last executing test programs: 2.484201283s ago: executing program 0 (id=441): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x100000c, 0x12, r0, 0x180000000) 2.439737365s ago: executing program 0 (id=443): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00'}) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 2.408469507s ago: executing program 0 (id=444): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000340)={r1, 0x100, 0xb5e, 0x9}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00000002c0)={0x0, 0x800, 0x4, 0x8, 0xfe, "0062ba5c004000"}) r3 = syz_open_pts(r2, 0x900) r4 = dup3(r3, r2, 0x80000) read(r4, &(0x7f00000000c0)=""/226, 0xe2) 2.097379094s ago: executing program 3 (id=450): r0 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='map_files\x00') fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r3, &(0x7f0000000240)=""/58, 0x3a) getdents64(r3, &(0x7f0000002fc0)=""/4108, 0x100c) 2.096969334s ago: executing program 1 (id=452): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x24, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x404f444) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) connect$rxrpc(r2, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) 2.087056575s ago: executing program 3 (id=453): r0 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0x60b140, 0x0, 0x6, 0x3a2}) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, 0x0, 0x0) listen(r1, 0x4) recvmmsg(r1, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}], 0x1, 0x40000100, 0x0) close_range(r0, r1, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b3387dad256094bc7c308920fd2", 0x14}], 0x1}, 0x0) 2.078004675s ago: executing program 1 (id=454): r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='.\x00', 0xa4000271) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r3, 0x7ffffffd, 0x2) getdents64(r3, 0x0, 0x0) 2.036092618s ago: executing program 3 (id=455): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x29b0cfbd, 0x41001, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000002000)={0x0, 0x2, 0x9, 0xbc}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd1}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c01000013000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="050027000000000008008500", @ANYRES32=0x0, @ANYBLOB="140003006d6163766c616e31000000000000000008000a00", @ANYRES32=r0, @ANYBLOB="e8001a8048000a8014000700ff02000000000000000000000000000114000700fe8000000000000000000000000000aa050008000000000014000700fe8000000000000000000000000000bb9c00028010010180bafc0000000000000400070040ff0700100002800c000180080000000000000018000a80140007000000000000000000000000000000000144000a80050008000000000014000700fc020000000000000000000000000000140007000000000000000000000000000000000100000700fe80000000000000000000000000000005000800000000000400070004000700100002800c0001"], 0x15c}}, 0x0) 2.035641147s ago: executing program 1 (id=456): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0xb, 0x528, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb8, 0x1, @perf_config_ext={0x1f5a685a}, 0x4dc8, 0x10000, 0xfffffffc, 0x1, 0x1008, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_io_uring_setup(0x354, &(0x7f0000000240)={0x0, 0x6862, 0x80, 0x3, 0x1c0}, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd=r1, 0x0, 0x0}) io_uring_enter(r2, 0x10847ba, 0x95c, 0xe, 0x0, 0x2e) 1.945219052s ago: executing program 3 (id=458): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0xc64}, 0x10014, 0x0, 0x800000, 0x0, 0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r1 = eventfd(0x0) read$eventfd(r1, &(0x7f0000000240), 0x8) writev(r1, &(0x7f0000000080)=[{&(0x7f0000001100)="050000005ec3de3d", 0x8}], 0x1) 1.558132464s ago: executing program 0 (id=460): unshare(0x68040200) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca3000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080012400000000211000300686173683a69702c6d61726b"], 0x58}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140a2fd4ebc08000a400000000205000300020000000900020073797a310000000005000100"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 1.184871265s ago: executing program 1 (id=464): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000840)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x200000, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x2, 0x1}, 0x10) sendmsg$tipc(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000090}, 0x95) r2 = dup3(r0, r1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) 901.38595ms ago: executing program 2 (id=467): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@name={0x1e, 0x2, 0x3, {{0x42, 0x1}, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000240)=@name={0x1e, 0x2, 0x1, {{0x42, 0x4}, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000300)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r1, 0x0, 0x0) 837.085754ms ago: executing program 2 (id=468): socket$inet6_udp(0xa, 0x2, 0x0) r0 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000040)={0x4, 0xfffffffffffffd80, 0xfa00, {0xffffffffffffffff, 0xd}}, 0xfffffe01) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) utimes(&(0x7f0000000000)='./file1\x00', 0x0) 794.765636ms ago: executing program 3 (id=469): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb0}, 0x0, 0x8400, 0x1}) r0 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0xfe15, 0x10, 0x0, 0x30f}, &(0x7f00000000c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x21, 0x0, 0x0) 621.458176ms ago: executing program 3 (id=471): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000200)='./file0\x00', 0x18000, &(0x7f0000000340)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES16=0x0, @ANYBLOB="300d1cc933128b8f6018bd1b39899d6b92c51a326ef74fe9d8210e3e72b07b0c6fff4f6d19c56fc8b396b584df05af0b3709ba54eab4e28f0064e4cdc2d6e5824a9ff2ce2d1391114dfcf97725e1f1b66e40b9c893e98d1eb8aab809a742308e9f9d446f95907155f98e13ce2a9537219a53c9571b0c28de63d8d5c16e051aaa1184fbd223291cd312b804ac55763299053b1d1f2f868c040fe5396a2a8f6766e25aed3b5fc1e08cb1e746682fac1e6fedcf22d2ee07f99f037fe749ddeeebf81e7e513c6859251e82a4f16ecf4e75988527d51cdc33451685b9292ee390d8b46e0327b075305c7ef1bfabb213d3415a0424da2eddc9e2af5263955e", @ANYRESDEC=0x0, @ANYRES16], 0x1, 0x2ee, &(0x7f00000009c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) fchdir(0xffffffffffffffff) mount(0x0, 0x0, 0x0, 0x800000, 0x0) syz_open_procfs(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) fadvise64(r0, 0x2, 0x0, 0x4) 588.214188ms ago: executing program 0 (id=473): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r1, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0x20) perf_event_open(&(0x7f0000000a40)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x10290, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x808000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 501.319693ms ago: executing program 4 (id=474): socket$inet6(0xa, 0x2, 0x0) rename(&(0x7f0000000080)='./file0/file0\x00', 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) setresuid(0x0, 0xee01, 0x0) r1 = socket$inet6(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 444.228555ms ago: executing program 4 (id=475): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x31, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdc3}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_rr_get_interval(0x0, 0x0) semget(0x2, 0x6, 0x6f0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0) 428.034376ms ago: executing program 2 (id=476): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f00000000c0)=0x8, 0x4) r1 = dup(r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0xfff1, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x400d1}, 0x0) bind$unix(r1, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) bind$unix(r3, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) 281.244745ms ago: executing program 4 (id=477): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 280.918054ms ago: executing program 1 (id=478): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}, @IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x8000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in=@empty, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) sendto$packet(r0, &(0x7f0000000180)="280320000a0014000000fbf719143baa111f43c851ffab286e16195ecf3d77cc32b6d78839980700", 0x28, 0x840, &(0x7f00000000c0)={0x11, 0x86dd, r3, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2eaaaac15ca67ef2}}, 0x14) 280.624884ms ago: executing program 4 (id=479): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000000)='./control\x00', 0x0) open$dir(&(0x7f00000002c0)='./control/file0\x00', 0x60043, 0x0) r0 = open(0x0, 0x0, 0x0) unlink(&(0x7f0000000200)='./control/file0\x00') unlinkat(r0, 0x0, 0x200) rmdir(&(0x7f0000000040)='./control\x00') 256.654986ms ago: executing program 1 (id=480): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file4\x00', 0x1, 0x20) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f00000000c0)={0x8a001, 0x0, 0x20}, 0x18) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f00000002c0)={0x40000, 0x0, 0x22}, 0x18) 242.207167ms ago: executing program 2 (id=481): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, 0x0, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa}, {}, {0x1c, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @broadcast}, @TCA_FLOWER_KEY_CVLAN_ETH_TYPE={0xfffffffffffffca1}, @TCA_FLOWER_KEY_ARP_SHA={0xa, 0x3f, @random="d196086316c6"}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 192.80879ms ago: executing program 4 (id=482): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 143.115082ms ago: executing program 0 (id=483): ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r0, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002540)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x94) r2 = io_uring_setup(0x17f8, &(0x7f0000000080)={0x0, 0x94ec, 0x0, 0x1, 0x33d}) socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 64.403887ms ago: executing program 4 (id=484): write$selinux_attr(0xffffffffffffffff, 0x0, 0x49) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0xc64}, 0x10014, 0x0, 0x800000, 0x0, 0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 58.910507ms ago: executing program 2 (id=485): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000001300c000b40000000000000000614000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 0s ago: executing program 2 (id=486): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.174' (ED25519) to the list of known hosts. [ 34.070895][ T29] audit: type=1400 audit(1768903869.079:62): avc: denied { mounton } for pid=3308 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 34.093937][ T29] audit: type=1400 audit(1768903869.099:63): avc: denied { mount } for pid=3308 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.096304][ T3308] cgroup: Unknown subsys name 'net' [ 34.121753][ T29] audit: type=1400 audit(1768903869.129:64): avc: denied { unmount } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.278764][ T3308] cgroup: Unknown subsys name 'cpuset' [ 34.285121][ T3308] cgroup: Unknown subsys name 'rlimit' [ 34.436733][ T29] audit: type=1400 audit(1768903869.439:65): avc: denied { setattr } for pid=3308 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.461627][ T29] audit: type=1400 audit(1768903869.449:66): avc: denied { create } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.482365][ T29] audit: type=1400 audit(1768903869.449:67): avc: denied { write } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.502837][ T29] audit: type=1400 audit(1768903869.449:68): avc: denied { read } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.512361][ T3311] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 34.523346][ T29] audit: type=1400 audit(1768903869.459:69): avc: denied { mounton } for pid=3308 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.556765][ T29] audit: type=1400 audit(1768903869.459:70): avc: denied { mount } for pid=3308 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 34.582101][ T29] audit: type=1400 audit(1768903869.489:71): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 34.653720][ T3308] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.838435][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 35.862247][ T3324] chnl_net:caif_netlink_parms(): no params data found [ 35.892755][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 35.927669][ T3325] chnl_net:caif_netlink_parms(): no params data found [ 36.009750][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.016907][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.024106][ T3324] bridge_slave_0: entered allmulticast mode [ 36.030723][ T3324] bridge_slave_0: entered promiscuous mode [ 36.037235][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.044532][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.051809][ T3320] bridge_slave_0: entered allmulticast mode [ 36.058504][ T3320] bridge_slave_0: entered promiscuous mode [ 36.064905][ T3327] chnl_net:caif_netlink_parms(): no params data found [ 36.083934][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.091125][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.098661][ T3324] bridge_slave_1: entered allmulticast mode [ 36.105163][ T3324] bridge_slave_1: entered promiscuous mode [ 36.111478][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.118662][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.125922][ T3320] bridge_slave_1: entered allmulticast mode [ 36.132442][ T3320] bridge_slave_1: entered promiscuous mode [ 36.168922][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.176108][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.183484][ T3321] bridge_slave_0: entered allmulticast mode [ 36.190051][ T3321] bridge_slave_0: entered promiscuous mode [ 36.207435][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.221401][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.228504][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.235603][ T3321] bridge_slave_1: entered allmulticast mode [ 36.241998][ T3321] bridge_slave_1: entered promiscuous mode [ 36.248614][ T3325] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.255699][ T3325] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.263094][ T3325] bridge_slave_0: entered allmulticast mode [ 36.269685][ T3325] bridge_slave_0: entered promiscuous mode [ 36.277350][ T3324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.287610][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.306761][ T3325] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.313998][ T3325] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.321273][ T3325] bridge_slave_1: entered allmulticast mode [ 36.327695][ T3325] bridge_slave_1: entered promiscuous mode [ 36.335219][ T3324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.376148][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.395878][ T3320] team0: Port device team_slave_0 added [ 36.406753][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.417272][ T3325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.427401][ T3324] team0: Port device team_slave_0 added [ 36.433161][ T3327] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.440404][ T3327] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.447738][ T3327] bridge_slave_0: entered allmulticast mode [ 36.454236][ T3327] bridge_slave_0: entered promiscuous mode [ 36.461588][ T3320] team0: Port device team_slave_1 added [ 36.472391][ T3325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.482351][ T3324] team0: Port device team_slave_1 added [ 36.488069][ T3327] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.495164][ T3327] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.502569][ T3327] bridge_slave_1: entered allmulticast mode [ 36.508900][ T3327] bridge_slave_1: entered promiscuous mode [ 36.547561][ T3321] team0: Port device team_slave_0 added [ 36.558399][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.565413][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.591391][ T3324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.606975][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.614004][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.640018][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.651582][ T3321] team0: Port device team_slave_1 added [ 36.658077][ T3325] team0: Port device team_slave_0 added [ 36.664013][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.671023][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.696997][ T3324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.709157][ T3327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.718506][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.725546][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.751491][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.768088][ T3325] team0: Port device team_slave_1 added [ 36.777773][ T3327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.805040][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.812143][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.838072][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.860449][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.867505][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.893617][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.904945][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.911941][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.937870][ T3325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.961921][ T3327] team0: Port device team_slave_0 added [ 36.975286][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.982322][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.008396][ T3325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.025004][ T3327] team0: Port device team_slave_1 added [ 37.038423][ T3320] hsr_slave_0: entered promiscuous mode [ 37.044522][ T3320] hsr_slave_1: entered promiscuous mode [ 37.056330][ T3324] hsr_slave_0: entered promiscuous mode [ 37.062817][ T3324] hsr_slave_1: entered promiscuous mode [ 37.068922][ T3324] debugfs: 'hsr0' already exists in 'hsr' [ 37.074651][ T3324] Cannot create hsr debugfs directory [ 37.106248][ T3327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.113302][ T3327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.139398][ T3327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.165216][ T3327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.172265][ T3327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.198292][ T3327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.211293][ T3321] hsr_slave_0: entered promiscuous mode [ 37.217313][ T3321] hsr_slave_1: entered promiscuous mode [ 37.223313][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 37.229227][ T3321] Cannot create hsr debugfs directory [ 37.236896][ T3325] hsr_slave_0: entered promiscuous mode [ 37.243155][ T3325] hsr_slave_1: entered promiscuous mode [ 37.249227][ T3325] debugfs: 'hsr0' already exists in 'hsr' [ 37.254954][ T3325] Cannot create hsr debugfs directory [ 37.327721][ T3327] hsr_slave_0: entered promiscuous mode [ 37.333936][ T3327] hsr_slave_1: entered promiscuous mode [ 37.339961][ T3327] debugfs: 'hsr0' already exists in 'hsr' [ 37.345719][ T3327] Cannot create hsr debugfs directory [ 37.510135][ T3324] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.521024][ T3324] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.532866][ T3324] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.544851][ T3324] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.572340][ T3325] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.583651][ T3325] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.592752][ T3325] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.605565][ T3325] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.638473][ T3321] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.651537][ T3321] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.663582][ T3321] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.672820][ T3321] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.714395][ T3320] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.727379][ T3320] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.737644][ T3324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.750356][ T3320] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.768537][ T3320] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.779078][ T3327] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.791297][ T3327] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.801266][ T3327] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.810957][ T3327] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.834539][ T3324] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.852857][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.859998][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.877753][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.884898][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.912305][ T3325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.950379][ T3325] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.960304][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.976663][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.983855][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.004137][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.013026][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.033134][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.045012][ T3327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.060316][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.067468][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.076880][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.084108][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.115581][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.129052][ T3327] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.147058][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.154250][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.174742][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.181837][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.195720][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.215597][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.222678][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.233276][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.240403][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.255809][ T3324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.322058][ T3320] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.332582][ T3320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.365883][ T3325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.394146][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.436031][ T3327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.469649][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.510002][ T3324] veth0_vlan: entered promiscuous mode [ 38.533252][ T3324] veth1_vlan: entered promiscuous mode [ 38.578591][ T3324] veth0_macvtap: entered promiscuous mode [ 38.604324][ T3324] veth1_macvtap: entered promiscuous mode [ 38.623987][ T3325] veth0_vlan: entered promiscuous mode [ 38.647040][ T3325] veth1_vlan: entered promiscuous mode [ 38.662188][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.674368][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.684869][ T3327] veth0_vlan: entered promiscuous mode [ 38.700710][ T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.710806][ T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.722043][ T3320] veth0_vlan: entered promiscuous mode [ 38.735849][ T31] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.747850][ T3327] veth1_vlan: entered promiscuous mode [ 38.767723][ T3325] veth0_macvtap: entered promiscuous mode [ 38.775147][ T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.789289][ T3325] veth1_macvtap: entered promiscuous mode [ 38.796346][ T3320] veth1_vlan: entered promiscuous mode [ 38.829159][ T3324] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.843642][ T3327] veth0_macvtap: entered promiscuous mode [ 38.855227][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.863101][ T3321] veth0_vlan: entered promiscuous mode [ 38.875180][ T3327] veth1_macvtap: entered promiscuous mode [ 38.889663][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.905161][ T3320] veth0_macvtap: entered promiscuous mode [ 38.905726][ T3490] loop2: detected capacity change from 0 to 128 [ 38.916121][ T3320] veth1_macvtap: entered promiscuous mode [ 38.934345][ T3321] veth1_vlan: entered promiscuous mode [ 38.943048][ T3490] syz.2.3: attempt to access beyond end of device [ 38.943048][ T3490] loop2: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 38.959713][ T3490] syz.2.3: attempt to access beyond end of device [ 38.959713][ T3490] loop2: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 38.973318][ T3490] Buffer I/O error on dev loop2, logical block 79, lost async page write [ 38.982119][ T3490] syz.2.3: attempt to access beyond end of device [ 38.982119][ T3490] loop2: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 38.986019][ T2397] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.995974][ T3490] Buffer I/O error on dev loop2, logical block 80, lost async page write [ 39.021577][ T3327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.026858][ T3490] syz.2.3: attempt to access beyond end of device [ 39.026858][ T3490] loop2: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 39.031650][ T2397] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.045615][ T3490] syz.2.3: attempt to access beyond end of device [ 39.045615][ T3490] loop2: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 39.056311][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.064315][ T3490] Buffer I/O error on dev loop2, logical block 83, lost async page write [ 39.080764][ T3490] syz.2.3: attempt to access beyond end of device [ 39.080764][ T3490] loop2: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 39.094420][ T3490] Buffer I/O error on dev loop2, logical block 84, lost async page write [ 39.103955][ T3490] syz.2.3: attempt to access beyond end of device [ 39.103955][ T3490] loop2: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 39.117724][ T290] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.127766][ T3327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.135414][ T3490] syz.2.3: attempt to access beyond end of device [ 39.135414][ T3490] loop2: rw=8390657, sector=190, nr_sectors = 2 limit=128 [ 39.148918][ T3490] Buffer I/O error on dev loop2, logical block 95, lost async page write [ 39.157539][ T3490] syz.2.3: attempt to access beyond end of device [ 39.157539][ T3490] loop2: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 39.171049][ T3490] Buffer I/O error on dev loop2, logical block 96, lost async page write [ 39.183623][ T290] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.186414][ T3490] syz.2.3: attempt to access beyond end of device [ 39.186414][ T3490] loop2: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 39.200284][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.214060][ T3490] Buffer I/O error on dev loop2, logical block 99, lost async page write [ 39.223166][ T3490] Buffer I/O error on dev loop2, logical block 100, lost async page write [ 39.237841][ T3490] Buffer I/O error on dev loop2, logical block 111, lost async page write [ 39.246490][ T3490] Buffer I/O error on dev loop2, logical block 112, lost async page write [ 39.253970][ T290] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.289796][ T290] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.302985][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 39.303004][ T29] audit: type=1400 audit(1768903874.309:101): avc: denied { open } for pid=3496 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 39.338953][ T29] audit: type=1400 audit(1768903874.309:102): avc: denied { perfmon } for pid=3496 comm="syz.1.2" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 39.359570][ T29] audit: type=1400 audit(1768903874.309:103): avc: denied { kernel } for pid=3496 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 39.379059][ T29] audit: type=1400 audit(1768903874.369:104): avc: denied { create } for pid=3496 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 39.398417][ T29] audit: type=1400 audit(1768903874.369:105): avc: denied { bind } for pid=3496 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 39.415174][ T290] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.433773][ T29] audit: type=1400 audit(1768903874.389:106): avc: denied { allowed } for pid=3496 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 39.453074][ T29] audit: type=1400 audit(1768903874.409:107): avc: denied { create } for pid=3496 comm="syz.1.2" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 39.454585][ T3321] veth0_macvtap: entered promiscuous mode [ 39.474097][ T29] audit: type=1400 audit(1768903874.409:108): avc: denied { map } for pid=3496 comm="syz.1.2" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4084 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 39.503784][ T29] audit: type=1400 audit(1768903874.409:109): avc: denied { read write } for pid=3496 comm="syz.1.2" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4084 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 39.528176][ T29] audit: type=1400 audit(1768903874.439:110): avc: denied { mounton } for pid=3320 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 39.555804][ T290] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.585787][ T3321] veth1_macvtap: entered promiscuous mode [ 39.615568][ T290] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.655656][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.670915][ T3506] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.4'. [ 39.691916][ T290] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.702387][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.731879][ T290] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.762162][ T273] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.795731][ T273] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.824383][ T273] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.844023][ T3517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8'. [ 39.862662][ T273] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.894398][ T273] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.042431][ T3531] syz.1.11 uses obsolete (PF_INET,SOCK_PACKET) [ 40.173129][ T3537] syz.3.15 (3537) used greatest stack depth: 10512 bytes left [ 40.308954][ T3549] team0 (unregistering): Port device team_slave_0 removed [ 40.319972][ T3549] team0 (unregistering): Port device team_slave_1 removed [ 40.654175][ T3514] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 40.661907][ T3514] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 40.669367][ T3514] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 40.701352][ T3514] hid-generic 0003:0003:0000.0001: hidraw0: USB HID v0.00 Device [syz1] on syz1 [ 41.298574][ T3589] batman_adv: batadv0: Adding interface: dummy0 [ 41.304873][ T3589] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 41.370043][ T3589] batman_adv: batadv0: Interface activated: dummy0 [ 41.380346][ T3589] batadv0: mtu less than device minimum [ 41.386567][ T3589] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 41.397466][ T3589] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 41.408482][ T3589] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 41.419485][ T3589] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 41.430500][ T3589] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 41.441554][ T3589] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 41.452784][ T3589] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 41.464047][ T3589] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 41.475023][ T3589] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 41.532347][ T3597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.40'. [ 41.757911][ T3613] loop2: detected capacity change from 0 to 512 [ 41.783245][ T3613] ======================================================= [ 41.783245][ T3613] WARNING: The mand mount option has been deprecated and [ 41.783245][ T3613] and is ignored by this kernel. Remove the mand [ 41.783245][ T3613] option from the mount to silence this warning. [ 41.783245][ T3613] ======================================================= [ 41.850483][ T3619] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.870186][ T3613] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.888933][ T3613] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 41.901894][ T3619] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.933447][ T3613] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.46: corrupted inode contents [ 41.953695][ T3619] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.981914][ T3613] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #2: comm syz.2.46: mark_inode_dirty error [ 42.008855][ T3613] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.46: corrupted inode contents [ 42.023781][ T3619] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.059933][ T3613] sctp: [Deprecated]: syz.2.46 (pid 3613) Use of struct sctp_assoc_value in delayed_ack socket option. [ 42.059933][ T3613] Use struct sctp_sack_info instead [ 42.080786][ T3613] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.46: corrupted inode contents [ 42.094242][ T3630] veth0_vlan: entered allmulticast mode [ 42.107055][ T3613] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #2: comm syz.2.46: mark_inode_dirty error [ 42.119389][ T3613] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.46: corrupted inode contents [ 42.140646][ T31] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.160029][ T3630] veth0_vlan: left promiscuous mode [ 42.166367][ T3630] veth0_vlan: entered promiscuous mode [ 42.172829][ T3613] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.46: mark_inode_dirty error [ 42.185115][ T3613] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.46: corrupted inode contents [ 42.190249][ T31] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.214863][ T31] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.228160][ T31] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.236560][ T3613] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #2: comm syz.2.46: mark_inode_dirty error [ 42.270304][ T3628] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.46: corrupted inode contents [ 42.411992][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.642659][ T3643] loop1: detected capacity change from 0 to 1024 [ 42.666772][ T3636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.688485][ T3643] EXT4-fs: Ignoring removed mblk_io_submit option [ 42.706935][ T3643] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 42.728128][ T3643] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.728675][ T3636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.839877][ C1] hrtimer: interrupt took 26735 ns [ 42.901781][ T3634] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.943670][ T3650] loop4: detected capacity change from 0 to 512 [ 42.988905][ T3652] capability: warning: `syz.0.57' uses deprecated v2 capabilities in a way that may be insecure [ 42.995810][ T3650] EXT4-fs: Ignoring removed nobh option [ 43.095105][ T3650] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 43.148795][ T3634] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.192142][ T3650] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 43.221937][ T3325] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 43.279675][ T3650] EXT4-fs (loop4): orphan cleanup on readonly fs [ 43.346764][ T3650] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.54: corrupted inode contents [ 43.440519][ T3634] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.522417][ T3650] EXT4-fs (loop4): Remounting filesystem read-only [ 43.585586][ T3634] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.607048][ T3650] EXT4-fs (loop4): 1 truncate cleaned up [ 43.613033][ T273] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 43.623769][ T273] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 43.677592][ T273] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 43.714254][ T3650] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.899508][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.818015][ T29] kauditd_printk_skb: 671 callbacks suppressed [ 44.818034][ T29] audit: type=1400 audit(1768903879.799:776): avc: denied { name_connect } for pid=3793 comm="syz.1.67" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 45.021976][ T29] audit: type=1400 audit(1768903880.029:777): avc: denied { create } for pid=3812 comm="syz.0.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 45.054846][ T29] audit: type=1400 audit(1768903880.059:778): avc: denied { setopt } for pid=3812 comm="syz.0.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 45.095992][ T29] audit: type=1400 audit(1768903880.099:779): avc: denied { bind } for pid=3812 comm="syz.0.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 45.294107][ T3841] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 45.320873][ T3841] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3841 comm=syz.0.74 [ 45.421401][ T3849] loop0: detected capacity change from 0 to 512 [ 45.454082][ T3849] EXT4-fs (loop0): 1 orphan inode deleted [ 45.461592][ T3849] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.474264][ T2397] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 45.484119][ T2397] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:11: Failed to release dquot type 1 [ 45.496548][ T3849] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.512993][ T29] audit: type=1400 audit(1768903880.519:780): avc: denied { create } for pid=3848 comm="syz.0.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 45.553707][ T29] audit: type=1400 audit(1768903880.539:781): avc: denied { accept } for pid=3848 comm="syz.0.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 45.679173][ T29] audit: type=1400 audit(1768903880.689:782): avc: denied { setopt } for pid=3854 comm="syz.1.