last executing test programs: 8.569171736s ago: executing program 0 (id=1029): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) lsetxattr$system_posix_acl(0x0, &(0x7f0000000340)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 8.495064762s ago: executing program 0 (id=1032): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') writev(r0, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c10000000010000000000", 0x58}], 0x1) 8.334811615s ago: executing program 0 (id=1053): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8614, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) 8.15969248s ago: executing program 0 (id=1047): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) chroot(&(0x7f00000006c0)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000007b00)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00') 8.118764783s ago: executing program 0 (id=1048): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c0000003e000701fcfffffffedbdf25017c0000060004"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0x0) 7.735795875s ago: executing program 0 (id=1061): unshare(0x22020400) r0 = syz_io_uring_setup(0xcd8, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x3, 0x234}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)='./file1/file3\x00', &(0x7f0000000180)='./file0\x00'}) io_uring_enter(r0, 0x40f9, 0x217, 0xa5, 0x0, 0x0) 7.705651667s ago: executing program 32 (id=1061): unshare(0x22020400) r0 = syz_io_uring_setup(0xcd8, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x3, 0x234}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)='./file1/file3\x00', &(0x7f0000000180)='./file0\x00'}) io_uring_enter(r0, 0x40f9, 0x217, 0xa5, 0x0, 0x0) 1.939835231s ago: executing program 3 (id=1293): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) move_mount(0xffffffffffffffff, &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xffffffffffffffff, 0x0, 0x126) 1.923071622s ago: executing program 3 (id=1294): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 1.743786607s ago: executing program 3 (id=1297): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000000c0)={r2, 0x3ff, 0x1, 0x1437, 0x7, 0x0, 0x87, 0x0, {0x0, @in={{0x2, 0x4e20, @private=0xa010101}}, 0x4, 0x3, 0x0, 0x800, 0x7}}, &(0x7f0000000180)=0xb0) 916.131275ms ago: executing program 3 (id=1333): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000f96000/0x1000)=nil, 0x7ffffffa, 0x0, 0x0, 0x6, 0x0, 0x2, 0x7, 0x18}) 555.785675ms ago: executing program 1 (id=1357): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)="4c000000140097f87059ae08060c040002ff0f020000000000001a350182fa73a69d35a21429b17cd02941601d60ffc0cca84708f7abca1b4e7d06a60300000072f750375ed08a5604000000", 0x4c}], 0x1}, 0x0) 516.440668ms ago: executing program 1 (id=1361): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @remote}}, 0x0, 0x0, 0x1b, 0x0, "99aed94cb0b35c64fb781b79363b6fb8a279443e8522854bec7fabec4372cd962a8f57216a5d981041890c6fdb1fd901c2a073dbe6dbc04a3f122251b9ca5327885f62686ff3857d13997543ff74265e"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000600)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x35, 0x0, "679f672c00b69e65b0934066fc7c3406caf2c09e33bd50116312e2b00fee650af69b2150ccaa762a3db7ad752fe616e085e991c0436e7e7111238865d27b4e82dcc94700ddd1878b088736009d15f1fa"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) 459.125903ms ago: executing program 1 (id=1364): r0 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f00000002c0)='dirsync\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 418.778386ms ago: executing program 1 (id=1366): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x402, 0x3}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x2}, 0x8) sendto$inet(r0, &(0x7f0000000180)="ab", 0x1, 0x40448c4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x37) 387.131658ms ago: executing program 4 (id=1369): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x80000}, 0x18) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain={'key_or_keyring:', r2}) 375.901309ms ago: executing program 1 (id=1370): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000900)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) 371.7571ms ago: executing program 2 (id=1371): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100030010651fbe347b2c2b00000c00018008000100", @ANYRES16=r0], 0x20}}, 0x0) 350.480632ms ago: executing program 4 (id=1373): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010"], 0x44}}, 0x0) 318.192004ms ago: executing program 2 (id=1375): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 304.645336ms ago: executing program 4 (id=1376): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYBLOB="ef00000000000000140012800b"], 0x4c}, 0x1, 0x0, 0x0, 0x4008040}, 0x8010) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="340000001900150000000000000000000a0000000002000000000000180009"], 0x34}], 0x1, 0x0, 0x0, 0x4010}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x1000000) 248.61282ms ago: executing program 2 (id=1378): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r1, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local, 0x4000000}, 0x1c) 248.50934ms ago: executing program 4 (id=1379): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1fc, 0x8}, 0x0, 0x10000, 0x1, 0x5, 0x8, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) 248.26028ms ago: executing program 5 (id=1380): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/97, 0x61}, {0x0}], 0x2}, 0x32}], 0x4000000000000be, 0x122, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) 202.866094ms ago: executing program 2 (id=1381): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb, 0x0, 0xffffffffffffffff, 0x5}}, @TCA_CT_MARK={0x8, 0x10}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) 202.476484ms ago: executing program 4 (id=1382): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x402, 0x3}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x2}, 0x8) sendto$inet(r0, &(0x7f0000000180)="ab", 0x1, 0x40448c4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x37) 183.570505ms ago: executing program 2 (id=1383): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r1, 0x2285, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) 183.192065ms ago: executing program 4 (id=1384): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 123.92212ms ago: executing program 5 (id=1385): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000100)='kfree\x00', r0}, 0x18) r1 = socket(0x15, 0x5, 0x0) unshare(0x6020400) getsockopt(r1, 0x200000000114, 0x2710, 0x0, &(0x7f0000000000)) 123.47859ms ago: executing program 2 (id=1386): syz_read_part_table(0x60d, &(0x7f0000002200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) cachestat(r1, &(0x7f0000000140)={0x1, 0x7fc001}, &(0x7f0000000100), 0x0) 101.219722ms ago: executing program 5 (id=1387): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) kexec_load(0x4, 0xa, 0x0, 0x0) 100.937162ms ago: executing program 5 (id=1388): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd60", 0x13}, {&(0x7f00000002c0)="000000000000000000000000bc6fb4d7d42de7c09e5b1320b50eb16e97056d9548e56f9fff99de", 0x27}], 0x2) 100.783952ms ago: executing program 1 (id=1389): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000001500000000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0xc0, 0x5, 0x7, 0x0, 0x5, 0x4001, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40001, 0x2, @perf_bp={&(0x7f0000000000), 0x2}, 0x100997, 0x7ff, 0x7, 0x6, 0x800084, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f0000000000), &(0x7f0000000300)) 59.527646ms ago: executing program 5 (id=1390): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 40.795417ms ago: executing program 3 (id=1391): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0xa39}, {0xa, 0xfffe, 0xfffffffd, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}, 0x1000, {[0x6, 0x0, 0xffffffff, 0xfffffefb, 0x0, 0x1, 0x2]}}, 0x5c) 6.886919ms ago: executing program 3 (id=1392): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000e8010000030a01020000000000000000010000000900030073797a3200000000280004800800024000000000080001400000000514000300626174616476300000000000000000000900010073797a31000000000900010073797a3100000000340008"], 0x25c}}, 0x0) 0s ago: executing program 5 (id=1393): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x24, r2, 0xc4fc9e906872338b, 0x20, 0x25dfdbfd, {{0x15}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4, 0x3, 0x0, 0x0}]}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.251' (ED25519) to the list of known hosts. [ 24.185270][ T29] audit: type=1400 audit(1754486615.742:62): avc: denied { mounton } for pid=3292 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.186174][ T3292] cgroup: Unknown subsys name 'net' [ 24.208165][ T29] audit: type=1400 audit(1754486615.742:63): avc: denied { mount } for pid=3292 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.235684][ T29] audit: type=1400 audit(1754486615.772:64): avc: denied { unmount } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.372728][ T3292] cgroup: Unknown subsys name 'cpuset' [ 24.378966][ T3292] cgroup: Unknown subsys name 'rlimit' [ 24.527709][ T29] audit: type=1400 audit(1754486616.082:65): avc: denied { setattr } for pid=3292 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.553424][ T29] audit: type=1400 audit(1754486616.082:66): avc: denied { create } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.559312][ T3294] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.573903][ T29] audit: type=1400 audit(1754486616.082:67): avc: denied { write } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.602963][ T29] audit: type=1400 audit(1754486616.082:68): avc: denied { read } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.623523][ T29] audit: type=1400 audit(1754486616.092:69): avc: denied { mounton } for pid=3292 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.648463][ T29] audit: type=1400 audit(1754486616.092:70): avc: denied { mount } for pid=3292 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.672139][ T29] audit: type=1400 audit(1754486616.142:71): avc: denied { relabelto } for pid=3294 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.700082][ T3292] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.758931][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 25.820316][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 25.832456][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 25.863114][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.870271][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.877524][ T3305] bridge_slave_0: entered allmulticast mode [ 25.884119][ T3305] bridge_slave_0: entered promiscuous mode [ 25.890783][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.897995][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.905469][ T3305] bridge_slave_1: entered allmulticast mode [ 25.911877][ T3305] bridge_slave_1: entered promiscuous mode [ 25.952420][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.972310][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.021521][ T3305] team0: Port device team_slave_0 added [ 26.031240][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.038448][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.045804][ T3303] bridge_slave_0: entered allmulticast mode [ 26.052294][ T3303] bridge_slave_0: entered promiscuous mode [ 26.058696][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 26.067481][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.074743][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.081870][ T3301] bridge_slave_0: entered allmulticast mode [ 26.088390][ T3301] bridge_slave_0: entered promiscuous mode [ 26.095460][ T3305] team0: Port device team_slave_1 added [ 26.101290][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.108493][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.115774][ T3301] bridge_slave_1: entered allmulticast mode [ 26.122273][ T3301] bridge_slave_1: entered promiscuous mode [ 26.133015][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.140072][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.147290][ T3303] bridge_slave_1: entered allmulticast mode [ 26.153777][ T3303] bridge_slave_1: entered promiscuous mode [ 26.199686][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.210568][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.224633][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.231590][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.258310][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.269245][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 26.279268][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.289430][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.309898][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.317018][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.343614][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.366761][ T3301] team0: Port device team_slave_0 added [ 26.373358][ T3301] team0: Port device team_slave_1 added [ 