return_address_ptr+0xa0/0xa0 [ 26.883742][ T436] ? unwind_next_frame+0x176a/0x1ea0 [ 26.888863][ T436] ? deref_stack_reg+0x15c/0x1f0 [ 26.893637][ T436] ? get_reg+0x220/0x220 [ 26.897715][ T436] ? get_reg+0x220/0x220 [ 26.901794][ T436] ? unwind_next_frame+0x176a/0x1ea0 [ 26.906920][ T436] ? avc_has_perm_noaudit+0x2f1/0x3d0 [ 26.912126][ T436] ? avc_denied+0x1d0/0x1d0 [ 26.916463][ T436] ? selinux_capable+0x1d9/0x430 [ 26.921234][ T436] ? selinux_capable+0x2f1/0x430 [ 26.926009][ T436] ? selinux_capset+0xe0/0xe0 [ 26.930522][ T436] ? arch_stack_walk+0xf5/0x140 [ 26.935212][ T436] ? mutex_lock+0xa5/0x110 [ 26.939461][ T436] ? mutex_trylock+0xa0/0xa0 [ 26.943892][ T436] ? security_capable+0x86/0xb0 [ 26.948581][ T436] ? rtnl_setlink+0x4f0/0x4f0 [ 26.953088][ T436] rtnetlink_rcv_msg+0x983/0xc70 [ 26.957862][ T436] ? 0xffffffffa0090000 [ 26.961857][ T436] ? rtnetlink_bind+0x80/0x80 [ 26.966366][ T436] ? __kernel_text_address+0x94/0x100 [ 26.971579][ T436] ? unwind_get_return_address+0x49/0x80 [ 26.977045][ T436] ? arch_stack_walk+0xf5/0x140 [ 26.981734][ T436] ? avc_has_perm_noaudit+0x2f1/0x3d0 [ 26.986940][ T436] ? avc_denied+0x1d0/0x1d0 [ 26.991279][ T436] ? avc_has_perm+0xd2/0x260 [ 26.995702][ T436] ? avc_has_perm+0x16f/0x260 [ 27.000217][ T436] ? avc_has_perm_noaudit+0x3d0/0x3d0 [ 27.005425][ T436] ? iov_iter_advance+0x258/0xb20 [ 27.010288][ T436] netlink_rcv_skb+0x1d5/0x420 [ 27.014886][ T436] ? rtnetlink_bind+0x80/0x80 [ 27.019399][ T436] ? nla_put_string+0x30/0x30 [ 27.023912][ T436] ? __netlink_lookup+0x369/0x390 [ 27.028772][ T436] netlink_unicast+0x936/0xb20 [ 27.033375][ T436] ? netlink_detachskb+0x90/0x90 [ 27.038145][ T436] ? __virt_addr_valid+0x20e/0x2a0 [ 27.043092][ T436] netlink_sendmsg+0xa18/0xcf0 [ 27.047695][ T436] ? netlink_getsockopt+0x550/0x550 [ 27.052724][ T436] ? import_iovec+0x1bb/0x380 [ 27.057240][ T436] ? security_socket_sendmsg+0x7d/0xa0 [ 27.062536][ T436] ? netlink_getsockopt+0x550/0x550 [ 27.067574][ T436] ____sys_sendmsg+0x5ac/0x8f0 [ 27.072173][ T436] ? __sys_sendmsg_sock+0x2b0/0x2b0 [ 27.077204][ T436] ? proc_fail_nth_read+0x210/0x210 [ 27.082242][ T436] __sys_sendmsg+0x28b/0x380 [ 27.086662][ T436] ? ____sys_sendmsg+0x8f0/0x8f0 [ 27.091440][ T436] ? check_preemption_disabled+0x9f/0x320 [ 27.096993][ T436] ? fput_many+0x15e/0x1b0 [ 27.101243][ T436] ? check_preemption_disabled+0x153/0x320 [ 27.106889][ T436] ? __fdget+0x189/0x200 [ 27.110965][ T436] do_syscall_64+0xca/0x1c0 [ 27.115306][ T436] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 27.121031][ T436] RIP: 0033:0x7f9df234dda9 [ 27.125285][ T436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 27.144722][ T436] RSP: 002b:00007f9df0997038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 27.152969][ T436] RAX: ffffffffffffffda RBX: 00007f9df2567080 RCX: 00007f9df234dda9 [ 27.160780][ T436] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000008 [ 27.168589][ T436] RBP: 00007f9df0997090 R08: 0000000000000000 R09: 0000000000000000 [ 27.176404][ T436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 27.184215][ T436] R13: 0000000000000000 R14: 00007f9df2567080 R15: 00007fff5bc3a1a8 [ 27.202567][ T23] audit: type=1400 audit(1738307012.230:130): avc: denied { write open } for pid=423 comm="syz.2.12" path=2F312F6275732F66696C65302F233138202864656C6574656429 dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 27.255050][ T23] audit: type=1400 audit(1738307012.230:131): avc: denied { add_name } for pid=423 comm="syz.2.12" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 27.291106][ T23] audit: type=1400 audit(1738307012.230:132): avc: denied { create } for pid=423 comm="syz.2.12" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 27.312183][ T23] audit: type=1400 audit(1738307012.230:133): avc: denied { remove_name } for pid=423 comm="syz.2.12" name="bus" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 27.335222][ T437] syz.2.12 (437) used greatest stack depth: 21080 bytes left [ 27.401343][ T441] netlink: 'syz.3.15': attribute type 4 has an invalid length. [ 27.418547][ T441] syz.3.15 (441) used greatest stack depth: 19416 bytes left [ 27.447846][ T422] ====================================================== [ 27.447846][ T422] WARNING: the mand mount option is being deprecated and [ 27.447846][ T422] will be removed in v5.15! [ 27.447846][ T422] ====================================================== [ 27.598240][ T422] F2FS-fs (loop1): Segment count (31) mismatch with total segments from devices (0) [ 27.612730][ T422] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 27.624137][ T422] F2FS-fs (loop1): invalid crc value [ 27.630931][ T422] F2FS-fs (loop1): Found nat_bits in checkpoint [ 27.659376][ T422] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 27.666345][ T422] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 27.887683][ T461] JBD2: no valid journal superblock found [ 27.893293][ T461] EXT4-fs (loop4): error loading journal [ 28.098811][ T358] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 28.355876][ T397] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 28.466057][ T358] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 28.477184][ T358] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 28.488232][ T358] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 28.500935][ T358] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 28.509738][ T358] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.518173][ T358] usb 1-1: config 0 descriptor?? [ 28.535926][ T445] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 28.715943][ T397] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 28.727142][ T397] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 28.738445][ T397] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 28.751796][ T397] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 28.760778][ T397] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.769791][ T397] usb 4-1: config 0 descriptor?? [ 28.785961][ T465] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 28.992075][ T483] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 29.009606][ T358] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 29.026917][ T358] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 29.046540][ T358] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 29.094071][ T358] hid-generic 0000:0000:0000.0002: unknown main item tag 0x7 [ 29.101405][ T358] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.109932][ T358] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.117233][ T358] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.124310][ T358] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.131718][ T358] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.138977][ T358] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.146322][ T358] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.153519][ T358] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.160847][ T358] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.168116][ T358] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.175266][ T358] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.182553][ T358] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.190078][ T358] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.197347][ T358] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.204486][ T358] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.211714][ T358] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.218912][ T358] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.226336][ T358] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.233550][ T358] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.240746][ T358] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.248742][ T397] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd [ 29.256000][ T358] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.263108][ T358] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.271679][ T397] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 29.279369][ T358] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.286553][ T358] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.293732][ T358] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.301597][ T358] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.302205][ T107] usb 1-1: USB disconnect, device number 2 [ 29.309475][ T358] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.321817][ T397] plantronics 0003:047F:FFFF.0003: hiddev97,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 29.334878][ T358] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.342098][ T358] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.350335][ T358] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 29.436878][ T492] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 29.450044][ T5] usb 4-1: USB disconnect, device number 2 [ 29.459976][ T492] EXT4-fs (loop4): re-mounted. Opts: (null) [ 29.557947][ T500] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 29.577588][ T500] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x00000000000001ff,data_err=abort,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue [ 29.863400][ T528] EXT4-fs (loop1): quotafile must be on filesystem root [ 30.003800][ T543] EXT4-fs: Warning: mounting with data=journal disables delayed allocation and O_DIRECT support! [ 30.018188][ T543] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 30.056113][ T543] EXT4-fs (loop3): Unsupported blocksize for fs encryption [ 