last executing test programs: 58.627543896s ago: executing program 2 (id=313): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000240)='./file0\x00', 0x8c5) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x55000061) inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0x20000004) 58.500621798s ago: executing program 2 (id=315): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x7}, 0x204, 0x0, 0x101, 0x8, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa) getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x7, 0x37d}, 0x400, 0x0, 0x7, 0x4, 0x4, 0x8001, 0x8012}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x3ca9, &(0x7f00000000c0)={0x0, 0xd4ea, 0x2, 0x1, 0x2}) io_uring_enter(r0, 0x6a8a, 0xffefffff, 0x21, &(0x7f0000000040)={[0xffffffffffffffff]}, 0x8) 58.455746609s ago: executing program 2 (id=317): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x4000000, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r1, 0x1) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000002740)=""/4069, &(0x7f00000004c0)=0xfe5) 58.372329531s ago: executing program 2 (id=319): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 58.331003592s ago: executing program 2 (id=321): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f0000000000)={0x10001e, 0x100074, 0x40000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x0) mlockall(0x5) 58.092947197s ago: executing program 2 (id=325): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfffb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}}, 0x20040084) 58.047457718s ago: executing program 32 (id=325): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfffb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}}, 0x20040084) 57.164064157s ago: executing program 1 (id=340): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex_waitv(&(0x7f0000004040)=[{0x3, &(0x7f0000003fc0)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) 56.160115238s ago: executing program 1 (id=350): r0 = socket$kcm(0x2a, 0x2, 0x0) r1 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000640)={0x0, 0x4d, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x8919, 0x0) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0) 55.943326793s ago: executing program 1 (id=353): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000001480)=""/4096, 0x38) 55.392667944s ago: executing program 1 (id=357): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x428) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x3, 0x2, 0x3e, 0xcb, 0x3d6, 0x40, 0x0, 0x0, 0xb87d, 0x38, 0x1, 0xfffe, 0x12, 0xed86}, [{0x3, 0x5, 0x8, 0xd, 0x1, 0xe5, 0x10000000001, 0x450c}], "", ['\x00']}, 0x178) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 55.10694796s ago: executing program 1 (id=367): mkdir(&(0x7f0000000ac0)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x104000, 0x0) 55.069115751s ago: executing program 1 (id=360): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="5bb65d3f2511", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0xe, 0x24, 0x65, 0x0, 0x3, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x4e20, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x6, 0x100}}}}}}}, 0x0) 39.994209011s ago: executing program 33 (id=360): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="5bb65d3f2511", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0xe, 0x24, 0x65, 0x0, 0x3, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x4e20, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x6, 0x100}}}}}}}, 0x0) 13.980795113s ago: executing program 6 (id=904): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sigaltstack(&(0x7f0000000180)={&(0x7f0000002880)=""/4118, 0x1, 0x1016}, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f0000000180)) 13.848169606s ago: executing program 6 (id=905): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400004, 0x0, @perf_config_ext={0x80000001}, 0x82, 0x0, 0x0, 0x6, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x1d}, 0x4e21, 0x80, 0x1, 0x0, 0xa, 0xe0, 0x80, 0xff}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}, @in6=@remote, 0x3c, 0x0, 0x0, 0x50030000, 0x2, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) 13.531666953s ago: executing program 6 (id=911): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c4603000704810000000000000003003e00f9ffffffd50100000000000040000000000000008b00000000000000360d00000500380003"], 0xe8) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) close(r0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) 13.303012318s ago: executing program 6 (id=916): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f00000007c0)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000640)='./file0/file0\x00', 0x272) 13.265736099s ago: executing program 6 (id=919): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x3000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x80000000}]) io_getevents(r1, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 12.372292158s ago: executing program 6 (id=933): r0 = socket(0x1e, 0x802, 0x0) close(r0) r1 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r1, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r1, 0x2) poll(&(0x7f0000000040)=[{r0, 0x7448}], 0x1, 0xfffffff7) 12.370121598s ago: executing program 34 (id=933): r0 = socket(0x1e, 0x802, 0x0) close(r0) r1 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r1, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r1, 0x2) poll(&(0x7f0000000040)=[{r0, 0x7448}], 0x1, 0xfffffff7) 2.39224431s ago: executing program 7 (id=1098): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_audit(0x10, 0x3, 0x9) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 1.972471848s ago: executing program 7 (id=1105): bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@fallback, 0x10, 0x1, 0xa, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280)}, 0x40) openat$pfkey(0xffffffffffffff9c, 0x0, 0x101080, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0x9}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x14, &(0x7f00000000c0)={[{@clone_children}], [{@pcr={'pcr', 0x3d, 0x2d}}]}) 1.806630722s ago: executing program 7 (id=1108): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0x0, 0x0, 0x1}, &(0x7f0000001500)=[{}]) 1.526139337s ago: executing program 4 (id=1117): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20080058) connect$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000000)="b6", 0x1, 0x2000, 0x0, 0x0) 1.484178898s ago: executing program 4 (id=1119): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000280)={@multicast2, @empty, 0x0, "614afa85791a63abd0f993af8096b504000000000000003fdc3fd440829c98ae", 0x3, 0xffffffff, 0x0, 0xf1c}, 0x3c) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x8, 0x4, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0xf1, 0x2}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) 1.451435589s ago: executing program 0 (id=1121): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0), 0x1, 0x5c5, &(0x7f0000000480)="$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") fallocate(0xffffffffffffffff, 0x10, 0x37ec, 0x683) getdents(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) preadv2(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 1.446598029s ago: executing program 4 (id=1122): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000300)=0x208) shutdown(r0, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000180), 0x4) 1.335772262s ago: executing program 0 (id=1125): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, r1) sendmsg$DEVLINK_CMD_RATE_GET(r1, 0x0, 0x20042840) r2 = socket$inet6(0xa, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x41, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 1.302503533s ago: executing program 0 (id=1128): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) close(0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) 1.271866173s ago: executing program 5 (id=1129): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newsa={0x128, 0x10, 0x633, 0x0, 0x200000, {{@in=@local, @in6=@empty, 0xffff, 0x3ffc, 0x5e21, 0x8001, 0x0, 0x20}, {@in=@loopback, 0x4d4, 0x32}, @in=@remote, {0x323, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000, 0x7efffffe}, {0x0, 0xfffffffffffffffc, 0x0, 0x20000000000}, {0x7, 0x0, 0x2}, 0x70bd01, 0x3500, 0x2, 0x4, 0x1}, [@encap={0x1c, 0x20, {0x0, 0x4e1e, 0x0, @in=@private=0xa010100}}, @encap={0x1c, 0x4, {0x1, 0x4e20, 0x0, @in6=@local}}]}, 0x128}}, 0x24008800) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001980)=ANY=[@ANYRESHEX, @ANYRESDEC], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r1}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r1, &(0x7f00000000c0)}, 0x20) 1.271053743s ago: executing program 0 (id=1130): openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80540, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000005780)='./file0\x00', 0x9400002f) setxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 1.226883084s ago: executing program 0 (id=1132): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000900)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f0000002080)="$eJzs3V9rW+UfAPDvSdv9//3WwRjqhRR24WQuXVv/TBA2L0WHA72foc3KaLqMJh1rHWy7cDfeyBBEHIgvwHsvh2/AVyHoYMgoeuFN5aQnW9YkTZtlNvN8PnC25znnpN/z5DnPk+/JSUgAuTWR/lOIeDkivkoiDrdsG41s48TGfmuPbsymSxLr65/8kUSSrWvun2T/H8wqL0XEz19EnCy0x62trC6UKpXyUlafrC9enaytrJ66vFiaL8+Xr0zPzJx5a2b63XfeHlhbX7/w17cf3//gzJfH17758cGRu0mci0PZttZ2PINbrZWJmMiek7E4t2nHqQEEGyZJrx06nAPsvpFsnI9FOgccjpFs1AP/fTcjYh3IqcT4h5xq5gHNa/sBXQe/MB6+v3EB1N7+0Y33RmJf49rowFry1JVRer07PoD4aYyffr93N12ix/sQNwcQD6Dp1u2IOD062j7/Jdn817/T23jXb3OMvL3+wG66n+Y/b3TKfwqP85/okP8c7DB2+9F7/BceDCBMV2n+917H/Pfx1DU+ktX+18j5xpJLlyvl0xHx/4g4EWN703q/93Na8790SeM3c8HsOB6M7n36MXOleqnPcG0e3o545Un+m0Tb/L+vketu7v/0+biwzRjHyvde7batd/tbDT4DXv8h4rWO/f/kjlay9f3Jycb5MNk8K9r9eefYL93i76z9g5f2/4Gt2z+etN6vre08xvf7/i5329bv+b8n+bRR3pOtu16q15emIvYkH7Wvn37y2Ga9uX/a/hPHt57/Op3/+yPis222/87R7mnQMPT/3I76f+eFXz/8/Ltu8bfX/282SieyNduZ/7Z7gM/y3AEAAAAAAMCwKUTEoUgKxcflQqFY3Ph8x9E4UKhUa/WTl6rLV+ai8V3Z8RgrNO90H275PMRU9nnYZn16U30mIo5ExNcj+xv14my1MrfbjQcAAAAAAAAAAAAAAAAAAIAhcbDL9/9Tv43s9tEBz52f/Ib86jn+B/FLT8BQ8voP+WX8Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj8AAAAAAAAAAAAAAAAAAAAAAAAAAAAM1IXz59Nlfe3Rjdm0PndtZXmheu3UXLm2UFxcni3OVpeuFuer1flKuThbXez19yrV6tWp6Vi+Plkv1+qTtZXVi4vV5Sv1i5cXS/Pli+Wxf6VVAAAAAAAAAAAAAAAAAAAA8GKprawulCqV8pJC18LZGIrD6LuQ9Orls9nJ0FeI0d1voMJzKOzyxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALf4JAAD//5CPL9Y=") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x9000) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3) 1.177665605s ago: executing program 5 (id=1134): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x400, 0xfffffffd, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xc, 0x7}, {0xa, 0x7}, {0xd, 0xd}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008080}, 0x48c1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}, 0x1, 0x0, 0x0, 0x20008801}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 1.112138626s ago: executing program 0 (id=1135): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x1000000000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e2, &(0x7f0000000140)) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 956.91354ms ago: executing program 3 (id=1138): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000}, 0x8010) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @rumble={0x1, 0x8}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000001940)={{r0}, 0x0, 0xe, @inherit={0x70, &(0x7f0000000780)={0x0, 0x5, 0xcf9d, 0x8, {0x2, 0x3, 0xbb9, 0x1, 0xffffffff}, [0x5, 0x9, 0x3, 0x1, 0x10000]}}, @subvolid=0xffff}) write$char_usb(r0, &(0x7f0000000040)="e2", 0xff0f) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000940)=""/4096) 920.13526ms ago: executing program 7 (id=1139): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000000)=0xfffffffc, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4a21, @rand_addr=0x64010102}, 0x10) 814.711263ms ago: executing program 3 (id=1140): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x44, r2, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x44}}, 0x4000) 814.355283ms ago: executing program 3 (id=1141): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_audit(0x10, 0x3, 0x9) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 746.047604ms ago: executing program 7 (id=1142): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000004240)=0xc3, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x40000000000021d, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 734.687515ms ago: executing program 3 (id=1143): openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80540, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000005780)='./file0\x00', 0x9400002f) setxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 719.196925ms ago: executing program 3 (id=1144): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f000029a000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 652.868626ms ago: executing program 3 (id=1145): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000bc0)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c666d61736b3d30303030303030303030303030303030303030303036362c696f636861727365743d69736f383835392d312c6572726f72733d636f6e74696e75652c756e695f786c6174653d302c696f636861727365743d61736369692c726f6469722c73686f72746e616d653d6d697865642c756e695f786c6174653d302c757466383d302c757466383d302c756e695f786c6174653d312c64656275672c756e695f786c6174653d312c666d61736b3d30303030303030303030303030303030303030303030332c6e6f63617365aec489af6ba9723d4b17106f6d47b9ade1c253d4e3b08066427cae9f41fd1e1dd25a22ec22ad6e8bf6f67e052de91b544f2f4541f87a0c0b36e8d444150b35c110bda57fe7a9c06ba087cc975447082aaf95213301f3e04b70ea67a8aa0d582ca1a9525dba7116d80f126f782a78428b878fc79c0be9ad98cb6950995e6edba78e5301e8c8e69cc85beceb8b54f84a84787815ef9a18f1fe1c81b4c1830102f7e3236e2533e486ecb46ee53991c5bfe6289a474582b2e57741fd8de78f42097851bee74d4201c7767e0e0f4b34523150639b1291441ad01f2f72ed3679d7bca0e8b4e0689f883196af0d0dfe7344f276c1b4bd333882cf7879248ad423e3f21cd0cae2309519f9d40df23cf05d9c8d8f9d07da771ea1e3bcd8478fb989f770da17f700000000000000"], 0x6, 0x2c0, &(0x7f0000000900)="$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") prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000586000/0x2000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000fcffffff8500000028000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 652.637316ms ago: executing program 7 (id=1146): prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") r0 = socket$kcm(0x29, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) 585.194988ms ago: executing program 4 (id=1147): r0 = socket$inet6(0xa, 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000740)={0x2, {{0xa, 0x4e21, 0x7, @mcast2, 0x2}}, 0x0, 0x2, [{{0xa, 0x4e22, 0x3, @mcast2, 0x4f}}, {{0xa, 0x4e23, 0x2c, @local, 0x6}}]}, 0x190) syz_emit_ethernet(0x42, &(0x7f0000000040)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0xc, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 544.559149ms ago: executing program 4 (id=1148): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4800, 