last executing test programs: 2.312691562s ago: executing program 0 (id=873): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 1.716089012s ago: executing program 0 (id=885): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x1) shutdown(r0, 0x0) connect$unix(r0, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) 1.690189843s ago: executing program 0 (id=878): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x3}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15460100ef000000280012800b0001006d61637365630000180002800c00010040570000000000000500030008"], 0x50}}, 0x0) 1.633929283s ago: executing program 1 (id=880): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe40, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c) 1.631812923s ago: executing program 1 (id=881): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x1, 0xc73f, 0x81, 0x1}) 1.612964644s ago: executing program 0 (id=882): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}}, 0x0) 1.612733714s ago: executing program 4 (id=883): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x6000, 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) 1.556445734s ago: executing program 4 (id=884): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r0, 0x0, 0x4, 0x0) r1 = syz_pidfd_open(r0, 0x0) syz_usb_disconnect(0xffffffffffffffff) pidfd_send_signal(r1, 0x2, 0x0, 0x0) 1.469463966s ago: executing program 1 (id=886): ioperm(0x21, 0x1, 0x81) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) 851.247526ms ago: executing program 3 (id=890): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x50) 850.651636ms ago: executing program 0 (id=901): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002bbd700004000000000000000000000000000000000000016401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000002000000000000000002000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000002008000000000000000001000000000000004400050000110000000000000000000000000000000000003c00000002000000e00000010000000000000000000000000600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x46, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080), 0x1c) 835.201407ms ago: executing program 2 (id=892): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x141801, 0x0) fremovexattr(r1, &(0x7f0000002480)=@known='trusted.overlay.upper\x00') 827.375556ms ago: executing program 3 (id=893): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000001850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 784.498188ms ago: executing program 2 (id=894): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="09000000030000000800000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000fcffff0318110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x6, 0x9, 0x0, 0x200002b0, 0x200082e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) 784.288088ms ago: executing program 3 (id=895): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x80000001}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 784.053657ms ago: executing program 4 (id=896): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x4, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911073000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 754.247528ms ago: executing program 2 (id=897): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x1, 0xc73f, 0x81, 0x1}) 753.791078ms ago: executing program 4 (id=898): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000280)={0x4c, 0x5f, 0x6, 0x3, 0x7, "00da900eaf7919c635d4a15ac41e3100", 0x80000000, 0x7fe}) r1 = dup(r0) mknodat(r1, &(0x7f0000000080)='./file0\x00', 0x20, 0x4) write$UHID_INPUT(r1, &(0x7f0000000300)={0xd, {"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", 0x1000}}, 0x1006) 669.959589ms ago: executing program 3 (id=900): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x1) shutdown(r0, 0x0) connect$unix(r0, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) 633.51224ms ago: executing program 3 (id=902): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffee2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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") unlink(&(0x7f0000000180)='./file1\x00') 632.3547ms ago: executing program 2 (id=903): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x3}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15460100ef000000280012800b0001006d61637365630000180002800c00010040570000000000000500030008"], 0x50}}, 0x0) 587.751201ms ago: executing program 1 (id=904): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001800)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) 544.777381ms ago: executing program 2 (id=905): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}}, 0x0) 539.638721ms ago: executing program 3 (id=906): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 527.773341ms ago: executing program 1 (id=907): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x4000c00) 500.187922ms ago: executing program 4 (id=908): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 270.685576ms ago: executing program 1 (id=909): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r0, 0x0, 0x4, 0x0) r1 = syz_pidfd_open(r0, 0x0) syz_usb_disconnect(0xffffffffffffffff) pidfd_send_signal(r1, 0x2, 0x0, 0x0) 270.248125ms ago: executing program 4 (id=910): symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00') r0 = memfd_create(&(0x7f0000001040)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1\x8c.?}jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x2) write$binfmt_script(r0, &(0x7f0000000300)={'#! ', './file0'}, 0x17) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xa, 0x9}, 0x4c58, 0x810000, 0x0, 0x1, 0x8, 0x20006, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 3.02455ms ago: executing program 0 (id=911): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x4, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911073000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 0s ago: executing program 2 (id=921): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32], 0x54}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.96' (ED25519) to the list of known hosts. [ 24.418500][ T29] audit: type=1400 audit(1753403987.591:62): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.419340][ T3295] cgroup: Unknown subsys name 'net' [ 24.441243][ T29] audit: type=1400 audit(1753403987.591:63): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.468569][ T29] audit: type=1400 audit(1753403987.621:64): avc: denied { unmount } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.611464][ T3295] cgroup: Unknown subsys name 'cpuset' [ 24.617477][ T3295] cgroup: Unknown subsys name 'rlimit' [ 24.706825][ T29] audit: type=1400 audit(1753403987.881:65): avc: denied { setattr } for pid=3295 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.730117][ T29] audit: type=1400 audit(1753403987.881:66): avc: denied { create } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.744869][ T3299] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.750607][ T29] audit: type=1400 audit(1753403987.881:67): avc: denied { write } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.779472][ T29] audit: type=1400 audit(1753403987.881:68): avc: denied { read } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.789355][ T3295] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.799702][ T29] audit: type=1400 audit(1753403987.891:69): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.833298][ T29] audit: type=1400 audit(1753403987.891:70): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 24.856529][ T29] audit: type=1400 audit(1753403987.941:71): avc: denied { relabelto } for pid=3299 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.863946][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 25.904673][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 25.947125][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 25.960656][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.967882][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.974999][ T3312] bridge_slave_0: entered allmulticast mode [ 25.981551][ T3312] bridge_slave_0: entered promiscuous mode [ 25.988231][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.995405][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.002656][ T3312] bridge_slave_1: entered allmulticast mode [ 26.009084][ T3312] bridge_slave_1: entered promiscuous mode [ 26.040599][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.060033][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.094781][ T3312] team0: Port device team_slave_0 added [ 26.116087][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.123231][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.130552][ T3311] bridge_slave_0: entered allmulticast mode [ 26.137221][ T3311] bridge_slave_0: entered promiscuous mode [ 26.148423][ T3312] team0: Port device team_slave_1 added [ 26.162693][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.169889][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.177110][ T3311] bridge_slave_1: entered allmulticast mode [ 26.183647][ T3311] bridge_slave_1: entered promiscuous mode [ 26.196012][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.203161][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.210302][ T3305] bridge_slave_0: entered allmulticast mode [ 26.216939][ T3305] bridge_slave_0: entered promiscuous mode [ 26.236840][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 26.249887][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.257016][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.264218][ T3305] bridge_slave_1: entered allmulticast mode [ 26.270444][ T3305] bridge_slave_1: entered promiscuous mode [ 26.276813][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.283920][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.309893][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.321019][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.327980][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.353930][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.372257][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.391283][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.400405][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 26.412583][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.423098][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.463775][ T3312] hsr_slave_0: entered promiscuous mode [ 26.469663][ T3312] hsr_slave_1: entered promiscuous mode [ 26.476318][ T3311] team0: Port device team_slave_0 added [ 26.482848][ T3311] team0: Port device team_slave_1 added [ 26.509721][ T3305] team0: Port device team_slave_0 added [ 26.526576][ T3305] team0: Port device team_slave_1 added [ 26.538485][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.545515][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.571490][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.603672][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.610606][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.636575][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.647246][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.654318][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.662291][ T3306] bridge_slave_0: entered allmulticast mode [ 26.668562][ T3306] bridge_slave_0: entered promiscuous mode [ 26.675318][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.682471][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.689569][ T3306] bridge_slave_1: entered allmulticast mode [ 26.696019][ T3306] bridge_slave_1: entered promiscuous mode [ 26.702287][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.709219][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.735248][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.761458][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.768401][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.794405][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.805116][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.812186][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.819407][ T3307] bridge_slave_0: entered allmulticast mode [ 26.825767][ T3307] bridge_slave_0: entered promiscuous mode [ 26.832340][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.839388][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.846560][ T3307] bridge_slave_1: entered allmulticast mode [ 26.852941][ T3307] bridge_slave_1: entered promiscuous mode [ 26.882134][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.894448][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.922544][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.932694][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.973606][ T3305] hsr_slave_0: entered promiscuous mode [ 26.979520][ T3305] hsr_slave_1: entered promiscuous mode [ 26.985397][ T3305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.992963][ T3305] Cannot create hsr debugfs directory [ 27.002822][ T3311] hsr_slave_0: entered promiscuous mode [ 27.008837][ T3311] hsr_slave_1: entered promiscuous mode [ 27.014975][ T3311] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.022575][ T3311] Cannot create hsr debugfs directory [ 27.032305][ T3306] team0: Port device team_slave_0 added [ 27.038749][ T3307] team0: Port device team_slave_0 added [ 27.047562][ T3307] team0: Port device team_slave_1 added [ 27.058618][ T3306] team0: Port device team_slave_1 added [ 27.100202][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.107226][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.133192][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.144343][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.151338][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.177364][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.190463][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.197453][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.223502][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.236553][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.243530][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.269494][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.333624][ T3307] hsr_slave_0: entered promiscuous mode [ 27.339740][ T3307] hsr_slave_1: entered promiscuous mode [ 27.345605][ T3307] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.353213][ T3307] Cannot create hsr debugfs directory [ 27.367303][ T3312] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 27.386297][ T3306] hsr_slave_0: entered promiscuous mode [ 27.392254][ T3306] hsr_slave_1: entered promiscuous mode [ 27.398194][ T3306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.405766][ T3306] Cannot create hsr debugfs directory [ 27.415613][ T3312] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 27.437137][ T3312] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 27.447085][ T3312] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 27.531213][ T3311] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 27.544979][ T3311] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 27.554328][ T3311] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 27.568445][ T3305] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.578947][ T3311] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 27.587682][ T3305] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.599781][ T3305] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.608288][ T3305] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.643877][ T3306] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.655160][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.675186][ T3306] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.683594][ T3306] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 27.706832][ T3307] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 27.719676][ T3306] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 27.728739][ T3307] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 27.737220][ T3307] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 27.747865][ T3307] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 27.761593][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.774489][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.781624][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.798667][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.805773][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.819189][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.849856][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.868837][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.884344][ T1084] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.891458][ T1084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.911792][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.920581][ T1084] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.927723][ T1084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.950734][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.961919][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.973546][ T1084] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.980731][ T1084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.003484][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.019293][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.029899][ T1084] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.036989][ T1084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.046570][ T1084] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.053665][ T1084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.062527][ T1084] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.069551][ T1084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.088532][ T3306] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.098981][ T3306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.112117][ T1731] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.119144][ T1731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.128107][ T1731] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.135201][ T1731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.156568][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.173056][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.198113][ T3311] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.208580][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.238581][ T3307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.275507][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.325169][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.366766][ T3312] veth0_vlan: entered promiscuous mode [ 28.388193][ T3312] veth1_vlan: entered promiscuous mode [ 28.397696][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.410115][ T3305] veth0_vlan: entered promiscuous mode [ 28.417963][ T3305] veth1_vlan: entered promiscuous mode [ 28.456648][ T3312] veth0_macvtap: entered promiscuous mode [ 28.464652][ T3312] veth1_macvtap: entered promiscuous mode [ 