last executing test programs: 1.199675735s ago: executing program 0 (id=244): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8601, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r0) 1.131646944s ago: executing program 4 (id=248): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000380)=0x2) ioctl$PPPIOCGIDLE32(r0, 0x8008743f, &(0x7f00000000c0)) 1.094102719s ago: executing program 0 (id=250): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.028497687s ago: executing program 4 (id=254): unshare(0x20000400) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x50) 964.523486ms ago: executing program 4 (id=257): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = epoll_create(0xb) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000005e00)={0x30000014}) 898.699204ms ago: executing program 3 (id=259): bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 892.096825ms ago: executing program 4 (id=260): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x3}, 0x10) write(r0, &(0x7f0000000080)="240000001a007f0214f9f407000904080a000000000000050002000008000f40a600000e", 0x24) 848.015471ms ago: executing program 4 (id=261): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)={0x18, r1, 0x401, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) 843.554791ms ago: executing program 3 (id=263): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@acquire={0x128, 0x17, 0x1, 0x3, 0x0, {{@in=@multicast2, 0x0, 0x32}, @in=@multicast2, {@in=@empty, @in=@dev={0xac, 0x14, 0x14, 0x12}, 0x0, 0x40}, {{@in=@multicast2, @in=@private=0xa010100, 0x0, 0x0, 0x201, 0x3, 0x2, 0x0, 0x20}, {0x8, 0x0, 0x0, 0x0, 0x0, 0xfb1}, {0x1}, 0x4, 0x6e6bb8}, 0xfffffffe}}, 0x128}}, 0x4000) 808.426355ms ago: executing program 4 (id=265): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 779.065939ms ago: executing program 3 (id=266): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='system.posix_acl_default\x00') 594.487303ms ago: executing program 3 (id=273): bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) 481.326318ms ago: executing program 3 (id=278): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) bind$tipc(r0, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x3, {{0x41, 0x3}, 0x4}}, 0x10) 447.951672ms ago: executing program 0 (id=280): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x54, r1, 0x21, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x48fc2df87dabe982}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 393.342609ms ago: executing program 3 (id=281): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) getdents64(r0, 0x0, 0x0) 373.629222ms ago: executing program 0 (id=282): unshare(0x2a020400) r0 = timerfd_create(0x7, 0x80000) poll(&(0x7f0000002680)=[{r0, 0x8100}], 0x1, 0x4) 360.391304ms ago: executing program 1 (id=283): r0 = eventfd2(0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000b80)={0x6000200f}) 328.526498ms ago: executing program 0 (id=285): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1018658, &(0x7f0000000640)={[{@nodioread_nolock}, {@noblock_validity}, {@nombcache}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@debug}, {@noauto_da_alloc}]}, 0x6, 0x61f, &(0x7f0000000b00)="$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") r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 303.292451ms ago: executing program 1 (id=286): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x19, 0x4, 0x4, 0x6}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1, r0}, 0xc) 245.176228ms ago: executing program 1 (id=288): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a90000000060a010400000000000000000a0000010900010073797a310000000064000480500001800b0001007461726765740000400002802c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c7000000000000000000000000000000000800024000000000080001004c454400100001800a000100696e6e65720000000900020073797a32"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 240.042359ms ago: executing program 2 (id=289): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r0, 0x4b4b, &(0x7f0000000480)) 221.975021ms ago: executing program 2 (id=290): r0 = syz_open_dev$usbfs(&(0x7f00000007c0), 0x1ff, 0x2401) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0x441e, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x7, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000700)=ANY=[@ANYBLOB="ee380000140000008f"]) 198.591404ms ago: executing program 1 (id=291): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x58, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5}, {0x5, 0x3, 0x80}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0xc082}, 0xc000) 125.607564ms ago: executing program 1 (id=292): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 125.411234ms ago: executing program 2 (id=293): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000140)={0x0}) 91.838868ms ago: executing program 2 (id=294): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01072bbd7000ffffffff410000000e0001006e65030000000000000000000f0002"], 0x34}}, 0x0) 63.511822ms ago: executing program 2 (id=295): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000028c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002980)={&(0x7f0000002900)={0x44, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x80a0) 41.410925ms ago: executing program 1 (id=296): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x38, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) 39.245305ms ago: executing program 2 (id=297): perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4044d, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x7, 0x9, 0xd, 0xf18, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xbb, 0x10001}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) 0s ago: executing program 0 (id=298): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x43, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x1, @perf_config_ext={0x182, 