last executing test programs: 623.187982ms ago: executing program 2 (id=916): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) link(&(0x7f0000000200)='./file1\x00', 0x0) 576.522797ms ago: executing program 2 (id=918): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}, {0x85, 0x0, 0x0, 0x73}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 570.115127ms ago: executing program 1 (id=920): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x4000) 543.534989ms ago: executing program 4 (id=921): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x44801, 0x0) 543.199389ms ago: executing program 3 (id=922): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x23, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 520.004591ms ago: executing program 1 (id=923): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x7}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x80080a, &(0x7f0000000440)={[{@barrier_val}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x100000000}}, {@usrjquota}], [{@appraise_type}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@fsname={'fsname', 0x3d, '\x00\x00\x01\x00\x00\x00'}}, {@uid_eq}]}, 0x1, 0x79b, &(0x7f0000001140)="$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") 454.574258ms ago: executing program 4 (id=925): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000180)=@req={0x401, 0xfffffffe, 0x0, 0xffffffff}, 0x16) close(r0) 454.383898ms ago: executing program 3 (id=926): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') unlinkat(r0, &(0x7f00000000c0)='./mnt\x00', 0x0) 454.166968ms ago: executing program 0 (id=927): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) r0 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x25, &(0x7f00000002c0), 0x8) 429.69015ms ago: executing program 4 (id=928): r0 = socket(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r0, &(0x7f0000004400), 0x400000000000203, 0x0) 408.009232ms ago: executing program 0 (id=929): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000800000000015000600142603600e1209000d2000000401a80016000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92954b43370e970100", 0xd8}], 0x1}, 0x0) 399.381673ms ago: executing program 3 (id=930): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x441e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x8, 0x0, 0x5, 0x2060005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x24, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_USERDATA={0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x7c}, 0x1, 0x0, 0x0, 0x40010}, 0x20000000) 317.25232ms ago: executing program 1 (id=931): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xf, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000007000000040000000000000e0400000000000000000000000100000d0000000004000000040000000000000000000004040000000000000000000009030000000000000061"], 0x0, 0x5b}, 0x28) 316.914551ms ago: executing program 2 (id=932): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x23, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}}}, 0x104) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) 316.708531ms ago: executing program 4 (id=933): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003280)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xcc0, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x0, 0x0, 0xe8, 0x0, &(0x7f0000000280)="dd"}, 0x48) 297.450942ms ago: executing program 1 (id=934): r0 = socket(0x1e, 0x805, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x1}], 0x1, 0x0, 0x0, 0x0) connect$tipc(r0, &(0x7f0000000600)=@id={0x1e, 0x3, 0x3}, 0x10) 265.253336ms ago: executing program 0 (id=935): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_ID={0x8}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4004850}, 0x20040000) 264.976785ms ago: executing program 2 (id=936): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") symlink(&(0x7f0000001140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000001380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) 242.642067ms ago: executing program 0 (id=937): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x10, 0x0, 0x0, 0xa, 0x20, 0x0, 0x62}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000003, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x300, 0x0, 0x1000, 0x0, 0xa, 0x20, 0x0, 0x2b}, {}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}, 0x200, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) 187.076662ms ago: executing program 3 (id=938): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x64, 0x200000}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x42, &(0x7f0000000040), 0x3b) 158.927735ms ago: executing program 0 (id=939): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x1e5800, 0x0) 158.605695ms ago: executing program 3 (id=940): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x34, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x800}, @TCA_HHF_QUANTUM={0x8, 0x2, 0xd}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x6}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x8}, @TCA_HHF_BACKLOG_LIMIT={0x0, 0x1, 0x2}, @TCA_HHF_QUANTUM={0x3, 0x2, 0xffff8001}]}}, @TCA_RATE={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 127.759628ms ago: executing program 1 (id=941): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000002700)='./file1\x00', 0x80, &(0x7f0000000b00)=ANY=[@ANYRES8=0x0, @ANYBLOB="d23c17f6ec95b3b820b1161ffa233394c6007d8285b061be4d1d842e4a63ec77a08347691f71d1e4132f09405a5b81867a01cf3df73c16fd31622d37a921bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6ab8e225d1"], 0xf, 0x2a4, &(0x7f00000001c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 125.642628ms ago: executing program 0 (id=951): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r0, 0x5, 0x4) 114.671549ms ago: executing program 2 (id=942): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x2c, r1, 0x401, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_LINK={0x8}, @GTPA_FAMILY={0x5, 0xd, 0x29}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) 33.584587ms ago: executing program 3 (id=943): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ppoll(&(0x7f0000000240)=[{r0, 0x400}], 0x1, &(0x7f0000000280)={0x0, 0x3938700}, 0x0, 0x0) write(r0, &(0x7f0000001300)="a47c", 0x2) 33.416157ms ago: executing program 2 (id=944): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x82040) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0xda3f, 0x0, 0x0, 0x0, 0x1f, 0x5, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000004c0800", "2809e8dbe10a598948224ad54afac11d875397bdb22d0000b420a1a93c5240f05f819e01177d3d458dd4992a61ac000000000000000000000000000700", "f400", [0x5, 0xfa9]}}) 33.204107ms ago: executing program 4 (id=945): r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000b40), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001540)={0x1c, r0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x404c) 16.566148ms ago: executing program 1 (id=946): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="08004e01"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) 0s ago: executing program 4 (id=947): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6, 