0x2, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1a3803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r0}, 0xc) 244.633265ms ago: executing program 5 (id=1149): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000500)='cpuacct.stat\x00', 0x275a, 0x0) ftruncate(r2, 0x10000008008976) 244.450585ms ago: executing program 4 (id=1150): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x17, &(0x7f0000000240)=ANY=[@ANYBLOB="18080000d0ff0000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffffff850000000600000085100000030000001800000000000000000000000000000195000000000000001801000020946c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdffffffeffe850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) preadv(0xffffffffffffffff, 0x0, 0x0, 0x101, 0x9) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24004004) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0) 143.432367ms ago: executing program 5 (id=1151): r0 = socket(0x200000000000011, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) getsockname$packet(r0, &(0x7f0000002440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000550001000000000000f9000007008201", @ANYRES32=r1, @ANYRES32, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 75.866828ms ago: executing program 5 (id=1152): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050001000010"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800) 0s ago: executing program 5 (id=1153): unshare(0x2020600) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10) kernel console output (not intermixed with test programs): ebugfs: 'hsr0' already exists in 'hsr' [ 31.780488][ T3306] Cannot create hsr debugfs directory [ 31.788325][ T3308] hsr_slave_0: entered promiscuous mode [ 31.794501][ T3308] hsr_slave_1: entered promiscuous mode [ 31.800384][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 31.806189][ T3308] Cannot create hsr debugfs directory [ 31.902452][ T3300] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.911222][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.933374][ T3300] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.941951][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.961113][ T3300] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.970070][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.990074][ T3300] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.998872][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.068658][ T3299] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.077266][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.085392][ T3299] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.093909][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.101978][ T3299] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.110700][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.124699][ T3299] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.133694][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.163052][ T3308] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.171641][ T3308] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.179434][ T3308] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.188190][ T3308] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.196499][ T3308] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.205166][ T3308] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.212816][ T3308] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.221548][ T3308] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.249834][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.268314][ T3306] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.277637][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.289993][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.300740][ T2055] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.307945][ T2055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.315910][ T3306] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.324654][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.332383][ T3306] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.341111][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.349651][ T3306] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.358339][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.371110][ T2055] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.378732][ T2055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.413463][ T3305] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.423071][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.430794][ T3305] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.440034][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.448235][ T3305] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.456911][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.464704][ T3305] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.473261][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.498677][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.532320][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.548588][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.555949][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.565777][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.580345][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.587499][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.617905][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.633932][ T2079] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.641050][ T2079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.657697][ T2079] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.664811][ T2079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.688077][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.699215][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.718966][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.740363][ T2055] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.747522][ T2055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.757942][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.770182][ T2055] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.777307][ T2055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.796379][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.803494][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.813718][ T2055] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.820806][ T2055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.832770][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.846662][ T3308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.010695][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.047086][ T3300] veth0_vlan: entered promiscuous mode [ 33.075034][ T3300] veth1_vlan: entered promiscuous mode [ 33.108383][ T3300] veth0_macvtap: entered promiscuous mode [ 33.133111][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.142453][ T3300] veth1_macvtap: entered promiscuous mode [ 33.178978][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.193484][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.207090][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.218662][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.232375][ T68] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.242352][ T68] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.254533][ T68] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.264343][ T68] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.316759][ T3308] veth0_vlan: entered promiscuous mode [ 33.338983][ T3308] veth1_vlan: entered promiscuous mode [ 33.370464][ T3308] veth0_macvtap: entered promiscuous mode [ 33.385616][ T3300] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.398323][ T3308] veth1_macvtap: entered promiscuous mode [ 33.416777][ T3299] veth0_vlan: entered promiscuous mode [ 33.446374][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.459593][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.470047][ T3299] veth1_vlan: entered promiscuous mode [ 33.483842][ T40] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.506508][ T40] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.515690][ T40] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.533489][ T40] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.559895][ T3306] veth0_vlan: entered promiscuous mode [ 33.575126][ T3306] veth1_vlan: entered promiscuous mode [ 33.582606][ T3305] veth0_vlan: entered promiscuous mode [ 33.605881][ T3305] veth1_vlan: entered promiscuous mode [ 33.615524][ T3299] veth0_macvtap: entered promiscuous mode [ 33.628191][ T3306] veth0_macvtap: entered promiscuous mode [ 33.636534][ T3299] veth1_macvtap: entered promiscuous mode [ 33.644967][ T3306] veth1_macvtap: entered promiscuous mode [ 33.677441][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.686785][ T3305] veth0_macvtap: entered promiscuous mode [ 33.699684][ T3305] veth1_macvtap: entered promiscuous mode [ 33.707494][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.718785][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.728727][ T40] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.742671][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.750243][ T2055] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.759362][ T2055] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.773720][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.781007][ T2055] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.795008][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.802484][ T2055] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.811580][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.820474][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.836152][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.849279][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.859172][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.868115][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.882271][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.923601][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 33.923617][ T28] audit: type=1400 audit(1783338788.453:174): avc: denied { tracepoint } for pid=3515 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 34.004695][ T28] audit: type=1400 audit(1783338788.533:175): avc: denied { create } for pid=3519 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 34.034260][ T3520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 34.044721][ T28] audit: type=1400 audit(1783338788.553:176): avc: denied { create } for pid=3515 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 34.056920][ T3520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 34.066172][ T28] audit: type=1400 audit(1783338788.553:177): avc: denied { bind } for pid=3515 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 34.096784][ T28] audit: type=1400 audit(1783338788.563:178): avc: denied { write } for pid=3515 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 34.125899][ T28] audit: type=1400 audit(1783338788.563:179): avc: denied { write } for pid=3519 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 34.175422][ T3355] IPVS: starting estimator thread 0... [ 34.185940][ T3531] netlink: 'syz.4.13': attribute type 8 has an invalid length. [ 34.193970][ T28] audit: type=1400 audit(1783338788.573:180): avc: denied { setopt } for pid=3515 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 34.215403][ T3531] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13'. [ 34.234910][ T28] audit: type=1400 audit(1783338788.613:181): avc: denied { read write } for pid=3305 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.291645][ T3529] IPVS: using max 2544 ests per chain, 127200 per kthread [ 34.298974][ T28] audit: type=1400 audit(1783338788.613:182): avc: denied { open } for pid=3305 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.316553][ T3537] Illegal XDP return value 4294967282 on prog (id 4) dev syz_tun, expect packet loss! [ 34.324681][ T28] audit: type=1400 audit(1783338788.613:183): avc: denied { ioctl } for pid=3305 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.684906][ T3569] netlink: 'syz.0.28': attribute type 7 has an invalid length. [ 34.714016][ T3569] netlink: 'syz.0.28': attribute type 7 has an invalid length. [ 34.731955][ T3572] loop3: detected capacity change from 0 to 512 [ 34.749675][ T3572] EXT4-fs (loop3): 1 truncate cleaned up [ 34.759984][ T3572] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.778653][ T3569] netlink: 'syz.0.28': attribute type 7 has an invalid length. [ 34.834601][ T3572] syz.3.29 uses obsolete (PF_INET,SOCK_PACKET) [ 34.943271][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.726828][ T3608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.44'. [ 35.939664][ T3616] netlink: 'syz.0.46': attribute type 10 has an invalid length. [ 36.014632][ T3616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.023497][ T3616] bond0: (slave netdevsim2): Enslaving as an active interface with an up link [ 36.095753][ T3625] xt_hashlimit: size too large, truncated to 1048576 [ 36.638040][ T3647] netlink: 4 bytes leftover after parsing attributes in process `syz.3.60'. [ 36.827372][ T3655] loop2: detected capacity change from 0 to 512 [ 36.851555][ T3655] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.865876][ T3655] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 36.905095][ T3655] EXT4-fs (loop2): 1 truncate cleaned up [ 36.918619][ T3655] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.067020][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.125338][ T3666] loop2: detected capacity change from 0 to 512 [ 37.134735][ T3666] ======================================================= [ 37.134735][ T3666] WARNING: The mand mount option has been deprecated and [ 37.134735][ T3666] and is ignored by this kernel. Remove the mand [ 37.134735][ T3666] option from the mount to silence this warning. [ 37.134735][ T3666] ======================================================= [ 37.171536][ T3666] EXT4-fs: Invalid want_extra_isize 1969 [ 37.358368][ T3642] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 37.367100][ T3642] bond1: option packets_per_slave: allowed values 0 - 65535 [ 37.376085][ T3642] bond1 (unregistering): Released all slaves [ 37.387925][ T3662] netlink: 'syz.1.66': attribute type 12 has an invalid length. [ 37.404836][ T3662] netlink: 'syz.1.66': attribute type 29 has an invalid length. [ 37.431521][ T3642] syz.4.58 (3642) used greatest stack depth: 10624 bytes left [ 37.442425][ T3662] netlink: 148 bytes leftover after parsing attributes in process `syz.1.66'. [ 37.452993][ T3662] netlink: 'syz.1.66': attribute type 1 has an invalid length. [ 37.461107][ T3664] netlink: 'syz.1.66': attribute type 12 has an invalid length. [ 37.471748][ T3664] netlink: 'syz.1.66': attribute type 29 has an invalid length. [ 37.480672][ T3664] netlink: 148 bytes leftover after parsing attributes in process `syz.1.66'. [ 37.966052][ T3708] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3708 comm=syz.4.80 [ 38.487052][ T3761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.85'. [ 38.888120][ T3761] netlink: 24 bytes leftover after parsing attributes in process `syz.3.85'. [ 39.051545][ T3825] loop3: detected capacity change from 0 to 1024 [ 39.107723][ T3825] EXT4-fs: Ignoring removed orlov option [ 39.118877][ T3825] EXT4-fs: inline encryption not supported [ 39.327042][ T3825] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.379451][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 39.379468][ T28] audit: type=1400 audit(1783338793.903:246): avc: denied { getopt } for pid=3826 comm="syz.0.