0x6}, 0x602d, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.168' (ED25519) to the list of known hosts. [ 30.140731][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 30.140748][ T29] audit: type=1400 audit(1768704492.316:70): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 30.169817][ T29] audit: type=1400 audit(1768704492.346:71): avc: denied { mount } for pid=3306 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.172139][ T3306] cgroup: Unknown subsys name 'net' [ 30.197578][ T29] audit: type=1400 audit(1768704492.376:72): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.369263][ T3306] cgroup: Unknown subsys name 'cpuset' [ 30.375485][ T3306] cgroup: Unknown subsys name 'rlimit' [ 30.547124][ T29] audit: type=1400 audit(1768704492.716:73): avc: denied { setattr } for pid=3306 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.570660][ T29] audit: type=1400 audit(1768704492.726:74): avc: denied { create } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.591426][ T29] audit: type=1400 audit(1768704492.726:75): avc: denied { write } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.611876][ T29] audit: type=1400 audit(1768704492.726:76): avc: denied { read } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.638565][ T29] audit: type=1400 audit(1768704492.756:77): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 30.663427][ T29] audit: type=1400 audit(1768704492.756:78): avc: denied { mount } for pid=3306 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 30.686695][ T29] audit: type=1400 audit(1768704492.806:79): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 30.705607][ T3310] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 30.740954][ T3306] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 32.421259][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 32.450657][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 32.496284][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 32.523166][ T3325] chnl_net:caif_netlink_parms(): no params data found [ 32.558632][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 32.571935][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.579148][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.586263][ T3321] bridge_slave_0: entered allmulticast mode [ 32.592924][ T3321] bridge_slave_0: entered promiscuous mode [ 32.611767][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.618861][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.625964][ T3321] bridge_slave_1: entered allmulticast mode [ 32.632483][ T3321] bridge_slave_1: entered promiscuous mode [ 32.676491][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.687844][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.694979][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.702272][ T3318] bridge_slave_0: entered allmulticast mode [ 32.708787][ T3318] bridge_slave_0: entered promiscuous mode [ 32.723190][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.737012][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.744130][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.751382][ T3318] bridge_slave_1: entered allmulticast mode [ 32.757753][ T3318] bridge_slave_1: entered promiscuous mode [ 32.786618][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.793826][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.800985][ T3320] bridge_slave_0: entered allmulticast mode [ 32.807418][ T3320] bridge_slave_0: entered promiscuous mode [ 32.818442][ T3325] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.825572][ T3325] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.832785][ T3325] bridge_slave_0: entered allmulticast mode [ 32.839335][ T3325] bridge_slave_0: entered promiscuous mode [ 32.859947][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.867211][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.874381][ T3320] bridge_slave_1: entered allmulticast mode [ 32.880902][ T3320] bridge_slave_1: entered promiscuous mode [ 32.887757][ T3321] team0: Port device team_slave_0 added [ 32.893406][ T3325] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.900515][ T3325] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.907664][ T3325] bridge_slave_1: entered allmulticast mode [ 32.914195][ T3325] bridge_slave_1: entered promiscuous mode [ 32.921795][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.931104][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.938183][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.945519][ T3319] bridge_slave_0: entered allmulticast mode [ 32.952266][ T3319] bridge_slave_0: entered promiscuous mode [ 32.964389][ T3321] team0: Port device team_slave_1 added [ 32.980247][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.989458][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.996609][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.003830][ T3319] bridge_slave_1: entered allmulticast mode [ 33.010422][ T3319] bridge_slave_1: entered promiscuous mode [ 33.027292][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.037712][ T3325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.062356][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.072728][ T3325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.091277][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.098239][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.124203][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.145241][ T3318] team0: Port device team_slave_0 added [ 33.152074][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.161494][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.168559][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.194671][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.214742][ T3318] team0: Port device team_slave_1 added [ 33.221416][ T3325] team0: Port device team_slave_0 added [ 