26.400716][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.407844][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.433875][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.445104][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.452079][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.478179][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.494401][ T3303] team0: Port device team_slave_0 added [ 26.522758][ T3305] hsr_slave_0: entered promiscuous mode [ 26.529024][ T3305] hsr_slave_1: entered promiscuous mode [ 26.535874][ T3303] team0: Port device team_slave_1 added [ 26.547397][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.554508][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.561868][ T3309] bridge_slave_0: entered allmulticast mode [ 26.568314][ T3309] bridge_slave_0: entered promiscuous mode [ 26.591313][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.598411][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.624585][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.635598][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.642798][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.650195][ T3309] bridge_slave_1: entered allmulticast mode [ 26.656775][ T3309] bridge_slave_1: entered promiscuous mode [ 26.677493][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.684601][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.711050][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.733851][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.741171][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.749824][ T3310] bridge_slave_0: entered allmulticast mode [ 26.756612][ T3310] bridge_slave_0: entered promiscuous mode [ 26.771770][ T3301] hsr_slave_0: entered promiscuous mode [ 26.777742][ T3301] hsr_slave_1: entered promiscuous mode [ 26.783765][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 26.789484][ T3301] Cannot create hsr debugfs directory [ 26.796141][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.811838][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.819388][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.827126][ T3310] bridge_slave_1: entered allmulticast mode [ 26.833626][ T3310] bridge_slave_1: entered promiscuous mode [ 26.846047][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.900422][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.911838][ T3303] hsr_slave_0: entered promiscuous mode [ 26.918099][ T3303] hsr_slave_1: entered promiscuous mode [ 26.924137][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 26.929849][ T3303] Cannot create hsr debugfs directory [ 26.948019][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.965656][ T3309] team0: Port device team_slave_0 added [ 26.981770][ T3309] team0: Port device team_slave_1 added [ 27.020947][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.027943][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.053900][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.065341][ T3310] team0: Port device team_slave_0 added [ 27.071323][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.078373][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.104587][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.122867][ T3310] team0: Port device team_slave_1 added [ 27.162273][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.169246][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.195212][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.220775][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.227804][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.254050][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.277523][ T3309] hsr_slave_0: entered promiscuous mode [ 27.283984][ T3309] hsr_slave_1: entered promiscuous mode [ 27.289867][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 27.295993][ T3309] Cannot create hsr debugfs directory [ 27.331555][ T3305] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 27.358280][ T3305] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 27.368575][ T3310] hsr_slave_0: entered promiscuous mode [ 27.374875][ T3310] hsr_slave_1: entered promiscuous mode [ 27.380650][ T3310] debugfs: 'hsr0' already exists in 'hsr' [ 27.386386][ T3310] Cannot create hsr debugfs directory [ 27.397189][ T3305] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 27.416119][ T3305] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 27.466860][ T3301] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.479793][ T3301] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.490362][ T3301] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.501414][ T3301] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.520907][ T3303] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 27.537051][ T3303] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 27.551847][ T3303] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 27.570169][ T3303] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 27.593088][ T3309] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 27.620747][ T3309] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 27.635629][ T3309] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 27.655462][ T3309] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 27.666901][ T3310] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.676104][ T3310] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.686560][ T3310] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 27.697778][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.707257][ T3310] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 27.726637][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.744123][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.757811][ T1381] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.764934][ T1381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.777041][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.794892][ T1381] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.802037][ T1381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.836175][ T1381] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.843515][ T1381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.858875][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.866124][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.880088][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.900385][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.916377][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.931581][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.943021][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.961497][ T167] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.968645][ T167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.985897][ T167] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.993045][ T167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.008594][ T167] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.015941][ T167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.031921][ T167] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.039017][ T167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.056409][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.071135][ T3310] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.081521][ T3310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.106117][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.134496][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.145960][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.162275][ T1381] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.169426][ T1381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.184102][ T1381] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.191283][ T1381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.210425][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.228351][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.249893][ T3309] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.260483][ T3309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.379550][ T3305] veth0_vlan: entered promiscuous mode [ 28.400655][ T3305] veth1_vlan: entered promiscuous mode [ 28.419240][ T3305] veth0_macvtap: entered promiscuous mode [ 28.433472][ T3305] veth1_macvtap: entered promiscuous mode [ 28.454732][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.463947][ T3301] veth0_vlan: entered promiscuous mode [ 28.471215][ T3310] veth0_vlan: entered promiscuous mode [ 28.481125][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.492769][ T3301] veth1_vlan: entered promiscuous mode [ 28.500792][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.518197][ T3301] veth0_macvtap: entered promiscuous mode [ 28.532566][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.543775][ T3310] veth1_vlan: entered promiscuous mode [ 28.558209][ T41] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.571172][ T3303] veth0_vlan: entered promiscuous mode [ 28.580033][ T41] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.589842][ T3303] veth1_vlan: entered promiscuous mode [ 28.600935][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.610768][ T3301] veth1_macvtap: entered promiscuous mode [ 28.623754][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.640399][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.650564][ T3310] veth0_macvtap: entered promiscuous mode [ 28.677379][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.686868][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.696650][ T3310] veth1_macvtap: entered promiscuous mode [ 28.703671][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.713459][ T3309] veth0_vlan: entered promiscuous mode [ 28.713618][ T3305] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.721240][ T3309] veth1_vlan: entered promiscuous mode [ 28.742569][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.755969][ T3303] veth0_macvtap: entered promiscuous mode [ 28.770214][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.781625][ T3469] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 28.788549][ T3309] veth0_macvtap: entered promiscuous mode [ 28.803532][ T3469] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1'. [ 28.807999][ T3309] veth1_macvtap: entered promiscuous mode [ 28.820698][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.836135][ T3303] veth1_macvtap: entered promiscuous mode [ 28.851573][ T3472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6'. [ 28.866617][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.877332][ T167] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.887980][ T167] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.899135][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.908142][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.921014][ T167] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.941016][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.963090][ T167] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.001171][ T167] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.018196][ T3479] loop0: detected capacity change from 0 to 512 [ 29.039999][ T167] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.062969][ T167] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.086489][ T3479] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.100774][ T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.114061][ T3479] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 29.132248][ T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.142205][ T31] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.154392][ T31] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.163364][ T31] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.188491][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.201337][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 29.201350][ T29] audit: type=1400 audit(1754486620.752:116): avc: denied { name_connect } for pid=3494 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 29.241672][ T10] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 29.249383][ T10] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 29.256854][ T29] audit: type=1400 audit(1754486620.792:117): avc: denied { read write } for pid=3498 comm="syz.0.11" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 29.257253][ T10] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 29.280448][ T29] audit: type=1400 audit(1754486620.792:118): avc: denied { open } for pid=3498 comm="syz.0.11" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 29.287938][ T10] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 29.318720][ T10] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 29.326310][ T10] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 29.333833][ T10] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 29.341248][ T10] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 29.348788][ T10] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 29.356223][ T10] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 29.367286][ T10] hid-generic 0008:0006:0007.0001: hidraw0: HID v0.0b Device [syz1] on syz1 [ 29.426396][ T29] audit: type=1400 audit(1754486620.912:119): avc: denied { allowed } for pid=3500 comm="syz.4.