last executing test programs: 38.771335026s ago: executing program 3 (id=103): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f00000000c0)=0x9, 0x2) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x8, 0x0, @void}}}}}}}, 0x0) 38.706963598s ago: executing program 3 (id=106): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x70, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfd, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xdd47, 0x6f81, 0x8, 0x82, 0xfffffff8, 0x6}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x6, 0x7b1, 0xfe, 0x1, 0x3, 0x4}}, {0x4}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x55}, 0x4c884) 38.685458779s ago: executing program 3 (id=107): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000140000006012000001282f00fe88a43de1a400000000000000027d01ff0200000000000000000000000000010000883e"], 0xfdef) 38.600733434s ago: executing program 3 (id=109): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x84000, 0x0) 38.575495235s ago: executing program 3 (id=110): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x9, 0x7, 0x0, 0x400000000000081, 0x2, 0x3e, 0xfffffff9, 0x3bf, 0x40, 0x103, 0xd35, 0x5, 0x38, 0x2, 0x78, 0x7}, [{0x6474e551, 0x5, 0x1, 0x8dbb, 0xc2d, 0xaf, 0x3, 0x8}, {0x1, 0xa1b8, 0x7, 0xc4, 0x2, 0x5, 0x0, 0x10001}]}, 0xb0) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) close(r0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 38.340912698s ago: executing program 3 (id=115): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586838) preadv2(r0, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x8000, 0x9, 0x19) 38.340665827s ago: executing program 32 (id=115): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586838) preadv2(r0, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x8000, 0x9, 0x19) 3.365016736s ago: executing program 1 (id=960): prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) r0 = syz_io_uring_setup(0x10f, &(0x7f0000000700)={0x0, 0xfffffffe, 0x100, 0x1}, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001c00)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47f5, 0x6021, 0x0, 0x0, 0x0) 3.220031663s ago: executing program 1 (id=964): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socket(0x28, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 3.154544706s ago: executing program 1 (id=968): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000040)={r2, 0x800}, 0x8) 2.30715046s ago: executing program 1 (id=974): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x60}, 0x80, 0x0}}], 0x2, 0x48094) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) 2.225004565s ago: executing program 4 (id=977): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'rr\x00', 0x0, 0x400eef4, 0x14}, 0x2c) 2.221346965s ago: executing program 4 (id=979): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20008030) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400070200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x100000000000000, 0x0, 0x24004821}, 0x0) 1.810880866s ago: executing program 4 (id=985): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000002600)=ANY=[@ANYBLOB="7f454c460504028d0400000000000000020006000400000019000000380000005e020000085cb9308100200002"], 0x78) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 1.810272976s ago: executing program 4 (id=986): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000e40)="f94d45", 0xfdef}], 0x1) 1.762604849s ago: executing program 0 (id=988): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fcntl$notify(r0, 0x402, 0x37) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r1, &(0x7f0000001240)=[{&(0x7f0000001740)="9b", 0x1}], 0x1) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000000)={'netdevsim0', 0x32, 0x35}, 0xd) 1.576484958s ago: executing program 0 (id=992): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a", 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}, 0x1, 0x0, 0x0, 0x4044880}, 0x40040) 1.515278781s ago: executing program 0 (id=994): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="03000000040000000400000009"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r0, @ANYBLOB="000000000000000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r2, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000034d, &(0x7f0000001d00), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 1.378670359s ago: executing program 1 (id=1000): r0 = memfd_create(&(0x7f0000000300)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2A7:n\x8c\xa7P\x1a\x87\xd9c\xecR\xd6\xe8\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x19M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xff\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\bB\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fl\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \x90\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2o\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xff\x0f\x00\x00\x00\x00\x00\x00Li\r\x95Z\x89\"_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b)\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca\x00\x00\x00\x00\x00\x03\xfcWZ!<\x16a5ZL.\xe6\x15]\xebY\xaa\xbea\x8e\xdc\xc52r\"\xea\x9e\x03\x11&\xc3JU\xa7\xd6\x8a\xf8\xae>S\xde', 0x0) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, 0x0) write(r0, &(0x7f0000000140)='/', 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xfec) 1.293830153s ago: executing program 0 (id=1005): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00000000040100090000000000000000850000006a00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x4, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x5, 0xe, 0x0, &(0x7f00000000c0)="469dc2d342e2b7000091000000000bcf48f3ac4e19a56ceb0b42c0", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x22) 888.871094ms ago: executing program 4 (id=1006): openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) r0 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3380, 0x2, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) 888.255204ms ago: executing program 0 (id=1016): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x103902, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x2a11, 0x400, 0x1, 0x40000335}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 887.809294ms ago: executing program 1 (id=1007): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 760.459891ms ago: executing program 0 (id=1011): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x60}, 0x80, 0x0}}], 0x2, 0x48094) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) 691.152554ms ago: executing program 2 (id=1023): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) 356.245172ms ago: executing program 5 (id=1013): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0xaa75e570e7ca697d) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000580050001"], 0x80}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 322.148613ms ago: executing program 5 (id=1014): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3, 0x0, 0x3}, 0xb2a1}) write$sndseq(r1, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) 303.801195ms ago: executing program 5 (id=1015): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x6) flistxattr(r1, 0x0, 0x0) 212.899569ms ago: executing program 5 (id=1017): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0x6, 0x6, @local}, 0x14) sendmmsg$sock(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x1000000}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@txtime={{0x18, 0x1, 0x3d, 0x4c}}], 0x6}}], 0x4000114, 0x40500f0) 212.473559ms ago: executing program 2 (id=1018): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) getgroups(0x0, 0x0) 200.86124ms ago: executing program 5 (id=1019): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442fd3fe8000000000000000000000000000aaff020000000000000000000000000001042088be"], 0xfdef) 165.730851ms ago: executing program 2 (id=1020): perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10002}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000008c0), 0x75, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) 120.029514ms ago: executing program 2 (id=1021): r0 = syz_io_uring_setup(0xac9, &(0x7f00000002c0)={0x0, 0x3594, 0x2, 0x1103, 0x21e}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x3938700}, 0x1, 0x8}) io_uring_enter(r0, 0x6efc, 0x3900, 0xb, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x35, {0x5, 0x1}, 0x1}, 0x1) 64.105147ms ago: executing program 2 (id=1022): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) keyctl$chown(0x4, r0, 0xee01, r1) keyctl$setperm(0x5, r0, 0x30925) keyctl$read(0xb, r0, &(0x7f0000000000)=""/201, 0xc9) 63.818667ms ago: executing program 2 (id=1024): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$eJzs3c9vHFcdAPDvTLK2k7h1WnoABG1oCwFFWceb1qp6gHJCCFVC9AhSauyNZXnXa3nXpTaRcM9ckajECY78AZx74s4FwY1LOSDxwwLVSBwGzezY2di79uaHvZb385FG89688X7fizPvzbxd7wtgbN2IiJ2ImIiI9yNipjyelFu8093y8z7bfbC4t/tgMYkse++fSVGeH4uen8ldK19zKiJ+8J2IHydH47a3tlcXGo36Rpmf7TTXZ9tb27dXmgvL9eX6Wq02Pzd/5627b9YeozVTx5a+0pwoU1/+9A873/hpXq3p8khvO56lbtMrB3FylyPie6cRbAQule2ZGHVFeCJpRLwYEa8W1/9MXCp+mwDARZZlM5HN9OYBgIsuLebAkrRazgVMR5pWq905vJfiatpotTu37rc215a6c2XXo5LeX2nU75RzhdejkuT5uSL9MF87lL8bES9ExC8mrxT56mKrsTTKGx8AGGPXDo3//5nsjv8AwAV3/MdmAICLyPgPAOPH+A8A48f4DwDjpzv+X3ncH8uy7GenUR0A4Ax4/geA8WP8B4Cx8v133823bK/8/uulD7Y2V1sf3F6qt1erzc3F6mJrY7263GotF9/Z0zzp9Rqt1vrcG7H54fVvrrc7s+2t7XvN1uZa517xvd736pXirJ0zaBkAMMgLr3zy5yQfkd++UmzRs5ZDZaQ1A05bOuoKACNzadQVAEbGal8wvh4+4z/2hwBMD8AF0WeJ3kdM9fsDoSzLstOrEnDKbn7B/D+Mq575f58ChjFz0vx/sTawNwnhQjL/D+Mry5Jh1/yPYU8EAM63Y+b4r5/lfQgwOgPe/3+x3P+2fHPgR0uHz/j4NGsFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA59v++r/Vcpnf6UjTajXiuWIBoEpyf6VRvxMRz0fEnyYrk3l+bsR1BgCeVvq3pFz/6+bM69OPFL187SA5ERE/+dV7v/xwodPZ+GPERPKvyf3jnY/L47UTg02dRgsAgOPtj9PFvudB/rPdB4v721nW5+/f7t4V5HH3didi7yD+5bhc7KeiEhFX/52U+a6kZ+7iaex8FBGf79f+JKaLOZDuLcvh+Hns5840fvpI/LRcoDkt/y0+9wzqAuPmk7z/eaff9ZfGjWLf//qfKnqop1f2f/lLLe4VfeDD+Pv936UB/d+NYWO88fvvdlNXjpZ9FPHFyxH7sfd6+p/9+MmA+K8PGf8vX3r51UFl2a8jbkb/+L2xZjvN9dn21vbtlebCcn25vlarzc/N33nr7pu12WKOenbwaPCPt289P6gsb//VAfGnTmj/V4ds/2/+9/4Pv3JM/K+/1i9+Gi8dEz8fE782ZPyFq78b+Nydx1862v5kmN//rSHjf/rX7SPLhgMAo9Pe2l5daDTqGxIS5z+R/5c9B9Xom/jWWcWaiP5FP3+te00fKsqyJ4o1qMd4FrNuwHlwcNFHxH9HXRkAAAAAAAAAAAAAAKCvs/iLpVG3EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIvr/wEAAP//Rb3T2A==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x800, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f00000001c0)={@id={0x2, 0x0, @c}}) sendfile(r0, r0, 0x0, 0xe3aa6ea) 46.131458ms ago: executing program 5 (id=1025): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x48000) read(r0, &(0x7f0000001480)=""/4096, 0x38) 0s ago: executing program 4 (id=1026): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040), 0x1, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x8, 0x9, 0x6, 0x7, 0x0, 0x80000, 0x0, 0x402009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x1e9) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78cf2}], 0x7b, 0x2000, 0x0, 0x3) kernel console output (not intermixed with test programs): [ 17.385823][ T28] audit: type=1400 audit(1774471977.542:62): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 17.407760][ T28] audit: type=1400 audit(1774471977.542:63): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 17.430370][ T28] audit: type=1400 audit(1774471977.542:64): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 17.453304][ T28] audit: type=1400 audit(1774471977.542:65): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 17.476244][ T28] audit: type=1400 audit(1774471977.542:66): avc: denied { read open } for pid=3193 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.111' (ED25519) to the list of known hosts. [ 22.413085][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 22.413099][ T28] audit: type=1400 audit(1774471982.572:70): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.441960][ T28] audit: type=1400 audit(1774471982.602:71): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.442663][ T3298] cgroup: Unknown subsys name 'net' [ 22.469535][ T28] audit: type=1400 audit(1774471982.622:72): avc: denied { unmount } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.580604][ T3298] cgroup: Unknown subsys name 'cpuset' [ 22.586589][ T3298] cgroup: Unknown subsys name 'rlimit' [ 22.715589][ T28] audit: type=1400 audit(1774471982.872:73): avc: denied { setattr } for pid=3298 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.739099][ T28] audit: type=1400 audit(1774471982.872:74): avc: denied { create } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.759882][ T28] audit: type=1400 audit(1774471982.872:75): avc: denied { write } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.789610][ T3300] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.798341][ T28] audit: type=1400 audit(1774471982.872:76): avc: denied { read } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.818702][ T28] audit: type=1400 audit(1774471982.902:77): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.843510][ T28] audit: type=1400 audit(1774471982.902:78): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.866782][ T28] audit: type=1400 audit(1774471982.942:79): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 22.895814][ T3298] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.666274][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 24.691691][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 24.734244][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 24.775174][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 24.802418][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.809509][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.816627][ T3312] bridge_slave_0: entered allmulticast mode [ 24.823018][ T3312] bridge_slave_0: entered promiscuous mode [ 24.833383][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.840522][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.847684][ T3312] bridge_slave_1: entered allmulticast mode [ 24.853974][ T3312] bridge_slave_1: entered promiscuous mode [ 24.879778][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.886915][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.894045][ T3315] bridge_slave_0: entered allmulticast mode [ 24.900507][ T3315] bridge_slave_0: entered promiscuous mode [ 24.906887][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 24.925171][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.932259][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.939394][ T3314] bridge_slave_0: entered allmulticast mode [ 24.945715][ T3314] bridge_slave_0: entered promiscuous mode [ 24.952099][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.959131][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.966321][ T3315] bridge_slave_1: entered allmulticast mode [ 24.972693][ T3315] bridge_slave_1: entered promiscuous mode [ 24.979863][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.989852][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.005769][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.012839][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.019932][ T3314] bridge_slave_1: entered allmulticast mode [ 25.026389][ T3314] bridge_slave_1: entered promiscuous mode [ 25.072858][ T3312] team0: Port device team_slave_0 added [ 25.079411][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.089684][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.099866][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.109862][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.119215][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.126262][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.133448][ T3311] bridge_slave_0: entered allmulticast mode [ 25.139815][ T3311] bridge_slave_0: entered promiscuous mode [ 25.148970][ T3312] team0: Port device team_slave_1 added [ 25.170679][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.177743][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.184994][ T3311] bridge_slave_1: entered allmulticast mode [ 25.191315][ T3311] bridge_slave_1: entered promiscuous mode [ 25.207883][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.214920][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.240908][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.252276][ T3315] team0: Port device team_slave_0 added [ 25.258051][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.265018][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.290885][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.309446][ T3314] team0: Port device team_slave_0 added [ 25.315722][ T3315] team0: Port device team_slave_1 added [ 25.336519][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.346099][ T3314] team0: Port device team_slave_1 added [ 25.356083][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.363186][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.370324][ T3322] bridge_slave_0: entered allmulticast mode [ 25.376458][ T3322] bridge_slave_0: entered promiscuous mode [ 25.383676][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.396966][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.403951][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.429858][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.444554][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.451779][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.458913][ T3322] bridge_slave_1: entered allmulticast mode [ 25.465280][ T3322] bridge_slave_1: entered promiscuous mode [ 25.484674][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.491716][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.517816][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.540869][ T3312] hsr_slave_0: entered promiscuous mode [ 25.546826][ T3312] hsr_slave_1: entered promiscuous mode [ 25.557541][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.564677][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.590610][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.602185][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.609111][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.634999][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.646343][ T3311] team0: Port device team_slave_0 added [ 25.652892][ T3311] team0: Port device team_slave_1 added [ 25.663309][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.673572][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.713901][ T3315] hsr_slave_0: entered promiscuous mode [ 25.719779][ T3315] hsr_slave_1: entered promiscuous mode [ 25.725806][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 25.731550][ T3315] Cannot create hsr debugfs directory [ 25.743121][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.750058][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.776167][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.792326][ T3322] team0: Port device team_slave_0 added [ 25.798655][ T3322] team0: Port device team_slave_1 added [ 25.808546][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.815491][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.841377][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.878149][ T3314] hsr_slave_0: entered promiscuous mode [ 25.884077][ T3314] hsr_slave_1: entered promiscuous mode [ 25.889830][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 25.895578][ T3314] Cannot create hsr debugfs directory [ 25.903364][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.910449][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.936476][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.947876][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.954826][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.980730][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.034625][ T3311] hsr_slave_0: entered promiscuous mode [ 26.040723][ T3311] hsr_slave_1: entered promiscuous mode [ 26.046656][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 26.052544][ T3311] Cannot create hsr debugfs directory [ 26.075284][ T3322] hsr_slave_0: entered promiscuous mode [ 26.081205][ T3322] hsr_slave_1: entered promiscuous mode [ 26.087043][ T3322] debugfs: 'hsr0' already exists in 'hsr' [ 26.092777][ T3322] Cannot create hsr debugfs directory [ 26.198043][ T3312] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 26.206971][ T3312] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 26.220499][ T3312] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 26.241799][ T3312] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 26.272052][ T3314] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 26.280607][ T3314] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 26.291170][ T3314] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 26.299726][ T3314] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 26.325768][ T3315] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 26.336306][ T3315] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 26.345009][ T3315] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 26.354559][ T3315] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 26.390871][ T3311] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 26.399198][ T3311] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 26.416205][ T3311] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 26.424531][ T3311] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 26.451849][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.468107][ T3322] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 26.482502][ T3322] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 26.494204][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.505053][ T3322] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 26.514099][ T3322] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 26.527810][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.534864][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.551800][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.558838][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.569423][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.588652][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.597121][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.617025][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.624078][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.632929][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.639957][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.666254][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.681378][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.698461][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.705579][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.714726][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.721791][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.746991][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.772351][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.782238][ T3315] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 26.792966][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.806603][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.829459][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.858684][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.865736][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.874049][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.881086][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.889652][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.896689][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.913782][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.927335][ T2029] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.934521][ T2029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.946496][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.992408][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.066170][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.088160][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.125732][ T3312] veth0_vlan: entered promiscuous mode [ 27.149384][ T3312] veth1_vlan: entered promiscuous mode [ 27.167227][ T3314] veth0_vlan: entered promiscuous mode [ 27.204457][ T3315] veth0_vlan: entered promiscuous mode [ 27.215408][ T3314] veth1_vlan: entered promiscuous mode [ 27.228105][ T3312] veth0_macvtap: entered promiscuous mode [ 27.238397][ T3322] veth0_vlan: entered promiscuous mode [ 27.246573][ T3312] veth1_macvtap: entered promiscuous mode [ 27.257937][ T3315] veth1_vlan: entered promiscuous mode [ 27.265599][ T3322] veth1_vlan: entered promiscuous mode [ 27.274324][ T3311] veth0_vlan: entered promiscuous mode [ 27.282835][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.297749][ T3314] veth0_macvtap: entered promiscuous mode [ 27.311718][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.323625][ T3315] veth0_macvtap: entered promiscuous mode [ 27.331659][ T3311] veth1_vlan: entered promiscuous mode [ 27.338386][ T3314] veth1_macvtap: entered promiscuous mode [ 27.347470][ T3315] veth1_macvtap: entered promiscuous mode [ 27.358023][ T3322] veth0_macvtap: entered promiscuous mode [ 27.365169][ T40] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.374121][ T40] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.389473][ T3322] veth1_macvtap: entered promiscuous mode [ 27.396151][ T40] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.405283][ T40] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.415768][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.424800][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.437191][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.437547][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 