last executing test programs: 1.685817969s ago: executing program 0 (id=848): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f0000000140)}, 0x20) 1.57734946s ago: executing program 0 (id=855): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xfffffe80}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 1.443663402s ago: executing program 0 (id=857): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000004c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r3, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.426503832s ago: executing program 0 (id=860): ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0xff04, 0x1) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000e80)={@empty, @broadcast, @void, {@mpls_mc={0x8848, {[{0x3}], @ipv4=@dccp={{0x5, 0x4, 0x2, 0x1c, 0x24, 0x65, 0x0, 0x0, 0x21, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x4e23, 0x4e23, 0x4, 0x1, 0x5, 0x0, 0x0, 0x6, 0x2, "050c96", 0x7, "3f2786"}}}}}}}, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x44f0) 1.182697375s ago: executing program 0 (id=863): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0xfd, 0x2ae, &(0x7f0000000800)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) 1.069992097s ago: executing program 4 (id=868): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0xfffffffffffffd32) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x700, 0x0, [@sadb_key={0x2, 0x9, 0x10, 0x0, "e925"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x60}, 0x1, 0x7}, 0x0) 1.024303987s ago: executing program 2 (id=869): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) 936.013228ms ago: executing program 2 (id=870): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 840.029589ms ago: executing program 0 (id=871): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmsg(r0, &(0x7f0000001a80)={&(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f00000018c0)=[{0x0}, {&(0x7f00000003c0)=""/208, 0xd0}, {0x0}], 0x3}, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) 839.831219ms ago: executing program 2 (id=872): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000000)="3900000013000b4700bb65e1c3e4ffff010000003d000000560000022500000019000a001000000007fd17e5ffff080004fe0000000000000a", 0x39}], 0x1) 731.50863ms ago: executing program 4 (id=875): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000d00)=0x4412, 0x558b6ceb108b814f) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x11, 0xf7, r1, 0x1, 0x20, 0x6, @local}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0x9, 0x4) recvfrom$packet(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) 628.058182ms ago: executing program 4 (id=877): unshare(0x8000000) semget$private(0x0, 0x4000, 0x555) semtimedop(0x0, &(0x7f0000000440)=[{0x0, 0x0, 0x1000}], 0xf, 0x0) r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f0000000140)=[{0xcde77a0cc719144, 0x9, 0x1000}], 0x1, 0x0) unshare(0x2c040000) 627.489972ms ago: executing program 2 (id=878): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x5}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0xffffffd7, 0xfffb, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000300)=0x2) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r0, &(0x7f0000000000)=""/120, 0x78) pwrite64(r0, &(0x7f0000000100)='M\t', 0x2, 0x0) 610.844972ms ago: executing program 4 (id=879): close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 463.742473ms ago: executing program 4 (id=882): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x9, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\n5', 0x14, 0x6, 0x0, @private1, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 463.580044ms ago: executing program 1 (id=883): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x3, 0x800000000001}, 0x1180, 0x5dd8, 0x0, 0x8, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000001800)=0x200, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 458.211804ms ago: executing program 1 (id=884): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r2}, 0x18) bind$can_raw(r0, &(0x7f0000000080), 0x10) 450.821374ms ago: executing program 3 (id=885): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) 404.086614ms ago: executing program 4 (id=886): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 403.805785ms ago: executing program 1 (id=887): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000200000200000000"], 0x48) 403.563754ms ago: executing program 3 (id=888): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r1}, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) close(r2) 375.800825ms ago: executing program 1 (id=889): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x44}}, 0x0) 367.293315ms ago: executing program 3 (id=890): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setrlimit(0x7, &(0x7f0000000200)={0x5, 0xb}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r2, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x7, 0x1}}, 0x20) 320.024765ms ago: executing program 2 (id=891): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0103000000000000000001000000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x88040) 319.514245ms ago: executing program 3 (id=892): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r0, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @mcast2}, 0x1c) sendto$inet6(r0, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000040)=0x40, 0x4) recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) 319.315315ms ago: executing program 2 (id=893): pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mlock(&(0x7f0000a53000/0x3000)=nil, 0x3000) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) 319.081785ms ago: executing program 3 (id=894): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "d57e190d001e6e1d16c1711bbd8adbf65bd846957b378a02340c68117aa1b390", "b0b4e2d8157cddfb9792c8e37bafb99e319950347e93f4d34870ee24c0ea06d56270e45c8d3e7d708161ba81dd33c54b", "01acae6f69ea1443db8d53af54944d4894a87f20c65bfb8e0c8cfb67", {"38f5e54b3dc7c070b4d66f0f9565df74", "d2653a13d554fee0e7be27c873db314d"}}}}}}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 257.583086ms ago: executing program 1 (id=895): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) write$UHID_CREATE2(r2, 0x0, 0x138) 151.878517ms ago: executing program 1 (id=896): socket(0x2b, 0x1, 0x0) syz_io_uring_setup(0x110, &(0x7f0000001280)={0x0, 0xfad6, 0x400}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800", @ANYRES64=r0], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) 0s ago: executing program 3 (id=897): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r2, 0x9}}, 0x10) close(r1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.227' (ED25519) to the list of known hosts. [ 28.212490][ T29] audit: type=1400 audit(1748273363.830:65): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.213629][ T3301] cgroup: Unknown subsys name 'net' [ 28.235459][ T29] audit: type=1400 audit(1748273363.830:66): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.262866][ T29] audit: type=1400 audit(1748273363.870:67): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.435204][ T3301] cgroup: Unknown subsys name 'cpuset' [ 28.441712][ T3301] cgroup: Unknown subsys name 'rlimit' [ 28.572409][ T29] audit: type=1400 audit(1748273364.190:68): avc: denied { setattr } for pid=3301 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.596145][ T29] audit: type=1400 audit(1748273364.190:69): avc: denied { create } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 28.612609][ T3305] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.616702][ T29] audit: type=1400 audit(1748273364.190:70): avc: denied { write } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.645792][ T29] audit: type=1400 audit(1748273364.190:71): avc: denied { read } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.650470][ T3301] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.666307][ T29] audit: type=1400 audit(1748273364.200:72): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.700447][ T29] audit: type=1400 audit(1748273364.200:73): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.724078][ T29] audit: type=1400 audit(1748273364.260:74): avc: denied { relabelto } for pid=3305 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.433669][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 30.477067][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 30.506216][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.513331][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.520636][ T3318] bridge_slave_0: entered allmulticast mode [ 30.527212][ T3318] bridge_slave_0: entered promiscuous mode [ 30.534087][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.541242][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.548780][ T3318] bridge_slave_1: entered allmulticast mode [ 30.555696][ T3318] bridge_slave_1: entered promiscuous mode [ 30.604527][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.616746][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.641196][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.648488][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.655769][ T3312] bridge_slave_0: entered allmulticast mode [ 30.662836][ T3312] bridge_slave_0: entered promiscuous mode [ 30.693740][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.701165][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.708463][ T3312] bridge_slave_1: entered allmulticast mode [ 30.715091][ T3312] bridge_slave_1: entered promiscuous mode [ 