last executing test programs: 591.97637ms ago: executing program 2 (id=752): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="5400000010001fff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="4000000098d601002c0012800e0001006970366772657461700000001800028014000700000000000000000000ff"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 549.546051ms ago: executing program 2 (id=756): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="290000002000190f00003fffffffda060200007ffde80001dd0048040d000600fe7f00000005000500", 0x29}], 0x1) 478.123612ms ago: executing program 2 (id=763): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f000000ab40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001080)=[{0x18, 0x1, 0x1, "8b3a"}], 0x18}}], 0x1, 0x0) 430.673723ms ago: executing program 2 (id=767): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) lseek(r0, 0xc6c3, 0x0) 376.747173ms ago: executing program 3 (id=772): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 365.928434ms ago: executing program 2 (id=773): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@errors_continue}]}, 0x2, 0x44b, &(0x7f0000000400)="$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") mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x2, 0x0) 350.268904ms ago: executing program 0 (id=775): r0 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) writev(r0, &(0x7f00000015c0)=[{&(0x7f0000000100)="99b5f8e9a73edd3311950b8ef95c07262af2a0755639ae30eb412a9f0a53f0f18138bb52e2853a8a2b5037070c04a82b63d615b0fd8a374677ace0b2a3d2d725a5f47aa749424f7ad9d8e24e0e68ad2a23a9b252b11f29e37cfd84dba3b0232e890342942fb7345e1affb94f4a2ca3a931293ddd1deddf23c3a56fccf00039d1ccba5107c64da87be525297762bedec4", 0x90}, {&(0x7f00000001c0)="0632247199", 0x5}], 0x2) 334.799244ms ago: executing program 3 (id=777): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000500000d00000000fd"], &(0x7f0000001f00)=""/4096, 0x4e, 0x1000, 0x1, 0x0, 0x0, @void, @value}, 0x28) 307.775485ms ago: executing program 0 (id=778): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x200) 290.254905ms ago: executing program 1 (id=780): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) chroot(&(0x7f0000000300)='.\x00') 289.938415ms ago: executing program 3 (id=781): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000500)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) inotify_rm_watch(0xffffffffffffffff, 0x0) 274.817835ms ago: executing program 4 (id=782): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, 0x0, 0x0) 253.890775ms ago: executing program 1 (id=783): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000004a00fb1f00000000000000", @ANYBLOB="0011"], 0x1c}}, 0x0) 247.639115ms ago: executing program 3 (id=784): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x4b4a, 0xffffffff00000001) 232.474946ms ago: executing program 4 (id=785): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000440)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast1, @mcast1={0xff, 0x5}, 0x0, 0x4, 0x0, 0x600, 0xfc8, 0x20c200a2}) 231.925546ms ago: executing program 0 (id=786): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000880)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000000000002000"], 0x24, 0x0) 194.047187ms ago: executing program 0 (id=787): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000001200)={0x0, 0x1, 0x3, 0x1c, 0x87, &(0x7f0000000e00)="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"}) 189.482337ms ago: executing program 1 (id=788): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001340)={&(0x7f0000000080)={0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f00000011c0)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x2b}}}, @hoplimit={{0x14, 0x29, 0x34, 0xa68}}], 0x30}, 0x4008801) 188.959137ms ago: executing program 4 (id=789): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/25, 0x19}, {0x0, 0xfe43}], 0x2, 0x0, 0x0) 185.202007ms ago: executing program 3 (id=790): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) mount_setattr(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080), 0x81) 140.488128ms ago: executing program 1 (id=791): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x13, 0x0, 0x0) 122.043228ms ago: executing program 0 (id=792): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x3, 0x0, 0x2f, 0x0, @broadcast, @rand_addr=0x80001}}}}) 112.928837ms ago: executing program 3 (id=793): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100090808004149004001040800", 0x58}], 0x1) 112.353377ms ago: executing program 4 (id=794): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x11, 0x0, 0x20040002}}) 68.662809ms ago: executing program 1 (id=795): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@loopback, 0x0, 0x0, 0x1, 0x1, 0x4000}, 0x20) 66.915658ms ago: executing program 0 (id=796): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x13) 54.644938ms ago: executing program 2 (id=797): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_delneigh={0x2c, 0x1e, 0x1, 0x0, 0x4, {0x2}, [@NDA_VNI={0x8, 0x7, 0xf11}, @NDA_DST_IPV4={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x2c}}, 0x0) 35.672369ms ago: executing program 4 (id=798): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0x42, 0x4, 0x370, 0xffffffff, 0x0, 0xf8, 0x1b8, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x40000, 0x0, 0x2, 0x0, 0xc}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x9}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) 5.525889ms ago: executing program 1 (id=799): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=@getstats={0x1c, 0x5e, 0x309}, 0x1c}}, 0x0) 0s ago: executing program 4 (id=800): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.120' (ED25519) to the list of known hosts. [ 26.805356][ T28] audit: type=1400 audit(1750124196.558:64): avc: denied { mounton } for pid=275 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.806688][ T275] cgroup: Unknown subsys name 'net' [ 26.828056][ T28] audit: type=1400 audit(1750124196.558:65): avc: denied { mount } for pid=275 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.855390][ T28] audit: type=1400 audit(1750124196.588:66): avc: denied { unmount } for pid=275 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.855697][ T275] cgroup: Unknown subsys name 'devices' [ 26.995635][ T275] cgroup: Unknown subsys name 'hugetlb' [ 27.001411][ T275] cgroup: Unknown subsys name 'rlimit' [ 27.107461][ T28] audit: type=1400 audit(1750124196.858:67): avc: denied { setattr } for pid=275 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.130861][ T28] audit: type=1400 audit(1750124196.858:68): avc: denied { mounton } for pid=275 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.150603][ T277] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.155899][ T28] audit: type=1400 audit(1750124196.858:69): avc: denied { mount } for pid=275 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 27.187926][ T28] audit: type=1400 audit(1750124196.918:70): avc: denied { relabelto } for pid=277 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.211826][ T275] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.213374][ T28] audit: type=1400 audit(1750124196.918:71): avc: denied { write } for pid=277 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.247696][ T28] audit: type=1400 audit(1750124196.958:72): avc: denied { read } for pid=275 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.273300][ T28] audit: type=1400 audit(1750124196.958:73): avc: denied { open } for pid=275 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.065933][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.073016][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.080552][ T284] device bridge_slave_0 entered promiscuous mode [ 28.091506][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.098760][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.106347][ T284] device bridge_slave_1 entered promiscuous mode [ 28.113438][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.120907][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.128930][ T285] device bridge_slave_0 entered promiscuous mode [ 28.151628][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.158860][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.166550][ T285] device bridge_slave_1 entered promiscuous mode [ 28.176419][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.183675][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.191104][ T283] device bridge_slave_0 entered promiscuous mode [ 28.198864][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.205950][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.213570][ T283] device bridge_slave_1 entered promiscuous mode [ 28.237992][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.245086][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.252564][ T286] device bridge_slave_0 entered promiscuous mode [ 28.277096][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.284241][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.291687][ T286] device bridge_slave_1 entered promiscuous mode [ 28.389751][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.397121][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.404831][ T287] device bridge_slave_0 entered promiscuous mode [ 28.426379][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.433809][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.441706][ T287] device bridge_slave_1 entered promiscuous mode [ 28.548655][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.555752][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.563050][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.570121][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.596543][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.603628][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.610907][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.617984][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.637222][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.644319][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.651625][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.658681][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.671534][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.678619][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.685917][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.692966][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.755632][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.763766][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.770982][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.778638][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.786043][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.793537][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.800811][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.808208][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.815587][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.838458][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.846780][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.853834][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.861280][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.869722][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.876803][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.884309][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.891736][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.899381][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.907622][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.914699][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.922172][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.930642][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.937692][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.964093][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.972332][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.980434][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.988985][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.997465][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.004545][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.012123][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.020401][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.027451][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.062327][ T283] device veth0_vlan entered promiscuous mode [ 29.071220][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 29.079637][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.088029][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 29.095804][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.103347][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 