30.665764][ T574] Module has invalid ELF structures [ 30.876873][ T598] EXT4-fs (loop4): Unsupported blocksize for fs encryption [ 30.975566][ T615] [ 30.977818][ T615] ********************************************************** [ 30.984933][ T615] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 30.992150][ T615] ** ** [ 30.999355][ T615] ** trace_printk() being used. Allocating extra memory. ** [ 31.006831][ T615] ** ** [ 31.014771][ T615] ** This means that this is a DEBUG kernel and it is ** [ 31.023303][ T611] EXT4-fs (loop2): Unsupported blocksize for fs encryption [ 31.023575][ T615] ** unsafe for production use. ** [ 31.040519][ T615] ** ** [ 31.051732][ T615] ** If you see this message and you are not debugging ** [ 31.066340][ T615] ** the kernel, report this immediately to your vendor! ** [ 31.076695][ T615] ** ** [ 31.084010][ T615] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 31.092023][ T615] ********************************************************** [ 31.111388][ T622] EXT4-fs (loop3): Unsupported blocksize for fs encryption [ 31.196844][ T632] loop4: p1 < > p4 [ 31.202582][ T632] loop4: p4 size 8388608 extends beyond EOD, truncated [ 31.288824][ T638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.88'. [ 31.350687][ T646] netlink: 28 bytes leftover after parsing attributes in process `syz.0.92'. [ 31.596424][ T658] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 31.606910][ T658] EXT4-fs (loop0): orphan cleanup on readonly fs [ 31.613575][ T658] EXT4-fs error (device loop0): ext4_free_blocks:4795: comm syz.0.98: Freeing blocks not in datazone - block = 0, count = 4096 [ 31.627289][ T658] EXT4-fs (loop0): 1 orphan inode deleted [ 31.633018][ T658] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 31.755926][ T23] kauditd_printk_skb: 116 callbacks suppressed [ 31.755961][ T23] audit: type=1400 audit(1738307017.180:250): avc: denied { mount } for pid=657 comm="syz.0.98" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.029374][ T662] EXT4-fs (loop4): orphan cleanup on readonly fs [ 32.036521][ T662] EXT4-fs warning (device loop4): ext4_enable_quotas:6100: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 32.050852][ T662] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 32.059316][ T662] EXT4-fs (loop4): 1 truncate cleaned up [ 32.064769][ T662] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 32.143039][ T23] audit: type=1400 audit(1738307017.680:251): avc: denied { unmount } for pid=351 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.313586][ T671] rtc_cmos 00:00: Alarms can be up to one day in the future [ 32.406320][ T23] audit: type=1400 audit(1738307017.950:252): avc: denied { read } for pid=678 comm="syz.2.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 32.489235][ T689] cgroup: syz.2.110 (689) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 32.505322][ T689] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 32.537263][ T677] EXT4-fs (loop0): mounted filesystem without journal. Opts: nolazytime,bsddf,,errors=continue [ 32.547534][ T677] ext4 filesystem being mounted at /21/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 32.561656][ T686] EXT4-fs (loop4): Unrecognized mount option "mb_optimize_scan=0x0000000000000000" or missing value [ 32.583710][ T23] audit: type=1400 audit(1738307018.120:253): avc: denied { bind } for pid=696 comm="syz.2.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.761398][ T701] SELinux: Context is not valid (left unmapped). [ 32.792257][ T23] audit: type=1400 audit(1738307018.140:254): avc: denied { setopt } for pid=696 comm="syz.2.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.849973][ T23] audit: type=1326 audit(1738307018.390:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=704 comm="syz.1.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35febc4da9 code=0x7ffc0000 [ 32.898716][ T23] audit: type=1326 audit(1738307018.390:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=704 comm="syz.1.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35febc4da9 code=0x7ffc0000 [ 32.925913][ T23] audit: type=1326 audit(1738307018.390:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=704 comm="syz.1.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35febc4da9 code=0x7ffc0000 [ 32.949912][ T23] audit: type=1326 audit(1738307018.390:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=704 comm="syz.1.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35febc4da9 code=0x7ffc0000 [ 32.973565][ T23] audit: type=1326 audit(1738307018.390:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=704 comm="syz.1.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35febc4da9 code=0x7ffc0000 [ 33.008601][ T719] tipc: Started in network mode [ 33.013357][ T719] tipc: Own node identity , cluster identity 4711 [ 33.019740][ T378] rtc_cmos 00:00: Alarms can be up to one day in the future [ 33.019968][ T719] tipc: Failed to obtain node identity [ 33.027079][ T378] rtc_cmos 00:00: Alarms can be up to one day in the future [ 33.027241][ T378] rtc_cmos 00:00: Alarms can be up to one day in the future [ 33.027408][ T378] rtc_cmos 00:00: Alarms can be up to one day in the future [ 33.027418][ T378] rtc rtc0: __rtc_set_alarm: err=-22 [ 33.060305][ T719] tipc: Enabling of bearer rejected, failed to enable media [ 33.088111][ T721] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 33.098884][ T721] EXT4-fs (loop2): Unsupported blocksize for fs encryption [ 33.124005][ T726] device syzkaller0 entered promiscuous mode [ 33.141224][ T728] netlink: 16 bytes leftover after parsing attributes in process `syz.2.125'. [ 33.286420][ T735] EXT4-fs error (device loop2): ext4_validate_block_bitmap:418: comm syz.2.127: bg 0: block 35: padding at end of block bitmap is not set [ 33.313429][ T744] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 33.324963][ T744] EXT4-fs (loop0): Unsupported blocksize for fs encryption [ 33.360251][ T735] EXT4-fs (loop2): Remounting filesystem read-only [ 33.366650][ T735] EXT4-fs error (device loop2) in ext4_free_blocks:5016: Corrupt filesystem [ 33.375239][ T735] EXT4-fs error (device loop2): ext4_free_branches:1022: inode #13: comm syz.2.127: invalid indirect mapped block 4294967295 (level 1) [ 33.389763][ T735] EXT4-fs error (device loop2): ext4_free_branches:1022: inode #13: comm syz.2.127: invalid indirect mapped block 4294967295 (level 2) [ 33.403578][ T735] EXT4-fs (loop2): 1 truncate cleaned up [ 33.409982][ T735] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,dioread_lock,bsddf, [ 33.455659][ T751] loop0: p1 < > p4 [ 33.468231][ T751] loop0: p4 size 8388608 extends beyond EOD, truncated [ 33.495011][ T163] loop0: p1 < > p4 [ 33.499831][ T163] loop0: p4 size 8388608 extends beyond EOD, truncated [ 33.573593][ T771] usb usb8: usbfs: process 771 (syz.2.141) did not claim interface 2 before use [ 33.587114][ T773] hub 2-0:1.0: USB hub found [ 33.595371][ T773] hub 2-0:1.0: 1 port detected [ 33.628415][ T779] mmap: syz.4.144 (779) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 33.650509][ T782] syz.2.146[782] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.650554][ T782] syz.2.146[782] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.809031][ T792] netlink: 96 bytes leftover after parsing attributes in process `syz.3.151'. [ 33.841202][ T796] device wg2 entered promiscuous mode [ 33.890212][ T805] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65535 sclass=netlink_xfrm_socket pid=805 comm=syz.3.158 [ 33.899221][ T808] tipc: Started in network mode [ 33.916000][ T808] tipc: Own node identity , cluster identity 4711 [ 33.928743][ T808] tipc: Failed to obtain node identity [ 33.942637][ T808] tipc: Enabling of bearer rejected, failed to enable media [ 34.055209][ T818] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 34.166338][ T828] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 34.203169][ T828] EXT4-fs error (device loop3): ext4_orphan_get:1238: inode #15: comm syz.3.168: iget: bad i_size value: -67835469387268086 [ 34.240707][ T828] EXT4-fs error (device loop3): ext4_orphan_get:1242: comm syz.3.168: couldn't read orphan inode 15 (err -117) [ 34.252764][ T828] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 34.262070][ T828] ext2 filesystem being mounted at /38/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 34.285640][ T844] netlink: 'syz.2.175': attribute type 3 has an invalid length. [ 34.826634][ T900] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 34.865972][ T900] EXT4-fs (loop3): can't mount with dioread_nolock if block size != PAGE_SIZE [ 34.866216][ T908] syz.0.205[908] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.053467][ T911] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 35.116619][ T13] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 35.359252][ T927] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 35.369500][ T13] usb 2-1: Using ep0 maxpacket: 32 [ 35.496088][ T13] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 35.538372][ T13] usb 2-1: config 0 has no interfaces? [ 35.562713][ T13] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 35.575439][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.606625][ T13] usb 2-1: config 0 descriptor?? [ 35.694810][ T937] netlink: 'syz.3.214': attribute type 3 has an invalid length. [ 35.880117][ T816] usb 2-1: USB disconnect, device number 2 [ 35.888117][ T946] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 36.018169][ T950] EXT4-fs (loop3): Ignoring removed nobh option [ 36.045960][ T950] EXT4-fs (loop3): Unrecognized mount option "nodioread_nolock" or missing value [ 36.197837][ T963] syz.4.225[963] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.417981][ T973] syz.0.230[973] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.451226][ T973] syz.0.230[973] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.638384][ T994] capability: warning: `syz.1.241' uses deprecated v2 capabilities in a way that may be insecure [ 36.698708][ T816] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 36.717292][ T816] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 36.724479][ T816] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 36.733674][ T816] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 36.751610][ T816] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 36.763117][ T816] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 36.770295][ T23] kauditd_printk_skb: 710 callbacks suppressed [ 36.770304][ T23] audit: type=1400 audit(1738307022.300:970): avc: denied { prog_load } for pid=1001 comm="syz.1.