30.728154][ T3318] team0: Port device team_slave_0 added [ 30.749629][ T3318] team0: Port device team_slave_1 added [ 30.772026][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.788245][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 30.803129][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.812667][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.819955][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.846282][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.859789][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.866932][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.893340][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.916610][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 30.942590][ T3326] chnl_net:caif_netlink_parms(): no params data found [ 30.958170][ T3312] team0: Port device team_slave_0 added [ 30.981928][ T3312] team0: Port device team_slave_1 added [ 30.995492][ T3318] hsr_slave_0: entered promiscuous mode [ 31.001683][ T3318] hsr_slave_1: entered promiscuous mode [ 31.043234][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.050427][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.057772][ T3314] bridge_slave_0: entered allmulticast mode [ 31.064118][ T3314] bridge_slave_0: entered promiscuous mode [ 31.071115][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.078278][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.086050][ T3314] bridge_slave_1: entered allmulticast mode [ 31.092449][ T3314] bridge_slave_1: entered promiscuous mode [ 31.098943][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.105934][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.132305][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.143691][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.151118][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.177790][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.213857][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.238575][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.271032][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.278431][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.285983][ T3313] bridge_slave_0: entered allmulticast mode [ 31.292607][ T3313] bridge_slave_0: entered promiscuous mode [ 31.316871][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.324061][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.331449][ T3313] bridge_slave_1: entered allmulticast mode [ 31.337976][ T3313] bridge_slave_1: entered promiscuous mode [ 31.346935][ T3312] hsr_slave_0: entered promiscuous mode [ 31.352904][ T3312] hsr_slave_1: entered promiscuous mode [ 31.359037][ T3312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.366850][ T3312] Cannot create hsr debugfs directory [ 31.372621][ T3326] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.379811][ T3326] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.387240][ T3326] bridge_slave_0: entered allmulticast mode [ 31.393682][ T3326] bridge_slave_0: entered promiscuous mode [ 31.402882][ T3326] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.410046][ T3326] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.417507][ T3326] bridge_slave_1: entered allmulticast mode [ 31.424005][ T3326] bridge_slave_1: entered promiscuous mode [ 31.431118][ T3314] team0: Port device team_slave_0 added [ 31.461407][ T3314] team0: Port device team_slave_1 added [ 31.488406][ T3326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.504330][ T3326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.514766][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.539507][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.546536][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.573243][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.585171][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.592274][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.618438][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.630453][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.653339][ T3326] team0: Port device team_slave_0 added [ 31.673742][ T3313] team0: Port device team_slave_0 added [ 31.680244][ T3326] team0: Port device team_slave_1 added [ 31.696908][ T3313] team0: Port device team_slave_1 added [ 31.732619][ T3326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.739776][ T3326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.766471][ T3326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.783494][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.790798][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.817543][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.830909][ T3314] hsr_slave_0: entered promiscuous mode [ 31.837103][ T3314] hsr_slave_1: entered promiscuous mode [ 31.843054][ T3314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.850696][ T3314] Cannot create hsr debugfs directory [ 31.862282][ T3326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.869301][ T3326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.895661][ T3326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.909248][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.916348][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.942469][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.008854][ T3313] hsr_slave_0: entered promiscuous mode [ 32.015157][ T3313] hsr_slave_1: entered promiscuous mode [ 32.021190][ T3313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.028817][ T3313] Cannot create hsr debugfs directory [ 32.040513][ T3318] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.062539][ T3326] hsr_slave_0: entered promiscuous mode [ 32.068656][ T3326] hsr_slave_1: entered promiscuous mode [ 32.074791][ T3326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.082461][ T3326] Cannot create hsr debugfs directory [ 32.088516][ T3318] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.106694][ T3318] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.117891][ T3318] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.195125][ T3312] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.222343][ T3312] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.233854][ T3312] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.255696][ T3312] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.287860][ T3314] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.300674][ T3314] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.312689][ T3314] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.321926][ T3314] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.356656][ T3313] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.366694][ T3313] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.376699][ T3313] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.386011][ T3313] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.432596][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.446012][ T3326] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.455954][ T3326] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.471294][ T3326] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.480827][ T3326] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.496961][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.520021][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.536854][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.544107][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.553274][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.560456][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.581023][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.593352][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.600544][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.621913][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.629052][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.645605][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.670629][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.681747][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.701874][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.708981][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.723421][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.730873][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.746102][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.778088][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.785223][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.794337][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.801731][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.832169][ T3326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.866519][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.876660][ T3326] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.917982][ T3401] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.925123][ T3401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.948900][ T3401] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.956126][ T3401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.983593][ T3326] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.994362][ T3326] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.012855][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.033245][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.076335][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.100605][ T3318] veth0_vlan: entered promiscuous