29.111402][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.119546][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 29.128232][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.136700][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.143765][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.151330][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 29.159745][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.167949][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.175007][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.182650][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.191280][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.199830][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 29.208239][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.216383][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.224383][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.232541][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 29.241003][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.249186][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.256952][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.276808][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.285379][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.294035][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.302257][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.317238][ T283] device veth1_macvtap entered promiscuous mode [ 29.325184][ T285] device veth0_vlan entered promiscuous mode [ 29.332409][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 29.340584][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 29.348951][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.357418][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 29.365855][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.374145][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.382290][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.390721][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.398382][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.423066][ T285] device veth1_macvtap entered promiscuous mode [ 29.434654][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.443420][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.452025][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.460704][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.469321][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 29.477399][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.485689][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.494521][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.502868][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.511455][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.519224][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.533730][ T284] device veth0_vlan entered promiscuous mode [ 29.540293][ T286] device veth0_vlan entered promiscuous mode [ 29.551211][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.560009][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.568917][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.577596][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.587248][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.595561][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.603862][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.612138][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.620845][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.628513][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.637033][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.646139][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.663124][ T286] device veth1_macvtap entered promiscuous mode [ 29.673661][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.682084][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.690495][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.704185][ T284] device veth1_macvtap entered promiscuous mode [ 29.721181][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.729668][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.738390][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.747060][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.755738][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.764381][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.772744][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.781114][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.801588][ T283] request_module fs-gadgetfs succeeded, but still no fs? [ 29.805020][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 29.816822][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.824721][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 29.833598][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.841844][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.848973][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.856718][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 29.865310][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.873612][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.880827][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.888799][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 29.940148][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.960452][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.007917][ T316] capability: warning: `syz.3.4' uses 32-bit capabilities (legacy support in use) [ 30.026664][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.039331][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.047940][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.056286][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.082076][ T287] device veth0_vlan entered promiscuous mode [ 30.119306][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 30.140333][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.166184][ T287] device veth1_macvtap entered promiscuous mode [ 30.191971][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 30.199878][ T335] netlink: 44 bytes leftover after parsing attributes in process `syz.3.15'. [ 30.211157][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 30.230407][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.259081][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 