0x6}, {0xd}, {0xd, 0xd}}, [@TCA_RATE={0x6, 0x5, {0xa, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x8000, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x4000440) kernel console output (not intermixed with test programs): [ 19.389844][ T29] audit: type=1400 audit(1766830978.914:62): avc: denied { search } for pid=3197 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.411804][ T29] audit: type=1400 audit(1766830978.914:63): avc: denied { search } for pid=3197 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.434331][ T29] audit: type=1400 audit(1766830978.914:64): avc: denied { search } for pid=3197 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.457194][ T29] audit: type=1400 audit(1766830978.914:65): avc: denied { search } for pid=3197 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.480119][ T29] audit: type=1400 audit(1766830978.914:66): avc: denied { read open } for pid=3198 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.88' (ED25519) to the list of known hosts. [ 22.533887][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 22.533902][ T29] audit: type=1400 audit(1766830982.054:70): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.562797][ T29] audit: type=1400 audit(1766830982.084:71): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.563522][ T3300] cgroup: Unknown subsys name 'net' [ 22.590418][ T29] audit: type=1400 audit(1766830982.114:72): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.729657][ T3300] cgroup: Unknown subsys name 'cpuset' [ 22.735690][ T3300] cgroup: Unknown subsys name 'rlimit' [ 22.845141][ T29] audit: type=1400 audit(1766830982.364:73): avc: denied { setattr } for pid=3300 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.869833][ T29] audit: type=1400 audit(1766830982.364:74): avc: denied { create } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.890412][ T29] audit: type=1400 audit(1766830982.364:75): avc: denied { write } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.910869][ T29] audit: type=1400 audit(1766830982.364:76): avc: denied { read } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.917705][ T3303] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.931197][ T29] audit: type=1400 audit(1766830982.374:77): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.964500][ T29] audit: type=1400 audit(1766830982.374:78): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.987731][ T29] audit: type=1400 audit(1766830982.394:79): avc: denied { read } for pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 23.019968][ T3300] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.901068][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 24.940021][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 24.991785][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 25.031979][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 25.045056][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.052269][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.059629][ T3312] bridge_slave_0: entered allmulticast mode [ 25.066052][ T3312] bridge_slave_0: entered promiscuous mode [ 25.077155][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.084266][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.091378][ T3317] bridge_slave_0: entered allmulticast mode [ 25.097787][ T3317] bridge_slave_0: entered promiscuous mode [ 25.115202][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.122283][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.129423][ T3312] bridge_slave_1: entered allmulticast mode [ 25.135822][ T3312] bridge_slave_1: entered promiscuous mode [ 25.143816][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.150980][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.158074][ T3317] bridge_slave_1: entered allmulticast mode [ 25.164447][ T3317] bridge_slave_1: entered promiscuous mode [ 25.199648][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.219289][ T3325] chnl_net:caif_netlink_parms(): no params data found [ 25.228597][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.238635][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.250021][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.257149][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.264278][ T3313] bridge_slave_0: entered allmulticast mode [ 25.270695][ T3313] bridge_slave_0: entered promiscuous mode [ 25.284734][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.298180][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.305317][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.312422][ T3313] bridge_slave_1: entered allmulticast mode [ 25.318745][ T3313] bridge_slave_1: entered promiscuous mode [ 25.355314][ T3312] team0: Port device team_slave_0 added [ 25.365085][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.372167][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.379521][ T3314] bridge_slave_0: entered allmulticast mode [ 25.385933][ T3314] bridge_slave_0: entered promiscuous mode [ 25.396391][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.406258][ T3312] team0: Port device team_slave_1 added [ 25.412837][ T3317] team0: Port device team_slave_0 added [ 25.418442][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.425563][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.432790][ T3314] bridge_slave_1: entered allmulticast mode [ 25.439100][ T3314] bridge_slave_1: entered promiscuous mode [ 25.448206][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.457994][ T3317] team0: Port device team_slave_1 added [ 25.486395][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.493372][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.519270][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.548189][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.555174][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.581162][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.592853][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.606765][ T3313] team0: Port device team_slave_0 added [ 25.612598][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.619573][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.645468][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.659825][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.668889][ T3325] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.675956][ T3325] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.683054][ T3325] bridge_slave_0: entered allmulticast mode [ 25.689768][ T3325] bridge_slave_0: entered promiscuous mode [ 25.696829][ T3313] team0: Port device team_slave_1 added [ 25.708043][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.715005][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.740892][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.756307][ T3325] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.763442][ T3325] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.770733][ T3325] bridge_slave_1: entered allmulticast mode [ 25.777154][ T3325] bridge_slave_1: entered promiscuous mode [ 