33.227951][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.241077][ T3320] team0: Port device team_slave_0 added [ 33.252082][ T3325] team0: Port device team_slave_1 added [ 33.268424][ T3320] team0: Port device team_slave_1 added [ 33.293172][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.300236][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.326213][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.337325][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.344320][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.370339][ T3325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.381857][ T3319] team0: Port device team_slave_0 added [ 33.397034][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.404121][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.430087][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.441152][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.448097][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.474042][ T3325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.485786][ T3319] team0: Port device team_slave_1 added [ 33.496209][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.503228][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.529206][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.562346][ T3321] hsr_slave_0: entered promiscuous mode [ 33.568359][ T3321] hsr_slave_1: entered promiscuous mode [ 33.574663][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.581654][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.607705][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.625194][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.632197][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.658142][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.678347][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.685375][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.711422][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.753036][ T3325] hsr_slave_0: entered promiscuous mode [ 33.759014][ T3325] hsr_slave_1: entered promiscuous mode [ 33.764912][ T3325] debugfs: 'hsr0' already exists in 'hsr' [ 33.770727][ T3325] Cannot create hsr debugfs directory [ 33.784034][ T3318] hsr_slave_0: entered promiscuous mode [ 33.790130][ T3318] hsr_slave_1: entered promiscuous mode [ 33.796018][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 33.801782][ T3318] Cannot create hsr debugfs directory [ 33.814214][ T3319] hsr_slave_0: entered promiscuous mode [ 33.820466][ T3319] hsr_slave_1: entered promiscuous mode [ 33.826403][ T3319] debugfs: 'hsr0' already exists in 'hsr' [ 33.832218][ T3319] Cannot create hsr debugfs directory [ 33.849363][ T3320] hsr_slave_0: entered promiscuous mode [ 33.855441][ T3320] hsr_slave_1: entered promiscuous mode [ 33.861455][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 33.867174][ T3320] Cannot create hsr debugfs directory [ 34.095155][ T3321] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 34.103883][ T3321] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 34.115306][ T3321] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 34.124362][ T3321] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 34.147569][ T3318] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 34.156640][ T3318] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 34.165774][ T3318] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 34.174575][ T3318] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 34.206417][ T3325] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.215556][ T3325] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.224446][ T3325] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.235297][ T3325] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.281763][ T3320] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 34.292678][ T3320] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 34.307147][ T3320] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 34.320439][ T3320] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 34.341893][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.354365][ T3319] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.363680][ T3319] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.374714][ T3319] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.383978][ T3319] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.408661][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.426022][ T1602] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.433140][ T1602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.442375][ T1602] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.449537][ T1602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.462729][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.487595][ T3325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.499033][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.519443][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.526574][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.542058][ T3325] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.551355][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.558417][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.584581][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.591690][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.609447][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.616580][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.672496][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.705392][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.722070][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.735529][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.747609][ T1602] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.754823][ T1602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.767835][ T2331] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.774998][ T2331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.786127][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.802279][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.809441][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.824372][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.831514][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.885373][ T3325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.899696][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.914326][ T3320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.073725][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.089149][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.101948][ T3321] veth0_vlan: entered promiscuous mode [ 35.129175][ T3318] veth0_vlan: entered promiscuous mode [ 35.135321][ T3321] veth1_vlan: entered promiscuous mode [ 35.147439][ T3325] veth0_vlan: entered promiscuous mode [ 35.157905][ T3318] veth1_vlan: entered promiscuous mode [ 35.170679][ T3325] veth1_vlan: entered promiscuous mode [ 35.196030][ T3318] veth0_macvtap: entered promiscuous mode [ 35.210006][ T3321] veth0_macvtap: entered promiscuous mode [ 35.218288][ T3318] veth1_macvtap: entered promiscuous mode [ 35.226673][ T3321] veth1_macvtap: entered promiscuous mode [ 35.246594][ T3325] veth0_macvtap: entered promiscuous mode [ 35.254263][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.263985][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.280784][ T93] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.292369][ T3325] veth1_macvtap: entered promiscuous mode [ 35.300279][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.310570][ T93] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.327497][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.341705][ T93] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.353381][ T93] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.366848][ T3319] veth0_vlan: entered promiscuous mode [ 35.374294][ T93] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.389605][ T93] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.400441][ T93] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.415400][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 35.415417][ T29] audit: type=1400 audit(1768704497.586:90): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/root/syzkaller.aM0tZZ/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 35.420290][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.438452][ T29] audit: type=1400 audit(1768704497.596:91): avc: denied { mount } for pid=3318 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 35.450152][ T3319] veth1_vlan: entered promiscuous mode [ 35.453112][ T29] audit: type=1400 audit(1768704497.596:92): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/root/syzkaller.aM0tZZ/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 35.495741][ T3319] veth0_macvtap: entered promiscuous mode [ 35.505470][ T29] audit: type=1400 audit(1768704497.596:93): avc: denied { mount } for pid=3318 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 35.522972][ T3320] veth0_vlan: entered promiscuous mode [ 35.533467][ T29] audit: type=1400 audit(1768704497.596:94): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/root/syzkaller.aM0tZZ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 35.545182][ T3320] veth1_vlan: entered promiscuous mode [ 35.564982][ T29] audit: type=1400 audit(1768704497.596:95): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/root/syzkaller.aM0tZZ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 35.588242][ T3320] veth0_macvtap: entered promiscuous mode [ 35.598223][ T29] audit: type=1400 audit(1768704497.596:96): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 35.629217][ T29] audit: type=1400 audit(1768704497.796:97): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 35.641908][ T93] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.652186][ T29] audit: type=1400 audit(1768704497.796:98): avc: denied { mount } for pid=3318 comm="syz-executor" name="/" dev="gadgetfs" ino=3943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 35.689165][ T3319] veth1_macvtap: entered promiscuous mode [ 35.697090][ T3318] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 35.714526][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.725107][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.737984][ T29] audit: type=1400 audit(1768704497.916:99): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 35.749627][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.781707][ T3320] veth1_macvtap: entered promiscuous mode [ 35.801099][ T2248] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.841560][ T2248] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.873184][ T2248] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.889065][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.913195][ T2248] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.923966][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.950037][ T2248] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.980093][ T2248] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.007643][ T2331] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.058675][ T2331] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.067451][ T2331] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.094332][ T2331] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.118713][ T2331] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.156233][ T2331] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.320154][ T3532] loop2: detected capacity change from 0 to 128 [ 36.359276][ T3532] ======================================================= [ 36.359276][ T3532] WARNING: The mand mount option has been deprecated and [ 36.359276][ T3532] and