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 39.482580][ T28] audit: type=1400 audit(1783338793.943:247): avc: denied { write } for pid=3824 comm="syz.3.88" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.603789][ T28] audit: type=1400 audit(1783338793.953:248): avc: denied { read append } for pid=3824 comm="syz.3.88" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 39.688792][ T28] audit: type=1400 audit(1783338793.953:249): avc: denied { open } for pid=3824 comm="syz.3.88" path="/16/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 39.787222][ T28] audit: type=1400 audit(1783338793.953:250): avc: denied { ioctl } for pid=3824 comm="syz.3.88" path="/16/file1/file1" dev="loop3" ino=15 ioctlcmd=0x5839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 40.027811][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.091793][ T28] audit: type=1400 audit(1783338794.623:251): avc: denied { read } for pid=3855 comm="syz.3.94" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 40.375714][ T28] audit: type=1400 audit(1783338794.903:252): avc: denied { getopt } for pid=3862 comm="syz.4.100" lport=52161 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 40.458221][ T28] audit: type=1400 audit(1783338794.943:253): avc: denied { shutdown } for pid=3861 comm="syz.0.99" lport=32805 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 40.553822][ T28] audit: type=1400 audit(1783338795.083:254): avc: denied { write } for pid=3873 comm="syz.0.104" path="socket:[5352]" dev="sockfs" ino=5352 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 40.559609][ T3739] loop2: detected capacity change from 0 to 256 [ 40.638021][ T28] audit: type=1400 audit(1783338795.163:255): avc: denied { write } for pid=3877 comm="syz.0.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 40.797978][ T3886] validate_nla: 1 callbacks suppressed [ 40.797996][ T3886] netlink: 'syz.4.110': attribute type 1 has an invalid length. [ 40.878815][ T3886] 8021q: adding VLAN 0 to HW filter on device bond1 [ 40.950961][ T3892] bond1: (slave ip6erspan0): making interface the new active one [ 41.014588][ T3892] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 41.036221][ T3898] loop0: detected capacity change from 0 to 512 [ 41.060672][ T3898] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.129919][ T3903] SELinux: failed to load policy [ 41.202331][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.266486][ T3918] loop3: detected capacity change from 0 to 512 [ 41.284219][ T3921] netlink: 43 bytes leftover after parsing attributes in process `syz.2.125'. [ 41.320157][ T3918] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.360745][ T3918] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.421762][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.432472][ T3939] netlink: 12 bytes leftover after parsing attributes in process `syz.1.132'. [ 41.514455][ T3946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.135'. [ 42.044425][ T3968] loop3: detected capacity change from 0 to 256 [ 42.072974][ T3968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.142'. [ 42.431487][ T3985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.150'. [ 42.825572][ T4002] loop2: detected capacity change from 0 to 512 [ 42.828985][ T4007] netlink: 48 bytes leftover after parsing attributes in process `syz.3.155'. [ 42.846266][ T4002] EXT4-fs (loop2): invalid journal inode [ 42.858243][ T4002] EXT4-fs (loop2): can't get journal size [ 42.880869][ T4002] EXT4-fs (loop2): 1 truncate cleaned up [ 42.897124][ T4002] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.999417][ T4016] sg_write: data in/out 352340/136 bytes for SCSI command 0x0-- guessing data in; [ 42.999417][ T4016] program syz.4.162 not setting count and/or reply_len properly [ 43.035036][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.163351][ T4022] loop4: detected capacity change from 0 to 1024 [ 43.200049][ T4022] EXT4-fs: Ignoring removed mblk_io_submit option [ 43.238143][ T4022] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 43.266573][ T4022] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 43.301906][ T4022] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #11: comm syz.4.164: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 43.358711][ T4022] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 43.359003][ T4022] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.164: couldn't read orphan inode 11 (err -117) [ 43.368379][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 43.368419][ C1] EXT4-fs (loop4): initial error at time 1783338797: ext4_ext_check_inode:521: inode 11 [ 43.368448][ C1] EXT4-fs (loop4): last error at time 1783338797: ext4_ext_check_inode:521: inode 11 [ 43.517870][ T4022] loop4: lost filesystem error report for type 5 error -117 [ 43.518568][ T4022] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.067492][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.085069][ T4028] loop3: detected capacity change from 0 to 512 [ 44.131061][ T4028] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 44.164468][ T4028] EXT4-fs (loop3): 1 truncate cleaned up [ 44.232036][ T4028] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.365849][ T4049] netlink: 48 bytes leftover after parsing attributes in process `syz.2.171'. [ 44.622041][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.735164][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 44.735182][ T28] audit: type=1400 audit(1783338799.263:294): avc: denied { create } for pid=4059 comm="syz.0.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 44.776106][ T28] audit: type=1400 audit(1783338799.293:295): avc: denied { connect } for pid=4059 comm="syz.0.177" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.818173][ T28] audit: type=1400 audit(1783338799.293:296): avc: denied { ioctl } for pid=4059 comm="syz.0.177" path="socket:[5658]" dev="sockfs" ino=5658 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 44.885806][ T28] audit: type=1400 audit(1783338799.293:297): avc: denied { write } for pid=4059 comm="syz.0.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 44.949673][ T28] audit: type=1400 audit(1783338799.293:298): avc: denied { write } for pid=4059 comm="syz.0.177" laddr=::1 lport=6 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 45.016276][ T28] audit: type=1400 audit(1783338799.333:299): avc: denied { setopt } for pid=4063 comm="syz.3.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 45.058458][ T28] audit: type=1400 audit(1783338799.383:300): avc: denied { write } for pid=4067 comm="syz.3.182" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 45.175064][ T28] audit: type=1400 audit(1783338799.703:301): avc: denied { mount } for pid=4081 comm="syz.3.188" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 45.220016][ T4085] loop3: detected capacity change from 0 to 128 [ 45.232701][ T4085] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 45.245323][ T4085] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.260190][ T28] audit: type=1400 audit(1783338799.783:302): avc: denied { write } for pid=4084 comm="syz.3.190" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 45.282898][ T28] audit: type=1400 audit(1783338799.803:303): avc: denied { read } for pid=4084 comm="syz.3.190" path="/41/file1/file1" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 45.307911][ T4085] EXT4-fs (loop3): shut down requested (1) [ 45.331567][ T3308] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.439332][ T4100] netlink: 28 bytes leftover after parsing attributes in process `syz.3.194'. [ 45.532015][ T4106] netlink: 'syz.3.199': attribute type 1 has an invalid length. [ 45.540419][ T4108] capability: warning: `syz.0.200' uses 32-bit capabilities (legacy support in use) [ 45.547016][ T4106] 8021q: adding VLAN 0 to HW filter on device bond1 [ 45.576660][ T4106] bond1: (slave geneve2): making interface the new active one [ 45.585737][ T4106] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 45.610960][ T4106] syz.3.199 (4106) used greatest stack depth: 10088 bytes left [ 45.664656][ T4115] loop3: detected capacity change from 0 to 512 [ 45.673608][ T4115] EXT4-fs: Ignoring removed nobh option [ 45.688379][ T4115] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 45.701087][ T4115] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 45.715222][ T4115] EXT4-fs (loop3): 1 truncate cleaned up [ 45.721545][ T4115] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.744385][ T4115] EXT4-fs (loop3): shut down requested (2) [ 45.762067][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.812339][ T4123] netlink: 24 bytes leftover after parsing attributes in process `syz.1.206'. [ 45.932886][ T4137] loop2: detected capacity change from 0 to 512 [ 45.958913][ T4137] EXT4-fs (loop2): invalid first ino: 1 [ 45.980422][ T4137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.212'. [ 46.002044][ T4137] bond0: option updelay: invalid value (18446744071840436799) [ 46.009671][ T4137] bond0: option updelay: allowed values 0 - 2147483647 [ 46.214493][ T4162] vhci_hcd vhci_hcd.0: invalid port number 255 [ 46.222150][ T4162] vhci_hcd vhci_hcd.0: invalid port number 255 [ 46.259971][ T4166] capability: warning: `syz.1.225' uses deprecated v2 capabilities in a way that may be insecure [ 46.327238][ T4170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.226'. [ 46.891041][ T4212] loop3: detected capacity change from 0 to 1024 [ 46.902278][ T4212] EXT4-fs: Ignoring removed mblk_io_submit option [ 46.921095][ T4212] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 46.932604][ T4212] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 46.961048][ T4212] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #11: comm syz.3.243: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 46.981579][ T4212] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 46.982993][ T4212] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.243: couldn't read orphan inode 11 (err -117) [ 46.992669][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 46.992692][ C1] EXT4-fs (loop3): initial error at time 1783338801: ext4_ext_check_inode:521: inode 11 [ 46.992732][ C1] EXT4-fs (loop3): last error at time 1783338801: ext4_ext_check_inode:521: inode 11 [ 47.058677][ T4212] loop3: lost filesystem error report for type 5 error -117 [ 47.059273][ T4212] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.425159][ T4243] loop4: detected capacity change from 0 to 256 [ 47.442534][ T4246] all: renamed from lo (while UP) [ 47.459777][ T4243] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 47.525302][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.757793][ T3811] Bluetooth: hci0: Frame reassembly failed (-84) [ 48.125066][ T4281] loop0: detected capacity change from 0 to 1024 [ 48.140414][ T4281] EXT4-fs: Ignoring removed mblk_io_submit option [ 48.154979][ T4281] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 48.167407][ T4281] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 48.193606][ T4281] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #11: comm syz.0.273: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 48.233523][ T4281] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 48.234839][ T4281] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.273: couldn't read orphan inode 11 (err -117) [ 48.244969][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 48.244990][ C1] EXT4-fs (loop0): initial error at time 1783338802: ext4_ext_check_inode:521: inode 11 [ 48.245024][ C1] EXT4-fs (loop0): last error at time 1783338802: ext4_ext_check_inode:521: inode 11 [ 48.291832][ T4281] loop0: lost filesystem error report for type 5 error -117 [ 48.294163][ T4281] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.586885][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.085882][ T4320] netlink: 40 bytes leftover after parsing attributes in process `syz.4.287'. [ 49.510020][ T4344] loop2: detected capacity change from 0 to 1024 [ 49.542434][ T4344] EXT4-fs: Ignoring removed mblk_io_submit option [ 49.589653][ T4344] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 49.598587][ T4344] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 49.612452][ T4344] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #11: comm syz.2.288: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 49.632635][ T4344] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 49.632848][ T4344] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.288: couldn't read orphan inode 11 (err -117) [ 49.644391][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 49.644415][ C0] EXT4-fs (loop2): initial error at time 1783338804: ext4_ext_check_inode:521: inode 11 [ 49.644447][ C0] EXT4-fs (loop2): last error at time 1783338804: ext4_ext_check_inode:521: inode 11 [ 49.683827][ T4344] loop2: lost filesystem error report for type 5 error -117 [ 49.685153][ T4344] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.767928][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 49.767945][ T28] audit: type=1400 audit(1783338804.293:347): avc: denied { watch } for pid=4362 comm="syz.4.304" path="/74/file0" dev="tmpfs" ino=396 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 49.800285][ T4363] process 'syz.4.304' launched './file0' with NULL argv: empty string added [ 49.803617][ T3600] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 49.825901][ T28] audit: type=1400 audit(1783338804.333:348): avc: denied { execute } for pid=4362 comm="syz.4.304" name="file0" dev="tmpfs" ino=396 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 49.849771][ T28] audit: type=1400 audit(1783338804.343:349): avc: denied { execute_no_trans } for pid=4362 comm="syz.4.304" path="/74/file0" dev="tmpfs" ino=396 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 49.902248][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.920554][ T4369] netlink: 8 bytes leftover after parsing attributes in process `syz.4.307'. [ 49.929883][ T4369] netlink: 12 bytes leftover after parsing attributes in process `syz.4.307'. [ 49.950841][ T4369] geneve2: entered promiscuous mode [ 49.961841][ T4369] geneve2: entered allmulticast mode [ 49.973544][ T4371] loop2: detected capacity change from 0 to 256 [ 49.981211][ T4369] Zero length message leads to an empty skb [ 49.996711][ T4371] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 50.069993][ T28] audit: type=1400 audit(1783338804.593:350): avc: denied { map } for pid=4366 comm="syz.1.305" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 50.121767][ T4378] loop3: detected capacity change from 0 to 128 [ 50.152258][ T4378] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 50.174988][ T4378] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.200276][ T28] audit: type=1400 audit(1783338804.723:351): avc: denied { write } for pid=4377 comm="syz.3.309" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.289661][ T4385] loop1: detected capacity change from 0 to 128 [ 50.299683][ T3308] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.317474][ T28] audit: type=1400 audit(1783338804.853:352): avc: denied { watch_reads } for pid=4386 comm="syz.2.313" path="/47/file0" dev="tmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 50.355033][ T4385] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 50.402798][ T4385] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 50.448905][ T49] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 50.513894][ T28] audit: type=1400 audit(1783338805.043:353): avc: denied { mount } for pid=4402 comm="syz.2.319" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 50.572863][ T28] audit: type=1400 audit(1783338805.073:354): avc: denied { mounton } for pid=4402 comm="syz.2.319" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 50.632042][ T28] audit: type=1400 audit(1783338805.093:355): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 50.659464][ T4408] ref_ctr_offset mismatch. inode: 0x66 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 50.807758][ T28] audit: type=1400 audit(1783338805.333:356): avc: denied { view } for pid=4416 comm="syz.1.326" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 50.828769][ T3813] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.912890][ T3813] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.984570][ T3813] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.985144][ T4434] xt_hashlimit: size too large, truncated to 1048576 [ 51.045086][ T3813] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.174337][ T3813] bridge_slave_1: left allmulticast mode [ 51.180984][ T3813] bridge_slave_1: left promiscuous mode [ 51.201796][ T3813] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.220765][ T3813] bridge_slave_0: left allmulticast mode [ 51.229641][ T3813] bridge_slave_0: left promiscuous mode [ 51.238703][ T3813] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.326384][ T3813] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.351619][ T3813] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 51.375238][ T3813] bond0 (unregistering): Released all slaves [ 51.439009][ T3023] 8021q: adding VLAN 0 to HW filter on device eth1 [ 51.516096][ T3813] hsr_slave_0: left promiscuous mode [ 51.540562][ T3813] hsr_slave_1: left promiscuous mode [ 51.572127][ T3813] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.606672][ T3813] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.619371][ T4468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.635924][ T4468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.646003][ T3813] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.670774][ T4473] SELinux: ebitmap start bit (16778240) is beyond the end of the bitmap (8384) [ 51.671786][ T3813] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.682884][ T4473] SELinux: failed to load policy [ 51.715653][ T3813] veth1_macvtap: left promiscuous mode [ 51.731396][ T3813] veth0_macvtap: left promiscuous mode [ 51.743930][ T3813] veth1_vlan: left promiscuous mode [ 51.759442][ T3813] veth0_vlan: left promiscuous mode [ 51.878619][ T3813] team0 (unregistering): Port device team_slave_1 removed [ 51.889247][ T3813] team0 (unregistering): Port device team_slave_0 removed [ 51.945455][ T4426] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.953719][ T4426] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.961522][ T4426] bridge_slave_0: entered allmulticast mode [ 51.968227][ T4426] bridge_slave_0: entered promiscuous mode [ 52.000921][ T4426] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.026265][ T4426] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.049474][ T4426] bridge_slave_1: entered allmulticast mode [ 52.058842][ T4426] bridge_slave_1: entered promiscuous mode [ 52.093867][ T4426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.106406][ T4426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.136384][ T3023] 8021q: adding VLAN 0 to HW filter on device eth2 [ 52.150593][ T4426] team0: Port device team_slave_0 added [ 52.160999][ T4426] team0: Port device team_slave_1 added [ 52.201087][ T4426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.228395][ T4426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.256975][ T4426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.265080][ T4502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.344'. [ 52.305449][ T4426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.312998][ T4426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.340841][ T4426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.414786][ T4426] hsr_slave_0: entered promiscuous mode [ 52.422918][ T4426] hsr_slave_1: entered promiscuous mode [ 52.438970][ T4426] debugfs: 'hsr0' already exists in 'hsr' [ 52.452825][ T4426] Cannot create hsr debugfs directory [ 52.481988][ T4504] netlink: 'syz.0.345': attribute type 4 has an invalid length. [ 52.510979][ T4504] netlink: 'syz.0.345': attribute type 4 has an invalid length. [ 52.629626][ T4514] loop0: detected capacity change from 0 to 256 [ 52.739517][ T4426] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 52.756296][ T4426] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 52.764487][ T4426] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 52.774076][ T4426] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 52.782229][ T4426] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 52.791238][ T4426] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 52.814854][ T4426] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 52.896163][ T4426] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 52.963907][ T3023] 8021q: adding VLAN 0 to HW filter on device eth3 [ 53.026592][ T4548] netlink: 48 bytes leftover after parsing attributes in process `syz.3.354'. [ 53.104196][ T4550] ip6gre1: entered promiscuous mode [ 53.110735][ T4550] ip6gre1: entered allmulticast mode [ 53.131335][ T4550] syz.3.355 (4550) used greatest stack depth: 9624 bytes left [ 53.146119][ T4426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.168853][ T4426] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.203498][ T3813] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.210711][ T3813] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.223085][ T3813] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.230221][ T3813] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.425619][ T3023] 8021q: adding VLAN 0 to HW filter on device eth4 [ 53.481569][ T4426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.662290][ T4426] veth0_vlan: entered promiscuous mode [ 53.671755][ T4426] veth1_vlan: entered promiscuous mode [ 53.690009][ T4426] veth0_macvtap: entered promiscuous mode [ 53.699511][ T4426] veth1_macvtap: entered promiscuous mode [ 53.712927][ T4426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.726989][ T4426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.739720][ T3813] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.749283][ T3813] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.766917][ T3813] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.776800][ T3813] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.081110][ T4611] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 54.089098][ T4611] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 54.096925][ T4611] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 54.104855][ T4611] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 54.112779][ T4611] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 54.120650][ T4611] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 54.128756][ T4611] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 54.136706][ T4611] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 54.144624][ T4611] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 54.152571][ T4611] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 54.247304][ T4615] loop5: detected capacity change from 0 to 1024 [ 54.264645][ T4615] EXT4-fs: Ignoring removed mblk_io_submit option [ 54.281506][ T4615] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 54.301032][ T4615] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 54.322400][ T4615] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #11: comm syz.5.362: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 54.341907][ T4615] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 54.343646][ T4615] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.362: couldn't read orphan inode 11 (err -117) [ 54.353194][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 54.353219][ C0] EXT4-fs (loop5): initial error at time 1783338808: ext4_ext_check_inode:521: inode 11 [ 54.353254][ C0] EXT4-fs (loop5): last error at time 1783338808: ext4_ext_check_inode:521: inode 11 [ 54.392760][ T4615] loop5: lost filesystem error report for type 5 error -117 [ 54.410327][ T4615] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.765000][ T4630] loop4: detected capacity change from 0 to 512 [ 54.788516][ T4630] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 54.816256][ T4630] EXT4-fs (loop4): 1 truncate cleaned up [ 54.828273][ T4630] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.847015][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 54.847032][ T28] audit: type=1400 audit(1783338809.373:415): avc: denied { write } for pid=4629 comm="syz.4.369" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 54.954851][ T28] audit: type=1400 audit(1783338809.373:416): avc: denied { add_name } for pid=4629 comm="syz.4.369" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 54.978443][ T4426] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.066152][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.115654][ T28] audit: type=1400 audit(1783338809.643:417): avc: denied { create } for pid=4638 comm="syz.5.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 55.135912][ T28] audit: type=1400 audit(1783338809.643:418): avc: denied { accept } for pid=4638 comm="syz.5.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 55.264101][ T4649] loop4: detected capacity change from 0 to 512 [ 55.276695][ T4649] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 55.304061][ T4649] EXT4-fs (loop4): 1 truncate cleaned up [ 55.321966][ T4649] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.383526][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.609288][ T28] audit: type=1400 audit(1783338810.133:419): avc: denied { create } for pid=4678 comm="syz.4.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 55.633808][ T28] audit: type=1400 audit(1783338810.133:420): avc: denied { bind } for pid=4678 comm="syz.4.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 55.654060][ T28] audit: type=1400 audit(1783338810.133:421): avc: denied { write } for pid=4678 comm="syz.4.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 55.673946][ T28] audit: type=1400 audit(1783338810.133:422): avc: denied { read } for pid=4678 comm="syz.4.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 55.837439][ T28] audit: type=1400 audit(1783338810.363:423): avc: denied { map } for pid=4685 comm="syz.5.385" path="socket:[7951]" dev="sockfs" ino=7951 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 55.897157][ T28] audit: type=1400 audit(1783338810.363:424): avc: denied { read } for pid=4685 comm="syz.5.385" path="socket:[7951]" dev="sockfs" ino=7951 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 56.154760][ T4695] netlink: 48 bytes leftover after parsing attributes in process `syz.4.388'. [ 56.863669][ T4711] sg_write: data in/out 426140/136 bytes for SCSI command 0x0-- guessing data in; [ 56.863669][ T4711] program syz.5.393 not setting count and/or reply_len properly [ 57.416071][ T4717] xt_hashlimit: size too large, truncated to 1048576 [ 57.903898][ T4733] loop3: detected capacity change from 0 to 512 [ 57.921525][ T4733] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 57.946516][ T4733] EXT4-fs (loop3): 1 truncate cleaned up [ 57.961389][ T4733] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.054721][ T4736] syzkaller0: entered promiscuous mode [ 58.060298][ T4736] syzkaller0: entered allmulticast mode [ 58.187137][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.224421][ T4748] netlink: 164 bytes leftover after parsing attributes in process `syz.3.409'. [ 58.238625][ T4751] loop5: detected capacity change from 0 to 128 [ 58.257403][ T4751] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 58.258876][ T4748] netlink: 164 bytes leftover after parsing attributes in process `syz.3.409'. [ 58.283668][ T4751] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.364947][ T4426] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 58.598051][ T4773] loop5: detected capacity change from 0 to 512 [ 58.605779][ T4773] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 58.629900][ T4773] EXT4-fs (loop5): 1 truncate cleaned up [ 58.646542][ T4773] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.206053][ T4426] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.477195][ T4794] erspan0: entered promiscuous mode [ 59.503188][ T4794] erspan0: left promiscuous mode [ 59.630540][ T1722] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 63.800927][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 63.800945][ T28] audit: type=1400 audit(1783338818.323:431): avc: denied { write } for pid=4803 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.851365][ T28] audit: type=1400 audit(1783338818.373:432): avc: denied { write } for pid=4814 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.481382][ T28] audit: type=1400 audit(1783338819.003:433): avc: denied { write } for pid=4817 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.527412][ T28] audit: type=1400 audit(1783338819.053:434): avc: denied { write } for pid=4828 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.669024][ T28] audit: type=1400 audit(1783338819.193:435): avc: denied { write } for pid=4831 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.714569][ T28] audit: type=1400 audit(1783338819.243:436): avc: denied { write } for pid=4842 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.610087][ T28] audit: type=1400 audit(1783338820.133:437): avc: denied { write } for pid=4845 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.654668][ T28] audit: type=1400 audit(1783338820.183:438): avc: denied { write } for pid=4856 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.162743][ T4895] netlink: 12 bytes leftover after parsing attributes in process `syz.5.440'. [ 69.207875][ T1722] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.268605][ T1722] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.346249][ T1722] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.402719][ T28] audit: type=1400 audit(1783338823.933:439): avc: denied { mounton } for pid=4912 comm="syz.3.445" path="/proc/234/task" dev="proc" ino=9281 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 69.452708][ T1722] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.509257][ T4877] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.518978][ T4877] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.526677][ T4877] bridge_slave_0: entered allmulticast mode [ 69.536723][ T4877] bridge_slave_0: entered promiscuous mode [ 69.548693][ T4877] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.562817][ T4877] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.571758][ T4877] bridge_slave_1: entered allmulticast mode [ 69.578464][ T4877] bridge_slave_1: entered promiscuous mode [ 69.612886][ T4877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.658230][ T4877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.694830][ T1722] bridge_slave_1: left allmulticast mode [ 69.712476][ T1722] bridge_slave_1: left promiscuous mode [ 69.721493][ T1722] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.735446][ T1722] bridge_slave_0: left allmulticast mode [ 69.750358][ T1722] bridge_slave_0: left promiscuous mode [ 69.764132][ T1722] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.773607][ T28] audit: type=1400 audit(1783338824.303:440): avc: denied { write } for pid=4932 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.835923][ T28] audit: type=1400 audit(1783338824.343:441): avc: denied { write } for pid=4944 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.874962][ T28] audit: type=1400 audit(1783338824.353:442): avc: denied { allowed } for pid=4946 comm="syz.3.