30.287159][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.479675][ T377] loop2: detected capacity change from 0 to 256 [ 30.489037][ T377] exfat: Deprecated parameter 'utf8' [ 30.498975][ T377] exfat: Deprecated parameter 'namecase' [ 30.517786][ T377] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 30.765353][ T385] loop1: detected capacity change from 0 to 40427 [ 30.772677][ T385] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 30.780777][ T385] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 30.821243][ T385] F2FS-fs (loop1): Found nat_bits in checkpoint [ 30.879645][ T385] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 30.889941][ T385] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 30.923636][ T385] syz.1.37: attempt to access beyond end of device [ 30.923636][ T385] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 31.111697][ T433] loop3: detected capacity change from 0 to 256 [ 31.135657][ T433] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 31.287830][ T441] loop3: detected capacity change from 0 to 1024 [ 31.332765][ T431] loop1: detected capacity change from 0 to 40427 [ 31.342162][ T441] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 31.351113][ T431] F2FS-fs (loop1): fault_injection options not supported [ 31.364486][ T431] F2FS-fs (loop1): invalid crc value [ 31.382601][ T284] EXT4-fs (loop3): unmounting filesystem. [ 31.389647][ T431] F2FS-fs (loop1): Found nat_bits in checkpoint [ 31.454836][ T451] netlink: 9 bytes leftover after parsing attributes in process `syz.3.63'. [ 31.466784][ T451] device gretap0 entered promiscuous mode [ 31.476969][ T431] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 31.477107][ T451] netlink: 5 bytes leftover after parsing attributes in process `syz.3.63'. [ 31.494089][ T451] 0ªX¹¦D: renamed from gretap0 [ 31.514185][ T451] device 30ªX¹¦D left promiscuous mode [ 31.521734][ T451] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 31.567447][ T451] syz.3.63 (451) used greatest stack depth: 22176 bytes left [ 31.569299][ T283] syz-executor: attempt to access beyond end of device [ 31.569299][ T283] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 31.612785][ T454] loop3: detected capacity change from 0 to 8192 [ 31.632822][ T454] ======================================================= [ 31.632822][ T454] WARNING: The mand mount option has been deprecated and [ 31.632822][ T454] and is ignored by this kernel. Remove the mand [ 31.632822][ T454] option from the mount to silence this warning. [ 31.632822][ T454] ======================================================= [ 31.681239][ T454] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1044) [ 31.690320][ T454] FAT-fs (loop3): Filesystem has been set read-only [ 31.829046][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 31.829061][ T28] audit: type=1400 audit(1750124201.578:126): avc: denied { write } for pid=465 comm="syz.1.64" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.865510][ T28] audit: type=1400 audit(1750124201.578:127): avc: denied { ioctl } for pid=465 comm="syz.1.64" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.907846][ T429] loop2: detected capacity change from 0 to 131072 [ 31.931616][ T429] F2FS-fs (loop2): invalid crc value [ 31.956748][ T429] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 31.999075][ T429] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b [ 32.004669][ T28] audit: type=1326 audit(1750124201.748:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=479 comm="syz.3.75" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fae3438e929 code=0x0 [ 32.039962][ T28] audit: type=1400 audit(1750124201.788:129): avc: denied { write } for pid=428 comm="syz.2.55" name="fib_trie" dev="proc" ino=4026532637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 32.133667][ T24] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 32.324032][ T24] usb 2-1: not running at top speed; connect to a high speed hub [ 32.332729][ T24] usb 2-1: config 95 has an invalid interface number: 1 but max is 0 [ 32.344072][ T498] loop4: detected capacity change from 0 to 512 [ 32.353661][ T498] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 32.364011][ T498] EXT4-fs (loop4): orphan cleanup on readonly fs [ 32.370860][ T498] EXT4-fs warning (device loop4): ext4_enable_quotas:7041: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 32.377281][ T24] usb 2-1: config 95 has no interface number 0 [ 32.385882][ T498] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 32.394417][ T24] usb 2-1: config 95 interface 1 has no altsetting 0 [ 32.398943][ T498] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #13: comm syz.4.83: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 32.407735][ T24] usb 2-1: string descriptor 0 read error: -22 [ 32.423330][ T498] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.83: couldn't read orphan inode 13 (err -117) [ 32.430768][ T24] usb 2-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 32.450223][ T498] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 32.468422][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.477080][ T287] EXT4-fs (loop4): unmounting filesystem. [ 32.520706][ T28] audit: type=1400 audit(1750124202.268:130): avc: denied { prog_load } for pid=507 comm="syz.4.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 32.539748][ T28] audit: type=1400 audit(1750124202.268:131): avc: denied { perfmon } for pid=507 comm="syz.4.87" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 32.560670][ T28] audit: type=1400 audit(1750124202.268:132): avc: denied { prog_run } for pid=507 comm="syz.4.