is ignored by this kernel. Remove the mand [ 36.359276][ T3532] option from the mount to silence this warning. [ 36.359276][ T3532] ======================================================= [ 36.421833][ T3536] loop3: detected capacity change from 0 to 764 [ 36.433779][ T3538] netlink: 'syz.1.22': attribute type 7 has an invalid length. [ 36.492038][ T3540] loop4: detected capacity change from 0 to 1024 [ 36.503399][ T3532] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 36.530730][ T3540] EXT4-fs: Ignoring removed bh option [ 36.541591][ T3540] EXT4-fs: inline encryption not supported [ 36.548147][ T3540] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 36.560652][ T3532] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.588529][ T3540] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 36.648476][ T3540] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 2: comm syz.4.23: lblock 2 mapped to illegal pblock 2 (length 1) [ 36.683311][ T3319] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 36.698686][ T3540] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 48: comm syz.4.23: lblock 0 mapped to illegal pblock 48 (length 1) [ 36.737101][ T3540] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.23: Failed to acquire dquot type 0 [ 36.760295][ T3540] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 36.808774][ T3540] EXT4-fs error (device loop4): ext4_evict_inode:253: inode #11: comm syz.4.23: mark_inode_dirty error [ 36.825561][ T3540] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 36.840947][ T3565] capability: warning: `syz.3.33' uses 32-bit capabilities (legacy support in use) [ 36.852175][ T3540] EXT4-fs (loop4): 1 orphan inode deleted [ 36.858403][ T3540] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.873171][ T37] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 36.889337][ T37] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:2: Failed to release dquot type 0 [ 36.937068][ T3540] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 36.969718][ T3540] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 36.992412][ T3540] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 37.000615][ T3540] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 48: comm syz.4.23: lblock 0 mapped to illegal pblock 48 (length 1) [ 37.042943][ T3540] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 37.116405][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.479376][ T3637] Driver unsupported XDP return value 0 on prog (id 7) dev N/A, expect packet loss! [ 37.497335][ T3639] netlink: 104 bytes leftover after parsing attributes in process `syz.1.68'. [ 37.563601][ T3645] loop2: detected capacity change from 0 to 1024 [ 37.595549][ T3649] loop3: detected capacity change from 0 to 512 [ 37.604095][ T3645] EXT4-fs: inline encryption not supported [ 37.633026][ T3649] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 37.653339][ T3645] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.671073][ T3657] random: crng reseeded on system resumption [ 37.715489][ T3645] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 37.788831][ T3645] EXT4-fs (loop2): Remounting filesystem read-only [ 37.832519][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.850542][ T3666] tipc: Started in network mode [ 37.855720][ T3666] tipc: Node identity ac14140f, cluster identity 4711 [ 37.886978][ T3666] tipc: New replicast peer: 255.255.255.83 [ 37.893045][ T3666] tipc: Enabled bearer , priority 10 [ 37.899155][ T3670] netlink: 'syz.4.83': attribute type 1 has an invalid length. [ 37.906723][ T3670] netlink: 224 bytes leftover after parsing attributes in process `syz.4.83'. [ 38.009871][ T3682] loop2: detected capacity change from 0 to 1024 [ 38.064445][ T3682] EXT4-fs: Ignoring removed nomblk_io_submit option [ 38.075122][ T3688] netlink: 12 bytes leftover after parsing attributes in process `syz.3.90'. [ 38.088478][ T3687] loop0: detected capacity change from 0 to 512 [ 38.109900][ T3682] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.136542][ T3687] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.89: corrupted in-inode xattr: e_value size too large [ 38.191829][ T3687] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.89: couldn't read orphan inode 15 (err -117) [ 38.192745][ C1] hrtimer: interrupt took 48603 ns [ 38.206141][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.218814][ T3687] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.354859][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.395679][ T3713] loop3: detected capacity change from 0 to 512 [ 38.655749][ T3739] loop2: detected capacity change from 0 to 4096 [ 38.679267][ T3739] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.738358][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.755510][ T3758] loop2: detected capacity change from 0 to 128 [ 38.793835][ T3760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.124'. [ 38.806480][ T3762] netlink: 3 bytes leftover after parsing attributes in process `syz.0.125'. [ 38.806550][ T3762] 0ªX¹¦À: renamed from caif0 [ 38.809234][ T3762] 0ªX¹¦À: entered allmulticast mode [ 38.809252][ T3762] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 38.923281][ T3770] syz.0.129: attempt to access beyond end of device [ 38.923281][ T3770] loop0: rw=2049, sector=138, nr_sectors = 4 limit=128 [ 39.000760][ T3782] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 39.016531][ T3505] tipc: Node number set to 2886997007 [ 39.075368][ T3790] netlink: 20 bytes leftover after parsing attributes in process `syz.1.139'. [ 39.162750][ T3798] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 39.170765][ T3798] FAT-fs (loop2): Filesystem has been set read-only [ 39.219286][ T3798] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 39.229471][ T3802] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.282662][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.394830][ T3826] netlink: 10 bytes leftover after parsing attributes in process `syz.1.154'. [ 39.444034][ T3833] xt_hashlimit: size too large, truncated to 1048576 [ 39.469841][ T3837] netlink: 320 bytes leftover after parsing attributes in process `syz.1.160'. [ 39.518851][ T3841] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.532134][ T3841] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 39.565521][ T3841] EXT4-fs (loop1): 1 orphan inode deleted [ 39.571407][ T3841] EXT4-fs (loop1): 1 truncate cleaned up [ 39.612624][ T3841] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.684545][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.712812][ T3860] EXT4-fs: Ignoring removed oldalloc option [ 39.720418][ T3860] EXT4-fs (loop4): 1 truncate cleaned up [ 39.726420][ T3860] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.783816][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.842801][ T3871] netlink: 24 bytes leftover after parsing attributes in process `syz.3.175'. [ 39.900355][ T3880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.179'. [ 39.952649][ T3886] EXT4-fs: Ignoring removed mblk_io_submit option [ 39.967615][ T3886] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 39.977126][ T3886] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 39.986456][ T3886] System zones: 1-12 [ 39.992425][ T3886] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.181: corrupted in-inode xattr: e_value size too large [ 40.006685][ T3889] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.014257][ T3886] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.181: couldn't read orphan inode 15 (err -117) [ 40.026928][ T3886] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.043918][ T3889] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.182: invalid block [ 40.064971][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.078826][ T3889] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.182: invalid indirect mapped block 4294967295 (level 1) [ 40.093072][ T3889] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.182: invalid indirect mapped block 4294967295 (level 1) [ 40.107503][ T3889] EXT4-fs (loop3): 2 truncates cleaned up [ 40.114140][ T3889] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.172748][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.200380][ T3904] netlink: 'syz.0.189': attribute type 12 has an invalid length. [ 40.208278][ T3904] netlink: 'syz.0.189': attribute type 11 has an invalid length. [ 40.386481][ T3934] lo speed is unknown, defaulting to 1000 [ 40.404480][ T3934] lo speed is unknown, defaulting to 1000 [ 40.420555][ T3934] lo speed is unknown, defaulting to 1000 [ 40.426776][ T3934] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 40.434819][ T3934] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 40.448769][ T3934] lo speed is unknown, defaulting to 1000 [ 40.458945][ T3934] lo speed is unknown, defaulting to 1000 [ 40.465193][ T3934] lo speed is unknown, defaulting to 1000 [ 40.471958][ T3934] lo speed is unknown, defaulting to 1000 [ 40.479306][ T3934] lo speed is unknown, defaulting to 1000 [ 40.700019][ T29] kauditd_printk_skb: 162 callbacks suppressed [ 40.700038][ T29] audit: type=1400 audit(1768704502.876:258): avc: denied { write } for pid=3961 comm="syz.4.209" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 40.848059][ T29] audit: type=1400 audit(1768704503.016:259): avc: denied { read } for pid=3971 comm="syz.2.215" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 40.934381][ T29] audit: type=1400 audit(1768704503.096:260): avc: denied { create } for pid=3988 comm="syz.4.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 40.954573][ T29] audit: type=1400 audit(1768704503.106:261): avc: denied { connect } for pid=3988 comm="syz.4.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 40.974972][ T29] audit: type=1400 audit(1768704503.106:262): avc: denied { write } for pid=3988 comm="syz.4.222" path="socket:[5772]" dev="sockfs" ino=5772 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 41.037149][ T29] audit: type=1400 audit(1768704503.206:263): avc: denied { write } for pid=3996 comm="syz.2.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 41.063686][ T3998] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 41.072814][ T3998] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 41.081203][ T3998] EXT4-fs (loop1): SIPHASH is not a valid default hash value [ 41.145330][ T29] audit: type=1400 audit(1768704503.276:264): avc: denied { nlmsg_read } for pid=3999 comm="syz.2.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 41.165991][ T29] audit: type=1400 audit(1768704503.286:265): avc: denied { create } for pid=4001 comm="syz.3.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 41.185487][ T29] audit: type=1400 audit(1768704503.286:266): avc: denied { setopt } for pid=4001 comm="syz.3.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 41.205179][ T29] audit: type=1400 audit(1768704503.286:267): avc: denied { write } for pid=4001 comm="syz.3.