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 29.445718][ T29] audit: type=1400 audit(1754486620.912:120): avc: denied { create } for pid=3500 comm="syz.4.13" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 29.467094][ T29] audit: type=1400 audit(1754486620.912:121): avc: denied { map } for pid=3500 comm="syz.4.13" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3882 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 29.491207][ T29] audit: type=1400 audit(1754486620.912:122): avc: denied { read write } for pid=3500 comm="syz.4.13" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3882 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 29.515698][ T29] audit: type=1400 audit(1754486620.972:123): avc: denied { create } for pid=3506 comm="syz.4.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 29.543230][ T29] audit: type=1400 audit(1754486621.102:124): avc: denied { connect } for pid=3506 comm="syz.4.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 29.562857][ T29] audit: type=1400 audit(1754486621.102:125): avc: denied { ioctl } for pid=3506 comm="syz.4.15" path="socket:[4914]" dev="sockfs" ino=4914 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 29.564951][ T3503] fido_id[3503]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 29.645124][ T3509] process 'syz.2.16' launched './file1' with NULL argv: empty string added [ 29.768135][ T3521] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 29.930951][ T3532] vhci_hcd: invalid port number 23 [ 29.992079][ T3538] netlink: 6 bytes leftover after parsing attributes in process `syz.3.29'. [ 30.036049][ T3540] netlink: 28 bytes leftover after parsing attributes in process `syz.2.30'. [ 30.180386][ T3557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.38'. [ 30.433017][ T3578] loop8: detected capacity change from 0 to 16384 [ 30.490509][ T3583] loop0: detected capacity change from 0 to 128 [ 30.548096][ T3583] syz.0.49: attempt to access beyond end of device [ 30.548096][ T3583] loop0: rw=2049, sector=129, nr_sectors = 1 limit=128 [ 30.561532][ T3583] Buffer I/O error on dev loop0, logical block 129, lost async page write [ 30.584998][ T12] kworker/u8:0: attempt to access beyond end of device [ 30.584998][ T12] loop0: rw=1, sector=139, nr_sectors = 1 limit=128 [ 30.598553][ T12] Buffer I/O error on dev loop0, logical block 139, lost async page write [ 30.651714][ T3589] netlink: 32 bytes leftover after parsing attributes in process `syz.4.51'. [ 30.661399][ T3583] syz.0.49: attempt to access beyond end of device [ 30.661399][ T3583] loop0: rw=2049, sector=130, nr_sectors = 1 limit=128 [ 30.674796][ T3583] Buffer I/O error on dev loop0, logical block 130, lost async page write [ 30.697754][ T12] kworker/u8:0: attempt to access beyond end of device [ 30.697754][ T12] loop0: rw=1, sector=140, nr_sectors = 1 limit=128 [ 30.698253][ T3589] netlink: 32 bytes leftover after parsing attributes in process `syz.4.51'. [ 30.711266][ T12] Buffer I/O error on dev loop0, logical block 140, lost async page write [ 30.764582][ T12] kworker/u8:0: attempt to access beyond end of device [ 30.764582][ T12] loop0: rw=1, sector=141, nr_sectors = 1 limit=128 [ 30.778026][ T12] Buffer I/O error on dev loop0, logical block 141, lost async page write [ 30.810166][ T12] kworker/u8:0: attempt to access beyond end of device [ 30.810166][ T12] loop0: rw=1, sector=142, nr_sectors = 1 limit=128 [ 30.823677][ T12] Buffer I/O error on dev loop0, logical block 142, lost async page write [ 30.855956][ T12] kworker/u8:0: attempt to access beyond end of device [ 30.855956][ T12] loop0: rw=1, sector=143, nr_sectors = 1 limit=128 [ 30.869502][ T12] Buffer I/O error on dev loop0, logical block 143, lost async page write [ 30.897548][ T12] kworker/u8:0: attempt to access beyond end of device [ 30.897548][ T12] loop0: rw=1, sector=144, nr_sectors = 1 limit=128 [ 30.910969][ T12] Buffer I/O error on dev loop0, logical block 144, lost async page write [ 30.922544][ T12] kworker/u8:0: attempt to access beyond end of device [ 30.922544][ T12] loop0: rw=1, sector=147, nr_sectors = 1 limit=128 [ 30.935995][ T12] Buffer I/O error on dev loop0, logical block 147, lost async page write [ 30.946961][ T12] kworker/u8:0: attempt to access beyond end of device [ 30.946961][ T12] loop0: rw=1, sector=148, nr_sectors = 1 limit=128 [ 30.960566][ T12] Buffer I/O error on dev loop0, logical block 148, lost async page write [ 31.037956][ T3597] macvtap0: refused to change device tx_queue_len [ 31.085538][ T3601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.56'. [ 31.109936][ T3601] bond1: entered promiscuous mode [ 31.115038][ T3601] bond1: entered allmulticast mode [ 31.124863][ T3601] 8021q: adding VLAN 0 to HW filter on device bond1 [ 31.192251][ T3601] syz.0.56 (3601) used greatest stack depth: 10720 bytes left [ 31.271427][ T3563] syz.1.41 (3563) used greatest stack depth: 7312 bytes left [ 31.360521][ T3616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.62'. [ 31.369449][ T3616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.62'. [ 31.691619][ T3625] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3625 comm=syz.4.66 [ 31.704279][ T3625] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3625 comm=syz.4.66 [ 31.789072][ T3633] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 31.869332][ T3641] loop4: detected capacity change from 0 to 128 [ 31.881975][ T3641] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 31.894465][ T3641] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.933734][ T3303] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 32.871653][ T3711] SELinux: Context system_u:object_r:traceroute_exec_t:s0 is not valid (left unmapped). [ 32.894184][ T3713] loop7: detected capacity change from 0 to 100 [ 32.940821][ T3715] loop0: detected capacity change from 0 to 1024 [ 32.965052][ T3715] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.127783][ T3730] capability: warning: `syz.1.112' uses deprecated v2 capabilities in a way that may be insecure [ 33.161654][ T3734] netlink: 'syz.1.114': attribute type 1 has an invalid length. [ 33.236579][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.328295][ T3740] loop2: detected capacity change from 0 to 512 [ 33.348612][ T3740] EXT4-fs: Ignoring removed nomblk_io_submit option [ 33.366935][ T3761] sd 0:0:1:0: device reset [ 33.400609][ T3740] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 33.400626][ T3740] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 33.411522][ T3740] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8042c018, mo2=0102] [ 33.412181][ T3740] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.117: Allocating blocks 41-42 which overlap fs metadata [ 33.461367][ T3740] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.117: Failed to acquire dquot type 1 [ 33.485889][ T3740] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 33.528876][ T3740] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #12: comm syz.2.117: corrupted inode contents [ 33.543037][ T3740] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #12: comm syz.2.117: mark_inode_dirty error [ 33.569308][ T3740] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #12: comm syz.2.117: corrupted inode contents [ 33.582809][ T3784] usb usb1: usbfs: process 3784 (syz.1.135) did not claim interface 0 before use [ 33.595044][ T3740] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.117: mark_inode_dirty error [ 33.612105][ T3740] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #12: comm syz.2.117: corrupted inode contents [ 33.628074][ T3740] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 33.657654][ T3740] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #12: comm syz.2.117: corrupted inode contents [ 33.680286][ T3740] EXT4-fs error (device loop2): ext4_truncate:4666: inode #12: comm syz.2.117: mark_inode_dirty error [ 33.714958][ T3740] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 33.727412][ T3740] EXT4-fs (loop2): 1 truncate cleaned up [ 33.745527][ T3740] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.824756][ T3802] Illegal XDP return value 4294967294 on prog (id 73) dev N/A, expect packet loss! [ 33.847335][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.181602][ T3854] __nla_validate_parse: 1 callbacks suppressed [ 34.181618][ T3854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.165'. [ 34.214000][ T3858] loop3: detected capacity change from 0 to 128 [ 34.244082][ T3858] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 34.257867][ T3858] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.270205][ T29] kauditd_printk_skb: 180 callbacks suppressed [ 34.270243][ T29] audit: type=1326 audit(1754486625.832:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3859 comm="syz.0.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe07f4ebe9 code=0x7ffc0000 [ 34.308688][ T29] audit: type=1326 audit(1754486625.862:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3859 comm="syz.0.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe07f4ebe9 code=0x7ffc0000 [ 34.347792][ T29] audit: type=1326 audit(1754486625.862:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3859 comm="syz.0.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efe07f4ebe9 code=0x7ffc0000 [ 34.371433][ T29] audit: type=1326 audit(1754486625.862:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3859 comm="syz.0.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe07f4ebe9 code=0x7ffc0000 [ 34.395079][ T29] audit: type=1326 audit(1754486625.862:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3859 comm="syz.0.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe07f4ebe9 code=0x7ffc0000 [ 34.419279][ T29] audit: type=1326 audit(1754486625.862:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3859 comm="syz.0.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efe07f4ebe9 code=0x7ffc0000 [ 34.442631][ T29] audit: type=1326 audit(1754486625.862:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3859 comm="syz.0.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe07f4ebe9 code=0x7ffc0000 [ 34.466227][ T29] audit: type=1326 audit(1754486625.862:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3859 comm="syz.0.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe07f4ebe9 code=0x7ffc0000 [ 34.490407][ T29] audit: type=1326 audit(1754486625.862:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3859 comm="syz.0.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efe07f4ebe9 code=0x7ffc0000 [ 34.514118][ T29] audit: type=1400 audit(1754486625.892:312): avc: denied { ioctl } for pid=3857 comm="syz.3.168" path="/26/file1/file1" dev="loop3" ino=12 ioctlcmd=0x6611 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 34.540310][ T3310] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 34.621705][ T3875] geneve2: entered promiscuous mode [ 34.627073][ T3875] geneve2: entered allmulticast mode [ 34.989464][ T3931] SELinux: Context system_u:object is not valid (left unmapped). [ 35.183896][ T3956] netlink: 'syz.1.197': attribute type 4 has an invalid length. [ 35.477696][ T3989] loop1: detected capacity change from 0 to 512 [ 35.508602][ T3989] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 35.522714][ T3989] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 35.566041][ T3989] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 35.582573][ T3989] EXT4-fs (loop1): 1 truncate cleaned up [ 35.588606][ T3989] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.852533][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.999255][ T4047] loop4: detected capacity change from 0 to 512 [ 36.033296][ T4047] ======================================================= [ 36.033296][ T4047] WARNING: The mand mount option has been deprecated and [ 36.033296][ T4047] and is ignored by this kernel. Remove the mand [ 36.033296][ T4047] option from the mount to silence this warning. [ 36.033296][ T4047] ======================================================= [ 36.098704][ T4047] EXT4-fs (loop4): orphan cleanup on readonly fs [ 36.117566][ T4047] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.213: bad orphan inode 13 [ 36.181614][ T4047] ext4_test_bit(bit=12, block=18) = 1 [ 36.187208][ T4047] is_bad_inode(inode)=0 [ 36.191489][ T4047] NEXT_ORPHAN(inode)=2130706432 [ 36.196399][ T4047] max_ino=32 [ 36.200034][ T4047] i_nlink=1 [ 36.252505][ T4047] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 36.323433][ T4047] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.213: deleted inode referenced: 12 [ 36.369417][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.524409][ T4085] netlink: 'syz.4.231': attribute type 1 has an invalid length. [ 36.653467][ T4094] netlink: 28 bytes leftover after parsing attributes in process `syz.2.235'. [ 36.662666][ T4094] netlink: 28 bytes leftover after parsing attributes in process `syz.2.235'. [ 36.805119][ T4111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.243'. [ 36.886844][ T4119] loop4: detected capacity change from 0 to 1024 [ 36.912801][ T4123] loop0: detected capacity change from 0 to 512 [ 36.951286][ T4123] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 36.963837][ T4119] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.992290][ T4123] EXT4-fs (loop0): 1 truncate cleaned up [ 37.035523][ T4123] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.077792][ T4143] netlink: 16 bytes leftover after parsing attributes in process `syz.3.254'. [ 37.088869][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.100514][ T4119] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.245: Allocating blocks 449-513 which overlap fs metadata [ 37.132275][ T36] IPVS: starting estimator thread 0... [ 37.143477][ T4117] EXT4-fs (loop4): pa ffff888106dcf070: logic 48, phys. 177, len 21 [ 37.151514][ T4117] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 37.177362][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.226915][ T4156] netlink: '+}[@': attribute type 13 has an invalid length. [ 37.244715][ T4150] IPVS: using max 2544 ests per chain, 127200 per kthread [ 37.316064][ T4156] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 37.369682][ T4178] 9pnet_fd: Insufficient options for proto=fd [ 37.474340][ T4192] loop2: detected capacity change from 0 to 256 [ 37.504889][ T4192] FAT-fs (loop2): Directory bread(block 64) failed [ 37.521082][ T996] hid_parser_main: 43 callbacks suppressed [ 37.521152][ T996] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 37.531742][ T4192] FAT-fs (loop2): Directory bread(block 65) failed [ 37.534590][ T996] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 37.548501][ T996] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 37.555994][ T996] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 37.563425][ T996] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 37.570816][ T996] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 37.576169][ T4192] FAT-fs (loop2): Directory bread(block 66) failed [ 37.578371][ T996] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 37.592612][ T996] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 37.600006][ T996] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 37.607548][ T996] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 37.624171][ T996] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 37.624402][ T4192] FAT-fs (loop2): Directory bread(block 67) failed [ 37.661913][ T4192] FAT-fs (loop2): Directory bread(block 68) failed [ 37.688578][ T4204] fido_id[4204]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 37.708128][ T4192] FAT-fs (loop2): Directory bread(block 69) failed [ 37.726030][ T4192] FAT-fs (loop2): Directory bread(block 70) failed [ 37.737312][ T4192] FAT-fs (loop2): Directory bread(block 71) failed [ 37.746819][ T4192] FAT-fs (loop2): Directory bread(block 72) failed [ 37.754665][ T4192] FAT-fs (loop2): Directory bread(block 73) failed [ 37.814830][ T4192] bio_check_eod: 21 callbacks suppressed [ 37.814847][ T4192] syz.2.276: attempt to access beyond end of device [ 37.814847][ T4192] loop2: rw=2051, sector=1256, nr_sectors = 32 limit=256 [ 37.835598][ T4192] syz.2.276: attempt to access beyond end of device [ 37.835598][ T4192] loop2: rw=2051, sector=1320, nr_sectors = 32 limit=256 [ 37.850058][ T4192] syz.2.276: attempt to access beyond end of device [ 37.850058][ T4192] loop2: rw=2051, sector=1384, nr_sectors = 32 limit=256 [ 37.865326][ T4192] syz.2.276: attempt to access beyond end of device [ 37.865326][ T4192] loop2: rw=2051, sector=1448, nr_sectors = 32 limit=256 [ 37.879609][ T4192] syz.2.276: attempt to access beyond end of device [ 37.879609][ T4192] loop2: rw=2051, sector=1512, nr_sectors = 32 limit=256 [ 37.894813][ T4192] syz.2.276: attempt to access beyond end of device [ 37.894813][ T4192] loop2: rw=2051, sector=1576, nr_sectors = 32 limit=256 [ 37.909176][ T4192] syz.2.276: attempt to access beyond end of device [ 37.909176][ T4192] loop2: rw=2051, sector=1640, nr_sectors = 32 limit=256 [ 37.932588][ T4192] syz.2.276: attempt to access beyond end of device [ 37.932588][ T4192] loop2: rw=2051, sector=1704, nr_sectors = 32 limit=256 [ 37.947401][ T4192] syz.2.276: attempt to access beyond end of device [ 37.947401][ T4192] loop2: rw=2051, sector=1768, nr_sectors = 32 limit=256 [ 37.983926][ T4192] syz.2.276: attempt to access beyond end of device [ 37.983926][ T4192] loop2: rw=2051, sector=1864, nr_sectors = 32 limit=256 [ 38.127366][ T996] IPVS: starting estimator thread 0... [ 38.151084][ T4246] netlink: 4 bytes leftover after parsing attributes in process `syz.4.298'. [ 38.222130][ T4244] IPVS: using max 2544 ests per chain, 127200 per kthread [ 38.251431][ T4256] 9pnet_fd: Insufficient options for proto=fd [ 38.381367][ T4272] syz.0.319 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 38.411895][ T4273] geneve2: entered promiscuous mode [ 38.417243][ T4273] geneve2: entered allmulticast mode [ 38.526880][ T4289] netlink: 'syz.3.316': attribute type 1 has an invalid length. [ 38.649356][ T4305] loop4: detected capacity change from 0 to 256 [ 38.687479][ T4305] FAT-fs (loop4): Directory bread(block 64) failed [ 38.711375][ T4305] FAT-fs (loop4): Directory bread(block 65) failed [ 38.729753][ T4305] FAT-fs (loop4): Directory bread(block 66) failed [ 38.740697][ T4305] FAT-fs (loop4): Directory bread(block 67) failed [ 38.749165][ T4305] FAT-fs (loop4): Directory bread(block 68) failed [ 38.756464][ T4305] FAT-fs (loop4): Directory bread(block 69) failed [ 38.763433][ T4305] FAT-fs (loop4): Directory bread(block 70) failed [ 38.771687][ T4305] FAT-fs (loop4): Directory bread(block 71) failed [ 38.778572][ T4305] FAT-fs (loop4): Directory bread(block 72) failed [ 38.792082][ T4305] FAT-fs (loop4): Directory bread(block 73) failed [ 39.330643][ T4348] loop1: detected capacity change from 0 to 8192 [ 39.361927][ T4348] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 39.389534][ T4348] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 1046) [ 39.397993][ T4348] FAT-fs (loop1): Filesystem has been set read-only [ 39.424696][ T3301] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 1046) [ 39.455310][ T4350] loop1: detected capacity change from 0 to 1024 [ 39.463662][ T4350] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 39.474646][ T4350] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 39.509505][ T4350] JBD2: no valid journal superblock found [ 39.515370][ T4350] EXT4-fs (loop1): Could not load journal inode [ 39.523497][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 39.523549][ T29] audit: type=1326 audit(1754486631.082:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4351 comm="syz.3.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea74debe9 code=0x7ffc0000 [ 39.571964][ T29] audit: type=1326 audit(1754486631.082:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4351 comm="syz.3.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea74debe9 code=0x7ffc0000 [ 39.577553][ T4350] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 39.595292][ T29] audit: type=1326 audit(1754486631.112:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4351 comm="syz.3.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ea74debe9 code=0x7ffc0000 [ 39.628199][ T29] audit: type=1326 audit(1754486631.112:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4351 comm="syz.3.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea74debe9 code=0x7ffc0000 [ 39.651522][ T29] audit: type=1326 audit(1754486631.112:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4351 comm="syz.3.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea74debe9 code=0x7ffc0000 [ 39.674784][ T29] audit: type=1326 audit(1754486631.112:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4351 comm="syz.3.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ea74debe9 code=0x7ffc0000 [ 39.698294][ T29] audit: type=1326 audit(1754486631.112:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4351 comm="syz.3.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea74debe9 code=0x7ffc0000 [ 39.721723][ T29] audit: type=1326 audit(1754486631.112:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4351 comm="syz.3.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea74debe9 code=0x7ffc0000 [ 39.744967][ T29] audit: type=1326 audit(1754486631.112:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4351 comm="syz.3.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ea74debe9 code=0x7ffc0000 [ 39.768203][ T29] audit: type=1326 audit(1754486631.112:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4351 comm="syz.3.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea74debe9 code=0x7ffc0000 [ 39.948800][ T4379] loop2: detected capacity change from 0 to 1024 [ 39.964429][ T4379] EXT4-fs: Ignoring removed nobh option [ 39.970070][ T4379] EXT4-fs: Ignoring removed nobh option [ 39.976818][ T4379] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 39.987260][ T4379] EXT4-fs error (device loop2): ext4_get_journal_inode:5796: comm syz.2.358: inode #4294967295: comm syz.2.358: iget: illegal inode # [ 40.003468][ T4379] EXT4-fs (loop2): no journal found [ 40.008852][ T4379] EXT4-fs (loop2): can't get journal size [ 40.024482][ T4379] EXT4-fs (loop2): failed to initialize system zone (-22) [ 40.032174][ T4379] EXT4-fs (loop2): mount failed [ 40.386258][ T4440] SELinux: Context system_u:object_r:syslogd_var_run_t:s0 is not valid (left unmapped). [ 40.414160][ T4444] loop2: detected capacity change from 0 to 512 [ 40.421233][ T4444] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 40.434785][ T4444] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.447754][ T4444] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.472877][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.657644][ T4477] loop2: detected capacity change from 0 to 512 [ 40.684706][ T4477] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.705637][ T4477] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.730933][ T4489] syzkaller1: entered promiscuous mode [ 40.736530][ T4489] syzkaller1: entered allmulticast mode [ 40.757506][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.854680][ T4503] loop1: detected capacity change from 0 to 1024 [ 40.863288][ T4503] EXT4-fs: Ignoring removed nobh option [ 40.868937][ T4503] EXT4-fs: Ignoring removed nobh option [ 40.875717][ T4503] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 40.894357][ T4503] EXT4-fs error (device loop1): ext4_get_journal_inode:5796: comm syz.1.415: inode #4294967295: comm syz.1.415: iget: illegal inode # [ 40.917800][ T4503] EXT4-fs (loop1): no journal found [ 40.923171][ T4503] EXT4-fs (loop1): can't get journal size [ 40.938603][ T4503] EXT4-fs (loop1): failed to initialize system zone (-22) [ 40.961449][ T4503] EXT4-fs (loop1): mount failed [ 41.044353][ T4528] loop4: detected capacity change from 0 to 512 [ 41.059970][ T4528] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 41.075568][ T4528] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.092104][ T4528] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.147567][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.157168][ T4538] netlink: 64 bytes leftover after parsing attributes in process `syz.1.429'. [ 41.168744][ T4540] loop3: detected capacity change from 0 to 256 [ 41.199180][ T4540] FAT-fs (loop3): Directory bread(block 64) failed [ 41.209242][ T4540] FAT-fs (loop3): Directory bread(block 65) failed [ 41.222083][ T4540] FAT-fs (loop3): Directory bread(block 66) failed [ 41.234679][ T4540] FAT-fs (loop3): Directory bread(block 67) failed [ 41.243063][ T4540] FAT-fs (loop3): Directory bread(block 68) failed [ 41.250557][ T4540] FAT-fs (loop3): Directory bread(block 69) failed [ 41.257417][ T4540] FAT-fs (loop3): Directory bread(block 70) failed [ 41.264600][ T4540] FAT-fs (loop3): Directory bread(block 71) failed [ 41.283778][ T4540] FAT-fs (loop3): Directory bread(block 72) failed [ 41.292191][ T4540] FAT-fs (loop3): Directory bread(block 73) failed [ 41.303818][ T4550] loop4: detected capacity change from 0 to 1024 [ 41.326576][ T4550] EXT4-fs: Ignoring removed nobh option [ 41.332379][ T4550] EXT4-fs: Ignoring removed nobh option [ 41.399324][ T4550] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 41.422464][ T4550] EXT4-fs error (device loop4): ext4_get_journal_inode:5796: comm syz.4.436: inode #4294967295: comm syz.4.436: iget: illegal inode # [ 41.466693][ T4550] EXT4-fs (loop4): no journal found [ 41.471937][ T4550] EXT4-fs (loop4): can't get journal size [ 41.487655][ T4550] EXT4-fs (loop4): failed to initialize system zone (-22) [ 41.494960][ T4550] EXT4-fs (loop4): mount failed [ 41.606859][ T4578] sctp: [Deprecated]: syz.2.444 (pid 4578) Use of struct sctp_assoc_value in delayed_ack socket option. [ 41.606859][ T4578] Use struct sctp_sack_info instead [ 41.886876][ T4619] netlink: 'syz.0.468': attribute type 178 has an invalid length. [ 42.020917][ T4635] netlink: 48 bytes leftover after parsing attributes in process `syz.4.478'. [ 42.158270][ T4651] netlink: 'syz.1.484': attribute type 178 has an invalid length. [ 42.220836][ T4657] loop1: detected capacity change from 0 to 512 [ 42.245378][ T4657] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 42.265060][ T4657] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.296556][ T4665] loop4: detected capacity change from 0 to 164 [ 42.301424][ T4657] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.315107][ T4665] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 