27.437557][ T28] audit: type=1400 audit(1774471987.592:90): avc: denied { mounton } for pid=3312 comm="syz-executor" path="/root/syzkaller.be0P1J/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 27.451248][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.474997][ T28] audit: type=1400 audit(1774471987.602:91): avc: denied { mount } for pid=3312 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 27.492015][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.515192][ T3312] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.526983][ T3311] veth0_macvtap: entered promiscuous mode [ 27.536038][ T28] audit: type=1400 audit(1774471987.602:92): avc: denied { mounton } for pid=3312 comm="syz-executor" path="/root/syzkaller.be0P1J/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 27.545360][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.568488][ T28] audit: type=1400 audit(1774471987.602:93): avc: denied { mount } for pid=3312 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 27.590449][ T28] audit: type=1400 audit(1774471987.602:94): avc: denied { mounton } for pid=3312 comm="syz-executor" path="/root/syzkaller.be0P1J/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 27.594719][ T109] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.617415][ T28] audit: type=1400 audit(1774471987.602:95): avc: denied { mounton } for pid=3312 comm="syz-executor" path="/root/syzkaller.be0P1J/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 27.628561][ T3311] veth1_macvtap: entered promiscuous mode [ 27.662796][ T28] audit: type=1400 audit(1774471987.602:96): avc: denied { unmount } for pid=3312 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 27.686298][ T28] audit: type=1400 audit(1774471987.642:97): avc: denied { mounton } for pid=3312 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 27.709196][ T28] audit: type=1400 audit(1774471987.642:98): avc: denied { mount } for pid=3312 comm="syz-executor" name="/" dev="gadgetfs" ino=3876 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 27.720143][ T109] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.733007][ T28] audit: type=1400 audit(1774471987.822:99): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 27.741697][ T109] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.776951][ T3481] team0 (unregistering): Port device team_slave_0 removed [ 27.785419][ T3481] team0 (unregistering): Port device team_slave_1 removed [ 27.797711][ T2029] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.807896][ T2029] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.828603][ T2029] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.846803][ T2029] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.855928][ T2029] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.867308][ T2029] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.883065][ T2029] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.897078][ T2029] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.914777][ T2029] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.926159][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.935413][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.949304][ T40] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.997277][ T40] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.018278][ T40] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.038643][ T40] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.087344][ T3506] netlink: 88 bytes leftover after parsing attributes in process `syz.2.11'. [ 28.134914][ T3508] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 28.166585][ T3516] loop0: detected capacity change from 0 to 512 [ 28.173355][ T3516] ======================================================= [ 28.173355][ T3516] WARNING: The mand mount option has been deprecated and [ 28.173355][ T3516] and is ignored by this kernel. Remove the mand [ 28.173355][ T3516] option from the mount to silence this warning. [ 28.173355][ T3516] ======================================================= [ 28.252993][ T3518] syz.2.16 uses obsolete (PF_INET,SOCK_PACKET) [ 28.308432][ T3526] netlink: 'syz.0.20': attribute type 13 has an invalid length. [ 28.316274][ T3526] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.20'. [ 28.337795][ T2029] Bluetooth: hci1: Frame reassembly failed (-84) [ 28.457563][ T3539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.466131][ T3539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.516259][ C0] hrtimer: interrupt took 37308 ns [ 29.007667][ T3548] RDS: rds_bind could not find a transport for ::3:0:20:0, load rds_tcp or rds_rdma? [ 29.661871][ T3565] mmap: syz.0.37 (3565) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 29.976741][ T3581] loop0: detected capacity change from 0 to 512 [ 30.014774][ T3581] EXT4-fs (loop0): 1 truncate cleaned up [ 30.024430][ T3581] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.038870][ T3585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.45'. [ 30.040261][ T3529] Bluetooth: hci0: command 0x1003 tx timeout [ 30.047619][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 30.063148][ T3581] EXT4-fs error (device loop0): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.0.44: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 30.107453][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.360135][ T43] Bluetooth: hci1: command 0x1003 tx timeout [ 30.360359][ T3496] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 30.429269][ T3615] futex_wake_op: syz.3.59 tries to shift op by 32; fix this program [ 30.453984][ T3617] loop0: detected capacity change from 0 to 512 [ 30.487918][ T3617] EXT4-fs (loop0): 1 truncate cleaned up [ 30.493969][ T3617] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.699675][ T3639] loop1: detected capacity change from 0 to 128 [ 30.746839][ T3647] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.752454][ T3646] loop1: detected capacity change from 0 to 128 [ 30.833063][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.873284][ T3662] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 30.955700][ T3668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.85'. [ 30.964708][ T3668] netlink: 24 bytes leftover after parsing attributes in process `syz.2.85'. [ 30.973744][ T3668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.85'. [ 30.982658][ T3668] netlink: 24 bytes leftover after parsing attributes in process `syz.2.85'. [ 30.991557][ T3668] Zero length message leads to an empty skb [ 31.187674][ T3694] loop2: detected capacity change from 0 to 4096 [ 31.197680][ T3694] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.214873][ T3694] capability: warning: `syz.2.96' uses deprecated v2 capabilities in a way that may be insecure [ 31.235132][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.258297][ T3698] loop2: detected capacity change from 0 to 512 [ 31.268139][ T3698] EXT4-fs (loop2): 1 truncate cleaned up [ 31.274428][ T3698] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.299717][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.582453][ T3708] netlink: 28 bytes leftover after parsing attributes in process `syz.2.101'. [ 31.595298][ T3710] netlink: 92 bytes leftover after parsing attributes in process `syz.3.102'. [ 31.597008][ T3708] netlink: 32 bytes leftover after parsing attributes in process `syz.2.101'. [ 31.698148][ T3719] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 31.725115][ T3721] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0002:7d01 with DS=0x1 [ 31.809478][ T3725] loop0: detected capacity change from 0 to 128 [ 31.843308][ T3725] syz.0.108: attempt to access beyond end of device [ 31.843308][ T3725] loop0: rw=2049, sector=138, nr_sectors = 16 limit=128 [ 31.856896][ T3725] syz.0.108: attempt to access beyond end of device [ 31.856896][ T3725] loop0: rw=2049, sector=170, nr_sectors = 16 limit=128 [ 31.870838][ T3725] syz.0.108: attempt to access beyond end of device [ 31.870838][ T3725] loop0: rw=2049, sector=202, nr_sectors = 16 limit=128 [ 31.886124][ T3725] syz.0.108: attempt to access beyond end of device [ 31.886124][ T3725] loop0: rw=2049, sector=234, nr_sectors = 16 limit=128 [ 31.900201][ T3725] syz.0.108: attempt to access beyond end of device [ 31.900201][ T3725] loop0: rw=2049, sector=154, nr_sectors = 16 limit=128 [ 31.913916][ T3725] syz.0.108: attempt to access beyond end of device [ 31.913916][ T3725] loop0: rw=2049, sector=218, nr_sectors = 8 limit=128 [ 31.943987][ T69] kworker/u8:4: attempt to access beyond end of device [ 31.943987][ T69] loop0: rw=1, sector=138, nr_sectors = 2 limit=128 [ 31.995874][ T3734] loop0: detected capacity change from 0 to 128 [ 31.998856][ T3735] process 'syz.1.114' launched './file0' with NULL argv: empty string added [ 32.031720][ T69] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.084943][ T3739] loop0: detected capacity change from 0 to 512 [ 32.095122][ T69] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.110713][ T3375] kernel write not supported for file bpf-prog (pid: 3375 comm: kworker/1:2) [ 32.182104][ T69] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.250960][ T3758] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 32.257497][ T3758] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 32.276240][ T69] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.283555][ T3758] vhci_hcd vhci_hcd.0: Device attached [ 32.296625][ T3759] usbip_core: unknown command [ 32.301875][ T3759] vhci_hcd: unknown pdu 0 [ 32.306308][ T3759] usbip_core: unknown command [ 32.311534][ T2029] vhci_hcd vhci_hcd.4: stop threads [ 32.317945][ T2029] vhci_hcd vhci_hcd.4: release socket [ 32.325344][ T2029] vhci_hcd vhci_hcd.4: disconnect device [ 32.381870][ T3773] Illegal XDP return value 4294967289 on prog (id 18) dev N/A, expect packet loss! [ 32.429314][ T69] bridge_slave_1: left allmulticast mode [ 32.445954][ T69] bridge_slave_1: left promiscuous mode [ 32.460210][ T3783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.465696][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.476270][ T3783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.484446][ T69] bridge_slave_0: left allmulticast mode [ 32.490656][ T69] bridge_slave_0: left promiscuous mode [ 32.497880][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.598787][ T28] kauditd_printk_skb: 116 callbacks suppressed [ 32.598801][ T28] audit: type=1400 audit(1774471992.752:216): avc: denied { ioctl } for pid=3799 comm="syz.2.134" path="socket:[5529]" dev="sockfs" ino=5529 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.652725][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 32.662443][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 32.671829][ T69] bond0 (unregistering): Released all slaves [ 32.694972][ T3742] chnl_net:caif_netlink_parms(): no params data found [ 32.736705][ T69] hsr_slave_0: left promiscuous mode [ 32.747317][ T69] hsr_slave_1: left promiscuous mode [ 32.754025][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 32.770118][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 32.780392][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 32.792658][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 32.813235][ T69] veth1_macvtap: left promiscuous mode [ 32.818728][ T69] veth0_macvtap: left promiscuous mode [ 32.830181][ T69] veth1_vlan: left promiscuous mode [ 32.836407][ T69] veth0_vlan: left promiscuous mode [ 32.918523][ T69] team0 (unregistering): Port device team_slave_1 removed [ 32.929186][ T69] team0 (unregistering): Port device team_slave_0 removed [ 33.049160][ T3834] IPVS: sync thread started: state = MASTER, mcast_ifn = ip_vti0, syncid = 4, id = 0 [ 33.057133][ T3742] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.065847][ T3742] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.072985][ T3742] bridge_slave_0: entered allmulticast mode [ 33.079265][ T3742] bridge_slave_0: entered promiscuous mode [ 33.089231][ T3742] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.097176][ T3742] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.105943][ T28] audit: type=1400 audit(1774471993.262:217): avc: denied { write } for pid=3835 comm="syz.0.