mode [ 33.115068][ T3318] veth1_vlan: entered promiscuous mode [ 33.131045][ T3318] veth0_macvtap: entered promiscuous mode [ 33.147081][ T3318] veth1_macvtap: entered promiscuous mode [ 33.173103][ T3326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.195141][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.225904][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.240636][ T3318] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.249703][ T3318] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.258575][ T3318] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.267506][ T3318] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.299514][ T3312] veth0_vlan: entered promiscuous mode [ 33.310848][ T3313] veth0_vlan: entered promiscuous mode [ 33.339616][ T3314] veth0_vlan: entered promiscuous mode [ 33.346875][ T3313] veth1_vlan: entered promiscuous mode [ 33.353432][ T3312] veth1_vlan: entered promiscuous mode [ 33.365489][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 33.365505][ T29] audit: type=1400 audit(1748273368.990:84): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/root/syzkaller.dSIvlY/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 33.371808][ T3314] veth1_vlan: entered promiscuous mode [ 33.402467][ T29] audit: type=1400 audit(1748273368.990:85): avc: denied { mount } for pid=3318 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 33.424711][ T29] audit: type=1400 audit(1748273368.990:86): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/root/syzkaller.dSIvlY/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 33.438838][ T3313] veth0_macvtap: entered promiscuous mode [ 33.450776][ T29] audit: type=1400 audit(1748273368.990:87): avc: denied { mount } for pid=3318 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 33.478667][ T29] audit: type=1400 audit(1748273368.990:88): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/root/syzkaller.dSIvlY/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 33.491495][ T3314] veth0_macvtap: entered promiscuous mode [ 33.505656][ T29] audit: type=1400 audit(1748273368.990:89): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/root/syzkaller.dSIvlY/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4386 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 33.530707][ T3313] veth1_macvtap: entered promiscuous mode [ 33.539530][ T29] audit: type=1400 audit(1748273368.990:90): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 33.551326][ T3312] veth0_macvtap: entered promiscuous mode [ 33.572222][ T29] audit: type=1400 audit(1748273369.030:91): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 33.595037][ T29] audit: type=1400 audit(1748273369.030:92): avc: denied { mount } for pid=3318 comm="syz-executor" name="/" dev="gadgetfs" ino=4391 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 33.612182][ T3314] veth1_macvtap: entered promiscuous mode [ 33.624862][ T3318] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.647402][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.656769][ T3312] veth1_macvtap: entered promiscuous mode [ 33.671291][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.687036][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.694490][ T29] audit: type=1400 audit(1748273369.300:93): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 33.695897][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.731628][ T3326] veth0_vlan: entered promiscuous mode [ 33.743786][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.752497][ T3313] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.761796][ T3313] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.770859][ T3313] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.779704][ T3313] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.802255][ T3326] veth1_vlan: entered promiscuous mode [ 33.809425][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.819941][ T3312] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.828909][ T3312] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.838072][ T3312] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.847147][ T3312] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.865411][ T3314] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.874374][ T3314] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.883111][ T3314] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.892357][ T3314] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.910228][ T3326] veth0_macvtap: entered promiscuous mode [ 33.937088][ T3326] veth1_macvtap: entered promiscuous mode [ 33.943647][ T3458] netlink: 'wg1': attribute type 21 has an invalid length. [ 33.968450][ T3458] netlink: 'wg1': attribute type 1 has an invalid length. [ 33.975845][ T3458] netlink: 144 bytes leftover after parsing attributes in process `wg1'. [ 33.995825][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.023577][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.066138][ T3326] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.075317][ T3326] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.084552][ T3326] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.093314][ T3326] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.218461][ T3485] loop0: detected capacity change from 0 to 128 [ 34.256277][ T3485] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 34.305111][ T3485] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 34.370842][ T272] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 34.403825][ T3491] loop2: detected capacity change from 0 to 8192 [ 34.492636][ T3506] netlink: 24 bytes leftover after parsing attributes in process `syz.1.23'. [ 34.523904][ T3506] Zero length message leads to an empty skb [ 34.565775][ T3513] loop4: detected capacity change from 0 to 164 [ 34.587885][ T3513] rock: directory entry would overflow storage [ 34.594189][ T3513] rock: sig=0x66, size=4, remaining=3 [ 34.600111][ T3515] netlink: 16 bytes leftover after parsing attributes in process `syz.1.27'. [ 34.609136][ T3515] netlink: 16 bytes leftover after parsing attributes in process `syz.1.27'. [ 34.664777][ T3513] rock: directory entry would overflow storage [ 34.671058][ T3513] rock: sig=0x66, size=4, remaining=3 [ 34.692967][ T3520] futex_wake_op: syz.1.30 tries to shift op by -1; fix this program [ 34.710999][ T3522] loop2: detected capacity change from 0 to 1024 [ 34.754182][ T3526] loop1: detected capacity change from 0 to 1024 [ 34.770802][ T3522] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 34.782104][ T3522] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 34.808943][ T3530] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.835104][ T3522] JBD2: no valid journal superblock found [ 34.840924][ T3522] EXT4-fs (loop2): Could not load journal inode [ 34.875275][ T3526] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.918362][ T3526] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 16 with error 28 [ 34.931573][ T3526] EXT4-fs (loop1): This should not happen!! Data will be lost [ 34.931573][ T3526] [ 34.941651][ T3526] EXT4-fs (loop1): Total free blocks count 0 [ 34.947775][ T3526] EXT4-fs (loop1): Free/Dirty block details [ 34.953757][ T3526] EXT4-fs (loop1): free_blocks=0 [ 34.959177][ T3526] EXT4-fs (loop1): dirty_blocks=0 [ 34.964313][ T3526] EXT4-fs (loop1): Block reservation details [ 34.970484][ T3526] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 34.980350][ T3537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.36'. [ 34.992648][ T3526] syz.1.32 (3526) used greatest stack depth: 10400 bytes left [ 35.010012][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.023771][ T3539] netdevsim netdevsim0: Direct firmware load for Ngĝb]ە failed with error -2 [ 35.094788][ T3544] netlink: 12 bytes leftover after parsing attributes in process `syz.4.40'. [ 35.124822][ T3537] syz.2.36 (3537) used greatest stack depth: 10272 bytes left [ 35.244213][ T3568] netlink: 12 bytes leftover after parsing attributes in process `syz.4.47'. [ 35.504425][ T3600] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 35.511109][ T3600] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 35.519126][ T3600] vhci_hcd vhci_hcd.0: Device attached [ 35.534994][ T3603] vhci_hcd: connection closed [ 35.535766][ T53] vhci_hcd: stop threads [ 35.544971][ T53] vhci_hcd: release socket [ 35.549433][ T53] vhci_hcd: disconnect device [ 35.583379][ T3609] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.875203][ T3633] syz.2.77: attempt to access beyond end of device [ 35.875203][ T3633] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 36.101296][ T3639] SELinux: syz.0.80 (3639) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 36.135655][ T3642] capability: warning: `syz.0.81' uses deprecated v2 capabilities in a way that may be insecure [ 36.171738][ T3645] syz.0.82 uses obsolete (PF_INET,SOCK_PACKET) [ 36.551202][ T3667] netlink: 344 bytes leftover after parsing attributes in process `syz.0.91'. [ 36.644291][ C0] hrtimer: interrupt took 38813 ns [ 36.705231][ T3684] netlink: 36 bytes leftover after parsing attributes in process `syz.3.99'. [ 36.785828][ T3692] SELinux: security policydb version 18 (MLS) not backwards compatible [ 36.796027][ T3692] SELinux: failed to load policy [ 36.950321][ T3718] loop2: detected capacity change from 0 to 164 [ 36.978573][ T3720] loop3: detected capacity change from 0 to 1024 [ 36.987421][ T3718] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 36.997881][ T3724] random: crng reseeded on system resumption [ 37.000855][ T3718] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 37.005098][ T3726] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 37.023242][ T3720] ======================================================= [ 37.023242][ T3720] WARNING: The mand mount option has been deprecated and [ 37.023242][ T3720] and is ignored by this kernel. Remove the mand [ 37.023242][ T3720] option from the mount to silence this warning. [ 37.023242][ T3720] ======================================================= [ 37.081866][ T3720] EXT4-fs: Ignoring removed bh option [ 37.087874][ T3720] EXT4-fs: inline encryption not supported [ 37.120759][ T3720] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 37.184702][ T3720] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 37.215142][ T3720] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 2: comm syz.3.116: lblock 2 mapped to illegal pblock 2 (length 1) [ 37.232877][ T3720] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 48: comm syz.3.116: lblock 0 mapped to illegal pblock 48 (length 1) [ 37.252790][ T3720] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.116: Failed to acquire dquot type 0 [ 37.259534][ T3743] batadv_slave_1: entered promiscuous mode [ 37.282616][ T3720] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 37.300418][ T3744] loop2: detected capacity change from 0 to 2048 [ 37.311859][ T3741] batadv_slave_1: left promiscuous mode [ 37.318429][ T3720] EXT4-fs error (device loop3): ext4_evict_inode:259: inode #11: comm syz.3.116: mark_inode_dirty error [ 37.344551][ T3720] EXT4-fs warning (device loop3): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 37.368390][ T3720] EXT4-fs (loop3): 1 orphan inode deleted [ 37.380909][ T3720] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.398250][ T53] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 37.420678][ T3744] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.434842][ T53] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 0 [ 37.465463][ T3720] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 37.475278][ T3720] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 37.493559][ T3720] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 37.501904][ T3720] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 48: comm syz.3.116: lblock 0 mapped to illegal pblock 48 (length 1) [ 37.525003][ T3720] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 37.540031][ T3767] loop0: detected capacity change from 0 to 512 [ 37.551104][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.562493][ T3770] loop4: detected capacity change from 0 to 128 [ 37.589205][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.606408][ T3767] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.629577][ T3776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.141'. [ 37.641822][ T3770] FAT-fs (loop4): Directory bread(block 32) failed [ 37.644152][ T3767] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 37.662442][ T3770] FAT-fs (loop4): Directory bread(block 33) failed [ 37.669201][ T3770] FAT-fs (loop4): Directory bread(block 34) failed [ 37.676062][ T3770] FAT-fs (loop4): Directory bread(block 35) failed [ 37.682729][ T3770] FAT-fs (loop4): Directory bread(block 36) failed [ 37.690010][ T3770] FAT-fs (loop4): Directory bread(block 37) failed [ 37.696812][ T3770] FAT-fs (loop4): Directory bread(block 38) failed [ 37.703551][ T3770] FAT-fs (loop4): Directory bread(block 39) failed [ 37.710320][ T3770] FAT-fs (loop4): Directory bread(block 40) failed [ 37.716989][ T3770] FAT-fs (loop4): Directory bread(block 41) failed [ 37.749568][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.905825][ T3798] SELinux: Context system_u:object_r:user_cron_spool_t:s0 is not valid (left unmapped). [ 38.032517][ T3814] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 38.176948][ T3834] loop3: detected capacity change from 0 to 1024 [ 38.197173][ T3834] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 38.208656][ T3834] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 38.262813][ T3834] JBD2: no valid journal superblock found [ 38.268674][ T3834] EXT4-fs (loop3): Could not load journal inode [ 38.296572][ T3834] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 38.390292][ T3855] loop1: detected capacity change from 0 to 512 [ 38.410464][ T3855] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 38.447960][ T3855] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.473294][ T3855] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.501541][ T3855] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.177: corrupted xattr block 32: bad e_name length [ 38.534312][ T3855] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 38.546074][ T3865] x_tables: unsorted underflow at hook 1 [ 38.562330][ T3855] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.177: corrupted xattr block 32: bad e_name length [ 38.577824][ T3855] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 38.587314][ T29] kauditd_printk_skb: 200 callbacks suppressed [ 38.587331][ T29] audit: type=1400 audit(1748273374.220:290): avc: denied { remove_name } for pid=3854 comm="syz.1.177" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 38.644127][ T29] audit: type=1400 audit(1748273374.220:291): avc: denied { rename } for pid=3854 comm="syz.1.177" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 38.667230][ T29] audit: type=1400 audit(1748273374.220:292): avc: denied { unlink } for pid=3854 comm="syz.1.177" name="file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 38.699046][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.733024][ T3876] loop1: detected capacity change from 0 to 2048 [ 38.784621][ T29] audit: type=1400 audit(1748273374.400:293): avc: denied { write } for pid=3880 comm="syz.2.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.837467][ T3888] Driver unsupported XDP return value 0 on prog (id 100) dev N/A, expect packet loss! [ 38.853744][ T3876] EXT4-fs (loop1): failed to initialize system zone (-117) [ 38.861321][ T3876] EXT4-fs (loop1): mount failed [ 38.949918][ T29] audit: type=1400 audit(1748273374.570:294): avc: denied { execute } for pid=3898 comm="syz.1.192" path="/38/cgroup.stat" dev="tmpfs" ino=212 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 39.046566][ T3907] loop2: detected capacity change from 0 to 512 [ 39.053468][ T3906] syzkaller1: entered promiscuous mode [ 39.059038][ T3906] syzkaller1: entered allmulticast mode [ 39.077935][ T29] audit: type=1400 audit(1748273374.690:295): avc: denied { setcheckreqprot } for pid=3908 comm="syz.0.199" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 39.105939][ T3907] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 39.115389][ T3911] loop1: detected capacity change from 0 to 512 [ 39.129039][ T3907] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.196: invalid indirect mapped block 2683928664 (level 1) [ 39.144800][ T3907] EXT4-fs (loop2): Remounting filesystem read-only [ 39.152000][ T3907] EXT4-fs (loop2): 1 truncate cleaned up [ 39.158244][ T3907] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.183904][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.194608][ T3916] netlink: 'syz.0.200': attribute type 1 has an invalid length. [ 39.195979][ T3911] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.237453][ T3911] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 39.254560][ T29] audit: type=1400 audit(1748273374.870:296): avc: denied { watch watch_reads } for pid=3919 comm="syz.3.203" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 39.315712][ T3924] loop0: detected capacity change from 0 to 512 [ 39.324508][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.396660][ T3924] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.404396][ T29] audit: type=1400 audit(1748273375.020:297): avc: denied { getopt } for pid=3933 comm="syz.4.209" lport=13 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 39.447290][ T3924] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 39.459190][ T29] audit: type=1400 audit(1748273375.080:298): avc: denied { create } for pid=3923 comm="syz.0.204" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 39.500918][ T3924] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #2: comm syz.0.204: corrupted inode contents [ 39.515212][ T29] audit: type=1400 audit(1748273375.130:299): avc: denied { mounton } for pid=3943 comm="syz.4.212" path="/42/file1" dev="tmpfs" ino=230 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 39.542989][ T3924] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #2: comm syz.0.204: mark_inode_dirty error [ 39.565327][ T3924] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #2: comm syz.0.204: corrupted inode contents [ 39.578553][ T3924] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.204: mark_inode_dirty error [ 39.597943][ T3951] geneve0: entered promiscuous mode [ 39.608038][ T3951] macsec1: entered promiscuous mode [ 39.613555][ T3951] macsec1: entered allmulticast mode [ 39.618942][ T3951] geneve0: entered allmulticast mode [ 39.627809][ T3951] geneve0: left allmulticast mode [ 39.633085][ T3951] geneve0: left promiscuous mode [ 39.662138][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.677380][ T3958] loop2: detected capacity change from 0 to 512 [ 39.728725][ T3958] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.751436][ T3969] capability: warning: `syz.4.224' uses 32-bit capabilities (legacy support in use) [ 39.768405][ T3958] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 39.779588][ T3958] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.220: corrupted inode contents [ 39.793348][ T3969] program syz.4.224 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 39.812368][ T3958] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #2: comm syz.2.220: mark_inode_dirty error [ 39.824315][ T3958] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.220: corrupted inode contents [ 39.922394][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.962559][ T3982] pim6reg1: entered promiscuous mode [ 39.968245][ T3982] pim6reg1: entered allmulticast mode [ 40.153697][ T4001] hub 9-0:1.0: USB hub found [ 40.161607][ T4001] hub 9-0:1.0: 8 ports detected [ 40.174193][ T4005] program syz.0.241 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 40.340067][ T4023] syzkaller1: entered promiscuous mode [ 40.345980][ T4023] syzkaller1: entered allmulticast mode [ 40.466536][ T4043] loop3: detected capacity change from 0 to 512 [ 40.551861][ T4043] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.584527][ T4043] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 40.761284][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.960219][ T4149] __nla_validate_parse: 8 callbacks suppressed [ 40.960235][ T4149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.271'. [ 41.353216][ T4193] openvswitch: netlink: Message has 6 unknown bytes. [ 41.759175][ T4280] loop1: detected capacity change from 0 to 512 [ 41.873178][ T4280] EXT4-fs (loop1): orphan cleanup on readonly fs [ 41.897559][ T4280] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.294: bg 0: block 248: padding at end of block bitmap is not set [ 42.018427][ T4280] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.294: Failed to acquire dquot type 1 [ 42.086585][ T4280] EXT4-fs (loop1): 1 truncate cleaned up [ 42.115257][ T4280] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.162965][ T4280] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 42.195226][ T4280] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 42.232651][ T4280] syz.1.294 (4280) used greatest stack depth: 9360 bytes left [ 42.302397][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.433636][ T4346] netlink: 28 bytes leftover after parsing attributes in process `syz.4.304'. [ 42.442931][ T4346] netlink: 28 bytes leftover after parsing attributes in process `syz.4.304'. [ 42.524405][ T4354] netlink: 12 bytes leftover after parsing attributes in process `syz.4.307'. [ 42.685135][ T4368] loop4: detected capacity change from 0 to 512 [ 42.694903][ T4368] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 42.708408][ T4368] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 42.725382][ T4368] EXT4-fs (loop4): 1 truncate cleaned up [ 42.755169][ T4368] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.783962][ T4371] loop0: detected capacity change from 0 to 256 [ 42.803265][ T4368] EXT4-fs error (device loop4): ext4_append:79: inode #2: comm syz.4.314: Logical block already allocated [ 42.816680][ T4373] usb usb6: usbfs: process 4373 (syz.2.315) did not claim interface 0 before use [ 42.868663][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.053569][ T4386] SELinux: failed to load policy [ 43.204905][ T4410] syz.2.335 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 43.315140][ T4427] loop3: detected capacity change from 0 to 128 [ 43.351890][ T4427] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 43.412946][ T4427] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 550) [ 43.421885][ T4427] FAT-fs (loop3): Filesystem has been set read-only [ 43.510599][ T4427] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 550) [ 43.523065][ T4444] netlink: 'syz.4.351': attribute type 1 has an invalid length. [ 43.531243][ T4444] netlink: 56 bytes leftover after parsing attributes in process `syz.4.351'. [ 43.562015][ T4427] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 550) [ 43.589545][ T4427] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 550) [ 43.599929][ T29] kauditd_printk_skb: 166 callbacks suppressed [ 43.599993][ T29] audit: type=1326 audit(1748273379.230:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4431 comm="syz.1.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff23c1e969 code=0x7ffc0000 [ 43.629776][ T29] audit: type=1326 audit(1748273379.230:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4431 comm="syz.1.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff23c1e969 code=0x7ffc0000 [ 43.675254][ T4452] loop2: detected capacity change from 0 to 512 [ 43.681868][ T4427] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 550) [ 43.691149][ T4452] EXT4-fs: Ignoring removed oldalloc option [ 43.697281][ T4452] EXT4-fs: Ignoring removed nobh option [ 43.713409][ T4427] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 550) [ 43.726782][ T4427] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 550) [ 43.736844][ T29] audit: type=1400 audit(1748273379.330:466): avc: denied { create } for pid=4456 comm="syz.4.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 43.756373][ T29] audit: type=1400 audit(1748273379.330:467): avc: denied { write } for pid=4456 comm="syz.4.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 43.782343][ T4427] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 550) [ 43.791892][ T4452] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.353: iget: bad extended attribute block 1 [ 43.825626][ T4427] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 550) [ 43.835581][ T4452] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.353: couldn't read orphan inode 15 (err -117) [ 43.850966][ T4463] netlink: 132 bytes leftover after parsing attributes in process `syz.4.358'. [ 43.909508][ T4445] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 550) [ 43.926104][ T4452] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.938475][ T29] audit: type=1326 audit(1748273379.430:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4460 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe73821e969 code=0x7ffc0000 [ 43.962108][ T29] audit: type=1326 audit(1748273379.430:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4460 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe73821e969 code=0x7ffc0000 [ 43.985496][ T29] audit: type=1326 audit(1748273379.430:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4460 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe73821e969 code=0x7ffc0000 [ 44.009020][ T29] audit: type=1326 audit(1748273379.430:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4460 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe73821e969 code=0x7ffc0000 [ 44.032678][ T29] audit: type=1326 audit(1748273379.430:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4460 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe73821e969 code=0x7ffc0000 [ 44.055974][ T29] audit: type=1326 audit(1748273379.430:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4460 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe73821e969 code=0x7ffc0000 [ 44.113097][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.162996][ T4471] netlink: 104 bytes leftover after parsing attributes in process `'. [ 44.215509][ T4479] netlink: 'syz.0.366': attribute type 1 has an invalid length. [ 44.243192][ T4484] loop4: detected capacity change from 0 to 512 [ 44.297185][ T4484] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.340458][ T4497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.374'. [ 44.355626][ T4484] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.476780][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.848570][ T4550] wireguard0: entered promiscuous mode [ 44.854223][ T4550] wireguard0: entered allmulticast mode [ 44.966914][ T4568] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 45.024162][ T4574] IPv6: Can't replace route, no match found [ 45.049309][ T4579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.410'. [ 45.135965][ T4592] syz.0.416: attempt to access beyond end of device [ 45.135965][ T4592] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 45.384702][ T4623] netlink: 'syz.3.431': attribute type 3 has an invalid length. [ 45.398138][ T4623] netlink: 'syz.3.431': attribute type 3 has an invalid length. [ 45.462469][ T4633] loop1: detected capacity change from 0 to 512 [ 45.480676][ T4633] EXT4-fs: Ignoring removed orlov option [ 45.495761][ T4633] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 45.508132][ T4633] EXT4-fs (loop1): orphan cleanup on readonly fs [ 45.515072][ T4638] netlink: 104 bytes leftover after parsing attributes in process `syz.4.439'. [ 45.549919][ T4633] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.436: bg 0: block 248: padding at end of block bitmap is not set [ 45.577079][ T4633] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.436: Failed to acquire dquot type 1 [ 45.589584][ T4633] EXT4-fs (loop1): 1 truncate cleaned up [ 45.605754][ T4633] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.628502][ T4633] EXT4-fs (loop1): shut down requested (2) [ 45.634863][ T4633] EXT4-fs: Ignoring removed orlov option [ 45.640628][ T4633] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 45.666764][ T4660] netlink: 'syz.0.448': attribute type 21 has an invalid length. [ 45.703852][ T4663] loop0: detected capacity change from 0 to 1024 [ 45.711747][ T4663] EXT4-fs: Ignoring removed nomblk_io_submit option [ 45.752009][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.767420][ T4663] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.860348][ T4682] tun0: tun_chr_ioctl cmd 1074025675 [ 45.865796][ T4682] tun0: persist enabled [ 45.871065][ T4684] lo: entered promiscuous mode [ 45.876045][ T4684] lo: entered allmulticast mode [ 45.893834][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.906933][ T4682] tun0: tun_chr_ioctl cmd 1074025675 [ 45.912371][ T4682] tun0: persist enabled [ 45.967497][ T4694] netlink: 'syz.3.463': attribute type 1 has an invalid length. [ 45.992808][ T4700] netlink: 'syz.0.466': attribute type 21 has an invalid length. [ 46.000691][ T4700] IPv6: NLM_F_CREATE should be specified when creating new route [ 46.008797][ T4698] loop4: detected capacity change from 0 to 2048 [ 46.038226][ T4703] vlan2: entered allmulticast mode [ 46.043415][ T4703] gretap0: entered allmulticast mode [ 46.054176][ T4706] loop0: detected capacity change from 0 to 128 [ 46.063085][ T4698] Alternate GPT is invalid, using primary GPT. [ 46.063333][ T4706] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 46.069545][ T4698] loop4: p1 p2 p3 [ 46.083068][ T4706] ext4 filesystem being mounted at /102/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 46.128192][ T3314] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.286511][ T4740] loop4: detected capacity change from 0 to 128 [ 46.295415][ T4740] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 46.308254][ T4740] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.334703][ T3326] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.392597][ T4751] syzkaller1: entered promiscuous mode [ 46.398357][ T4751] syzkaller1: entered allmulticast mode [ 46.429599][ T4757] process 'syz.2.490' launched './file0' with NULL argv: empty string added [ 46.469457][ T4762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.480158][ T4762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.543966][ T4773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.498'. [ 46.552970][ T4773] bridge_slave_1: left allmulticast mode [ 46.558710][ T4773] bridge_slave_1: left promiscuous mode [ 46.564491][ T4773] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.572617][ T4773] bridge_slave_0: left allmulticast mode [ 46.578673][ T4773] bridge_slave_0: left promiscuous mode [ 46.584454][ T4773] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.699444][ T4780] loop4: detected capacity change from 0 to 1024 [ 46.717677][ T4780] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.732651][ T4780] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.501: bg 0: block 88: padding at end of block bitmap is not set [ 46.748293][ T4780] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 46.774882][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.810788][ T4788] netlink: 'syz.2.504': attribute type 1 has an invalid length. [ 46.946694][ T4810] netlink: 4 bytes leftover after parsing attributes in process `syz.4.515'. [ 46.955637][ T4810] netlink: 4 bytes leftover after parsing attributes in process `syz.4.515'. [ 46.965938][ T4810] netlink: 4 bytes leftover after parsing attributes in process `syz.4.515'. [ 47.007313][ T4818] loop1: detected capacity change from 0 to 512 [ 47.017432][ T4818] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 47.032826][ T4821] binfmt_misc: register: failed to install interpreter file ./file2 [ 47.045801][ T4818] EXT4-fs (loop1): 1 truncate cleaned up [ 47.060246][ T4818] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.099569][ T4818] EXT4-fs warning (device loop1): verify_group_input:137: Cannot add at group 5 (only 1 groups) [ 47.169590][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.198095][ T4845] loop2: detected capacity change from 0 to 256 [ 47.229120][ T4845] FAT-fs (loop2): bogus number of FAT sectors [ 47.235507][ T4845] FAT-fs (loop2): Can't find a valid FAT filesystem [ 47.432721][ T4877] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 47.546199][ T4890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.560751][ T4890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.681071][ T4910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.690466][ T4910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.698400][ T4912] veth1_to_bond: entered allmulticast mode [ 47.705677][ T4912] veth1_to_bond: left allmulticast mode [ 47.729623][ T4914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.562'. [ 47.804411][ T4926] netlink: 'syz.1.568': attribute type 1 has an invalid length. [ 47.903818][ T4944] loop0: detected capacity change from 0 to 256 [ 47.951394][ T4944] syz.0.577: attempt to access beyond end of device [ 47.951394][ T4944] loop0: rw=2049, sector=256, nr_sectors = 288 limit=256 [ 47.965785][ T4944] syz.0.577: attempt to access beyond end of device [ 47.965785][ T4944] loop0: rw=2049, sector=608, nr_sectors = 320 limit=256 [ 47.981267][ T4944] syz.0.577: attempt to access beyond end of device [ 47.981267][ T4944] loop0: rw=2049, sector=960, nr_sectors = 64 limit=256 [ 48.004695][ T4944] syz.0.577: attempt to access beyond end of device [ 48.004695][ T4944] loop0: rw=2049, sector=1056, nr_sectors = 1380 limit=256 [ 48.048257][ T4954] SELinux: failed to load policy [ 48.215949][ T4986] gretap0: entered promiscuous mode [ 48.222613][ T4986] macsec1: entered promiscuous mode [ 48.237785][ T4986] gretap0: left promiscuous mode [ 48.252329][ T4991] loop1: detected capacity change from 0 to 1024 [ 48.277733][ T4991] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.291389][ T4991] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.321213][ T4991] EXT4-fs error (device loop1): ext4_map_blocks:709: inode #15: block 3: comm syz.1.600: lblock 3 mapped to illegal pblock 3 (length 13) [ 48.336913][ T4991] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 48.349381][ T4991] EXT4-fs (loop1): This should not happen!! Data will be lost [ 48.349381][ T4991] [ 48.376602][ T4991] EXT4-fs error (device loop1): ext4_map_blocks:675: inode #15: block 3: comm syz.1.600: lblock 3 mapped to illegal pblock 3 (length 1) [ 48.453637][ T4991] EXT4-fs error (device loop1): ext4_map_blocks:675: inode #15: block 3: comm syz.1.600: lblock 3 mapped to illegal pblock 3 (length 1) [ 48.486968][ T5025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.495853][ T4991] EXT4-fs error (device loop1): ext4_map_blocks:675: inode #15: block 3: comm syz.1.600: lblock 3 mapped to illegal pblock 3 (length 1) [ 48.516927][ T4991] EXT4-fs error (device loop1): ext4_map_blocks:675: inode #15: block 3: comm syz.1.600: lblock 3 mapped to illegal pblock 3 (length 1) [ 48.526285][ T5025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.554382][ T4991] EXT4-fs error (device loop1): ext4_map_blocks:675: inode #15: block 3: comm syz.1.600: lblock 3 mapped to illegal pblock 3 (length 1) [ 48.584474][ T4991] EXT4-fs error (device loop1): ext4_map_blocks:675: inode #15: block 3: comm syz.1.600: lblock 3 mapped to illegal pblock 3 (length 1) [ 48.601217][ T4991] EXT4-fs error (device loop1): ext4_map_blocks:675: inode #15: block 3: comm syz.1.600: lblock 3 mapped to illegal pblock 3 (length 1) [ 48.616294][ T4991] EXT4-fs error (device loop1): ext4_map_blocks:675: inode #15: block 3: comm syz.1.600: lblock 3 mapped to illegal pblock 3 (length 1) [ 48.632668][ T4991] EXT4-fs error (device loop1): ext4_map_blocks:675: inode #15: block 3: comm syz.1.600: lblock 3 mapped to illegal pblock 3 (length 1) [ 48.705243][ T29] kauditd_printk_skb: 229 callbacks suppressed [ 48.705263][ T29] audit: type=1326 audit(1748273384.320:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5036 comm="syz.4.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fe73821e969 code=0x7ffc0000 [ 48.738024][ T29] audit: type=1326 audit(1748273384.370:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5022 comm="syz.4.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe7381bab39 code=0x7ffc0000 [ 48.762312][ T29] audit: type=1326 audit(1748273384.390:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5022 comm="syz.4.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe73821e969 code=0x7ffc0000 [ 48.785735][ T29] audit: type=1326 audit(1748273384.390:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5022 comm="syz.4.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe73821e969 code=0x7ffc0000 [ 48.828783][ T5047] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5047 comm=syz.3.617 [ 48.845680][ T29] audit: type=1400 audit(1748273384.470:705): avc: denied { write } for pid=5048 comm="syz.4.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.884215][ T29] audit: type=1400 audit(1748273384.500:706): avc: denied { create } for pid=5050 comm="syz.4.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 48.926048][ T29] audit: type=1400 audit(1748273384.510:707): avc: denied { connect } for pid=5050 comm="syz.4.