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 45.698601][ T29] audit: type=1400 audit(1768903880.699:783): avc: denied { write } for pid=3854 comm="syz.1.77" path="socket:[7062]" dev="sockfs" ino=7062 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 45.750161][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.771375][ T3858] netlink: 28 bytes leftover after parsing attributes in process `syz.0.78'. [ 45.783615][ T29] audit: type=1400 audit(1768903880.789:784): avc: denied { perfmon } for pid=3859 comm="syz.1.79" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 45.999979][ T290] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.011464][ T3870] loop1: detected capacity change from 0 to 512 [ 46.131320][ T3870] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.172990][ T2397] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.181537][ T3870] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.307439][ T3877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.85'. [ 46.325548][ T290] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.339794][ T3877] netlink: 36 bytes leftover after parsing attributes in process `syz.4.85'. [ 46.399577][ T3866] net_ratelimit: 10 callbacks suppressed [ 46.399596][ T3866] Set syz1 is full, maxelem 65536 reached [ 46.495992][ T37] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.553843][ T3325] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.640086][ T3891] netlink: 1347 bytes leftover after parsing attributes in process `syz.4.92'. [ 46.656063][ T3894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.91'. [ 47.074112][ T3901] netlink: 'syz.0.95': attribute type 10 has an invalid length. [ 47.081866][ T3901] netlink: 40 bytes leftover after parsing attributes in process `syz.0.95'. [ 47.123104][ T3901] dummy0: entered promiscuous mode [ 47.128347][ T3901] dummy0: entered allmulticast mode [ 47.142641][ T3901] bridge0: port 3(dummy0) entered blocking state [ 47.149223][ T3901] bridge0: port 3(dummy0) entered disabled state [ 47.157692][ T3910] netlink: 12 bytes leftover after parsing attributes in process `syz.1.98'. [ 47.170206][ T3905] netlink: 'syz.2.96': attribute type 4 has an invalid length. [ 47.179919][ T3901] bridge0: port 3(dummy0) entered blocking state [ 47.186327][ T3901] bridge0: port 3(dummy0) entered forwarding state [ 47.255870][ T3916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.101'. [ 47.278500][ T3916] netlink: 16 bytes leftover after parsing attributes in process `syz.1.101'. [ 47.494009][ T3930] loop1: detected capacity change from 0 to 512 [ 47.542677][ T3930] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.570636][ T3930] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.664038][ T3934] loop3: detected capacity change from 0 to 512 [ 47.692910][ T3325] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.716563][ T3934] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 47.780289][ T3934] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.108: Allocating blocks 41-42 which overlap fs metadata [ 47.826182][ T3934] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.108: Allocating blocks 41-42 which overlap fs metadata [ 47.848820][ T3934] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.108: Failed to acquire dquot type 1 [ 47.863069][ T3934] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 47.897071][ T3934] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.108: corrupted inode contents [ 47.941803][ T3934] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #12: comm syz.3.108: mark_inode_dirty error [ 47.968896][ T3934] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.108: corrupted inode contents [ 48.011706][ T3934] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.108: mark_inode_dirty error [ 48.039960][ T3934] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.108: corrupted inode contents [ 48.168954][ T3934] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 48.187014][ T3934] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.108: corrupted inode contents [ 48.219243][ T3934] EXT4-fs error (device loop3): ext4_truncate:4635: inode #12: comm syz.3.108: mark_inode_dirty error [ 48.257784][ T3934] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 48.298819][ T3934] EXT4-fs (loop3): 1 truncate cleaned up [ 48.304966][ T3934] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.395757][ T3934] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.108: Failed to acquire dquot type 1 [ 48.430309][ T3934] syz.3.108 (3934) used greatest stack depth: 9504 bytes left [ 48.474322][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.493587][ T3950] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.113'. [ 48.575967][ T3953] loop2: detected capacity change from 0 to 128 [ 48.827664][ T3960] loop2: detected capacity change from 0 to 512 [ 48.872511][ T3963] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 48.893692][ T3965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.906273][ T3965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.959624][ T3965] ref_ctr_offset mismatch. inode: 0xa7 offset: 0x0 ref_ctr_offset(old): 0x100 ref_ctr_offset(new): 0x0 [ 48.979344][ T3960] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 49.020678][ T3960] System zones: 0-2, 18-18, 34-34 [ 49.049316][ T3960] EXT4-fs (loop2): too many log groups per flexible block group [ 49.059865][ T3960] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 49.075693][ T3960] EXT4-fs (loop2): mount failed [ 49.837313][ T3324] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 49.848329][ T3324] CPU: 0 UID: 0 PID: 3324 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 49.848360][ T3324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 49.848373][ T3324] Call Trace: [ 49.848384][ T3324] [ 49.848391][ T3324] __dump_stack+0x1d/0x30 [ 49.848415][ T3324] dump_stack_lvl+0x95/0xd0 [ 49.848526][ T3324] dump_stack+0x15/0x1b [ 49.848584][ T3324] dump_header+0x80/0x240 [ 49.848609][ T3324] oom_kill_process+0x295/0x350 [ 49.848636][ T3324] out_of_memory+0x97d/0xb80 [ 49.848757][ T3324] try_charge_memcg+0x62e/0xa10 [ 49.848808][ T3324] charge_memcg+0x51/0xc0 [ 49.848845][ T3324] __mem_cgroup_charge+0x28/0xb0 [ 49.848915][ T3324] filemap_add_folio+0x110/0x350 [ 49.848937][ T3324] __filemap_get_folio_mpol+0x326/0x680 [ 49.849038][ T3324] filemap_fault+0x473/0xbb0 [ 49.849068][ T3324] __do_fault+0xbc/0x200 [ 49.849098][ T3324] handle_mm_fault+0x11d7/0x3030 [ 49.849172][ T3324] ? vma_start_read+0x1c7/0x2c0 [ 49.849200][ T3324] do_user_addr_fault+0x62f/0x1050 [ 49.849348][ T3324] exc_page_fault+0x62/0xa0 [ 49.849451][ T3324] asm_exc_page_fault+0x26/0x30 [ 49.849478][ T3324] RIP: 0033:0x7f4a0c398db4 [ 49.849498][ T3324] Code: 85 62 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 00 ca ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 c8 ed 00 48 01 d1 [ 49.849520][ T3324] RSP: 002b:00007fff85fa1260 EFLAGS: 00010202 [ 49.849543][ T3324] RAX: 0000001b34124000 RBX: 000000000000002d RCX: 000000000000bf68 [ 49.849622][ T3324] RDX: 000000000bc08009 RSI: 00007fff85fa12f0 RDI: 0000000000000001 [ 49.849635][ T3324] RBP: 00007fff85fa129c R08: 000000002cd4846b R09: 7fffffffffffffff [ 49.849652][ T3324] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 49.849669][ T3324] R13: 00000000000927c0 R14: 000000000000c047 R15: 00007fff85fa12f0 [ 49.849693][ T3324] [ 49.849701][ T3324] memory: usage 307200kB, limit 307200kB, failcnt 1039 [ 50.042007][ T3324] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0 [ 50.049962][ T3324] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 50.057262][ T3324] Memory cgroup stats for /syz2: [ 50.116787][ T3324] cache 0 [ 50.124761][ T3324] rss 0 [ 50.127566][ T3324] shmem 0 [ 50.130579][ T3324] mapped_file 0 [ 50.134056][ T3324] dirty 0 [ 50.137017][ T3324] writeback 0 [ 50.140351][ T3324] workingset_refault_anon 128 [ 50.145172][ T3324] workingset_refault_file 568 [ 50.150089][ T3324] swap 200704 [ 50.153423][ T3324] swapcached 0 [ 50.156824][ T3324] pgpgin 7774 [ 50.160155][ T3324] pgpgout 7774 [ 50.163541][ T3324] pgfault 12201 [ 50.167088][ T3324] pgmajfault 98 [ 50.170609][ T3324] inactive_anon 0 [ 50.174259][ T3324] active_anon 0 [ 50.177734][ T3324] inactive_file 0 [ 50.181418][ T3324] active_file 0 [ 50.185035][ T3324] unevictable 0 [ 50.188562][ T3324] hierarchical_memory_limit 314572800 [ 50.194055][ T3324] hierarchical_memsw_limit 9223372036854771712 [ 50.200299][ T3324] total_cache 0 [ 50.203030][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 50.203065][ T29] audit: type=1326 audit(1768903885.209:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3995 comm="syz.4.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd881cacb9 code=0x7ffc0000 [ 50.203787][ T3324] total_rss 0 [ 50.212548][ T29] audit: type=1326 audit(1768903885.219:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3995 comm="syz.4.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7efd881cacb9 code=0x7ffc0000 [ 50.233237][ T3324] total_shmem 0 [ 50.233252][ T3324] total_mapped_file 0 [ 50.267152][ T3324] total_dirty 0 [ 50.270657][ T3324] total_writeback 0 [ 50.274482][ T3324] total_workingset_refault_anon 128 [ 50.279730][ T3324] total_workingset_refault_file 568 [ 50.285018][ T3324] total_swap 200704 [ 50.285561][ T29] audit: type=1326 audit(1768903885.249:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3995 comm="syz.4.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd881cacb9 code=0x7ffc0000 [ 50.288890][ T3324] total_swapcached 0 [ 50.288902][ T3324] total_pgpgin 7774 [ 50.288912][ T3324] total_pgpgout 7774 [ 50.312284][ T29] audit: type=1326 audit(1768903885.249:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3995 comm="syz.4.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7efd881cacb9 code=0x7ffc0000 [ 50.316118][ T3324] total_pgfault 12201 [ 50.316130][ T3324] total_pgmajfault 98 [ 50.319970][ T29] audit: type=1326 audit(1768903885.249:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3995 comm="syz.4.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd881cacb9 code=0x7ffc0000 [ 50.323865][ T3324] total_inactive_anon 0 [ 50.323877][ T3324] total_active_anon 0 [ 50.347106][ T29] audit: type=1326 audit(1768903885.249:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3995 comm="syz.4.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7efd881cacb9 code=0x7ffc0000 [ 50.347238][ T29] audit: type=1326 audit(1768903885.249:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3995 comm="syz.4.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd881cacb9 code=0x7ffc0000 [ 50.351178][ T3324] total_inactive_file 0 [ 50.351230][ T3324] total_active_file 0 [ 50.351237][ T3324] total_unevictable 0 [ 50.351247][ T3324] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 50.355232][ T29] audit: type=1326 audit(1768903885.259:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3995 comm="syz.4.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd881cacb9 code=0x7ffc0000 [ 50.378952][ T3324] ,cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.116,pid=3957,uid=0 [ 50.486225][ T3324] Memory cgroup out of memory: Killed process 3957 (syz.2.116) total-vm:96180kB, anon-rss:1204kB, file-rss:22288kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 50.520554][ T3997] loop0: detected capacity change from 0 to 128 [ 50.567094][ T29] audit: type=1400 audit(1768903885.569:841): avc: denied { bind } for pid=3999 comm="syz.4.