42.325870][ T4665] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 42.367270][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.446672][ T4682] syzkaller1: entered promiscuous mode [ 42.452280][ T4682] syzkaller1: entered allmulticast mode [ 42.486460][ T4691] team0: Device gre1 is of different type [ 42.499869][ T4693] loop0: detected capacity change from 0 to 1024 [ 42.507147][ T4693] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 42.518150][ T4693] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 42.529266][ T4693] JBD2: no valid journal superblock found [ 42.535110][ T4693] EXT4-fs (loop0): Could not load journal inode [ 42.555311][ T4693] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 42.579010][ T4699] loop3: detected capacity change from 0 to 512 [ 42.589868][ T4699] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 42.626909][ T4699] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.645753][ T4699] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.659796][ T4711] loop2: detected capacity change from 0 to 164 [ 42.676826][ T4711] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 42.692987][ T4711] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 42.702911][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.779664][ T4729] netlink: 48 bytes leftover after parsing attributes in process `syz.3.521'. [ 42.837658][ T4739] loop0: detected capacity change from 0 to 512 [ 42.845429][ T4739] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 42.846098][ T4737] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 42.846098][ T4737] program syz.4.534 not setting count and/or reply_len properly [ 42.881784][ T4739] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.901016][ T4739] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.943391][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.964994][ T4749] loop1: detected capacity change from 0 to 164 [ 43.001415][ T4749] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 43.023166][ T4749] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 43.111520][ T4768] netlink: 48 bytes leftover after parsing attributes in process `syz.1.539'. [ 43.178746][ T4770] sctp: [Deprecated]: syz.3.538 (pid 4770) Use of struct sctp_assoc_value in delayed_ack socket option. [ 43.178746][ T4770] Use struct sctp_sack_info instead [ 43.217018][ T4779] loop0: detected capacity change from 0 to 512 [ 43.232925][ T4779] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 43.255552][ T4779] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.295989][ T4779] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.326315][ T4788] loop1: detected capacity change from 0 to 512 [ 43.333921][ T4784] loop4: detected capacity change from 0 to 1764 [ 43.341313][ T4788] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 43.373843][ T4788] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 43.389949][ T4788] EXT4-fs (loop1): 1 truncate cleaned up [ 43.392563][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.397460][ T4788] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.425391][ T4796] loop2: detected capacity change from 0 to 1024 [ 43.432956][ T4796] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 43.444144][ T4796] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 43.463886][ T4796] JBD2: no valid journal superblock found [ 43.469892][ T4796] EXT4-fs (loop2): Could not load journal inode [ 43.491378][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.530419][ T4806] netlink: 'syz.4.553': attribute type 83 has an invalid length. [ 43.531889][ T4796] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 43.577597][ T4810] SELinux: Context system_u:object_r:setrans_initrc_exec_t:s0 is not valid (left unmapped). [ 43.600445][ T4812] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 43.600445][ T4812] program syz.2.556 not setting count and/or reply_len properly [ 43.644104][ T4819] syzkaller1: entered promiscuous mode [ 43.649839][ T4819] syzkaller1: entered allmulticast mode [ 43.700591][ T4832] netlink: 40 bytes leftover after parsing attributes in process `syz.2.566'. [ 43.709601][ T4832] netlink: 40 bytes leftover after parsing attributes in process `syz.2.566'. [ 43.786275][ T4846] netlink: 'syz.0.572': attribute type 21 has an invalid length. [ 43.794784][ T4846] netlink: 'syz.0.572': attribute type 1 has an invalid length. [ 43.802498][ T4846] netlink: 144 bytes leftover after parsing attributes in process `syz.0.572'. [ 43.831642][ T4848] loop1: detected capacity change from 0 to 1764 [ 43.911176][ T4865] netlink: 165 bytes leftover after parsing attributes in process `syz.2.582'. [ 43.958567][ T4871] netlink: 16 bytes leftover after parsing attributes in process `syz.0.585'. [ 44.021026][ T4878] netlink: 92 bytes leftover after parsing attributes in process `syz.0.588'. [ 44.101764][ T4884] loop0: detected capacity change from 0 to 1764 [ 44.117042][ T4890] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4890 comm=syz.2.593 [ 44.150056][ T4893] macvtap0: refused to change device tx_queue_len [ 44.182247][ T31] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.193570][ T4898] Zero length message leads to an empty skb [ 44.199617][ T31] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.225740][ T31] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.239799][ T31] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.287535][ T4912] netlink: 'syz.2.613': attribute type 83 has an invalid length. [ 44.339302][ T4922] random: crng reseeded on system resumption [ 44.352724][ T4922] Restarting kernel threads ... [ 44.358679][ T4922] Done restarting kernel threads. [ 44.527517][ T4950] sctp: [Deprecated]: syz.0.618 (pid 4950) Use of struct sctp_assoc_value in delayed_ack socket option. [ 44.527517][ T4950] Use struct sctp_sack_info instead [ 44.626801][ T4960] loop3: detected capacity change from 0 to 512 [ 44.638298][ T4960] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.625: iget: bad i_size value: 38620345925642 [ 44.658932][ T4960] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.625: couldn't read orphan inode 15 (err -117) [ 44.671612][ T4960] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.728745][ T4970] netem: change failed [ 44.748777][ T4973] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.625: bg 0: block 5: invalid block bitmap [ 44.773746][ T4973] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1120 with error 28 [ 44.786317][ T4973] EXT4-fs (loop3): This should not happen!! Data will be lost [ 44.786317][ T4973] [ 44.796071][ T4973] EXT4-fs (loop3): Total free blocks count 0 [ 44.802273][ T4973] EXT4-fs (loop3): Free/Dirty block details [ 44.808264][ T4973] EXT4-fs (loop3): free_blocks=0 [ 44.813246][ T4973] EXT4-fs (loop3): dirty_blocks=1292 [ 44.818603][ T4973] EXT4-fs (loop3): Block reservation details [ 44.824605][ T4973] EXT4-fs (loop3): i_reserved_data_blocks=1292 [ 44.849403][ T29] kauditd_printk_skb: 357 callbacks suppressed [ 44.849419][ T29] audit: type=1400 audit(1754486636.402:816): avc: denied { write } for pid=4980 comm="syz.0.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 44.892836][ T31] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 1120 with max blocks 172 with error 28 [ 44.911937][ T29] audit: type=1400 audit(1754486636.462:817): avc: denied { connect } for pid=4982 comm="syz.1.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 44.990911][ T29] audit: type=1326 audit(1754486636.542:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4992 comm="syz.3.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea74debe9 code=0x7ffc0000 [ 45.014507][ T29] audit: type=1326 audit(1754486636.542:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4992 comm="syz.3.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea74debe9 code=0x7ffc0000 [ 45.037811][ T29] audit: type=1326 audit(1754486636.542:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4992 comm="syz.3.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ea74debe9 code=0x7ffc0000 [ 45.061256][ T29] audit: type=1326 audit(1754486636.542:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4992 comm="syz.3.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea74debe9 code=0x7ffc0000 [ 45.084704][ T29] audit: type=1326 audit(1754486636.542:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4992 comm="syz.3.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ea74debe9 code=0x7ffc0000 [ 45.108166][ T29] audit: type=1326 audit(1754486636.542:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4992 comm="syz.3.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea74debe9 code=0x7ffc0000 [ 45.131666][ T29] audit: type=1326 audit(1754486636.542:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4992 comm="syz.3.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ea74debe9 code=0x7ffc0000 [ 45.155069][ T29] audit: type=1326 audit(1754486636.542:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4992 comm="syz.3.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea74debe9 code=0x7ffc0000 [ 45.185004][ T4996] sctp: [Deprecated]: syz.1.639 (pid 4996) Use of struct sctp_assoc_value in delayed_ack socket option. [ 45.185004][ T4996] Use struct sctp_sack_info instead [ 45.345914][ T2625] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.362869][ T2625] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.388412][ T2625] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.399057][ T5021] random: crng reseeded on system resumption [ 45.405347][ T2625] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.421898][ T5021] Restarting kernel threads ... [ 45.434802][ T5021] Done restarting kernel threads. [ 45.442651][ T5027] netlink: 'syz.1.653': attribute type 12 has an invalid length. [ 45.450621][ T5027] netlink: 'syz.1.653': attribute type 29 has an invalid length. [ 45.607018][ T5052] loop1: detected capacity change from 0 to 1024 [ 45.614520][ T5052] EXT4-fs: Ignoring removed oldalloc option [ 45.620500][ T5052] EXT4-fs: Ignoring removed bh option [ 45.648525][ T5043] netem: change failed [ 45.659153][ T5048] sctp: [Deprecated]: syz.4.658 (pid 5048) Use of struct sctp_assoc_value in delayed_ack socket option. [ 45.659153][ T5048] Use struct sctp_sack_info instead [ 45.696606][ T5052] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.748887][ T5052] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 45.830312][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.905119][ T5079] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5079 comm=syz.2.675 [ 45.917703][ T5079] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5079 comm=syz.2.675 [ 46.016094][ T5099] loop1: detected capacity change from 0 to 512 [ 46.017720][ T5101] 9pnet: p9_errstr2errno: server reported unknown error @ [ 46.030429][ T5099] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 46.039799][ T5099] EXT4-fs (loop1): orphan cleanup on readonly fs [ 46.046662][ T5099] EXT4-fs error (device loop1): ext4_quota_enable:7124: inode #15: comm syz.1.686: iget: bad i_size value: 360287970189639690 [ 46.061613][ T5099] EXT4-fs error (device loop1): ext4_quota_enable:7127: comm syz.1.686: Bad quota inode: 15, type: 2 [ 46.073769][ T5099] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 46.090125][ T5099] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 46.099701][ T5099] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 46.119290][ T5099] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 46.139498][ T5099] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 46.165761][ T5099] EXT4-fs error (device loop1): ext4_quota_enable:7124: inode #15: comm syz.1.686: iget: bad i_size value: 360287970189639690 [ 46.172258][ T5109] Invalid ELF header magic: != ELF [ 46.204578][ T5099] EXT4-fs error (device loop1): ext4_quota_enable:7127: comm syz.1.686: Bad quota inode: 15, type: 2 [ 46.235406][ T5119] loop4: detected capacity change from 0 to 512 [ 46.242274][ T5099] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 46.272069][ T5119] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 46.283699][ T5112] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 46.293713][ T5119] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 46.308927][ T5119] EXT4-fs (loop4): 1 truncate cleaned up [ 46.317262][ T5112] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 46.334874][ T5119] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.363341][ T5112] EXT4-fs error (device loop1): ext4_quota_enable:7124: inode #15: comm syz.1.686: iget: bad i_size value: 360287970189639690 [ 46.380239][ T5112] EXT4-fs error (device loop1): ext4_quota_enable:7127: comm syz.1.686: Bad quota inode: 15, type: 2 [ 46.393496][ T5112] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 46.440608][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.450185][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.500425][ T5138] netlink: 'syz.3.702': attribute type 12 has an invalid length. [ 46.508263][ T5138] netlink: 'syz.3.702': attribute type 29 has an invalid length. [ 46.516114][ T5138] __nla_validate_parse: 13 callbacks suppressed [ 46.516130][ T5138] netlink: 148 bytes leftover after parsing attributes in process `syz.3.702'. [ 46.531375][ T5138] netlink: 59 bytes leftover after parsing attributes in process `syz.3.702'. [ 46.540659][ T5140] loop4: detected capacity change from 0 to 1024 [ 46.551938][ T5140] EXT4-fs: Ignoring removed oldalloc option [ 46.557938][ T5140] EXT4-fs: Ignoring removed bh option [ 46.585647][ T5140] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.631546][ T5140] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 46.718493][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.892141][ T5179] netlink: 'syz.0.721': attribute type 1 has an invalid length. [ 46.936092][ T5184] 9pnet: p9_errstr2errno: server reported unknown error @ [ 46.968239][ T5187] loop4: detected capacity change from 0 to 512 [ 47.006638][ T5187] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.725: iget: bad i_size value: 38620345925642 [ 47.056302][ T5187] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.725: couldn't read orphan inode 15 (err -117) [ 47.111404][ T5187] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.206258][ T5202] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.725: bg 0: block 5: invalid block bitmap [ 47.244701][ T5208] loop1: detected capacity change from 0 to 1024 [ 47.253217][ T5202] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 996 with error 28 [ 47.265744][ T5202] EXT4-fs (loop4): This should not happen!! Data will be lost [ 47.265744][ T5202] [ 47.275473][ T5202] EXT4-fs (loop4): Total free blocks count 0 [ 47.281622][ T5202] EXT4-fs (loop4): Free/Dirty block details [ 47.287637][ T5202] EXT4-fs (loop4): free_blocks=0 [ 47.292730][ T5202] EXT4-fs (loop4): dirty_blocks=1040 [ 47.298115][ T5202] EXT4-fs (loop4): Block reservation details [ 47.304272][ T5202] EXT4-fs (loop4): i_reserved_data_blocks=1040 [ 47.316955][ T5208] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.355111][ T51] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 996 with max blocks 44 with error 28 [ 47.397613][ T5208] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.734: Allocating blocks 449-513 which overlap fs metadata [ 47.463629][ T5207] EXT4-fs (loop1): pa ffff888106dcf150: logic 48, phys. 177, len 21 [ 47.471700][ T5207] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 3 [ 47.499230][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.529673][ T5223] ieee802154 phy0 wpan0: encryption failed: -22 [ 47.785238][ T5255] loop1: detected capacity change from 0 to 1764 [ 47.901596][ T5276] netlink: 'syz.1.761': attribute type 1 has an invalid length. [ 47.989135][ T5284] program syz.3.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 48.002331][ T5280] loop1: detected capacity change from 0 to 1024 [ 48.040778][ T5280] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.064835][ T5280] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.235603][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.415274][ T5333] netlink: 'syz.2.789': attribute type 10 has an invalid length. [ 48.423138][ T5333] netlink: 156 bytes leftover after parsing attributes in process `syz.2.789'. [ 48.448124][ T5337] capability: warning: `syz.1.790' uses 32-bit capabilities (legacy support in use) [ 48.484871][ T5341] loop3: detected capacity change from 0 to 512 [ 48.524953][ T5341] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 48.585210][ T5341] EXT4-fs (loop3): orphan cleanup on readonly fs [ 48.619173][ T5341] EXT4-fs error (device loop3): ext4_quota_enable:7124: inode #15: comm syz.3.792: iget: bad i_size value: 360287970189639690 [ 48.638747][ T5361] netlink: 76 bytes leftover after parsing attributes in process `syz.1.800'. [ 48.674429][ T5341] EXT4-fs error (device loop3): ext4_quota_enable:7127: comm syz.3.792: Bad quota inode: 15, type: 2 [ 48.714108][ T5341] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 48.748031][ T5341] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 48.768537][ T5341] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.802682][ T5370] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.809922][ T5370] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.817280][ T5341] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 48.829307][ T5341] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 48.853934][ T5341] EXT4-fs error (device loop3): ext4_quota_enable:7124: inode #15: comm syz.3.792: iget: bad i_size value: 360287970189639690 [ 48.882320][ T5341] EXT4-fs error (device loop3): ext4_quota_enable:7127: comm syz.3.792: Bad quota inode: 15, type: 2 [ 48.897023][ T5341] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 48.937262][ T5370] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.953478][ T5370] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.967813][ T5388] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 48.993525][ T5388] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 49.021927][ T31] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 49.030916][ T31] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.060903][ T5388] EXT4-fs error (device loop3): ext4_quota_enable:7124: inode #15: comm syz.3.792: iget: bad i_size value: 360287970189639690 [ 49.074269][ T31] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 49.083360][ T31] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.094467][ T5388] EXT4-fs error (device loop3): ext4_quota_enable:7127: comm syz.3.792: Bad quota inode: 15, type: 2 [ 49.103157][ T31] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 49.114609][ T31] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.126725][ T31] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 49.135708][ T31] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.146175][ T5388] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 49.190686][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.314989][ T5435] validate_nla: 1 callbacks suppressed [ 49.315003][ T5435] netlink: 'syz.3.830': attribute type 10 has an invalid length. [ 49.328312][ T5435] netlink: 'syz.3.830': attribute type 19 has an invalid length. [ 49.336075][ T5435] netlink: 156 bytes leftover after parsing attributes in process `syz.3.830'. [ 49.495159][ T5454] netlink: 64 bytes leftover after parsing attributes in process `syz.2.838'. [ 49.520309][ T5457] loop4: detected capacity change from 0 to 2048 [ 49.560496][ T5457] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.637195][ T5457] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.839: bg 0: block 408: padding at end of block bitmap is not set [ 49.677076][ T5457] EXT4-fs (loop4): Remounting filesystem read-only [ 49.707950][ T5489] 9pnet: p9_errstr2errno: server reported unknown error [ 49.793322][ T5503] loop2: detected capacity change from 0 to 1024 [ 49.800163][ T5503] EXT4-fs: Ignoring removed bh option [ 49.806488][ T5503] EXT4-fs: inline encryption not supported [ 49.813796][ T5503] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 49.830898][ T5503] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.860: lblock 2 mapped to illegal pblock 2 (length 1) [ 49.852678][ T5503] __quota_error: 251 callbacks suppressed [ 49.852695][ T5503] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 49.867384][ T5503] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.860: lblock 0 mapped to illegal pblock 48 (length 1) [ 49.881904][ T5503] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 49.890950][ T5503] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.860: Failed to acquire dquot type 0 [ 49.910560][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.921443][ T5503] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 49.944289][ T5503] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.860: mark_inode_dirty error [ 49.955951][ T5503] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 49.966557][ T5503] EXT4-fs (loop2): 1 orphan inode deleted [ 49.972865][ T5503] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.986047][ T1381] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 50.000640][ T1381] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 50.009258][ T1381] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0 [ 50.036508][ T5503] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #2: block 16: comm syz.2.860: lblock 0 mapped to illegal pblock 16 (length 1) [ 50.051602][ T5503] EXT4-fs error (device loop2): __ext4_get_inode_loc:4861: comm syz.2.860: Invalid inode table block 1 in block_group 0 [ 50.070476][ T5517] 9pnet_fd: Insufficient options for proto=fd [ 50.072166][ T5503] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 50.087057][ T5503] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.860: mark_inode_dirty error [ 50.136397][ T1381] EXT4-fs error (device loop2): __ext4_get_inode_loc:4861: comm kworker/u8:6: Invalid inode table block 1 in block_group 0 [ 50.151530][ T5523] netlink: 64 bytes leftover after parsing attributes in process `syz.4.866'. [ 50.163416][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.179087][ T3309] EXT4-fs error (device loop2): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 50.183636][ T5529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.871'. [ 50.194791][ T3309] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 50.214650][ T5529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.871'. [ 50.224973][ T5529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.871'. [ 50.238438][ T3309] EXT4-fs error (device loop2): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 50.249230][ T5531] loop1: detected capacity change from 0 to 2048 [ 50.275822][ T5531] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.288063][ T5537] loop4: detected capacity change from 0 to 1024 [ 50.296563][ T29] audit: type=1400 audit(1754486641.852:1077): avc: denied { execmem } for pid=5538 comm="syz.2.875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 50.339402][ T5537] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.353007][ T29] audit: type=1400 audit(1754486641.912:1078): avc: denied { create } for pid=5543 comm="syz.2.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.384303][ T29] audit: type=1400 audit(1754486641.932:1079): avc: denied { ioctl } for pid=5543 comm="syz.2.877" path="socket:[10137]" dev="sockfs" ino=10137 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.393341][ T5537] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.874: Allocating blocks 449-513 which overlap fs metadata [ 50.444310][ T5531] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.873: bg 0: block 408: padding at end of block bitmap is not set [ 50.459024][ T5531] EXT4-fs (loop1): Remounting filesystem read-only [ 50.478204][ T29] audit: type=1326 audit(1754486642.032:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5552 comm="syz.2.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7093b7ebe9 code=0x7ffc0000 [ 50.538636][ T5534] EXT4-fs (loop4): pa ffff888106dcf0e0: logic 48, phys. 177, len 21 [ 50.546849][ T5534] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 50.557811][ T29] audit: type=1326 audit(1754486642.032:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5552 comm="syz.2.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7093b7ebe9 code=0x7ffc0000 [ 50.581439][ T29] audit: type=1326 audit(1754486642.032:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5552 comm="syz.2.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f7093b7ebe9 code=0x7ffc0000 [ 50.604803][ T29] audit: type=1326 audit(1754486642.032:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5552 comm="syz.2.