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 69.927960][ T1722] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.938332][ T1722] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.950337][ T1722] bond0 (unregistering): Released all slaves [ 69.965491][ T3023] 8021q: adding VLAN 0 to HW filter on device eth5 [ 69.991200][ T4877] team0: Port device team_slave_0 added [ 70.005444][ T1722] hsr_slave_0: left promiscuous mode [ 70.024105][ T28] audit: type=1400 audit(1783338824.553:443): avc: denied { connect } for pid=4952 comm="syz.4.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 70.040807][ T1722] hsr_slave_1: left promiscuous mode [ 70.061533][ T1722] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.080898][ T1722] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.088845][ T1722] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.096740][ T1722] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.109581][ T1722] veth1_macvtap: left promiscuous mode [ 70.116638][ T1722] veth0_macvtap: left promiscuous mode [ 70.122615][ T1722] veth1_vlan: left promiscuous mode [ 70.129538][ T1722] veth0_vlan: left promiscuous mode [ 70.194647][ T28] audit: type=1400 audit(1783338824.693:444): avc: denied { ioctl } for pid=4959 comm="syz.3.456" path="socket:[9474]" dev="sockfs" ino=9474 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 70.228078][ T4963] loop5: detected capacity change from 0 to 1024 [ 70.257592][ T4963] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.286404][ T28] audit: type=1400 audit(1783338824.813:445): avc: denied { write } for pid=4962 comm="syz.5.457" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 70.323346][ T28] audit: type=1400 audit(1783338824.843:446): avc: denied { append } for pid=4962 comm="syz.5.457" path="/27/file1/cpuacct.usage_percpu_user" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 70.323891][ T4962] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 70.349282][ T28] audit: type=1400 audit(1783338824.843:447): avc: denied { map } for pid=4962 comm="syz.5.457" path="/27/file1/cpuacct.usage_percpu_user" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 70.393280][ T4963] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 70.407454][ T4963] EXT4-fs (loop5): This should not happen!! Data will be lost [ 70.407454][ T4963] [ 70.417870][ T4963] EXT4-fs (loop5): Total free blocks count 0 [ 70.424782][ T4963] EXT4-fs (loop5): Free/Dirty block details [ 70.430891][ T4963] EXT4-fs (loop5): free_blocks=20480 [ 70.438119][ T4963] EXT4-fs (loop5): dirty_blocks=16 [ 70.447479][ T4963] EXT4-fs (loop5): Block reservation details [ 70.454711][ T4963] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 70.473189][ T1722] team0 (unregistering): Port device team_slave_1 removed [ 70.485364][ T4426] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 70.498443][ T4426] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.527759][ T1722] team0 (unregistering): Port device team_slave_0 removed [ 70.580744][ T4877] team0: Port device team_slave_1 added [ 70.708160][ T4922] loop0: detected capacity change from 0 to 512 [ 70.759023][ T4877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.777779][ T4877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.897050][ T4877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.910951][ T4877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.943635][ T4877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.036767][ T4877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.096529][ T28] audit: type=1400 audit(1783338825.623:448): avc: denied { write } for pid=4979 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.188897][ T4877] hsr_slave_0: entered promiscuous mode [ 71.196650][ T4877] hsr_slave_1: entered promiscuous mode [ 71.218940][ T4877] debugfs: 'hsr0' already exists in 'hsr' [ 71.226950][ T4877] Cannot create hsr debugfs directory [ 71.242859][ T3023] 8021q: adding VLAN 0 to HW filter on device eth6 [ 71.343873][ T5019] netlink: 'syz.5.474': attribute type 1 has an invalid length. [ 71.355997][ T1722] IPVS: stop unused estimator thread 0... [ 71.370129][ T5030] sg_write: data in/out 39264/136 bytes for SCSI command 0x0-- guessing data in; [ 71.370129][ T5030] program syz.4.476 not setting count and/or reply_len properly [ 71.403093][ T4922] EXT4-fs: Ignoring removed nobh option [ 71.485241][ T4877] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 71.506482][ T4877] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.550443][ T4877] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 71.573870][ T4877] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.598463][ T4877] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 71.617819][ T4877] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.627316][ T4877] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 71.654693][ T4877] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.933002][ T4922] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.978640][ T4922] ext4 filesystem being mounted at /92/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.605484][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.625415][ T3023] 8021q: adding VLAN 0 to HW filter on device eth7 [ 72.893883][ T4877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.979034][ T4877] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.997388][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.004678][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.025274][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.032416][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.215576][ T3023] 8021q: adding VLAN 0 to HW filter on device eth8 [ 73.299525][ T5121] netlink: 'syz.0.496': attribute type 4 has an invalid length. [ 73.496988][ T4877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.507094][ T5143] loop3: detected capacity change from 0 to 128 [ 73.567186][ T5148] netlink: 12 bytes leftover after parsing attributes in process `syz.5.504'. [ 73.572798][ T5143] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 73.596610][ T5143] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.750473][ T4877] veth0_vlan: entered promiscuous mode [ 73.773832][ T4877] veth1_vlan: entered promiscuous mode [ 73.786204][ T5166] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.793445][ T5166] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.813877][ T3308] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 73.823121][ T5166] bridge0: entered allmulticast mode [ 73.843157][ T4877] veth0_macvtap: entered promiscuous mode [ 73.854747][ T5166] bridge_slave_1: left allmulticast mode [ 73.860566][ T5166] bridge_slave_1: left promiscuous mode [ 73.867242][ T5166] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.876112][ T5166] bridge_slave_0: left allmulticast mode [ 73.902303][ T5166] bridge_slave_0: left promiscuous mode [ 73.908532][ T5166] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.924825][ T4877] veth1_macvtap: entered promiscuous mode [ 73.947634][ T4877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.970033][ T4877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.994190][ T30] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.007745][ T30] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.034795][ T30] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.048296][ T30] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.941980][ T5208] loop6: detected capacity change from 0 to 1024 [ 75.956188][ T5212] loop5: detected capacity change from 0 to 256 [ 75.959147][ T5208] EXT4-fs: Ignoring removed mblk_io_submit option [ 75.974256][ T5208] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 75.988342][ T5208] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 76.020413][ T5208] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #11: comm syz.6.428: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 76.055257][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 76.055273][ T28] audit: type=1400 audit(1783338830.583:468): avc: denied { name_bind } for pid=5217 comm="syz.5.527" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 76.070626][ T5208] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 76.085630][ T5208] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.428: couldn't read orphan inode 11 (err -117) [ 76.094842][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 76.094865][ C0] EXT4-fs (loop6): initial error at time 1783338830: ext4_ext_check_inode:521: inode 11 [ 76.094907][ C0] EXT4-fs (loop6): last error at time 1783338830: ext4_ext_check_inode:521: inode 11 [ 76.139706][ T5208] loop6: lost filesystem error report for type 5 error -117 [ 76.139792][ T28] audit: type=1400 audit(1783338830.543:467): avc: denied { getopt } for pid=5209 comm="syz.4.524" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 76.141770][ T5208] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.176986][ T5221] net_ratelimit: 44 callbacks suppressed [ 76.177006][ T5221] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 76.346044][ T28] audit: type=1400 audit(1783338830.873:469): avc: denied { mounton } for pid=5234 comm="syz.4.534" path="/128/file0" dev="tmpfs" ino=671 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 76.446525][ T4877] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.722678][ T5247] loop4: detected capacity change from 0 to 32768 [ 76.763098][ T5247] loop4: p1 p3 < > [ 76.975941][ T4874] udevd[4874]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 76.987470][ T4928] udevd[4928]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 76.992752][ T5275] netlink: 'syz.6.551': attribute type 12 has an invalid length. [ 77.048160][ T5273] loop5: detected capacity change from 0 to 4096 [ 77.078076][ T5273] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.159860][ T28] audit: type=1400 audit(1783338831.683:470): avc: denied { write } for pid=5272 comm="syz.5.550" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.311346][ T4426] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.356059][ T5296] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 77.738208][ T28] audit: type=1400 audit(1783338832.263:471): avc: denied { accept } for pid=5309 comm="syz.4.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 78.117048][ T28] audit: type=1400 audit(1783338832.643:472): avc: denied { write } for pid=5326 comm="syz.0.573" path="socket:[10594]" dev="sockfs" ino=10594 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 78.157605][ T28] audit: type=1400 audit(1783338832.683:473): avc: denied { setopt } for pid=5324 comm="syz.5.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 78.438742][ T28] audit: type=1400 audit(1783338832.963:474): avc: denied { ioctl } for pid=5330 comm="syz.0.584" path="socket:[10602]" dev="sockfs" ino=10602 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 78.733971][ T5356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.581'. [ 79.249973][ T5379] loop4: detected capacity change from 0 to 2048 [ 79.331718][ T5379] loop4: p3 p4 < > [ 79.344514][ T5379] loop4: p3 size 201326592 extends beyond EOD, truncated [ 79.502245][ T5395] netlink: 463 bytes leftover after parsing attributes in process `syz.0.596'. [ 79.524044][ T4928] udevd[4928]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 79.541788][ T5390] udevd[5390]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 79.784001][ T5383] loop5: detected capacity change from 0 to 32768 [ 79.842520][ T5383] loop5: p1 p3 < > [ 79.847974][ T28] audit: type=1400 audit(1783338834.373:475): avc: denied { ioctl } for pid=5408 comm="syz.4.605" path="socket:[11568]" dev="sockfs" ino=11568 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 80.185186][ T28] audit: type=1400 audit(1783338834.653:476): avc: denied { ioctl } for pid=5430 comm="syz.0.613" path="socket:[11626]" dev="sockfs" ino=11626 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 80.231530][ T4928] udevd[4928]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 80.245505][ T5390] udevd[5390]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 80.268705][ T4928] udevd[4928]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 80.280735][ T5390] udevd[5390]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 80.377184][ T5438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.616'. [ 80.510092][ T5432] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 80.551863][ T5440] netlink: 100 bytes leftover after parsing attributes in process `syz.4.617'. [ 80.596504][ T5442] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 81.035922][ T5453] loop4: detected capacity change from 0 to 32768 [ 81.094364][ T5453] loop4: p1 p3 < > [ 81.540917][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 81.540934][ T28] audit: type=1400 audit(1783338836.063:481): avc: denied { read } for pid=5491 comm="syz.0.