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 50.586353][ T29] audit: type=1400 audit(1768903885.569:842): avc: denied { node_bind } for pid=3999 comm="syz.4.131" saddr=172.20.20.170 src=52768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 50.786770][ T3958] syz.2.116 (3958) used greatest stack depth: 7224 bytes left [ 52.017646][ T4034] loop3: detected capacity change from 0 to 8192 [ 52.091408][ T4034] loop3: p1 p2 p3 p4 [ 52.102061][ T4034] loop3: p1 size 262144 extends beyond EOD, truncated [ 52.116555][ T4034] loop3: p2 start 4293394690 is beyond EOD, truncated [ 52.123425][ T4034] loop3: p3 size 100663552 extends beyond EOD, truncated [ 52.149264][ T4034] loop3: p4 size 50331648 extends beyond EOD, truncated [ 52.263776][ T3314] udevd[3314]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 52.264864][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 52.283684][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 52.288685][ T4051] __nla_validate_parse: 3 callbacks suppressed [ 52.288792][ T4051] netlink: 240 bytes leftover after parsing attributes in process `syz.0.146'. [ 52.520199][ T4056] bridge_slave_0: left allmulticast mode [ 52.525977][ T4056] bridge_slave_0: left promiscuous mode [ 52.531797][ T4056] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.720144][ T4056] bridge_slave_1: left allmulticast mode [ 52.725876][ T4056] bridge_slave_1: left promiscuous mode [ 52.731732][ T4056] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.758841][ T4056] bond0: (slave bond_slave_0): Releasing backup interface [ 52.788493][ T4056] bond0: (slave bond_slave_1): Releasing backup interface [ 52.808851][ T4056] team0: Port device team_slave_0 removed [ 52.827598][ T4056] team0: Port device team_slave_1 removed [ 52.834861][ T4056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.842498][ T4056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.869306][ T4056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.876776][ T4056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.957380][ T4056] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 52.975200][ T4057] team0: Mode changed to "loadbalance" [ 53.346610][ T4080] netlink: 'syz.3.159': attribute type 1 has an invalid length. [ 53.445978][ T4094] netlink: 'syz.2.163': attribute type 27 has an invalid length. [ 53.476586][ T4094] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.483867][ T4094] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.527284][ T4094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.547108][ T4094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.642360][ T4098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.663030][ T4098] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.677776][ T4098] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 53.693452][ T2397] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.708189][ T2397] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.725914][ T2397] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.743708][ T2397] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.064461][ T4124] loop2: detected capacity change from 0 to 512 [ 54.106384][ T4124] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 54.136868][ T4124] EXT4-fs (loop2): mount failed [ 54.165940][ T4130] loop3: detected capacity change from 0 to 1024 [ 54.201676][ T4130] EXT4-fs: Ignoring removed nobh option [ 54.207321][ T4130] EXT4-fs: inline encryption not supported [ 54.227721][ T4132] loop0: detected capacity change from 0 to 128 [ 54.256794][ T4130] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.393393][ T4129] bio_check_eod: 34 callbacks suppressed [ 54.393413][ T4129] syz.0.176: attempt to access beyond end of device [ 54.393413][ T4129] loop0: rw=2049, sector=145, nr_sectors = 544 limit=128 [ 54.422509][ T4141] loop1: detected capacity change from 0 to 512 [ 54.430459][ T4141] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.178: inode has both inline data and extents flags [ 54.475079][ T4141] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.178: couldn't read orphan inode 15 (err -117) [ 54.487687][ T4141] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.518699][ T4129] syz.0.176: attempt to access beyond end of device [ 54.518699][ T4129] loop0: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 54.565438][ T4129] syz.0.176: attempt to access beyond end of device [ 54.565438][ T4129] loop0: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 54.579473][ T4129] syz.0.176: attempt to access beyond end of device [ 54.579473][ T4129] loop0: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 54.593793][ T4129] syz.0.176: attempt to access beyond end of device [ 54.593793][ T4129] loop0: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 54.608797][ T3325] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.619295][ T4129] syz.0.176: attempt to access beyond end of device [ 54.619295][ T4129] loop0: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 54.638174][ T4129] syz.0.176: attempt to access beyond end of device [ 54.638174][ T4129] loop0: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 54.654854][ T4129] syz.0.176: attempt to access beyond end of device [ 54.654854][ T4129] loop0: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 54.669970][ T4129] syz.0.176: attempt to access beyond end of device [ 54.669970][ T4129] loop0: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 54.684036][ T4129] syz.0.176: attempt to access beyond end of device [ 54.684036][ T4129] loop0: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 54.817733][ T4152] netlink: 14 bytes leftover after parsing attributes in process `syz.2.182'. [ 54.878812][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.900168][ T4154] netlink: 4 bytes leftover after parsing attributes in process `syz.4.183'. [ 54.942707][ T4154] netlink: 12 bytes leftover after parsing attributes in process `syz.4.183'. [ 55.009087][ T4162] netlink: 28 bytes leftover after parsing attributes in process `syz.4.187'. [ 55.034469][ T4164] netlink: 4 bytes leftover after parsing attributes in process `syz.1.188'. [ 55.113159][ T4167] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 55.125631][ T4164] netlink: 4 bytes leftover after parsing attributes in process `syz.1.188'. [ 55.236653][ T4183] netlink: 176 bytes leftover after parsing attributes in process `syz.4.197'. [ 55.246015][ T4164] Zero length message leads to an empty skb [ 55.452882][ T4205] netlink: 'syz.1.204': attribute type 1 has an invalid length. [ 55.488016][ T29] kauditd_printk_skb: 77 callbacks suppressed [ 55.488062][ T29] audit: type=1400 audit(1768903890.489:919): avc: denied { create } for pid=4201 comm="syz.0.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 55.491868][ T4205] 8021q: adding VLAN 0 to HW filter on device bond1 [ 55.511611][ T4206] netlink: 32 bytes leftover after parsing attributes in process `syz.2.203'. [ 55.535024][ T4208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.204'. [ 55.573744][ T4208] macsec1: entered promiscuous mode [ 55.579148][ T4208] bond1: entered promiscuous mode [ 55.584357][ T4208] macsec1: entered allmulticast mode [ 55.589763][ T4208] bond1: entered allmulticast mode [ 55.626655][ T4211] loop0: detected capacity change from 0 to 1024 [ 55.656447][ T4211] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.715685][ T29] audit: type=1400 audit(1768903890.719:920): avc: denied { read write } for pid=4210 comm="syz.0.205" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 55.738214][ T29] audit: type=1400 audit(1768903890.719:921): avc: denied { open } for pid=4210 comm="syz.0.205" path="/43/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 55.764773][ T29] audit: type=1400 audit(1768903890.729:922): avc: denied { watch watch_reads } for pid=4210 comm="syz.0.205" path="/43/file1" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 55.788216][ T29] audit: type=1400 audit(1768903890.729:923): avc: denied { watch } for pid=4210 comm="syz.0.205" path="/43/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 55.811275][ T29] audit: type=1400 audit(1768903890.729:924): avc: denied { remove_name } for pid=4210 comm="syz.0.205" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 55.833895][ T29] audit: type=1400 audit(1768903890.729:925): avc: denied { unlink } for pid=4210 comm="syz.0.205" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 55.868882][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.996435][ T29] audit: type=1400 audit(1768903890.849:926): avc: denied { setopt } for pid=4222 comm="syz.2.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 56.016049][ T29] audit: type=1400 audit(1768903890.849:927): avc: denied { connect } for pid=4222 comm="syz.2.