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7093b7ebe9 code=0x7ffc0000 [ 50.643562][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.665107][ T5564] loop3: detected capacity change from 0 to 512 [ 50.671933][ T5564] EXT4-fs: Ignoring removed orlov option [ 50.685566][ T5564] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 50.698490][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.711971][ T5564] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 50.752929][ T5564] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.886: corrupted in-inode xattr: e_value size too large [ 50.768922][ T5564] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.886: couldn't read orphan inode 15 (err -117) [ 50.781550][ T5564] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.885588][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.049097][ T5604] IPv6: Can't replace route, no match found [ 51.159393][ T5620] netlink: 'syz.3.909': attribute type 6 has an invalid length. [ 51.385997][ T5651] netlink: 'syz.2.923': attribute type 6 has an invalid length. [ 51.478912][ T5663] loop4: detected capacity change from 0 to 512 [ 51.492904][ T5663] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 51.511794][ T5663] EXT4-fs (loop4): orphan cleanup on readonly fs [ 51.529205][ T5672] loop3: detected capacity change from 0 to 1024 [ 51.541741][ T5663] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 51.559270][ T5672] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.578244][ T5663] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 51.588014][ T5663] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.927: bg 0: block 40: padding at end of block bitmap is not set [ 51.608872][ T5663] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 51.622120][ T5663] EXT4-fs (loop4): 1 truncate cleaned up [ 51.628483][ T5663] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 51.650786][ T5672] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.930: Allocating blocks 449-513 which overlap fs metadata [ 51.677447][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.696991][ T5671] EXT4-fs (loop3): pa ffff888106dd5700: logic 48, phys. 177, len 21 [ 51.705141][ T5671] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 51.717425][ T5691] netlink: 'syz.4.939': attribute type 13 has an invalid length. [ 51.733450][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.759954][ T5691] gretap0: refused to change device tx_queue_len [ 51.759972][ T5691] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 51.822406][ T5697] loop2: detected capacity change from 0 to 512 [ 51.822759][ T5697] EXT4-fs: Ignoring removed orlov option [ 51.823532][ T5697] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 51.834352][ T5697] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 51.840405][ T5697] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.943: corrupted in-inode xattr: e_value size too large [ 51.848935][ T5697] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.943: couldn't read orphan inode 15 (err -117) [ 51.857832][ T5697] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.871640][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.004518][ T5711] loop2: detected capacity change from 0 to 2048 [ 52.024555][ T5709] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.024747][ T5709] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.043249][ T5711] EXT4-fs (loop2): failed to initialize system zone (-117) [ 52.043285][ T5711] EXT4-fs (loop2): mount failed [ 52.098416][ T5709] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.108833][ T5709] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.149607][ T1381] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.149691][ T1381] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.149721][ T1381] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.149752][ T1381] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.534937][ T5749] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 52.535173][ T5746] IPVS: stopping master sync thread 5749 ... [ 53.026670][ T5785] loop2: detected capacity change from 0 to 128 [ 53.053593][ T5785] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 53.061616][ T5785] FAT-fs (loop2): Filesystem has been set read-only [ 53.069103][ T5785] bio_check_eod: 1225 callbacks suppressed [ 53.069124][ T5785] syz.2.982: attempt to access beyond end of device [ 53.069124][ T5785] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 53.069983][ T5788] __nla_validate_parse: 7 callbacks suppressed [ 53.070009][ T5788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.983'. [ 53.075069][ T5785] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 53.111722][ T5785] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 53.129068][ T5791] syz.2.982: attempt to access beyond end of device [ 53.129068][ T5791] loop2: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 53.142374][ T5791] buffer_io_error: 21 callbacks suppressed [ 53.142391][ T5791] Buffer I/O error on dev loop2, logical block 2065, async page read [ 53.174989][ T5791] syz.2.982: attempt to access beyond end of device [ 53.174989][ T5791] loop2: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 53.188836][ T5791] Buffer I/O error on dev loop2, logical block 2066, async page read [ 53.220265][ T5791] syz.2.982: attempt to access beyond end of device [ 53.220265][ T5791] loop2: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 53.233558][ T5791] Buffer I/O error on dev loop2, logical block 2067, async page read [ 53.243303][ T5791] syz.2.982: attempt to access beyond end of device [ 53.243303][ T5791] loop2: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 53.256767][ T5791] Buffer I/O error on dev loop2, logical block 2068, async page read [ 53.265870][ T5791] syz.2.982: attempt to access beyond end of device [ 53.265870][ T5791] loop2: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 53.279226][ T5791] Buffer I/O error on dev loop2, logical block 2069, async page read [ 53.289974][ T5791] syz.2.982: attempt to access beyond end of device [ 53.289974][ T5791] loop2: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 53.303563][ T5791] Buffer I/O error on dev loop2, logical block 2070, async page read [ 53.313385][ T5791] syz.2.982: attempt to access beyond end of device [ 53.313385][ T5791] loop2: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 53.326635][ T5791] Buffer I/O error on dev loop2, logical block 2071, async page read [ 53.336178][ T5791] syz.2.982: attempt to access beyond end of device [ 53.336178][ T5791] loop2: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 53.349344][ T5791] Buffer I/O error on dev loop2, logical block 2072, async page read [ 53.358880][ T5785] syz.2.982: attempt to access beyond end of device [ 53.358880][ T5785] loop2: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 53.372135][ T5785] Buffer I/O error on dev loop2, logical block 2065, async page read [ 53.382127][ T5785] Buffer I/O error on dev loop2, logical block 2066, async page read [ 53.588318][ T5810] netlink: 'syz.1.991': attribute type 27 has an invalid length. [ 53.844926][ T3391] kernel write not supported for file /470/attr/exec (pid: 3391 comm: kworker/1:3) [ 53.892273][ T5823] netlink: 'syz.0.997': attribute type 1 has an invalid length. [ 53.900070][ T5823] netlink: 'syz.0.997': attribute type 2 has an invalid length. [ 53.922464][ T5823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.997'. [ 54.031705][ T5834] netlink: 'syz.2.1003': attribute type 21 has an invalid length. [ 54.042196][ T5834] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1003'. [ 54.280363][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.280488][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.344948][ T5854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.365514][ T5854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.384434][ T5863] netlink: 'syz.1.1017': attribute type 8 has an invalid length. [ 54.416892][ T51] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.442340][ T2625] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.460055][ T2625] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.484128][ T2625] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.329473][ T5881] loop3: detected capacity change from 0 to 2048 [ 55.363883][ T5881] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.403343][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 55.403357][ T29] audit: type=1404 audit(1754486646.962:1177): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 55.432094][ T29] audit: type=1404 audit(1754486646.982:1178): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 55.454793][ T29] audit: type=1400 audit(1754486647.002:1179): avc: denied { map } for pid=5879 comm="syz.3.1025" path="/165/file2/cgroup.controllers" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 55.478798][ T29] audit: type=1400 audit(1754486647.002:1180): avc: denied { read write } for pid=5879 comm="syz.3.1025" path="/165/file2/cgroup.controllers" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 55.503715][ T29] audit: type=1400 audit(1754486647.012:1181): avc: denied { read write } for pid=3305 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 55.508169][ T5881] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1025: bg 0: block 408: padding at end of block bitmap is not set [ 55.528088][ T29] audit: type=1400 audit(1754486647.012:1182): avc: denied { open } for pid=3305 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 55.528121][ T29] audit: type=1400 audit(1754486647.012:1183): avc: denied { ioctl } for pid=3305 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 55.593979][ T5881] EXT4-fs (loop3): Remounting filesystem read-only [ 55.599270][ T36] kernel write not supported for file /491/attr/exec (pid: 36 comm: kworker/1:1) [ 55.625805][ T29] audit: type=1400 audit(1754486647.062:1184): avc: denied { allowed } for pid=5879 comm="syz.3.1025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 55.645193][ T29] audit: type=1400 audit(1754486647.152:1185): avc: denied { mounton } for pid=5893 comm="syz.0.1027" path="/227" dev="tmpfs" ino=1177 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 55.667586][ T29] audit: type=1400 audit(1754486647.152:1186): avc: denied { open } for pid=5892 comm="syz.1.1028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 55.713213][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.793529][ T996] kernel write not supported for file bpf-prog (pid: 996 comm: kworker/0:2) [ 55.843693][ T36] kernel write not supported for file /372/attr/exec (pid: 36 comm: kworker/1:1) [ 55.888240][ T5919] loop4: detected capacity change from 0 to 1024 [ 55.907121][ T5919] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.927933][ T5919] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.041205][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.144469][ T5938] mmap: syz.2.1050 (5938) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 56.189400][ T5944] SELinux: policydb version 0 does not match my version range 15-35 [ 56.199163][ T5944] SELinux: failed to load policy [ 56.204770][ T5942] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1052'. [ 56.373649][ T5955] loop2: detected capacity change from 0 to 1024 [ 56.415837][ T5955] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.440213][ T5955] ext4 filesystem being mounted at /240/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.458162][ T5960] netlink: zone id is out of range [ 56.474136][ T2625] bridge_slave_1: left allmulticast mode [ 56.479859][ T2625] bridge_slave_1: left promiscuous mode [ 56.485618][ T2625] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.530136][ T2625] bridge_slave_0: left allmulticast mode [ 56.536006][ T2625] bridge_slave_0: left promiscuous mode [ 56.541930][ T2625] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.549850][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.653929][ T2625] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.668900][ T2625] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.688828][ T2625] bond0 (unregistering): Released all slaves [ 56.704491][ T2625] bond1 (unregistering): Released all slaves [ 56.772816][ T2625] hsr_slave_0: left promiscuous mode [ 56.780338][ T2625] hsr_slave_1: left promiscuous mode [ 56.787579][ T5989] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1068'. [ 56.788818][ T2625] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.804866][ T2625] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.834716][ T2625] team0 (unregistering): Port device team_slave_1 removed [ 56.844418][ T2625] team0 (unregistering): Port device team_slave_0 removed [ 56.893424][ T5992] loop1: detected capacity change from 0 to 1024 [ 56.942377][ T5992] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.963429][ T5992] ext4 filesystem being mounted at /237/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.005456][ T5972] chnl_net:caif_netlink_parms(): no params data found [ 57.055085][ T5972] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.062401][ T5972] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.081836][ T5972] bridge_slave_0: entered allmulticast mode [ 57.100716][ T5972] bridge_slave_0: entered promiscuous mode [ 57.121365][ T5972] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.128667][ T5972] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.144396][ T5972] bridge_slave_1: entered allmulticast mode [ 57.150977][ T5972] bridge_slave_1: entered promiscuous mode [ 57.170148][ T5972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.181308][ T5972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.206658][ T5972] team0: Port device team_slave_0 added [ 57.213306][ T5972] team0: Port device team_slave_1 added [ 57.242260][ T6025] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.1086'. [ 57.269114][ T5972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.276125][ T5972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.302339][ T5972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.346343][ T6032] netem: incorrect gi model size [ 57.351656][ T6032] netem: change failed [ 57.355791][ T6034] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 57.367751][ T6034] bond0: (slave lo): Error: Device type is different from other slaves [ 57.376627][ T2625] IPVS: stop unused estimator thread 0... [ 57.396453][ T5972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.403451][ T5972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.429474][ T5972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.472293][ T5972] hsr_slave_0: entered promiscuous mode [ 57.492988][ T5972] hsr_slave_1: entered promiscuous mode [ 57.544311][ T6042] syz.4.1093 uses obsolete (PF_INET,SOCK_PACKET) [ 57.640103][ T6058] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 57.652502][ T6058] bond0: (slave lo): Error: Device type is different from other slaves [ 