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 81.628803][ T5500] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 82.909577][ T5560] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 83.465621][ T28] audit: type=1400 audit(1783338837.993:482): avc: denied { write } for pid=5566 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.525155][ T28] audit: type=1400 audit(1783338838.033:483): avc: denied { write } for pid=5577 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.644064][ T28] audit: type=1400 audit(1783338838.153:484): avc: denied { write } for pid=5581 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.667664][ T28] audit: type=1400 audit(1783338838.173:485): avc: denied { write } for pid=5595 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.775381][ T28] audit: type=1400 audit(1783338838.293:486): avc: denied { write } for pid=5598 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.799261][ T28] audit: type=1400 audit(1783338838.313:487): avc: denied { write } for pid=5609 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.225939][ T5474] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 84.284148][ T5643] veth0: entered promiscuous mode [ 84.296262][ T5643] netlink: 4 bytes leftover after parsing attributes in process `syz.6.686'. [ 84.337851][ T28] audit: type=1400 audit(1783338838.863:488): avc: denied { append } for pid=5646 comm="syz.5.687" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 84.771195][ T5699] loop3: detected capacity change from 0 to 512 [ 84.796493][ T28] audit: type=1400 audit(1783338839.323:489): avc: denied { write } for pid=5678 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.834175][ T5696] SELinux: invalid class [ 84.838915][ T5696] SELinux: failed to load policy [ 84.850783][ T5699] EXT4-fs: Ignoring removed i_version option [ 84.868001][ T5699] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 84.885914][ T28] audit: type=1400 audit(1783338839.413:490): avc: denied { write } for pid=5707 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.946912][ T5699] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.960176][ T5699] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.312780][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.182931][ T5741] program syz.5.720 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 86.594932][ T5755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.615895][ T5755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.851542][ T5775] program syz.3.735 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.168386][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 87.168404][ T28] audit: type=1400 audit(1783338841.693:494): avc: denied { write } for pid=5788 comm="syz.5.741" laddr=172.20.20.44 lport=4 faddr=10.1.1.0 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 87.202358][ T28] audit: type=1400 audit(1783338841.703:495): avc: denied { read write } for pid=3308 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 87.231172][ T28] audit: type=1400 audit(1783338841.703:496): avc: denied { open } for pid=3308 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 87.259545][ T28] audit: type=1400 audit(1783338841.703:497): avc: denied { ioctl } for pid=3308 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 87.303893][ T28] audit: type=1400 audit(1783338841.753:498): avc: denied { create } for pid=5792 comm="syz.3.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 87.371058][ T28] audit: type=1400 audit(1783338841.753:499): avc: denied { getopt } for pid=5792 comm="syz.3.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 87.405603][ T28] audit: type=1400 audit(1783338841.823:500): avc: denied { prog_load } for pid=5794 comm="syz.3.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 87.441309][ T28] audit: type=1400 audit(1783338841.823:501): avc: denied { bpf } for pid=5794 comm="syz.3.744" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 87.476940][ T5798] loop3: detected capacity change from 0 to 8192 [ 87.494317][ T28] audit: type=1400 audit(1783338841.873:502): avc: denied { perfmon } for pid=5799 comm="syz.6.747" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 87.506498][ T5798] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 87.576600][ T28] audit: type=1400 audit(1783338841.883:503): avc: denied { prog_run } for pid=5799 comm="syz.6.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 87.600817][ T5806] pim6reg1: entered promiscuous mode [ 87.620463][ T5806] pim6reg1: entered allmulticast mode [ 87.645333][ T5810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.752'. [ 87.654826][ T5810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.752'. [ 87.690522][ T5810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.752'. [ 87.691929][ T2055] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.705595][ T5810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.752'. [ 87.739592][ T2055] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.768121][ T5814] loop4: detected capacity change from 0 to 512 [ 87.770457][ T5812] tipc: Started in network mode [ 87.786788][ T5812] tipc: Node identity ac1414aa, cluster identity 4711 [ 87.792643][ T5814] EXT4-fs: Ignoring removed oldalloc option [ 87.801810][ T5812] tipc: Enabled bearer , priority 10 [ 87.815869][ T2055] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.836930][ T2055] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.858631][ T5814] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.754: bad orphan inode 32 [ 87.886980][ T5814] loop4: lost filesystem error report for type 5 error -117 [ 87.891272][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 87.905951][ C0] EXT4-fs (loop4): initial error at time 1783338842: ext4_orphan_get:1425 [ 87.915031][ C0] EXT4-fs (loop4): last error at time 1783338842: ext4_orphan_get:1425 [ 87.941530][ T5814] ext4_test_bit(bit=31, block=4) = 0 [ 87.949646][ T5814] EXT4-fs (loop4): 1 truncate cleaned up [ 87.975871][ T5814] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.142054][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.148655][ T5829] loop6: detected capacity change from 0 to 512 [ 88.175532][ T5829] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 88.219389][ T5829] EXT4-fs (loop6): 1 truncate cleaned up [ 88.253024][ T5829] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.259756][ T5842] netlink: 104 bytes leftover after parsing attributes in process `syz.0.765'. [ 88.346565][ T5829] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.760: invalid indirect mapped block 4294901760 (level 0) [ 88.380075][ T5829] EXT4-fs (loop6): Remounting filesystem read-only [ 88.400391][ T5853] gretap1: entered promiscuous mode [ 88.414197][ T4877] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.448836][ T5860] loop6: detected capacity change from 0 to 512 [ 88.473123][ T5860] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 88.487621][ T5860] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 88.506887][ T5860] System zones: 0-1, 15-15, 18-18, 34-34 [ 88.519709][ T5860] EXT4-fs (loop6): orphan cleanup on readonly fs [ 88.534434][ T5860] EXT4-fs warning (device loop6): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 88.546755][ T5864] loop4: detected capacity change from 0 to 128 [ 88.557002][ T5860] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 88.570118][ T5860] EXT4-fs (loop6): 1 truncate cleaned up [ 88.575020][ T5864] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 88.577490][ T5860] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 88.607142][ T5860] EXT4-fs (loop6): shut down requested (1) [ 88.622907][ T5864] ext4 filesystem being mounted at /166/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 88.651928][ T4877] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.693687][ T5871] loop0: detected capacity change from 0 to 1024 [ 88.740747][ T5871] EXT4-fs: Ignoring removed bh option [ 88.780833][ T5871] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 88.801299][ T962] tipc: Node number set to 2886997162 [ 88.808303][ T3299] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 88.825506][ T5871] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.842732][ T5871] EXT4-fs (loop0): shut down requested (2) [ 88.868655][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.942803][ T5896] netlink: 'syz.5.787': attribute type 4 has an invalid length. [ 88.977523][ T5896] netlink: 'syz.5.787': attribute type 4 has an invalid length. [ 89.003564][ T5901] loop0: detected capacity change from 0 to 256 [ 89.147786][ T5906] loop5: detected capacity change from 0 to 512 [ 89.160000][ T5906] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 89.168385][ T5906] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 89.178674][ T5906] EXT4-fs (loop5): orphan cleanup on readonly fs [ 89.192213][ T5906] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #13: comm syz.5.792: iget: bad i_size value: 12154761577498 [ 89.218055][ T5906] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 89.218284][ T5906] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.792: couldn't read orphan inode 13 (err -117) [ 89.227631][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 89.227654][ C1] EXT4-fs (loop5): initial error at time 1783338843: ext4_orphan_get:1399: inode 13 [ 89.227701][ C1] EXT4-fs (loop5): last error at time 1783338843: ext4_orphan_get:1399: inode 13 [ 89.271771][ T5906] loop5: lost filesystem error report for type 5 error -117 [ 89.272416][ T5906] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 89.328245][ T5906] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.792: dx entry: limit 65535 != root limit 120 [ 89.346551][ T5906] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.792: Corrupt directory, running e2fsck is recommended [ 89.839568][ T5906] syz.5.792 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 89.869387][ T5906] CPU: 1 UID: 0 PID: 5906 Comm: syz.5.792 Not tainted syzkaller #0 PREEMPT(lazy) [ 89.869419][ T5906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 89.869433][ T5906] Call Trace: [ 89.869440][ T5906] [ 89.869449][ T5906] __dump_stack+0x1d/0x30 [ 89.869478][ T5906] dump_stack_lvl+0x95/0xd0 [ 89.869502][ T5906] dump_stack+0x15/0x1b [ 89.869601][ T5906] dump_header+0x80/0x240 [ 89.869625][ T5906] oom_kill_process+0x295/0x350 [ 89.869674][ T5906] out_of_memory+0x981/0xbc0 [ 89.869708][ T5906] try_charge_memcg+0x621/0xa00 [ 89.869750][ T5906] __memcg_kmem_charge_page+0x199/0x3a0 [ 89.869783][ T5906] __alloc_frozen_pages_noprof+0x18a/0x350 [ 89.869824][ T5906] alloc_pages_mpol+0xa9/0x1d0 [ 89.869887][ T5906] alloc_pages_noprof+0x8f/0x140 [ 89.869918][ T5906] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 89.869993][ T5906] __kvmalloc_node_noprof+0x3a0/0x590 [ 89.870020][ T5906] ? futex_hash_allocate+0x192/0x920 [ 89.870044][ T5906] ? futex_hash_allocate+0x192/0x920 [ 89.870176][ T5906] ? futex_hash_allocate+0x192/0x920 [ 89.870202][ T5906] futex_hash_allocate+0x192/0x920 [ 89.870226][ T5906] ? cap_task_prctl+0x13f/0x6b0 [ 89.870261][ T5906] futex_hash_prctl+0xd8/0xf0 [ 89.870323][ T5906] __se_sys_prctl+0x4f4/0x13b0 [ 89.870366][ T5906] __x64_sys_prctl+0x67/0x80 [ 89.870392][ T5906] x64_sys_call+0x2533/0x3020 [ 89.870442][ T5906] do_syscall_64+0x136/0x3c0 [ 89.870548][ T5906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.870637][ T5906] RIP: 0033:0x7f444157de59 [ 89.870666][ T5906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.870740][ T5906] RSP: 002b:00007f443ffd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 89.870764][ T5906] RAX: ffffffffffffffda RBX: 00007f4441805fa0 RCX: 00007f444157de59 [ 89.870781][ T5906] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 89.870796][ T5906] RBP: 00007f4441613e6f R08: 0000000000000000 R09: 0000000000000000 [ 89.870823][ T5906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.870838][ T5906] R13: 00007f4441806038 R14: 00007f4441805fa0 R15: 00007fff2d17ad28 [ 89.870860][ T5906] [ 90.101270][ T5906] memory: usage 298620kB, limit 307200kB, failcnt 107 [ 90.109024][ T5906] memory+swap: usage 283456kB, limit 9007199254740988kB, failcnt 0 [ 90.117522][ T5906] kmem: usage 262280kB, limit 9007199254740988kB, failcnt 0 [ 90.125431][ T5906] Memory cgroup stats for /syz5: [ 90.125707][ T5906] cache 4096 [ 90.134904][ T5906] rss 0 [ 90.138069][ T5906] shmem 0 [ 90.141276][ T5906] mapped_file 0 [ 90.144985][ T5906] dirty 0 [ 90.147971][ T5906] writeback 0 [ 90.152305][ T5906] workingset_refault_anon 55 [ 90.157166][ T5906] workingset_refault_file 0 [ 90.161908][ T5906] swap 446464 [ 90.165481][ T5906] swapcached 684032 [ 90.169429][ T5906] pgpgin 14804 [ 90.173042][ T5906] pgpgout 14800 [ 90.176728][ T5906] pgfault 26009 [ 90.180214][ T5906] pgmajfault 13 [ 90.193383][ T5906] inactive_anon 4096 [ 90.198594][ T5906] active_anon 8192 [ 90.209063][ T5906] inactive_file 0 [ 90.220097][ T5929] Unsupported ieee802154 address type: 0 [ 90.231826][ T5906] active_file 4096 [ 90.242964][ T5906] unevictable 0 [ 90.252244][ T5906] hierarchical_memory_limit 314572800 [ 90.263839][ T5906] hierarchical_memsw_limit 9223372036854771712 [ 90.275622][ T5906] total_cache 4096 [ 90.285126][ T5906] total_rss 0 [ 90.288481][ T5906] total_shmem 0 [ 90.300799][ T5906] total_mapped_file 0 [ 90.305313][ T5906] total_dirty 0 [ 90.331274][ T5906] total_writeback 0 [ 90.345317][ T5906] total_workingset_refault_anon 55 [ 90.355256][ T5906] total_workingset_refault_file 0 [ 90.365350][ T5906] total_swap 446464 [ 90.370149][ T5906] total_swapcached 684032 [ 90.374935][ T5906] total_pgpgin 14804 [ 90.379060][ T5906] total_pgpgout 14800 [ 90.383410][ T5906] total_pgfault 26009 [ 90.389497][ T5906] total_pgmajfault 13 [ 90.394205][ T5906] total_inactive_anon 4096 [ 90.400512][ T5906] total_active_anon 8192 [ 90.411464][ T5906] total_inactive_file 0 [ 90.415751][ T5906] total_active_file 4096 [ 90.420231][ T5906] total_unevictable 0 [ 90.434231][ T5906] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.792,pid=5905,uid=0 [ 90.504827][ T5906] Memory cgroup out of memory: Killed process 5905 (syz.5.792) total-vm:96096kB, anon-rss:1248kB, file-rss:22348kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 90.558188][ T5906] syz.5.792 (5906) used greatest stack depth: 9528 bytes left [ 90.709957][ T4426] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.116031][ T6000] sg_write: data in/out 483412/136 bytes for SCSI command 0x0-- guessing data in; [ 91.116031][ T6000] program syz.5.831 not setting count and/or reply_len properly [ 91.142639][ T6003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.833'. [ 91.257284][ T6010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.270813][ T6010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.356196][ T6018] loop6: detected capacity change from 0 to 2048 [ 91.373477][ T6018] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.576974][ T6018] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 91.577038][ T6030] loop0: detected capacity change from 0 to 256 [ 91.598406][ T6018] EXT4-fs (loop6): Remounting filesystem read-only [ 91.764632][ T4877] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.843722][ T6039] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.872868][ T6039] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.900580][ T6039] bond0 (unregistering): Released all slaves [ 91.958355][ T6045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.977966][ T6045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.045991][ T6048] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.125949][ T4426] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.351304][ T28] kauditd_printk_skb: 106 callbacks suppressed [ 92.351333][ T28] audit: type=1400 audit(1783338846.873:609): avc: denied { bind } for pid=6065 comm="syz.5.