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 56.128884][ T4245] xt_connbytes: Forcing CT accounting to be enabled [ 56.135708][ T3487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 56.313946][ T29] audit: type=1400 audit(1768903891.319:928): avc: denied { ioctl } for pid=4252 comm="syz.2.220" path="socket:[7752]" dev="sockfs" ino=7752 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 56.947499][ T4283] loop3: detected capacity change from 0 to 512 [ 56.954274][ T4283] EXT4-fs: Ignoring removed oldalloc option [ 56.965022][ T4283] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.232: dx entry: limit 1024 != root limit 124 [ 56.977294][ T4283] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.232: Corrupt directory, running e2fsck is recommended [ 56.991297][ T4283] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 57.008461][ T4283] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.232: corrupted in-inode xattr: invalid ea_ino [ 57.028659][ T4283] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.232: couldn't read orphan inode 15 (err -117) [ 57.044885][ T4268] bridge0: port 3(dummy0) entered disabled state [ 57.051442][ T4268] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.058662][ T4268] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.094580][ T4283] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.107314][ T4280] loop0: detected capacity change from 0 to 512 [ 57.142838][ T4283] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.232: dx entry: limit 1024 != root limit 124 [ 57.154876][ T4283] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.232: Corrupt directory, running e2fsck is recommended [ 57.168266][ T3487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 57.193171][ T4280] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.290741][ T4283] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.232: dx entry: limit 1024 != root limit 124 [ 57.302901][ T4283] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.232: Corrupt directory, running e2fsck is recommended [ 57.318262][ T4283] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.232: dx entry: limit 1024 != root limit 124 [ 57.330263][ T4283] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.232: Corrupt directory, running e2fsck is recommended [ 57.343981][ T4280] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.347059][ T4283] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.232: dx entry: limit 1024 != root limit 124 [ 57.366528][ T4283] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.232: Corrupt directory, running e2fsck is recommended [ 57.383055][ T4283] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.232: dx entry: limit 1024 != root limit 124 [ 57.395337][ T4283] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.232: Corrupt directory, running e2fsck is recommended [ 57.428357][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.719505][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.778657][ T4296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.801403][ T4296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.178988][ T4296] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.208636][ T3487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 58.416836][ T4296] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.435689][ T4334] capability: warning: `syz.0.251' uses 32-bit capabilities (legacy support in use) [ 58.450879][ T4302] cgroup: fork rejected by pids controller in /syz3 [ 58.528165][ T2971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 58.690679][ T4296] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.957945][ T4296] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.248297][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.328285][ T2397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.788114][ T3486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.790257][ T3514] IPVS: starting estimator thread 0... [ 59.797797][ T3486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.884698][ T57] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.898022][ T4404] IPVS: using max 2208 ests per chain, 110400 per kthread [ 59.965137][ T4412] IPv6: addrconf: prefix option has invalid lifetime [ 59.972606][ T4413] __nla_validate_parse: 6 callbacks suppressed [ 59.972623][ T4413] netlink: 12 bytes leftover after parsing attributes in process `syz.0.268'. [ 60.058187][ T4413] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.070631][ T4417] macvlan2: entered promiscuous mode [ 60.075999][ T4417] macvlan2: entered allmulticast mode [ 60.081630][ T2397] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.156667][ T4423] loop2: detected capacity change from 0 to 512 [ 60.181420][ T4425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.272'. [ 60.200196][ T4423] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 60.215411][ T57] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.244730][ T4423] EXT4-fs (loop2): 1 truncate cleaned up [ 60.276656][ T4423] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.288964][ T3514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.466748][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.476131][ T57] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.537040][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 60.537056][ T29] audit: type=1400 audit(1768903895.539:954): avc: denied { mount } for pid=4439 comm="syz.0.278" name="/" dev="configfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 60.578967][ T29] audit: type=1400 audit(1768903895.589:955): avc: denied { search } for pid=4439 comm="syz.0.278" name="/" dev="configfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 60.602838][ T29] audit: type=1400 audit(1768903895.609:956): avc: denied { search } for pid=4439 comm="syz.0.278" name="/" dev="configfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 60.624943][ T29] audit: type=1400 audit(1768903895.609:957): avc: denied { watch watch_reads } for pid=4439 comm="syz.0.278" path="/" dev="configfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 60.647849][ T29] audit: type=1400 audit(1768903895.609:958): avc: denied { search } for pid=4439 comm="syz.0.278" name="/" dev="configfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 60.669827][ T29] audit: type=1400 audit(1768903895.609:959): avc: denied { read open } for pid=4439 comm="syz.0.278" path="/" dev="configfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 60.717468][ T4450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.728552][ T4450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.859573][ T4450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.880038][ T4450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.931298][ T4450] macvlan2: left promiscuous mode [ 60.936387][ T4450] macvlan2: left allmulticast mode [ 60.951660][ T29] audit: type=1400 audit(1768903895.949:960): avc: denied { create } for pid=4459 comm="syz.4.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 60.971334][ T29] audit: type=1400 audit(1768903895.949:961): avc: denied { ioctl } for pid=4459 comm="syz.4.285" path="socket:[13126]" dev="sockfs" ino=13126 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 61.001628][ T4457] ip6gre2: entered promiscuous mode [ 61.006965][ T4457] ip6gre2: entered allmulticast mode [ 61.014057][ T273] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.023748][ T273] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.032899][ T273] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.042021][ T273] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.148078][ T29] audit: type=1400 audit(1768903896.159:962): avc: denied { bind } for pid=4463 comm="syz.1.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 61.292583][ T4476] loop3: detected capacity change from 0 to 164 [ 61.306047][ T29] audit: type=1400 audit(1768903896.309:963): avc: denied { connect } for pid=4477 comm="syz.1.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.817655][ T4502] loop3: detected capacity change from 0 to 1024 [ 61.825329][ T4502] EXT4-fs: Ignoring removed bh option [ 61.840146][ T4502] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.865225][ T4502] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 15: block 273:freeing already freed block (bit 17); block bitmap corrupt. [ 61.881244][ T4502] EXT4-fs (loop3): Remounting filesystem read-only [ 61.889072][ T4502] EXT4-fs warning (device loop3): ext4_convert_unwritten_extents:4984: inode #15: block 64: len 64: ext4_ext_map_blocks returned -30 [ 62.249318][ T4513] syz_tun: entered allmulticast mode [ 62.255597][ T4512] syz_tun: left allmulticast mode [ 62.423990][ T4520] netlink: 12 bytes leftover after parsing attributes in process `syz.1.307'. [ 62.591685][ T4528] loop2: detected capacity change from 0 to 1024 [ 62.599743][ T4528] EXT4-fs: Ignoring removed nobh option [ 62.605443][ T4528] EXT4-fs: Ignoring removed nomblk_io_submit option [ 62.619546][ T4528] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.655226][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.678389][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.774453][ T4542] loop3: detected capacity change from 0 to 1024 [ 62.784225][ T4542] EXT4-fs: Ignoring removed bh option [ 62.801599][ T4542] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.817673][ T4542] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.315: Allocating blocks 385-513 which overlap fs metadata [ 62.841142][ T4542] EXT4-fs (loop3): pa ffff888107a4c070: logic 16, phys. 129, len 24 [ 62.849264][ T4542] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 62.895757][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.077535][ T4564] loop3: detected capacity change from 0 to 1024 [ 63.099845][ T4564] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.151044][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.695670][ T4597] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=4597 comm=syz.2.338 [ 63.710128][ T4597] netlink: 232 bytes leftover after parsing attributes in process `syz.2.338'. [ 64.085654][ T4606] loop2: detected capacity change from 0 to 512 [ 64.113781][ T4606] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 64.159428][ T4606] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.192397][ T4606] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 64.325958][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.608305][ T4629] loop0: detected capacity change from 0 to 2048 [ 64.661214][ T4629] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.738143][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.879193][ T4680] loop1: detected capacity change from 0 to 8192 [ 65.892319][ T29] kauditd_printk_skb: 585 callbacks suppressed [ 65.892337][ T29] audit: type=1400 audit(1768903900.889:1549): avc: denied { wake_alarm } for pid=4688 comm="syz.0.371" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 65.932801][ T29] audit: type=1400 audit(1768903900.939:1550): avc: denied { watch watch_reads } for pid=4691 comm="syz.4.372" path="/file0" dev="ramfs" ino=15661 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 65.956666][ T4680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.367'. [ 65.991825][ T4698] netlink: 12 bytes leftover after parsing attributes in process `syz.2.374'. [ 66.027361][ T4702] netlink: 16 bytes leftover after parsing attributes in process `syz.4.376'. [ 66.124016][ T4708] netlink: 44 bytes leftover after parsing attributes in process `syz.1.379'. [ 66.146658][ T4710] net_ratelimit: 3 callbacks suppressed [ 66.146758][ T4710] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 66.397533][ T29] audit: type=1400 audit(1768903901.399:1551): avc: denied { bind } for pid=4727 comm="syz.4.