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.148019][ T3742] bridge_slave_1: entered allmulticast mode [ 33.154540][ T3742] bridge_slave_1: entered promiscuous mode [ 33.175255][ T3742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.180329][ T3840] loop4: detected capacity change from 0 to 512 [ 33.191677][ T3742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.208150][ T3840] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 33.219590][ T3742] team0: Port device team_slave_0 added [ 33.227579][ T3742] team0: Port device team_slave_1 added [ 33.235895][ T3840] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.141: iget: bad i_size value: 38620345925642 [ 33.301140][ T3840] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 33.301317][ T3840] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.141: couldn't read orphan inode 15 (err -117) [ 33.310113][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 33.317260][ T3742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.322174][ C1] EXT4-fs (loop4): initial error at time 1774471993: ext4_orphan_get:1391: inode 15 [ 33.339392][ T3840] loop4: lost filesystem error report for type 5 error -117 [ 33.344891][ C1] EXT4-fs (loop4): last error at time 1774471993: ext4_orphan_get:1391: inode 15 [ 33.371789][ T3840] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.394290][ T3742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.440122][ T28] audit: type=1400 audit(1774471993.592:218): avc: denied { create } for pid=3839 comm="syz.4.141" name="cpuset.effective_mems" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 33.463255][ T3839] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.141: bg 0: block 5: invalid block bitmap [ 33.470130][ T3742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.500138][ T28] audit: type=1400 audit(1774471993.592:219): avc: denied { read append open } for pid=3839 comm="syz.4.141" path="/16/bus/cpuset.effective_mems" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 33.525678][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.535810][ T3742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.550166][ T3742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.590148][ T28] audit: type=1400 audit(1774471993.622:220): avc: denied { map } for pid=3839 comm="syz.4.141" path="/16/bus/cpuset.effective_mems" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 33.613728][ T3742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.676530][ T3742] hsr_slave_0: entered promiscuous mode [ 33.685464][ T3872] __nla_validate_parse: 4 callbacks suppressed [ 33.685478][ T3872] netlink: 27 bytes leftover after parsing attributes in process `syz.4.148'. [ 33.700150][ T28] audit: type=1400 audit(1774471993.622:221): avc: denied { write } for pid=3839 comm="syz.4.141" path="/16/bus/cpuset.effective_mems" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 33.710536][ T3742] hsr_slave_1: entered promiscuous mode [ 33.750664][ T3742] debugfs: 'hsr0' already exists in 'hsr' [ 33.753414][ T28] audit: type=1400 audit(1774471993.782:222): avc: denied { create } for pid=3867 comm="syz.4.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 33.756438][ T3742] Cannot create hsr debugfs directory [ 33.805328][ T28] audit: type=1400 audit(1774471993.792:223): avc: denied { create } for pid=3867 comm="syz.4.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 33.916208][ T28] audit: type=1400 audit(1774471993.792:224): avc: denied { write } for pid=3867 comm="syz.4.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 33.957249][ T3890] loop4: detected capacity change from 0 to 512 [ 34.010234][ T28] audit: type=1400 audit(1774471993.792:225): avc: denied { nlmsg_write } for pid=3867 comm="syz.4.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 34.034509][ T3890] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.044932][ T3742] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 34.061250][ T3890] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 34.080679][ T3890] EXT4-fs (loop4): 1 truncate cleaned up [ 34.091897][ T3890] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.107043][ T3742] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 34.150261][ T3742] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 34.166238][ T3742] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 34.281114][ T3927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.161'. [ 34.308507][ T3742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.336032][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.341139][ T3742] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.358573][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.365669][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.408092][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.415178][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.439537][ T3742] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.469542][ T3936] loop4: detected capacity change from 0 to 2048 [ 34.525210][ T3936] EXT4-fs: Ignoring removed i_version option [ 34.530993][ T3742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.570123][ T3936] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.591733][ T3936] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.743941][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.752900][ T3742] veth0_vlan: entered promiscuous mode [ 34.772286][ T3742] veth1_vlan: entered promiscuous mode [ 34.798401][ T3970] netlink: 'syz.4.170': attribute type 2 has an invalid length. [ 34.834160][ T3742] veth0_macvtap: entered promiscuous mode [ 34.853556][ T3742] veth1_macvtap: entered promiscuous mode [ 34.865976][ T3742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.876713][ T3742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.889180][ T40] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.900271][ T40] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.912713][ T40] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.930165][ T40] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.070456][ T3987] Invalid argument reading file caps for ./file0 [ 35.166537][ T3375] kernel write not supported for file bpf-prog (pid: 3375 comm: kworker/1:2) [ 35.176518][ T3992] usb usb4: usbfs: interface 0 claimed by hub while 'syz.4.180' sets config #0 [ 35.312116][ T4000] rtc_cmos 00:00: Alarms can be up to one day in the future [ 35.362734][ T4004] Set syz1 is full, maxelem 1038 reached [ 35.470616][ T3375] IPVS: starting estimator thread 0... [ 35.580340][ T4019] IPVS: using max 2400 ests per chain, 120000 per kthread [ 35.694739][ T4044] loop2: detected capacity change from 0 to 128 [ 35.753856][ T4049] loop4: detected capacity change from 0 to 512 [ 35.756188][ T4050] sctp: [Deprecated]: syz.2.206 (pid 4050) Use of struct sctp_assoc_value in delayed_ack socket option. [ 35.756188][ T4050] Use struct sctp_sack_info instead [ 35.792622][ T4049] EXT4-fs: Ignoring removed i_version option [ 35.812939][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 35.826099][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 35.833912][ T4050] loop2: detected capacity change from 0 to 2048 [ 35.838955][ T4049] EXT4-fs: Ignoring removed bh option [ 35.848094][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 35.864887][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 35.879805][ T10] rtc rtc0: __rtc_set_alarm: err=-22 [ 35.885866][ T3301] loop2: p3 < > p4 < > [ 35.892356][ T3301] loop2: partition table partially beyond EOD, truncated [ 35.903566][ T4049] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.920502][ T3301] loop2: p3 start 4284289 is beyond EOD, truncated [ 35.938880][ T4050] loop2: p3 < > p4 < > [ 35.943284][ T4050] loop2: partition table partially beyond EOD, truncated [ 35.951156][ T4049] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 35.982971][ T4050] loop2: p3 start 4284289 is beyond EOD, truncated [ 36.005291][ T2999] loop2: p3 < > p4 < > [ 36.009451][ T2999] loop2: partition table partially beyond EOD, truncated [ 36.033389][ T2999] loop2: p3 start 4284289 is beyond EOD, truncated [ 36.115618][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 36.142595][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.147479][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 36.220266][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 36.382091][ T4080] loop4: detected capacity change from 0 to 128 [ 36.412053][ T4080] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 36.442491][ T4080] ext4 filesystem being mounted at /40/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 36.443671][ T4086] netlink: 7 bytes leftover after parsing attributes in process `syz.2.218'. [ 36.572451][ T3314] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 36.683990][ T4106] af_packet: tpacket_rcv: packet too big, clamped from 3698 to 4294967272. macoff=96 [ 37.016835][ T4127] bridge1: entered promiscuous mode [ 37.032847][ T4127] bridge1: entered allmulticast mode [ 37.109923][ T4135] loop2: detected capacity change from 0 to 2048 [ 37.180427][ T3301] loop2: p2 p3 < > p4 < p5 > [ 37.185334][ T3301] loop2: partition table partially beyond EOD, truncated [ 37.206701][ T3301] loop2: p2 start 53543428 is beyond EOD, truncated [ 37.226559][ T3301] loop2: p3 start 4284289 is beyond EOD, truncated [ 37.258185][ T3301] loop2: p5 start 53543428 is beyond EOD, truncated [ 37.274102][ T4135] loop2: p2 p3 < > p4 < p5 > [ 37.284203][ T4135] loop2: partition table partially beyond EOD, truncated [ 37.303947][ T4135] loop2: p2 start 53543428 is beyond EOD, truncated [ 37.320464][ T4135] loop2: p3 start 4284289 is beyond EOD, truncated [ 37.340590][ T4148] syzkaller1: entered promiscuous mode [ 37.360582][ T4135] loop2: p5 start 53543428 is beyond EOD, truncated [ 37.385582][ T4148] syzkaller1: entered allmulticast mode [ 37.491726][ T4160] loop2: detected capacity change from 0 to 1024 [ 37.509550][ T4160] EXT4-fs (loop2): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 37.548969][ T4160] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.557745][ T4097] syz.5.219 (4097) used greatest stack depth: 10120 bytes left [ 37.610162][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.621671][ T28] kauditd_printk_skb: 71 callbacks suppressed [ 37.621683][ T28] audit: type=1400 audit(1774471997.782:297): avc: denied { mount } for pid=4170 comm="syz.5.253" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 37.656264][ T4172] loop1: detected capacity change from 0 to 512 [ 37.697835][ T4177] syzkaller1: entered promiscuous mode [ 37.702788][ T28] audit: type=1400 audit(1774471997.862:298): avc: denied { read write } for pid=4175 comm="syz.0.257" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 37.704316][ T4172] EXT4-fs (loop1): 1 truncate cleaned up [ 37.735709][ T28] audit: type=1400 audit(1774471997.892:299): avc: denied { open } for pid=4175 comm="syz.0.257" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 37.759385][ T28] audit: type=1400 audit(1774471997.892:300): avc: denied { ioctl } for pid=4175 comm="syz.0.257" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 37.773647][ T4177] syzkaller1: entered allmulticast mode [ 37.796335][ T4172] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.859333][ T4172] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.256: bg 0: block 465: padding at end of block bitmap is not set [ 37.880916][ T4172] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 131587 with max blocks 1 with error 28 [ 37.908080][ T4194] netlink: 'syz.4.266': attribute type 2 has an invalid length. [ 37.915868][ T4194] netlink: 4 bytes leftover after parsing attributes in process `syz.4.266'. [ 37.927922][ T4172] EXT4-fs (loop1): This should not happen!! Data will be lost [ 37.927922][ T4172] [ 37.938303][ T4172] EXT4-fs (loop1): Total free blocks count 0 [ 37.938622][ T28] audit: type=1400 audit(1774471998.092:301): avc: denied { bind } for pid=4191 comm="syz.2.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 37.963904][ T4172] EXT4-fs (loop1): Free/Dirty block details [ 37.972919][ T4172] EXT4-fs (loop1): free_blocks=0 [ 37.977935][ T4172] EXT4-fs (loop1): dirty_blocks=2 [ 37.983090][ T4172] EXT4-fs (loop1): Block reservation details [ 37.989121][ T4172] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 38.019413][ T28] audit: type=1400 audit(1774471998.172:302): avc: denied { create } for pid=4200 comm="syz.4.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 38.038951][ T28] audit: type=1400 audit(1774471998.172:303): avc: denied { connect } for pid=4200 comm="syz.4.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 38.078485][ T28] audit: type=1400 audit(1774471998.172:304): avc: denied { shutdown } for pid=4200 comm="syz.4.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 38.098679][ T28] audit: type=1400 audit(1774471998.232:305): avc: denied { write } for pid=4205 comm="syz.2.272" name="mcfilter" dev="proc" ino=4026532852 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 38.123653][ T4206] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.156244][ T69] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 38.179502][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.201492][ T28] audit: type=1400 audit(1774471998.352:306): avc: denied { create } for pid=4214 comm="syz.2.