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 32.651335][ T518] loop2: detected capacity change from 0 to 512 [ 32.678456][ T518] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 32.694505][ T518] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 32.695500][ T24] usb 2-1: USB disconnect, device number 2 [ 32.730443][ T28] audit: type=1400 audit(1750124202.478:133): avc: denied { setattr } for pid=517 comm="syz.2.91" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 32.755536][ T518] EXT4-fs error (device loop2): ext4_do_update_inode:5255: inode #2: comm syz.2.91: corrupted inode contents [ 32.767553][ T518] EXT4-fs error (device loop2): ext4_dirty_inode:6120: inode #2: comm syz.2.91: mark_inode_dirty error [ 32.779043][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 32.787997][ T518] EXT4-fs error (device loop2): ext4_do_update_inode:5255: inode #2: comm syz.2.91: corrupted inode contents [ 32.819788][ T28] audit: type=1400 audit(1750124202.568:134): avc: denied { create } for pid=517 comm="syz.2.91" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 32.824489][ T525] EXT4-fs error (device loop2): ext4_do_update_inode:5255: inode #2: comm syz.2.91: corrupted inode contents [ 32.899614][ T525] EXT4-fs error (device loop2): ext4_dirty_inode:6120: inode #2: comm syz.2.91: mark_inode_dirty error [ 32.916825][ T525] EXT4-fs error (device loop2): ext4_do_update_inode:5255: inode #2: comm syz.2.91: corrupted inode contents [ 32.931038][ T415] udevd[415]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:95.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 32.938693][ T525] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.91: mark_inode_dirty error [ 32.979928][ T538] Driver unsupported XDP return value 0 on prog (id 2) dev N/A, expect packet loss! [ 33.001727][ T525] EXT4-fs error (device loop2): ext4_do_update_inode:5255: inode #2: comm syz.2.91: corrupted inode contents [ 33.023452][ T525] EXT4-fs error (device loop2): ext4_dirty_inode:6120: inode #2: comm syz.2.91: mark_inode_dirty error [ 33.064847][ T28] audit: type=1400 audit(1750124202.818:135): avc: denied { read } for pid=542 comm="syz.0.102" dev="nsfs" ino=4026532461 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 33.145275][ T286] EXT4-fs (loop2): unmounting filesystem. [ 33.195645][ T560] netlink: 'syz.4.111': attribute type 46 has an invalid length. [ 33.358596][ T584] netlink: 4 bytes leftover after parsing attributes in process `syz.4.122'. [ 33.477223][ T594] loop3: detected capacity change from 0 to 256 [ 33.714526][ T583] loop1: detected capacity change from 0 to 40427 [ 33.848088][ T616] loop2: detected capacity change from 0 to 40427 [ 33.856598][ T583] F2FS-fs (loop1): Found nat_bits in checkpoint [ 33.866510][ T616] F2FS-fs (loop2): invalid crc value [ 33.904933][ T616] F2FS-fs (loop2): Found nat_bits in checkpoint [ 33.939607][ T583] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 33.948456][ T616] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 34.022159][ T283] syz-executor: attempt to access beyond end of device [ 34.022159][ T283] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 34.112691][ T654] loop0: detected capacity change from 0 to 256 [ 34.134725][ T654] exfat: Deprecated parameter 'namecase' [ 34.162478][ T654] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x6863165b, utbl_chksum : 0xe619d30d) [ 34.220181][ T662] mmap: syz.1.151 (662) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 34.357693][ T683] loop2: detected capacity change from 0 to 256 [ 34.383492][ T681] loop1: detected capacity change from 0 to 2048 [ 34.441692][ T681] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 34.453759][ T681] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.482886][ T681] EXT4-fs (loop1): Online resizing not supported with bigalloc [ 34.545211][ T704] netlink: 'syz.4.176': attribute type 30 has an invalid length. [ 34.554390][ T283] EXT4-fs (loop1): unmounting filesystem. [ 34.717814][ T736] Zero length message leads to an empty skb [ 34.791699][ T751] loop4: detected capacity change from 0 to 256 [ 34.802924][ T749] loop2: detected capacity change from 0 to 512 [ 34.820589][ T751] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x8c82013b, utbl_chksum : 0xe619d30d) [ 34.837456][ T749] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 34.886220][ T749] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 34.896618][ T749] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.920978][ T759] loop3: detected capacity change from 0 to 1024 [ 34.945767][ T286] EXT4-fs (loop2): unmounting filesystem. [ 34.962884][ T772] syz.1.207 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 34.966543][ T759] EXT4-fs: Ignoring removed nobh option [ 34.979045][ T759] EXT4-fs: Ignoring removed bh option [ 34.985018][ T759] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 35.011772][ T775] capability: warning: `syz.2.209' uses deprecated v2 capabilities in a way that may be insecure [ 35.044655][ T759] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 35.187410][ T759] syz.3.202 (759) used greatest stack depth: 22112 bytes left [ 35.196420][ T284] EXT4-fs (loop3): unmounting filesystem. [ 35.219128][ T773] loop0: detected capacity change from 0 to 40427 [ 35.234406][ T773] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 35.251603][ T773] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 35.273996][ T773] F2FS-fs (loop0): invalid crc value [ 35.300862][ T800] loop3: detected capacity change from 0 to 1024 [ 35.329181][ T773] F2FS-fs (loop0): Found nat_bits in checkpoint [ 35.337476][ T800] EXT4-fs: Ignoring removed nobh option [ 35.343314][ T800] EXT4-fs: Ignoring removed bh option [ 35.372425][ T800] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 35.404905][ T773] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 35.412501][ T773] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 35.442772][ T800] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 35.477293][ T383] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 35.487444][ T383] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 35.537979][ T284] EXT4-fs (loop3): unmounting filesystem. [ 35.676440][ T849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.244'. [ 35.691675][ T853] loop1: detected capacity change from 0 to 256 [ 35.710332][ T853] exfat: Deprecated parameter 'namecase' [ 35.740874][ T853] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x8ce3369d, utbl_chksum : 0xe619d30d) [ 35.981000][ T900] loop4: detected capacity change from 0 to 16 [ 36.000177][ T900] erofs: (device loop4): mounted with root inode @ nid 36. [ 36.012313][ T900] process 'syz.4.267' launched './file1' with NULL argv: empty string added [ 36.027811][ T900] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=86 [ 36.037357][ T900] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=86 [ 36.047133][ T900] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=86 [ 36.056703][ T900] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=86 [ 36.066866][ T900] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=86 [ 36.199691][ T887] loop2: detected capacity