last executing test programs: 1.295649913s ago: executing program 2 (id=811): bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$rdma_cm(0xffffff9c, 0x0, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='sched_switch\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 944.517959ms ago: executing program 2 (id=825): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r2}, 0x37) close(0x3) socket$inet6(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1008a, &(0x7f00000001c0)={[{@quota}, {@usrjquota, 0x22}, {@errors_continue}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@mblk_io_submit}, {@nomblk_io_submit, 0x22}, {@errors_continue}, {@init_itable}, {@jqfmt_vfsv1}], [{@uid_eq}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@permit_directio}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@appraise}]}, 0xfe, 0x45f, &(0x7f0000000680)="$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") 863.821669ms ago: executing program 0 (id=830): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000069000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10) close(r0) 792.07493ms ago: executing program 4 (id=831): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0xffffff1f, 0x4, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @remote}]}}}]}, 0x40}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) 660.080042ms ago: executing program 0 (id=836): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x20003) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x8000000000000}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32250000000900010073797a3000000000080005400000001f"], 0xec}, 0x1, 0x0, 0x0, 0x20048811}, 0x0) 659.313632ms ago: executing program 2 (id=837): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005140), 0x0, 0x4008440) r0 = socket$pppoe(0x18, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bb, &(0x7f0000000440)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0x3}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @remote, 'vcan0\x00'}}, 0x1e) 576.270503ms ago: executing program 0 (id=839): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0xc100}, 0x4040) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x325, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) 575.624443ms ago: executing program 3 (id=840): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r1}, 0x10) r2 = epoll_create1(0x80000) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wakeup_count', 0x80800, 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r3, &(0x7f0000001980)=""/179, 0xb3) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000000)) 483.513674ms ago: executing program 3 (id=842): r0 = socket(0x10, 0x80003, 0x0) socket(0x28, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x2404c854) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64e9f4080003000601000004000200d700", 0x5a}, {&(0x7f0000000680)="ffaf", 0x2}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4080) socket(0x28, 0x5, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 483.286734ms ago: executing program 1 (id=843): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) syz_clone3(&(0x7f0000000380)={0x200000, 0x0, 0x0, 0x0, {0xc}, 0x0, 0x0, 0x0, 0x0}, 0x58) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 471.638894ms ago: executing program 3 (id=844): pipe2$9p(0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) creat(&(0x7f0000000040)='./bus\x00', 0x8) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 366.043796ms ago: executing program 1 (id=845): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x4, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e22, 0x0, @empty}}, 0x1, 0x0, 0x0, 0x0, 0x8a, 0x0, 0x1}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x162c8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) 268.017887ms ago: executing program 4 (id=846): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/cgroup.procs\x00', &(0x7f00000001c0)={0x54780, 0x0, 0x10}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) r3 = mq_open(0x0, 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) 262.499397ms ago: executing program 0 (id=847): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x6) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x10) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf4fffff7, 0x12, r2, 0x0) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r1, &(0x7f0000000180)="024dfc7b58623401", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 262.083267ms ago: executing program 1 (id=848): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000002000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x10) 261.749307ms ago: executing program 4 (id=849): getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r3}, 0x10) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 251.301587ms ago: executing program 3 (id=850): pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = epoll_create(0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0x100}, 0x18) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xf6c447fee59251f4}) close_range(r0, r1, 0x0) 180.034668ms ago: executing program 2 (id=851): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x1d, r3, 0x2000000}, 0x10, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="0000000001000000"], 0x48}}, 0x0) 179.443898ms ago: executing program 0 (id=852): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = inotify_init() inotify_add_watch(r2, &(0x7f00000002c0)='./bus\x00', 0x24000137) openat(r1, &(0x7f00000004c0)='./bus\x00', 0x40000, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 178.965158ms ago: executing program 1 (id=853): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='mm_page_free\x00'}, 0x18) pipe(&(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000140000006000000001002f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001000088be"], 0xfdef) 178.444518ms ago: executing program 4 (id=854): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x4, @perf_config_ext={0xf60, 0x40ffffffff}, 0x0, 0x5, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0xfffffffffffffff7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x1, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0xc, 0x4}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@gettclass={0x24, 0x2a, 0x129, 0x1, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0x0, 0x2}, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 148.901589ms ago: executing program 2 (id=855): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) syz_open_pts(0xffffffffffffffff, 0x121500) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x6) 143.179739ms ago: executing program 1 (id=856): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x3}], 0x1, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r2, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r3, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) 82.323349ms ago: executing program 0 (id=857): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80020}], 0x1, 0x40c0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4400c800) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) 81.848999ms ago: executing program 3 (id=858): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 81.352229ms ago: executing program 4 (id=859): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x40ffffffff}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d900008500000023000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000012c0)={0x38, r2, 0xc4fc9e906872338b, 0x2000020, 0x0, {{0x15}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffc, 0x32}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}]}]}, 0x38}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x18) process_vm_writev(0x0, &(0x7f0000000500)=[{0x0}, {0xffffffffffffffff}, {0xfffffffffffffffc}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0, 0x0) 57.44814ms ago: executing program 1 (id=860): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="04000000040000000400000004"], 0x50) close(r3) 56.95596ms ago: executing program 3 (id=861): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/cgroup.procs\x00', &(0x7f00000001c0)={0x54780, 0x0, 0x10}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) r3 = mq_open(0x0, 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) 51.5784ms ago: executing program 2 (id=862): socket$inet_smc(0x2b, 0x1, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x67a, 0x1, 0xfffffffe, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r3, &(0x7f0000000740)}, 0x20) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=863): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$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") kernel console output (not intermixed with test programs): rocess permissive=1 [ 25.210309][ T30] audit: type=1400 audit(1748501301.254:61): avc: denied { siginh } for pid=3194 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.43' (ED25519) to the list of known hosts. [ 33.619301][ T30] audit: type=1400 audit(1748501309.764:62): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.620588][ T3302] cgroup: Unknown subsys name 'net' [ 33.644821][ T30] audit: type=1400 audit(1748501309.764:63): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.677755][ T30] audit: type=1400 audit(1748501309.804:64): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.833091][ T3302] cgroup: Unknown subsys name 'cpuset' [ 33.840178][ T3302] cgroup: Unknown subsys name 'rlimit' [ 33.980772][ T30] audit: type=1400 audit(1748501310.124:65): avc: denied { setattr } for pid=3302 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.004625][ T30] audit: type=1400 audit(1748501310.124:66): avc: denied { create } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.027168][ T30] audit: type=1400 audit(1748501310.124:67): avc: denied { write } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.049133][ T30] audit: type=1400 audit(1748501310.134:68): avc: denied { read } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.059304][ T3308] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 34.072279][ T30] audit: type=1400 audit(1748501310.134:69): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 34.113376][ T30] audit: type=1400 audit(1748501310.134:70): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 34.140717][ T30] audit: type=1400 audit(1748501310.234:71): avc: denied { relabelto } for pid=3308 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 34.172866][ T3302] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 36.026177][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 36.069898][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 36.081382][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 36.174874][ T3324] chnl_net:caif_netlink_parms(): no params data found [ 36.184375][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.192640][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.200782][ T3317] bridge_slave_0: entered allmulticast mode [ 36.207830][ T3317] bridge_slave_0: entered promiscuous mode [ 36.230663][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.238479][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.247547][ T3317] bridge_slave_1: entered allmulticast mode [ 36.255467][ T3317] bridge_slave_1: entered promiscuous mode [ 36.268450][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 36.301579][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.309920][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.318331][ T3315] bridge_slave_0: entered allmulticast mode [ 36.327771][ T3315] bridge_slave_0: entered promiscuous mode [ 36.339109][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.347294][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.355361][ T3315] bridge_slave_1: entered allmulticast mode [ 36.363370][ T3315] bridge_slave_1: entered promiscuous mode [ 36.376773][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.387970][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.397910][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.407277][ T3322] bridge_slave_0: entered allmulticast mode [ 36.415603][ T3322] bridge_slave_0: entered promiscuous mode [ 36.426050][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.435706][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.444948][ T3322] bridge_slave_1: entered allmulticast mode [ 36.452855][ T3322] bridge_slave_1: entered promiscuous mode [ 36.474631][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.486334][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.513084][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.555562][ T3317] team0: Port device team_slave_0 added [ 36.569322][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.592589][ T3315] team0: Port device team_slave_0 added [ 36.599860][ T3317] team0: Port device team_slave_1 added [ 36.612592][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.630972][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.639100][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.649780][ T3324] bridge_slave_0: entered allmulticast mode [ 36.657864][ T3324] bridge_slave_0: entered promiscuous mode [ 36.668848][ T3315] team0: Port device team_slave_1 added [ 36.699463][ T3322] team0: Port device team_slave_0 added [ 36.707011][ T3322] team0: Port device team_slave_1 added [ 36.713694][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.721928][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.732866][ T3324] bridge_slave_1: entered allmulticast mode [ 36.740272][ T3324] bridge_slave_1: entered promiscuous mode [ 36.771396][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.781186][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.791606][ T3321] bridge_slave_0: entered allmulticast mode [ 36.808294][ T3321] bridge_slave_0: entered promiscuous mode [ 36.839438][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.850006][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.892525][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.914254][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.923631][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.958578][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.973570][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.981821][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.990575][ T3321] bridge_slave_1: entered allmulticast mode [ 37.000744][ T3321] bridge_slave_1: entered promiscuous mode [ 37.015959][ T3324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.028065][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.036952][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.073933][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.090590][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.099202][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.134141][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.154727][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.163420][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.197739][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.212851][ T3324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.244167][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.252585][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.281281][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.309535][ T3324] team0: Port device team_slave_0 added [ 37.317264][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.329621][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.368836][ T3324] team0: Port device team_slave_1 added [ 37.400952][ T3317] hsr_slave_0: entered promiscuous mode [ 37.410035][ T3317] hsr_slave_1: entered promiscuous mode [ 37.424068][ T3321] team0: Port device team_slave_0 added [ 37.447576][ T3315] hsr_slave_0: entered promiscuous mode [ 37.455650][ T3315] hsr_slave_1: entered promiscuous mode [ 37.461765][ T3315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.470418][ T3315] Cannot create hsr debugfs directory [ 37.484603][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.492469][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.523023][ T3324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.536618][ T3321] team0: Port device team_slave_1 added [ 37.555122][ T3322] hsr_slave_0: entered promiscuous mode [ 37.561622][ T3322] hsr_slave_1: entered promiscuous mode [ 37.568869][ T3322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.577325][ T3322] Cannot create hsr debugfs directory [ 37.605102][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.613717][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.646731][ T3324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.681758][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.690421][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.721543][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.752021][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.761018][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.790021][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.870286][ T3321] hsr_slave_0: entered promiscuous mode [ 37.877989][ T3321] hsr_slave_1: entered promiscuous mode [ 37.885675][ T3321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.894179][ T3321] Cannot create hsr debugfs directory [ 37.915435][ T3324] hsr_slave_0: entered promiscuous mode [ 37.923371][ T3324] hsr_slave_1: entered promiscuous mode [ 37.931523][ T3324] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.941429][ T3324] Cannot create hsr debugfs directory [ 38.064720][ T3317] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 38.087329][ T3317] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 38.106548][ T3317] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 38.129551][ T3317] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 38.168613][ T3315] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.196082][ T3315] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.207845][ T3315] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.218980][ T3315] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.269280][ T3322] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.285197][ T3322] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.305152][ T3322] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.316996][ T3322] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.364496][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.377398][ T3321] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.396350][ T3321] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.408056][ T3321] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.428781][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.438540][ T3321] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.463472][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.471287][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.490102][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.502019][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.510208][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.543316][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.551298][ T3324] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.566968][ T3324] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.577518][ T3324] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.598432][ T3324] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.609477][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.618419][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.636485][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.644257][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.709610][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.726379][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.755939][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.764206][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.780257][ T3324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.791130][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.800121][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.810627][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.857249][ T3324] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.869720][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.897743][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.906040][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.917148][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.925473][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.948752][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.970653][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.989091][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.998017][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.012869][ T3324] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.024343][ T3324] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.047562][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.055833][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.127182][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.208964][ T3324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.233264][ T3317] veth0_vlan: entered promiscuous mode [ 39.255349][ T3315] veth0_vlan: entered promiscuous mode [ 39.268689][ T3317] veth1_vlan: entered promiscuous mode [ 39.281910][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.304320][ T3315] veth1_vlan: entered promiscuous mode [ 39.340824][ T3322] veth0_vlan: entered promiscuous mode [ 39.366534][ T3317] veth0_macvtap: entered promiscuous mode [ 39.383015][ T3322] veth1_vlan: entered promiscuous mode [ 39.390759][ T3315] veth0_macvtap: entered promiscuous mode [ 39.407311][ T3315] veth1_macvtap: entered promiscuous mode [ 39.419661][ T3317] veth1_macvtap: entered promiscuous mode [ 39.440206][ T3322] veth0_macvtap: entered promiscuous mode [ 39.452512][ T3324] veth0_vlan: entered promiscuous mode [ 39.470371][ T3322] veth1_macvtap: entered promiscuous mode [ 39.478467][ T3324] veth1_vlan: entered promiscuous mode [ 39.486699][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.498068][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.514955][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.533899][ T3321] veth0_vlan: entered promiscuous mode [ 39.541621][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.551097][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.562675][ T3317] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.572657][ T3317] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.582427][ T3317] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.593233][ T3317] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.609071][ T3315] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.618585][ T3315] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.628091][ T3315] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.637865][ T3315] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.653803][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.662096][ T3321] veth1_vlan: entered promiscuous mode [ 39.680747][ T3322] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.690596][ T3322] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.700355][ T3322] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.710356][ T3322] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.727314][ T3324] veth0_macvtap: entered promiscuous mode [ 39.738718][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 39.738736][ T30] audit: type=1400 audit(1748501315.884:81): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.U8xmM4/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 39.773520][ T30] audit: type=1400 audit(1748501315.884:82): avc: denied { mount } for pid=3315 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 39.798873][ T30] audit: type=1400 audit(1748501315.884:83): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.U8xmM4/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 39.828556][ T30] audit: type=1400 audit(1748501315.884:84): avc: denied { mount } for