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 38.326345][ T4222] set_capacity_and_notify: 1 callbacks suppressed [ 38.326359][ T4222] loop0: detected capacity change from 0 to 8192 [ 38.425872][ T4239] loop1: detected capacity change from 0 to 2048 [ 38.485013][ T3304] loop1: p3 < > p4 < > [ 38.492637][ T3304] loop1: partition table partially beyond EOD, truncated [ 38.499696][ T3304] loop1: p3 start 4284289 is beyond EOD, truncated [ 38.529091][ T4239] loop1: p3 < > p4 < > [ 38.540202][ T4239] loop1: partition table partially beyond EOD, truncated [ 38.560268][ T4239] loop1: p3 start 4284289 is beyond EOD, truncated [ 38.618280][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 38.667574][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 38.692557][ T4269] netlink: 'syz.5.300': attribute type 1 has an invalid length. [ 38.716629][ T9] IPVS: starting estimator thread 0... [ 38.756359][ T4279] loop5: detected capacity change from 0 to 256 [ 38.790738][ T4279] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 38.880192][ T4275] IPVS: using max 2448 ests per chain, 122400 per kthread [ 39.143802][ T4279] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 39.291666][ T4288] loop0: detected capacity change from 0 to 256 [ 39.349560][ T4288] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 39.583959][ T4296] pim6reg1: entered promiscuous mode [ 39.589404][ T4296] pim6reg1: entered allmulticast mode [ 39.634729][ T4300] loop2: detected capacity change from 0 to 136 [ 39.642041][ T4300] iso9660: Bad value for 'check' [ 39.757882][ T4302] loop4: detected capacity change from 0 to 128 [ 39.867118][ T4319] loop1: detected capacity change from 0 to 764 [ 39.892800][ T4321] loop0: detected capacity change from 0 to 1024 [ 39.935655][ T4321] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.954180][ T4321] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.974761][ T4321] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.321: bg 0: block 112: padding at end of block bitmap is not set [ 39.996327][ T4321] EXT4-fs error (device loop0): ext4_map_blocks:818: inode #15: comm syz.0.321: lblock 0 mapped to illegal pblock 0 (length 1) [ 40.007652][ T4331] loop5: detected capacity change from 0 to 128 [ 40.018595][ T4321] EXT4-fs error (device loop0): ext4_ext_remove_space:2954: inode #15: comm syz.0.321: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 40.056491][ T4335] loop1: detected capacity change from 0 to 164 [ 40.070288][ T4335] ISOFS: Bad logical zone size 2816 [ 40.089676][ T4320] EXT4-fs error (device loop0): ext4_ext_remove_space:2954: inode #15: comm syz.0.321: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 40.108256][ T4320] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 40.109054][ T4320] EXT4-fs error (device loop0): ext4_evict_inode:266: comm syz.0.321: couldn't truncate inode 15 (err -117) [ 40.159433][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 40.221379][ T4346] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.273389][ T4346] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.322899][ T4346] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.373733][ T4346] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.446215][ T2029] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.457408][ T2029] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.468212][ T2029] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.479974][ T2029] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.549619][ T4354] EXT4-fs: Ignoring removed bh option [ 40.555643][ T4354] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 40.565314][ T4354] EXT4-fs (loop0): 1 truncate cleaned up [ 40.571550][ T4354] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.592706][ T4354] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.663312][ T4359] netlink: 'syz.0.338': attribute type 2 has an invalid length. [ 40.671064][ T4359] netlink: 12 bytes leftover after parsing attributes in process `syz.0.338'. [ 40.858864][ T4369] raw_sendmsg: syz.0.343 forgot to set AF_INET. Fix it! [ 41.035847][ T4383] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.349: bad orphan inode 11862016 [ 41.064507][ T4383] loop2: lost filesystem error report for type 5 error -117 [ 41.065012][ T4383] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 41.125810][ T4383] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.187682][ T4361] syz.4.340 (4361) used greatest stack depth: 9072 bytes left [ 41.214464][ T4397] IPv6: NLM_F_REPLACE set, but no existing node found! [ 41.243244][ T4383] Invalid ELF header magic: != ELF [ 41.291935][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 41.312477][ T4400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.356'. [ 41.648419][ T4431] capability: warning: `syz.0.368' uses 32-bit capabilities (legacy support in use) [ 41.668527][ T4431] program syz.0.368 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 41.680750][ T4433] syzkaller1: entered promiscuous mode [ 41.686237][ T4433] syzkaller1: entered allmulticast mode [ 41.716663][ T4433] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 42 [ 41.991217][ T9] kernel write not supported for file /sg0 (pid: 9 comm: kworker/0:0) [ 42.117025][ T4478] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.120370][ T4482] netlink: 104 bytes leftover after parsing attributes in process `syz.5.389'. [ 42.177894][ T4487] netlink: 28 bytes leftover after parsing attributes in process `syz.2.390'. [ 42.184456][ T4478] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 42.195309][ T4487] netlink: 28 bytes leftover after parsing attributes in process `syz.2.390'. [ 42.209207][ T4487] netlink: 28 bytes leftover after parsing attributes in process `syz.2.390'. [ 42.210751][ T4478] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #2: comm syz.1.386: corrupted inode contents [ 42.218789][ T4487] netlink: 28 bytes leftover after parsing attributes in process `syz.2.390'. [ 42.229976][ T4491] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 42.240392][ T4478] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #2: comm syz.1.386: mark_inode_dirty error [ 42.245093][ T4491] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 42.256682][ T4478] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #2: comm syz.1.386: corrupted inode contents [ 42.270893][ T4495] EXT4-fs (loop1): shut down requested (1) [ 42.276566][ T4478] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.386: mark_inode_dirty error [ 42.290730][ T4491] vhci_hcd vhci_hcd.0: Device attached [ 42.319952][ T4496] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(6) [ 42.326518][ T4496] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 42.353470][ T4496] vhci_hcd vhci_hcd.0: Device attached [ 42.397833][ T4502] SELinux: failed to load policy [ 42.416322][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.426543][ T4491] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(5) [ 42.433080][ T4491] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 42.444151][ T4491] vhci_hcd vhci_hcd.0: Device attached [ 42.451069][ T4491] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 42.459884][ T4491] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(11) [ 42.466544][ T4491] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 42.477082][ T4491] vhci_hcd vhci_hcd.0: Device attached [ 42.483206][ T4507] vhci_hcd: connection closed [ 42.483413][ T69] vhci_hcd vhci_hcd.5: stop threads [ 42.493480][ T69] vhci_hcd vhci_hcd.5: release socket [ 42.499072][ T4497] vhci_hcd: connection closed [ 42.499206][ T4492] vhci_hcd: connection closed [ 42.499213][ T4505] vhci_hcd: connection closed [ 42.504406][ T69] vhci_hcd vhci_hcd.5: disconnect device [ 42.519978][ T69] vhci_hcd vhci_hcd.5: stop threads [ 42.531097][ T9] usb 11-1: new low-speed USB device number 2 using vhci_hcd [ 42.538862][ T4493] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 42.561242][ T69] vhci_hcd vhci_hcd.5: release socket [ 42.570887][ T69] vhci_hcd vhci_hcd.5: disconnect device [ 42.576624][ T69] vhci_hcd vhci_hcd.5: stop threads [ 42.587385][ T69] vhci_hcd vhci_hcd.5: release socket [ 42.596588][ T69] vhci_hcd vhci_hcd.5: disconnect device [ 42.602514][ T69] vhci_hcd vhci_hcd.5: stop threads [ 42.632566][ T69] vhci_hcd vhci_hcd.5: release socket [ 42.638013][ T69] vhci_hcd vhci_hcd.5: disconnect device [ 42.820453][ T4533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.408'. [ 42.979224][ T4555] netlink: 236 bytes leftover after parsing attributes in process `syz.1.418'. [ 42.988396][ T4555] netlink: 236 bytes leftover after parsing attributes in process `syz.1.418'. [ 43.006297][ T4557] netlink: 'syz.0.419': attribute type 21 has an invalid length. [ 43.188873][ T4573] rock: directory entry would overflow storage [ 43.201248][ T4573] rock: sig=0x4f50, size=4, remaining=3 [ 43.207289][ T4573] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 43.452126][ T28] kauditd_printk_skb: 96 callbacks suppressed [ 43.452139][ T28] audit: type=1400 audit(1774472003.612:403): avc: denied { read } for pid=4599 comm="syz.1.438" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 43.490469][ T28] audit: type=1400 audit(1774472003.642:404): avc: denied { open } for pid=4599 comm="syz.1.438" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 43.525324][ T28] audit: type=1400 audit(1774472003.642:405): avc: denied { ioctl } for pid=4599 comm="syz.1.438" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 43.525457][ T4603] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 43.551188][ T28] audit: type=1400 audit(1774472003.682:406): avc: denied { name_bind } for pid=4602 comm="syz.1.440" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 43.655967][ T28] audit: type=1400 audit(1774472003.812:407): avc: denied { lock } for pid=4613 comm="syz.0.445" path="socket:[8771]" dev="sockfs" ino=8771 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 43.760057][ T4620] set_capacity_and_notify: 8 callbacks suppressed [ 43.760072][ T4620] loop2: detected capacity change from 0 to 8192 [ 43.775895][ T28] audit: type=1326 audit(1774472003.932:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4619 comm="syz.2.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87d0e3c799 code=0x7ffc0000 [ 43.803436][ T28] audit: type=1326 audit(1774472003.932:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4619 comm="syz.2.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87d0e3c799 code=0x7ffc0000 [ 43.809908][ T4624] tipc: Started in network mode [ 43.826698][ T28] audit: type=1326 audit(1774472003.932:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4619 comm="syz.2.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87d0e3c799 code=0x7ffc0000 [ 43.826764][ T28] audit: type=1326 audit(1774472003.932:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4619 comm="syz.2.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f87d0e3c799 code=0x7ffc0000 [ 43.868774][ T4624] tipc: Node identity ac14140f, cluster identity 4711 [ 43.889614][ T4624] tipc: Enabled bearer , priority 10 [ 43.897750][ T28] audit: type=1326 audit(1774472003.962:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4619 comm="syz.2.