25.800647][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.807594][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.833525][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.850006][ T3314] team0: Port device team_slave_0 added [ 25.860557][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.867508][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.893421][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.914253][ T3314] team0: Port device team_slave_1 added [ 25.921005][ T3325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.939849][ T3312] hsr_slave_0: entered promiscuous mode [ 25.945821][ T3312] hsr_slave_1: entered promiscuous mode [ 25.961356][ T3325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.973834][ T3317] hsr_slave_0: entered promiscuous mode [ 25.979994][ T3317] hsr_slave_1: entered promiscuous mode [ 25.985690][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 25.991418][ T3317] Cannot create hsr debugfs directory [ 26.001829][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.008839][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.034827][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.064057][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.071096][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.097018][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.108557][ T3325] team0: Port device team_slave_0 added [ 26.120518][ T3313] hsr_slave_0: entered promiscuous mode [ 26.126336][ T3313] hsr_slave_1: entered promiscuous mode [ 26.132150][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 26.137853][ T3313] Cannot create hsr debugfs directory [ 26.151291][ T3325] team0: Port device team_slave_1 added [ 26.200458][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.207414][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.233373][ T3325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.253101][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.260058][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.285947][ T3325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.302933][ T3314] hsr_slave_0: entered promiscuous mode [ 26.308823][ T3314] hsr_slave_1: entered promiscuous mode [ 26.314604][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 26.320351][ T3314] Cannot create hsr debugfs directory [ 26.397784][ T3325] hsr_slave_0: entered promiscuous mode [ 26.403709][ T3325] hsr_slave_1: entered promiscuous mode [ 26.409508][ T3325] debugfs: 'hsr0' already exists in 'hsr' [ 26.415211][ T3325] Cannot create hsr debugfs directory [ 26.488733][ T3312] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 26.497577][ T3312] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 26.510682][ T3312] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 26.521087][ T3312] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 26.559893][ T3313] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 26.569976][ T3313] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 26.579072][ T3313] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 26.587895][ T3313] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 26.624413][ T3317] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 26.633477][ T3317] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 26.645431][ T3317] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 26.654836][ T3317] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 26.686566][ T3325] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 26.699192][ T3325] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 26.708813][ T3325] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 26.718272][ T3325] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 26.738851][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.766396][ T3314] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 26.775646][ T3314] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 26.785934][ T3314] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 26.795875][ T3314] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 26.812035][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.835211][ T898] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.842315][ T898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.861160][ T2369] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.868217][ T2369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.897032][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.927729][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.935940][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.956084][ T2369] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.963200][ T2369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.975656][ T2369] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.982778][ T2369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.993776][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.006959][ T3325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.017331][ T2412] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.024442][ T2412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.040349][ T2412] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.047486][ T2412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.072002][ T3325] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.090897][ T2369] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.097994][ T2369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.112631][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.121599][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.130858][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.137881][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.156632][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.174452][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.181521][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.201960][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.209044][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.277768][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.314572][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.335499][ T3312] veth0_vlan: entered promiscuous mode [ 27.352874][ T3312] veth1_vlan: entered promiscuous mode [ 27.376979][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.410509][ T3312] veth0_macvtap: entered promiscuous mode [ 27.429022][ T3312] veth1_macvtap: entered promiscuous mode [ 27.443672][ T3325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.461711][ T3313] veth0_vlan: entered promiscuous mode [ 27.476112][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.489726][ T3313] veth1_vlan: entered promiscuous mode [ 27.504925][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.526584][ T3313] veth0_macvtap: entered promiscuous mode [ 27.544404][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.553286][ T3317] veth0_vlan: entered promiscuous mode [ 27.559845][ T3313] veth1_macvtap: entered promiscuous mode [ 27.567701][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.588643][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.599937][ T3317] veth1_vlan: entered promiscuous mode [ 27.606755][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.617174][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.633305][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 27.633318][ T29] audit: type=1400 audit(1766830987.154:90): avc: denied { mounton } for pid=3312 comm="syz-executor" path="/root/syzkaller.Ep050j/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 27.637821][ T3317] veth0_macvtap: entered promiscuous mode [ 27.653801][ T29] audit: type=1400 audit(1766830987.174:91): avc: denied { mount } for pid=3312 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 27.672300][ T3317] veth1_macvtap: entered promiscuous mode [ 27.691388][ T29] audit: type=1400 audit(1766830987.174:92): avc: denied { mounton } for pid=3312 comm="syz-executor" path="/root/syzkaller.Ep050j/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 27.702097][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.722107][ T29] audit: type=1400 audit(1766830987.174:93): avc: denied { mount } for pid=3312 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 27.722136][ T29] audit: type=1400 audit(1766830987.174:94): avc: denied { mounton } for pid=3312 comm="syz-executor" path="/root/syzkaller.Ep050j/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 27.733087][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.751146][ T29] audit: type=1400 audit(1766830987.174:95): avc: denied { mounton } for pid=3312 comm="syz-executor" path="/root/syzkaller.Ep050j/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 27.751178][ T29] audit: type=1400 audit(1766830987.174:96): avc: denied { unmount } for pid=3312 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 27.787891][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.828748][ T29] audit: type=1400 audit(1766830987.304:97): avc: denied { mounton } for pid=3312 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 27.838298][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.838860][ T29] audit: type=1400 audit(1766830987.304:98): avc: denied { mount } for pid=3312 comm="syz-executor" name="/" dev="gadgetfs" ino=3812 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 27.894706][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.904650][ T3312] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.922005][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.936238][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.948751][ T3314] veth0_vlan: entered promiscuous mode [ 27.950671][ T29] audit: type=1400 audit(1766830987.474:99): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 27.984811][ T3325] veth0_vlan: entered promiscuous mode [ 27.994048][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.010060][ T3325] veth1_vlan: entered promiscuous mode [ 28.021216][ T3314] veth1_vlan: entered promiscuous mode [ 28.024956][ T3489] loop0: detected capacity change from 0 to 128 [ 28.035637][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.053931][ T3314] veth0_macvtap: entered promiscuous mode [ 28.068597][ T3314] veth1_macvtap: entered promiscuous mode [ 28.083318][ T3489] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 28.087550][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.126714][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.136228][ T3325] veth0_macvtap: entered promiscuous mode [ 28.148974][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.156534][ T3489] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.166913][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.189262][ T3325] veth1_macvtap: entered promiscuous mode [ 28.197261][ T3312] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 28.200968][ T2369] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.230701][ T2369] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.252701][ T2369] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.265010][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.283178][ T3504] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 28.296894][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.314989][ T2369] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.337606][ T2369] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.364854][ T2369] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.378668][ T2369] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.393978][ T2369] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.420705][ T3518] capability: warning: `syz.0.15' uses deprecated v2 capabilities in a way that may be insecure [ 28.635005][ T3548] loop1: detected capacity change from 0 to 764 [ 28.657657][ T3548] Symlink component flag not implemented [ 28.677799][ T3556] loop3: detected capacity change from 0 to 128 [ 28.698918][ T3548] Symlink component flag not implemented (116) [ 28.712856][ T3556] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 28.728502][ T3556] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.763837][ T3556] EXT4-fs warning (device loop3): verify_group_input:137: Cannot add at group 9 (only 1 groups) [ 28.787206][ T3567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.30'. [ 28.838543][ T3577] loop4: detected capacity change from 0 to 128 [ 28.845984][ T3313] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 28.849786][ T3578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.30'. [ 28.871334][ T3578] Zero length message leads to an empty skb [ 28.990437][ T3596] loop0: detected capacity change from 0 to 128 [ 29.004285][ T3593] loop2: detected capacity change from 0 to 2048 [ 29.012597][ T3596] EXT4-fs: Ignoring removed nobh option [ 29.020580][ T3596] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 29.034522][ T3596] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 29.062858][ T3593] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.076944][ T3312] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 29.139325][ T3593] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.190286][ T3593] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.42: bg 0: block 345: padding at end of block bitmap is not set [ 29.249508][ T3593] EXT4-fs (loop2): Remounting filesystem read-only [ 29.310465][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.757176][ T3705] IPVS: Error connecting to the multicast addr [ 29.761164][ T3706] loop1: detected capacity change from 0 to 512 [ 29.772384][ T3706] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 29.785477][ T3706] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 29.829904][ T3706] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.95: bad orphan inode 131083 [ 29.840781][ T3706] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.869503][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.870603][ T3714] ======================================================= [ 29.870603][ T3714] WARNING: The mand mount option has been deprecated and [ 29.870603][ T3714] and is ignored by this kernel. Remove the mand [ 29.870603][ T3714] option from the mount to silence this warning. [ 29.870603][ T3714] ======================================================= [ 30.152819][ T3750] netlink: 'syz.3.118': attribute type 1 has an invalid length. [ 30.160605][ T3750] netlink: 24 bytes leftover after parsing attributes in process `syz.3.118'. [ 30.183292][ T3756] netlink: 7 bytes leftover after parsing attributes in process `syz.1.119'. [ 30.276607][ T3768] netlink: 8 bytes leftover after parsing attributes in process `syz.4.125'. [ 30.286663][ T3756] netlink: 7 bytes leftover after parsing attributes in process `syz.1.119'. [ 30.307391][ T3768] netlink: 'syz.4.125': attribute type 2 has an invalid length. [ 30.315161][ T3768] netlink: 24 bytes leftover after parsing attributes in process `syz.4.125'. [ 30.400917][ T3787] netlink: 60 bytes leftover after parsing attributes in process `syz.1.135'. [ 30.409843][ T3787] netlink: 12 bytes leftover after parsing attributes in process `syz.1.135'. [ 30.418730][ T3787] netlink: 60 bytes leftover after parsing attributes in process `syz.1.135'. [ 30.441772][ T3790] vhci_hcd vhci_hcd.0: invalid port number 9 [ 30.447787][ T3790] vhci_hcd vhci_hcd.0: invalid port number 9 [ 30.522153][ T3801] Cannot find add_set index 46338 as target [ 30.626490][ T3819] atomic_op ffff88811bd32928 conn xmit_atomic 0000000000000000 [ 30.751332][ T3838] loop3: detected capacity change from 0 to 2048 [ 30.774069][ T3838] EXT4-fs (loop3): failed to initialize system zone (-117) [ 30.781535][ T3838] EXT4-fs (loop3): mount failed [ 31.955084][ T3982] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.962457][ T3982] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.992042][ T3982] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 32.126465][ T3991] loop3: detected capacity change from 0 to 512 [ 32.143392][ T3991] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 32.158392][ T3991] System zones: 1-12 [ 32.167385][ T3991] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.230: corrupted in-inode xattr: e_value size too large [ 32.189612][ T3991] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.230: couldn't read orphan inode 15 (err -117) [ 32.201878][ C1] Illegal XDP return value 16128 on prog (id 37) dev team0, expect packet loss! [ 32.211952][ T3991] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.252633][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.445495][ T4017] loop2: detected capacity change from 0 to 2048 [ 32.471125][ T4017] EXT4-fs (loop2): failed to initialize system zone (-117) [ 32.484466][ T4017] EXT4-fs (loop2): mount failed [ 32.513302][ T4023] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 32.545543][ T4023] EXT4-fs (loop3): mount failed [ 32.644878][ C1] hrtimer: interrupt took 24682 ns [ 32.743918][ T29] kauditd_printk_skb: 147 callbacks suppressed [ 32.743933][ T29] audit: type=1400 audit(1766830992.264:246): avc: denied { create } for pid=4046 comm="syz.1.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 32.795730][ T29] audit: type=1400 audit(1766830992.264:247): avc: denied { write } for pid=4046 comm="syz.1.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 32.815766][ T29] audit: type=1400 audit(1766830992.264:248): avc: denied { nlmsg_write } for pid=4046 comm="syz.1.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 33.026842][ T29] audit: type=1400 audit(1766830992.544:249): avc: denied { create } for pid=4076 comm="syz.3.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 33.051879][ T29] audit: type=1400 audit(1766830992.574:250): avc: denied { bind } for pid=4076 comm="syz.3.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 33.100474][ T4081] netlink: 'syz.3.270': attribute type 21 has an invalid length. [ 33.110297][ T4081] netlink: 'syz.3.270': attribute type 5 has an invalid length. [ 33.117942][ T4081] netlink: 'syz.3.270': attribute type 6 has an invalid length. [ 33.152196][ T29] audit: type=1400 audit(1766830992.674:251): avc: denied { read } for pid=4084 comm="syz.0.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 33.223630][ T29] audit: type=1400 audit(1766830992.734:252): avc: denied { ioctl } for pid=4088 comm="syz.3.274" path="socket:[6041]" dev="sockfs" ino=6041 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.261748][ T4093] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 33.289346][ T29] audit: type=1400 audit(1766830992.794:253): avc: denied { relabelto } for pid=4090 comm="syz.0.276" name="73" dev="tmpfs" ino=387 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 33.315329][ T29] audit: type=1400 audit(1766830992.794:254): avc: denied { associate } for pid=4090 comm="syz.0.276" name="73" dev="tmpfs" ino=387 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 33.360582][ T29] audit: type=1400 audit(1766830992.874:255): avc: denied { remove_name } for pid=3312 comm="syz-executor" name="binderfs" dev="tmpfs" ino=391 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 33.468204][ T4107] SELinux: policydb string does not match my string SE Linux [ 33.510790][ T4107] SELinux: failed to load policy [ 33.781598][ T4137] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 33.851428][ T4155] __nla_validate_parse: 10 callbacks suppressed [ 33.851445][ T4155] netlink: 536 bytes leftover after parsing attributes in process `syz.4.306'. [ 33.909579][ T4166] syz.4.309 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 33.992552][ T4180] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 34.003554][ T4182] set_capacity_and_notify: 2 callbacks suppressed [ 34.003569][ T4182] loop3: detected capacity change from 0 to 512 [ 34.040568][ T4182] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.093466][ T4182] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.211966][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.231214][ T4201] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 34.353180][ T4216] vhci_hcd vhci_hcd.0: default hub control req: a115 v0007 i0000 l0 [ 34.577280][ T4249] loop2: detected capacity change from 0 to 136 [ 34.621193][ T4253] netlink: 124 bytes leftover after parsing attributes in process `syz.0.352'. [ 34.630250][ T4253] netlink: 40 bytes leftover after parsing attributes in process `syz.0.352'. [ 34.787640][ T4263] loop2: detected capacity change from 0 to 128 [ 34.832922][ T4263] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 34.847914][ T4263] ext4 filesystem being mounted at /53/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 34.938671][ T3325] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 35.061508][ T4288] capability: warning: `syz.4.366' uses 32-bit capabilities (legacy support in use) [ 35.189960][ T4305] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.212362][ T4309] netlink: 'syz.0.376': attribute type 11 has an invalid length. [ 35.365367][ T4333] netlink: 332 bytes leftover after parsing attributes in process `syz.1.388'. [ 35.456107][ T4349] netlink: 'syz.2.395': attribute type 1 has an invalid length. [ 35.463895][ T4349] netlink: 244 bytes leftover after parsing attributes in process `syz.2.395'. [ 35.520708][ T4353] netlink: 272 bytes leftover after parsing attributes in process `syz.4.397'. [ 35.627442][ T4369] loop1: detected capacity change from 0 to 512 [ 35.681973][ T4371] loop3: detected capacity change from 0 to 1024 [ 35.710212][ T4380] netlink: 8 bytes leftover after parsing attributes in process `syz.1.410'. [ 35.719869][ T4371] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 35.730808][ T4371] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 35.776413][ T4371] JBD2: no valid journal superblock found [ 35.782213][ T4371] EXT4-fs (loop3): Could not load journal inode [ 35.990243][ T4419] vhci_hcd vhci_hcd.3: invalid port number 9 [ 36.135350][ T4433] loop4: detected capacity change from 0 to 512 [ 36.156962][ T4433] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.260194][ T4433] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.301813][ T4449] loop3: detected capacity change from 0 to 128 [ 36.325029][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.335831][ T4451] SELinux: Context system_u:object is not valid (left unmapped). [ 36.371325][ T4457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.446'. [ 36.416918][ T4463] vhci_hcd vhci_hcd.0: invalid port number 249 [ 36.423208][ T4463] vhci_hcd vhci_hcd.0: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 36.499965][ T4482] tipc: Enabling of bearer <|th:s> rejected, media not registered [ 36.767028][ T3485] IPVS: starting estimator thread 0... [ 36.813285][ T4535] loop3: detected capacity change from 0 to 164 [ 36.831809][ T4539] netlink: 'syz.2.486': attribute type 11 has an invalid length. [ 36.859240][ T4525] IPVS: using max 2352 ests per chain, 117600 per kthread [ 36.888529][ T3485] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.896141][ T3485] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.903713][ T3485] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.911470][ T3485] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.919034][ T3485] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.926476][ T3485] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.933896][ T3485] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.941323][ T3485] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.948729][ T3485] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.956193][ T3485] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.965002][ T3485] hid-generic 0000:0000:0000.0001: hidraw0: HID v8.00 Device [syz0] on syz1 [ 36.989803][ T4543] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.996979][ T4543] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.999339][ T4552] loop1: detected capacity change from 0 to 1024 [ 37.017114][ T4550] fido_id[4550]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 37.017695][ T4552] EXT4-fs: Ignoring removed bh option [ 37.053895][ T4552] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.085073][ T4543] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 37.095958][ T4552] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.491: Allocating blocks 385-513 which overlap fs metadata [ 37.138113][ T4551] EXT4-fs (loop1): pa ffff888107a5b070: logic 16, phys. 129, len 24 [ 37.146236][ T4551] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 37.185223][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.304860][ T4580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.504'. [ 37.343669][ T4586] loop2: detected capacity change from 0 to 512 [ 37.365668][ T4590] raw_sendmsg: syz.1.509 forgot to set AF_INET. Fix it! [ 37.373335][ T4586] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 37.388013][ T4592] netlink: 256 bytes leftover after parsing attributes in process `syz.3.510'. [ 37.395230][ T4586] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 37.397019][ T4592] netlink: 'syz.3.510': attribute type 9 has an invalid length. [ 37.405333][ T4586] System zones: 1-12 [ 37.424239][ T4586] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.507: corrupted in-inode xattr: e_value size too large [ 37.438536][ T4586] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.507: couldn't read orphan inode 15 (err -117) [ 37.451880][ T4586] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.538256][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.636804][ T4623] syz.1.524 uses obsolete (PF_INET,SOCK_PACKET) [ 37.693613][ T4633] netlink: 'syz.1.529': attribute type 1 has an invalid length. [ 37.827486][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 37.827542][ T29] audit: type=1326 audit(1766830997.314:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4642 comm="syz.1.534" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f63c529f749 code=0x0 [ 37.856381][ T29] audit: type=1400 audit(1766830997.324:327): avc: denied { connect } for pid=4643 comm="syz.4.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 37.929176][ T29] audit: type=1400 audit(1766830997.434:328): avc: denied { bind } for pid=4651 comm="syz.2.537" lport=2526 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 37.949937][ T29] audit: type=1400 audit(1766830997.434:329): avc: denied { name_bind } for pid=4651 comm="syz.2.537" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 37.970601][ T29] audit: type=1400 audit(1766830997.434:330): avc: denied { node_bind } for pid=4651 comm="syz.2.537" saddr=::1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 38.033715][ T29] audit: type=1400 audit(1766830997.554:331): avc: denied { append } for pid=4663 comm="syz.4.544" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.059059][ T4667] random: crng reseeded on system resumption [ 38.063348][ T29] audit: type=1400 audit(1766830997.574:332): avc: denied { read write } for pid=4665 comm="syz.3.545" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 38.089171][ T29] audit: type=1400 audit(1766830997.574:333): avc: denied { ioctl open } for pid=4665 comm="syz.3.545" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 38.167158][ T29] audit: type=1326 audit(1766830997.684:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4674 comm="syz.2.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f836ba2f749 code=0x7ffc0000 [ 38.191127][ T29] audit: type=1326 audit(1766830997.684:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4674 comm="syz.2.