pid=3315 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 39.856010][ T30] audit: type=1400 audit(1748501315.884:85): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.U8xmM4/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 39.888290][ T30] audit: type=1400 audit(1748501315.884:86): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.U8xmM4/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4488 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 39.920074][ T30] audit: type=1400 audit(1748501315.894:87): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 39.944259][ T30] audit: type=1400 audit(1748501315.924:88): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 39.970761][ T30] audit: type=1400 audit(1748501315.924:89): avc: denied { mount } for pid=3315 comm="syz-executor" name="/" dev="gadgetfs" ino=4495 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 39.999483][ T3324] veth1_macvtap: entered promiscuous mode [ 40.007789][ T3315] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.050635][ T30] audit: type=1400 audit(1748501316.194:90): avc: denied { read write } for pid=3315 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 40.086778][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.099860][ T3321] veth0_macvtap: entered promiscuous mode [ 40.132698][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.145361][ T3321] veth1_macvtap: entered promiscuous mode [ 40.152249][ C0] hrtimer: interrupt took 26491 ns [ 40.161828][ T3324] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.172093][ T3324] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.182476][ T3324] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.192279][ T3324] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.233288][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.269439][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.305449][ T3321] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.316138][ T3321] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.326509][ T3321] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.336173][ T3321] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.294536][ T3502] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.18'. [ 41.340275][ T3500] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.18'. [ 41.399359][ T3474] syz.2.3 (3474) used greatest stack depth: 9896 bytes left [ 41.474786][ T3506] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20'. [ 41.993805][ T3536] loop4: detected capacity change from 0 to 256 [ 42.037808][ T3471] syz.2.3 (3471) used greatest stack depth: 7192 bytes left [ 42.070399][ T3541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.26'. [ 42.105509][ T3536] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 42.136611][ T3545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.26'. [ 42.236918][ T3536] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 42.246941][ T3536] FAT-fs (loop4): Filesystem has been set read-only [ 42.300381][ T3563] syz.1.32 uses obsolete (PF_INET,SOCK_PACKET) [ 42.585900][ T3591] netlink: 60 bytes leftover after parsing attributes in process `syz.4.36'. [ 42.687729][ T59] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.784843][ T59] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.858485][ T59] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.949590][ T59] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.089610][ T59] bridge_slave_1: left allmulticast mode [ 43.096107][ T59] bridge_slave_1: left promiscuous mode [ 43.102171][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.129507][ T59] bridge_slave_0: left allmulticast mode [ 43.135905][ T59] bridge_slave_0: left promiscuous mode [ 43.141962][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.316382][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 43.345120][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 43.394617][ T59] bond0 (unregistering): Released all slaves [ 43.502457][ T3677] process 'syz.1.48' launched '/dev/fd/3' with NULL argv: empty string added [ 43.525836][ T59] hsr_slave_0: left promiscuous mode [ 43.535695][ T3669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.557972][ T59] hsr_slave_1: left promiscuous mode [ 43.562573][ T3669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.576524][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.586518][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 43.628160][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.636918][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 43.680960][ T59] veth1_macvtap: left promiscuous mode [ 43.696507][ T59] veth0_macvtap: left promiscuous mode [ 43.712553][ T59] veth1_vlan: left promiscuous mode [ 43.728499][ T59] veth0_vlan: left promiscuous mode [ 43.855104][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 43.865976][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 43.875021][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 43.896785][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 43.906163][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 43.915202][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 43.924463][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 43.933561][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 43.942123][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 43.950975][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 43.955841][ T3715] hub 9-0:1.0: USB hub found [ 43.959658][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 43.974719][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 43.978308][ T3715] hub 9-0:1.0: 8 ports detected [ 43.982838][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.006736][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.015710][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.024346][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.033821][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.042301][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.050467][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.059491][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.069140][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.078031][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.086301][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.095748][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.106509][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.115585][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.124716][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.133049][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.156530][ T3390] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 44.247858][ T59] team0 (unregistering): Port device team_slave_1 removed [ 44.249625][ T3719] fido_id[3719]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 44.273854][ T59] team0 (unregistering): Port device team_slave_0 removed [ 44.298812][ T3726] loop1: detected capacity change from 0 to 2048 [ 44.373110][ T3300] loop1: p1 < > p3 [ 44.388796][ T3300] loop1: p3 size 134217728 extends beyond EOD, truncated [ 44.434173][ T3726] loop1: p1 < > p3 [ 44.442367][ T3726] loop1: p3 size 134217728 extends beyond EOD, truncated [ 44.554623][ T3612] chnl_net:caif_netlink_parms(): no params data found [ 44.699483][ T3748] netlink: 12 bytes leftover after parsing attributes in process `syz.0.54'. [ 44.730443][ T3612] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.738596][ T3612] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.783863][ T3612] bridge_slave_0: entered allmulticast mode [ 44.813640][ T3612] bridge_slave_0: entered promiscuous mode [ 44.825282][ T30] kauditd_printk_skb: 157 callbacks suppressed [ 44.825405][ T30] audit: type=1400 audit(1748501320.974:248): avc: denied { add_name } for pid=3745 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.827793][ T3612] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.868154][ T3612] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.876839][ T3612] bridge_slave_1: entered allmulticast mode [ 44.890404][ T3612] bridge_slave_1: entered promiscuous mode [ 44.892679][ T30] audit: type=1326 audit(1748501321.034:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3763 comm="syz.0.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9acdcce969 code=0x7ffc0000 [ 44.925984][ T30] audit: type=1326 audit(1748501321.034:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3763 comm="syz.0.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9acdccd2d0 code=0x7ffc0000 [ 44.954737][ T30] audit: type=1326 audit(1748501321.034:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3763 comm="syz.0.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9acdcce969 code=0x7ffc0000 [ 44.983908][ T30] audit: type=1326 audit(1748501321.034:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3763 comm="syz.0.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f9acdcce969 code=0x7ffc0000 [ 45.011874][ T30] audit: type=1326 audit(1748501321.034:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3763 comm="syz.0.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9acdcce969 code=0x7ffc0000 [ 45.050586][ T3773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.57'. [ 45.061338][ T3773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.57'. [ 45.075239][ T30] audit: type=1400 audit(1748501321.054:254): avc: denied { remove_name } for pid=3769 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=804 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.116315][ T3776] ======================================================= [ 45.116315][ T3776] WARNING: The mand mount option has been deprecated and [ 45.116315][ T3776] and is ignored by this kernel. Remove the mand [ 45.116315][ T3776] option from the mount to silence this warning. [ 45.116315][ T3776] ======================================================= [ 45.133808][ T30] audit: type=1400 audit(1748501321.264:255): avc: denied { mount } for pid=3775 comm="syz.0.58" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 45.181104][ T30] audit: type=1400 audit(1748501321.264:256): avc: denied { mounton } for pid=3775 comm="syz.0.58" path="/11/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 45.218601][ T30] audit: type=1400 audit(1748501321.354:257): avc: denied { unmount } for pid=3775 comm="syz.0.58" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 45.267275][ T3779] netlink: 'syz.3.60': attribute type 21 has an invalid length. [ 45.289716][ T3612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.328334][ T3612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.360312][ T3785] netlink: 12 bytes leftover after parsing attributes in process `syz.3.63'. [ 45.397351][ T3612] team0: Port device team_slave_0 added [ 45.428547][ T3612] team0: Port device team_slave_1 added [ 45.500377][ T3793] loop0: detected capacity change from 0 to 1024 [ 45.524522][ T3612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.532725][ T3612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.569332][ T3612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.581610][ T3793] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 45.613115][ T3793] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 45.621585][ T3612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.633424][ T3612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.645698][ T3793] EXT4-fs error (device loop0): ext4_get_journal_inode:5796: inode #32: comm syz.0.64: iget: special inode unallocated [ 45.663471][ T3612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.701952][ T3805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.715531][ T3793] EXT4-fs (loop0): Remounting filesystem read-only [ 45.723130][ T3793] EXT4-fs (loop0): no journal found [ 45.724530][ T3805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.729047][ T3793] EXT4-fs (loop0): can't get journal size [ 45.778293][ T3793] EXT4-fs (loop0): filesystem is read-only [ 45.787773][ T3793] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 