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 36.796473][ T816] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 36.803713][ T816] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 36.811386][ T816] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 36.812256][ T23] audit: type=1400 audit(1738307022.360:971): avc: denied { prog_run } for pid=1001 comm="syz.1.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 36.824660][ T816] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 36.850851][ T23] audit: type=1400 audit(1738307022.360:972): avc: denied { read } for pid=1001 comm="syz.1.245" dev="nsfs" ino=4026532587 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 36.871986][ T816] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 36.879793][ T816] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 36.887617][ T23] audit: type=1400 audit(1738307022.360:973): avc: denied { open } for pid=1001 comm="syz.1.245" path="net:[4026532587]" dev="nsfs" ino=4026532587 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 36.910973][ T816] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 36.918454][ T816] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 36.922509][ T1007] netlink: 104 bytes leftover after parsing attributes in process `syz.1.246'. [ 36.925696][ T816] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 36.934467][ T23] audit: type=1400 audit(1738307022.360:974): avc: denied { create } for pid=1001 comm="syz.1.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 36.942242][ T816] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 36.969176][ T816] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 36.976719][ T816] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 36.983964][ T816] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 36.991585][ T816] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 36.999354][ T816] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.007835][ T23] audit: type=1400 audit(1738307022.360:975): avc: denied { read } for pid=1001 comm="syz.1.245" dev="nsfs" ino=4026532587 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.028947][ T816] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.028962][ T816] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.028978][ T816] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.028992][ T816] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.029006][ T816] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.029021][ T816] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.029035][ T816] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.029049][ T816] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.029063][ T816] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.029077][ T816] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.029091][ T816] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.029105][ T816] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.029120][ T816] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.029134][ T816] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.029149][ T816] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.029164][ T816] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.029178][ T816] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.029192][ T816] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.029207][ T816] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.029222][ T816] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.029235][ T816] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.029250][ T816] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.030782][ T816] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz1 [ 37.041595][ T74] cfg80211: failed to load regulatory.db [ 37.080635][ T1011] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 37.170126][ T23] audit: type=1400 audit(1738307022.360:976): avc: denied { open } for pid=1001 comm="syz.1.245" path="net:[4026532587]" dev="nsfs" ino=4026532587 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.301509][ T23] audit: type=1400 audit(1738307022.380:977): avc: denied { create } for pid=1001 comm="syz.1.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 37.324099][ T23] audit: type=1400 audit(1738307022.390:978): avc: denied { block_suspend } for pid=983 comm="syz.0.237" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 37.347381][ T23] audit: type=1400 audit(1738307022.390:979): avc: denied { write } for pid=983 comm="syz.0.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 37.373335][ T1018] EXT4-fs (loop3): Unsupported blocksize for fs encryption [ 37.397543][ T1019] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,usrjquota=,errors=remount-ro,dioread_lock,max_batch_time=0x0000000000000005,sysvgroups,minixdf,barrier=0x0000000000000000,nombcache,bsddf, [ 37.454786][ T1019] EXT4-fs error (device loop2): ext4_validate_block_bitmap:418: comm syz.2.250: bg 0: block 234: padding at end of block bitmap is not set [ 37.474382][ T1019] EXT4-fs (loop2): Remounting filesystem read-only [ 37.530550][ T1022] EXT4-fs (loop1): error: could not find journal device path: error -2 [ 37.578656][ T378] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 37.586114][ T378] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 37.593594][ T378] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 37.600818][ T378] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 37.608528][ T378] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 37.616638][ T378] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 37.623814][ T378] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 37.631051][ T378] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 37.638283][ T378] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 37.645423][ T378] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 37.652653][ T378] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 37.659844][ T378] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 37.668559][ T378] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 37.675727][ T378] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 37.682954][ T378] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 37.690146][ T378] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 37.697356][ T378] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 37.704541][ T378] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 37.711776][ T378] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 37.718958][ T378] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 37.726174][ T378] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 37.733356][ T378] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 37.740586][ T378] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 37.747774][ T378] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 37.754965][ T378] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 37.762199][ T378] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 37.769403][ T378] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 37.776652][ T378] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 37.783787][ T378] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 37.819292][ T378] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 37.837402][ T378] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 37.866000][ T378] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 37.873190][ T378] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 37.880555][ T378] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 37.887752][ T378] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 37.894925][ T378] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 37.910033][ T378] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 37.919115][ T378] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 37.926437][ T1045] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 37.935171][ T1045] EXT4-fs (loop2): orphan cleanup on readonly fs [ 37.941862][ T378] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 37.949502][ T378] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 37.957451][ T378] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 37.964738][ T378] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 37.973118][ T1045] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6102: Corrupt filesystem [ 37.982520][ T378] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 37.990125][ T1045] EXT4-fs (loop2): Remounting filesystem read-only [ 37.996731][ T1045] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:455: comm syz.2.259: Invalid block bitmap block 3 in block_group 0 [ 38.011569][ T378] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz1 [ 38.036041][ T1045] EXT4-fs error (device loop2): ext4_map_blocks:617: inode #3: block 1: comm syz.2.259: lblock 6 mapped to illegal pblock 1 (length 1) [ 38.077511][ T1045] EXT4-fs error (device loop2): ext4_map_blocks:617: inode #3: block 48: comm syz.2.259: lblock 0 mapped to illegal pblock 48 (length 1) [ 38.120010][ T1063] syz.3.270 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 38.131120][ T1061] process 'syz.0.267' launched './file0' with NULL argv: empty string added [ 38.140309][ T1045] EXT4-fs (loop2): 1 orphan inode deleted [ 38.152850][ T1045] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000008,data_err=abort,minixdf,errors=remount-ro,abort,noblock_validity,acl,journal_dev=0x0000000000000f35, [ 38.222723][ T1065] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 38.289955][ T1075] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 38.299056][ T1075] ext4 filesystem being mounted at /50/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 38.428477][ T816] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 38.435715][ T816] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 38.455930][ T816] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 38.463117][ T816] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 38.483985][ T816] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 38.491397][ T816] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 38.499087][ T816] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 38.507264][ T816] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 38.514442][ T816] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 38.522057][ T816] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 38.529455][ T816] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 38.536771][ T816] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 38.544015][ T816] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 38.551214][ T816] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 38.558412][ T816] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 38.565596][ T816] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 38.572822][ T816] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 38.580161][ T816] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 38.588516][ T816] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 38.596384][ T816] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 38.603744][ T816] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 38.610992][ T816] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 38.618178][ T816] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 38.625374][ T816] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 38.632584][ T816] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 38.639907][ T816] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 38.647134][ T816] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 38.654325][ T816] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 38.661532][ T816] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 38.668951][ T816] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 38.676304][ T816] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 38.683525][ T816] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 38.690737][ T816] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 38.697937][ T816] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 38.705139][ T816] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 38.712358][ T816] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 38.719547][ T816] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 38.726770][ T816] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 38.734406][ T816] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 38.741795][ T816] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 38.749023][ T816] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 38.756228][ T816] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 38.763408][ T816] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 38.772273][ T816] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz1 [ 38.846602][ T352] udevd[352]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 38.919819][ T471] udevd[471]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 38.987991][ T1112] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 39.007543][ T471] udevd[471]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 39.112910][ T471] udevd[471]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 39.129096][ T1121] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 39.167648][ T471] udevd[471]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 39.179886][ T1121] ext4 filesystem being mounted at /48/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 39.285034][ T471] udevd[471]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 39.400249][ T930] udevd[930]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 39.403459][ T1144] syz.2.299[1144] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.403506][ T1144] syz.2.299[1144] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.442810][ T1144] 9pnet: Could not find request transport: r [ 39.489977][ T930] udevd[930]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 39.564600][ T930] udevd[930]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 39.570352][ T1150] usb usb1: usbfs: process 1150 (syz.1.298) did not claim interface 23 before use [ 39.631715][ T930] udevd[930]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 39.641100][ T816] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 39.653556][ T816] hid-generic 0000:0000:0004.0007: hidraw0: HID v0.00 Device [syz0] on syz1 [ 39.729932][ T1158] SELinux: failed to load policy [ 40.006939][ T1166] EXT4-fs warning (device loop4): ext4_enable_quotas:6100: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 40.052010][ T1166] EXT4-fs (loop4): mount failed [ 40.252155][ T1201] syz.2.321[1201] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.252201][ T1201] syz.2.321[1201] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.321110][ T1206] netlink: 'syz.3.320': attribute type 8 has an invalid length. [ 40.368577][ T1202] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 40.409378][ T1204] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,,errors=continue [ 40.430114][ T1202] ext4 filesystem being mounted at /54/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 40.583389][ T1220] usb usb1: usbfs: process 1220 (syz.0.327) did not claim interface 23 before use [ 40.900965][ T1239] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 40.916148][ T1239] EXT4-fs (loop1): Unsupported blocksize for fs encryption [ 41.018990][ T1254] syz.4.344 (1254) used greatest stack depth: 19384 bytes left [ 41.084712][ T1250] syz.2.342[1250] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.084761][ T1250] syz.2.342[1250] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.210261][ T1257] attempt to access beyond end of device [ 41.210261][ T1257] loop2: rw=2049, want=1041, limit=128 [ 41.245406][ T1257] attempt to access beyond end of device [ 41.245406][ T1257] loop2: rw=34817, want=1041, limit=128 [ 41.283428][ T1264] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 41.296529][ T1264] EXT4-fs (loop1): orphan cleanup on readonly fs [ 41.311803][ T1264] EXT4-fs error (device loop1): ext4_validate_block_bitmap:418: comm syz.1.349: bg 0: block 40: padding at end of block bitmap is not set [ 41.327348][ T1264] EXT4-fs error (device loop1) in ext4_free_blocks:5016: Corrupt filesystem [ 41.346585][ T1264] EXT4-fs (loop1): 1 truncate cleaned up [ 41.352093][ T1264] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,,errors=continue [ 41.652063][ T1296] 9pnet: Insufficient options for proto=fd [ 41.783420][ T23] kauditd_printk_skb: 1152 callbacks suppressed [ 41.783428][ T23] audit: type=1400 audit(1738307027.320:2114): avc: denied { prog_load } for pid=1301 comm="syz.0.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 41.783763][ T1307] syz.0.366[1307] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.783811][ T1307] syz.0.366[1307] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.819998][ T23] audit: type=1400 audit(1738307027.360:2115): avc: denied { read write } for pid=354 comm="syz-executor" name="loop3" dev="devtmpfs" ino=9409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 41.856103][ T23] audit: type=1400 audit(1738307027.390:2116): avc: denied { prog_run } for pid=1301 comm="syz.0.