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 48.946002][ T29] audit: type=1400 audit(1748273384.510:708): avc: denied { ioctl } for pid=5050 comm="syz.4.619" path="socket:[8814]" dev="sockfs" ino=8814 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 48.999647][ T5057] netlink: 'syz.3.622': attribute type 3 has an invalid length. [ 49.027989][ T5059] netlink: 4 bytes leftover after parsing attributes in process `syz.4.623'. [ 49.037975][ T5059] netlink: 4 bytes leftover after parsing attributes in process `syz.4.623'. [ 49.099734][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.109494][ T5065] loop0: detected capacity change from 0 to 2048 [ 49.131924][ T9] hid (null): unknown global tag 0xd [ 49.141680][ T9] hid-generic 0002:FFFFFF16:0009.0001: unknown global tag 0xd [ 49.149693][ T9] hid-generic 0002:FFFFFF16:0009.0001: item 0 4 1 13 parsing failed [ 49.158759][ T9] hid-generic 0002:FFFFFF16:0009.0001: probe with driver hid-generic failed with error -22 [ 49.159847][ T5071] loop3: detected capacity change from 0 to 1024 [ 49.172717][ T5065] loop0: p1 < > p4 [ 49.191531][ T5065] loop0: p4 size 8388608 extends beyond EOD, truncated [ 49.192495][ T5071] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.212007][ T5071] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.234041][ T5071] EXT4-fs error (device loop3): ext4_map_blocks:709: inode #15: block 1: comm syz.3.629: lblock 1 mapped to illegal pblock 1 (length 3) [ 49.273591][ T5071] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 117 [ 49.286046][ T5071] EXT4-fs (loop3): This should not happen!! Data will be lost [ 49.286046][ T5071] [ 49.329829][ T29] audit: type=1400 audit(1748273384.940:709): avc: denied { bind } for pid=5080 comm="syz.2.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.338029][ T5085] EXT4-fs error (device loop3): ext4_ext_remove_space:2951: inode #15: comm syz.3.629: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 49.349677][ T29] audit: type=1400 audit(1748273384.950:710): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 49.394834][ T5083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.633'. [ 49.406738][ T5083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.633'. [ 49.424041][ T5085] EXT4-fs error (device loop3) in ext4_setattr:5628: Corrupt filesystem [ 49.465186][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.585583][ T5110] SELinux: Context system_u:object_r:net_conf_t:s0 is not valid (left unmapped). [ 49.659511][ T5122] loop3: detected capacity change from 0 to 128 [ 49.668457][ T5122] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 550) [ 49.676842][ T5122] FAT-fs (loop3): Filesystem has been set read-only [ 49.696191][ T3318] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 550) [ 49.718765][ T5125] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 49.725406][ T5125] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 49.733361][ T5125] vhci_hcd vhci_hcd.0: Device attached [ 49.741428][ T5126] vhci_hcd: connection closed [ 49.741914][ T4118] vhci_hcd: stop threads [ 49.750953][ T4118] vhci_hcd: release socket [ 49.755428][ T4118] vhci_hcd: disconnect device [ 49.872392][ T5140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.659'. [ 50.093996][ T5154] loop0: detected capacity change from 0 to 2048 [ 50.108109][ T5157] tipc: Started in network mode [ 50.113144][ T5157] tipc: Node identity 6, cluster identity 4711 [ 50.119634][ T5157] tipc: Node number set to 6 [ 50.126310][ T5154] EXT4-fs (loop0): failed to initialize system zone (-117) [ 50.133680][ T5154] EXT4-fs (loop0): mount failed [ 50.207793][ T5166] loop4: detected capacity change from 0 to 512 [ 50.235823][ T5166] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 50.310670][ T5166] EXT4-fs (loop4): 1 truncate cleaned up [ 50.331641][ T5166] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.521075][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.628372][ T5212] loop1: detected capacity change from 0 to 128 [ 50.644864][ T5212] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 50.657699][ T5212] ext4 filesystem being mounted at /136/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 50.732989][ T3312] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.743301][ T5200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.753321][ T5200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.847457][ T5232] hsr_slave_0: left promiscuous mode [ 50.865271][ T5232] hsr_slave_1: left promiscuous mode [ 50.897461][ T5237] serio: Serial port ptm0 [ 51.246024][ T5272] loop2: detected capacity change from 0 to 128 [ 51.259921][ T5272] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 51.270633][ T5275] loop1: detected capacity change from 0 to 1024 [ 51.297244][ T5272] ext4 filesystem being mounted at /121/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 51.308504][ T5277] ALSA: seq fatal error: cannot create timer (-22) [ 51.366035][ T5275] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.373709][ T3313] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 51.400840][ T5275] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 51.469027][ T5297] loop0: detected capacity change from 0 to 2048 [ 51.497215][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.509726][ T5297] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.534473][ T5306] netlink: 'syz.4.731': attribute type 1 has an invalid length. [ 51.613840][ T5310] loop3: detected capacity change from 0 to 1024 [ 51.633611][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.640283][ T5310] EXT4-fs: Ignoring removed orlov option [ 51.651125][ T5310] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 51.685878][ T5310] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.711339][ T5310] EXT4-fs error (device loop3): ext4_check_all_de:659: inode #12: block 7: comm syz.3.732: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 51.742896][ T5329] syz.0.737: attempt to access beyond end of device [ 51.742896][ T5329] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 51.749550][ T5333] __nla_validate_parse: 4 callbacks suppressed [ 51.749571][ T5333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.742'. [ 51.770993][ T5333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.742'. [ 51.783216][ T5333] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.792627][ T5333] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.801682][ T5333] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.810628][ T5333] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.855449][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.888803][ T5345] loop3: detected capacity change from 0 to 2048 [ 51.912784][ T5345] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.935309][ T5345] EXT4-fs (loop3): shut down requested (0) [ 51.980833][ T5359] loop2: detected capacity change from 0 to 1024 [ 52.027231][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.027390][ T5359] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.113202][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.406609][ T5418] netlink: 96 bytes leftover after parsing attributes in process `syz.2.780'. [ 52.423770][ T5424] loop0: detected capacity change from 0 to 1024 [ 52.432112][ T5424] EXT4-fs: Ignoring removed orlov option [ 52.438844][ T5424] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 52.457361][ T5423] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 52.471347][ T5426] loop1: detected capacity change from 0 to 128 [ 52.478582][ T5424] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.529174][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.690593][ T5458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.798'. [ 52.723288][ T5462] loop2: detected capacity change from 0 to 1024 [ 52.735353][ T5462] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.748901][ T5468] loop0: detected capacity change from 0 to 128 [ 52.757006][ T5468] FAT-fs (loop0): Directory bread(block 162) failed [ 52.763760][ T5468] FAT-fs (loop0): Directory bread(block 163) failed [ 52.770747][ T5468] FAT-fs (loop0): Directory bread(block 164) failed [ 52.777846][ T5468] FAT-fs (loop0): Directory bread(block 165) failed [ 52.784971][ T5468] FAT-fs (loop0): Directory bread(block 166) failed [ 52.792022][ T5468] FAT-fs (loop0): Directory bread(block 167) failed [ 52.799060][ T5468] FAT-fs (loop0): Directory bread(block 168) failed [ 52.806094][ T5468] FAT-fs (loop0): Directory bread(block 169) failed [ 52.821652][ T5468] FAT-fs (loop0): Directory bread(block 162) failed [ 52.828796][ T5468] FAT-fs (loop0): Directory bread(block 163) failed [ 52.836517][ T5468] syz.0.801: attempt to access beyond end of device [ 52.836517][ T5468] loop0: rw=3, sector=226, nr_sectors = 6 limit=128 [ 52.850258][ T5468] syz.0.801: attempt to access beyond end of device [ 52.850258][ T5468] loop0: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 52.915826][ T5476] netlink: 'syz.0.805': attribute type 3 has an invalid length. [ 52.923896][ T5476] netlink: 'syz.0.805': attribute type 3 has an invalid length. [ 53.160695][ T5492] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 53.200070][ T5497] netlink: 24 bytes leftover after parsing attributes in process `syz.0.815'. [ 53.235927][ T5499] netlink: 76 bytes leftover after parsing attributes in process `syz.4.816'. [ 53.628693][ T5537] sctp: [Deprecated]: syz.3.835 (pid 5537) Use of struct sctp_assoc_value in delayed_ack socket option. [ 53.628693][ T5537] Use struct sctp_sack_info instead [ 53.647436][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.660665][ T5543] netlink: 9412 bytes leftover after parsing attributes in process `syz.1.839'. [ 53.756067][ T5562] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.846'. [ 53.812287][ T5572] loop1: detected capacity change from 0 to 512 [ 53.815969][ T29] kauditd_printk_skb: 98 callbacks suppressed [ 53.815990][ T29] audit: type=1400 audit(1748273389.430:809): avc: denied { relabelfrom } for pid=5568 comm="syz.4.852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 53.844568][ T29] audit: type=1400 audit(1748273389.430:810): avc: denied { relabelto } for pid=5568 comm="syz.4.852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 53.864589][ T5572] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 53.895276][ T29] audit: type=1400 audit(1748273389.440:811): avc: denied { mounton } for pid=5571 comm="syz.1.853" path="/171/bus" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 53.927097][ T5572] EXT4-fs (loop1): 1 truncate cleaned up [ 53.933282][ T5572] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.942450][ T5580] wireguard0: entered allmulticast mode [ 53.947804][ T5572] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.994035][ T5584] loop2: detected capacity change from 0 to 512 [ 54.047681][ T5590] loop4: detected capacity change from 0 to 164 [ 54.086281][ T29] audit: type=1400 audit(1748273389.690:812): avc: denied { mount } for pid=5589 comm="syz.4.859" name="/" dev="loop4" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 54.108262][ T5590] netlink: 256 bytes leftover after parsing attributes in process `syz.4.859'. [ 54.118664][ T5596] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 54.128741][ T5596] SELinux: failed to load policy [ 54.129370][ T5584] EXT4-fs (loop2): orphan cleanup on readonly fs [ 54.145962][ T5584] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.856: bg 0: block 248: padding at end of block bitmap is not set [ 54.162172][ T5584] Quota error (device loop2): write_blk: dquota write failed [ 54.169623][ T5584] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 54.179623][ T5584] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.856: Failed to acquire dquot type 1 [ 54.198557][ T29] audit: type=1400 audit(1748273389.820:813): avc: denied { unmount } for pid=3326 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 54.219998][ T5584] EXT4-fs (loop2): 1 truncate cleaned up [ 54.228175][ T5584] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 54.289117][ T5603] loop0: detected capacity change from 0 to 128 [ 54.301518][ T5601] SELinux: ebitmap: empty map [ 54.309134][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.319715][ T5601] SELinux: failed to load policy [ 54.354978][ T29] audit: type=1400 audit(1748273389.980:814): avc: granted { setsecparam } for pid=5604 comm="syz.3.865" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 54.376604][ T5603] FAT-fs (loop0): Directory bread(block 162) failed [ 54.383279][ T5603] FAT-fs (loop0): Directory bread(block 163) failed [ 54.399917][ T5603] FAT-fs (loop0): Directory bread(block 164) failed [ 54.411958][ T5603] FAT-fs (loop0): Directory bread(block 165) failed [ 54.425552][ T5603] FAT-fs (loop0): Directory bread(block 166) failed [ 54.432513][ T5603] FAT-fs (loop0): Directory bread(block 167) failed [ 54.441829][ T5603] FAT-fs (loop0): Directory bread(block 168) failed [ 54.450774][ T5603] FAT-fs (loop0): Directory bread(block 169) failed [ 54.467251][ T5603] FAT-fs (loop0): Directory bread(block 162) failed [ 54.479580][ T5603] FAT-fs (loop0): Directory bread(block 163) failed [ 54.494500][ T5603] syz.0.863: attempt to access beyond end of device [ 54.494500][ T5603] loop0: rw=3, sector=226, nr_sectors = 6 limit=128 [ 54.510471][ T5603] syz.0.863: attempt to access beyond end of device [ 54.510471][ T5603] loop0: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 54.657755][ T29] audit: type=1400 audit(1748273390.270:815): avc: denied { read } for pid=5627 comm="syz.0.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 54.677648][ T5629] netlink: 'syz.2.872': attribute type 10 has an invalid length. [ 54.714081][ T5629] team0: Device veth0_macvtap failed to register rx_handler [ 54.742488][ T29] audit: type=1400 audit(1748273390.360:816): avc: denied { read } for pid=5634 comm="syz.4.875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 54.986016][ T5651] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 55.038924][ T5662] loop4: detected capacity change from 0 to 1024 [ 55.053847][ T5662] EXT4-fs: Ignoring removed orlov option [ 55.072070][ T5662] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.426198][ T3401] ================================================================== [ 55.434524][ T3401] BUG: KCSAN: data-race in copy_page_from_iter_atomic / copy_page_from_iter_atomic [ 55.443842][ T3401] [ 55.446173][ T3401] write to 0xffff88810872155f of 3 bytes by task 5678 on cpu 1: [ 55.453827][ T3401] copy_page_from_iter_atomic+0x77f/0xff0 [ 55.459564][ T3401] generic_perform_write+0x2c2/0x490 [ 55.464910][ T3401] ext4_buffered_write_iter+0x1ee/0x3c0 [ 55.470499][ T3401] ext4_file_write_iter+0x383/0xf00 [ 55.475828][ T3401] iter_file_splice_write+0x5f2/0x970 [ 55.481246][ T3401] direct_splice_actor+0x153/0x2a0 [ 55.486557][ T3401] splice_direct_to_actor+0x30f/0x680 [ 55.492380][ T3401] do_splice_direct+0xda/0x150 [ 55.497159][ T3401] do_sendfile+0x380/0x640 [ 55.501941][ T3401] __x64_sys_sendfile64+0x105/0x150 [ 55.507529][ T3401] x64_sys_call+0xb39/0x2fb0 [ 55.512136][ T3401] do_syscall_64+0xd0/0x1a0 [ 55.516681][ T3401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.522595][ T3401] [ 55.524930][ T3401] read to 0xffff888108721400 of 1024 bytes by task 3401 on cpu 0: [ 55.532777][ T3401] copy_page_from_iter_atomic+0x77f/0xff0 [ 55.538525][ T3401] generic_perform_write+0x2c2/0x490 [ 55.543840][ T3401] shmem_file_write_iter+0xc5/0xf0 [ 55.549068][ T3401] lo_rw_aio+0x5fa/0x7c0 [ 55.553333][ T3401] loop_process_work+0x52d/0xa60 [ 55.558293][ T3401] loop_workfn+0x31/0x40 [ 55.562596][ T3401] process_scheduled_works+0x4cb/0x9d0 [ 55.568079][ T3401] worker_thread+0x582/0x770 [ 55.572692][ T3401] kthread+0x486/0x510 [ 55.576776][ T3401] ret_from_fork+0x4b/0x60 [ 55.581204][ T3401] ret_from_fork_asm+0x1a/0x30 [ 55.585991][ T3401] [ 55.588326][ T3401] Reported by Kernel Concurrency Sanitizer on: [ 55.594507][ T3401] CPU: 0 UID: 0 PID: 3401 Comm: kworker/u8:6 Not tainted 6.15.0-syzkaller #0 PREEMPT(voluntary) [ 55.605135][ T3401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 55.615208][ T3401] Workqueue: loop4 loop_workfn [ 55.620001][ T3401] ================================================================== [ 55.773551][ T5678] ================================================================== [ 55.781690][ T5678] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 55.788947][ T5678] [ 55.791388][ T5678] write to 0xffff888107752a94 of 4 bytes by task 5662 on cpu 0: [ 55.799137][ T5678] xas_set_mark+0x12b/0x140 [ 55.803724][ T5678] __folio_start_writeback+0x1dd/0x430 [ 55.809345][ T5678] ext4_bio_write_folio+0x590/0x9d0 [ 55.814595][ T5678] mpage_process_page_bufs+0x46c/0x5b0 [ 55.820078][ T5678] mpage_prepare_extent_to_map+0x775/0xb80 [ 55.826017][ T5678] ext4_do_writepages+0xa25/0x2270 [ 55.831264][ T5678] ext4_writepages+0x176/0x300 [ 55.836055][ T5678] do_writepages+0x1d5/0x480 [ 55.840747][ T5678] file_write_and_wait_range+0x156/0x2c0 [ 55.846414][ T5678] generic_buffers_fsync_noflush+0x45/0x120 [ 55.852348][ T5678] ext4_sync_file+0x1ab/0x690 [ 55.857059][ T5678] vfs_fsync_range+0x10a/0x130 [ 55.861958][ T5678] ext4_buffered_write_iter+0x34f/0x3c0 [ 55.867565][ T5678] ext4_file_write_iter+0x383/0xf00 [ 55.872934][ T5678] iter_file_splice_write+0x5f2/0x970 [ 55.878520][ T5678] direct_splice_actor+0x153/0x2a0 [ 55.883675][ T5678] splice_direct_to_actor+0x30f/0x680 [ 55.889348][ T5678] do_splice_direct+0xda/0x150 [ 55.894273][ T5678] do_sendfile+0x380/0x640 [ 55.898828][ T5678] __x64_sys_sendfile64+0x105/0x150 [ 55.904099][ T5678] x64_sys_call+0xb39/0x2fb0 [ 55.908727][ T5678] do_syscall_64+0xd0/0x1a0 [ 55.913284][ T5678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.919303][ T5678] [ 55.921642][ T5678] read to 0xffff888107752a94 of 4 bytes by task 5678 on cpu 1: [ 55.929308][ T5678] xas_find_marked+0x5dc/0x620 [ 55.934202][ T5678] find_get_entry+0x5d/0x380 [ 55.938872][ T5678] filemap_get_folios_tag+0x92/0x210 [ 55.944469][ T5678] mpage_prepare_extent_to_map+0x330/0xb80 [ 55.950425][ T5678] ext4_do_writepages+0xa25/0x2270 [ 55.955761][ T5678] ext4_writepages+0x176/0x300 [ 55.960819][ T5678] do_writepages+0x1d5/0x480 [ 55.965977][ T5678] file_write_and_wait_range+0x156/0x2c0 [ 55.971928][ T5678] generic_buffers_fsync_noflush+0x45/0x120 [ 55.978049][ T5678] ext4_sync_file+0x1ab/0x690 [ 55.983571][ T5678] vfs_fsync_range+0x10a/0x130 [ 55.988376][ T5678] ext4_buffered_write_iter+0x34f/0x3c0 [ 55.994054][ T5678] ext4_file_write_iter+0x383/0xf00 [ 55.999482][ T5678] iter_file_splice_write+0x5f2/0x970 [ 56.005075][ T5678] direct_splice_actor+0x153/0x2a0 [ 56.010318][ T5678] splice_direct_to_actor+0x30f/0x680 [ 56.015995][ T5678] do_splice_direct+0xda/0x150 [ 56.020802][ T5678] do_sendfile+0x380/0x640 [ 56.025337][ T5678] __x64_sys_sendfile64+0x105/0x150 [ 56.030675][ T5678] x64_sys_call+0xb39/0x2fb0 [ 56.035303][ T5678] do_syscall_64+0xd0/0x1a0 [ 56.040025][ T5678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.046197][ T5678] [ 56.048545][ T5678] value changed: 0x0a000021 -> 0x04000021 [ 56.054287][ T5678] [ 56.056637][ T5678] Reported by Kernel Concurrency Sanitizer on: [ 56.063247][ T5678] CPU: 1 UID: 0 PID: 5678 Comm: syz.4.886 Not tainted 6.15.0-syzkaller #0 PREEMPT(voluntary) [ 56.073526][ T5678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 56.083709][ T5678] ================================================================== [ 56.159203][ T5678] syz.4.886 (5678) used greatest stack depth: 9080 bytes left [ 56.174424][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.