last executing test programs: 1.290034424s ago: executing program 4 (id=1525): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000d00), 0x2000, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$EVIOCGBITSND(r0, 0x40044591, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x800000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 485.442381ms ago: executing program 1 (id=1549): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010000000000fcdbcf2554"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 430.742011ms ago: executing program 1 (id=1554): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) alarm(0x101) 430.560551ms ago: executing program 4 (id=1555): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x22}}, @address_request={0x11, 0x0, 0x0, 0x1}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 348.440503ms ago: executing program 3 (id=1558): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000040)={0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0}) 347.825923ms ago: executing program 1 (id=1568): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r2], 0x68}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x6}, {0xd}, {0x11, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) 287.093154ms ago: executing program 3 (id=1560): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000001f80)=r1, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 249.990035ms ago: executing program 0 (id=1561): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x200}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80884}, 0x20000000) 249.779405ms ago: executing program 2 (id=1562): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) 218.377835ms ago: executing program 2 (id=1563): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) 216.545665ms ago: executing program 0 (id=1564): io_setup(0x2, &(0x7f0000000180)) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$MON_IOCG_STATS(r2, 0x40189206, &(0x7f0000000180)) 207.661856ms ago: executing program 3 (id=1565): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0xb}, 0x18) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000, 0x0, 0x4000000}, 0x20) 184.145966ms ago: executing program 4 (id=1566): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknod$loop(&(0x7f00000000c0)='./file1/file4/file6\x00', 0x8, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file2\x00', 0x1) 173.519146ms ago: executing program 3 (id=1567): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000780)='sys_enter\x00', r1}, 0x18) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0) 172.887567ms ago: executing program 2 (id=1578): symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)=ANY=[], 0x0, 0x1200) 158.360547ms ago: executing program 4 (id=1569): ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x0, 0x0}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0x65) 137.802597ms ago: executing program 0 (id=1570): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 137.362317ms ago: executing program 2 (id=1571): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000002a00)=@filename='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00', 0xee00, 0x0) 123.785537ms ago: executing program 3 (id=1572): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000eeff110000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0) 91.588748ms ago: executing program 1 (id=1573): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000380)={0x34, r2, 0x1, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 91.221318ms ago: executing program 4 (id=1574): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x8, 0xa}, 0x80, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) utimes(&(0x7f0000000440)='./file0\x00', 0x0) 88.477278ms ago: executing program 3 (id=1584): io_setup(0x2, &(0x7f0000000180)) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$MON_IOCG_STATS(r2, 0x40189206, &(0x7f0000000180)) 60.573658ms ago: executing program 0 (id=1575): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r1, 0x2284, &(0x7f0000000080)) 43.251289ms ago: executing program 1 (id=1576): syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x18000, &(0x7f0000000200)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c6e6f646f74732c6e6f646f74732c646f74732c646f74732c646f74732c00009191ba4a9b6388d54828a3c3830c42987338a9190197eb172a21b7cfa7523e2b311d1f21fe773c1a557203941edefa8945730f6addf5d620d186e7a427df2c849c4743dde508a71789e24605df9a7108223b334f24b6ef3973fd06e3c8d4d12c"], 0x1, 0x1ba, &(0x7f00000002c0)="$eJzs3b+KE1EUB+AzJquj1dZiMWBjFf88wYqsIA4ISgqtFHa12BXBbUar+BTWNr6Kb+BzSKoUQiTekMQYUcI4k2y+r8khv9xw7iXkJsXceX7t9cnRm7OXn798jDzPonsQBzHKYj8uRCeSQQAA58loPI5v46TtXgCAZqy1/3/3gwEAtpn//wCwe+z/ALB7njx99vBuWR4+Loo8Yjio+lU/Pab8/oPy8Fbx0/581LCq+p1Zfjvlxa/53uUr0/zOyvxi3Lie8kl271G5lF+Ko7+3n9WwBAAAAAAAAAAAAAAAAAAAAAAA0LheMbPyfJ9e7095qhbOB1o6v6cbV7uNTQMAAAAAAAAAAAAAAAAAAAC22tm79ycvTk+P39ZRvIp63qep4tPef1iELS2+3kxrMXkmn344NqKxxSJLfQ02pZ+2iuM1h3ci4l9f3M73EQAAAAAAAAAAAAAAAAAA7LL5Rb9tdwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7Znf/7+e4kP8HrU9RwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+BEAAP//YxtHxg==") mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000240)={@private1}, 0x0) fsync(r0) 43.071799ms ago: executing program 2 (id=1577): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000800008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) setpgid(0x0, 0x0) 26.757759ms ago: executing program 0 (id=1579): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000000)=0xc) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000180)={r2, @in={{0x2, 0x4e20, @empty}}, 0x7, 0x4002}, 0x90) 23.594089ms ago: executing program 2 (id=1580): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x52, &(0x7f0000000040)=0x2, 0x4) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000000140)=""/182, 0xb6}], 0x1) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x44000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 20.16895ms ago: executing program 1 (id=1581): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8ab8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, 0x0, 0x5000) 8.23539ms ago: executing program 4 (id=1582): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2200054, &(0x7f0000000000), 0x1, 0x236, &(0x7f0000000300)="$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") 0s ago: executing program 0 (id=1583): syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3445}}, 0x0, 0x0, 0x0}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) setpriority(0x2, 0xff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.156' (ED25519) to the list of known hosts. [ 24.278450][ T29] audit: type=1400 audit(1757005984.696:62): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.279277][ T3291] cgroup: Unknown subsys name 'net' [ 24.301396][ T29] audit: type=1400 audit(1757005984.696:63): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.329019][ T29] audit: type=1400 audit(1757005984.726:64): avc: denied { unmount } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.429772][ T3291] cgroup: Unknown subsys name 'cpuset' [ 24.435990][ T3291] cgroup: Unknown subsys name 'rlimit' [ 24.564794][ T29] audit: type=1400 audit(1757005984.986:65): avc: denied { setattr } for pid=3291 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.588235][ T29] audit: type=1400 audit(1757005984.986:66): avc: denied { create } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.608919][ T29] audit: type=1400 audit(1757005984.986:67): avc: denied { write } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.609086][ T3296] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.629288][ T29] audit: type=1400 audit(1757005984.986:68): avc: denied { read } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.658789][ T29] audit: type=1400 audit(1757005984.996:69): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.682919][ T3291] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.683805][ T29] audit: type=1400 audit(1757005984.996:70): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 24.716215][ T29] audit: type=1400 audit(1757005985.066:71): avc: denied { relabelto } for pid=3296 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.400958][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 26.447130][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 26.459940][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 26.480637][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 26.503485][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.510680][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.518507][ T3304] bridge_slave_0: entered allmulticast mode [ 26.525019][ T3304] bridge_slave_0: entered promiscuous mode [ 26.545076][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.552248][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.559446][ T3304] bridge_slave_1: entered allmulticast mode [ 26.565718][ T3304] bridge_slave_1: entered promiscuous mode [ 26.603199][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.634864][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.646236][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.653339][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.660653][ T3310] bridge_slave_0: entered allmulticast mode [ 26.667227][ T3310] bridge_slave_0: entered promiscuous mode [ 26.673993][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.681080][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.688165][ T3310] bridge_slave_1: entered allmulticast mode [ 26.704686][ T3310] bridge_slave_1: entered promiscuous mode [ 26.715442][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.722793][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.730011][ T3308] bridge_slave_0: entered allmulticast mode [ 26.736336][ T3308] bridge_slave_0: entered promiscuous mode [ 26.762179][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.769272][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.776385][ T3308] bridge_slave_1: entered allmulticast mode [ 26.782902][ T3308] bridge_slave_1: entered promiscuous mode [ 26.794053][ T3304] team0: Port device team_slave_0 added [ 