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87d0e3c799 code=0x7ffc0000 [ 44.073088][ T4639] loop2: detected capacity change from 0 to 1024 [ 44.079819][ T4639] EXT4-fs: Ignoring removed orlov option [ 44.092202][ T4639] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.130136][ T4643] loop4: detected capacity change from 0 to 1024 [ 44.152175][ T4638] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.456: bg 0: block 321: padding at end of block bitmap is not set [ 44.206009][ T4638] EXT4-fs (loop2): Remounting filesystem read-only [ 44.226415][ T4643] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 44.238849][ T4643] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.255304][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.372310][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 44.982451][ T4653] ref_ctr_offset mismatch. inode: 0x232 offset: 0x0 ref_ctr_offset(old): 0x44 ref_ctr_offset(new): 0x0 [ 45.010143][ T3393] tipc: Node number set to 2886997007 [ 45.169813][ T4704] SELinux: failed to load policy [ 45.180443][ T4699] netlink: 'syz.5.468': attribute type 4 has an invalid length. [ 45.203456][ T4707] loop2: detected capacity change from 0 to 2048 [ 45.238183][ T4707] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 45.281534][ T4707] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.320965][ T4716] erspan0: entered promiscuous mode [ 45.331282][ T4716] erspan0: left promiscuous mode [ 45.365550][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.387537][ T4722] loop1: detected capacity change from 0 to 128 [ 45.419609][ T4722] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 45.449297][ T4722] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 45.464988][ T4728] loop0: detected capacity change from 0 to 2048 [ 46.044126][ T4779] loop2: detected capacity change from 0 to 512 [ 46.067545][ T4779] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.499: inode has both inline data and extents flags [ 46.073307][ T4780] loop0: detected capacity change from 0 to 4096 [ 46.101456][ T4779] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 46.111816][ T4779] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.499: couldn't read orphan inode 15 (err -117) [ 46.121043][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 46.121069][ C1] EXT4-fs (loop2): initial error at time 1774472006: ext4_orphan_get:1391: inode 15 [ 46.121091][ C1] EXT4-fs (loop2): last error at time 1774472006: ext4_orphan_get:1391: inode 15 [ 46.168359][ T4780] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.193340][ T4779] loop2: lost filesystem error report for type 5 error -117 [ 46.193999][ T4779] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.405595][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.683927][ T4824] __nla_validate_parse: 3 callbacks suppressed [ 46.683941][ T4824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.509'. [ 46.743567][ T4824] erspan0: entered promiscuous mode [ 46.756417][ T4824] erspan0: left promiscuous mode [ 46.827774][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.054728][ T4853] syzkaller1: entered promiscuous mode [ 47.060395][ T4853] syzkaller1: entered allmulticast mode [ 47.191385][ T4857] loop1: detected capacity change from 0 to 512 [ 47.199102][ T4857] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.523: missing EA_INODE flag [ 47.208027][ T4860] loop0: detected capacity change from 0 to 512 [ 47.210954][ T4857] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 47.217047][ T4857] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.523: error while reading EA inode 12 err=-117 [ 47.226196][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 47.226212][ C0] EXT4-fs (loop1): initial error at time 1774472007: ext4_xattr_inode_iget:441: inode 12 [ 47.226250][ C0] EXT4-fs (loop1): last error at time 1774472007: ext4_xattr_inode_iget:441: inode 12 [ 47.256369][ T4860] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.266198][ T4857] loop1: lost filesystem error report for type 5 error -117 [ 47.280415][ T4857] EXT4-fs (loop1): 1 orphan inode deleted [ 47.293572][ T4860] ext4 filesystem being mounted at /118/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.294094][ T4857] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.363867][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.385494][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.450264][ T4867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.527'. [ 47.566156][ T9] usb 11-1: enqueue for inactive port 0 [ 47.574147][ T9] usb 11-1: enqueue for inactive port 0 [ 47.640610][ T9] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 47.818763][ C0] operation not supported error, dev loop7, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10800800 phys_seg 0 prio class 2 [ 47.876823][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a91b600: rx timeout, send abort [ 47.880521][ T4918] netlink: 4 bytes leftover after parsing attributes in process `syz.5.544'. [ 47.885125][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a91b600: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 47.928144][ T4916] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.092031][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.300770][ T4952] usb usb4: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 48.315206][ T4952] vhci_hcd vhci_hcd.1: default hub control req: d10d v0006 i0007 l2 [ 48.553263][ T4979] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.586809][ T28] kauditd_printk_skb: 72 callbacks suppressed [ 48.586822][ T28] audit: type=1400 audit(1774472008.739:485): avc: denied { read } for pid=4978 comm="syz.1.572" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 48.673769][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.716772][ T28] audit: type=1400 audit(1774472008.839:486): avc: denied { connect } for pid=4987 comm="syz.4.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.745254][ T28] audit: type=1400 audit(1774472008.859:487): avc: denied { read } for pid=4989 comm="syz.0.576" path="socket:[10348]" dev="sockfs" ino=10348 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 48.842914][ T5001] netlink: 7 bytes leftover after parsing attributes in process `syz.4.580'. [ 48.870293][ T5001] netlink: 28 bytes leftover after parsing attributes in process `syz.4.580'. [ 48.896774][ T5001] netlink: 28 bytes leftover after parsing attributes in process `syz.4.580'. [ 49.073382][ T28] audit: type=1400 audit(1774472009.209:488): avc: denied { cpu } for pid=5006 comm="syz.4.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 49.316882][ T5013] syzkaller1: entered promiscuous mode [ 49.330653][ T5013] syzkaller1: entered allmulticast mode [ 49.532764][ T5017] set_capacity_and_notify: 4 callbacks suppressed [ 49.532779][ T5017] loop5: detected capacity change from 0 to 512 [ 49.578516][ T5017] EXT4-fs (loop5): 1 truncate cleaned up [ 49.585039][ T5017] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.606391][ T5017] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.589: bg 0: block 465: padding at end of block bitmap is not set [ 49.670260][ T5017] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 131587 with max blocks 1 with error 28 [ 49.671058][ T5028] SELinux: Context : is not valid (left unmapped). [ 49.689938][ T28] audit: type=1400 audit(1774472009.829:489): avc: denied { mac_admin } for pid=5027 comm="syz.4.592" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 49.709740][ T5017] EXT4-fs (loop5): This should not happen!! Data will be lost [ 49.709740][ T5017] [ 49.739193][ T5017] EXT4-fs (loop5): Total free blocks count 0 [ 49.745304][ T28] audit: type=1400 audit(1774472009.889:490): avc: denied { relabelto } for pid=5027 comm="syz.4.592" name="rdma.current" dev="tmpfs" ino=575 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 49.769547][ T5017] EXT4-fs (loop5): Free/Dirty block details [ 49.769563][ T5017] EXT4-fs (loop5): free_blocks=0 [ 49.786727][ T5017] EXT4-fs (loop5): dirty_blocks=2 [ 49.796868][ T5017] EXT4-fs (loop5): Block reservation details [ 49.803081][ T5017] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 49.809207][ T28] audit: type=1400 audit(1774472009.889:491): avc: denied { associate } for pid=5027 comm="syz.4.592" name="rdma.current" dev="tmpfs" ino=575 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=":" [ 49.881015][ T40] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 49.908408][ T28] audit: type=1400 audit(1774472010.059:492): avc: denied { unlink } for pid=3314 comm="syz-executor" name="rdma.current" dev="tmpfs" ino=575 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 49.961165][ T28] audit: type=1400 audit(1774472010.089:493): avc: denied { listen } for pid=5035 comm="syz.0.594" lport=45007 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 49.981853][ T28] audit: type=1400 audit(1774472010.089:494): avc: denied { accept } for pid=5035 comm="syz.0.594" lport=45007 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 50.010792][ T5041] tipc: Started in network mode [ 50.015824][ T5041] tipc: Node identity ac14142f, cluster identity 4711 [ 50.022748][ T5041] tipc: New replicast peer: 0.0.0.0 [ 50.028274][ T5041] tipc: Enabled bearer , priority 10 [ 50.033838][ T5043] loop4: detected capacity change from 0 to 1024 [ 50.035661][ T5041] tipc: New replicast peer: fc01:0000:0000:0000:0000:0000:0000:0001 [ 50.126731][ T5043] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.248609][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.305086][ T5054] loop2: detected capacity change from 0 to 512 [ 50.325644][ T5054] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.340257][ T5054] ext4 filesystem being mounted at /134/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.381214][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.443002][ T5065] loop2: detected capacity change from 0 to 512 [ 50.476722][ T5065] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.604: inode has both inline data and extents flags [ 50.499349][ T5065] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 50.510017][ T5065] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.604: couldn't read orphan inode 15 (err -117) [ 50.510109][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 50.537913][ C1] EXT4-fs (loop2): initial error at time 1774472010: ext4_orphan_get:1391: inode 15 [ 50.547319][ C1] EXT4-fs (loop2): last error at time 1774472010: ext4_orphan_get:1391: inode 15 [ 50.556640][ T5065] loop2: lost filesystem error report for type 5 error -117 [ 50.558478][ T5065] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.608539][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.622385][ T5073] loop4: detected capacity change from 0 to 1024 [ 50.638981][ T5073] EXT4-fs: Ignoring removed oldalloc option [ 50.645085][ T5073] EXT4-fs: Ignoring removed bh option [ 50.707252][ T5073] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.783455][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.913338][ T5105] loop1: detected capacity change from 0 to 8192 [ 51.091776][ T5124] loop0: detected capacity change from 0 to 2048 [ 51.113824][ T5124] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.140132][ T9] tipc: Node number set to 2886997039 [ 51.150497][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.550005][ T5156] netlink: 24 bytes leftover after parsing attributes in process `syz.4.640'. [ 51.686795][ T5168] loop2: detected capacity change from 0 to 128 [ 51.732778][ T5168] netlink: 60 bytes leftover after parsing attributes in process `syz.2.645'. [ 51.760867][ T5168] netlink: 60 bytes leftover after parsing attributes in process `syz.2.645'. [ 51.914465][ T5184] sctp: [Deprecated]: syz.1.652 (pid 5184) Use of struct sctp_assoc_value in delayed_ack socket option. [ 51.914465][ T5184] Use struct sctp_sack_info instead [ 52.006392][ T5184] loop1: detected capacity change from 0 to 2048 [ 52.090813][ T3301] loop1: p3 < > p4 < > [ 52.094980][ T3301] loop1: partition table partially beyond EOD, truncated [ 52.102910][ T3301] loop1: p3 start 4284289 is beyond EOD, truncated [ 52.130173][ T5184] loop_reread_partitions: partition scan of loop1 () failed (rc=-16) [ 52.167142][ T2999] loop1: p3 < > p4 < > [ 52.178337][ T2999] loop1: partition table partially beyond EOD, truncated [ 52.186963][ T2999] loop1: p3 start 4284289 is beyond EOD, truncated [ 52.227053][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 52.768063][ T5241] loop1: detected capacity change from 0 to 8192 [ 52.781391][ T1033] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.793515][ T1033] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 52.901412][ T5254] EXT4-fs: Ignoring removed bh option [ 52.919852][ T5254] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 52.981287][ T5254] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.995355][ T5252] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: comm syz.5.678: lblock 0 mapped to illegal pblock 0 (length 1) [ 53.009067][ T5252] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: comm syz.5.678: lblock 0 mapped to illegal pblock 0 (length 1) [ 53.042859][ T5252] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: comm syz.5.678: lblock 0 mapped to illegal pblock 0 (length 1) [ 53.114871][ T5252] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: comm syz.5.678: lblock 0 mapped to illegal pblock 0 (length 1) [ 53.128436][ T5252] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: comm syz.5.678: lblock 0 mapped to illegal pblock 0 (length 1) [ 53.142538][ T5252] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: comm syz.5.678: lblock 0 mapped to illegal pblock 0 (length 1) [ 53.156265][ T5252] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: comm syz.5.678: lblock 0 mapped to illegal pblock 0 (length 1) [ 53.176448][ T5252] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: comm syz.5.678: lblock 0 mapped to illegal pblock 0 (length 1) [ 53.214034][ T5252] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: comm syz.5.678: lblock 0 mapped to illegal pblock 0 (length 1) [ 53.227972][ T5252] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: comm syz.5.678: lblock 0 mapped to illegal pblock 0 (length 1) [ 53.368553][ T3742] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 53.731062][ T5280] all (unregistering): Released all slaves [ 53.792284][ T5270] dvmrp0: entered allmulticast mode [ 53.867829][ T2029] dvmrp0 (unregistering): left allmulticast mode [ 53.968981][ T5293] netlink: 83 bytes leftover after parsing attributes in process `syz.1.693'. [ 53.990800][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 53.990811][ T28] audit: type=1326 audit(1774472014.149:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5295 comm="syz.4.