28.479718][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.490844][ T3305] veth0_macvtap: entered promiscuous mode [ 28.503258][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.514148][ T3306] veth0_vlan: entered promiscuous mode [ 28.522883][ T3305] veth1_macvtap: entered promiscuous mode [ 28.533455][ T3312] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.542263][ T3312] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.550989][ T3312] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.559708][ T3312] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.577893][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.586783][ T3306] veth1_vlan: entered promiscuous mode [ 28.597449][ T3307] veth0_vlan: entered promiscuous mode [ 28.606448][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.622745][ T3307] veth1_vlan: entered promiscuous mode [ 28.642980][ T3305] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.651772][ T3305] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.660577][ T3305] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.669320][ T3305] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.687034][ T3306] veth0_macvtap: entered promiscuous mode [ 28.702419][ T3312] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.702761][ T3311] veth0_vlan: entered promiscuous mode [ 28.730690][ T3306] veth1_macvtap: entered promiscuous mode [ 28.747376][ T3307] veth0_macvtap: entered promiscuous mode [ 28.756930][ T3311] veth1_vlan: entered promiscuous mode [ 28.766480][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.785786][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.800763][ T3307] veth1_macvtap: entered promiscuous mode [ 28.821982][ T3306] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.830699][ T3306] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.839486][ T3306] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.848245][ T3306] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.880597][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.895147][ T3311] veth0_macvtap: entered promiscuous mode [ 28.904888][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.921758][ T3311] veth1_macvtap: entered promiscuous mode [ 28.940338][ T3307] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.949157][ T3307] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.957943][ T3307] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.966751][ T3307] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.010578][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.040398][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.056541][ T3493] loop3: detected capacity change from 0 to 512 [ 29.074359][ T3311] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.083113][ T3311] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.091843][ T3311] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.093531][ T3499] loop1: detected capacity change from 0 to 512 [ 29.100514][ T3311] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.117048][ T3493] EXT4-fs: Ignoring removed nomblk_io_submit option [ 29.124473][ T3499] ======================================================= [ 29.124473][ T3499] WARNING: The mand mount option has been deprecated and [ 29.124473][ T3499] and is ignored by this kernel. Remove the mand [ 29.124473][ T3499] option from the mount to silence this warning. [ 29.124473][ T3499] ======================================================= [ 29.131544][ T3493] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 29.210490][ T3493] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 29.244961][ T3493] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 29.253673][ T3499] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 29.258007][ T3493] System zones: 0-2, 18-18, 34-34 [ 29.289643][ T3493] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.4: iget: bad i_size value: 360287970189639680 [ 29.308938][ T3493] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.4: couldn't read orphan inode 15 (err -117) [ 29.371776][ T3493] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.391990][ T3518] SELinux: Context system_u:object_r:nvram_device_t:s0 is not valid (left unmapped). [ 29.432912][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 29.432926][ T29] audit: type=1400 audit(1753403992.611:137): avc: denied { prog_load } for pid=3521 comm="syz.4.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 29.493873][ T29] audit: type=1400 audit(1753403992.611:138): avc: denied { bpf } for pid=3521 comm="syz.4.21" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 29.514234][ T29] audit: type=1400 audit(1753403992.611:139): avc: denied { perfmon } for pid=3521 comm="syz.4.21" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 29.534953][ T29] audit: type=1400 audit(1753403992.611:140): avc: denied { prog_run } for pid=3521 comm="syz.4.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 29.559237][ T29] audit: type=1400 audit(1753403992.671:141): avc: denied { create } for pid=3491 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.579408][ T29] audit: type=1400 audit(1753403992.671:142): avc: denied { setopt } for pid=3494 comm="syz.0.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 29.598554][ T29] audit: type=1400 audit(1753403992.731:143): avc: denied { read } for pid=3491 comm="syz.3.4" dev="nsfs" ino=4026532693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 29.619429][ T29] audit: type=1400 audit(1753403992.731:144): avc: denied { open } for pid=3491 comm="syz.3.4" path="net:[4026532693]" dev="nsfs" ino=4026532693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 29.642342][ T29] audit: type=1400 audit(1753403992.731:145): avc: denied { create } for pid=3491 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 29.662909][ T29] audit: type=1400 audit(1753403992.731:146): avc: denied { map_create } for pid=3525 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 29.663598][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.870052][ T3542] netlink: 16 bytes leftover after parsing attributes in process `syz.0.31'. [ 30.108081][ T3577] netlink: 'syz.0.46': attribute type 1 has an invalid length. [ 30.185538][ T3575] loop3: detected capacity change from 0 to 8192 [ 30.365230][ T3587] loop0: detected capacity change from 0 to 1024 [ 30.393902][ T3587] EXT4-fs: Ignoring removed bh option [ 30.399409][ T3587] EXT4-fs: inline encryption not supported [ 30.411951][ T3587] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 30.436281][ T3592] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 30.463503][ T3587] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 30.467975][ T3592] SELinux: failed to load policy [ 30.473110][ T3587] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 2: comm syz.0.50: lblock 2 mapped to illegal pblock 2 (length 1) [ 30.508100][ T3587] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 48: comm syz.0.50: lblock 0 mapped to illegal pblock 48 (length 1) [ 30.523301][ T3587] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.50: Failed to acquire dquot type 0 [ 30.542124][ T3584] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 30.549733][ T3584] FAT-fs (loop3): Filesystem has been set read-only [ 30.558122][ T3587] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 30.559759][ T3575] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 30.577884][ T3587] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.50: mark_inode_dirty error [ 30.591032][ T3587] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 30.612369][ T3587] EXT4-fs (loop0): 1 orphan inode deleted [ 30.618428][ T3587] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.642838][ T1731] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 30.682732][ T1731] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0 [ 30.713359][ T3587] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 30.714085][ T3605] capability: warning: `syz.3.57' uses deprecated v2 capabilities in a way that may be insecure [ 30.764957][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.878172][ T3629] loop3: detected capacity change from 0 to 512 [ 30.890294][ T3628] loop2: detected capacity change from 0 to 164 [ 30.913298][ T3631] netlink: 'syz.0.71': attribute type 10 has an invalid length. [ 30.921879][ T3628] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 30.934303][ T3629] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 30.976191][ T3629] EXT4-fs (loop3): 1 orphan inode deleted [ 30.993368][ T31] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1 [ 31.004711][ T3629] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.019430][ T3629] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.040364][ T3640] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 31.096141][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.123349][ T3648] loop0: detected capacity change from 0 to 1024 [ 31.153189][ T3653] syz.4.80 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 31.153491][ T3648] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.182060][ T3654] Invalid ELF header magic: != ELF [ 31.185505][ T3650] SELinux: security_context_str_to_sid ( ) failed with errno=-22 [ 31.221755][ T3658] random: crng reseeded on system resumption [ 31.284187][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.301784][ T3667] loop2: detected capacity change from 0 to 512 [ 31.344437][ T3667] EXT4-fs: Ignoring removed orlov option [ 31.400781][ T3667] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 31.425019][ T3667] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 31.434456][ T3667] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.87: corrupted in-inode xattr: e_value size too large [ 31.450757][ T3667] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.87: couldn't read orphan inode 15 (err -117) [ 31.465237][ T3667] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.509437][ T3695] loop0: detected capacity change from 0 to 2048 [ 31.544462][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.582152][ T3298] loop0: p1 < > p4 [ 31.584104][ T3705] loop2: detected capacity change from 0 to 1024 [ 31.593475][ T3298] loop0: p4 size 8388608 extends beyond EOD, truncated [ 31.602720][ T3705] EXT4-fs: Ignoring removed orlov option [ 31.619912][ T3705] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 31.636890][ T3695] loop0: p1 < > p4 [ 31.643441][ T3695] loop0: p4 size 8388608 extends beyond EOD, truncated [ 31.650454][ T3705] EXT4-fs (loop2): can't mount with commit=, fs mounted w/o journal [ 31.762670][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 31.773912][ T3500] udevd[3500]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 31.807051][ T3729] loop0: detected capacity change from 0 to 2048 [ 31.821946][ T3736] netlink: 404 bytes leftover after parsing attributes in process `syz.1.110'. [ 31.822273][ T3729] EXT4-fs: Ignoring removed mblk_io_submit option [ 31.871507][ T3729] EXT4-fs: Ignoring removed nobh option [ 31.892528][ T3729] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.950498][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.983062][ T3752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.116'. [ 32.002881][ T3752] veth1_macvtap: left promiscuous mode [ 32.196764][ T3766] loop2: detected capacity change from 0 to 128 [ 32.315802][ T3779] loop4: detected capacity change from 0 to 512 [ 32.330868][ T3779] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 32.352427][ T3779] EXT4-fs (loop4): 1 truncate cleaned up [ 32.352810][ T3779] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.380996][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.432017][ T3787] syz.1.130 uses obsolete (PF_INET,SOCK_PACKET) [ 32.537869][ T3792] loop4: detected capacity change from 0 to 2048 [ 32.572978][ T3792] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.650085][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.772358][ T3811] SELinux: policydb version -144527734 does not match my version range 15-34 [ 32.772386][ T3811] SELinux: failed to load policy [ 32.901562][ T3819] pim6reg1: entered promiscuous mode [ 32.901579][ T3819] pim6reg1: entered allmulticast mode [ 33.110555][ T3842] netlink: 'syz.1.155': attribute type 3 has an invalid length. [ 33.245382][ T3852] netlink: 'syz.1.160': attribute type 13 has an invalid length. [ 33.253775][ T3852] gretap0: refused to change device tx_queue_len [ 33.254318][ T3852] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 33.280274][ T3854] netlink: 400 bytes leftover after parsing attributes in process `syz.0.161'. [ 33.280386][ T3854] Zero length message leads to an empty skb [ 33.581408][ T3890] netlink: 36 bytes leftover after parsing attributes in process `syz.0.175'. [ 33.686082][ T3901] loop0: detected capacity change from 0 to 512 [ 33.722275][ T3901] loop0: detected capacity change from 0 to 1024 [ 33.747376][ T3905] loop2: detected capacity change from 0 to 1024 [ 33.761732][ T3905] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 33.772622][ T3905] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 33.783965][ T3905] EXT4-fs error (device loop2): ext4_get_journal_inode:5796: comm syz.2.185: inode #100663328: comm syz.2.185: iget: illegal inode # [ 33.784182][ T3901] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.798125][ T3905] EXT4-fs (loop2): Remounting filesystem read-only [ 33.816370][ T3905] EXT4-fs (loop2): no journal found [ 33.821614][ T3905] EXT4-fs (loop2): can't get journal size [ 33.835143][ T3905] EXT4-fs (loop2): failed to initialize system zone (-22) [ 33.842534][ T3905] EXT4-fs (loop2): mount failed [ 33.858488][ T3912] loop3: detected capacity change from 0 to 128 [ 33.886718][ T3912] EXT4-fs: Ignoring removed nobh option [ 33.906775][ T3912] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 33.930509][ T3901] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 33.943909][ T3912] ext4 filesystem being mounted at /24/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 34.007236][ T3923] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.032866][ T3921] SELinux: Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped). [ 34.069484][ T3912] syz.3.186 (3912) used greatest stack depth: 10872 bytes left [ 34.102396][ T3306] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 34.157182][ T3937] loop4: detected capacity change from 0 to 256 [ 34.185325][ T3937] FAT-fs (loop4): Directory bread(block 64) failed [ 34.211771][ T3937] FAT-fs (loop4): Directory bread(block 65) failed [ 34.212905][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.218323][ T3937] FAT-fs (loop4): Directory bread(block 66) failed [ 34.253894][ T3937] FAT-fs (loop4): Directory bread(block 67) failed [ 34.260661][ T3937] FAT-fs (loop4): Directory bread(block 68) failed [ 34.269342][ T3937] FAT-fs (loop4): Directory bread(block 69) failed [ 34.278330][ T3937] FAT-fs (loop4): Directory bread(block 70) failed [ 34.285865][ T3937] FAT-fs (loop4): Directory bread(block 71) failed [ 34.319216][ T3937] FAT-fs (loop4): Directory bread(block 72) failed [ 34.343905][ T3937] FAT-fs (loop4): Directory bread(block 73) failed [ 34.385995][ T3959] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.205'. [ 34.415619][ T3963] netlink: 96 bytes leftover after parsing attributes in process `syz.0.208'. [ 34.433084][ T3965] program syz.2.209 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 34.442315][ T29] kauditd_printk_skb: 296 callbacks suppressed [ 34.442327][ T29] audit: type=1400 audit(1753403998.610:439): avc: denied { read } for pid=3964 comm="syz.2.209" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 34.471820][ T29] audit: type=1400 audit(1753403998.610:440): avc: denied { open } for pid=3964 comm="syz.2.209" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 34.512362][ T29] audit: type=1400 audit(1753403998.620:441): avc: denied { create } for pid=3966 comm="syz.3.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 34.531724][ T29] audit: type=1400 audit(1753403998.620:442): avc: denied { write } for pid=3966 comm="syz.3.210" path="socket:[5651]" dev="sockfs" ino=5651 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 34.598080][ T3979] openvswitch: netlink: Message has 6 unknown bytes. [ 34.612498][ C1] hrtimer: interrupt took 37141 ns [ 34.625867][ T29] audit: type=1326 audit(1753403998.780:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3980 comm="syz.0.214" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f327348e9a9 code=0x0 [ 34.651095][ T29] audit: type=1326 audit(1753403998.820:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3982 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaacdee9a9 code=0x7ffc0000 [ 34.701065][ T29] audit: type=1326 audit(1753403998.830:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3982 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaacdee9a9 code=0x7ffc0000 [ 34.724342][ T29] audit: type=1326 audit(1753403998.830:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3982 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7fbaacdee9a9 code=0x7ffc0000 [ 34.747660][ T29] audit: type=1326 audit(1753406576.834:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3982 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaacdee9a9 code=0x7ffc0000 [ 34.770919][ T29] audit: type=1326 audit(1753406576.834:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3982 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaacdee9a9 code=0x7ffc0000 [ 34.843063][ T3999] netlink: 'syz.3.224': attribute type 39 has an invalid length. [ 34.922633][ T4007] netlink: 'syz.4.227': attribute type 1 has an invalid length. [ 34.925209][ T4004] syzkaller0: entered promiscuous mode [ 34.935778][ T4004] syzkaller0: entered allmulticast mode [ 35.079462][ T4020] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.101488][ T4018] netlink: 'syz.3.232': attribute type 21 has an invalid length. [ 35.109439][ T4018] netlink: 132 bytes leftover after parsing attributes in process `syz.3.232'. [ 35.118492][ T4018] netlink: 'syz.3.232': attribute type 1 has an invalid length. [ 35.216327][ T4033] netlink: 'syz.3.238': attribute type 10 has an invalid length. [ 35.237395][ T4033] ipvlan0: entered allmulticast mode [ 35.242810][ T4033] veth0_vlan: entered allmulticast mode [ 35.251028][ T4037] openvswitch: netlink: Message has 6 unknown bytes. [ 35.266598][ T4033] team0: Device ipvlan0 failed to register rx_handler [ 35.279691][ T4039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.242'. [ 35.288586][ T4039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.242'. [ 35.319500][ T4033] syz.3.238 (4033) used greatest stack depth: 10696 bytes left [ 35.403238][ T4053] SELinux: Context system_u:object_r:pam_exec_t:s0 is not valid (left unmapped). [ 35.492834][ T4064] netlink: 256 bytes leftover after parsing attributes in process `syz.3.254'. [ 35.542952][ T4045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.558133][ T4045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.645652][ T4078] tmpfs: Bad value for 'mpol' [ 35.700197][ T4093] SELinux: syz.2.266 (4093) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 35.857291][ T4112] netlink: 256 bytes leftover after parsing attributes in process `syz.0.276'. [ 35.860342][ T4109] netlink: 36 bytes leftover after parsing attributes in process `syz.4.274'. [ 36.002863][ T4130] SELinux: syz.4.282 (4130) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 36.156188][ T4150] netlink: 36 bytes leftover after parsing attributes in process `syz.1.287'. [ 36.175950][ T4152] netlink: 256 bytes leftover after parsing attributes in process `syz.2.291'. [ 36.219040][ T4158] tmpfs: Bad value for 'mpol' [ 36.489751][ T4188] netlink: 256 bytes leftover after parsing attributes in process `syz.1.306'. [ 36.517580][ T4166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.545446][ T4166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.671836][ T4209] netlink: 404 bytes leftover after parsing attributes in process `syz.4.315'. [ 36.811458][ T4229] loop4: detected capacity change from 0 to 512 [ 36.824699][ T4229] loop4: detected capacity change from 0 to 1024 [ 36.845596][ T4229] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.866798][ T4229] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 36.891176][ T4237] loop3: detected capacity change from 0 to 2048 [ 36.951288][ T3500] loop3: p1 < > p4 [ 36.966017][ T3500] loop3: p4 size 8388608 extends beyond EOD, truncated [ 36.994771][ T4237] loop3: p1 < > p4 [ 36.999566][ T4237] loop3: p4 size 8388608 extends beyond EOD, truncated [ 37.034897][ T4250] loop0: detected capacity change from 0 to 256 [ 37.082803][ T4250] FAT-fs (loop0): Directory bread(block 64) failed [ 37.087001][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.110568][ T4250] FAT-fs (loop0): Directory bread(block 65) failed [ 37.113095][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 37.122415][ T3500] udevd[3500]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 37.140341][ T4250] FAT-fs (loop0): Directory bread(block 66) failed [ 37.168100][ T4250] FAT-fs (loop0): Directory bread(block 67) failed [ 37.196311][ T4250] FAT-fs (loop0): Directory bread(block 68) failed [ 37.212498][ T4250] FAT-fs (loop0): Directory bread(block 69) failed [ 37.237609][ T4250] FAT-fs (loop0): Directory bread(block 70) failed [ 37.268539][ T4250] FAT-fs (loop0): Directory bread(block 71) failed [ 37.290148][ T4270] loop3: detected capacity change from 0 to 1024 [ 37.306562][ T4250] FAT-fs (loop0): Directory bread(block 72) failed [ 37.312924][ T4276] loop2: detected capacity change from 0 to 512 [ 37.316874][ T4270] EXT4-fs: Ignoring removed orlov option [ 37.331632][ T4250] FAT-fs (loop0): Directory bread(block 73) failed [ 37.345249][ T4270] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 37.358874][ T4276] loop2: detected capacity change from 0 to 1024 [ 37.372873][ T4270] EXT4-fs (loop3): can't mount with commit=, fs mounted w/o journal [ 37.405924][ T4276] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.442198][ T4276] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 37.506801][ T4283] loop4: detected capacity change from 0 to 2048 [ 37.536296][ T4283] loop4: p1 < > p4 [ 37.556246][ T4283] loop4: p4 size 8388608 extends beyond EOD, truncated [ 37.577910][ T4290] loop3: detected capacity change from 0 to 1024 [ 37.588955][ T2996] loop4: p1 < > p4 [ 37.593386][ T2996] loop4: p4 size 8388608 extends beyond EOD, truncated [ 37.601555][ T4290] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 37.626441][ T4290] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 37.638790][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.667260][ T4297] loop1: detected capacity change from 0 to 2048 [ 37.676509][ T4290] EXT4-fs error (device loop3): ext4_get_journal_inode:5796: comm syz.3.352: inode #100663328: comm syz.3.352: iget: illegal inode # [ 37.691316][ T4290] EXT4-fs (loop3): Remounting filesystem read-only [ 37.697878][ T4290] EXT4-fs (loop3): no journal found [ 37.703192][ T4290] EXT4-fs (loop3): can't get journal size [ 37.714818][ T4290] EXT4-fs (loop3): failed to initialize system zone (-22) [ 37.725625][ T4297] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.739648][ T4301] udevd[4301]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 37.740672][ T4290] EXT4-fs (loop3): mount failed [ 37.764744][ T3500] udevd[3500]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 37.816116][ T4314] loop4: detected capacity change from 0 to 1024 [ 37.829397][ T4314] EXT4-fs: Ignoring removed orlov option [ 37.838403][ T4308] loop2: detected capacity change from 0 to 2048 [ 37.856900][ T4308] EXT4-fs: Ignoring removed mblk_io_submit option [ 37.867372][ T4314] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 37.884595][ T4308] EXT4-fs: Ignoring removed nobh option [ 37.891049][ T4314] EXT4-fs (loop4): can't mount with commit=, fs mounted w/o journal [ 37.931786][ T4308] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.950897][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.977536][ T4321] openvswitch: netlink: Message has 6 unknown bytes. [ 37.985593][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.036332][ T4333] loop3: detected capacity change from 0 to 512 [ 38.067049][ T4333] loop3: detected capacity change from 0 to 1024 [ 38.082674][ T4339] loop4: detected capacity change from 0 to 512 [ 38.113648][ T4333] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.128535][ T4339] EXT4-fs: Ignoring removed orlov option [ 38.136592][ T4339] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 38.149249][ T4339] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 38.181116][ T4333] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 38.194692][ T4351] loop1: detected capacity change from 0 to 1024 [ 38.201583][ T4351] EXT4-fs: Ignoring removed orlov option [ 38.204074][ T4339] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.369: corrupted in-inode xattr: e_value size too large [ 38.222253][ T4351] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 38.288945][ T4339] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.369: couldn't read orphan inode 15 (err -117) [ 38.294777][ T4355] loop2: detected capacity change from 0 to 256 [ 38.331469][ T4351] EXT4-fs (loop1): can't mount with commit=, fs mounted w/o journal [ 38.347460][ T4355] FAT-fs (loop2): Directory bread(block 64) failed [ 38.350874][ T4339] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.354044][ T4355] FAT-fs (loop2): Directory bread(block 65) failed [ 38.372808][ T4355] FAT-fs (loop2): Directory bread(block 66) failed [ 38.384557][ T4359] loop0: detected capacity change from 0 to 512 [ 38.391194][ T4355] FAT-fs (loop2): Directory bread(block 67) failed [ 38.400207][ T4359] EXT4-fs: Ignoring removed mblk_io_submit option [ 38.416256][ T4355] FAT-fs (loop2): Directory bread(block 68) failed [ 38.430087][ T4355] FAT-fs (loop2): Directory bread(block 69) failed [ 38.437435][ T4359] EXT4-fs: Ignoring removed nomblk_io_submit option [ 38.448216][ T4355] FAT-fs (loop2): Directory bread(block 70) failed [ 38.456407][ T4359] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 38.464914][ T4359] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 38.474919][ T4355] FAT-fs (loop2): Directory bread(block 71) failed [ 38.482625][ T4355] FAT-fs (loop2): Directory bread(block 72) failed [ 38.489177][ T4355] FAT-fs (loop2): Directory bread(block 73) failed [ 38.497229][ T4359] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.387: Allocating blocks 41-42 which overlap fs metadata [ 38.511878][ T4359] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.387: Allocating blocks 41-42 which overlap fs metadata [ 38.526162][ T4359] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.387: Failed to acquire dquot type 1 [ 38.541707][ T4359] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 38.542753][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.556370][ T4359] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #12: comm syz.0.387: corrupted inode contents [ 38.579154][ T4359] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #12: comm syz.0.387: mark_inode_dirty error [ 38.591967][ T4359] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #12: comm syz.0.387: corrupted inode contents [ 38.629001][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.655589][ T4359] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.387: mark_inode_dirty error [ 38.671512][ T4359] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #12: comm syz.0.387: corrupted inode contents [ 38.688758][ T4359] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 38.708358][ T4359] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #12: comm syz.0.387: corrupted inode contents [ 38.736292][ T4359] EXT4-fs error (device loop0): ext4_truncate:4597: inode #12: comm syz.0.387: mark_inode_dirty error [ 38.769067][ T4359] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 38.817069][ T4359] EXT4-fs (loop0): 1 truncate cleaned up [ 38.824994][ T4359] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.872910][ T4393] loop1: detected capacity change from 0 to 1024 [ 38.903121][ T4393] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.945128][ T4393] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.012407][ T4393] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 39.060961][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.163009][ T4359] syz.0.387 (4359) used greatest stack depth: 10040 bytes left [ 39.239326][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.239312][ T4427] team_slave_0: entered promiscuous mode [ 39.254072][ T4427] team_slave_1: entered promiscuous mode [ 39.301477][ T4427] team0: Device macsec1 is already an upper device of the team interface [ 39.310519][ T4427] team_slave_0: left promiscuous mode [ 39.315924][ T4427] team_slave_1: left promiscuous mode [ 39.336804][ T4444] loop0: detected capacity change from 0 to 512 [ 39.343656][ T4444] EXT4-fs: Ignoring removed oldalloc option [ 39.355441][ T4444] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.418: Parent and EA inode have the same ino 15 [ 39.368078][ T4444] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 39.381367][ T4444] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.418: Parent and EA inode have the same ino 15 [ 39.393895][ T4444] EXT4-fs (loop0): 1 orphan inode deleted [ 39.400068][ T4444] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.438427][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.459171][ T29] kauditd_printk_skb: 358 callbacks suppressed [ 39.459187][ T29] audit: type=1400 audit(1753406581.624:803): avc: denied { create } for pid=4450 comm="syz.1.