26.799936][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 26.809342][ T3304] team0: Port device team_slave_1 added [ 26.815209][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.822438][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.829691][ T3303] bridge_slave_0: entered allmulticast mode [ 26.835955][ T3303] bridge_slave_0: entered promiscuous mode [ 26.848490][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.873428][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.880752][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.888584][ T3303] bridge_slave_1: entered allmulticast mode [ 26.895110][ T3303] bridge_slave_1: entered promiscuous mode [ 26.906581][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.916574][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.929102][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.943240][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.950221][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.976232][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.005979][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.013099][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.039067][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.050840][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.063635][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.084303][ T3308] team0: Port device team_slave_0 added [ 27.096468][ T3310] team0: Port device team_slave_0 added [ 27.103116][ T3310] team0: Port device team_slave_1 added [ 27.119324][ T3308] team0: Port device team_slave_1 added [ 27.132461][ T3303] team0: Port device team_slave_0 added [ 27.138555][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.145556][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.171600][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.197453][ T3303] team0: Port device team_slave_1 added [ 27.203566][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.210577][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.237234][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.252974][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.260070][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.286168][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.317895][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.324983][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.351328][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.362148][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.369371][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.377689][ T3315] bridge_slave_0: entered allmulticast mode [ 27.384123][ T3315] bridge_slave_0: entered promiscuous mode [ 27.390992][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.398103][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.405449][ T3315] bridge_slave_1: entered allmulticast mode [ 27.411957][ T3315] bridge_slave_1: entered promiscuous mode [ 27.420546][ T3304] hsr_slave_0: entered promiscuous mode [ 27.426994][ T3304] hsr_slave_1: entered promiscuous mode [ 27.434171][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.441140][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.467061][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.480686][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.487886][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.513975][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.560362][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.590032][ T3303] hsr_slave_0: entered promiscuous mode [ 27.596018][ T3303] hsr_slave_1: entered promiscuous mode [ 27.602064][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 27.607841][ T3303] Cannot create hsr debugfs directory [ 27.614481][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.629750][ T3308] hsr_slave_0: entered promiscuous mode [ 27.635829][ T3308] hsr_slave_1: entered promiscuous mode [ 27.641553][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 27.647293][ T3308] Cannot create hsr debugfs directory [ 27.672189][ T3310] hsr_slave_0: entered promiscuous mode [ 27.678067][ T3310] hsr_slave_1: entered promiscuous mode [ 27.684127][ T3310] debugfs: 'hsr0' already exists in 'hsr' [ 27.689918][ T3310] Cannot create hsr debugfs directory [ 27.709372][ T3315] team0: Port device team_slave_0 added [ 27.732231][ T3315] team0: Port device team_slave_1 added [ 27.767574][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.774626][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.800796][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.824847][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.831937][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.858070][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.897364][ T3315] hsr_slave_0: entered promiscuous mode [ 27.903433][ T3315] hsr_slave_1: entered promiscuous mode [ 27.909303][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 27.915028][ T3315] Cannot create hsr debugfs directory [ 28.020156][ T3304] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.028517][ T3304] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.040861][ T3304] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.049600][ T3304] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.072016][ T3303] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.084679][ T3303] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.096926][ T3303] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.107610][ T3303] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.121109][ T3308] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.136794][ T3308] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.154682][ T3308] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.163307][ T3308] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.190839][ T3310] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.200333][ T3310] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.208824][ T3310] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.225460][ T3310] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.252227][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.259413][ T3315] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.268657][ T3315] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.279960][ T3315] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.289128][ T3315] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.329601][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.361205][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.369560][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.376730][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.385546][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.392710][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.410070][ T3304] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.420808][ T3304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.434530][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.465577][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.483354][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.493659][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.506788][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.514001][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.523363][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.530671][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.545542][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.553123][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.562756][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.569877][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.582902][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.598971][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.608531][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.617086][ T2595] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.624177][ T2595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.633899][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.641172][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.684192][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.704711][ T2595] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.711847][ T2595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.732273][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.739624][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.796035][ T3310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.823560][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.851458][ T3304] veth0_vlan: entered promiscuous mode [ 28.858029][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.872505][ T3304] veth1_vlan: entered promiscuous mode [ 28.887731][ T3304] veth0_macvtap: entered promiscuous mode [ 28.909070][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.920783][ T3304] veth1_macvtap: entered promiscuous mode [ 28.942548][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.953851][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.977516][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.000032][ T2595] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.039440][ T3303] veth0_vlan: entered promiscuous mode [ 29.048130][ T3303] veth1_vlan: entered promiscuous mode [ 29.072631][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.080943][ T2595] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.103967][ T2595] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.118656][ T2595] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.130395][ T3303] veth0_macvtap: entered promiscuous mode [ 29.156579][ T3303] veth1_macvtap: entered promiscuous mode [ 29.164248][ T3310] veth0_vlan: entered promiscuous mode [ 29.174636][ T3304] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.186560][ T3310] veth1_vlan: entered promiscuous mode [ 29.234427][ T3310] veth0_macvtap: entered promiscuous mode [ 29.250993][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.269060][ T3315] veth0_vlan: entered promiscuous mode [ 29.278362][ T3310] veth1_macvtap: entered promiscuous mode [ 29.293827][ T3315] veth1_vlan: entered promiscuous mode [ 29.307347][ T3308] veth0_vlan: entered promiscuous mode [ 29.320322][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.336650][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.353431][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.360748][ T2595] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.397923][ T2595] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.414520][ T3308] veth1_vlan: entered promiscuous mode [ 29.425427][ T2595] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.435397][ T3315] veth0_macvtap: entered promiscuous mode [ 29.450489][ T2595] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.460182][ T3315] veth1_macvtap: entered promiscuous mode [ 29.478625][ T3308] veth0_macvtap: entered promiscuous mode [ 29.500372][ T3308] veth1_macvtap: entered promiscuous mode [ 29.508397][ T3479] SELinux: Context system_u:object_r:getty_var_run_t:s0 is not valid (left unmapped). [ 29.518511][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 29.518528][ T29] audit: type=1400 audit(1757005989.946:99): avc: denied { relabelto } for pid=3478 comm="syz.0.1" name="0" dev="tmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:getty_var_run_t:s0" [ 29.518687][ T2595] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.525825][ T29] audit: type=1400 audit(1757005989.946:100): avc: denied { associate } for pid=3478 comm="syz.0.1" name="0" dev="tmpfs" ino=13 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:getty_var_run_t:s0" [ 29.564164][ T2595] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.601446][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.611476][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.639888][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.676739][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.694027][ T2595] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.705685][ T29] audit: type=1400 audit(1757005990.086:101): avc: denied { create } for pid=3482 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 29.725186][ T29] audit: type=1400 audit(1757005990.096:102): avc: denied { ioctl } for pid=3482 comm="syz.0.8" path="socket:[4547]" dev="sockfs" ino=4547 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 29.749634][ T29] audit: type=1400 audit(1757005990.096:103): avc: denied { connect } for pid=3482 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 29.769229][ T29] audit: type=1400 audit(1757005990.096:104): avc: denied { write } for pid=3482 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 29.794484][ T2595] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.832464][ T2595] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.854263][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.874169][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.883673][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.902259][ T3496] netlink: 'syz.0.10': attribute type 6 has an invalid length. [ 29.933951][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.943458][ T29] audit: type=1400 audit(1757005990.346:105): avc: denied { create } for pid=3493 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 29.963040][ T29] audit: type=1400 audit(1757005990.346:106): avc: denied { create } for pid=3493 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.983859][ T29] audit: type=1400 audit(1757005990.346:107): avc: denied { write } for pid=3493 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.004387][ T29] audit: type=1400 audit(1757005990.346:108): avc: denied { read } for pid=3493 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.036629][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.045970][ T3506] loop0: detected capacity change from 0 to 128 [ 30.046195][ T3503] netlink: 400 bytes leftover after parsing attributes in process `syz.4.5'. [ 30.062592][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.071668][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.081062][ T3503] Zero length message leads to an empty skb [ 30.102785][ T3510] syz.2.16 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 30.212552][ T3516] loop3: detected capacity change from 0 to 512 [ 30.291816][ T3516] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.319566][ T3516] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.393587][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.400245][ T3529] syz.4.24 (3529) used greatest stack depth: 10816 bytes left [ 30.811152][ T3566] loop4: detected capacity change from 0 to 128 [ 30.834140][ T3566] FAT-fs (loop4): Directory bread(block 32) failed [ 30.853152][ T3566] FAT-fs (loop4): Directory bread(block 33) failed [ 30.884859][ T3566] FAT-fs (loop4): Directory bread(block 34) failed [ 30.893965][ T3566] FAT-fs (loop4): Directory bread(block 35) failed [ 30.902049][ T3566] FAT-fs (loop4): Directory bread(block 36) failed [ 30.911551][ T3566] FAT-fs (loop4): Directory bread(block 37) failed [ 30.938994][ T3566] FAT-fs (loop4): Directory bread(block 38) failed [ 30.955767][ T3566] FAT-fs (loop4): Directory bread(block 39) failed [ 30.967549][ T3566] FAT-fs (loop4): Directory bread(block 40) failed [ 30.989039][ T3566] FAT-fs (loop4): Directory bread(block 41) failed [ 31.021684][ T3577] loop2: detected capacity change from 0 to 128 [ 31.056020][ T3566] process 'syz.4.40' launched './file2' with NULL argv: empty string added [ 31.129251][ T3566] syz.4.40: attempt to access beyond end of device [ 31.129251][ T3566] loop4: rw=0, sector=4112, nr_sectors = 4 limit=128 [ 31.142528][ T3566] Buffer I/O error on dev loop4, logical block 1028, async page read [ 31.164277][ T3566] syz.4.40: attempt to access beyond end of device [ 31.164277][ T3566] loop4: rw=0, sector=167964, nr_sectors = 4 limit=128 [ 31.177657][ T3566] Buffer I/O error on dev loop4, logical block 41991, async page read [ 31.186270][ T3566] FAT-fs (loop4): Filesystem has been set read-only [ 31.248964][ T3566] syz.4.40: attempt to access beyond end of device [ 31.248964][ T3566] loop4: rw=0, sector=4112, nr_sectors = 4 limit=128 [ 31.262177][ T3566] Buffer I/O error on dev loop4, logical block 1028, async page read [ 31.276263][ T3566] syz.4.40: attempt to access beyond end of device [ 31.276263][ T3566] loop4: rw=0, sector=167964, nr_sectors = 4 limit=128 [ 31.289546][ T3566] Buffer I/O error on dev loop4, logical block 41991, async page read [ 31.583024][ T39] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 31.616072][ T39] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 31.627016][ T3610] netlink: 4 bytes leftover after parsing attributes in process `syz.4.53'. [ 31.636525][ T3609] netlink: 'syz.0.54': attribute type 21 has an invalid length. [ 31.644630][ T39] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 31.659142][ T3609] netlink: 156 bytes leftover after parsing attributes in process `syz.0.54'. [ 31.669573][ T3610] netlink: 32 bytes leftover after parsing attributes in process `syz.4.53'. [ 31.688782][ T39] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 31.748605][ T3617] loop4: detected capacity change from 0 to 1024 [ 31.804764][ T3617] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 31.837747][ T3617] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.969065][ T3617] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.57: bg 0: block 88: padding at end of block bitmap is not set [ 32.035625][ T3617] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 32.091287][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.156634][ T3638] loop2: detected capacity change from 0 to 1024 [ 32.160461][ T3638] ext4: Unknown parameter 'init_i' [ 32.381686][ T3660] netlink: 16 bytes leftover after parsing attributes in process `syz.0.75'. [ 32.415672][ T3659] loop4: detected capacity change from 0 to 4096 [ 32.437500][ T3664] loop2: detected capacity change from 0 to 1024 [ 32.464761][ T3664] EXT4-fs: Ignoring removed bh option [ 32.487444][ T3664] EXT4-fs: inline encryption not supported [ 32.493753][ T3659] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 32.523696][ T3672] loop3: detected capacity change from 0 to 512 [ 32.531213][ T3664] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 32.542848][ T3659] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.556874][ T3664] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 32.601048][ T3672] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 32.628358][ T3664] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.78: lblock 2 mapped to illegal pblock 2 (length 1) [ 32.629293][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.645752][ T3672] System zones: 0-2, 18-18, 34-35 [ 32.657662][ T3672] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.672031][ T3664] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.78: lblock 0 mapped to illegal pblock 48 (length 1) [ 32.672752][ T3672] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.699839][ T3664] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.78: Failed to acquire dquot type 0 [ 32.738737][ T3664] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 32.769477][ T3683] loop4: detected capacity change from 0 to 512 [ 32.773216][ T3664] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.78: mark_inode_dirty error [ 32.794316][ T3664] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 32.813871][ T3664] EXT4-fs (loop2): 1 orphan inode deleted [ 32.829025][ T3683] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 32.832608][ T3671] syz.3.82 (3671) used greatest stack depth: 10728 bytes left [ 32.849080][ T39] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 32.852075][ T3664] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.914728][ T39] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:2: Failed to release dquot type 0 [ 32.945613][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.955915][ T3683] EXT4-fs (loop4): mount failed [ 32.979662][ T3664] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 33.033236][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.116316][ T3705] mmap: syz.1.95 (3705) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 33.181491][ T3716] netlink: 4 bytes leftover after parsing attributes in process `syz.4.99'. [ 33.265664][ T36] kernel read not supported for file /eth0 (pid: 36 comm: kworker/1:1) [ 33.347761][ T3739] loop4: detected capacity change from 0 to 128 [ 33.801563][ T3798] loop4: detected capacity change from 0 to 512 [ 33.817157][ T3799] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 33.842788][ T3798] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 33.855993][ T3798] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 33.875810][ T3798] EXT4-fs (loop4): 1 truncate cleaned up [ 33.893675][ T3798] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.927701][ T3798] EXT4-fs error (device loop4): ext4_ext_precache:632: inode #15: comm syz.4.130: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 34.044296][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.146993][ T3839] loop1: detected capacity change from 0 to 512 [ 34.169620][ T3839] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 34.185293][ T3843] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 34.211480][ T3839] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 34.362838][ T3864] netlink: 28 bytes leftover after parsing attributes in process `syz.3.161'. [ 34.411196][ T3864] netlink: 28 bytes leftover after parsing attributes in process `syz.3.161'. [ 34.470903][ T3882] loop3: detected capacity change from 0 to 256 [ 34.525084][ T29] kauditd_printk_skb: 203 callbacks suppressed [ 34.525101][ T29] audit: type=1400 audit(1757005994.946:308): avc: denied { write } for pid=3887 comm="syz.2.172" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 34.599484][ T3892] netlink: 'syz.2.174': attribute type 1 has an invalid length. [ 34.663734][ T3892] bond1: entered promiscuous mode [ 34.680042][ T29] audit: type=1400 audit(1757005995.096:309): avc: denied { create } for pid=3902 comm="syz.1.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 34.686331][ T3892] 8021q: adding VLAN 0 to HW filter on device bond1 [ 34.736302][ T29] audit: type=1326 audit(1757005995.156:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3911 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f2efebe9 code=0x7ffc0000 [ 34.763420][ T29] audit: type=1326 audit(1757005995.156:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3911 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f2efebe9 code=0x7ffc0000 [ 34.763654][ T3901] 8021q: adding VLAN 0 to HW filter on device bond2 [ 34.787053][ T29] audit: type=1326 audit(1757005995.156:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3911 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fc7f2efebe9 code=0x7ffc0000 [ 34.787085][ T29] audit: type=1326 audit(1757005995.156:313): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3911 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f2efebe9 code=0x7ffc0000 [ 34.787113][ T29] audit: type=1326 audit(1757005995.156:314): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3911 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f2efebe9 code=0x7ffc0000 [ 34.877502][ T3917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.909325][ T3917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.950355][ T3901] bond1: (slave bond2): making interface the new active one [ 34.957728][ T3901] bond2: entered promiscuous mode [ 34.966417][ T29] audit: type=1400 audit(1757005995.296:315): avc: denied { read write } for pid=3916 comm="syz.0.182" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.989940][ T29] audit: type=1400 audit(1757005995.296:316): avc: denied { open } for pid=3916 comm="syz.0.182" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.003103][ T3901] bond1: (slave bond2): Enslaving as an active interface with an up link [ 35.013368][ T29] audit: type=1400 audit(1757005995.296:317): avc: denied { ioctl } for pid=3916 comm="syz.0.182" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.114633][ T3923] 9p: Unknown access argument : -22 [ 35.152532][ T3928] loop3: detected capacity change from 0 to 256 [ 35.510020][ T3974] sd 0:0:1:0: device reset [ 35.613265][ T3988] random: crng reseeded on system resumption [ 35.707232][ T3998] ALSA: seq fatal error: cannot create timer (-19) [ 35.896394][ T4031] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.931868][ T4032] loop2: detected capacity change from 0 to 512 [ 35.946960][ T4038] usb usb1: usbfs: process 4038 (syz.0.236) did not claim interface 4 before use [ 35.972063][ T4031] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.982980][ T4032] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 36.010202][ T9] IPVS: starting estimator thread 0... [ 36.019698][ T4037] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 36.032171][ T4031] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.055797][ T4045] vhci_hcd: default hub control req: 0306 v0300 i0001 l0 [ 36.070362][ T4032] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.233: Failed to acquire dquot type 1 [ 36.099025][ T4044] IPVS: using max 2832 ests per chain, 141600 per kthread [ 36.119865][ T4031] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.144109][ T4032] EXT4-fs (loop2): 1 truncate cleaned up [ 36.151061][ T4054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.242'. [ 36.152591][ T4032] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.178330][ T4056] Illegal XDP return value 1799740127 on prog (id 156) dev N/A, expect packet loss! [ 36.193190][ T4054] ipvlan2: entered allmulticast mode [ 36.199021][ T4054] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 36.239035][ T369] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.257467][ T269] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.266501][ T269] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.275624][ T269] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.300572][ T4064] netlink: 80 bytes leftover after parsing attributes in process `syz.4.247'. [ 36.320468][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.373498][ T4072] netlink: 5 bytes leftover after parsing attributes in process `syz.4.251'. [ 36.392924][ T4072] 0{X: renamed from gretap0 (while UP) [ 36.415280][ T4072] 0{X: entered allmulticast mode [ 36.422704][ T4072] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 36.514354][ T4086] netlink: 132 bytes leftover after parsing attributes in process `syz.0.258'. [ 36.553408][ T4090] syz.4.260 uses obsolete (PF_INET,SOCK_PACKET) [ 36.574216][ T4096] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 36.574216][ T4096] The task syz.3.257 (4096) triggered the difference, watch for misbehavior. [ 36.737666][ T4108] loop4: detected capacity change from 0 to 512 [ 36.806811][ T4108] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 36.828025][ T4108] EXT4-fs (loop4): orphan cleanup on readonly fs [ 36.846294][ T4108] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.267: corrupted inode contents [ 36.890829][ T4108] EXT4-fs (loop4): Remounting filesystem read-only [ 36.912156][ T4108] EXT4-fs (loop4): 1 truncate cleaned up [ 36.918453][ T2595] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 36.929331][ T2595] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 36.968731][ T2595] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 36.993041][ T4108] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 37.059246][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.169751][ T4141] loop4: detected capacity change from 0 to 512 [ 37.486783][ T4168] netlink: 16 bytes leftover after parsing attributes in process `syz.3.294'. [ 37.724431][ T4188] geneve0: entered allmulticast mode [ 37.857685][ T4202] netlink: 7 bytes leftover after parsing attributes in process `syz.4.310'. [ 37.878251][ T4202] netlink: 60 bytes leftover after parsing attributes in process `syz.4.310'. [ 37.887230][ T4202] netlink: 60 bytes leftover after parsing attributes in process `syz.4.310'. [ 37.955794][ T4202] netlink: 7 bytes leftover after parsing attributes in process `syz.4.310'. [ 37.981105][ T4202] netlink: 60 bytes leftover after parsing attributes in process `syz.4.310'. [ 38.848434][ T4325] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 39.072343][ T4358] loop2: detected capacity change from 0 to 512 [ 39.092695][ T4358] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 39.117040][ T4358] EXT4-fs (loop2): mount failed [ 39.330819][ T4377] @: renamed from vlan0 (while UP) [ 39.478620][ T4366] syz.2.379 (4366) used greatest stack depth: 10704 bytes left [ 39.547941][ T29] kauditd_printk_skb: 177 callbacks suppressed [ 39.547959][ T29] audit: type=1400 audit(1757005999.966:486): avc: denied { getopt } for pid=4392 comm="syz.0.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 39.611069][ T4400] netlink: 'syz.2.394': attribute type 298 has an invalid length. [ 39.746590][ T4413] SELinux: failed to load policy [ 39.763451][ T29] audit: type=1400 audit(1757006000.166:487): avc: denied { load_policy } for pid=4412 comm="syz.4.399" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 39.800277][ T29] audit: type=1400 audit(1757006000.226:488): avc: denied { read write } for pid=4421 comm="syz.3.403" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 39.825794][ T29] audit: type=1400 audit(1757006000.226:489): avc: denied { open } for pid=4421 comm="syz.3.403" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 39.926684][ T29] audit: type=1326 audit(1757006000.346:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4432 comm="syz.3.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f816581ebe9 code=0x7ffc0000 [ 39.966261][ T29] audit: type=1326 audit(1757006000.376:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4432 comm="syz.3.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f816581ebe9 code=0x7ffc0000 [ 39.989764][ T29] audit: type=1326 audit(1757006000.376:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4432 comm="syz.3.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f816581ebe9 code=0x7ffc0000 [ 40.013350][ T29] audit: type=1326 audit(1757006000.376:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4432 comm="syz.3.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f816581ebe9 code=0x7ffc0000 [ 40.037472][ T29] audit: type=1326 audit(1757006000.376:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4432 comm="syz.3.