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 41.883633][ T23] audit: type=1400 audit(1738307027.390:2117): avc: denied { read write open } for pid=354 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=9409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 41.918794][ T1310] 9pnet: Could not find request transport: rdma [ 41.976389][ T23] audit: type=1400 audit(1738307027.400:2118): avc: denied { sys_module } for pid=1305 comm="syz.2.367" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 41.982259][ T1303] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 42.046232][ T1303] ext4 filesystem being mounted at /64/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 42.057040][ T23] audit: type=1400 audit(1738307027.400:2119): avc: denied { module_load } for pid=1305 comm="syz.2.367" path="/sys/power/wakeup_count" dev="sysfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 42.118871][ T23] audit: type=1400 audit(1738307027.420:2120): avc: denied { mounton } for pid=1302 comm="syz.1.365" path="/64/file0" dev="tmpfs" ino=19360 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 42.140929][ T1303] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 42.142143][ T23] audit: type=1400 audit(1738307027.420:2121): avc: denied { ioctl } for pid=356 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=9410 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 42.174977][ T23] audit: type=1400 audit(1738307027.440:2122): avc: denied { ioctl } for pid=354 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=9409 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 42.191974][ T1303] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 42.224410][ T1325] EXT4-fs error (device loop2): ext4_validate_block_bitmap:418: comm syz.2.372: bg 0: block 35: padding at end of block bitmap is not set [ 42.224889][ T1325] EXT4-fs (loop2): Remounting filesystem read-only [ 42.224898][ T1325] EXT4-fs error (device loop2) in ext4_free_blocks:5016: Corrupt filesystem [ 42.225149][ T1325] EXT4-fs error (device loop2): ext4_free_branches:1022: inode #13: comm syz.2.372: invalid indirect mapped block 4294967295 (level 1) [ 42.225258][ T1325] EXT4-fs error (device loop2): ext4_free_branches:1022: inode #13: comm syz.2.372: invalid indirect mapped block 4294967295 (level 2) [ 42.225580][ T1325] EXT4-fs (loop2): 1 truncate cleaned up [ 42.225590][ T1325] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,dioread_lock,bsddf, [ 42.233103][ T1325] audit: audit_backlog=65 > audit_backlog_limit=64 [ 42.377507][ T1338] xt_CT: No such helper "snmp_trap" [ 42.536148][ T1347] 9pnet: Insufficient options for proto=fd [ 42.700712][ T1347] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 42.725785][ T1360] syz.2.386[1360] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.725890][ T1360] syz.2.386[1360] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.932666][ T1362] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 42.961940][ T1364] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,resuid=0x0000000000000000,nodelalloc,acl,noinit_itable,,errors=continue [ 43.024744][ T1364] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2821: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 43.155602][ T1383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.394'. [ 43.164379][ T1381] EXT4-fs (loop3): Ignoring removed orlov option [ 43.172752][ T1381] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 43.214680][ T1381] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 43.322839][ T1390] device pim6reg1 entered promiscuous mode [ 43.368835][ T1394] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 43.375798][ T1394] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 43.387232][ T1394] EXT4-fs (loop3): Unsupported blocksize for fs encryption [ 43.401446][ T1394] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 43.533684][ T1400] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:455: comm syz.1.399: Invalid block bitmap block 0 in block_group 0 [ 43.548044][ T1400] EXT4-fs error (device loop1): ext4_free_blocks:4795: comm syz.1.399: Freeing blocks not in datazone - block = 0, count = 4096 [ 43.571746][ T1400] EXT4-fs error (device loop1): ext4_read_inode_bitmap:134: comm syz.1.399: Invalid inode bitmap blk 0 in block_group 0 [ 43.614019][ T1411] attempt to access beyond end of device [ 43.614019][ T1411] loop4: rw=34817, want=1041, limit=128 [ 43.650459][ T1400] EXT4-fs error (device loop1) in ext4_free_inode:352: Corrupt filesystem [ 43.857217][ T1400] EXT4-fs (loop1): 1 orphan inode deleted [ 43.863016][ T1400] EXT4-fs (loop1): mounted filesystem without journal. Opts: ; sysvgroups,stripe=0x0000000000000000,auto_da_alloc,quota,nogrpid,norecovery,bsddf,noinit_itable,,errors=continue [ 43.975169][ T1415] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 44.142975][ T1419] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 44.339070][ T1442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.415'. [ 44.812080][ T1479] SELinux: policydb version 256 does not match my version range 15-31 [ 44.833124][ T1479] SELinux: failed to load policy [ 44.984795][ T1494] bpf_get_probe_write_proto: 2 callbacks suppressed [ 44.984801][ T1494] syz.0.438[1494] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.984845][ T1494] syz.0.438[1494] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.013648][ T1496] netlink: 'syz.1.440': attribute type 4 has an invalid length. [ 45.033155][ T1496] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.440'. [ 45.055574][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 45.069841][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.080269][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 45.113326][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.135224][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.152290][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.170159][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.186169][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.807148][ T1554] device wg2 left promiscuous mode [ 45.820381][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 45.843007][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.864933][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 45.894750][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.924423][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.947665][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.969932][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.986541][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.005947][ T1566] Module has invalid ELF structures [ 46.148599][ T1578] syz.0.477[1578] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.148649][ T1578] syz.0.477[1578] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.437419][ T1577] EXT4-fs (loop4): Unsupported blocksize for fs encryption [ 46.594596][ T1592] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 46.687380][ T1592] EXT4-fs (loop1): Unsupported blocksize for fs encryption [ 46.781804][ T1603] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 46.792275][ T23] kauditd_printk_skb: 1015 callbacks suppressed [ 46.792284][ T23] audit: type=1400 audit(1738307032.330:3127): avc: denied { read write } for pid=353 comm="syz-executor" name="loop2" dev="devtmpfs" ino=9408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 46.828912][ T23] audit: type=1400 audit(1738307032.330:3128): avc: denied { open } for pid=353 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=9408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 46.854475][ T23] audit: type=1400 audit(1738307032.330:3129): avc: denied { ioctl } for pid=353 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=9408 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 46.880342][ T23] audit: type=1400 audit(1738307032.350:3130): avc: denied { read write } for pid=355 comm="syz-executor" name="loop1" dev="devtmpfs" ino=9407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 46.904397][ T23] audit: type=1400 audit(1738307032.350:3131): avc: denied { open } for pid=355 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=9407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 46.928573][ T23] audit: type=1400 audit(1738307032.390:3132): avc: denied { prog_load } for pid=1604 comm="syz.2.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 46.970501][ T23] audit: type=1400 audit(1738307032.390:3133): avc: denied { prog_run } for pid=1604 comm="syz.2.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 47.068154][ T23] audit: type=1400 audit(1738307032.490:3134): avc: denied { ioctl } for pid=355 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=9407 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 47.098891][ T1614] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 47.149890][ T1614] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 47.162146][ T23] audit: type=1400 audit(1738307032.530:3135): avc: denied { read write } for pid=354 comm="syz-executor" name="loop3" dev="devtmpfs" ino=9409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 47.172187][ T1610] device syzkaller0 entered promiscuous mode [ 47.208689][ T1614] EXT4-fs error (device loop2): ext4_get_journal_inode:4880: inode #5: comm syz.2.491: unexpected bad inode w/o EXT4_IGET_BAD [ 47.213184][ T23] audit: type=1400 audit(1738307032.530:3136): avc: denied { read write open } for pid=354 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=9409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 47.250408][ T1614] EXT4-fs (loop2): no journal found [ 47.255404][ T1614] EXT4-fs (loop2): can't get journal size [ 47.337358][ T1614] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,nolazytime,noinit_itable,,errors=continue [ 47.535107][ T1629] syz.1.496[1629] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.602026][ T1631] tipc: Started in network mode [ 47.655952][ T1631] tipc: Own node identity 7, cluster identity 4711 [ 47.675051][ T1631] tipc: 32-bit node address hash set to 7 [ 47.682890][ T1631] tipc: Cannot configure node identity twice [ 48.272312][ T1651] device syzkaller0 entered promiscuous mode [ 48.370967][ T1659] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 