change from 0 to 40427 [ 36.214049][ T887] F2FS-fs (loop2): fault_injection options not supported [ 36.227303][ T887] F2FS-fs (loop2): Image doesn't support compression [ 36.242649][ T887] F2FS-fs (loop2): invalid crc value [ 36.275874][ T887] F2FS-fs (loop2): Found nat_bits in checkpoint [ 36.354532][ T887] F2FS-fs (loop2): Start checkpoint disabled! [ 36.365560][ T887] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 36.397519][ T940] loop4: detected capacity change from 0 to 1024 [ 36.419324][ T940] EXT4-fs: Ignoring removed orlov option [ 36.443273][ T940] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 36.463482][ T940] EXT4-fs (loop4): invalid journal inode [ 36.474780][ T940] EXT4-fs (loop4): can't get journal size [ 36.492373][ T940] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 36.521782][ T287] EXT4-fs (loop4): unmounting filesystem. [ 36.643716][ T962] loop3: detected capacity change from 0 to 256 [ 36.659943][ T962] exfat: Deprecated parameter 'namecase' [ 36.705372][ T962] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 36.843073][ T28] kauditd_printk_skb: 59 callbacks suppressed [ 36.843090][ T28] audit: type=1326 audit(1750124206.588:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=995 comm="syz.0.311" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3bf698e929 code=0x0 [ 36.880108][ T994] loop3: detected capacity change from 0 to 512 [ 36.888402][ T994] EXT4-fs (loop3): first meta block group too large: 393216 (group descriptor block count 1) [ 36.911821][ T1001] IPv6: sit1: Disabled Multicast RS [ 36.944119][ T28] audit: type=1400 audit(1750124206.698:196): avc: denied { create } for pid=1004 comm="syz.1.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 36.964907][ T1005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.315'. [ 36.995508][ T1005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.315'. [ 37.002186][ T28] audit: type=1400 audit(1750124206.698:197): avc: denied { write } for pid=1004 comm="syz.1.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 37.065059][ T28] audit: type=1400 audit(1750124206.778:198): avc: denied { setopt } for pid=1010 comm="syz.3.318" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.181762][ T28] audit: type=1400 audit(1750124206.928:199): avc: denied { read write } for pid=1027 comm="syz.4.326" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.212091][ T28] audit: type=1400 audit(1750124206.958:200): avc: denied { open } for pid=1027 comm="syz.4.326" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.236951][ T28] audit: type=1400 audit(1750124206.958:201): avc: denied { ioctl } for pid=1027 comm="syz.4.326" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.285004][ T28] audit: type=1400 audit(1750124207.028:202): avc: denied { write } for pid=1032 comm="syz.2.328" name="001" dev="devtmpfs" ino=185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 37.370740][ T1015] loop1: detected capacity change from 0 to 40427 [ 37.407755][ T1015] F2FS-fs (loop1): Found nat_bits in checkpoint [ 37.461816][ T28] audit: type=1400 audit(1750124207.208:203): avc: denied { getopt } for pid=1057 comm="syz.4.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 37.510236][ T28] audit: type=1400 audit(1750124207.248:204): avc: denied { read } for pid=1061 comm="syz.4.341" name="rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 37.546256][ T1068] loop4: detected capacity change from 0 to 512 [ 37.548598][ T1015] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 37.609174][ T1068] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 37.626030][ T1068] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.636913][ T283] syz-executor: attempt to access beyond end of device [ 37.636913][ T283] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 37.650826][ T1068] EXT4-fs error (device loop4): ext4_acquire_dquot:6789: comm syz.4.345: Failed to acquire dquot type 0 [ 37.686203][ T287] EXT4-fs (loop4): unmounting filesystem. [ 37.807892][ T1099] netlink: 32 bytes leftover after parsing attributes in process `syz.2.357'. [ 37.838485][ T1103] netlink: 23 bytes leftover after parsing attributes in process `syz.2.359'. [ 37.896139][ T1096] loop4: detected capacity change from 0 to 8192 [ 37.947655][ T1121] netlink: 'syz.0.367': attribute type 50 has an invalid length. [ 37.964864][ T1096] loop4: p1 p2 p4 [ 37.968720][ T1096] loop4: p1 size 108920841 extends beyond EOD, truncated [ 37.996161][ T910] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 38.004611][ T1096] loop4: p2 start 861536256 is beyond EOD, truncated [ 38.012780][ T1131] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 38.020136][ T1096] loop4: p4 size 65536 extends beyond EOD, truncated [ 38.063398][ T1134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.375'. [ 38.120546][ T523] udevd[523]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 38.131632][ T415] udevd[415]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 38.190636][ T1155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.383'. [ 38.247362][ T1159] loop2: detected capacity change from 0 to 1024 [ 38.265430][ T1164] loop4: detected capacity change from 0 to 512 [ 38.268497][ T1159] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 38.276671][ T1164] EXT4-fs: Ignoring removed i_version option [ 38.291953][ T1164] EXT4-fs: Ignoring removed mblk_io_submit option [ 38.310519][ T1164] EXT4-fs: Ignoring removed oldalloc option [ 38.316786][ T1159] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 38.345630][ T1164] EXT4-fs (loop4): orphan cleanup on readonly fs [ 38.359016][ T1164] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.388: inode #13: comm syz.4.388: iget: illegal inode # [ 38.373402][ T1159] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #3: comm syz.2.385: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 2, max 15(4), depth 0(0) [ 38.384316][ T1164] EXT4-fs (loop4): Remounting filesystem read-only [ 38.397608][ T1159] EXT4-fs (loop2): no journal found [ 38.402887][ T1159] EXT4-fs (loop2): can't get journal size [ 38.426321][ T1178] device vlan3 entered promiscuous mode [ 38.431924][ T1178] device bridge0 entered promiscuous mode [ 38.438107][ T1164] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.388: couldn't read orphan inode 13 (err -117) [ 38.452385][ T1164] EXT4-fs (loop4): Remounting filesystem read-only [ 38.452788][ T1159] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 38.469648][ T1179] loop1: detected capacity change from 0 to 256 [ 38.477310][ T1164] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 38.529687][ T1159] EXT4-fs (loop2): unmounting filesystem. [ 38.574083][ T287] EXT4-fs (loop4): unmounting filesystem. [ 38.656219][ T1201] loop4: detected capacity change from 0 to 512 [ 38.663153][ T1201] EXT4-fs: Ignoring removed mblk_io_submit option [ 38.715117][ T1210] loop1: detected capacity change from 0 to 512 [ 38.749467][ T1201] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 38.759244][ T1210] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 38.773342][ T1210] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.808766][ T287] EXT4-fs (loop4): unmounting filesystem. [ 38.809089][ T1223] loop2: detected capacity change from 0 to 512 [ 38.847948][ T1223] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 38.859445][ T283] EXT4-fs (loop1): unmounting filesystem. [ 38.875321][ T1223] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c01c, mo2=0002] [ 38.883693][ T1223] System zones: 1-12 [ 38.888388][ T1223] EXT4-fs (loop2): Can't support bigalloc feature without extents feature [ 38.888388][ T1223] [ 38.905085][ T1223] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 38.946266][ T1223] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 39.032303][ T286] EXT4-fs (loop2): unmounting filesystem. [ 39.123145][ T1269] netlink: 8 bytes leftover after parsing attributes in process `syz.3.437'. [ 39.138932][ T1274] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1006 sclass=netlink_audit_socket pid=1274 comm=syz.2.439 [ 39.211120][ T1287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.444'. [ 39.327589][ T1308] netlink: 'syz.1.457': attribute type 27 has an invalid length. [ 39.394129][ T1320] netlink: 'syz.0.459': attribute type 49 has an invalid length. [ 39.586211][ T1361] netlink: 'syz.0.481': attribute type 9 has an invalid length. [ 39.603064][ T1361] netlink: 92 bytes leftover after parsing attributes in process `syz.0.481'. [ 39.617264][ T1363] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 39.721388][ T1384] netlink: 'syz.2.493': attribute type 3 has an invalid length. [ 39.786383][ T1390] loop4: detected capacity change from 0 to 512 [ 39.814208][ T1390] EXT4-fs: Ignoring removed nomblk_io_submit option [ 39.839835][ T1390] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.881927][ T1390] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 39.903988][ T1413] netlink: 'syz.0.506': attribute type 29 has an invalid length. [ 39.911921][ T1413] netlink: 'syz.0.506': attribute type 29 has an invalid length. [ 39.935394][ T1390] EXT4-fs (loop4): 1 truncate cleaned up [ 39.957106][ T1390] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 40.037009][ T287] EXT4-fs (loop4): unmounting filesystem. [ 40.045566][ T1438] x_tables: unsorted underflow at hook 2 [ 40.221705][ T1473] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 40.403443][ T60] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 40.604555][ T60] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 40.633273][ T60] usb 1-1: config 0 interface 0 has no altsetting 0 [ 40.660588][ T60] usb 1-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 40.690860][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.715222][ T60] usb 1-1: config 0 descriptor?? [ 40.720656][ T1456] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 40.847833][ T1563] x_tables: duplicate entry at hook 3 [ 40.901893][ T1567] xt_SECMARK: invalid security context 'unconfined' [ 40.936626][ T60] usbhid 1-1:0.0: can't add hid device: -71 [ 40.942647][ T60] usbhid: probe of 1-1:0.0 failed with error -71 [ 40.971124][ T60] usb 1-1: USB disconnect, device number 2 [ 40.977174][ T1574] xt_limit: Overflow, try lower: 65536/2147483648 [ 41.568373][ T1638] device vti0 entered promiscuous mode [ 41.599154][ T1641] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 41.772069][ T1661] __nla_validate_parse: 5 callbacks suppressed [ 41.772086][ T1661] netlink: 20 bytes leftover after parsing attributes in process `syz.4.630'. [ 41.782655][ T1665] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 41.808032][ T1661] netlink: 20 bytes leftover after parsing attributes in process `syz.4.630'. [ 41.843302][ T1669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.633'. [ 41.895435][ T1679] xt_hashlimit: overflow, try lower: 9223372036854775807/9 [ 41.957766][ T1685] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 41.974043][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 41.981813][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 41.981829][ T28] audit: type=1400 audit(2000000000.530:228): avc: denied { read } for pid=1688 comm="syz.1.643" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 42.028182][ T28] audit: type=1400 audit(2000000000.590:229): avc: denied { associate } for pid=1696 comm="syz.1.646" name="memory.swap.current" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 42.067053][ T1685] syz.0.641 (1685) used greatest stack depth: 21408 bytes left [ 42.207309][ T1725] xt_connbytes: Forcing CT accounting to be enabled [ 42.243268][ T1725] xt_nat: multiple ranges no longer supported [ 42.256508][ T1733] netlink: 'syz.1.665': attribute type 15 has an invalid length. [ 42.353632][ T28] audit: type=1400 audit(2000000000.930:230): avc: granted { setsecparam } for pid=1747 comm="syz.0.673" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 42.372950][ T1745] SELinux: Context system_u:object_r:inetd_log_t:s0 is not valid (left unmapped). [ 42.391970][ T1749] xt_CT: You must specify a L4 protocol and not use inversions on it [ 42.400172][ T28] audit: type=1400 audit(2000000000.950:231): avc: denied { relabelfrom } for pid=1743 comm="syz.4.668" name="" dev="pipefs" ino=13221 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 42.450360][ T28] audit: type=1400 audit(2000000001.010:232): avc: denied { relabelto } for pid=1743 comm="syz.4.668" name="" dev="pipefs" ino=13221 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:inetd_log_t:s0" [ 42.530944][ T1766] netlink: 8 bytes leftover after parsing attributes in process `syz.4.681'. [ 42.733280][ T1794] x_tables: unsorted entry at hook 2 [ 42.767616][ T1795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.694'. [ 42.991579][ T28] audit: type=1400 