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37d961c799 code=0x7ffc0000 [ 54.048418][ T28] audit: type=1326 audit(1774472014.179:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5295 comm="syz.4.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37d961c799 code=0x7ffc0000 [ 54.071929][ T28] audit: type=1326 audit(1774472014.179:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5295 comm="syz.4.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7f37d961c799 code=0x7ffc0000 [ 54.095295][ T28] audit: type=1326 audit(1774472014.179:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5295 comm="syz.4.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37d961c799 code=0x7ffc0000 [ 54.118581][ T28] audit: type=1326 audit(1774472014.179:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5295 comm="syz.4.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37d961c799 code=0x7ffc0000 [ 54.142000][ T28] audit: type=1400 audit(1774472014.179:542): avc: denied { mount } for pid=5305 comm="syz.1.698" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 54.184552][ T28] audit: type=1400 audit(1774472014.179:543): avc: denied { mounton } for pid=5305 comm="syz.1.698" path="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 54.238017][ T28] audit: type=1400 audit(1774472014.209:544): avc: denied { unmount } for pid=3312 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 54.258367][ T28] audit: type=1400 audit(1774472014.339:545): avc: denied { bind } for pid=5314 comm="syz.1.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 54.277799][ T28] audit: type=1400 audit(1774472014.359:546): avc: denied { connect } for pid=5314 comm="syz.1.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 54.432288][ T5336] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.445032][ T5336] ext4 filesystem being mounted at /134/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.466918][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.500548][ T5343] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20001 [ 54.579571][ T5357] set_capacity_and_notify: 2 callbacks suppressed [ 54.579587][ T5357] loop5: detected capacity change from 0 to 512 [ 54.593378][ T5357] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 54.605224][ T5357] EXT4-fs (loop5): 1 truncate cleaned up [ 54.611571][ T5357] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.805226][ T3742] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.161984][ T5386] loop0: detected capacity change from 0 to 1024 [ 55.220628][ T5386] EXT4-fs: Ignoring removed oldalloc option [ 55.233317][ T5386] EXT4-fs: Ignoring removed bh option [ 55.263965][ T5386] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.367565][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.463724][ T5396] loop4: detected capacity change from 0 to 8192 [ 55.499488][ T5404] loop2: detected capacity change from 0 to 512 [ 55.558294][ T5404] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 55.585091][ T5404] EXT4-fs (loop2): 1 truncate cleaned up [ 55.600594][ T5404] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.865996][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.917991][ T5414] loop2: detected capacity change from 0 to 1024 [ 55.980780][ T5414] EXT4-fs: inline encryption not supported [ 55.986714][ T5414] EXT4-fs: Ignoring removed bh option [ 56.031981][ T5414] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.121863][ T5414] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4222: comm syz.2.738: Allocating blocks 449-513 which overlap fs metadata [ 56.249729][ T5414] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4222: comm syz.2.738: Allocating blocks 497-513 which overlap fs metadata [ 56.342335][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.411597][ T5429] loop2: detected capacity change from 0 to 1024 [ 56.447193][ T5429] EXT4-fs: Ignoring removed oldalloc option [ 56.470556][ T5429] EXT4-fs: Ignoring removed bh option [ 56.510398][ T5429] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.798439][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.264324][ T3400] Process accounting resumed [ 57.279023][ T5460] loop2: detected capacity change from 0 to 8192 [ 57.298330][ T5467] loop1: detected capacity change from 0 to 512 [ 57.328276][ T5467] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.758: inode has both inline data and extents flags [ 57.380143][ T5467] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 57.380789][ T5467] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.758: couldn't read orphan inode 15 (err -117) [ 57.401722][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 57.401759][ C0] EXT4-fs (loop1): initial error at time 1774472017: ext4_orphan_get:1391: inode 15 [ 57.401809][ C0] EXT4-fs (loop1): last error at time 1774472017: ext4_orphan_get:1391: inode 15 [ 57.440459][ T5467] loop1: lost filesystem error report for type 5 error -117 [ 57.444185][ T5467] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.608208][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.203264][ T5498] team0 (unregistering): Port device team_slave_0 removed [ 58.217191][ T5498] team0 (unregistering): Port device team_slave_1 removed [ 58.299461][ T5507] team0 (unregistering): Port device team_slave_0 removed [ 58.309242][ T5507] team0 (unregistering): Port device team_slave_1 removed [ 58.783954][ T5530] loop0: detected capacity change from 0 to 8192 [ 58.910894][ T5534] loop4: detected capacity change from 0 to 2048 [ 58.992098][ T3301] loop4: p3 < > p4 < > [ 58.998535][ T3301] loop4: partition table partially beyond EOD, truncated [ 59.011335][ T3301] loop4: p3 start 4284289 is beyond EOD, truncated [ 59.030811][ T5534] loop4: p3 < > p4 < > [ 59.035121][ T5534] loop4: partition table partially beyond EOD, truncated [ 59.043037][ T5534] loop4: p3 start 4284289 is beyond EOD, truncated [ 59.713178][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 59.713191][ T28] audit: type=1400 audit(1774472019.869:556): avc: denied { create } for pid=5547 comm="syz.4.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 59.744373][ T28] audit: type=1400 audit(1774472019.899:557): avc: denied { ioctl } for pid=5547 comm="syz.4.784" path="socket:[11834]" dev="sockfs" ino=11834 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 59.791316][ T28] audit: type=1326 audit(1774472019.939:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5555 comm="syz.1.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336df7c799 code=0x7ffc0000 [ 59.815284][ T28] audit: type=1326 audit(1774472019.939:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5555 comm="syz.1.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336df7c799 code=0x7ffc0000 [ 59.838745][ T28] audit: type=1326 audit(1774472019.939:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5555 comm="syz.1.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336df7c799 code=0x7ffc0000 [ 59.872264][ T28] audit: type=1326 audit(1774472019.949:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5555 comm="syz.1.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f336df7c799 code=0x7ffc0000 [ 59.896122][ T28] audit: type=1326 audit(1774472020.019:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5555 comm="syz.1.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336df7c799 code=0x7ffc0000 [ 59.919501][ T28] audit: type=1326 audit(1774472020.019:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5555 comm="syz.1.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f336df7c502 code=0x7ffc0000 [ 59.942775][ T28] audit: type=1326 audit(1774472020.019:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5555 comm="syz.1.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f336df7c597 code=0x7ffc0000 [ 59.999723][ T5563] set_capacity_and_notify: 1 callbacks suppressed [ 59.999738][ T5563] loop4: detected capacity change from 0 to 512 [ 60.020154][ T28] audit: type=1326 audit(1774472020.019:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5555 comm="syz.1.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f336df39491 code=0x7ffc0000 [ 60.047578][ T5563] EXT4-fs (loop4): 1 truncate cleaned up [ 60.519251][ T5591] loop1: detected capacity change from 0 to 8192 [ 60.780237][ T5622] loop4: detected capacity change from 0 to 4096 [ 60.996620][ T5632] loop2: detected capacity change from 0 to 512 [ 60.998910][ T5633] loop4: detected capacity change from 0 to 128 [ 61.008293][ T5632] EXT4-fs (loop2): 1 truncate cleaned up [ 61.101579][ T5633] syz.4.829: attempt to access beyond end of device [ 61.101579][ T5633] loop4: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 61.265026][ T5645] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 61.740791][ T5656] netlink: 'syz.4.826': attribute type 3 has an invalid length. [ 61.758441][ T5656] netlink: 504 bytes leftover after parsing attributes in process `syz.4.826'. [ 61.773990][ T5660] loop1: detected capacity change from 0 to 128 [ 61.780383][ T5656] netlink: 'syz.4.826': attribute type 3 has an invalid length. [ 61.789066][ T5656] netlink: 504 bytes leftover after parsing attributes in process `syz.4.826'. [ 61.816272][ T5660] ext4 filesystem being mounted at /172/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 61.942585][ T5669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.832'. [ 61.975338][ T5669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.832'. [ 61.991836][ T5672] netlink: 'syz.4.834': attribute type 29 has an invalid length. [ 62.024857][ T5672] netlink: 'syz.4.834': attribute type 29 has an invalid length. [ 62.034310][ T5672] netlink: 500 bytes leftover after parsing attributes in process `syz.4.834'. [ 62.101866][ T5677] loop4: detected capacity change from 0 to 256 [ 62.129619][ T5677] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 62.757500][ T5709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.853'. [ 62.780286][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 62.787456][ T5709] netlink: 12 bytes leftover after parsing attributes in process `syz.4.853'. [ 62.801064][ T40] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.809871][ T5709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.853'. [ 62.818797][ T40] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.836975][ T5709] netlink: 12 bytes leftover after parsing attributes in process `syz.4.853'. [ 62.840310][ T40] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.855492][ T40] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.940180][ T5719] loop5: detected capacity change from 0 to 256 [ 62.951125][ T5719] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 63.033218][ T5725] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 63.264257][ T5742] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 64.019762][ T5771] loop1: detected capacity change from 0 to 256 [ 64.036110][ T5771] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 64.198207][ T5779] loop4: detected capacity change from 0 to 8192 [ 64.629251][ T5809] sch_tbf: burst 0 is lower than device sit0 mtu (1480) ! [ 64.781768][ T5815] EXT4-fs: Ignoring removed oldalloc option [ 64.802625][ T5815] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.899: invalid block [ 64.820182][ T5815] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 64.824801][ T5815] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.899: invalid indirect mapped block 4294967295 (level 1) [ 64.834029][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 64.834047][ C1] EXT4-fs (loop0): initial error at time 1774472024: ext4_get_branch:178: inode 11: block 4294967295 [ 64.834074][ C1] EXT4-fs (loop0): last error at time 1774472024: ext4_get_branch:178: inode 11: block 4294967295 [ 64.840337][ T43] Bluetooth: hci0: command 0x1003 tx timeout [ 64.848520][ T3496] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 64.887984][ T5815] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 64.888577][ T5815] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.899: invalid indirect mapped block 4294967295 (level 1) [ 64.922975][ T5815] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 64.923311][ T5815] EXT4-fs (loop0): 2 truncates cleaned up [ 65.356116][ T5838] netlink: 24 bytes leftover after parsing attributes in process `syz.0.909'. [ 65.605623][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 65.605703][ T28] audit: type=1326 audit(1774472025.759:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5870 comm="syz.0.922" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ee03fc799 code=0x0 [ 65.708589][ T28] audit: type=1326 audit(1774472025.859:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5876 comm="syz.5.