45.806670][ T3612] hsr_slave_0: entered promiscuous mode [ 45.814493][ T3612] hsr_slave_1: entered promiscuous mode [ 45.831696][ T3612] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.851099][ T3612] Cannot create hsr debugfs directory [ 45.862779][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.973081][ T3816] loop0: detected capacity change from 0 to 2048 [ 46.034286][ T3469] loop0: p1 < > p3 [ 46.039212][ T3469] loop0: p3 size 134217728 extends beyond EOD, truncated [ 46.057848][ T3830] bridge: RTM_NEWNEIGH with invalid state 0x31 [ 46.069496][ T3816] loop0: p1 < > p3 [ 46.084946][ T3816] loop0: p3 size 134217728 extends beyond EOD, truncated [ 46.262146][ T3612] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 46.349497][ T3612] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 46.407547][ T3612] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 46.446359][ T3612] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 46.637173][ T3612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.661243][ T3871] netlink: 12 bytes leftover after parsing attributes in process `syz.0.76'. [ 46.680428][ T3612] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.725871][ T3638] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.733925][ T3638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.794309][ T3638] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.803105][ T3638] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.085814][ T3612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.274897][ T3612] veth0_vlan: entered promiscuous mode [ 47.296472][ T3612] veth1_vlan: entered promiscuous mode [ 47.311023][ T3921] netlink: 4 bytes leftover after parsing attributes in process `syz.4.83'. [ 47.324903][ T3612] veth0_macvtap: entered promiscuous mode [ 47.339726][ T3921] hsr_slave_0: left promiscuous mode [ 47.349477][ T3921] hsr_slave_1: left promiscuous mode [ 47.373748][ T3612] veth1_macvtap: entered promiscuous mode [ 47.389115][ T3612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.405790][ T3612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.419758][ T3612] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.429567][ T3612] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.439052][ T3612] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.448478][ T3612] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.684848][ T3953] loop2: detected capacity change from 0 to 1024 [ 47.712054][ T3953] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 47.741306][ T3953] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 47.822975][ T3953] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 47.855680][ T3965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.91'. [ 47.869814][ T3968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.92'. [ 47.890927][ T3953] EXT4-fs (loop2): orphan cleanup on readonly fs [ 47.910953][ T3969] loop4: detected capacity change from 0 to 512 [ 47.924431][ T3953] EXT4-fs error (device loop2): __ext4_get_inode_loc:4792: comm syz.2.86: Invalid inode table block 0 in block_group 0 [ 47.970320][ T3953] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 47.990129][ T3953] EXT4-fs error (device loop2): ext4_quota_write:7322: inode #3: comm syz.2.86: mark_inode_dirty error [ 48.027622][ T3969] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.053153][ T3953] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.86: Failed to acquire dquot type 0 [ 48.067981][ T3965] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 48.074953][ T3965] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 48.083582][ T3965] vhci_hcd vhci_hcd.0: Device attached [ 48.100743][ T3969] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.112025][ T3953] EXT4-fs error (device loop2): __ext4_get_inode_loc:4792: comm syz.2.86: Invalid inode table block 0 in block_group 0 [ 48.128837][ T3953] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 48.130183][ T3969] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.151787][ T3953] EXT4-fs error (device loop2): ext4_ext_truncate:4475: inode #15: comm syz.2.86: mark_inode_dirty error [ 48.177596][ T3953] EXT4-fs error (device loop2): __ext4_get_inode_loc:4792: comm syz.2.86: Invalid inode table block 0 in block_group 0 [ 48.248224][ T3953] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 48.256466][ T3984] SELinux: syz.0.96 (3984) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 48.276336][ T3953] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 48.286236][ T3953] EXT4-fs error (device loop2): __ext4_get_inode_loc:4792: comm syz.2.86: Invalid inode table block 0 in block_group 0 [ 48.315841][ T3953] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 48.332343][ T36] usb 7-1: new high-speed USB device number 2 using vhci_hcd [ 48.356301][ T3953] EXT4-fs error (device loop2): ext4_truncate:4597: inode #15: comm syz.2.86: mark_inode_dirty error [ 48.380385][ T3953] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 48.382582][ T3976] vhci_hcd: connection reset by peer [ 48.392684][ T3988] netlink: 12 bytes leftover after parsing attributes in process `syz.4.98'. [ 48.416377][ T59] vhci_hcd: stop threads [ 48.418262][ T3953] EXT4-fs (loop2): 1 truncate cleaned up [ 48.420975][ T59] vhci_hcd: release socket [ 48.433817][ T59] vhci_hcd: disconnect device [ 48.439941][ T3953] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.474086][ T3953] netlink: 40 bytes leftover after parsing attributes in process `syz.2.86'. [ 48.506999][ T3612] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.522120][ T3995] netlink: 'syz.4.101': attribute type 10 has an invalid length. [ 48.530917][ T3995] netlink: 40 bytes leftover after parsing attributes in process `syz.4.101'. [ 48.548650][ T3995] dummy0: entered promiscuous mode [ 48.558287][ T3995] bridge0: port 3(dummy0) entered blocking state [ 48.566075][ T3995] bridge0: port 3(dummy0) entered disabled state [ 48.580466][ T3995] dummy0: entered allmulticast mode [ 48.587230][ T3995] bridge0: port 3(dummy0) entered blocking state [ 48.594202][ T3995] bridge0: port 3(dummy0) entered forwarding state [ 48.628575][ T4001] loop0: detected capacity change from 0 to 2048 [ 48.672892][ T3469] loop0: p1 < > p4 [ 48.677692][ T3469] loop0: p4 size 8388608 extends beyond EOD, truncated [ 48.697970][ T4001] loop0: p1 < > p4 [ 48.705159][ T4001] loop0: p4 size 8388608 extends beyond EOD, truncated [ 48.741518][ T3007] loop0: p1 < > p4 [ 48.746240][ T3007] loop0: p4 size 8388608 extends beyond EOD, truncated [ 48.784545][ T4013] loop4: detected capacity change from 0 to 2048 [ 48.828731][ T4013] EXT4-fs: Ignoring removed bh option [ 48.862960][ T4013] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.889970][ T4013] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 48.909856][ T4021] netlink: 'syz.1.110': attribute type 1 has an invalid length. [ 48.928979][ T4013] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 48.944245][ T4013] EXT4-fs (loop4): This should not happen!! Data will be lost [ 48.944245][ T4013] [ 48.955815][ T4013] EXT4-fs (loop4): Total free blocks count 0 [ 48.962760][ T4013] EXT4-fs (loop4): Free/Dirty block details [ 48.969326][ T4013] EXT4-fs (loop4): free_blocks=2415919104 [ 48.976314][ T4013] EXT4-fs (loop4): dirty_blocks=16 [ 48.982244][ T4013] EXT4-fs (loop4): Block reservation details [ 48.989121][ T4013] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 49.008417][ T4021] syz_tun: entered allmulticast mode [ 49.069214][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.134924][ T3394] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 49.159449][ T3394] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 49.833552][ T30] kauditd_printk_skb: 304 callbacks suppressed [ 49.833572][ T30] audit: type=1326 audit(1748501325.984:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4044 comm="syz.1.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3e063c5927 code=0x7ffc0000 [ 49.883529][ T30] audit: type=1326 audit(1748501326.024:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4044 comm="syz.1.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3e0636ab39 code=0x7ffc0000 [ 49.908104][ T30] audit: type=1326 audit(1748501326.024:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4044 comm="syz.1.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3e063c5927 code=0x7ffc0000 [ 49.934978][ T30] audit: type=1326 audit(1748501326.024:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4044 comm="syz.1.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3e0636ab39 code=0x7ffc0000 [ 49.959531][ T30] audit: type=1326 audit(1748501326.024:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4044 comm="syz.1.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f3e063ce969 code=0x7ffc0000 [ 49.986316][ T30] audit: type=1326 audit(1748501326.024:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4044 comm="syz.1.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3e063c5927 code=0x7ffc0000 [ 50.013413][ T30] audit: type=1326 audit(1748501326.024:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4044 comm="syz.1.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3e0636ab39 code=0x7ffc0000 [ 50.038158][ T30] audit: type=1326 audit(1748501326.024:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4044 comm="syz.1.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f3e063ce969 code=0x7ffc0000 [ 50.062768][ T30] audit: type=1326 audit(1748501326.034:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4044 comm="syz.1.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3e063c5927 code=0x7ffc0000 [ 50.088817][ T30] audit: type=1326 audit(1748501326.034:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4044 comm="syz.1.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3e0636ab39 code=0x7ffc0000 [ 50.267679][ T4076] Falling back ldisc for ttyS3. [ 51.965874][ T4149] loop2: detected capacity change from 0 to 512 [ 51.996627][ T4149] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.010214][ T4149] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.062364][ T4149] usb usb8: usbfs: process 4149 (syz.2.162) did not claim interface 0 before use [ 52.100321][ T3612] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.347792][ T4180] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.172'. [ 52.377532][ T4175] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.172'. [ 52.707487][ T4202] 9pnet: p9_errstr2errno: server reported unknown error [ 52.873870][ T4212] netlink: zone id is out of range [ 52.879249][ T4212] netlink: zone id is out of range [ 52.884570][ T4212] netlink: zone id is out of range [ 52.889890][ T4212] netlink: zone id is out of range [ 52.895441][ T4212] netlink: zone id is out of range [ 52.900924][ T4212] netlink: zone id is out of range [ 52.906344][ T4212] netlink: zone id is out of range [ 52.912013][ T4212] netlink: zone id is out of range [ 52.917532][ T4212] netlink: zone id is out of range [ 52.923397][ T4212] netlink: zone id is out of range [ 53.027970][ T10] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 53.036218][ T10] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 53.044117][ T10] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 53.051967][ T10] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 53.072809][ T4224] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.191'. [ 53.084279][ T4221] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.191'. [ 53.108612][ T4225] loop3: detected capacity change from 0 to 512 [ 53.127847][ T10] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 53.136365][ T10] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 53.144592][ T10] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 53.153294][ T10] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 53.161704][ T10] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 53.170362][ T10] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 53.178530][ T10] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 53.187246][ T10] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 53.195529][ T10] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 53.203667][ T10] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 53.212167][ T10] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 53.220803][ T10] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 53.229356][ T10] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 53.237695][ T10] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 53.245981][ T10] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 53.255045][ T10] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 53.263331][ T10] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 53.271529][ T10] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 53.280649][ T10] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 53.289503][ T10] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 53.298602][ T10] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 53.319139][ T10] hid-generic 0000:0000:20000000.0003: hidraw0: HID v0.01 Device [syz0] on syz1 [ 53.348212][ T4225] EXT4-fs (loop3): too many log groups per flexible block group [ 53.356311][ T4225] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 53.380778][ T4228] fido_id[4228]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 53.381696][ T4225] EXT4-fs (loop3): mount failed [ 53.433807][ T36] vhci_hcd: vhci_device speed not set [ 53.520538][ T4243] loop1: detected capacity change from 0 to 512 [ 53.534715][ T4243] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 53.543062][ T4243] EXT4-fs (loop1): orphan cleanup on readonly fs [ 53.549978][ T4243] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 53.565994][ T4243] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 53.574375][ T4243] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.197: bg 0: block 40: padding at end of block bitmap is not set [ 53.589861][ T4243] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 53.601838][ T4243] EXT4-fs (loop1): 1 truncate cleaned up [ 53.608094][ T4243] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 53.622365][ T4243] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #16: comm syz.1.197: corrupted xattr block 31: invalid header [ 53.637325][ T4243] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 53.646650][ T4243] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #16: comm syz.1.197: corrupted xattr block 31: invalid header [ 53.660648][ T4243] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 53.670368][ T4243] EXT4-fs error (device loop1): ext4_get_link:106: inode #16: comm syz.1.197: bad symlink. [ 53.672667][ T4247] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #16: comm syz.1.197: corrupted xattr block 31: invalid header [ 53.694590][ T4247] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 53.703878][ T4247] EXT4-fs error (device loop1): ext4_get_link:106: inode #16: comm syz.1.197: bad symlink. [ 53.727767][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.851495][ T4257] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25439 sclass=netlink_route_socket pid=4257 comm=syz.3.202 [ 54.055375][ T4271] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.207'. [ 54.100554][ T4266] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.207'. [ 54.932498][ T30] kauditd_printk_skb: 195 callbacks suppressed [ 54.932519][ T30] audit: type=1400 audit(1748501331.074:764): avc: denied { cmd } for pid=4273 comm="syz.3.211" path="socket:[6673]" dev="sockfs" ino=6673 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 54.968321][ T4280] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 55.041858][ T30] audit: type=1400 audit(1748501331.134:765): avc: denied { ioctl } for pid=4278 comm="syz.4.212" path="socket:[6075]" dev="sockfs" ino=6075 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 55.068537][ T30] audit: type=1400 audit(1748501331.134:766): avc: denied { bind } for pid=4278 comm="syz.4.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 55.089101][ T30] audit: type=1400 audit(1748501331.134:767): avc: denied { read } for pid=4278 comm="syz.4.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 55.111952][ T4286] loop3: detected capacity change from 0 to 512 [ 55.165450][ T4286] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.188322][ T4286] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.202751][ T4294] netlink: 24 bytes leftover after parsing attributes in process `syz.0.219'. [ 55.218620][ T30] audit: type=1400 audit(1748501331.364:768): avc: denied { mounton } for pid=4283 comm="syz.3.215" path="/47/bus/file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 55.242466][ T30] audit: type=1400 audit(1748501331.364:769): avc: denied { mount } for pid=4283 comm="syz.3.215" name="/" dev="configfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 55.279787][ T30] audit: type=1400 audit(1748501331.414:770): avc: denied { create } for pid=4283 comm="syz.3.215" name="control" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 55.305925][ T30] audit: type=1400 audit(1748501331.434:771): avc: denied { mounton } for pid=4283 comm="syz.3.215" path="/47/bus/control" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 55.309035][ T4298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.223'. [ 55.392477][ T3321] EXT4-fs error (device loop3): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /47/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 55.393197][ T30] audit: type=1400 audit(1748501331.534:772): avc: denied { remove_name } for pid=3321 comm="syz-executor" name="lost+found" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 55.438907][ T30] audit: type=1400 audit(1748501331.534:773): avc: denied { rmdir } for pid=3321 comm="syz-executor" name="lost+found" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 55.473859][ T3321] EXT4-fs (loop3): Remounting filesystem read-only [ 55.530235][ T4311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.229'. [ 55.612632][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.711535][ T4322] netlink: 'syz.1.234': attribute type 13 has an invalid length. [ 55.779858][ T4326] loop0: detected capacity change from 0 to 764 [ 55.820248][ T4328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.237'. [ 55.840244][ T4322] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.847921][ T4322] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.918264][ T4322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.930536][ T4322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.966693][ T4330] netlink: 'syz.0.238': attribute type 4 has an invalid length. [ 55.997801][ T4322] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.007784][ T4322] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.017094][ T4322] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.026760][ T4322] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.063305][ T4330] netlink: 'syz.0.238': attribute type 4 has an invalid length. [ 56.290485][ T3394] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 56.303844][ T3394] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 56.316039][ T4337] loop3: detected capacity change from 0 to 1024 [ 56.325706][ T4337] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.333185][ T4337] EXT4-fs: Mount option(s) incompatible with ext2 [ 56.366975][ T4338] fido_id[4338]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 56.481616][ T4344] loop2: detected capacity change from 0 to 164 [ 56.533102][ T4346] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.615951][ T4346] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.680963][ T4352] loop2: detected capacity change from 0 to 2048 [ 56.694132][ T4352] EXT4-fs: Ignoring removed i_version option [ 56.704854][ T4346] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.734533][ T4352] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.748471][ T4352] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.763505][ T4346] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.787936][ T3612] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.831164][ T4346] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.852397][ T4346] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.873253][ T4346] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.896927][ T4346] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.912546][ T4363] tipc: Started in network mode [ 56.917607][ T4363] tipc: Node identity ce1f88ccde9e, cluster identity 4711 [ 56.926074][ T4363] tipc: Enabled bearer , priority 0 [ 56.945218][ T4363] syzkaller0: MTU too low for tipc bearer [ 56.952149][ T4363] tipc: Disabling bearer [ 57.055235][ T4379] loop3: detected capacity change from 0 to 128 [ 57.062592][ T4379] EXT4-fs: Ignoring removed nobh option [ 57.152791][ T4379] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 57.173829][ T4379] ext4 filesystem being mounted at /55/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 57.238928][ T3321] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 57.307744][ T10] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 57.316176][ T10] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 57.333058][ T4398] loop0: detected capacity change from 0 to 1024 [ 57.475744][ T4416] capability: warning: `syz.2.273' uses 32-bit capabilities (legacy support in use) [ 57.625533][ T4436] netlink: 40 bytes leftover after parsing attributes in process `syz.2.281'. [ 57.700325][ T4443] pim6reg1: entered promiscuous mode [ 57.706817][ T4443] pim6reg1: entered allmulticast mode [ 57.849059][ T10] kernel write not supported for file /124/attr/exec (pid: 10 comm: kworker/0:1) [ 57.974814][ T4467] netlink: 12 bytes leftover after parsing attributes in process `syz.0.294'. [ 58.762813][ T4486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.301'. [ 58.784610][ T4488] netlink: 12 bytes leftover after parsing attributes in process `syz.4.302'. [ 58.797176][ T4488] tipc: Started in network mode [ 58.804456][ T4488] tipc: Node identity 1, cluster identity 4711 [ 58.813444][ T4488] tipc: Node number set to 1 [ 59.762540][ T4526] Falling back ldisc for ttyS3. [ 59.845662][ T4539] netlink: 2028 bytes leftover after parsing attributes in process `syz.0.322'. [ 59.854931][ T4539] netlink: 24 bytes leftover after parsing attributes in process `syz.0.322'. [ 60.192509][ T30] kauditd_printk_skb: 303 callbacks suppressed [ 60.192536][ T30] audit: type=1400 audit(1748501336.344:1077): avc: denied { read } for pid=4564 comm="syz.1.336" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 60.222614][ T30] audit: type=1400 audit(1748501336.344:1078): avc: denied { open } for pid=4564 comm="syz.1.336" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 60.240539][ T4568] netlink: 4 bytes leftover after parsing attributes in process `syz.4.334'. [ 60.267861][ T4561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.334'. [ 60.314897][ T4578] netlink: 'syz.1.342': attribute type 1 has an invalid length. [ 60.334142][ T30] audit: type=1400 audit(1748501336.374:1079): avc: denied { read write } for pid=4565 comm="syz.3.337" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 60.359392][ T30] audit: type=1400 audit(1748501336.374:1080): avc: denied { open } for pid=4565 comm="syz.3.337" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 60.377876][ T4578] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.385234][ T30] audit: type=1400 audit(1748501336.374:1081): avc: denied { ioctl } for pid=4565 comm="syz.3.337" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 60.419230][ T30] audit: type=1400 audit(1748501336.374:1082): avc: denied { setopt } for pid=4560 comm="syz.4.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 60.441647][ T30] audit: type=1400 audit(1748501336.404:1083): avc: denied { append } for pid=4564 comm="syz.1.336" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 60.472819][ T4578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.342'. [ 60.494080][ T4578] bond1 (unregistering): Released all slaves [ 60.495432][ T4582] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 60.561441][ T30] audit: type=1400 audit(1748501336.704:1084): avc: denied { write } for pid=4590 comm="syz.2.