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 41.244969][ T4011] hugetlbfs: Bad value 'ß' for mount option 'size' [ 41.244969][ T4011] [ 41.260738][ T4013] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 41.318205][ T4015] EXT4-fs: Ignoring removed orlov option [ 41.364403][ T4015] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.234: corrupted in-inode xattr: bad e_name length [ 41.400917][ T4015] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.234: couldn't read orphan inode 15 (err -117) [ 41.413539][ T4015] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.471855][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.587715][ T4053] tipc: Started in network mode [ 41.587762][ T4053] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 41.587797][ T4053] tipc: Enabled bearer , priority 15 [ 41.636592][ T4059] program syz.2.252 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 41.697363][ T4061] process 'syz.2.255' launched '/dev/fd/3' with NULL argv: empty string added [ 41.886281][ T4086] set_capacity_and_notify: 13 callbacks suppressed [ 41.886316][ T4086] loop3: detected capacity change from 0 to 128 [ 41.923243][ T4086] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 41.939347][ T4086] ext4 filesystem being mounted at /59/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 42.059560][ T3320] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.150070][ T4105] vhci_hcd vhci_hcd.3: invalid port number 9 [ 42.156163][ T4105] vhci_hcd vhci_hcd.3: invalid port number 9 [ 42.191647][ T4110] loop2: detected capacity change from 0 to 512 [ 42.215965][ T4110] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.230468][ T4119] mmap: syz.1.279 (4119) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 42.246370][ T4110] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.264649][ T4119] capability: warning: `syz.1.279' uses deprecated v2 capabilities in a way that may be insecure [ 42.304605][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.334672][ T4127] loop0: detected capacity change from 0 to 1024 [ 42.353625][ T4127] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 42.385183][ T4134] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.397870][ T4127] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8801e019, mo2=0000] [ 42.439550][ T4127] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 2: comm syz.0.285: lblock 2 mapped to illegal pblock 2 (length 1) [ 42.456879][ T4127] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 48: comm syz.0.285: lblock 0 mapped to illegal pblock 48 (length 1) [ 42.471471][ T4127] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.285: Failed to acquire dquot type 0 [ 42.483418][ T4127] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 42.493764][ T4127] EXT4-fs error (device loop0): ext4_evict_inode:253: inode #11: comm syz.0.285: mark_inode_dirty error [ 42.505421][ T4127] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 42.536363][ T4127] EXT4-fs (loop0): 1 orphan inode deleted [ 42.545713][ T4127] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.571750][ T2248] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 42.588615][ T9] tipc: Node number set to 8432298 [ 42.627338][ T2248] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:10: Failed to release dquot type 0 [ 42.654046][ T3325] ================================================================== [ 42.662169][ T3325] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 42.669591][ T3325] [ 42.671943][ T3325] read-write to 0xffff888107bc8fe0 of 8 bytes by interrupt on cpu 0: [ 42.680032][ T3325] __xa_clear_mark+0xf5/0x1e0 [ 42.684739][ T3325] __folio_end_writeback+0xf4/0x360 [ 42.689977][ T3325] folio_end_writeback_no_dropbehind+0x6d/0x1d0 [ 42.696221][ T3325] folio_end_writeback+0x1c/0x70 [ 42.701156][ T3325] end_buffer_async_write+0x156/0x1f0 [ 42.706524][ T3325] end_bio_bh_io_sync+0x79/0xa0 [ 42.711386][ T3325] bio_endio+0x37a/0x410 [ 42.715662][ T3325] blk_update_request+0x338/0x730 [ 42.720702][ T3325] blk_mq_end_request+0x26/0x50 [ 42.723960][ T4158] loop1: detected capacity change from 0 to 512 [ 42.725593][ T3325] lo_complete_rq+0x98/0x140 [ 42.736438][ T3325] blk_done_softirq+0x77/0xb0 [ 42.741151][ T3325] handle_softirqs+0xb9/0x280 [ 42.745858][ T3325] run_ksoftirqd+0x1c/0x30 [ 42.750292][ T3325] smpboot_thread_fn+0x32a/0x510 [ 42.755250][ T3325] kthread+0x488/0x510 [ 42.759350][ T3325] ret_from_fork+0x148/0x280 [ 42.763963][ T3325] ret_from_fork_asm+0x1a/0x30 [ 42.768747][ T3325] [ 42.771074][ T3325] read to 0xffff888107bc8fe0 of 8 bytes by task 3325 on cpu 1: [ 42.778627][ T3325] xas_find_marked+0x213/0x620 [ 42.783412][ T3325] find_get_entry+0x5d/0x380 [ 42.788021][ T3325] filemap_get_folios_tag+0x15f/0x230 [ 42.793414][ T3325] filemap_write_and_wait_range+0x1f5/0x370 [ 42.799319][ T3325] sync_blockdev+0x35/0x50 [ 42.803752][ T3325] sync_filesystem+0x162/0x190 [ 42.808535][ T3325] generic_shutdown_super+0x44/0x210 [ 42.813863][ T3325] kill_block_super+0x2a/0x70 [ 42.818551][ T3325] ext4_kill_sb+0x42/0x80 [ 42.822895][ T3325] deactivate_locked_super+0x75/0x1c0 [ 42.828291][ T3325] deactivate_super+0x97/0xa0 [ 42.832989][ T3325] cleanup_mnt+0x2bb/0x330 [ 42.837430][ T3325] __cleanup_mnt+0x19/0x20 [ 42.841865][ T3325] task_work_run+0x130/0x1a0 [ 42.846489][ T3325] exit_to_user_mode_loop+0x1f7/0x6f0 [ 42.851879][ T3325] do_syscall_64+0x1d3/0x2a0 [ 42.856482][ T3325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.862395][ T3325] [ 42.864733][ T3325] value changed: 0x0000000000030003 -> 0x0000000000000000 [ 42.871848][ T3325] [ 42.874182][ T3325] Reported by Kernel Concurrency Sanitizer on: [ 42.880362][ T3325] CPU: 1 UID: 0 PID: 3325 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 42.890269][ T3325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 42.900359][ T3325] ================================================================== [ 42.915858][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.925667][ T2248] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 42.944838][ T2248] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:10: Failed to release dquot type 0 [ 42.957974][ T4158] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.967311][ T3325] EXT4-fs error (device loop0): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 42.983593][ T3325] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 42.987399][ T4158] ext4 filesystem being mounted at /59/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.993284][ T3325] EXT4-fs error (device loop0): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 43.046630][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.