57.719164][ T5972] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 57.737194][ T5972] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 57.755605][ T5972] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 57.765810][ T5972] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 57.799599][ T6070] loop3: detected capacity change from 0 to 1024 [ 57.827420][ T6070] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.853931][ T6088] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 57.866181][ T6088] bond0: (slave lo): Error: Device type is different from other slaves [ 57.894132][ T5972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.908975][ T5972] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.919350][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.926435][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.946967][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.954054][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.025632][ T5972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.125539][ T5972] veth0_vlan: entered promiscuous mode [ 58.133775][ T5972] veth1_vlan: entered promiscuous mode [ 58.148941][ T5972] veth0_macvtap: entered promiscuous mode [ 58.156350][ T5972] veth1_macvtap: entered promiscuous mode [ 58.167208][ T5972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.178755][ T5972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.189238][ T56] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.198152][ T56] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.207321][ T56] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.216726][ T56] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.270380][ T6125] loop3: detected capacity change from 0 to 512 [ 58.291008][ T6125] EXT4-fs (loop3): too many log groups per flexible block group [ 58.298897][ T6125] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 58.306291][ T6125] EXT4-fs (loop3): mount failed [ 59.228752][ T6149] loop4: detected capacity change from 0 to 128 [ 59.247621][ T6149] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 59.275983][ T6149] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 59.297117][ T1381] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 59.379296][ T6167] netlink: 'syz.2.1137': attribute type 10 has an invalid length. [ 59.400874][ T6167] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.407029][ T6173] loop4: detected capacity change from 0 to 1024 [ 59.408177][ T6167] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.429958][ T6173] journal_path: Non-blockdev passed as './file1' [ 59.436527][ T6173] EXT4-fs: error: could not find journal device path [ 59.444279][ T6167] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.451454][ T6167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.458765][ T6167] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.466087][ T6167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.478892][ T6167] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 59.609963][ T6195] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1151'. [ 59.687979][ T6205] SELinux: Context system_u:object_r:hald_sonypic_exec_t:s0 is not valid (left unmapped). [ 59.688007][ T6203] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 59.688075][ T6203] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 59.712370][ T6203] vhci_hcd vhci_hcd.0: Device attached [ 59.742654][ T6206] vhci_hcd: connection closed [ 59.744071][ T56] vhci_hcd: stop threads [ 59.753084][ T56] vhci_hcd: release socket [ 59.757500][ T56] vhci_hcd: disconnect device [ 60.011215][ T6250] loop2: detected capacity change from 0 to 512 [ 60.028226][ T6250] EXT4-fs: Ignoring removed bh option [ 60.050031][ T6250] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 60.113301][ T6250] EXT4-fs (loop2): 1 truncate cleaned up [ 60.164357][ T6268] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1183'. [ 60.444034][ T29] kauditd_printk_skb: 222 callbacks suppressed [ 60.444049][ T29] audit: type=1400 audit(1754486651.962:1409): avc: denied { setopt } for pid=6274 comm="syz.2.1188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 60.470066][ T29] audit: type=1400 audit(1754486651.982:1410): avc: denied { getopt } for pid=6293 comm="syz.4.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 60.492207][ T29] audit: type=1400 audit(1754486652.042:1411): avc: denied { map } for pid=6274 comm="syz.2.1188" path="socket:[13805]" dev="sockfs" ino=13805 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 60.515691][ T29] audit: type=1400 audit(1754486652.042:1412): avc: denied { read write } for pid=6274 comm="syz.2.1188" path="socket:[13805]" dev="sockfs" ino=13805 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 60.586430][ T29] audit: type=1400 audit(1754486652.142:1413): avc: denied { create } for pid=6300 comm="syz.5.1199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 60.606871][ T29] audit: type=1400 audit(1754486652.162:1414): avc: denied { read } for pid=6300 comm="syz.5.1199" path="socket:[14473]" dev="sockfs" ino=14473 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 60.647708][ T29] audit: type=1400 audit(1754486652.192:1415): avc: denied { write } for pid=6298 comm="syz.1.1197" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 60.666884][ T29] audit: type=1400 audit(1754486652.192:1416): avc: denied { connect } for pid=6304 comm="syz.2.1200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 60.687482][ T29] audit: type=1400 audit(1754486652.222:1417): avc: denied { write } for pid=6304 comm="syz.2.1200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 60.714904][ T6307] netlink: 'syz.1.1201': attribute type 1 has an invalid length. [ 60.722766][ T6307] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.1201'. [ 60.773877][ T29] audit: type=1400 audit(1754486652.332:1418): avc: denied { bind } for pid=6313 comm="syz.1.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 60.852941][ T6329] sd 0:0:1:0: device reset [ 61.477414][ T6426] netlink: 'syz.4.1259': attribute type 1 has an invalid length. [ 61.553706][ T6432] 9pnet: Could not find request transport: 0xffffffffffffffff [ 61.589843][ T6437] dvmrp1: entered allmulticast mode [ 61.596043][ T6437] dvmrp1: left allmulticast mode [ 61.723283][ T6454] SELinux: failed to load policy [ 61.809072][ T6465] loop2: detected capacity change from 0 to 512 [ 61.843377][ T6473] SELinux: Context is not valid (left unmapped). [ 61.878969][ T6465] ext4 filesystem being mounted at /282/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.974999][ T6485] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1284'. [ 62.358980][ T6514] infiniband syz!: set active [ 62.363911][ T6514] infiniband syz!: added team_slave_0 [ 62.386221][ T6514] RDS/IB: syz!: added [ 62.395542][ T6514] smc: adding ib device syz! with port count 1 [ 62.408806][ T6514] smc: ib device syz! port 1 has pnetid [ 62.788645][ T6549] loop2: detected capacity change from 0 to 2048 [ 62.789177][ T6555] loop1: detected capacity change from 0 to 2048 [ 62.820301][ T6549] EXT4-fs error (device loop2): ext4_ext_precache:632: inode #2: comm syz.2.1308: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 62.839585][ T6555] loop1: p1 < > p4 [ 62.844317][ T6555] loop1: p4 size 8388608 extends beyond EOD, truncated [ 62.883909][ T6566] SELinux: policydb version 1352051323 does not match my version range 15-35 [ 62.893321][ T6566] SELinux: failed to load policy [ 62.917866][ T6571] loop2: detected capacity change from 0 to 128 [ 62.932219][ T6571] FAT-fs (loop2): error, clusters badly computed (2 != 1) [ 62.939500][ T6571] FAT-fs (loop2): Filesystem has been set read-only [ 62.951664][ T6571] FAT-fs (loop2): error, clusters badly computed (3 != 2) [ 62.959351][ T6571] FAT-fs (loop2): error, clusters badly computed (4 != 3) [ 62.966667][ T6571] FAT-fs (loop2): error, clusters badly computed (5 != 4) [ 62.974230][ T6571] FAT-fs (loop2): error, clusters badly computed (6 != 5) [ 62.981696][ T6571] FAT-fs (loop2): error, clusters badly computed (7 != 6) [ 62.994312][ T6571] bio_check_eod: 39671 callbacks suppressed [ 62.994328][ T6571] syz.2.1316: attempt to access beyond end of device [ 62.994328][ T6571] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 63.014009][ T6571] syz.2.1316: attempt to access beyond end of device [ 63.014009][ T6571] loop2: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 63.027758][ T6571] syz.2.1316: attempt to access beyond end of device [ 63.027758][ T6571] loop2: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 63.034238][ T6577] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 63.041815][ T6571] syz.2.1316: attempt to access beyond end of device [ 63.041815][ T6571] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 63.051638][ T6577] SELinux: failed to load policy [ 63.063496][ T6571] syz.2.1316: attempt to access beyond end of device [ 63.063496][ T6571] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 63.081850][ T6571] syz.2.1316: attempt to access beyond end of device [ 63.081850][ T6571] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 63.095634][ T6571] syz.2.1316: attempt to access beyond end of device [ 63.095634][ T6571] loop2: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 63.109229][ T6571] syz.2.1316: attempt to access beyond end of device [ 63.109229][ T6571] loop2: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 63.123289][ T6571] syz.2.1316: attempt to access beyond end of device [ 63.123289][ T6571] loop2: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 63.136953][ T6571] syz.2.1316: attempt to access beyond end of device [ 63.136953][ T6571] loop2: rw=2049, sector=305, nr_sectors = 9 limit=128 [ 63.283890][ T6600] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 63.339877][ T6609] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 63.414288][ T6621] netlink: 59 bytes leftover after parsing attributes in process `syz.1.1340'. [ 63.566108][ T6640] loop1: detected capacity change from 0 to 512 [ 63.595159][ T6640] ext4 filesystem being mounted at /301/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.634049][ T6654] random: crng reseeded on system resumption [ 63.648225][ T6654] Restarting kernel threads ... [ 63.654400][ T6654] Done restarting kernel threads. [ 63.761370][ T6674] dvmrp1: entered allmulticast mode [ 63.786442][ T6674] dvmrp1: left allmulticast mode [ 63.930583][ T6697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1375'. [ 64.060981][ T6715] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 64.060981][ T6715] program syz.2.1383 not setting count and/or reply_len properly [ 64.132395][ T6723] loop2: detected capacity change from 0 to 2048 [ 64.159561][ T6723] loop2: p1 < > p4 [ 64.171373][ T6723] loop2: p4 size 8388608 extends beyond EOD, truncated [ 64.218932][ T6721] ================================================================== [ 64.227049][ T6721] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 64.234446][ T6721] [ 64.236805][ T6721] read-write to 0xffff8881199026c0 of 8 bytes by interrupt on cpu 1: [ 64.244874][ T6721] __xa_clear_mark+0xf5/0x1e0 [ 64.249565][ T6721] __folio_end_writeback+0x177/0x470 [ 64.254865][ T6721] folio_end_writeback+0x71/0x3d0 [ 64.259949][ T6721] end_buffer_async_write+0x156/0x1f0 [ 64.265516][ T6721] end_bio_bh_io_sync+0x79/0xa0 [ 64.270452][ T6721] bio_endio+0x377/0x410 [ 64.274695][ T6721] blk_update_request+0x336/0x730 [ 64.279719][ T6721] blk_mq_end_request+0x26/0x50 [ 64.284566][ T6721] lo_complete_rq+0x98/0x140 [ 64.289159][ T6721] blk_done_softirq+0x77/0xb0 [ 64.293829][ T6721] handle_softirqs+0xb7/0x290 [ 64.298494][ T6721] run_ksoftirqd+0x1c/0x30 [ 64.302904][ T6721] smpboot_thread_fn+0x328/0x530 [ 64.307842][ T6721] kthread+0x486/0x510 [ 64.312174][ T6721] ret_from_fork+0xda/0x150 [ 64.316670][ T6721] ret_from_fork_asm+0x1a/0x30 [ 64.321423][ T6721] [ 64.323738][ T6721] read to 0xffff8881199026c0 of 8 bytes by task 6721 on cpu 0: [ 64.331295][ T6721] xas_find_marked+0x218/0x620 [ 64.336065][ T6721] find_get_entry+0x5d/0x380 [ 64.340658][ T6721] filemap_get_folios_tag+0x13b/0x210 [ 64.346098][ T6721] filemap_write_and_wait_range+0x1d3/0x340 [ 64.352111][ T6721] bdev_release+0xeb/0x3d0 [ 64.356539][ T6721] blkdev_release+0x15/0x20 [ 64.361059][ T6721] __fput+0x298/0x650 [ 64.365058][ T6721] ____fput+0x1c/0x30 [ 64.369269][ T6721] task_work_run+0x131/0x1a0 [ 64.373868][ T6721] exit_to_user_mode_loop+0xe4/0x100 [ 64.379162][ T6721] do_syscall_64+0x1d6/0x200 [ 64.383756][ T6721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.389639][ T6721] [ 64.391957][ T6721] value changed: 0xffffffffffffffff -> 0xffffffffffffff00 [ 64.399050][ T6721] [ 64.401365][ T6721] Reported by Kernel Concurrency Sanitizer on: [ 64.407513][ T6721] CPU: 0 UID: 0 PID: 6721 Comm: syz.2.1386 Not tainted 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(voluntary) [ 64.419663][ T6721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 64.429705][ T6721] ================================================================== [ 64.440025][ T6735] netlink: 340 bytes leftover after parsing attributes in process `syz.3.1392'. [ 64.461563][ T6735] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1392'.