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 60.661572][ T30] audit: type=1400 audit(1748501336.804:1085): avc: denied { create } for pid=4598 comm="syz.4.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 60.705915][ T4595] loop3: detected capacity change from 0 to 4096 [ 60.729689][ T30] audit: type=1400 audit(1748501336.804:1086): avc: denied { connect } for pid=4598 comm="syz.4.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 60.750925][ T4605] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.770517][ T4610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.355'. [ 60.785802][ T4595] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.817324][ T4595] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.835443][ T4605] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.906856][ T4605] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.946240][ T4626] capability: warning: `syz.2.362' uses deprecated v2 capabilities in a way that may be insecure [ 60.973814][ T4631] veth0: entered promiscuous mode [ 60.986882][ T4605] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.030222][ T4637] futex_wake_op: syz.2.367 tries to shift op by -1; fix this program [ 61.052646][ T4637] smc: net device bond0 applied user defined pnetid SYZ2 [ 61.065560][ T4637] smc: net device bond0 erased user defined pnetid SYZ2 [ 61.099331][ T4605] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.128630][ T4605] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.188308][ T4605] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.204971][ T4605] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.229182][ T4650] netem: change failed [ 61.378820][ T4665] loop0: detected capacity change from 0 to 512 [ 61.403273][ T4665] EXT4-fs warning (device loop0): ext4_init_metadata_csum:4622: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 61.417941][ T4665] EXT4-fs (loop0): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 61.476942][ T3469] udevd[3469]: incorrect ext4 checksum on /dev/loop0 [ 61.602658][ T4691] SELinux: Context system_u:object_r:dhcpd_exec_t:s0 is not valid (left unmapped). [ 61.800760][ T4714] pimreg: entered allmulticast mode [ 61.812113][ T4714] pimreg: left allmulticast mode [ 61.897751][ T4719] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 62.387131][ T4717] net_ratelimit: 56 callbacks suppressed [ 62.387154][ T4717] Set syz1 is full, maxelem 65536 reached [ 62.404271][ T4734] xt_hashlimit: size too large, truncated to 1048576 [ 62.890467][ T4745] loop4: detected capacity change from 0 to 164 [ 62.974765][ T4745] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 62.985998][ T4745] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 63.007337][ T4745] Symlink component flag not implemented [ 63.015003][ T4745] Symlink component flag not implemented [ 63.049643][ T4745] Symlink component flag not implemented (7) [ 63.056462][ T4745] Symlink component flag not implemented (116) [ 63.299241][ T4732] Set syz1 is full, maxelem 65536 reached [ 63.565376][ T4777] wg2: entered promiscuous mode [ 63.574190][ T4777] wg2: entered allmulticast mode [ 63.641132][ T4782] sd 0:0:1:0: device reset [ 63.831112][ T4800] loop0: detected capacity change from 0 to 512 [ 63.847691][ T4800] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 63.865308][ T4800] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 63.897460][ T4800] EXT4-fs (loop0): 1 truncate cleaned up [ 63.912407][ T4800] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.938682][ T4800] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.211571][ T4822] syz.4.447 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 64.243408][ T4825] __nla_validate_parse: 3 callbacks suppressed [ 64.243428][ T4825] netlink: 24 bytes leftover after parsing attributes in process `syz.2.449'. [ 64.478823][ T4838] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4838 comm=syz.0.454 [ 64.635183][ T4859] Zero length message leads to an empty skb [ 64.746487][ T4869] loop0: detected capacity change from 0 to 512 [ 64.792561][ T4874] SELinux: failed to load policy [ 64.799301][ T4877] netlink: 'syz.3.471': attribute type 7 has an invalid length. [ 64.808105][ T4877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.471'. [ 64.822654][ T4869] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 64.841252][ T4869] EXT4-fs (loop0): invalid journal inode [ 64.855718][ T4869] EXT4-fs (loop0): can't get journal size [ 64.865163][ T4869] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a056c119, mo2=0002] [ 64.880527][ T4869] System zones: 1-12, 13-13 [ 64.885963][ T4869] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.466: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 64.910771][ T4869] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.466: couldn't read orphan inode 15 (err -117) [ 64.932919][ T4869] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.050006][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.077457][ T4907] loop0: detected capacity change from 0 to 512 [ 65.096047][ T4907] EXT4-fs: Ignoring removed mblk_io_submit option [ 65.110480][ T4907] EXT4-fs: Ignoring removed i_version option [ 65.117651][ T4907] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 65.130009][ T4910] netlink: 'syz.2.485': attribute type 10 has an invalid length. [ 65.139864][ T4910] netlink: 'syz.2.485': attribute type 19 has an invalid length. [ 65.148662][ T4910] netlink: 156 bytes leftover after parsing attributes in process `syz.2.485'. [ 65.168912][ T4907] EXT4-fs (loop0): 1 truncate cleaned up [ 65.180749][ T4907] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.183222][ T4913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.486'. [ 65.225535][ T4907] netlink: 20 bytes leftover after parsing attributes in process `syz.0.482'. [ 65.248881][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.323076][ T59] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.352581][ T30] kauditd_printk_skb: 75 callbacks suppressed [ 65.352601][ T30] audit: type=1400 audit(1748501341.504:1162): avc: denied { shutdown } for pid=4918 comm="syz.0.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 65.436719][ T59] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.496006][ T59] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.522648][ T4940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.495'. [ 65.567564][ T59] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.584131][ T30] audit: type=1400 audit(1748501341.734:1163): avc: denied { bind } for pid=4946 comm="syz.3.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 65.642995][ T30] audit: type=1400 audit(1748501341.764:1164): avc: denied { listen } for pid=4946 comm="syz.3.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 65.761756][ T4924] chnl_net:caif_netlink_parms(): no params data found [ 65.805847][ T4960] netlink: 'syz.3.501': attribute type 13 has an invalid length. [ 65.936126][ T4975] loop1: detected capacity change from 0 to 512 [ 65.976266][ T4960] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.983823][ T4960] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.019680][ T4975] EXT4-fs (loop1): 1 orphan inode deleted [ 66.097629][ T4975] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.120136][ T2620] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 66.130785][ T2620] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 66.144456][ T4975] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.158331][ T4994] loop2: detected capacity change from 0 to 1024 [ 66.187845][ T4975] EXT4-fs error (device loop1): ext4_lookup:1787: inode #15: comm syz.1.505: iget: bad i_size value: 360287970189639690 [ 66.204661][ T4994] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.219680][ T4975] EXT4-fs error (device loop1): ext4_lookup:1787: inode #15: comm syz.1.505: iget: bad i_size value: 360287970189639690 [ 66.237612][ T4994] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 66.255628][ T4960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.257220][ T4994] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 66.275911][ T4994] EXT4-fs (loop2): This should not happen!! Data will be lost [ 66.275911][ T4994] [ 66.286203][ T4994] EXT4-fs (loop2): Total free blocks count 0 [ 66.292672][ T4994] EXT4-fs (loop2): Free/Dirty block details [ 66.298778][ T4994] EXT4-fs (loop2): free_blocks=68451041280 [ 66.305241][ T4994] EXT4-fs (loop2): dirty_blocks=80 [ 66.311094][ T4994] EXT4-fs (loop2): Block reservation details [ 66.318910][ T4994] EXT4-fs (loop2): i_reserved_data_blocks=5 [ 66.347664][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.360750][ T4994] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 66.383902][ T4960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.500408][ T4960] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.509123][ T4960] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.518091][ T4960] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.526746][ T4960] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.572848][ T59] dummy0: left allmulticast mode [ 66.612516][ T59] bridge0: port 3(dummy0) entered disabled state [ 66.649018][ T59] bridge_slave_1: left allmulticast mode [ 66.655366][ T59] bridge_slave_1: left promiscuous mode [ 66.662374][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.740982][ T59] bridge_slave_0: left allmulticast mode [ 66.747963][ T59] bridge_slave_0: left promiscuous mode [ 66.755081][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.853958][ T5020] mmap: syz.2.513 (5020) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 66.867900][ T30] audit: type=1326 audit(1748501343.024:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5019 comm="syz.2.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2f33de969 code=0x7ffc0000 [ 66.895074][ T30] audit: type=1326 audit(1748501343.044:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5019 comm="syz.2.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fb2f33de969 code=0x7ffc0000 [ 66.921349][ T30] audit: type=1326 audit(1748501343.074:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5019 comm="syz.2.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2f33de969 code=0x7ffc0000 [ 66.945778][ T30] audit: type=1326 audit(1748501343.074:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5019 comm="syz.2.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2f33de969 code=0x7ffc0000 [ 66.971921][ T30] audit: type=1326 audit(1748501343.074:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5019 comm="syz.2.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fb2f33de969 code=0x7ffc0000 [ 66.995960][ T30] audit: type=1326 audit(1748501343.124:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5019 comm="syz.2.