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 66.422305][ T29] audit: type=1400 audit(1768903901.429:1552): avc: denied { setopt } for pid=4727 comm="syz.4.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 66.469030][ T29] audit: type=1400 audit(1768903901.479:1553): avc: denied { getopt } for pid=4729 comm="syz.3.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 66.775899][ T29] audit: type=1326 audit(1768903901.779:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4748 comm="syz.0.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45acf3acb9 code=0x7ffc0000 [ 66.800005][ T29] audit: type=1326 audit(1768903901.809:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4748 comm="syz.0.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45acf3acb9 code=0x7ffc0000 [ 66.830718][ T29] audit: type=1326 audit(1768903901.809:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4748 comm="syz.0.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f45acf3acb9 code=0x7ffc0000 [ 66.854309][ T29] audit: type=1326 audit(1768903901.809:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4748 comm="syz.0.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45acf3acb9 code=0x7ffc0000 [ 66.877736][ T29] audit: type=1326 audit(1768903901.809:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4748 comm="syz.0.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f45acf3acb9 code=0x7ffc0000 [ 67.235244][ T4764] netlink: 'syz.1.405': attribute type 3 has an invalid length. [ 67.243053][ T4764] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.405'. [ 67.269453][ T4766] loop3: detected capacity change from 0 to 1024 [ 67.277833][ T4766] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 67.292799][ T4761] IPv6: sit1: Disabled Multicast RS [ 67.300846][ T4766] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #3: block 1: comm syz.3.404: lblock 1 mapped to illegal pblock 1 (length 1) [ 67.325190][ T4766] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.404: Failed to acquire dquot type 0 [ 67.345935][ T4766] EXT4-fs error (device loop3): ext4_free_blocks:6728: comm syz.3.404: Freeing blocks not in datazone - block = 0, count = 4096 [ 67.418084][ T4766] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.404: Invalid inode bitmap blk 0 in block_group 0 [ 67.440501][ T37] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 67.458116][ T4766] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 67.479354][ T37] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:2: Failed to release dquot type 0 [ 67.498108][ T4766] EXT4-fs (loop3): 1 orphan inode deleted [ 67.536254][ T4766] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.597362][ T4788] netlink: 12 bytes leftover after parsing attributes in process `syz.0.413'. [ 67.629858][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.639455][ T273] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.649210][ T273] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.660009][ T4788] netlink: 12 bytes leftover after parsing attributes in process `syz.0.413'. [ 67.666337][ T273] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.688553][ T273] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.701461][ T4792] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.763689][ T4792] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 67.793988][ T4800] loop1: detected capacity change from 0 to 512 [ 67.806681][ T4794] loop3: detected capacity change from 0 to 8192 [ 67.820117][ T4800] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 67.879575][ T4800] EXT4-fs (loop1): 1 orphan inode deleted [ 67.885380][ T4800] EXT4-fs (loop1): 1 truncate cleaned up [ 67.893719][ T4800] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.909236][ T4800] EXT4-fs (loop1): shut down requested (2) [ 67.926259][ T4800] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.945492][ T3327] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 67.954133][ T3327] FAT-fs (loop3): Filesystem has been set read-only [ 67.972208][ T4810] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 68.342699][ T2971] kernel write not supported for file bpf-prog (pid: 2971 comm: kworker/0:2) [ 68.451443][ T4839] netlink: 'syz.3.434': attribute type 32 has an invalid length. [ 68.730502][ T4865] process 'syz.3.440' launched './file1' with NULL argv: empty string added [ 68.974389][ T4884] netlink: 24 bytes leftover after parsing attributes in process `syz.3.448'. [ 69.188683][ T4902] netlink: 20 bytes leftover after parsing attributes in process `syz.3.455'. [ 69.208935][ T4902] netlink: 152 bytes leftover after parsing attributes in process `syz.3.455'. [ 69.320994][ T4909] loop2: detected capacity change from 0 to 2048 [ 69.548318][ T4909] EXT4-fs: Ignoring removed bh option [ 69.607429][ T4909] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.619986][ T4909] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.653400][ T4909] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.459: bg 0: block 345: padding at end of block bitmap is not set [ 69.675073][ T4909] EXT4-fs (loop2): Remounting filesystem read-only [ 69.754167][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.088738][ T4927] netlink: 'syz.2.465': attribute type 1 has an invalid length. [ 70.321016][ T4914] Set syz1 is full, maxelem 65536 reached [ 70.569720][ T4942] loop3: detected capacity change from 0 to 128 [ 70.733053][ T4950] bio_check_eod: 3510 callbacks suppressed [ 70.733074][ T4950] syz.3.471: attempt to access beyond end of device [ 70.733074][ T4950] loop3: rw=1, sector=153, nr_sectors = 8 limit=128 [ 70.792797][ T4950] syz.3.471: attempt to access beyond end of device [ 70.792797][ T4950] loop3: rw=1, sector=169, nr_sectors = 8 limit=128 [ 70.849084][ T4950] syz.3.471: attempt to access beyond end of device [ 70.849084][ T4950] loop3: rw=1, sector=185, nr_sectors = 8 limit=128 [ 70.931147][ T4950] syz.3.471: attempt to access beyond end of device [ 70.931147][ T4950] loop3: rw=1, sector=201, nr_sectors = 8 limit=128 [ 70.954475][ T4950] syz.3.471: attempt to access beyond end of device [ 70.954475][ T4950] loop3: rw=1, sector=217, nr_sectors = 8 limit=128 [ 70.979405][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 70.979423][ T29] audit: type=1400 audit(1768903905.989:1598): avc: denied { setopt } for pid=4962 comm="syz.2.481" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.985722][ T4950] syz.3.471: attempt to access beyond end of device [ 70.985722][ T4950] loop3: rw=1, sector=233, nr_sectors = 8 limit=128 [ 71.021525][ T4964] netlink: 20 bytes leftover after parsing attributes in process `syz.2.481'. [ 71.026990][ T4950] syz.3.471: attempt to access beyond end of device [ 71.026990][ T4950] loop3: rw=1, sector=249, nr_sectors = 8 limit=128 [ 71.078091][ T4950] syz.3.471: attempt to access beyond end of device [ 71.078091][ T4950] loop3: rw=1, sector=265, nr_sectors = 8 limit=128 [ 71.096467][ T29] audit: type=1400 audit(1768903906.099:1599): avc: denied { unmount } for pid=4966 comm="syz.4.482" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 71.108670][ T4950] syz.3.471: attempt to access beyond end of device [ 71.108670][ T4950] loop3: rw=1, sector=281, nr_sectors = 8 limit=128 [ 71.164348][ T4950] syz.3.471: attempt to access beyond end of device [ 71.164348][ T4950] loop3: rw=1, sector=297, nr_sectors = 8 limit=128 [ 71.295468][ T4965] ================================================================== [ 71.303619][ T4965] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 71.310688][ T4965] [ 71.313036][ T4965] read-write to 0xffff88813f0ad42c of 4 bytes by task 4981 on cpu 1: [ 71.321118][ T4965] fifo_open+0x86/0x5d0 [ 71.325308][ T4965] do_dentry_open+0x54b/0xa60 [ 71.330026][ T4965] vfs_open+0x37/0x1e0 [ 71.334160][ T4965] path_openat+0x1de9/0x23c0 [ 71.338800][ T4965] do_filp_open+0x15d/0x280 [ 71.343355][ T4965] do_sys_openat2+0xa6/0x150 [ 71.347989][ T4965] __se_sys_openat2+0x193/0x1f0 [ 71.352887][ T4965] __x64_sys_openat2+0x55/0x70 [ 71.357700][ T4965] x64_sys_call+0x2c04/0x3000 [ 71.362418][ T4965] do_syscall_64+0xc0/0x2a0 [ 71.366959][ T4965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.373002][ T4965] [ 71.375353][ T4965] read to 0xffff88813f0ad42c of 4 bytes by task 4965 on cpu 0: [ 71.382921][ T4965] wait_for_partner+0xd5/0x1e0 [ 71.387728][ T4965] fifo_open+0x4b1/0x5d0 [ 71.392003][ T4965] do_dentry_open+0x54b/0xa60 [ 71.396815][ T4965] vfs_open+0x37/0x1e0 [ 71.400973][ T4965] path_openat+0x1de9/0x23c0 [ 71.405645][ T4965] do_filp_open+0x15d/0x280 [ 71.410194][ T4965] do_sys_openat2+0xa6/0x150 [ 71.414836][ T4965] __x64_sys_openat+0xf2/0x120 [ 71.419643][ T4965] x64_sys_call+0x2b07/0x3000 [ 71.424361][ T4965] do_syscall_64+0xc0/0x2a0 [ 71.428904][ T4965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.434832][ T4965] [ 71.437189][ T4965] value changed: 0x00000001 -> 0x00000002 [ 71.442933][ T4965] [ 71.445283][ T4965] Reported by Kernel Concurrency Sanitizer on: [ 71.451470][ T4965] CPU: 0 UID: 0 PID: 4965 Comm: syz.1.480 Not tainted syzkaller #0 PREEMPT(voluntary) [ 71.461138][ T4965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 71.471235][ T4965] ================================================================== [ 71.486393][ T29] audit: type=1400 audit(1768903906.299:1600): avc: denied { getopt } for pid=4979 comm="syz.2.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1