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 39.500644][ T29] audit: type=1400 audit(1753406581.624:804): avc: denied { ioctl } for pid=4450 comm="syz.1.422" path="socket:[8200]" dev="sockfs" ino=8200 ioctlcmd=0x48d4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 39.528425][ T29] audit: type=1400 audit(1753406581.704:805): avc: denied { bind } for pid=4450 comm="syz.1.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 39.593166][ T29] audit: type=1400 audit(1753406581.764:806): avc: denied { module_request } for pid=4460 comm="syz.2.425" kmod="bpf_preload" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 39.614795][ T29] audit: type=1400 audit(1753406581.764:807): avc: denied { create } for pid=4458 comm="syz.1.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 39.634105][ T29] audit: type=1400 audit(1753406581.764:808): avc: denied { write } for pid=4458 comm="syz.1.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 39.653353][ T29] audit: type=1400 audit(1753406581.764:809): avc: denied { connect } for pid=4458 comm="syz.1.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 39.680939][ T29] audit: type=1400 audit(1753406581.764:810): avc: denied { name_connect } for pid=4458 comm="syz.1.423" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 39.701048][ T29] audit: type=1400 audit(1753406581.814:811): avc: denied { mounton } for pid=4458 comm="syz.1.423" path="/78/file0" dev="tmpfs" ino=414 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 39.723509][ T29] audit: type=1400 audit(1753406581.855:812): avc: denied { mount } for pid=4460 comm="syz.2.425" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 39.885577][ T4487] netlink: 'syz.2.436': attribute type 3 has an invalid length. [ 39.973763][ T4503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.982817][ T4503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.094725][ T4509] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.101987][ T4509] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.162662][ T4515] loop4: detected capacity change from 0 to 2048 [ 40.204439][ T4515] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.235278][ T4509] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.282395][ T4509] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.305098][ T4515] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.446: bg 0: block 408: padding at end of block bitmap is not set [ 40.340337][ T4515] EXT4-fs (loop4): Remounting filesystem read-only [ 40.358490][ T4509] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.367437][ T4509] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.376356][ T4509] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.385261][ T4509] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.406585][ T4515] syz.4.446 (4515) used greatest stack depth: 9960 bytes left [ 40.474517][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.925058][ T4582] loop3: detected capacity change from 0 to 256 [ 40.942126][ T4582] FAT-fs (loop3): Directory bread(block 1285) failed [ 40.965169][ T4582] FAT-fs (loop3): Directory bread(block 1285) failed [ 40.977390][ T4582] FAT-fs (loop3): Directory bread(block 1285) failed [ 40.984979][ T4582] FAT-fs (loop3): Directory bread(block 1285) failed [ 41.063941][ T4512] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=4512 comm=kworker/1:4 [ 41.093540][ T4602] loop4: detected capacity change from 0 to 512 [ 41.113631][ T4602] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.479: bg 0: block 288: padding at end of block bitmap is not set [ 41.129981][ T4602] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 41.171187][ T4602] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.479: attempt to clear invalid blocks 1024 len 1 [ 41.193421][ T4611] loop0: detected capacity change from 0 to 128 [ 41.206992][ T4611] EXT4-fs: Ignoring removed nobh option [ 41.222961][ T4602] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.479: invalid indirect mapped block 1819239214 (level 0) [ 41.257129][ T4602] EXT4-fs (loop4): 1 truncate cleaned up [ 41.262995][ T4611] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 41.266157][ T4602] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.287879][ T4611] ext4 filesystem being mounted at /107/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 41.345262][ T3312] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.363492][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.453073][ T4638] syzkaller1: entered promiscuous mode [ 41.458574][ T4638] syzkaller1: entered allmulticast mode [ 41.494326][ T4640] __nla_validate_parse: 1 callbacks suppressed [ 41.494341][ T4640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.494'. [ 41.530437][ T4645] netlink: 'syz.0.496': attribute type 1 has an invalid length. [ 41.538132][ T4645] netlink: 224 bytes leftover after parsing attributes in process `syz.0.496'. [ 41.665564][ T4669] process 'syz.0.504' launched './file0' with NULL argv: empty string added [ 41.721126][ T4675] SELinux: syz.2.510 (4675) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 41.790366][ T4685] syzkaller1: entered promiscuous mode [ 41.795889][ T4685] syzkaller1: entered allmulticast mode [ 41.814883][ T4690] loop3: detected capacity change from 0 to 764 [ 41.949375][ T4707] netlink: 'syz.2.525': attribute type 2 has an invalid length. [ 41.957165][ T4707] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.525'. [ 41.975060][ T4709] bridge1: entered promiscuous mode [ 42.050424][ T4715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.062819][ T4715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.241631][ T4737] 9pnet: Could not find request transport: 0xffffffffffffffff [ 42.422724][ T4768] vcan0: tx drop: invalid sa for name 0xfffffffffffffffe [ 42.476971][ T4775] vxcan1: tx drop: invalid da for name 0x0000000000000004 [ 42.530131][ T4779] unsupported nla_type 52263 [ 42.662275][ T4793] loop0: detected capacity change from 0 to 1024 [ 42.675480][ T4793] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.721948][ T4800] loop3: detected capacity change from 0 to 1024 [ 42.731495][ T4800] EXT4-fs: Ignoring removed bh option [ 42.766148][ T4800] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.786798][ T4800] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.567: Allocating blocks 385-513 which overlap fs metadata [ 42.829129][ T4800] EXT4-fs (loop3): Remounting filesystem read-only [ 42.845282][ T4800] EXT4-fs (loop3): pa ffff8881071ba070: logic 16, phys. 129, len 24 [ 42.898495][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.920668][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.978761][ T4831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.987964][ T4831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.248571][ T4861] loop2: detected capacity change from 0 to 1024 [ 43.255953][ T4861] EXT4-fs: Ignoring removed bh option [ 43.288110][ T4861] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.290274][ T4864] syzkaller1: entered promiscuous mode [ 43.305616][ T4861] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.582: Allocating blocks 385-513 which overlap fs metadata [ 43.306164][ T4864] syzkaller1: entered allmulticast mode [ 43.321336][ T4861] EXT4-fs (loop2): Remounting filesystem read-only [ 43.347719][ T4861] EXT4-fs (loop2): pa ffff8881072da000: logic 16, phys. 129, len 24 [ 43.366839][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.457899][ T4876] syzkaller1: entered promiscuous mode [ 43.463466][ T4876] syzkaller1: entered allmulticast mode [ 43.604336][ T4884] loop3: detected capacity change from 0 to 128 [ 43.611947][ T4884] EXT4-fs: Ignoring removed nobh option [ 43.635221][ T4884] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.650954][ T4884] ext4 filesystem being mounted at /112/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 43.676578][ T3306] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.702094][ T4888] syzkaller1: entered promiscuous mode [ 43.707592][ T4888] syzkaller1: entered allmulticast mode [ 43.726827][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888119e70c00: rx timeout, send abort [ 43.735237][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888119e70c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 43.849561][ T4900] syzkaller1: entered promiscuous mode [ 43.855154][ T4900] syzkaller1: entered allmulticast mode [ 43.976814][ T4906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.994178][ T4906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.296817][ T4917] loop1: detected capacity change from 0 to 128 [ 44.303715][ T4917] EXT4-fs: Ignoring removed nobh option [ 44.329584][ T4917] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 44.347316][ T4917] ext4 filesystem being mounted at /109/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 44.385734][ T4928] loop0: detected capacity change from 0 to 512 [ 44.391366][ T3305] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 44.408568][ T4928] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.434330][ T4928] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 44.436218][ T4934] syzkaller1: entered promiscuous mode [ 44.448954][ T4934] syzkaller1: entered allmulticast mode [ 44.464602][ T4928] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 44.473802][ T4928] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 44.475294][ T4936] random: crng reseeded on system resumption [ 44.481851][ T29] kauditd_printk_skb: 184 callbacks suppressed [ 44.481864][ T29] audit: type=1400 audit(1753406586.645:997): avc: denied { append } for pid=4935 comm="syz.2.617" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 44.488019][ T4928] System zones: [ 44.494028][ T29] audit: type=1400 audit(1753406586.645:998): avc: denied { open } for pid=4935 comm="syz.2.617" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 44.517091][ T4928] 0-2, 18-18, 34-34 [ 44.549976][ T4928] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.610: iget: bad i_size value: 360287970189639680 [ 44.567143][ T4928] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.610: couldn't read orphan inode 15 (err -117) [ 44.581904][ T4928] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.585676][ T29] audit: type=1400 audit(1753406586.755:999): avc: denied { read } for pid=4935 comm="syz.2.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 44.644120][ T29] audit: type=1400 audit(1753406586.805:1000): avc: denied { create } for pid=4927 comm="syz.0.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 44.665481][ T29] audit: type=1400 audit(1753406586.835:1001): avc: denied { ioctl } for pid=4927 comm="syz.0.610" path="socket:[8018]" dev="sockfs" ino=8018 ioctlcmd=0x89e5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 44.699137][ T29] audit: type=1326 audit(1753406586.865:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4947 comm="syz.2.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6420ce9a9 code=0x7ffc0000 [ 44.705404][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.722591][ T29] audit: type=1326 audit(1753406586.865:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4947 comm="syz.2.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6420ce9a9 code=0x7ffc0000 [ 44.796883][ T4958] loop2: detected capacity change from 0 to 764 [ 44.806366][ T29] audit: type=1326 audit(1753406586.935:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4947 comm="syz.2.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7fb6420ce9a9 code=0x7ffc0000 [ 44.829771][ T29] audit: type=1326 audit(1753406586.935:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4947 comm="syz.2.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6420ce9a9 code=0x7ffc0000 [ 44.853247][ T29] audit: type=1326 audit(1753406586.935:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4947 comm="syz.2.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6420ce9a9 code=0x7ffc0000 [ 44.969210][ T4974] netlink: 'syz.0.632': attribute type 1 has an invalid length. [ 45.108206][ T4994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.642'. [ 45.176878][ T5004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.646'. [ 45.185813][ T5004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.646'. [ 45.249256][ T5015] loop2: detected capacity change from 0 to 512 [ 45.285938][ T5015] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.310878][ T5015] ext4 filesystem being mounted at /140/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.402073][ T5015] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.653: corrupted inode contents [ 45.448553][ T5015] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.653: mark_inode_dirty error [ 45.463020][ T5015] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.653: corrupted inode contents [ 45.533829][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.637079][ T5052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.668'. [ 45.711898][ T5065] loop4: detected capacity change from 0 to 512 [ 45.734676][ T5069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.675'. [ 45.753177][ T5065] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 45.781250][ T5065] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 45.811289][ T5069] netlink: 16 bytes leftover after parsing attributes in process `syz.2.675'. [ 45.831239][ T5065] EXT4-fs (loop4): 1 truncate cleaned up [ 45.852176][ T5065] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.964002][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.992572][ T5102] loop1: detected capacity change from 0 to 128 [ 46.077034][ T5117] loop1: detected capacity change from 0 to 164 [ 46.092842][ T5117] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 46.111446][ T5117] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 46.119827][ T5117] Symlink component flag not implemented [ 46.125454][ T5117] Symlink component flag not implemented [ 46.132462][ T5117] Symlink component flag not implemented (7) [ 46.138529][ T5117] Symlink component flag not implemented (116) [ 46.198632][ T5130] loop4: detected capacity change from 0 to 736 [ 46.219999][ T5130] rock: directory entry would overflow storage [ 46.226251][ T5130] rock: sig=0x3b10, size=4, remaining=3 [ 46.424058][ T5158] loop1: detected capacity change from 0 to 2048 [ 46.445241][ T5158] EXT4-fs: Ignoring removed bh option [ 46.471727][ T5158] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.486271][ T5158] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #12: comm syz.1.718: corrupted in-inode xattr: e_name out of bounds [ 46.507645][ T5173] SELinux: failed to load policy [ 46.516665][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.572977][ T5179] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5179 comm=syz.1.728 [ 46.621818][ T5185] loop0: detected capacity change from 0 to 512 [ 46.642039][ T5185] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.729: Failed to acquire dquot type 1 [ 46.654427][ T5185] EXT4-fs (loop0): 1 truncate cleaned up [ 46.663963][ T5185] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.687340][ T5185] ext4 filesystem being mounted at /185/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.699244][ T5185] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.733354][ T5193] netem: change failed [ 46.826641][ T5205] loop0: detected capacity change from 0 to 512 [ 46.833541][ T5205] EXT4-fs: Ignoring removed bh option [ 46.838972][ T5205] EXT4-fs: Ignoring removed i_version option [ 46.852806][ T5205] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 46.870161][ T5205] EXT4-fs (loop0): 1 truncate cleaned up [ 46.876318][ T5205] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.924860][ T5215] loop3: detected capacity change from 0 to 512 [ 46.945771][ T5218] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 46.966716][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.977329][ T5215] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.744: Failed to acquire dquot type 1 [ 46.992980][ T5215] EXT4-fs (loop3): 1 truncate cleaned up [ 46.999029][ T5215] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.012802][ T5215] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.025155][ T5215] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.099723][ T5232] netlink: 'syz.1.761': attribute type 21 has an invalid length. [ 47.133683][ T5237] loop3: detected capacity change from 0 to 2048 [ 47.140446][ T5237] EXT4-fs: Ignoring removed bh option [ 47.170617][ T5237] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.246541][ T5255] loop4: detected capacity change from 0 to 512 [ 47.282354][ T5237] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #12: comm syz.3.752: corrupted in-inode xattr: e_name out of bounds [ 47.320207][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.485192][ T5275] loop4: detected capacity change from 0 to 512 [ 47.498640][ T5275] journal_path: Lookup failure for './file0/../file0' [ 47.505507][ T5275] EXT4-fs: error: could not find journal device path [ 47.651393][ T5298] SELinux: policydb version 1207 does not match my version range 15-34 [ 47.661221][ T5296] loop4: detected capacity change from 0 to 8192 [ 47.668067][ T5298] SELinux: failed to load policy [ 47.687298][ T5300] netlink: 'syz.3.782': attribute type 21 has an invalid length. [ 47.710215][ T3500] loop4: p1 p2 p3 p4[DM] [ 47.714635][ T3500] loop4: p1 size 835331 extends beyond EOD, truncated [ 47.729790][ T3500] loop4: p2 size 16777223 extends beyond EOD, truncated [ 47.737284][ T3500] loop4: p3 start 1052673 is beyond EOD, truncated [ 47.743978][ T3500] loop4: p4 size 262144 extends beyond EOD, truncated [ 47.765867][ T5296] loop4: p1 p2 p3 p4[DM] [ 47.772828][ T5296] loop4: p1 size 835331 extends beyond EOD, truncated [ 47.784188][ T5296] loop4: p2 size 16777223 extends beyond EOD, truncated [ 47.791971][ T5296] loop4: p3 start 1052673 is beyond EOD, truncated [ 47.798617][ T5296] loop4: p4 size 262144 extends