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2f33de969 code=0x7ffc0000 [ 67.065405][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.078808][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.093464][ T59] bond0 (unregistering): Released all slaves [ 67.123273][ T4985] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 67.148173][ T5018] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 67.170773][ T5018] team0: Port device batadv1 added [ 67.193611][ T59] tipc: Left network mode [ 67.230860][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.238967][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.295038][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.303512][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.324349][ T59] veth1_macvtap: left promiscuous mode [ 67.331452][ T59] veth0_macvtap: left promiscuous mode [ 67.337573][ T59] veth1_vlan: left promiscuous mode [ 67.344465][ T59] veth0_vlan: left promiscuous mode [ 67.475498][ T59] team0 (unregistering): Port device team_slave_1 removed [ 67.497945][ T59] team0 (unregistering): Port device team_slave_0 removed [ 67.563466][ T5056] netlink: 64 bytes leftover after parsing attributes in process `syz.0.527'. [ 67.572631][ T5056] netlink: 28 bytes leftover after parsing attributes in process `syz.0.527'. [ 67.581908][ T5056] netlink: 64 bytes leftover after parsing attributes in process `syz.0.527'. [ 67.602295][ T4924] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.609676][ T4924] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.638213][ T4924] bridge_slave_0: entered allmulticast mode [ 67.659151][ T5082] loop0: detected capacity change from 0 to 512 [ 67.673145][ T4924] bridge_slave_0: entered promiscuous mode [ 67.679280][ T5082] EXT4-fs: Ignoring removed mblk_io_submit option [ 67.706724][ T5082] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 67.706901][ T4924] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.725118][ T4924] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.746392][ T4924] bridge_slave_1: entered allmulticast mode [ 67.758549][ T5082] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 67.759110][ T5089] loop1: detected capacity change from 0 to 1024 [ 67.773455][ T4924] bridge_slave_1: entered promiscuous mode [ 67.797917][ T5082] EXT4-fs (loop0): 1 truncate cleaned up [ 67.808120][ T5082] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.831248][ T4924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.848101][ T4924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.861841][ T5089] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.879252][ T5089] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.536: bg 0: block 88: padding at end of block bitmap is not set [ 67.955319][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.980503][ T4924] team0: Port device team_slave_0 added [ 68.001402][ T4924] team0: Port device team_slave_1 added [ 68.104706][ T4924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.112176][ T4924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.140699][ T4924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.171530][ T4924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.179003][ T4924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.208605][ T4924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.236708][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.302734][ T4924] hsr_slave_0: entered promiscuous mode [ 68.311433][ T4924] hsr_slave_1: entered promiscuous mode [ 68.329007][ T5124] netlink: 96 bytes leftover after parsing attributes in process `syz.0.548'. [ 68.386393][ T5010] Process accounting resumed [ 68.808419][ T5164] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.860876][ T5171] openvswitch: netlink: Message has 6 unknown bytes. [ 68.867321][ T4924] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.896893][ T4924] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.926659][ T4924] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.936661][ T5177] loop0: detected capacity change from 0 to 128 [ 68.980737][ T4924] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.030044][ T5181] geneve2: entered promiscuous mode [ 69.037040][ T5181] geneve2: entered allmulticast mode [ 69.145763][ T4924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.147558][ T5192] loop1: detected capacity change from 0 to 512 [ 69.185809][ T4924] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.220732][ T5192] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.235462][ T5192] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.236331][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.255416][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.270207][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.278138][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.310631][ T4924] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.321661][ T4924] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.449189][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.533330][ T4924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.004584][ T4924] veth0_vlan: entered promiscuous mode [ 70.023220][ T5289] __nla_validate_parse: 1 callbacks suppressed [ 70.023239][ T5289] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.582'. [ 70.039284][ T5289] netlink: 24 bytes leftover after parsing attributes in process `syz.2.582'. [ 70.059386][ T4924] veth1_vlan: entered promiscuous mode [ 70.112031][ T4924] veth0_macvtap: entered promiscuous mode [ 70.142028][ T4924] veth1_macvtap: entered promiscuous mode [ 70.179734][ T4924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.202855][ T5302] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 70.214554][ T5308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.587'. [ 70.215637][ T4924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.242140][ T4924] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.251864][ T4924] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.261822][ T4924] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.271391][ T4924] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.384104][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 70.384122][ T30] audit: type=1400 audit(1748501346.534:1191): avc: denied { mount } for pid=4924 comm="syz-executor" name="/" dev="gadgetfs" ino=4495 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 70.510023][ T5330] ALSA: seq fatal error: cannot create timer (-19) [ 70.541094][ T5337] loop1: detected capacity change from 0 to 512 [ 70.548776][ T5337] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 70.594288][ T5337] EXT4-fs (loop1): invalid journal inode [ 70.607394][ T5337] EXT4-fs (loop1): can't get journal size [ 70.614724][ T30] audit: type=1400 audit(1748501346.754:1192): avc: denied { connect } for pid=5338 comm="syz.0.596" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.647776][ T5345] netlink: 4 bytes leftover after parsing attributes in process `syz.4.599'. [ 70.657594][ T30] audit: type=1400 audit(1748501346.794:1193): avc: denied { lock } for pid=5342 comm="syz.3.598" path="socket:[10498]" dev="sockfs" ino=10498 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 70.686197][ T5337] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a056c118, mo2=0002] [ 70.699511][ T5337] System zones: 1-12, 13-13 [ 70.708564][ T5337] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.595: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 70.729495][ T5337] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.595: couldn't read orphan inode 15 (err -117) [ 70.753565][ T5337] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.754867][ T30] audit: type=1326 audit(1748501346.884:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5351 comm="syz.3.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322ce4e969 code=0x7ffc0000 [ 70.793118][ T30] audit: type=1326 audit(1748501346.884:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5351 comm="syz.3.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322ce4e969 code=0x7ffc0000 [ 70.818686][ T30] audit: type=1326 audit(1748501346.884:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5351 comm="syz.3.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f322ce4e969 code=0x7ffc0000 [ 70.845952][ T30] audit: type=1326 audit(1748501346.884:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5351 comm="syz.3.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322ce4e969 code=0x7ffc0000 [ 70.870972][ T30] audit: type=1326 audit(1748501346.894:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5351 comm="syz.3.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322ce4e969 code=0x7ffc0000 [ 70.917899][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.949543][ T30] audit: type=1326 audit(1748501347.084:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5356 comm="syz.2.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2f33de969 code=0x7ffc0000 [ 70.976144][ T30] audit: type=1326 audit(1748501347.084:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5356 comm="syz.2.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7fb2f33de969 code=0x7ffc0000 [ 71.051682][ T5369] loop2: detected capacity change from 0 to 256 [ 71.092995][ T5371] pim6reg1: entered promiscuous mode [ 71.099437][ T5371] pim6reg1: entered allmulticast mode [ 71.219986][ T5380] IPVS: Error connecting to the multicast addr [ 71.237542][ T5382] loop2: detected capacity change from 0 to 1024 [ 71.284865][ T5382] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.378474][ T3612] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.464965][ T5400] loop2: detected capacity change from 0 to 164 [ 71.477534][ T5400] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 71.492202][ T5400] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 71.503575][ T5400] Symlink component flag not implemented [ 71.509860][ T5400] Symlink component flag not implemented [ 71.517121][ T5400] Symlink component flag not implemented (7) [ 71.525753][ T5400] Symlink component flag not implemented (116) [ 71.711961][ T5421] netlink: 96 bytes leftover after parsing attributes in process `syz.2.629'. [ 72.030898][ T5448] loop4: detected capacity change from 0 to 1024 [ 72.062651][ T5448] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.244103][ T4924] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.661718][ T5495] bridge_slave_0: left allmulticast mode [ 72.668224][ T5495] bridge_slave_0: left promiscuous mode [ 72.675369][ T5495] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.703457][ T5498] netlink: 24 bytes leftover after parsing attributes in process `syz.0.665'. [ 72.717498][ T5495] bridge_slave_1: left allmulticast mode [ 72.724161][ T5495] bridge_slave_1: left promiscuous mode [ 72.731299][ T5495] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.788152][ T5495] bond0: (slave bond_slave_0): Releasing backup interface [ 72.806466][ T5495] bond0: (slave bond_slave_1): Releasing backup interface [ 72.824919][ T5495] team0: Port device team_slave_0 removed [ 72.833741][ T5495] team0: Port device team_slave_1 removed [ 72.850432][ T5495] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.867850][ T5495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.106296][ T5523] syzkaller0: entered promiscuous mode [ 73.112700][ T5523] syzkaller0: entered allmulticast mode [ 73.180607][ T5524] loop2: detected capacity change from 0 to 8192 [ 73.452694][ T5543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.682'. [ 73.664362][ T5559] netlink: 4 bytes leftover after parsing attributes in process `syz.4.690'. [ 73.698204][ T5559] netlink: 4 bytes leftover after parsing attributes in process `syz.4.690'. [ 73.931835][ T5565] netlink: 'syz.4.693': attribute type 7 has an invalid length. [ 73.940117][ T5565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.693'. [ 73.991190][ T5568] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 74.031560][ T5571] loop0: detected capacity change from 0 to 1024 [ 74.045248][ T5571] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.064358][ T5571] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.697: Allocating blocks 497-513 which overlap fs metadata [ 74.088521][ T5571] EXT4-fs (loop0): pa ffff8881065c4230: logic 16, phys. 145, len 23 [ 74.097808][ T5571] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 74.139029][ T5571] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 74.153835][ T5571] EXT4-fs (loop0): This should not happen!! Data will be lost [ 74.153835][ T5571] [ 74.166642][ T5571] EXT4-fs (loop0): Total free blocks count 0 [ 74.175233][ T5571] EXT4-fs (loop0): Free/Dirty block details [ 74.186818][ T5571] EXT4-fs (loop0): free_blocks=16 [ 74.192781][ T5571] EXT4-fs (loop0): dirty_blocks=0 [ 74.198535][ T5571] EXT4-fs (loop0): Block reservation details [ 74.206286][ T5571] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 74.453008][ T5592] infiniband syz!: set active [ 74.458270][ T5592] infiniband syz!: added team_slave_0 [ 74.483147][ T5592] RDS/IB: syz!: added [ 74.499405][ T5592] smc: adding ib device