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29417bc799 code=0x7ffc0000 [ 65.756372][ T28] audit: type=1326 audit(1774472025.859:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5876 comm="syz.5.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f29417bc799 code=0x7ffc0000 [ 65.849628][ T28] audit: type=1326 audit(1774472025.859:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5876 comm="syz.5.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29417bc799 code=0x7ffc0000 [ 65.910244][ T28] audit: type=1326 audit(1774472025.859:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5876 comm="syz.5.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29417bc799 code=0x7ffc0000 [ 66.004170][ T5900] program syz.5.937 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 66.127837][ T5905] set_capacity_and_notify: 1 callbacks suppressed [ 66.127852][ T5905] loop5: detected capacity change from 0 to 8192 [ 66.233361][ T28] audit: type=1400 audit(1774472026.389:614): avc: denied { shutdown } for pid=5914 comm="syz.5.943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 66.376048][ T28] audit: type=1400 audit(1774472026.529:615): avc: denied { create } for pid=5925 comm="syz.5.949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 66.403811][ T28] audit: type=1400 audit(1774472026.529:616): avc: denied { write } for pid=5925 comm="syz.5.949" path="socket:[13450]" dev="sockfs" ino=13450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 66.474846][ T5937] loop0: detected capacity change from 0 to 512 [ 66.512967][ T5937] EXT4-fs mount: 10 callbacks suppressed [ 66.512980][ T5937] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.557915][ T5937] ext4 filesystem being mounted at /208/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.588748][ T5937] EXT4-fs (loop0): shut down requested (0) [ 66.613203][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.882475][ T5946] loop4: detected capacity change from 0 to 512 [ 66.884966][ T5947] xt_hashlimit: size too large, truncated to 1048576 [ 66.908578][ T5946] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #15: comm syz.4.958: corrupted in-inode xattr: invalid ea_ino [ 66.933640][ T5953] loop2: detected capacity change from 0 to 256 [ 66.942296][ T5946] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 66.946372][ T5953] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 66.955574][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 66.955594][ C0] EXT4-fs (loop4): initial error at time 1774472027: ext4_iget_extra_inode:5025: inode 15 [ 66.955627][ C0] EXT4-fs (loop4): last error at time 1774472027: ext4_iget_extra_inode:5025: inode 15 [ 66.988075][ T5946] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.958: couldn't read orphan inode 15 (err -117) [ 67.038528][ T5946] loop4: lost filesystem error report for type 5 error -117 [ 67.039042][ T5946] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.041751][ T5960] io-wq is not configured for unbound workers [ 67.083242][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.126404][ T28] audit: type=1400 audit(1774472027.279:617): avc: denied { ioctl } for pid=5961 comm="syz.0.962" path="socket:[13496]" dev="sockfs" ino=13496 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 67.279190][ T5981] loop5: detected capacity change from 0 to 512 [ 67.287641][ T5981] EXT4-fs: Ignoring removed orlov option [ 67.293408][ T5981] EXT4-fs: Ignoring removed mblk_io_submit option [ 67.304222][ T5981] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #15: comm syz.5.971: corrupted in-inode xattr: e_value size too large [ 67.319372][ T5981] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 67.319586][ T5981] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.971: couldn't read orphan inode 15 (err -117) [ 67.328805][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 67.328820][ C0] EXT4-fs (loop5): initial error at time 1774472027: ext4_iget_extra_inode:5025: inode 15 [ 67.328853][ C0] EXT4-fs (loop5): last error at time 1774472027: ext4_iget_extra_inode:5025: inode 15 [ 67.389440][ T5981] loop5: lost filesystem error report for type 5 error -117 [ 67.391507][ T5981] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.437758][ T28] audit: type=1400 audit(1774472027.589:618): avc: denied { remove_name } for pid=5980 comm="syz.5.971" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 67.502274][ T3742] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.106298][ T5997] loop0: detected capacity change from 0 to 512 [ 68.114784][ T5998] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.131255][ T5997] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.144901][ T6003] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 68.154522][ T5997] ext4 filesystem being mounted at /215/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 68.182107][ T6008] __nla_validate_parse: 3 callbacks suppressed [ 68.182120][ T6008] netlink: 168 bytes leftover after parsing attributes in process `syz.4.979'. [ 68.188867][ T5997] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #2: comm syz.0.984: corrupted inode contents [ 68.213782][ T5998] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.377261][ T5997] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #2: comm syz.0.984: mark_inode_dirty error [ 68.389080][ T5997] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #2: comm syz.0.984: corrupted inode contents [ 68.415237][ T5998] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.446039][ T5997] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.984: mark_inode_dirty error [ 68.483336][ T6010] EXT4-fs warning (device loop0): ext4_es_cache_extent:1082: inode #2: comm syz.0.984: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 68.483336][ T6010] [ 68.514718][ T5998] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.568104][ T6021] Invalid argument reading file caps for ./file0 [ 68.595055][ T5997] EXT4-fs error (device loop0): ext4_get_first_dir_block:3538: inode #18: comm syz.0.984: directory missing '.' [ 68.613818][ T50] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.627385][ T50] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.636744][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.644865][ T50] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.657152][ T50] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.691423][ T6029] loop5: detected capacity change from 0 to 512 [ 68.701398][ T6030] SELinux: Context › is not valid (left unmapped). [ 68.717121][ T6029] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.989: bg 0: block 5: invalid block bitmap [ 68.718124][ T6030] SELinux: Context netdevsim025 is not valid (left unmapped). [ 68.741425][ T6029] loop5: lost filesystem error report for type 5 error -117 [ 68.743228][ T6029] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 68.750626][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 68.750644][ C0] EXT4-fs (loop5): initial error at time 1774472028: ext4_validate_block_bitmap:432 [ 68.750662][ C0] EXT4-fs (loop5): last error at time 1774472028: ext4_validate_block_bitmap:432 [ 68.784478][ T6029] loop5: lost filesystem error report for type 5 error -117 [ 68.784648][ T6029] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.989: invalid indirect mapped block 3 (level 2) [ 68.805221][ T6029] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 68.810169][ T6029] EXT4-fs (loop5): 1 orphan inode deleted [ 68.825299][ T6029] EXT4-fs (loop5): 1 truncate cleaned up [ 68.831486][ T6029] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.844574][ T6036] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 68.897226][ T3742] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.943867][ T6043] loop0: detected capacity change from 0 to 4096 [ 68.969670][ T6043] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.102369][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.115474][ T6063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1004'. [ 69.536051][ T6078] loop5: detected capacity change from 0 to 512 [ 69.584292][ T6078] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.625040][ T6078] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.660975][ T6078] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65531 sclass=netlink_route_socket pid=6078 comm=syz.5.1009 [ 69.705756][ T3742] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.731223][ T6087] loop2: detected capacity change from 0 to 512 [ 69.929646][ T6087] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.1023: missing EA_INODE flag [ 69.958458][ T6087] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 69.958583][ T6087] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1023: error while reading EA inode 12 err=-117 [ 69.967760][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 69.967779][ C1] EXT4-fs (loop2): initial error at time 1774472030: ext4_xattr_inode_iget:441: inode 12 [ 69.967823][ C1] EXT4-fs (loop2): last error at time 1774472030: ext4_xattr_inode_iget:441: inode 12 [ 70.100623][ T6087] loop2: lost filesystem error report for type 5 error -117 [ 70.100813][ T6087] EXT4-fs (loop2): 1 orphan inode deleted [ 70.114861][ T6087] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.154010][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.354646][ T6115] EXT4-fs: Ignoring removed i_version option [ 70.390247][ T6115] EXT4-fs: Ignoring removed bh option [ 70.426703][ T6115] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.449904][ T2999] ================================================================== [ 70.453883][ T6115] ext4 filesystem being mounted at /212/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 70.457990][ T2999] BUG: KCSAN: data-race in d_make_discardable / path_lookupat [ 70.475644][ T2999] [ 70.477964][ T2999] write to 0xffff88810c090600 of 4 bytes by task 3301 on cpu 1: [ 70.485585][ T2999] d_make_discardable+0x4f/0xa0 [ 70.490426][ T2999] simple_unlink+0x68/0x80 [ 70.494825][ T2999] shmem_unlink+0x12d/0x140 [ 70.499316][ T2999] vfs_unlink+0x1c7/0x490 [ 70.503623][ T2999] filename_unlinkat+0x1e2/0x410 [ 70.508539][ T2999] __se_sys_unlink+0x2b/0xe0 [ 70.513108][ T2999] __x64_sys_unlink+0x1f/0x30 [ 70.517766][ T2999] x64_sys_call+0x2eb6/0x3020 [ 70.522428][ T2999] do_syscall_64+0x12c/0x370 [ 70.527003][ T2999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.532876][ T2999] [ 70.535205][ T2999] read to 0xffff88810c090600 of 4 bytes by task 2999 on cpu 0: [ 70.542815][ T2999] path_lookupat+0x1d8/0x500 [ 70.547392][ T2999] filename_lookup+0x190/0x390 [ 70.552137][ T2999] do_readlinkat+0x74/0x2f0 [ 70.556636][ T2999] __x64_sys_readlink+0x47/0x60 [ 70.561473][ T2999] x64_sys_call+0x2b51/0x3020 [ 70.566132][ T2999] do_syscall_64+0x12c/0x370 [ 70.570712][ T2999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.576587][ T2999] [ 70.578892][ T2999] value changed: 0x08300080 -> 0x00004080 [ 70.584584][ T2999] [ 70.586888][ T2999] Reported by Kernel Concurrency Sanitizer on: [ 70.593029][ T2999] CPU: 0 UID: 0 PID: 2999 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 70.601859][ T2999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 70.611894][ T2999] ================================================================== [ 70.660171][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 70.660184][ T28] audit: type=1400 audit(1774472030.809:634): avc: denied { read write } for pid=6114 comm="syz.2.1024" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 70.681312][ T6115] EXT4-fs (loop2): shut down requested (2) [ 70.696289][ T6119] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.712188][ T28] audit: type=1400 audit(1774472030.809:635): avc: denied { open } for pid=6114 comm="syz.2.1024" path="/212/bus/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 70.755626][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.808478][ T28] audit: type=1400 audit(1774472030.959:636): avc: denied { rmdir } for pid=3314 comm="syz-executor" name="lost+found" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 70.831714][ T3314] EXT4-fs error (device loop4): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 70.845851][ T28] audit: type=1400 audit(1774472030.989:637): avc: denied { unlink } for pid=3314 comm="syz-executor" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 70.852090][ T3314] EXT4-fs error (device loop4): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 71.031092][ T6124] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.