beyond EOD, truncated [ 47.900358][ T4300] udevd[4300]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 47.904392][ T4301] udevd[4301]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 47.911821][ T3500] udevd[3500]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 47.960246][ T4300] udevd[4300]: failed to send result of seq 9055 to main daemon: Connection refused [ 47.967781][ T3500] udevd[3500]: failed to send result of seq 9054 to main daemon: Transport endpoint is not connected [ 47.983419][ T5324] loop3: detected capacity change from 0 to 512 [ 47.990206][ T5324] journal_path: Lookup failure for './file0/../file0' [ 47.997129][ T5324] EXT4-fs: error: could not find journal device path [ 48.052442][ T5336] loop0: detected capacity change from 0 to 512 [ 48.072514][ T5336] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.798: casefold flag without casefold feature [ 48.085759][ T5336] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.798: couldn't read orphan inode 15 (err -117) [ 48.101190][ T5343] loop1: detected capacity change from 0 to 512 [ 48.108070][ T5336] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.252385][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.388226][ T5382] loop3: detected capacity change from 0 to 8192 [ 48.424457][ T5382] loop3: p1 p2 p3 p4[DM] [ 48.428986][ T5382] loop3: p1 size 835331 extends beyond EOD, truncated [ 48.439735][ T5382] loop3: p2 size 16777223 extends beyond EOD, truncated [ 48.448261][ T5382] loop3: p3 start 1052673 is beyond EOD, truncated [ 48.454896][ T5382] loop3: p4 size 262144 extends beyond EOD, truncated [ 48.466560][ T5385] loop0: detected capacity change from 0 to 512 [ 48.753595][ T5416] loop1: detected capacity change from 0 to 8192 [ 48.809468][ T5416] loop1: p1 p2 p3 p4[DM] [ 48.813848][ T5416] loop1: p1 size 835331 extends beyond EOD, truncated [ 48.821148][ T5416] loop1: p2 size 16777223 extends beyond EOD, truncated [ 48.828724][ T5416] loop1: p3 start 1052673 is beyond EOD, truncated [ 48.835402][ T5416] loop1: p4 size 262144 extends beyond EOD, truncated [ 48.863396][ T5432] SELinux: security_context_str_to_sid (ð) failed with errno=-22 [ 48.985494][ T5448] loop3: detected capacity change from 0 to 512 [ 49.102213][ T5454] loop4: detected capacity change from 0 to 512 [ 49.139797][ T5454] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.848: casefold flag without casefold feature [ 49.153214][ T5459] netlink: 28 bytes leftover after parsing attributes in process `syz.0.850'. [ 49.162131][ T5459] netlink: 28 bytes leftover after parsing attributes in process `syz.0.850'. [ 49.200363][ T5454] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.848: couldn't read orphan inode 15 (err -117) [ 49.229590][ T5461] loop2: detected capacity change from 0 to 8192 [ 49.240099][ T5454] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.279716][ T5461] loop2: p1 p2 p3 p4[DM] [ 49.287997][ T5461] loop2: p1 size 835331 extends beyond EOD, truncated [ 49.303798][ T5461] loop2: p2 size 16777223 extends beyond EOD, truncated [ 49.311581][ T5461] loop2: p3 start 1052673 is beyond EOD, truncated [ 49.318148][ T5461] loop2: p4 size 262144 extends beyond EOD, truncated [ 49.468652][ T5483] macsec1: entered promiscuous mode [ 49.478171][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.585462][ T5499] loop2: detected capacity change from 0 to 1024 [ 49.588112][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 49.588125][ T29] audit: type=1326 audit(1753406591.756:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5500 comm="syz.0.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f327348e9a9 code=0x7ffc0000 [ 49.592481][ T5499] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.598098][ T29] audit: type=1326 audit(1753406591.756:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5500 comm="syz.0.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f327348e9a9 code=0x7ffc0000 [ 49.651478][ T29] audit: type=1326 audit(1753406591.756:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5500 comm="syz.0.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f327348e9a9 code=0x7ffc0000 [ 49.674840][ T29] audit: type=1326 audit(1753406591.756:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5500 comm="syz.0.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f327348e9a9 code=0x7ffc0000 [ 49.713349][ T5499] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.728714][ T29] audit: type=1400 audit(1753406591.906:1143): avc: denied { remove_name } for pid=5498 comm="syz.2.871" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.751557][ T29] audit: type=1400 audit(1753406591.906:1144): avc: denied { unlink } for pid=5498 comm="syz.2.871" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 49.788302][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.301985][ T5514] netlink: 28 bytes leftover after parsing attributes in process `syz.1.876'. [ 50.310953][ T5514] netlink: 28 bytes leftover after parsing attributes in process `syz.1.876'. [ 50.334522][ T5520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.878'. [ 50.391166][ T5526] loop1: detected capacity change from 0 to 512 [ 50.403804][ T5526] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.881: casefold flag without casefold feature [ 50.403880][ T5526] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.881: couldn't read orphan inode 15 (err -117) [ 50.430961][ T29] audit: type=1400 audit(1753406592.606:1145): avc: denied { write } for pid=5527 comm="syz.4.883" name="file0" dev="tmpfs" ino=771 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 50.457121][ T5526] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.459744][ T5531] wireguard0: entered promiscuous mode [ 50.459760][ T5531] wireguard0: entered allmulticast mode [ 50.543217][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.196704][ T5556] openvswitch: netlink: Message has 6 unknown bytes. [ 51.244984][ T5560] macsec1: entered promiscuous mode [ 51.250729][ T5564] loop2: detected capacity change from 0 to 512 [ 51.274360][ T5564] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.897: casefold flag without casefold feature [ 51.274436][ T5564] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.897: couldn't read orphan inode 15 (err -117) [ 51.300616][ T5564] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.369611][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.401489][ T5572] loop3: detected capacity change from 0 to 1024 [ 51.408599][ T5572] EXT4-fs: Ignoring removed nomblk_io_submit option [ 51.415893][ T5574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.903'. [ 51.432081][ T5572] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.473163][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.497712][ T5580] wireguard0: entered promiscuous mode [ 51.503241][ T5580] wireguard0: entered allmulticast mode [ 51.512097][ T5582] netlink: 'syz.1.907': attribute type 13 has an invalid length. [ 51.574461][ T5582] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.581829][ T5582] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.634591][ T5582] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.645284][ T5582] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.681585][ T5582] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.690605][ T5582] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.699507][ T5582] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.708364][ T5582] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.148918][ T5588] ================================================================== [ 52.157025][ T5588] BUG: KCSAN: data-race in atime_needs_update / inode_update_timestamps [ 52.165359][ T5588] [ 52.167676][ T5588] write to 0xffff88811a18382c of 4 bytes by task 5585 on cpu 1: [ 52.175302][ T5588] inode_update_timestamps+0x147/0x270 [ 52.180768][ T5588] file_update_time+0x20e/0x2b0 [ 52.185623][ T5588] shmem_file_write_iter+0x9c/0xf0 [ 52.190738][ T5588] iter_file_splice_write+0x5f2/0x970 [ 52.196113][ T5588] direct_splice_actor+0x156/0x2a0 [ 52.201231][ T5588] splice_direct_to_actor+0x312/0x680 [ 52.206605][ T5588] do_splice_direct+0xda/0x150 [ 52.211367][ T5588] do_sendfile+0x380/0x650 [ 52.215784][ T5588] __x64_sys_sendfile64+0x105/0x150 [ 52.220978][ T5588] x64_sys_call+0xb39/0x2fb0 [ 52.225571][ T5588] do_syscall_64+0xd2/0x200 [ 52.230078][ T5588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.235975][ T5588] [ 52.238292][ T5588] read to 0xffff88811a18382c of 4 bytes by task 5588 on cpu 0: [ 52.245823][ T5588] atime_needs_update+0x2a8/0x3e0 [ 52.250840][ T5588] touch_atime+0x4a/0x340 [ 52.255183][ T5588] shmem_file_read_iter+0x477/0x540 [ 52.260380][ T5588] copy_splice_read+0x3c1/0x5f0 [ 52.265244][ T5588] splice_direct_to_actor+0x290/0x680 [ 52.270629][ T5588] do_splice_direct+0xda/0x150 [ 52.275393][ T5588] do_sendfile+0x380/0x650 [ 52.279812][ T5588] __x64_sys_sendfile64+0x105/0x150 [ 52.285012][ T5588] x64_sys_call+0xb39/0x2fb0 [ 52.289608][ T5588] do_syscall_64+0xd2/0x200 [ 52.294110][ T5588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.300007][ T5588] [ 52.302328][ T5588] value changed: 0x12ddad9c -> 0x137648dc [ 52.308036][ T5588] [ 52.310354][ T5588] Reported by Kernel Concurrency Sanitizer on: [ 52.316507][ T5588] CPU: 0 UID: 0 PID: 5588 Comm: syz.3.906 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(voluntary) [ 52.328831][ T5588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 52.338892][ T5588] ==================================================================