syz! with port count 1 [ 74.506556][ T5592] smc: ib device syz! port 1 has pnetid [ 74.955832][ T5624] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 74.955832][ T5624] program syz.0.716 not setting count and/or reply_len properly [ 75.076262][ T5633] dvmrp1: entered allmulticast mode [ 75.130899][ T5632] dvmrp1: left allmulticast mode [ 75.160376][ T5635] loop0: detected capacity change from 0 to 1024 [ 75.211663][ T5635] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 75.255554][ T5635] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 75.283242][ T5643] wireguard0: entered promiscuous mode [ 75.294550][ T5646] __nla_validate_parse: 1 callbacks suppressed [ 75.294569][ T5646] netlink: 404 bytes leftover after parsing attributes in process `syz.2.726'. [ 75.313275][ T5635] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 75.333720][ T5635] EXT4-fs (loop0): orphan cleanup on readonly fs [ 75.340526][ T5635] EXT4-fs error (device loop0): ext4_quota_enable:7124: inode #3: comm syz.0.721: iget: bad i_size value: 1407374883559424 [ 75.356821][ T5635] EXT4-fs (loop0): Remounting filesystem read-only [ 75.364321][ T5635] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 75.375260][ T5650] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 75.380483][ T5635] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 75.399526][ T5635] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.428316][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.484106][ T30] kauditd_printk_skb: 131 callbacks suppressed [ 75.484127][ T30] audit: type=1326 audit(1748501351.634:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5654 comm="syz.2.730" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb2f33de969 code=0x0 [ 75.606101][ T5666] netlink: 'syz.0.734': attribute type 1 has an invalid length. [ 75.630173][ T5673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.737'. [ 75.639693][ T5673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.737'. [ 75.699594][ T5681] : renamed from vlan0 [ 75.795286][ T5689] Driver unsupported XDP return value 0 on prog (id 612) dev N/A, expect packet loss! [ 75.807415][ T5693] netlink: 96 bytes leftover after parsing attributes in process `syz.0.746'. [ 75.874892][ T30] audit: type=1400 audit(1748501352.024:1333): avc: denied { create } for pid=5699 comm="syz.1.749" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_tcpdiag_socket permissive=1 [ 75.902194][ T5700] program syz.1.749 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.914752][ T30] audit: type=1400 audit(1748501352.054:1334): avc: denied { create } for pid=5699 comm="syz.1.749" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 75.980286][ T5707] 9pnet: Could not find request transport: f [ 76.000685][ T5710] all: renamed from lo (while UP) [ 76.420509][ T5730] SELinux: ebitmap: truncated map [ 76.427654][ T5730] SELinux: failed to load policy [ 76.498897][ T5737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.766'. [ 76.508605][ T5737] netlink: 'syz.0.766': attribute type 5 has an invalid length. [ 76.517020][ T5737] netlink: 28 bytes leftover after parsing attributes in process `syz.0.766'. [ 76.531807][ T5737] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 76.540607][ T5737] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 76.549326][ T5737] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 76.557703][ T5737] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 76.567159][ T5737] geneve2: entered promiscuous mode [ 76.573953][ T5737] geneve2: entered allmulticast mode [ 76.821701][ T5740] netlink: 'syz.0.767': attribute type 4 has an invalid length. [ 77.030171][ T5810] loop2: detected capacity change from 0 to 512 [ 77.077835][ T5810] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 77.088172][ T5810] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 77.116324][ T5810] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 77.141852][ T5810] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 77.167334][ T5810] System zones: 0-2, 18-18, 34-34 [ 77.209702][ T5810] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.777: iget: bad i_size value: 360287970189639680 [ 77.229282][ T5810] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.777: couldn't read orphan inode 15 (err -117) [ 77.247431][ T5810] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.277788][ T5810] EXT4-fs error (device loop2): ext4_lookup:1787: inode #15: comm syz.2.777: iget: bad i_size value: 360287970189639680 [ 77.320968][ T3612] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.617373][ T5845] tipc: Enabled bearer , priority 0 [ 77.631635][ T5845] tipc: Resetting bearer [ 77.645237][ T5844] tipc: Disabling bearer [ 77.817567][ T5855] SET target dimension over the limit! [ 77.862051][ T5859] loop4: detected capacity change from 0 to 512 [ 77.871360][ T5859] EXT4-fs error (device loop4): ext4_get_journal_inode:5796: inode #32: comm syz.4.794: iget: special inode unallocated [ 77.922872][ T5859] EXT4-fs (loop4): no journal found [ 77.928585][ T5859] EXT4-fs (loop4): can't get journal size [ 77.946054][ T5859] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 77.961975][ T5859] EXT4-fs error (device loop4): ext4_protect_reserved_inode:160: inode #32: comm syz.4.794: iget: special inode unallocated [ 77.990465][ T5859] EXT4-fs (loop4): failed to initialize system zone (-117) [ 78.001706][ T5859] EXT4-fs (loop4): mount failed [ 78.029631][ T30] audit: type=1400 audit(1748501354.174:1335): avc: denied { append } for pid=5872 comm="syz.2.800" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 78.054108][ T5873] loop9: detected capacity change from 0 to 7 [ 78.062683][ T5873] Buffer I/O error on dev loop9, logical block 0, async page read [ 78.085401][ T5873] Buffer I/O error on dev loop9, logical block 0, async page read [ 78.093488][ T5873] loop9: unable to read partition table [ 78.104207][ T5873] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 78.104207][ T5873] U) failed (rc=-5) [ 78.119623][ T3309] Buffer I/O error on dev loop9, logical block 0, async page read [ 78.127953][ T3309] Buffer I/O error on dev loop9, logical block 0, async page read [ 78.138233][ T3309] Buffer I/O error on dev loop9, logical block 0, async page read [ 78.147960][ T3309] Buffer I/O error on dev loop9, logical block 0, async page read [ 78.191820][ T3309] Buffer I/O error on dev loop9, logical block 0, async page read [ 78.207956][ T3309] Buffer I/O error on dev loop9, logical block 0, async page read [ 78.251505][ T3309] Buffer I/O error on dev loop9, logical block 0, async page read [ 78.260550][ T3309] Buffer I/O error on dev loop9, logical block 0, async page read [ 78.297017][ T5880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.805'. [ 78.344965][ T5880] hsr_slave_1 (unregistering): left promiscuous mode [ 78.383181][ T30] audit: type=1326 audit(1748501354.534:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5887 comm="syz.1.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3e063c5927 code=0x7ffc0000 [ 78.407588][ T30] audit: type=1326 audit(1748501354.534:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5887 comm="syz.1.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3e0636ab39 code=0x7ffc0000 [ 78.465646][ T5893] netlink: 4 bytes leftover after parsing attributes in process `syz.3.809'. [ 78.498357][ T5899] loop0: detected capacity change from 0 to 512 [ 78.500907][ T5893] team0 (unregistering): Port device team_slave_0 removed [ 78.508146][ T5899] EXT4-fs: test_dummy_encryption option not supported [ 78.525028][ T30] audit: type=1326 audit(1748501354.534:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5887 comm="syz.1.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3e063c5927 code=0x7ffc0000 [ 78.548417][ T30] audit: type=1326 audit(1748501354.534:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5887 comm="syz.1.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3e0636ab39 code=0x7ffc0000 [ 78.571866][ T30] audit: type=1326 audit(1748501354.534:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5887 comm="syz.1.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e063ce969 code=0x7ffc0000 [ 78.596023][ T30] audit: type=1326 audit(1748501354.534:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5887 comm="syz.1.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3e063d0887 code=0x7ffc0000 [ 78.619743][ T5893] team0 (unregistering): Port device team_slave_1 removed [ 78.640652][ T5893] team0 (unregistering): Port device batadv1 removed [ 78.664249][ T5897] wireguard0: entered promiscuous mode [ 78.669910][ T5897] wireguard0: entered allmulticast mode [ 78.730140][ T36] IPVS: starting estimator thread 0... [ 78.822290][ T5910] IPVS: using max 2256 ests per chain, 112800 per kthread [ 79.047005][ T5946] loop2: detected capacity change from 0 to 512 [ 79.058364][ T5946] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 79.142911][ T5962] loop2: detected capacity change from 0 to 128 [ 79.156684][ T5960] netlink: 12 bytes leftover after parsing attributes in process `syz.0.836'. [ 79.173385][ T5962] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 79.195216][ T5962] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 79.237792][ T5962] netlink: 'syz.2.837': attribute type 13 has an invalid length. [ 79.250257][ T5967] netlink: 12 bytes leftover after parsing attributes in process `syz.0.839'. [ 79.341679][ T5962] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.349185][ T5962] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.395606][ T5962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.407523][ T5962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.448713][ T5962] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.458283][ T5962] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.468414][ T5962] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.477794][ T5962] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.712025][ T6012] loop0: detected capacity change from 0 to 2048 [ 79.755859][ T6012] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.774831][ T6025] loop4: detected capacity change from 0 to 512 [ 79.787813][ T6025] journal_path: Non-blockdev passed as './bus' [ 79.794412][ T6025] EXT4-fs: error: could not find journal device path [ 79.823355][ T4924] ================================================================== [ 79.831513][ T4924] BUG: KCSAN: data-race in fsnotify_detach_mark / fsnotify_handle_inode_event [ 79.840439][ T4924] [ 79.842794][ T4924] write to 0xffff888103ccd7c4 of 4 bytes by task 3469 on cpu 0: [ 79.850446][ T4924] fsnotify_detach_mark+0xba/0x160 [ 79.855691][ T4924] fsnotify_destroy_mark+0x70/0x150 [ 79.861014][ T4924] __se_sys_inotify_rm_watch+0xe8/0x170 [ 79.866687][ T4924] __x64_sys_inotify_rm_watch+0x31/0x40 [ 79.872604][ T4924] x64_sys_call+0x1fe9/0x2fb0 [ 79.877390][ T4924] do_syscall_64+0xd2/0x200 [ 79.882026][ T4924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.888947][ T4924] [ 79.893622][ T4924] read to 0xffff888103ccd7c4 of 4 bytes by task 4924 on cpu 1: [ 79.901684][ T4924] fsnotify_handle_inode_event+0x125/0x220 [ 79.907531][ T4924] fsnotify+0x13c9/0x14b0 [ 79.912067][ T4924] __fsnotify_parent+0x2ed/0x330 [ 79.917048][ T4924] __fput+0x1de/0x650 [ 79.921155][ T4924] fput_close_sync+0x6e/0x120 [ 79.925912][ T4924] __x64_sys_close+0x56/0xf0 [ 79.930672][ T4924] x64_sys_call+0x2747/0x2fb0 [ 79.935832][ T4924] do_syscall_64+0xd2/0x200 [ 79.940662][ T4924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.947356][ T4924] [ 79.949820][ T4924] value changed: 0x00000003 -> 0x00000000 [ 79.956065][ T4924] [ 79.958395][ T4924] Reported by Kernel Concurrency Sanitizer on: [ 79.965048][ T4924] CPU: 1 UID: 0 PID: 4924 Comm: syz-executor Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(voluntary) [ 79.977929][ T4924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 79.988718][ T4924] ================================================================== [ 80.018107][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.