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f816581ebe9 code=0x7ffc0000 [ 40.073897][ T29] audit: type=1326 audit(1757006000.376:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4432 comm="syz.3.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f816581ebe9 code=0x7ffc0000 [ 40.163061][ T4447] netlink: 'syz.3.415': attribute type 3 has an invalid length. [ 40.210290][ T4455] loop3: detected capacity change from 0 to 512 [ 40.221844][ T4455] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.235771][ T4455] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.259687][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.602208][ T4491] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0xe [ 40.787978][ T4520] sctp: [Deprecated]: syz.2.449 (pid 4520) Use of int in maxseg socket option. [ 40.787978][ T4520] Use struct sctp_assoc_value instead [ 40.853395][ T4527] hub 2-0:1.0: USB hub found [ 40.860158][ T4527] hub 2-0:1.0: 8 ports detected [ 40.909704][ T4543] loop2: detected capacity change from 0 to 128 [ 40.917854][ T4543] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 40.943043][ T3304] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.224105][ T4582] pim6reg1: entered promiscuous mode [ 41.229522][ T4582] pim6reg1: entered allmulticast mode [ 41.236180][ T4585] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 41.367043][ T4601] netlink: 'syz.0.485': attribute type 10 has an invalid length. [ 41.467214][ T4599] loop3: detected capacity change from 0 to 1024 [ 41.474249][ T4599] ======================================================= [ 41.474249][ T4599] WARNING: The mand mount option has been deprecated and [ 41.474249][ T4599] and is ignored by this kernel. Remove the mand [ 41.474249][ T4599] option from the mount to silence this warning. [ 41.474249][ T4599] ======================================================= [ 41.477106][ T4601] team0: Device hsr_slave_0 failed to register rx_handler [ 41.541023][ T4599] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.562740][ T4601] syz.0.485 (4601) used greatest stack depth: 10568 bytes left [ 41.635546][ T4609] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 41.686982][ T2595] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:7: bg 0: block 393: padding at end of block bitmap is not set [ 41.703481][ T2595] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2035 with error 117 [ 41.704689][ T4615] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4615 comm=syz.0.492 [ 41.716354][ T2595] EXT4-fs (loop3): This should not happen!! Data will be lost [ 41.716354][ T2595] [ 41.727264][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.766626][ T4617] netlink: 'syz.1.493': attribute type 21 has an invalid length. [ 41.775041][ T4617] __nla_validate_parse: 16 callbacks suppressed [ 41.775057][ T4617] netlink: 132 bytes leftover after parsing attributes in process `syz.1.493'. [ 41.867415][ T4636] loop3: detected capacity change from 0 to 512 [ 41.884298][ T4636] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #3: comm syz.3.500: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 41.904824][ T4636] EXT4-fs error (device loop3): ext4_quota_enable:7131: comm syz.3.500: Bad quota inode: 3, type: 0 [ 41.917609][ T4636] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 41.934269][ T4636] EXT4-fs (loop3): mount failed [ 41.959402][ T4646] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.009562][ T4653] netlink: 24 bytes leftover after parsing attributes in process `syz.0.506'. [ 42.157431][ T4685] batadv1: entered promiscuous mode [ 42.347028][ T4716] netlink: 36 bytes leftover after parsing attributes in process `syz.3.533'. [ 42.366321][ T4719] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4719 comm=syz.0.539 [ 42.499696][ T4746] netdevsim netdevsim0: Direct firmware load for ./file0/file1 failed with error -2 [ 42.569501][ T4762] SELinux: Context system_u:object_r:src_t:s0 is not valid (left unmapped). [ 42.647992][ T4779] netlink: 'syz.2.567': attribute type 2 has an invalid length. [ 42.797745][ T4805] netlink: 'syz.0.579': attribute type 13 has an invalid length. [ 42.828403][ T4805] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 42.952301][ T4816] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 42.997426][ T4824] netlink: '+}[@': attribute type 21 has an invalid length. [ 43.224486][ T4864] SELinux: Context system_u:object is not valid (left unmapped). [ 43.416988][ T4880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.612'. [ 43.463179][ T4886] netlink: 104 bytes leftover after parsing attributes in process `syz.4.615'. [ 43.694593][ T4910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.626'. [ 43.825633][ T4924] syzkaller1: entered promiscuous mode [ 43.831248][ T4924] syzkaller1: entered allmulticast mode [ 44.002035][ T4936] loop1: detected capacity change from 0 to 512 [ 44.545999][ T4959] loop4: detected capacity change from 0 to 512 [ 44.560845][ T4959] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #3: comm syz.4.649: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 44.579326][ T4959] EXT4-fs error (device loop4): ext4_quota_enable:7131: comm syz.4.649: Bad quota inode: 3, type: 0 [ 44.590523][ T4959] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 44.605373][ T4959] EXT4-fs (loop4): mount failed [ 44.658958][ T4970] netlink: 96 bytes leftover after parsing attributes in process `syz.4.653'. [ 44.770866][ T29] kauditd_printk_skb: 291 callbacks suppressed [ 44.770882][ T29] audit: type=1400 audit(44.756:787): avc: denied { create } for pid=4982 comm="syz.4.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 44.797206][ T29] audit: type=1400 audit(44.756:788): avc: denied { write } for pid=4982 comm="syz.4.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 44.883085][ T29] audit: type=1326 audit(44.866:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4987 comm="syz.1.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f2efebe9 code=0x7ffc0000 [ 44.907304][ T29] audit: type=1326 audit(44.866:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4987 comm="syz.1.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f2efebe9 code=0x7ffc0000 [ 44.930117][ T29] audit: type=1326 audit(44.866:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4987 comm="syz.1.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7f2efebe9 code=0x7ffc0000 [ 44.953182][ T29] audit: type=1326 audit(44.866:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4987 comm="syz.1.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f2efebe9 code=0x7ffc0000 [ 44.976000][ T29] audit: type=1326 audit(44.866:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4987 comm="syz.1.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7f2efebe9 code=0x7ffc0000 [ 44.998961][ T29] audit: type=1326 audit(44.866:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4987 comm="syz.1.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f2efebe9 code=0x7ffc0000 [ 45.021786][ T29] audit: type=1326 audit(44.866:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4987 comm="syz.1.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f2efebe9 code=0x7ffc0000 [ 45.044656][ T29] audit: type=1326 audit(44.866:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4987 comm="syz.1.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7f2efebe9 code=0x7ffc0000 [ 45.176270][ T5010] veth0: entered promiscuous mode [ 45.182972][ T5009] veth0: left promiscuous mode [ 45.256334][ T5020] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.675'. [ 45.434417][ T5048] netlink: 'syz.1.689': attribute type 1 has an invalid length. [ 45.442183][ T5048] netlink: 198116 bytes leftover after parsing attributes in process `syz.1.689'. [ 45.598715][ T5071] pimreg: tun_chr_ioctl cmd 1074025677 [ 45.605671][ T5071] pimreg: linktype set to 780 [ 45.623218][ T5071] pimreg: tun_chr_ioctl cmd 35111 [ 45.705090][ T5082] netlink: 28 bytes leftover after parsing attributes in process `syz.1.704'. [ 46.106775][ T5101] loop3: detected capacity change from 0 to 128 [ 46.129828][ T5101] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: writeback. [ 46.206956][ T3315] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.255784][ T5111] netlink: 'syz.1.714': attribute type 10 has an invalid length. [ 46.273039][ T5111] team0: Device hsr_slave_0 failed to register rx_handler [ 46.313441][ T5111] syz.1.714 (5111) used greatest stack depth: 10392 bytes left [ 46.342063][ T1029] IPVS: starting estimator thread 0... [ 46.428987][ T5122] IPVS: using max 2688 ests per chain, 134400 per kthread [ 46.829927][ T5175] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.994881][ T5207] vhci_hcd: invalid port number 255 [ 47.000207][ T5207] vhci_hcd: default hub control req: 0400 v02ff i00ff l0 [ 47.044406][ T5220] __nla_validate_parse: 3 callbacks suppressed [ 47.044501][ T5220] netlink: 4 bytes leftover after parsing attributes in process `syz.1.765'. [ 47.059894][ T5220] netlink: 348 bytes leftover after parsing attributes in process `syz.1.765'. [ 47.069014][ T5220] netlink: 4 bytes leftover after parsing attributes in process `syz.1.765'. [ 47.077882][ T5220] netlink: 348 bytes leftover after parsing attributes in process `syz.1.765'. [ 47.090205][ T5220] netlink: 4 bytes leftover after parsing attributes in process `syz.1.765'. [ 47.159474][ T5227] IPv6: Can't replace route, no match found [ 47.226443][ T5231] team0 (unregistering): Port device team_slave_0 removed [ 47.251728][ T5231] team0 (unregistering): Port device team_slave_1 removed [ 48.038262][ T5298] netlink: 'syz.4.799': attribute type 10 has an invalid length. [ 48.073048][ T5298] team0: Device hsr_slave_0 failed to register rx_handler [ 48.123583][ T5314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.806'. [ 48.133954][ T5312] macvtap0: refused to change device tx_queue_len [ 48.142476][ T5314] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 48.151300][ T5314] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (133) [ 48.341224][ T5351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.823'. [ 48.350171][ T5351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.823'. [ 