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 92.485272][ T28] audit: type=1400 audit(1783338847.013:610): avc: denied { mount } for pid=6071 comm="syz.3.861" name="/" dev="mqueue" ino=1559 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 92.586700][ T28] audit: type=1400 audit(1783338847.113:611): avc: denied { sqpoll } for pid=6079 comm="syz.0.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 92.783610][ T6074] set_capacity_and_notify: 1 callbacks suppressed [ 92.783653][ T6074] loop3: detected capacity change from 0 to 8192 [ 92.844033][ T6074] FAT-fs (loop3): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 93.003244][ T6074] FAT-fs (loop3): Filesystem has been set read-only [ 93.211745][ T6032] syz.4.844 (6032) used greatest stack depth: 8896 bytes left [ 93.522104][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 93.530708][ T35] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 93.590896][ T28] audit: type=1400 audit(1783338847.163:612): avc: denied { write } for pid=6082 comm="syz.6.866" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 93.615414][ T28] audit: type=1400 audit(1783338847.353:613): avc: denied { execute } for pid=6084 comm="syz.0.867" name="file0" dev="tmpfs" ino=1048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 93.654584][ T28] audit: type=1400 audit(1783338847.353:614): avc: denied { execute_no_trans } for pid=6084 comm="syz.0.867" path="/202/file0" dev="tmpfs" ino=1048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 93.740149][ T28] audit: type=1400 audit(1783338847.553:615): avc: denied { create } for pid=6073 comm="syz.3.862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 93.762624][ T6103] loop0: detected capacity change from 0 to 512 [ 93.786309][ T6103] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 93.803735][ T28] audit: type=1400 audit(1783338847.903:616): avc: denied { execmem } for pid=6089 comm="syz.5.872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 93.826223][ T6103] EXT4-fs (loop0): 1 truncate cleaned up [ 93.852323][ T6103] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.854030][ T28] audit: type=1400 audit(1783338848.043:617): avc: denied { read write } for pid=6098 comm="syz.4.873" name="uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 93.888413][ T28] audit: type=1400 audit(1783338848.043:618): avc: denied { open } for pid=6098 comm="syz.4.873" path="/dev/uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 93.954968][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.333327][ T6135] macsec0: entered promiscuous mode [ 94.343828][ T6135] netlink: 4 bytes leftover after parsing attributes in process `syz.3.887'. [ 94.370506][ T6135] veth1_macvtap: left promiscuous mode [ 94.390360][ T6125] loop6: detected capacity change from 0 to 32768 [ 94.401383][ T6135] macsec0 (unregistering): left promiscuous mode [ 94.778479][ T6162] sctp: [Deprecated]: syz.4.897 (pid 6162) Use of int in max_burst socket option deprecated. [ 94.778479][ T6162] Use struct sctp_assoc_value instead [ 94.998670][ T6180] 9p: Bad value for 'rfdno' [ 95.065420][ T6186] loop0: detected capacity change from 0 to 2048 [ 95.088147][ T6186] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.237885][ T6186] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 95.292654][ T6186] EXT4-fs (loop0): Remounting filesystem read-only [ 95.395154][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.498508][ T6200] Invalid argument reading file caps for ./file0 [ 95.676595][ T6202] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.683915][ T6202] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.821324][ T6202] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.833430][ T6202] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.881593][ T6224] loop5: detected capacity change from 0 to 2048 [ 95.892672][ T6224] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.089388][ T6224] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 96.119186][ T6224] EXT4-fs (loop5): Remounting filesystem read-only [ 96.176570][ T310] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.187776][ T310] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.210030][ T4426] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.225137][ T310] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.249715][ T310] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.262135][ T6241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.277757][ T6241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.287798][ T310] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.312928][ T310] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.353485][ T310] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.374714][ T310] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.413429][ T2079] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.524685][ T2079] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.609228][ T2079] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.678220][ T6263] : renamed from bond0 (while UP) [ 96.707185][ T2079] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.820259][ T2079] bridge_slave_1: left allmulticast mode [ 96.826269][ T2079] bridge_slave_1: left promiscuous mode [ 96.833184][ T2079] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.887742][ T2079] bridge_slave_0: left allmulticast mode [ 96.906731][ T2079] bridge_slave_0: left promiscuous mode [ 96.912753][ T2079] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.001526][ T2079] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.020458][ T2079] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.032383][ T2079] bond0 (unregistering): Released all slaves [ 97.091075][ T2079] hsr_slave_0: left promiscuous mode [ 97.097194][ T2079] hsr_slave_1: left promiscuous mode [ 97.109162][ T2079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.125765][ T2079] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.150474][ T2079] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.170695][ T2079] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.197366][ T2079] veth1_macvtap: left promiscuous mode [ 97.215050][ T2079] veth0_macvtap: left promiscuous mode [ 97.230243][ T2079] veth1_vlan: left promiscuous mode [ 97.252470][ T2079] veth0_vlan: left promiscuous mode [ 97.470996][ T2079] team0 (unregistering): Port device team_slave_1 removed [ 97.498308][ T2079] team0 (unregistering): Port device team_slave_0 removed [ 97.510260][ T6313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.952'. [ 97.529337][ T6313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.952'. [ 97.566781][ T3023] 8021q: adding VLAN 0 to HW filter on device eth9 [ 97.771537][ T28] kauditd_printk_skb: 70 callbacks suppressed [ 97.771554][ T28] audit: type=1400 audit(1783338852.303:689): avc: denied { write } for pid=6330 comm="syz.0.966" path="socket:[14165]" dev="sockfs" ino=14165 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 97.858197][ T28] audit: type=1400 audit(1783338852.383:690): avc: denied { watch watch_reads } for pid=6338 comm="syz.3.958" path="/201/file0" dev="tmpfs" ino=1054 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 97.921290][ T28] audit: type=1400 audit(1783338852.443:691): avc: denied { write } for pid=6326 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.993462][ T28] audit: type=1400 audit(1783338852.463:692): avc: denied { read } for pid=6342 comm="syz.0.960" lport=37906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 98.021049][ T6256] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.028278][ T6256] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.035738][ T6256] bridge_slave_0: entered allmulticast mode [ 98.041756][ T28] audit: type=1400 audit(1783338852.483:693): avc: denied { write } for pid=6350 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.064601][ T6256] bridge_slave_0: entered promiscuous mode [ 98.071686][ T6256] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.078833][ T6256] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.086395][ T6256] bridge_slave_1: entered allmulticast mode [ 98.093229][ T6256] bridge_slave_1: entered promiscuous mode [ 98.132572][ T3023] 8021q: adding VLAN 0 to HW filter on device eth10 [ 98.161814][ T6256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.174847][ T6256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.280537][ T6363] batman_adv: batadv0: Adding interface: dummy0 [ 98.287102][ T6363] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.312946][ T6363] batman_adv: batadv0: Interface activated: dummy0 [ 98.320309][ T28] audit: type=1400 audit(1783338852.843:694): avc: denied { ioctl } for pid=6362 comm="syz.5.965" path="socket:[13224]" dev="sockfs" ino=13224 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 98.367685][ T6256] team0: Port device team_slave_0 added [ 98.375907][ T6363] batadv0: mtu less than device minimum [ 98.394366][ T6363] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 98.405568][ T6363] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 98.416845][ T6363] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 98.427750][ T6363] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 98.439119][ T6363] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 98.450195][ T6363] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 98.461217][ T6363] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 98.472485][ T6363] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 98.483520][ T6363] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 98.522691][ T6256] team0: Port device team_slave_1 added [ 98.581814][ T6256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.601807][ T6256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.691167][ T6256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.725818][ T6256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.751475][ T6256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.787111][ T28] audit: type=1400 audit(1783338853.293:695): avc: denied { write } for pid=6369 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.856489][ T28] audit: type=1400 audit(1783338853.373:696): avc: denied { write } for pid=6381 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.863260][ T6256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.948501][ T3023] 8021q: adding VLAN 0 to HW filter on device eth11 [ 98.992517][ T6256] hsr_slave_0: entered promiscuous mode [ 99.008712][ T6256] hsr_slave_1: entered promiscuous mode [ 99.036425][ T6256] debugfs: 'hsr0' already exists in 'hsr' [ 99.052170][ T6256] Cannot create hsr debugfs directory [ 99.086015][ T6368] loop5: detected capacity change from 0 to 32768 [ 99.185007][ T28] audit: type=1400 audit(1783338853.713:697): avc: denied { execmod } for pid=6403 comm="syz.5.983" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=14254 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 99.263191][ T28] audit: type=1400 audit(1783338853.713:698): avc: denied { execute } for pid=6403 comm="syz.5.983" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=14254 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 99.331826][ T6256] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 99.355806][ T6256] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 99.381527][ T6256] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 99.399730][ T6256] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 99.414319][ T6256] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 99.432057][ T6256] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 99.444179][ T6256] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 99.454798][ T6256] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 99.463181][ T3023] 8021q: adding VLAN 0 to HW filter on device eth12 [ 99.529173][ T6256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.559179][ T6256] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.571100][ T2079] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.578325][ T2079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.589929][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.597053][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.810230][ T6256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.834163][ T6461] loop3: detected capacity change from 0 to 256 [ 99.852985][ T6461] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 99.869841][ T6461] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 99.967947][ T6470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.979717][ T6477] loop4: detected capacity change from 0 to 764 [ 99.988912][ T6470] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.003325][ T6470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.050895][ T6470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.060888][ T6470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.073103][ T6470] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 100.085684][ T6470] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.098878][ T6470] veth1_vlan: left promiscuous mode [ 100.105496][ T6470] veth0_vlan: left promiscuous mode [ 100.112682][ T6470] veth0_vlan: entered promiscuous mode [ 100.119313][ T6470] veth1_vlan: entered promiscuous mode [ 100.128545][ T6470] veth1_macvtap: left promiscuous mode [ 100.154875][ T6489] netlink: 168 bytes leftover after parsing attributes in process `syz.3.993'. [ 100.165599][ T6470] veth0_macvtap: left promiscuous mode [ 100.173516][ T6470] veth0_macvtap: entered promiscuous mode [ 100.180111][ T6470] veth1_macvtap: entered promiscuous mode [ 100.189554][ T6470] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.198180][ T6470] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.217140][ T6470] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.241767][ T6495] loop5: detected capacity change from 0 to 512 [ 100.285821][ T6470] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.302682][ T6470] veth0_to_team: entered promiscuous mode [ 100.374699][ T3815] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.381917][ T3815] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.403303][ T3815] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.410980][ T3815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.480211][ T3813] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.493898][ T3813] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.507109][ T3813] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.516922][ T6510] netlink: 'syz.0.1004': attribute type 2 has an invalid length. [ 100.525775][ T3813] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.542796][ T3813] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.552098][ T3813] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.566787][ T3813] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.575965][ T3813] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.588515][ T6256] veth0_vlan: entered promiscuous mode [ 100.600673][ T6256] veth1_vlan: entered promiscuous mode [ 100.620515][ T6256] veth0_macvtap: entered promiscuous mode [ 100.628977][ T6256] veth1_macvtap: entered promiscuous mode [ 100.646737][ T6256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.659511][ T6256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.673668][ T3813] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.683491][ T3813] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.693022][ T3813] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.702686][ T3813] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.767750][ T6516] netlink: 'syz.0.1005': attribute type 14 has an invalid length. [ 100.776239][ T6516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1005'. [ 100.793826][ T6516] netlink: 'syz.0.1005': attribute type 14 has an invalid length. [ 100.803318][ T6516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1005'. [ 100.826672][ T6522] netlink: 'syz.3.1006': attribute type 9 has an invalid length. [ 100.835468][ T6522] netlink: 371 bytes leftover after parsing attributes in process `syz.3.1006'. [ 100.865381][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 100.876392][ T6526] netlink: 'syz.3.1008': attribute type 3 has an invalid length. [ 100.885644][ T9] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 100.905271][ T6526] netlink: 'syz.3.1008': attribute type 4 has an invalid length. [ 100.927625][ T6526] netlink: 9067 bytes leftover after parsing attributes in process `syz.3.1008'. [ 100.966824][ T6532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1010'. [ 100.988360][ T6532] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 101.004057][ T6532] gretap0: entered promiscuous mode [ 101.024241][ T6532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1010'. [ 101.963710][ T6590] loop5: detected capacity change from 0 to 512 [ 101.998736][ T6590] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.011416][ T6590] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.237420][ T4426] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.273479][ T6610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1040'. [ 102.355018][ T6613] loop5: detected capacity change from 0 to 4096 [ 102.414947][ T6613] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.416211][ T6620] loop3: detected capacity change from 0 to 512 [ 102.462457][ T6622] syz_tun: entered allmulticast mode [ 102.494207][ T6621] syz_tun: left allmulticast mode [ 102.528184][ T6620] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.1043: inode has both inline data and extents flags [ 102.576537][ T6620] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 102.576724][ T6620] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1043: couldn't read orphan inode 15 (err -117) [ 102.586202][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 102.586224][ C1] EXT4-fs (loop3): initial error at time 1783338857: ext4_orphan_get:1399: inode 15 [ 102.586253][ C1] EXT4-fs (loop3): last error at time 1783338857: ext4_orphan_get:1399: inode 15 [ 102.651557][ T4426] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.692653][ T6620] loop3: lost filesystem error report for type 5 error -117 [ 102.693201][ T6620] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.828081][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 102.828102][ T28] audit: type=1400 audit(1783338857.293:722): avc: denied { write } for pid=6619 comm="syz.3.1043" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 102.889405][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.967015][ T6639] loop5: detected capacity change from 0 to 512 [ 102.994824][ T6639] EXT4-fs (loop5): 1 truncate cleaned up [ 103.014254][ T6639] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.046407][ T28] audit: type=1400 audit(1783338857.573:723): avc: denied { write } for pid=6638 comm="syz.5.1052" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 103.130782][ T28] audit: type=1400 audit(1783338857.573:724): avc: denied { write } for pid=6638 comm="syz.5.1052" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 103.199835][ T28] audit: type=1400 audit(1783338857.573:725): avc: denied { remove_name } for pid=6638 comm="syz.5.1052" name="file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 103.269942][ T28] audit: type=1400 audit(1783338857.573:726): avc: denied { rename } for pid=6638 comm="syz.5.1052" name="file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 103.341794][ T28] audit: type=1400 audit(1783338857.573:727): avc: denied { unlink } for pid=6638 comm="syz.5.1052" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 103.412400][ T28] audit: type=1400 audit(1783338857.703:728): avc: denied { getopt } for pid=6638 comm="syz.5.1052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 103.771880][ T28] audit: type=1400 audit(1783338858.293:729): avc: denied { create } for pid=6662 comm="syz.4.1059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 103.834427][ T28] audit: type=1400 audit(1783338858.363:730): avc: denied { create } for pid=6668 comm="syz.4.1061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 103.885231][ T28] audit: type=1400 audit(1783338858.383:731): avc: denied { write } for pid=6668 comm="syz.4.1061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 104.057451][ T6676] loop0: detected capacity change from 0 to 4096 [ 104.085459][ T6676] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.692605][ T40] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 465: padding at end of block bitmap is not set [ 104.710375][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.766197][ T40] EXT4-fs (loop5): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 6 with error 28 [ 104.823572][ T40] EXT4-fs (loop5): This should not happen!! Data will be lost [ 104.823572][ T40] [ 104.849642][ T40] EXT4-fs (loop5): Total free blocks count 0 [ 104.873329][ T40] EXT4-fs (loop5): Free/Dirty block details [ 104.895395][ T40] EXT4-fs (loop5): free_blocks=0 [ 104.919382][ T40] EXT4-fs (loop5): dirty_blocks=6 [ 104.932478][ T40] EXT4-fs (loop5): Block reservation details [ 104.946826][ T40] EXT4-fs (loop5): i_reserved_data_blocks=6 [ 104.960299][ T4426] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #13: comm syz-executor: data will be lost [ 104.983303][ T4426] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.066370][ T6770] xt_hashlimit: size too large, truncated to 1048576 [ 105.139337][ T6792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1074'. [ 105.163496][ T6792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1074'. [ 105.580341][ T6815] hsr0: entered promiscuous mode [ 105.904440][ T6827] loop0: detected capacity change from 0 to 512 [ 105.975167][ T6827] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.990101][ T6831] loop3: detected capacity change from 0 to 512 [ 106.042860][ T6831] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.075008][ T6827] ext4 filesystem being mounted at /235/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 106.075673][ T6831] ext4 filesystem being mounted at /238/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.088504][ T6827] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #2: comm syz.0.1089: corrupted inode contents [ 106.111178][ T6827] EXT4-fs error (device loop0): ext4_dirty_inode:6639: inode #2: comm syz.0.1089: mark_inode_dirty error [ 106.144260][ T6827] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #2: comm syz.0.1089: corrupted inode contents [ 106.164034][ T6827] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.1089: mark_inode_dirty error [ 106.200747][ T6841] EXT4-fs (loop0): shut down requested (2) [ 106.220304][ T6838] EXT4-fs warning (device loop0): ext4_es_cache_extent:1082: inode #2: comm syz.0.1089: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 106.220304][ T6838] [ 106.383137][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.491347][ T6853] loop0: detected capacity change from 0 to 512 [ 106.543691][ T6853] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.1096: inode has both inline data and extents flags [ 106.569697][ T6853] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 106.571385][ T6853] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1096: couldn't read orphan inode 15 (err -117) [ 106.592835][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 106.592856][ C0] EXT4-fs (loop0): initial error at time 1783338861: ext4_orphan_get:1399: inode 15 [ 106.592890][ C0] EXT4-fs (loop0): last error at time 1783338861: ext4_orphan_get:1399: inode 15 [ 106.718632][ T6853] loop0: lost filesystem error report for type 5 error -117 [ 106.719182][ T6853] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.864745][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.932613][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.986770][ T6869] cgroup: Unknown subsys name 'pcr' [ 107.100991][ T3388] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.109672][ T3388] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 107.398562][ T6901] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1116'. [ 107.433384][ T6908] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1120'. [ 107.450857][ T6910] loop0: detected capacity change from 0 to 1024 [ 107.457461][ T6908] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1120'. [ 107.473452][ T6910] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 107.487022][ T6908] geneve2: entered promiscuous mode [ 107.492361][ T6908] geneve2: entered allmulticast mode [ 107.499287][ T6910] ext4 filesystem being mounted at /240/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.549015][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 107.648776][ T6933] netlink: 'syz.5.1129': attribute type 32 has an invalid length. [ 107.685642][ T6937] loop0: detected capacity change from 0 to 1024 [ 107.703113][ T6937] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.738237][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.760545][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 107.775547][ T6947] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1134'. [ 107.787804][ T6947] vxlan0: entered promiscuous mode [ 107.794815][ T30] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.803806][ T30] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.812767][ T30] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.821552][ T30] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.917539][ T6953] syz_tun: entered allmulticast mode [ 107.923774][ T6952] syz_tun: left allmulticast mode [ 107.944019][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 107.944037][ T28] audit: type=1400 audit(1783338862.473:770): avc: denied { write } for pid=6954 comm="syz.3.1138" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 107.975400][ T28] audit: type=1400 audit(1783338862.483:771): avc: denied { ioctl } for pid=6954 comm="syz.3.1138" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x4518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 108.116730][ T28] audit: type=1400 audit(1783338862.613:772): avc: denied { setopt } for pid=6956 comm="syz.7.1139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 108.282772][ T6974] loop7: detected capacity change from 0 to 2048 [ 108.337357][ T6974] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 108.370707][ T28] audit: type=1400 audit(1783338862.893:773): avc: denied { write } for pid=6972 comm="syz.7.1146" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 108.408044][ T12] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 108.438668][ T12] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 84 with error 28 [ 108.481556][ T12] EXT4-fs (loop7): This should not happen!! Data will be lost [ 108.481556][ T12] [ 108.492220][ T12] EXT4-fs (loop7): Total free blocks count 0 [ 108.497192][ T6970] loop3: detected capacity change from 0 to 256 [ 108.498607][ T12] EXT4-fs (loop7): Free/Dirty block details [ 108.498626][ T12] EXT4-fs (loop7): free_blocks=2415919104 [ 108.498643][ T12] EXT4-fs (loop7): dirty_blocks=576 [ 108.498656][ T12] EXT4-fs (loop7): Block reservation details [ 108.498679][ T12] EXT4-fs (loop7): i_reserved_data_blocks=36 [ 108.499637][ T12] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 84 with max blocks 484 with error 28 [ 108.767191][ T6988] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1151'. [ 108.898482][ T12] ================================================================== [ 108.906696][ T12] BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked [ 108.913927][ T12] [ 108.916263][ T12] read-write to 0xffff88810b538228 of 8 bytes by task 6969 on cpu 1: [ 108.924438][ T12] __xa_set_mark+0xd2/0x1a0 [ 108.928993][ T12] __folio_mark_dirty+0x42c/0x520 [ 108.934040][ T12] mark_buffer_dirty+0x120/0x1f0 [ 108.939016][ T12] block_page_mkwrite+0x261/0x300 [ 108.944169][ T12] ext4_page_mkwrite+0x824/0xa90 [ 108.949148][ T12] handle_mm_fault+0x1b3d/0x2da0 [ 108.954204][ T12] do_user_addr_fault+0x634/0x1060 [ 108.959520][ T12] exc_page_fault+0x62/0xa0 [ 108.964234][ T12] asm_exc_page_fault+0x26/0x30 [ 108.969100][ T12] [ 108.971474][ T12] read to 0xffff88810b538228 of 8 bytes by task 12 on cpu 0: [ 108.978849][ T12] xas_find_marked+0x211/0x650 [ 108.983631][ T12] filemap_get_folios_tag+0xf7/0x400 [ 108.988936][ T12] mpage_prepare_extent_to_map+0x2f8/0xc00 [ 108.994935][ T12] ext4_do_writepages+0x6ec/0x2720 [ 109.000322][ T12] ext4_writepages+0x18f/0x300 [ 109.005213][ T12] do_writepages+0x1b9/0x300 [ 109.009809][ T12] __writeback_single_inode+0x7b/0x660 [ 109.015301][ T12] writeback_sb_inodes+0x4d9/0xaa0 [ 109.020441][ T12] __writeback_inodes_wb+0x8a/0x180 [ 109.025828][ T12] wb_writeback+0x21e/0x510 [ 109.030346][ T12] wb_workfn+0x4f4/0xa50 [ 109.034599][ T12] process_scheduled_works+0x4d4/0x9a0 [ 109.040067][ T12] worker_thread+0x569/0x750 [ 109.044674][ T12] kthread+0x221/0x270 [ 109.048836][ T12] ret_from_fork+0x146/0x330 [ 109.053438][ T12] ret_from_fork_asm+0x1a/0x30 [ 109.058226][ T12] [ 109.060547][ T12] value changed: 0x7e00000000000000 -> 0x7f80000000000000 [ 109.067672][ T12] [ 109.070012][ T12] Reported by Kernel Concurrency Sanitizer on: [ 109.076436][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(lazy) [ 109.085825][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 109.096062][ T12] Workqueue: writeback wb_workfn (flush-8:0) [ 109.102120][ T12] ================================================================== [ 109.645215][ T6256] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 109.768262][ T28] audit: type=1400 audit(1783338864.293:774): avc: denied { write } for pid=6994 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.794160][ T28] audit: type=1400 audit(1783338864.293:775): avc: denied { write } for pid=7005 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.801389][ T4275] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 109.822130][ T3600] Bluetooth: hci0: command 0x1003 tx timeout [ 110.217737][ T28] audit: type=1400 audit(1783338864.743:776): avc: denied { write } for pid=7008 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.244120][ T28] audit: type=1400 audit(1783338864.743:777): avc: denied { write } for pid=7019 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.659008][ T28] audit: type=1400 audit(1783338865.183:778): avc: denied { write } for pid=7022 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.686395][ T28] audit: type=1400 audit(1783338865.183:779): avc: denied { write } for pid=7033 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1