audit(2000000001.560:233): avc: denied { execute } for pid=1839 comm="syz.4.718" name="file0" dev="tmpfs" ino=699 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 43.152347][ T1871] netlink: 'syz.2.734': attribute type 5 has an invalid length. [ 43.232573][ T28] audit: type=1326 audit(2000000001.800:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1880 comm="syz.4.738" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f54c6d8e929 code=0x0 [ 43.333234][ T1897] device lo entered promiscuous mode [ 43.390839][ T1908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.752'. [ 43.454578][ T1916] netlink: 'syz.2.756': attribute type 6 has an invalid length. [ 43.584184][ T1944] binfmt_misc: register: failed to install interpreter file ./file0 [ 43.627936][ T1949] loop2: detected capacity change from 0 to 512 [ 43.671099][ T1949] EXT4-fs: Ignoring removed oldalloc option [ 43.762157][ T1949] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.773: Parent and EA inode have the same ino 15 [ 43.801178][ T1949] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 43.815199][ T1949] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.773: Parent and EA inode have the same ino 15 [ 43.832399][ T1949] EXT4-fs (loop2): 1 orphan inode deleted [ 43.838418][ T1949] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 43.877027][ T28] audit: type=1400 audit(2000000002.450:235): avc: denied { mounton } for pid=1948 comm="syz.2.773" path="/183/file0/file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 43.913589][ T286] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 43.945507][ T28] audit: type=1400 audit(2000000002.520:236): avc: denied { remove_name } for pid=286 comm="syz-executor" name="lost+found" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 43.970096][ T28] audit: type=1400 audit(2000000002.540:237): avc: denied { unlink } for pid=286 comm="syz-executor" name="lost+found" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 43.970318][ T286] ------------[ cut here ]------------ [ 43.998941][ T286] kernel BUG at fs/namei.c:2954! [ 44.008792][ T286] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 44.014917][ T286] CPU: 0 PID: 286 Comm: syz-executor Not tainted 6.1.138-syzkaller-00009-g6246d345f550 #0 [ 44.024833][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 44.034912][ T286] RIP: 0010:may_delete+0x701/0x710 [ 44.040072][ T286] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 84 fe ff ff 48 89 df e8 a0 16 f4 ff e9 77 fe ff ff e8 86 be af ff 0f 0b e8 7f be af ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 41 56 53 [ 44.059717][ T286] RSP: 0018:ffffc9000daa7c20 EFLAGS: 00010293 [ 44.065817][ T286] RAX: ffffffff81c03291 RBX: ffff8881063ab330 RCX: ffff888120052880 [ 44.073838][ T286] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 44.081858][ T286] RBP: ffffc9000daa7c88 R08: 0000000000000004 R09: 0000000000000003 [ 44.089945][ T286] R10: fffff52001b54f64 R11: 1ffff92001b54f64 R12: dffffc0000000000 [ 44.097955][ T286] R13: 0000000000000001 R14: ffff88810e963f10 R15: 1ffff11020c75666 [ 44.105974][ T286] FS: 00005555736e6500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 44.114933][ T286] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 44.121555][ T286] CR2: 0000555573711528 CR3: 00000001307b6000 CR4: 00000000003506b0 [ 44.129557][ T286] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 44.137561][ T286] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 44.145559][ T286] Call Trace: [ 44.148865][ T286] [ 44.151821][ T286] vfs_rmdir+0x32/0x500 [ 44.156010][ T286] incfs_kill_sb+0x105/0x220 [ 44.160637][ T286] deactivate_locked_super+0xb5/0x120 [ 44.166054][ T286] deactivate_super+0xaf/0xe0 [ 44.170769][ T286] cleanup_mnt+0x45f/0x4e0 [ 44.175225][ T286] __cleanup_mnt+0x19/0x20 [ 44.179696][ T286] task_work_run+0x1db/0x240 [ 44.184319][ T286] ? __cfi_task_work_run+0x10/0x10 [ 44.189461][ T286] ? __x64_sys_umount+0x125/0x160 [ 44.194520][ T286] ? __cfi___x64_sys_umount+0x10/0x10 [ 44.199927][ T286] exit_to_user_mode_loop+0x9b/0xb0 [ 44.205157][ T286] exit_to_user_mode_prepare+0x5a/0xa0 [ 44.210653][ T286] syscall_exit_to_user_mode+0x1a/0x30 [ 44.216153][ T286] do_syscall_64+0x58/0xa0 [ 44.220607][ T286] ? clear_bhb_loop+0x15/0x70 [ 44.225316][ T286] ? clear_bhb_loop+0x15/0x70 [ 44.230023][ T286] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 44.235962][ T286] RIP: 0033:0x7efeef38fc57 [ 44.240407][ T286] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 44.260044][ T286] RSP: 002b:00007ffdc2867fb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 44.268506][ T286] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007efeef38fc57 [ 44.276503][ T286] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdc2868070 [ 44.284479][ T286] RBP: 00007ffdc2868070 R08: 0000000000000000 R09: 0000000000000000 [ 44.292453][ T286] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdc2869160 [ 44.300421][ T286] R13: 00007efeef410925 R14: 000000000000ab70 R15: 00007ffdc286a230 [ 44.308397][ T286] [ 44.311414][ T286] Modules linked in: [ 44.316486][ T286] ---[ end trace 0000000000000000 ]--- [ 44.321973][ T286] RIP: 0010:may_delete+0x701/0x710 [ 44.327375][ T286] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 84 fe ff ff 48 89 df e8 a0 16 f4 ff e9 77 fe ff ff e8 86 be af ff 0f 0b e8 7f be af ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 41 56 53 [ 44.347131][ T286] RSP: 0018:ffffc9000daa7c20 EFLAGS: 00010293 [ 44.353344][ T286] RAX: ffffffff81c03291 RBX: ffff8881063ab330 RCX: ffff888120052880 [ 44.361444][ T286] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 44.369474][ T286] RBP: ffffc9000daa7c88 R08: 0000000000000004 R09: 0000000000000003 [ 44.377679][ T286] R10: fffff52001b54f64 R11: 1ffff92001b54f64 R12: dffffc0000000000 [ 44.385865][ T286] R13: 0000000000000001 R14: ffff88810e963f10 R15: 1ffff11020c75666 [ 44.394171][ T286] FS: 00005555736e6500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 44.404822][ T286] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 44.411553][ T286] CR2: 00007f54c7cb59c8 CR3: 00000001307b6000 CR4: 00000000003506a0 [ 44.419618][ T286] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 44.427675][ T286] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 44.435741][ T286] Kernel panic - not syncing: Fatal exception [ 44.442092][ T286] Kernel Offset: disabled [ 44.446422][ T286] Rebooting in 86400 seconds..