48.362177][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x1 [ 48.370012][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.377440][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.385468][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.393063][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.400680][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x2 [ 48.408296][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.416070][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.423514][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.430941][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.448718][ T9] hid-generic 0000:0000:0000.0001: hidraw0: HID v8.00 Device [syz0] on syz0 [ 48.527259][ T5370] loop3: detected capacity change from 0 to 1024 [ 48.535553][ T5370] EXT4-fs: Ignoring removed nobh option [ 48.552508][ T5370] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 48.571541][ T5372] loop4: detected capacity change from 0 to 512 [ 48.583520][ T5380] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 48.593544][ T5370] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #11: comm syz.3.832: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 48.594259][ T5372] EXT4-fs (loop4): orphan cleanup on readonly fs [ 48.651741][ T5370] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.832: couldn't read orphan inode 11 (err -117) [ 48.665112][ T5372] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.834: bg 0: block 248: padding at end of block bitmap is not set [ 48.681268][ T5372] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.834: Failed to acquire dquot type 1 [ 48.719598][ T5372] EXT4-fs (loop4): 1 truncate cleaned up [ 48.721335][ T5370] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.769202][ T5372] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.821700][ T5372] syz.4.834 (5372) used greatest stack depth: 9280 bytes left [ 48.830423][ T5370] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.832: Invalid block bitmap block 0 in block_group 0 [ 48.852587][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.857781][ T5370] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.832: Failed to acquire dquot type 0 [ 48.922529][ T5370] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.832: Invalid block bitmap block 21474836480 in block_group 0 [ 48.967611][ T5411] team0 (unregistering): Port device team_slave_0 removed [ 48.987684][ T5411] team0 (unregistering): Port device team_slave_1 removed [ 49.036571][ T269] EXT4-fs error (device loop3): __ext4_get_inode_loc:4861: comm kworker/u8:5: Invalid inode table block 8589934593 in block_group 0 [ 49.071950][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.215213][ T5433] pimreg: tun_chr_ioctl cmd 1074025677 [ 49.221137][ T5433] pimreg: linktype set to 780 [ 49.242259][ T5433] pimreg: tun_chr_ioctl cmd 35111 [ 49.279345][ T5443] loop1: detected capacity change from 0 to 1024 [ 49.286278][ T5443] EXT4-fs: Ignoring removed nobh option [ 49.296979][ T5443] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 49.310796][ T5443] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #11: comm syz.1.864: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 49.349013][ T5443] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.864: couldn't read orphan inode 11 (err -117) [ 49.369368][ T5443] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.402869][ T5443] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.864: Invalid block bitmap block 0 in block_group 0 [ 49.438143][ T5443] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.864: Failed to acquire dquot type 0 [ 49.459488][ T5443] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.864: Invalid block bitmap block 21474836480 in block_group 0 [ 49.486845][ T269] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm kworker/u8:5: Invalid inode table block 8589934593 in block_group 0 [ 49.503890][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.524330][ T5459] netlink: 16 bytes leftover after parsing attributes in process `syz.1.871'. [ 49.550320][ T5464] netlink: '+}[@': attribute type 21 has an invalid length. [ 49.587641][ T5469] capability: warning: `syz.1.876' uses deprecated v2 capabilities in a way that may be insecure [ 49.681252][ T5479] loop2: detected capacity change from 0 to 512 [ 49.696817][ T5479] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 49.713214][ T5481] netlink: 12 bytes leftover after parsing attributes in process `syz.1.882'. [ 49.728788][ T5481] bridge0: port 3(vlan2) entered blocking state [ 49.729699][ T5485] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 49.735201][ T5481] bridge0: port 3(vlan2) entered disabled state [ 49.751227][ T5481] vlan2: entered allmulticast mode [ 49.756473][ T5481] bridge0: entered allmulticast mode [ 49.762524][ T5481] vlan2: left allmulticast mode [ 49.767405][ T5481] bridge0: left allmulticast mode [ 49.809219][ T29] kauditd_printk_skb: 291 callbacks suppressed [ 49.809233][ T29] audit: type=1400 audit(49.796:1082): avc: denied { block_suspend } for pid=5492 comm="syz.2.888" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 49.853383][ T5497] sctp: [Deprecated]: syz.2.889 (pid 5497) Use of struct sctp_assoc_value in delayed_ack socket option. [ 49.853383][ T5497] Use struct sctp_sack_info instead [ 49.884875][ T5501] SELinux: failed to load policy [ 49.884875][ T29] audit: type=1400 audit(49.866:1083): avc: denied { load_policy } for pid=5499 comm="syz.2.892" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 49.986199][ T29] audit: type=1400 audit(49.966:1084): avc: denied { name_bind } for pid=5514 comm="syz.0.898" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 50.099540][ T29] audit: type=1400 audit(50.086:1085): avc: denied { read } for pid=5517 comm="syz.3.899" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 50.122139][ T29] audit: type=1400 audit(50.086:1086): avc: denied { open } for pid=5517 comm="syz.3.899" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 50.231402][ T5511] geneve0: entered promiscuous mode [ 50.331017][ T29] audit: type=1326 audit(50.316:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5523 comm="syz.4.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dff94ebe9 code=0x7ffc0000 [ 50.353995][ T29] audit: type=1326 audit(50.316:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5523 comm="syz.4.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dff94ebe9 code=0x7ffc0000 [ 50.379069][ T29] audit: type=1400 audit(50.356:1089): avc: denied { read write } for pid=5517 comm="syz.3.899" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.401850][ T29] audit: type=1400 audit(50.356:1090): avc: denied { open } for pid=5517 comm="syz.3.899" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.425080][ T29] audit: type=1400 audit(50.356:1091): avc: denied { ioctl } for pid=5517 comm="syz.3.899" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.627379][ C0] hrtimer: interrupt took 11407 ns [ 51.418028][ T5581] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 51.540308][ T5598] IPv6: NLM_F_CREATE should be specified when creating new route [ 51.671595][ T5614] loop4: detected capacity change from 0 to 512 [ 51.691626][ T5614] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.705465][ T5618] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5618 comm=syz.1.940 [ 51.741296][ T5623] loop1: detected capacity change from 0 to 1024 [ 51.748213][ T5623] ext4: Bad value for 'max_dir_size_kb' [ 51.749156][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.797424][ T5629] capability: warning: `syz.1.944' uses 32-bit capabilities (legacy support in use) [ 52.097628][ T5658] loop3: detected capacity change from 0 to 512 [ 52.108839][ T5658] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.957: casefold flag without casefold feature [ 52.121643][ T5658] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.957: couldn't read orphan inode 15 (err -117) [ 52.134226][ T5658] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.198280][ T5671] __nla_validate_parse: 2 callbacks suppressed [ 52.198296][ T5671] netlink: 48 bytes leftover after parsing attributes in process `syz.1.963'. [ 52.334684][ T5685] SELinux: policydb version 1887716053 does not match my version range 15-35 [ 52.343954][ T5685] SELinux: failed to load policy [ 52.364122][ T5687] netlink: 28 bytes leftover after parsing attributes in process `syz.1.970'. [ 52.414190][ T5693] loop1: detected capacity change from 0 to 512 [ 52.430656][ T5693] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.463248][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.518828][ T5707] netlink: 264 bytes leftover after parsing attributes in process `syz.2.979'. [ 52.533500][ T5709] netlink: '+}[@': attribute type 21 has an invalid length. [ 52.540927][ T5709] netlink: 128 bytes leftover after parsing attributes in process `+}[@'. [ 52.551464][ T5709] netlink: '+}[@': attribute type 5 has an invalid length. [ 52.558894][ T5709] netlink: 3 bytes leftover after parsing attributes in process `+}[@'. [ 52.608058][ T5715] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.983'. [ 52.762133][ T5746] bridge0: entered promiscuous mode [ 52.771687][ T5746] bridge0: left promiscuous mode [ 52.838748][ T5764] netlink: 'syz.0.1008': attribute type 4 has an invalid length. [ 52.916074][ T5777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1014'. [ 52.953859][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.985349][ T5789] netlink: 'syz.2.1020': attribute type 3 has an invalid length. [ 53.043634][ T5799] sd 0:0:1:0: device reset [ 53.097544][ T5807] bridge_slave_0: left allmulticast mode [ 53.103281][ T5807] bridge_slave_0: left promiscuous mode [ 53.109052][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.117577][ T5817] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1031'. [ 53.138203][ T5807] bridge_slave_1: left allmulticast mode [ 53.144035][ T5807] bridge_slave_1: left promiscuous mode [ 53.149923][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.161443][ T5807] bond0: (slave bond_slave_0): Releasing backup interface [ 53.172610][ T5807] bond0: (slave bond_slave_1): Releasing backup interface [ 53.187243][ T5807] team0: Port device team_slave_0 removed [ 53.197987][ T5807] team0: Port device team_slave_1 removed [ 53.205693][ T5807] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.213194][ T5807] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.223024][ T5807] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.230473][ T5807] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.240414][ T5826] SELinux: failed to load policy [ 53.253986][ T5807] bond1: (slave bond2): Releasing backup interface [ 53.264118][ T5807] bond2: left promiscuous mode [ 53.346487][ T5836] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1041'. [ 53.385709][ T5836] team0: Port device team_slave_0 removed [ 53.455542][ T5854] loop2: detected capacity change from 0 to 256 [ 53.542553][ T5871] sd 0:0:1:0: device reset [ 53.554999][ T5873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1059'. [ 53.680965][ T5899] IPv6: Can't replace route, no match found [ 53.721679][ T5910] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 53.721801][ T5909] IPVS: stopping master sync thread 5910 ... [ 53.795785][ T5920] loop2: detected capacity change from 0 to 512 [ 53.803513][ T5920] EXT4-fs: Ignoring removed nomblk_io_submit option [ 53.811592][ T5920] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 53.820244][ T5920] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 53.854487][ T5920] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.1081: Allocating blocks 41-42 which overlap fs metadata [ 53.870960][ T5920] EXT4-fs (loop2): Remounting filesystem read-only [ 53.877747][ T5920] EXT4-fs (loop2): 1 truncate cleaned up [ 53.883916][ T5920] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.963800][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.981211][ T5949] blkio.reset_stats is deprecated [ 54.230515][ T5999] loop4: detected capacity change from 0 to 1024 [ 54.237454][ T5999] EXT4-fs: Ignoring removed nobh option [ 54.243320][ T5999] EXT4-fs: Ignoring removed bh option [ 54.285589][ T6013] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 54.285681][ T5999] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.378269][ T6019] IPv6: Can't replace route, no match found [ 54.386084][ T6022] SELinux: policydb version 133 does not match my version range 15-35 [ 54.421415][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.428348][ T6022] SELinux: failed to load policy [ 54.629152][ T6056] infiniband syz!: set down [ 54.633834][ T6056] infiniband syz!: added team_slave_0 [ 54.657576][ T6056] RDS/IB: syz!: added [ 54.662019][ T6056] smc: adding ib device syz! with port count 1 [ 54.671855][ T6056] smc: ib device syz! port 1 has pnetid [ 54.714245][ T6075] netlink: 'syz.2.1153': attribute type 1 has an invalid length. [ 54.730612][ T6079] unsupported nla_type 52263 [ 54.825714][ T29] kauditd_printk_skb: 336 callbacks suppressed [ 54.825766][ T29] audit: type=1400 audit(54.806:1424): avc: denied { create } for pid=6089 comm="syz.1.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 54.862932][ T6092] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 54.874538][ T29] audit: type=1400 audit(54.856:1425): avc: denied { connect } for pid=6089 comm="syz.1.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 54.900072][ T6092] SELinux: failed to load policy [ 54.929518][ T29] audit: type=1326 audit(54.886:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6097 comm="syz.1.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f2efebe9 code=0x7ffc0000 [ 54.939174][ T3411] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=3411 comm=kworker/0:5 [ 54.952639][ T29] audit: type=1326 audit(54.886:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6097 comm="syz.1.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f2efebe9 code=0x7ffc0000 [ 54.988185][ T29] audit: type=1326 audit(54.886:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6097 comm="syz.1.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7f2efebe9 code=0x7ffc0000 [ 54.999296][ T6100] 9pnet: p9_errstr2errno: server reported unknown error 18446 [ 55.011128][ T29] audit: type=1326 audit(54.886:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6097 comm="syz.1.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f2efebe9 code=0x7ffc0000 [ 55.041602][ T29] audit: type=1326 audit(54.886:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6097 comm="syz.1.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f2efebe9 code=0x7ffc0000 [ 55.064562][ T29] audit: type=1326 audit(54.896:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6097 comm="syz.1.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7f2efebe9 code=0x7ffc0000 [ 55.087353][ T29] audit: type=1326 audit(54.896:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6097 comm="syz.1.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f2efebe9 code=0x7ffc0000 [ 55.110184][ T29] audit: type=1326 audit(54.896:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6097 comm="syz.1.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f2efebe9 code=0x7ffc0000 [ 55.765584][ T6173] pimreg: entered allmulticast mode [ 55.781773][ T6173] pimreg: left allmulticast mode [ 55.999763][ T6206] netlink: 'syz.0.1216': attribute type 12 has an invalid length. [ 56.007639][ T6206] netlink: 'syz.0.1216': attribute type 29 has an invalid length. [ 56.569853][ T6268] vhci_hcd: invalid port number 96 [ 56.575155][ T6268] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 56.836548][ T6288] 9pnet: Could not find request transport: 0xffffffffffffffff [ 57.056465][ T6330] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 57.712379][ T6364] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 57.740977][ T6368] loop4: detected capacity change from 0 to 512 [ 57.747567][ T6368] EXT4-fs: Ignoring removed bh option [ 57.753236][ T6368] EXT4-fs: Ignoring removed mblk_io_submit option [ 57.761754][ T6368] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 57.772395][ T6368] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 57.777658][ T6372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.781890][ T6368] EXT4-fs (loop4): orphan cleanup on readonly fs [ 57.790112][ T6372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.795728][ T6368] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1286: Failed to acquire dquot type 1 [ 57.815023][ T6368] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.1286: Invalid block bitmap block 0 in block_group 0 [ 57.832414][ T6368] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.1286: Invalid block bitmap block 0 in block_group 0 [ 57.846095][ T6368] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.1286: Invalid block bitmap block 0 in block_group 0 [ 57.859868][ T6368] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1286: Failed to acquire dquot type 1 [ 57.871580][ T6368] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1286: Failed to acquire dquot type 1 [ 57.883341][ T6368] EXT4-fs (loop4): 1 orphan inode deleted [ 57.889794][ T6368] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 57.916314][ T6368] syz.4.1286 (6368) used greatest stack depth: 9072 bytes left [ 57.924502][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.040128][ T6391] loop4: detected capacity change from 0 to 512 [ 58.050612][ T6391] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1297: Failed to acquire dquot type 1 [ 58.063281][ T6391] EXT4-fs (loop4): 1 truncate cleaned up [ 58.070057][ T6391] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.085027][ T6391] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.105345][ T6397] loop3: detected capacity change from 0 to 512 [ 58.121880][ T6397] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 58.137118][ T6397] EXT4-fs (loop3): mount failed [ 58.165659][ T6403] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.192810][ T6407] SELinux: policydb version 0 does not match my version range 15-35 [ 58.201794][ T6407] SELinux: failed to load policy [ 58.207524][ T6409] __nla_validate_parse: 12 callbacks suppressed [ 58.207541][ T6409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1305'. [ 58.222974][ T6409] netlink: 'syz.3.1305': attribute type 2 has an invalid length. [ 58.287944][ T6417] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 58.476764][ T6440] Invalid ELF header magic: != ELF [ 58.496559][ T6444] syzkaller1: entered promiscuous mode [ 58.502307][ T6444] syzkaller1: entered allmulticast mode [ 58.675677][ T6466] sctp: [Deprecated]: syz.0.1331 (pid 6466) Use of struct sctp_assoc_value in delayed_ack socket option. [ 58.675677][ T6466] Use struct sctp_sack_info instead [ 58.938489][ T6491] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1343'. [ 58.947576][ T6491] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1343'. [ 58.961268][ T6491] bridge0: port 3(vlan2) entered blocking state [ 58.967650][ T6491] bridge0: port 3(vlan2) entered disabled state [ 58.975166][ T6491] vlan2: entered allmulticast mode [ 58.980384][ T6491] bridge0: entered allmulticast mode [ 58.987138][ T6491] vlan2: left allmulticast mode [ 58.992078][ T6491] bridge0: left allmulticast mode [ 59.295198][ T6510] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 59.295198][ T6510] program syz.3.1351 not setting count and/or reply_len properly [ 59.577614][ T6535] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6535 comm=syz.0.1364 [ 59.738545][ T6552] IPv6: NLM_F_CREATE should be specified when creating new route [ 59.884266][ T29] kauditd_printk_skb: 258 callbacks suppressed [ 59.884284][ T29] audit: type=1400 audit(59.866:1683): avc: denied { create } for pid=6575 comm="syz.1.1381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 59.924421][ T29] audit: type=1400 audit(59.866:1684): avc: denied { bind } for pid=6575 comm="syz.1.1381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 60.332141][ T29] audit: type=1401 audit(60.316:1685): op=setxattr invalid_context="" [ 60.358057][ T29] audit: type=1400 audit(60.336:1686): avc: denied { sqpoll } for pid=6609 comm="syz.0.1400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 60.526586][ T29] audit: type=1400 audit(60.506:1687): avc: denied { write } for pid=6680 comm="syz.3.1407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 60.615089][ T6689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1410'. [ 60.624280][ T6689] netlink: 'syz.2.1410': attribute type 30 has an invalid length. [ 60.766053][ T6698] loop2: detected capacity change from 0 to 128 [ 60.776589][ T29] audit: type=1400 audit(60.756:1688): avc: denied { mount } for pid=6696 comm="syz.2.1414" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 60.826619][ T29] audit: type=1326 audit(60.796:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6695 comm="syz.3.