48.400824][ T1659] ext4 filesystem being mounted at /127/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 48.465288][ T1659] EXT4-fs (loop4): re-mounted. Opts: (null) [ 48.503288][ T1659] EXT4-fs (loop4): re-mounted. Opts: (null) [ 48.661586][ T1688] netlink: 'syz.1.521': attribute type 13 has an invalid length. [ 48.693599][ T1688] gretap0: refused to change device tx_queue_len [ 48.702946][ T1688] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 48.751108][ T1681] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 48.766359][ T1691] EXT4-fs (loop3): Ignoring removed oldalloc option [ 48.782057][ T1681] ext4 filesystem being mounted at /96/bus supports timestamps until (%ptR?) (0x7fffffff) [ 48.900094][ T1699] EXT4-fs (loop3): bad geometry: block count 4251398048237748480 exceeds size of device (256 blocks) [ 49.301260][ T1737] EXT4-fs error (device loop2): ext4_validate_block_bitmap:418: comm syz.2.541: bg 0: block 248: padding at end of block bitmap is not set [ 49.321144][ T1737] EXT4-fs (loop2): 1 truncate cleaned up [ 49.340270][ T1746] syz.0.547[1746] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.342160][ T1737] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 49.366194][ T1737] ext4 filesystem being mounted at /99/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 49.674103][ T1772] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 49.686034][ T1779] syz.1.561[1779] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.686073][ T1779] syz.1.561[1779] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.735988][ T1772] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 49.758966][ T1786] device bond_slave_1 entered promiscuous mode [ 49.765528][ T1786] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 49.780545][ T1777] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 49.786758][ T1772] EXT4-fs (loop2): invalid journal inode [ 49.793796][ T1787] usb usb1: usbfs: process 1787 (syz.1.561) did not claim interface 0 before use [ 49.812490][ T1786] device bond_slave_1 left promiscuous mode [ 49.820250][ T1772] EXT4-fs (loop2): can't get journal size [ 49.836904][ T1772] EXT4-fs error (device loop2): ext4_protect_reserved_inode:211: comm syz.2.558: blocks 2-2 from inode 3 overlap system zone [ 49.877642][ T1779] syz.1.561[1779] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.877690][ T1779] syz.1.561[1779] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.923713][ T1772] EXT4-fs (loop2): failed to initialize system zone (-117) [ 49.942647][ T1772] EXT4-fs (loop2): mount failed [ 50.167294][ T1823] Zero length message leads to an empty skb [ 50.229896][ T1810] attempt to access beyond end of device [ 50.229896][ T1810] loop4: rw=2049, want=1041, limit=128 [ 50.319081][ T1810] attempt to access beyond end of device [ 50.319081][ T1810] loop4: rw=524288, want=369, limit=128 [ 50.341953][ T1810] attempt to access beyond end of device [ 50.341953][ T1810] loop4: rw=0, want=153, limit=128 [ 50.407714][ T1844] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Dropping request. Check SNMP counters. [ 50.889248][ T1874] PF_BRIDGE: br_mdb_parse() with unknown ifindex [ 50.940387][ T1878] IPv6: NLM_F_CREATE should be specified when creating new route [ 51.126725][ T1890] Module has invalid ELF structures [ 51.145395][ T1893] netlink: 20 bytes leftover after parsing attributes in process `syz.4.607'. [ 51.182164][ T1893] netlink: 12 bytes leftover after parsing attributes in process `syz.4.607'. [ 51.325725][ T1906] netlink: 96 bytes leftover after parsing attributes in process `syz.3.615'. [ 51.336868][ T1904] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 51.344765][ T1904] SELinux: failed to load policy [ 51.446947][ T1912] netlink: 12 bytes leftover after parsing attributes in process `syz.4.618'. [ 51.808223][ T23] kauditd_printk_skb: 1210 callbacks suppressed [ 51.808231][ T23] audit: type=1400 audit(1738307037.350:4344): avc: denied { map_create } for pid=1929 comm="syz.2.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 51.936794][ T23] audit: type=1400 audit(1738307037.400:4345): avc: denied { prog_load } for pid=1929 comm="syz.2.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 52.114950][ T23] audit: type=1400 audit(1738307037.400:4346): avc: denied { read write } for pid=356 comm="syz-executor" name="loop4" dev="devtmpfs" ino=9410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 52.186600][ T23] audit: type=1400 audit(1738307037.400:4347): avc: denied { open } for pid=356 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=9410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 52.232130][ T23] audit: type=1400 audit(1738307037.400:4348): avc: denied { ioctl } for pid=356 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=9410 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 52.283543][ T1942] EXT4-fs (loop2): 1 orphan inode deleted [ 52.296415][ T1942] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 52.306799][ T23] audit: type=1400 audit(1738307037.410:4349): avc: denied { map_read map_write } for pid=1929 comm="syz.2.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 52.330743][ T1942] ext4 filesystem being mounted at /107/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 52.365778][ T23] audit: type=1400 audit(1738307037.410:4350): avc: denied { create } for pid=1929 comm="syz.2.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.452816][ T23] audit: type=1400 audit(1738307037.410:4351): avc: denied { create } for pid=1929 comm="syz.2.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.793892][ T23] audit: type=1400 audit(1738307037.410:4352): avc: denied { write } for pid=1929 comm="syz.2.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.858772][ T23] audit: type=1400 audit(1738307037.410:4353): avc: denied { module_request } for pid=1929 comm="syz.2.625" kmod="net-pf-16-proto-16-family-devlink" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 53.133957][ T1975] EXT4-fs (loop3): Unsupported blocksize for fs encryption [ 53.212293][ T13] hid-generic 0000:0003:0000.0008: unknown main item tag 0x0 [ 53.224217][ T13] hid-generic 0000:0003:0000.0008: unknown main item tag 0x0 [ 53.247028][ T13] hid-generic 0000:0003:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz1 [ 53.785714][ T2004] device bridge_slave_0 left promiscuous mode [ 53.792284][ T2004] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.802546][ T2004] device bridge_slave_1 left promiscuous mode [ 53.809499][ T2004] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.106478][ T2010] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 54.147251][ T2019] SELinux: failed to load policy [ 54.163232][ T2021] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13 sclass=netlink_route_socket pid=2021 comm=syz.2.657 [ 54.322240][ T2028] EXT4-fs (loop1): can't mount with dioread_nolock if block size != PAGE_SIZE [ 54.506030][ T2044] netlink: 'syz.1.679': attribute type 13 has an invalid length. [ 54.541559][ T2044] gretap0: refused to change device tx_queue_len [ 54.738491][ T2044] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 54.975474][ T2063] EXT4-fs (loop4): Ignoring removed oldalloc option [ 55.190692][ T2074] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 55.200416][ T2074] EXT4-fs (loop4): Unsupported blocksize for fs encryption [ 55.297113][ T2080] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 55.582372][ T2098] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=108 sclass=netlink_route_socket pid=2098 comm=syz.4.691 [ 55.759528][ T2116] syz.4.698[2116] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.086671][ T2137] syz.1.707[2137] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.088988][ T2125] EXT4-fs (loop3): orphan cleanup on readonly fs [ 56.098132][ T2137] syz.1.707[2137] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.130079][ T2125] EXT4-fs warning (device loop3): ext4_enable_quotas:6100: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 56.155597][ T2125] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 56.163110][ T2125] EXT4-fs (loop3): 1 truncate cleaned up [ 56.169351][ T2125] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 56.234150][ T2133] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 56.244472][ T2133] EXT4-fs (loop2): orphan cleanup on readonly fs [ 56.272719][ T2133] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6102: Corrupt filesystem [ 56.282618][ T2133] EXT4-fs (loop2): Remounting filesystem read-only [ 56.289932][ T2133] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:455: comm syz.2.706: Invalid block bitmap block 3 in block_group 0 [ 56.335298][ T2133] EXT4-fs error (device loop2): ext4_map_blocks:617: inode #3: block 1: comm syz.2.706: lblock 6 mapped to illegal pblock 1 (length 1) [ 56.370971][ T2133] EXT4-fs error (device loop2): ext4_map_blocks:617: inode #3: block 48: comm syz.2.706: lblock 0 mapped to illegal pblock 48 (length 1) [ 56.413341][ T2133] EXT4-fs (loop2): 1 orphan inode deleted [ 56.424619][ T2133] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000008,data_err=abort,minixdf,errors=remount-ro,abort,noblock_validity,barrier,journal_dev=0x0000000000000f35, [ 56.447024][ T2161] serio: Serial port ptm0 [ 56.483195][ T2164] EXT4-fs (loop3): Unsupported blocksize for fs encryption [ 56.500784][ T2133] EXT4-fs error (device loop2): ext4_map_blocks:617: inode #2: block 16: comm syz.2.706: lblock 0 mapped to illegal pblock 16 (length 1) [ 56.521399][ T2170] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2170 comm=syz.4.721 [ 56.570473][ T2133] EXT4-fs error (device loop2): ext4_map_blocks:617: inode #2: block 16: comm syz.2.706: lblock 0 mapped to illegal pblock 16 (length 1) [ 56.586610][ T2133] EXT4-fs error (device loop2): ext4_map_blocks:617: inode #2: block 16: comm syz.2.706: lblock 0 mapped to illegal pblock 16 (length 1) [ 56.817176][ T23] kauditd_printk_skb: 867 callbacks suppressed [ 56.817186][ T23] audit: type=1400 audit(1738307042.360:5208): avc: denied { read write } for pid=353 comm="syz-executor" name="loop2" dev="devtmpfs" ino=9408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 56.852584][ T23] audit: type=1400 audit(1738307042.360:5209): avc: denied { read write open } for pid=353 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=9408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 56.878852][ T23] audit: type=1400 audit(1738307042.360:5210): avc: denied { ioctl } for pid=353 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=9408 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 56.926783][ T2190] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 57.035305][ T2190] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x00000000000001ff,data_err=abort,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue [ 57.060069][ T2207] netlink: 20 bytes leftover after parsing attributes in process `syz.0.735'. [ 57.068307][ T23] audit: type=1400 audit(1738307042.360:5211): avc: denied { read write } for pid=355 comm="syz-executor" name="loop1" dev="devtmpfs" ino=9407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 57.295343][ T23] audit: type=1400 audit(1738307042.360:5212): avc: denied { open } for pid=355 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=9407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 57.319849][ T23] audit: type=1400 audit(1738307042.420:5213): avc: denied { mounton } for pid=2183 comm="syz.4.730" path="/170/file1" dev="tmpfs" ino=24372 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 57.342411][ T2218] audit: audit_backlog=65 > audit_backlog_limit=64 [ 57.352013][ T23] audit: type=1400 audit(1738307042.420:5214): avc: denied { ioctl } for pid=355 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=9407 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 57.355291][ T2212] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 57.386825][ T2218] audit: audit_lost=11 audit_rate_limit=0 audit_backlog_limit=64 [ 57.396788][ T23] audit: type=1326 audit(1738307042.450:5215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2192 comm="syz.0.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9df234dda9 code=0x7ffc0000 [ 57.472192][ T2212] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c119, mo2=0002] [ 57.488395][ T2212] System zones: 0-1, 3-12 [ 57.504718][ T2212] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,max_dir_size_kb=0x0000000000000009,nombcache,norecovery,data_err=ignore,acl,debug,sysvgroups,nomblk_io_submit,,errors=continue [ 57.738739][ T2236] EXT4-fs (loop2): Unsupported blocksize for fs encryption [ 58.474267][ T2242] netlink: 32 bytes leftover after parsing attributes in process `syz.3.747'. [ 58.511291][ T2242] PF_BRIDGE: br_mdb_parse() with unknown ifindex [ 58.563389][ T2252] device syzkaller0 entered promiscuous mode [ 58.619171][ T2249] EXT4-fs (loop2): error: could not find journal device path: error -2 [ 58.672065][ T2259] syz.0.754[2259] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.672097][ T2259] syz.0.754[2259] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.017506][ T2280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.760'. [ 59.212612][ T2291] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=108 sclass=netlink_route_socket pid=2291 comm=syz.0.766 [ 59.298834][ T2300] syz.2.770[2300] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.298879][ T2300] syz.2.770[2300] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.362277][ T2290] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 59.761979][ T2349] SELinux: Context system_u:object_r:mount_exec_t:s0 is not valid (left unmapped). [ 59.862478][ T2347] EXT4-fs (loop1): Unsupported blocksize for fs encryption [ 60.202524][ T2368] netlink: 44 bytes leftover after parsing attributes in process `syz.3.799'. [ 60.735973][ T2393] EXT4-fs (loop3): Mount option "norecovery" incompatible with ext2 [ 60.830421][ T2407] netlink: 96 bytes leftover after parsing attributes in process `syz.0.817'. [ 61.059438][ T2399] EXT4-fs (loop2): orphan cleanup on readonly fs [ 61.069502][ T2399] EXT4-fs error (device loop2): ext4_validate_block_bitmap:418: comm syz.2.815: bg 0: block 248: padding at end of block bitmap is not set [ 61.087458][ T2399] EXT4-fs (loop2): 1 truncate cleaned up [ 61.096677][ T2399] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 61.194303][ T2415] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 61.236639][ T2415] EXT4-fs (loop4): Unsupported blocksize for fs encryption [ 61.859019][ T23] kauditd_printk_skb: 797 callbacks suppressed [ 61.859027][ T23] audit: type=1400 audit(1738307047.400:6007): avc: denied { prog_load } for pid=2436 comm="syz.1.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 61.910854][ T23] audit: type=1400 audit(1738307047.400:6008): avc: denied { prog_load } for pid=2436 comm="syz.1.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 61.960938][ T2443] netlink: 4 bytes leftover after parsing attributes in process `syz.3.829'. [ 61.965234][ T23] audit: type=1400 audit(1738307047.410:6009): avc: denied { prog_load } for pid=2437 comm="syz.3.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 61.976656][ T2443] device bridge_slave_1 left promiscuous mode [ 61.994335][ T2443] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.000828][ T23] audit: type=1400 audit(1738307047.430:6010): avc: denied { prog_run } for pid=2437 comm="syz.3.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 62.022560][ T23] audit: type=1400 audit(1738307047.440:6011): avc: denied { read write } for pid=354 comm="syz-executor" name="loop3" dev="devtmpfs" ino=9409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 62.046670][ T2443] device bridge_slave_0 left promiscuous mode [ 62.047593][ T23] audit: type=1400 audit(1738307047.440:6012): avc: denied { open } for pid=354 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=9409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 62.053036][ T2443] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.077296][ T23] audit: type=1400 audit(1738307047.440:6013): avc: denied { ioctl } for pid=354 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=9409 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 62.109484][ T23] audit: type=1400 audit(1738307047.470:6014): avc: denied { read write } for pid=355 comm="syz-executor" name="loop1" dev="devtmpfs" ino=9407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 62.140741][ T23] audit: type=1400 audit(1738307047.470:6015): avc: denied { open } for pid=355 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=9407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 62.167205][ T2449] EXT4-fs (loop1): orphan cleanup on readonly fs [ 62.174179][ T2449] EXT4-fs error (device loop1): ext4_validate_block_bitmap:418: comm syz.1.832: bg 0: block 248: padding at end of block bitmap is not set [ 62.220145][ T23] audit: type=1400 audit(1738307047.470:6016): avc: denied { ioctl } for pid=355 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=9407 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 62.250202][ T2449] EXT4-fs (loop1): 1 truncate cleaned up [ 62.260952][ T2449] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 62.279471][ T2454] EXT4-fs (loop2): Unsupported blocksize for fs encryption [ 62.305694][ T2455] ================================================================== [ 62.313583][ T2455] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x599/0x650 [ 62.322584][ T2455] Read of size 1 at addr ffff8881e600bbd8 by task syz.4.834/2455 [ 62.330126][ T2455] [ 62.332316][ T2455] CPU: 1 PID: 2455 Comm: syz.4.834 Not tainted 5.4.289-syzkaller-00025-g49530c73f82d #0 [ 62.341847][ T2455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 62.351746][ T2455] Call Trace: [ 62.354873][ T2455] dump_stack+0x1d8/0x241 [ 62.359035][ T2455] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 62.364674][ T2455] ? printk+0xd1/0x111 [ 62.368581][ T2455] ? xfrm_policy_inexact_list_reinsert+0x599/0x650 [ 62.374916][ T2455] ? wake_up_klogd+0xb2/0xf0 [ 62.379346][ T2455] ? xfrm_policy_inexact_list_reinsert+0x599/0x650 [ 62.385678][ T2455] print_address_description+0x8c/0x600 [ 62.391062][ T2455] ? panic+0x89d/0x89d [ 62.394969][ T2455] ? xfrm_policy_inexact_list_reinsert+0x599/0x650 [ 62.401301][ T2455] __kasan_report+0xf3/0x120 [ 62.405726][ T2455] ? xfrm_policy_inexact_list_reinsert+0x599/0x650 [ 62.412061][ T2455] kasan_report+0x30/0x60 [ 62.416230][ T2455] xfrm_policy_inexact_list_reinsert+0x599/0x650 [ 62.422396][ T2455] ? xfrm_policy_addr_delta+0x234/0x340 [ 62.427773][ T2455] xfrm_policy_inexact_insert_node+0x8f3/0xb00 [ 62.433762][ T2455] ? xfrm_policy_inexact_alloc_bin+0x5b2/0x1440 [ 62.439836][ T2455] xfrm_policy_inexact_alloc_chain+0x4f9/0xb10 [ 62.445832][ T2455] xfrm_policy_inexact_insert+0x69/0x10e0 [ 62.451382][ T2455] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 62.456240][ T2455] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 62.461275][ T2455] ? policy_hash_bysel+0x12c/0x6f0 [ 62.466220][ T2455] ? memcpy+0x38/0x50 [ 62.470041][ T2455] xfrm_policy_insert+0xe1/0x8a0 [ 62.474816][ T2455] xfrm_add_policy+0x4f2/0x980 [ 62.479415][ T2455] ? __nla_validate+0x50/0x50 [ 62.483928][ T2455] ? xfrm_dump_sa_done+0xc0/0xc0 [ 62.488700][ T2455] ? __nla_parse+0x3a/0x50 [ 62.492968][ T2455] xfrm_user_rcv_msg+0x689/0x9b0 [ 62.497733][ T2455] ? _raw_spin_unlock_irqrestore+0x57/0x80 [ 62.503376][ T2455] ? xfrm_netlink_rcv+0x80/0x80 [ 62.508059][ T2455] ? slow_avc_audit+0x26c/0x3c0 [ 62.512749][ T2455] ? avc_has_perm+0x1f5/0x260 [ 62.517255][ T2455] ? avc_has_perm+0x21a/0x260 [ 62.521772][ T2455] ? avc_has_perm_noaudit+0x3d0/0x3d0 [ 62.526979][ T2455] netlink_rcv_skb+0x1d5/0x420 [ 62.531579][ T2455] ? xfrm_netlink_rcv+0x80/0x80 [ 62.536265][ T2455] ? nla_put_string+0x30/0x30 [ 62.540777][ T2455] ? mutex_trylock+0xa0/0xa0 [ 62.545203][ T2455] ? __netlink_lookup+0x369/0x390 [ 62.550066][ T2455] xfrm_netlink_rcv+0x6e/0x80 [ 62.554577][ T2455] netlink_unicast+0x936/0xb20 [ 62.559180][ T2455] ? netlink_detachskb+0x90/0x90 [ 62.563953][ T2455] ? __virt_addr_valid+0x20e/0x2a0 [ 62.568898][ T2455] netlink_sendmsg+0xa18/0xcf0 [ 62.573499][ T2455] ? netlink_getsockopt+0x550/0x550 [ 62.578530][ T2455] ? import_iovec+0x1bb/0x380 [ 62.583045][ T2455] ? security_socket_sendmsg+0x7d/0xa0 [ 62.588348][ T2455] ? netlink_getsockopt+0x550/0x550 [ 62.593380][ T2455] ____sys_sendmsg+0x5ac/0x8f0 [ 62.597978][ T2455] ? __sys_sendmsg_sock+0x2b0/0x2b0 [ 62.603097][ T2455] ? percpu_counter_add_batch+0x14d/0x170 [ 62.608651][ T2455] __sys_sendmsg+0x28b/0x380 [ 62.613076][ T2455] ? ____sys_sendmsg+0x8f0/0x8f0 [ 62.617852][ T2455] ? security_socket_post_create+0x96/0xc0 [ 62.623494][ T2455] ? __do_page_fault+0x725/0xbb0 [ 62.628266][ T2455] do_syscall_64+0xca/0x1c0 [ 62.632605][ T2455] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 62.638333][ T2455] RIP: 0033:0x7efc4f3bdda9 [ 62.642597][ T2455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.662024][ T2455] RSP: 002b:00007efc4da28038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 62.670271][ T2455] RAX: ffffffffffffffda RBX: 00007efc4f5d6fa0 RCX: 00007efc4f3bdda9 [ 62.678079][ T2455] RDX: 0000000000004000 RSI: 0000000020000580 RDI: 0000000000000005 [ 62.685891][ T2455] RBP: 00007efc4f43f2a0 R08: 0000000000000000 R09: 0000000000000000 [ 62.693700][ T2455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.701514][ T2455] R13: 0000000000000000 R14: 00007efc4f5d6fa0 R15: 00007ffc990e1c98 [ 62.709325][ T2455] [ 62.711492][ T2455] Allocated by task 2455: [ 62.715667][ T2455] __kasan_kmalloc+0x171/0x210 [ 62.720261][ T2455] sk_prot_alloc+0xbd/0x3e0 [ 62.724600][ T2455] sk_alloc+0x35/0x2f0 [ 62.728510][ T2455] pfkey_create+0x122/0x670 [ 62.732848][ T2455] __sock_create+0x3cb/0x7a0 [ 62.737272][ T2455] __sys_socket+0x132/0x370 [ 62.741618][ T2455] __x64_sys_socket+0x76/0x80 [ 62.746126][ T2455] do_syscall_64+0xca/0x1c0 [ 62.750480][ T2455] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 62.756190][ T2455] [ 62.758359][ T2455] Freed by task 352: [ 62.762099][ T2455] __kasan_slab_free+0x1b5/0x270 [ 62.766870][ T2455] kfree+0x123/0x370 [ 62.770602][ T2455] consume_skb+0xa5/0x2a0 [ 62.774770][ T2455] netlink_unicast+0x93e/0xb20 [ 62.779370][ T2455] netlink_sendmsg+0xa18/0xcf0 [ 62.783969][ T2455] ____sys_sendmsg+0x5ac/0x8f0 [ 62.788569][ T2455] __sys_sendmsg+0x28b/0x380 [ 62.792994][ T2455] do_syscall_64+0xca/0x1c0 [ 62.797333][ T2455] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 62.803058][ T2455] [ 62.805230][ T2455] The buggy address belongs to the object at ffff8881e600b800 [ 62.805230][ T2455] which belongs to the cache kmalloc-1k of size 1024 [ 62.819121][ T2455] The buggy address is located 984 bytes inside of [ 62.819121][ T2455] 1024-byte region [ffff8881e600b800, ffff8881e600bc00) [ 62.832306][ T2455] The buggy address belongs to the page: [ 62.837793][ T2455] page:ffffea0007980200 refcount:1 mapcount:0 mapping:ffff8881f5c02280 index:0x0 compound_mapcount: 0 [ 62.848542][ T2455] flags: 0x8000000000010200(slab|head) [ 62.853840][ T2455] raw: 8000000000010200 dead000000000100 dead000000000122 ffff8881f5c02280 [ 62.862256][ T2455] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 62.870669][ T2455] page dumped because: kasan: bad access detected [ 62.876927][ T2455] page_owner tracks the page as allocated [ 62.882477][ T2455] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL) [ 62.898712][ T2455] prep_new_page+0x18f/0x370 [ 62.903135][ T2455] get_page_from_freelist+0x2d13/0x2d90 [ 62.908516][ T2455] __alloc_pages_nodemask+0x393/0x840 [ 62.913721][ T2455] alloc_slab_page+0x39/0x3c0 [ 62.918235][ T2455] new_slab+0x97/0x440 [ 62.922139][ T2455] ___slab_alloc+0x2fe/0x490 [ 62.926567][ T2455] __slab_alloc+0x62/0xa0 [ 62.930732][ T2455] __kmalloc+0x19b/0x2e0 [ 62.934814][ T2455] qdisc_alloc+0x78/0x7b0 [ 62.938979][ T2455] qdisc_create_dflt+0x60/0x250 [ 62.943665][ T2455] mq_init+0x2c8/0x6b0 [ 62.947572][ T2455] qdisc_create_dflt+0x129/0x250 [ 62.952352][ T2455] dev_activate+0x11f/0xc00 [ 62.956687][ T2455] __dev_open+0x302/0x420 [ 62.960850][ T2455] __dev_change_flags+0x1db/0x6e0 [ 62.965709][ T2455] dev_change_flags+0x87/0x190 [ 62.970309][ T2455] page last free stack trace: [ 62.974825][ T2455] __free_pages_ok+0x847/0x950 [ 62.979424][ T2455] __free_pages+0x91/0x140 [ 62.983676][ T2455] __free_slab+0x221/0x2e0 [ 62.987929][ T2455] unfreeze_partials+0x14e/0x180 [ 62.992704][ T2455] put_cpu_partial+0x44/0x180 [ 62.997217][ T2455] __slab_free+0x297/0x360 [ 63.001471][ T2455] qlist_free_all+0x43/0xb0 [ 63.005808][ T2455] quarantine_reduce+0x1d9/0x210 [ 63.010581][ T2455] __kasan_kmalloc+0x41/0x210 [ 63.015096][ T2455] kmem_cache_alloc+0xd9/0x250 [ 63.019697][ T2455] getname_flags+0xb8/0x4e0 [ 63.024033][ T2455] user_path_at_empty+0x28/0x50 [ 63.028721][ T2455] vfs_statx+0x115/0x210 [ 63.032799][ T2455] __se_sys_newfstatat+0xce/0x770 [ 63.037660][ T2455] do_syscall_64+0xca/0x1c0 [ 63.042003][ T2455] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 63.047724][ T2455] [ 63.049893][ T2455] Memory state around the buggy address: [ 63.055366][ T2455] ffff8881e600ba80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 63.063265][ T2455] ffff8881e600bb00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 63.071162][ T2455] >ffff8881e600bb80: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 63.079056][ T2455] ^ [ 63.085832][ T2455] ffff8881e600bc00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 63.093729][ T2455] ffff8881e600bc80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 63.101624][ T2455] ================================================================== [ 63.109522][ T2455] Disabling lock debugging due to kernel taint [ 67.151908][ T23] kauditd_printk_skb: 116 callbacks suppressed [ 67.151917][ T23] audit: type=1400 audit(1738307052.690:6131): avc: denied { read } for pid=145 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 67.179611][ T23] audit: type=1400 audit(1738307052.690:6132): avc: denied { search } for pid=145 comm="syslogd" name="/" dev="tmpfs" ino=9666 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.201149][ T23] audit: type=1400 audit(1738307052.690:6133): avc: denied { append } for pid=145 comm="syslogd" name="messages" dev="tmpfs" ino=17633 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 67.223448][ T23] audit: type=1400 audit(1738307052.690:6134): avc: denied { open } for pid=145 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=17633 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 67.246006][ T23] audit: type=1400 audit(1738307052.690:6135): avc: denied { getattr } for pid=145 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=17633 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 68.159073][ T23] audit: type=1400 audit(1738307053.700:6136): avc: denied { read } for pid=145 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 68.180781][ T23] audit: type=1400 audit(1738307053.700:6137): avc: denied { search } for pid=145 comm="syslogd" name="/" dev="tmpfs" ino=9666 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.202307][ T23] audit: type=1400 audit(1738307053.700:6138): avc: denied { append } for pid=145 comm="syslogd" name="messages" dev="tmpfs" ino=17633 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 68.224611][ T23] audit: type=1400 audit(1738307053.700:6139): avc: denied { open } for pid=145 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=17633 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 68.247169][ T23] audit: type=1400 audit(1738307053.700:6140): avc: denied { getattr } for pid=145 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=17633 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 72.176747][ T23] kauditd_printk_skb: 15 callbacks suppressed [ 72.176757][ T23] audit: type=1400 audit(1738307057.710:6156): avc: denied { read } for pid=145 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 72.204660][ T23] audit: type=1400 audit(1738307057.720:6157): avc: denied { search } for pid=145 comm="syslogd" name="/" dev="tmpfs" ino=9666 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.226660][ T23] audit: type=1400 audit(1738307057.720:6158): avc: denied { append } for pid=145 comm="syslogd" name="messages" dev="tmpfs" ino=17633 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 72.249017][ T23] audit: type=1400 audit(1738307057.720:6159): avc: denied { open } for pid=145 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=17633 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1