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8165815ba7 code=0x7ffc0000 [ 60.849463][ T29] audit: type=1326 audit(60.796:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6695 comm="syz.3.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f81657badb9 code=0x7ffc0000 [ 60.872160][ T29] audit: type=1326 audit(60.796:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6695 comm="syz.3.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8165815ba7 code=0x7ffc0000 [ 60.895378][ T29] audit: type=1326 audit(60.796:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6695 comm="syz.3.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f81657badb9 code=0x7ffc0000 [ 61.015474][ T6709] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1428'. [ 61.168322][ T6727] loop2: detected capacity change from 0 to 2048 [ 61.192837][ T6729] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1429'. [ 61.224557][ T6733] loop4: detected capacity change from 0 to 1024 [ 61.264083][ T6727] EXT4-fs (loop2): failed to initialize system zone (-117) [ 61.281801][ T6735] vhci_hcd: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 61.300786][ T6733] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.313257][ T6727] EXT4-fs (loop2): mount failed [ 61.331296][ T6733] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.1430'. [ 61.366272][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.473027][ T6755] loop4: detected capacity change from 0 to 1024 [ 61.489975][ T6755] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.511019][ T6755] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.555169][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.576922][ T6770] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1444'. [ 61.613625][ T6731] geneve0: entered promiscuous mode [ 61.686213][ T6783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1450'. [ 61.723126][ T6795] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1457'. [ 61.733436][ T6783] IPVS: Error joining to the multicast group [ 61.853976][ T6820] loop2: detected capacity change from 0 to 128 [ 61.900715][ T6820] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 61.902433][ T6828] bridge0: entered promiscuous mode [ 61.908597][ T6820] FAT-fs (loop2): Filesystem has been set read-only [ 61.922309][ T6820] syz.2.1468: attempt to access beyond end of device [ 61.922309][ T6820] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 61.937138][ T6820] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 61.945054][ T6820] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 61.954775][ T6820] syz.2.1468: attempt to access beyond end of device [ 61.954775][ T6820] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 61.969531][ T6828] bridge0: left promiscuous mode [ 61.970662][ T6820] syz.2.1468: attempt to access beyond end of device [ 61.970662][ T6820] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 61.988703][ T6820] syz.2.1468: attempt to access beyond end of device [ 61.988703][ T6820] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 62.004585][ T6820] syz.2.1468: attempt to access beyond end of device [ 62.004585][ T6820] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 62.018535][ T6820] syz.2.1468: attempt to access beyond end of device [ 62.018535][ T6820] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 62.036872][ T6820] syz.2.1468: attempt to access beyond end of device [ 62.036872][ T6820] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 62.051524][ T6820] syz.2.1468: attempt to access beyond end of device [ 62.051524][ T6820] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 62.065319][ T6820] syz.2.1468: attempt to access beyond end of device [ 62.065319][ T6820] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 62.108909][ T6820] syz.2.1468: attempt to access beyond end of device [ 62.108909][ T6820] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 62.293858][ T6824] geneve0: entered promiscuous mode [ 62.594869][ T6873] loop4: detected capacity change from 0 to 512 [ 62.632947][ T6873] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.634719][ T6884] bridge0: port 3(veth0_to_team) entered blocking state [ 62.652973][ T6884] bridge0: port 3(veth0_to_team) entered disabled state [ 62.660580][ T6884] veth0_to_team: entered allmulticast mode [ 62.667025][ T6884] veth0_to_team: entered promiscuous mode [ 62.679804][ T6888] macvtap0: refused to change device tx_queue_len [ 62.740389][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.003236][ T6945] loop4: detected capacity change from 0 to 164 [ 63.011937][ T6945] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 63.022395][ T6945] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 63.031530][ T6945] Symlink component flag not implemented [ 63.037207][ T6945] Symlink component flag not implemented [ 63.043987][ T6945] Symlink component flag not implemented (7) [ 63.050245][ T6945] Symlink component flag not implemented (116) [ 63.342445][ T6958] __nla_validate_parse: 3 callbacks suppressed [ 63.342535][ T6958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1527'. [ 63.377151][ T6963] netlink: 'syz.1.1530': attribute type 4 has an invalid length. [ 63.399481][ T9] kernel write not supported for file bpf-prog (pid: 9 comm: kworker/0:0) [ 63.756311][ T6978] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1537'. [ 63.846412][ T6998] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1547'. [ 63.887931][ T7006] netlink: 'syz.3.1550': attribute type 3 has an invalid length. [ 63.942556][ T7013] bridge_slave_0: left allmulticast mode [ 63.948258][ T7013] bridge_slave_0: left promiscuous mode [ 63.954461][ T7013] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.965658][ T7013] bridge_slave_1: left allmulticast mode [ 63.971485][ T7013] bridge_slave_1: left promiscuous mode [ 63.977328][ T7013] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.991367][ T7013] bond0: (slave bond_slave_0): Releasing backup interface [ 64.002378][ T7013] bond0: (slave bond_slave_1): Releasing backup interface [ 64.016045][ T7013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.023590][ T7013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.034583][ T7013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.042070][ T7013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.053437][ T7027] sd 0:0:1:0: device reset [ 64.082667][ T7031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1568'. [ 64.163738][ T7031] team0: Port device team_slave_0 removed [ 64.207697][ T7049] SELinux: failed to load policy [ 64.238617][ T7055] netlink: 'syz.3.1572': attribute type 4 has an invalid length. [ 64.304993][ T7063] sd 0:0:1:0: device reset [ 64.365790][ T7077] loop4: detected capacity change from 0 to 128 [ 64.375455][ T7077] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 64.387886][ T47] ================================================================== [ 64.395988][ T47] BUG: KCSAN: data-race in blk_mq_start_request / bt_for_each [ 64.403459][ T47] [ 64.405799][ T47] write to 0xffff888102469b78 of 8 bytes by task 7077 on cpu 0: [ 64.413425][ T47] blk_mq_start_request+0x1e1/0x3d0 [ 64.418621][ T47] loop_queue_rq+0x43/0x680 [ 64.423134][ T47] blk_mq_request_issue_directly+0x1e6/0x380 [ 64.429122][ T47] blk_mq_issue_direct+0x19d/0x530 [ 64.434243][ T47] blk_mq_dispatch_queue_requests+0x1fc/0x350 [ 64.440317][ T47] blk_mq_flush_plug_list+0x2b6/0x330 [ 64.445693][ T47] __blk_flush_plug+0x222/0x2a0 [ 64.450555][ T47] __submit_bio+0x2fc/0x4d0 [ 64.455083][ T47] submit_bio_noacct_nocheck+0x208/0x6a0 [ 64.460752][ T47] submit_bio_noacct+0x6ed/0x920 [ 64.465813][ T47] submit_bio+0x2a6/0x2c0 [ 64.470242][ T47] submit_bh_wbc+0x2e0/0x320 [ 64.474930][ T47] __sync_dirty_buffer+0x16b/0x230 [ 64.480090][ T47] sync_dirty_buffer+0x1a/0x30 [ 64.484962][ T47] ext4_update_superblocks_fn+0x307/0xaa0 [ 64.490726][ T47] ext4_update_overhead+0x135/0x160 [ 64.495963][ T47] ext4_fill_super+0x2e05/0x35d0 [ 64.500914][ T47] get_tree_bdev_flags+0x28e/0x300 [ 64.506062][ T47] get_tree_bdev+0x1f/0x30 [ 64.510478][ T47] ext4_get_tree+0x1c/0x30 [ 64.514913][ T47] vfs_get_tree+0x57/0x1d0 [ 64.519329][ T47] do_new_mount+0x207/0x5e0 [ 64.523837][ T47] path_mount+0x4a4/0xb20 [ 64.528249][ T47] __se_sys_mount+0x28f/0x2e0 [ 64.532955][ T47] __x64_sys_mount+0x67/0x80 [ 64.537554][ T47] x64_sys_call+0x2b4d/0x2ff0 [ 64.542341][ T47] do_syscall_64+0xd2/0x200 [ 64.546952][ T47] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.552938][ T47] [ 64.555259][ T47] read to 0xffff888102469b78 of 8 bytes by task 47 on cpu 1: [ 64.562622][ T47] bt_for_each+0x274/0x470 [ 64.567054][ T47] blk_mq_queue_tag_busy_iter+0x1ba/0x330 [ 64.572805][ T47] blk_mq_timeout_work+0xc2/0x340 [ 64.577858][ T47] process_scheduled_works+0x4ce/0x9d0 [ 64.583325][ T47] worker_thread+0x582/0x770 [ 64.587928][ T47] kthread+0x486/0x510 [ 64.591996][ T47] ret_from_fork+0xda/0x150 [ 64.596503][ T47] ret_from_fork_asm+0x1a/0x30 [ 64.601266][ T47] [ 64.603595][ T47] value changed: 0xffff888101245400 -> 0xffff88810252a680 [ 64.610699][ T47] [ 64.613029][ T47] Reported by Kernel Concurrency Sanitizer on: [ 64.619283][ T47] CPU: 1 UID: 0 PID: 47 Comm: kworker/1:1H Not tainted syzkaller #0 PREEMPT(voluntary) [ 64.629094][ T47] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 64.639162][ T47] Workqueue: kblockd blk_mq_timeout_work [ 64.644931][ T47] ================================================================== [ 64.666666][ T3308] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.