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f836ba2f749 code=0x7ffc0000 [ 38.230445][ T4681] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 38.272340][ T4689] usb usb1: usbfs: process 4689 (syz.0.554) did not claim interface 0 before use [ 38.286657][ T4686] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 38.302458][ T4686] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 38.312802][ T4686] System zones: 1-12 [ 38.317303][ T4686] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.555: corrupted in-inode xattr: e_value size too large [ 38.337962][ T4686] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.555: couldn't read orphan inode 15 (err -117) [ 38.350768][ T4686] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.396948][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.536593][ T4726] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 38.824535][ T4758] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 38.844936][ T4761] FAT-fs (loop4): Directory bread(block 64) failed [ 38.845981][ T4758] EXT4-fs (loop1): orphan cleanup on readonly fs [ 38.858272][ T4758] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 38.874598][ T4758] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 38.881611][ T4758] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.590: bg 0: block 40: padding at end of block bitmap is not set [ 38.896333][ T4758] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 38.905099][ T4761] FAT-fs (loop4): Directory bread(block 65) failed [ 38.912047][ T4761] FAT-fs (loop4): Directory bread(block 66) failed [ 38.918668][ T4761] FAT-fs (loop4): Directory bread(block 67) failed [ 38.925728][ T4758] EXT4-fs (loop1): 1 truncate cleaned up [ 38.932015][ T4758] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 38.956737][ T4761] FAT-fs (loop4): Directory bread(block 68) failed [ 38.969543][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.970457][ T4761] FAT-fs (loop4): Directory bread(block 69) failed [ 38.987390][ T4761] FAT-fs (loop4): Directory bread(block 70) failed [ 38.994709][ T4761] FAT-fs (loop4): Directory bread(block 71) failed [ 39.018904][ T4761] FAT-fs (loop4): Directory bread(block 72) failed [ 39.028862][ T4761] FAT-fs (loop4): Directory bread(block 73) failed [ 39.100399][ T4793] ieee802154 phy0 wpan0: encryption failed: -22 [ 39.215758][ T4804] sctp: [Deprecated]: syz.2.611 (pid 4804) Use of struct sctp_assoc_value in delayed_ack socket option. [ 39.215758][ T4804] Use struct sctp_sack_info instead [ 39.288591][ T4818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.310162][ T4818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.546824][ T4863] sg_write: data in/out 2048/8 bytes for SCSI command 0xfe-- guessing data in; [ 39.546824][ T4863] program syz.4.639 not setting count and/or reply_len properly [ 39.666861][ T36] kernel read not supported for file /238/net/ip_tables_names (pid: 36 comm: kworker/1:1) [ 39.728227][ T4895] set_capacity_and_notify: 4 callbacks suppressed [ 39.728245][ T4895] loop4: detected capacity change from 0 to 512 [ 39.740970][ T4897] __nla_validate_parse: 4 callbacks suppressed [ 39.740986][ T4897] netlink: 24 bytes leftover after parsing attributes in process `syz.2.656'. [ 39.748261][ T4895] EXT4-fs: Ignoring removed nomblk_io_submit option [ 39.781927][ T4899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.657'. [ 39.782097][ T4895] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.654: bg 0: block 5: invalid block bitmap [ 39.803763][ T4895] EXT4-fs (loop4): Remounting filesystem read-only [ 39.810465][ T4895] EXT4-fs (loop4): 2 truncates cleaned up [ 39.816571][ T4895] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.866876][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.112499][ T4949] netlink: 12 bytes leftover after parsing attributes in process `syz.4.680'. [ 40.151712][ T4952] loop2: detected capacity change from 0 to 2048 [ 40.182326][ T4952] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.184360][ T4952] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 40.234971][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.453388][ T5000] netlink: 'syz.1.702': attribute type 10 has an invalid length. [ 40.466394][ T5003] sg_write: data in/out 2048/8 bytes for SCSI command 0xfe-- guessing data in; [ 40.466394][ T5003] program syz.2.705 not setting count and/or reply_len properly [ 40.502053][ T5000] team0: Port device dummy0 added [ 40.522843][ T5009] netlink: 'syz.1.702': attribute type 10 has an invalid length. [ 40.541080][ T5011] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 40.547624][ T5011] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 40.555301][ T5011] vhci_hcd vhci_hcd.0: Device attached [ 40.563336][ T5009] team0: Port device dummy0 removed [ 40.585052][ T5016] vhci_hcd: connection closed [ 40.585845][ T2412] vhci_hcd vhci_hcd.4: stop threads [ 40.586639][ T5025] loop3: detected capacity change from 0 to 512 [ 40.590655][ T2412] vhci_hcd vhci_hcd.4: release socket [ 40.604135][ T5009] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 40.608152][ T2412] vhci_hcd vhci_hcd.4: disconnect device [ 40.633323][ T5025] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.714: bad orphan inode 13 [ 40.645621][ T5025] ext4_test_bit(bit=12, block=4) = 1 [ 40.651050][ T5025] is_bad_inode(inode)=0 [ 40.655207][ T5025] NEXT_ORPHAN(inode)=0 [ 40.660006][ T5025] max_ino=32 [ 40.663269][ T5025] i_nlink=1 [ 40.670345][ T5025] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.691075][ T5034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.718'. [ 40.700653][ T5034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.718'. [ 40.712874][ T5025] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.714: Unrecognised inode hash code 20 [ 40.724971][ T5025] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.714: Corrupt directory, running e2fsck is recommended [ 40.741958][ T5025] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.714: Unrecognised inode hash code 20 [ 40.753334][ T5025] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.714: Corrupt directory, running e2fsck is recommended [ 40.771030][ T5025] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #2: block 13: comm syz.3.714: bad entry in directory: directory entry overrun - offset=108, inode=4294901777, rec_len=1024, size=1024 fake=0 [ 40.824912][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.908850][ T5058] netlink: 60 bytes leftover after parsing attributes in process `syz.3.730'. [ 40.917837][ T5058] netlink: 12 bytes leftover after parsing attributes in process `syz.3.730'. [ 40.984617][ T5069] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 41.095571][ T5086] loop2: detected capacity change from 0 to 128 [ 41.105483][ T5086] EXT4-fs: Ignoring removed nobh option [ 41.161262][ T5086] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 41.177721][ T5086] ext4 filesystem being mounted at /147/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 41.233008][ T3325] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.252265][ T5102] loop1: detected capacity change from 0 to 2048 [ 41.281107][ T5102] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.346417][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.392654][ T5112] netlink: 20 bytes leftover after parsing attributes in process `syz.3.755'. [ 41.412771][ T5112] team0: entered promiscuous mode [ 41.417892][ T5112] team_slave_0: entered promiscuous mode [ 41.423636][ T5112] team_slave_1: entered promiscuous mode [ 41.427260][ T5116] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 41.435845][ T5116] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 41.444036][ T5116] vhci_hcd vhci_hcd.0: Device attached [ 41.459957][ T5117] vhci_hcd: connection closed [ 41.460207][ T885] vhci_hcd vhci_hcd.1: stop threads [ 41.470846][ T885] vhci_hcd vhci_hcd.1: release socket [ 41.476294][ T885] vhci_hcd vhci_hcd.1: disconnect device [ 41.600985][ T5134] loop4: detected capacity change from 0 to 7 [ 41.607374][ T5134] Buffer I/O error on dev loop4, logical block 0, async page read [ 41.616492][ T5134] Buffer I/O error on dev loop4, logical block 0, async page read [ 41.624430][ T5134] loop4: unable to read partition table [ 41.631433][ T5134] loop_reread_partitions: partition scan of loop4 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 41.666910][ T3304] Buffer I/O error on dev loop4, logical block 0, async page read [ 41.690502][ T3304] Buffer I/O error on dev loop4, logical block 0, async page read [ 41.706691][ T3304] Buffer I/O error on dev loop4, logical block 0, async page read [ 41.717875][ T3304] Buffer I/O error on dev loop4, logical block 0, async page read [ 41.726586][ T3304] Buffer I/O error on dev loop4, logical block 0, async page read [ 41.735757][ T3304] Buffer I/O error on dev loop4, logical block 0, async page read [ 41.759356][ T3304] Buffer I/O error on dev loop4, logical block 0, async page read [ 41.768181][ T3304] Buffer I/O error on dev loop4, logical block 0, async page read [ 41.931065][ T5159] netlink: 124 bytes leftover after parsing attributes in process `syz.2.776'. [ 41.940221][ T5159] netlink: 16 bytes leftover after parsing attributes in process `syz.2.776'. [ 42.052525][ T5181] program syz.2.787 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 42.178421][ T5205] loop9: detected capacity change from 0 to 7 [ 42.188040][ T5205] loop9: unable to read partition table [ 42.193821][ T5205] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 42.193821][ T5205] ) failed (rc=-5) [ 42.281888][ T5217] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 42.512077][ T5252] vhci_hcd vhci_hcd.2: invalid port number 96 [ 42.518386][ T5252] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 42.681548][ T5280] loop2: detected capacity change from 0 to 512 [ 42.705469][ T5280] ------------[ cut here ]------------ [ 42.711005][ T5280] EA inode 11 i_nlink=2 [ 42.711016][ T5280] WARNING: fs/ext4/xattr.c:1058 at ext4_xattr_inode_update_ref+0x2e6/0x320, CPU#0: syz.2.835/5280 [ 42.725875][ T5280] Modules linked in: [ 42.730488][ T5280] CPU: 0 UID: 0 PID: 5280 Comm: syz.2.835 Not tainted syzkaller #0 PREEMPT(voluntary) [ 42.740147][ T5280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 42.750311][ T5280] RIP: 0010:ext4_xattr_inode_update_ref+0x305/0x320 [ 42.756969][ T5280] Code: 71 e2 9c ff 4c 8d 2d 0a f1 20 05 49 8d 7e 40 e8 71 6b b8 ff 49 8b 6e 40 4c 89 e7 e8 85 66 b8 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 2b ff ff ff e8 4c ad ba 03 66 66 66 2e 0f 1f 84 [ 42.777220][ T5280] RSP: 0018:ffffc900116d35a0 EFLAGS: 00010246 [ 42.783368][ T5280] RAX: ffff88811bff9b10 RBX: ffff88811b8e17b0 RCX: ffffffff81bb1cab [ 42.791400][ T5280] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86dc0da0 [ 42.799961][ T5280] RBP: 000000000000000b R08: 000188811b8e1763 R09: 0000000000000000 [ 42.808026][ T5280] R10: ffffc900116d34d0 R11: 0001c900116d34d0 R12: ffff88811b8e1760 [ 42.816078][ T5280] R13: ffffffff86dc0da0 R14: ffff88811b8e1718 R15: 0000000000000001 [ 42.824068][ T5280] FS: 00007f836a48f6c0(0000) GS:ffff8882aedc5000(0000) knlGS:0000000000000000 [ 42.833668][ T5280] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.840299][ T5280] CR2: ffffffff93000000 CR3: 000000011c34c000 CR4: 00000000003506f0 [ 42.844541][ T5288] netlink: 'syz.0.838': attribute type 322 has an invalid length. [ 42.848278][ T5280] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 42.864895][ T5280] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 42.872908][ T5280] Call Trace: [ 42.876282][ T5280] [ 42.879232][ T5280] ext4_xattr_set_entry+0x77f/0x1020 [ 42.884602][ T5280] ext4_xattr_ibody_set+0x184/0x3c0 [ 42.890546][ T5280] ext4_expand_extra_isize_ea+0xcbb/0x11f0 [ 42.896386][ T5280] __ext4_expand_extra_isize+0x246/0x280 [ 42.902049][ T5280] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 42.907550][ T5280] ext4_evict_inode+0x7c4/0xd40 [ 42.912474][ T5280] ? __pfx_ext4_evict_inode+0x10/0x10 [ 42.917968][ T5280] evict+0x2af/0x510 [ 42.922538][ T5280] ? __dquot_initialize+0x146/0x7c0 [ 42.927816][ T5280] iput+0x4bd/0x650 [ 42.931721][ T5280] ext4_process_orphan+0x1a9/0x1c0 [ 42.936876][ T5280] ext4_orphan_cleanup+0x6a8/0xa00 [ 42.942019][ T5280] ext4_fill_super+0x3411/0x37a0 [ 42.947008][ T5280] ? set_blocksize+0x1a8/0x310 [ 42.952546][ T5280] ? sb_set_blocksize+0xfc/0x170 [ 42.957491][ T5280] ? setup_bdev_super+0x30e/0x370 [ 42.962548][ T5280] ? __pfx_ext4_fill_super+0x10/0x10 [ 42.967929][ T5280] get_tree_bdev_flags+0x291/0x300 [ 42.973117][ T5280] ? __pfx_ext4_fill_super+0x10/0x10 [ 42.978478][ T5280] get_tree_bdev+0x1f/0x30 [ 42.983547][ T5280] ext4_get_tree+0x1c/0x30 [ 42.988063][ T5280] vfs_get_tree+0x57/0x1d0 [ 42.992520][ T5280] do_new_mount+0x24d/0x6a0 [ 42.997036][ T5280] path_mount+0x4ab/0xb80 [ 43.001419][ T5280] ? user_path_at+0xbf/0x130 [ 43.006057][ T5280] __se_sys_mount+0x28c/0x2e0 [ 43.011392][ T5280] __x64_sys_mount+0x67/0x80 [ 43.016017][ T5280] x64_sys_call+0x2cca/0x3000 [ 43.020811][ T5280] do_syscall_64+0xca/0x2b0 [ 43.025370][ T5280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.031375][ T5280] RIP: 0033:0x7f836ba30eea [ 43.035797][ T5280] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.056103][ T5280] RSP: 002b:00007f836a48ee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 43.064541][ T5280] RAX: ffffffffffffffda RBX: 00007f836a48eef0 RCX: 00007f836ba30eea [ 43.072616][ T5280] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f836a48eeb0 [ 43.081219][ T5280] RBP: 0000200000000180 R08: 00007f836a48eef0 R09: 0000000000800700 [ 43.089238][ T5280] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 43.097258][ T5280] R13: 00007f836a48eeb0 R14: 000000000000046f R15: 000000000000002c [ 43.105267][ T5280] [ 43.108284][ T5280] ---[ end trace 0000000000000000 ]--- [ 43.114548][ T5280] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.835: iget: bad extra_isize 90 (inode size 256) [ 43.128166][ T5280] EXT4-fs (loop2): Remounting filesystem read-only [ 43.134777][ T5280] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -30) [ 43.148528][ T5280] EXT4-fs (loop2): 1 orphan inode deleted [ 43.155264][ T5280] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.184485][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 43.184498][ T29] audit: type=1400 audit(1766831002.704:386): avc: denied { sqpoll } for pid=5310 comm="syz.1.850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 43.229133][ T29] audit: type=1400 audit(1766831002.744:387): avc: denied { map } for pid=5310 comm="syz.1.850" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9960 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 43.253703][ T29] audit: type=1400 audit(1766831002.744:388): avc: denied { read write } for pid=5310 comm="syz.1.850" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9960 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 43.333833][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.416288][ T29] audit: type=1400 audit(1766831002.844:389): avc: denied { recv } for pid=17 comm="rcu_exp_gp_kthr" saddr=10.128.0.163 src=30036 daddr=10.128.0.88 dest=33144 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 43.433762][ T5343] bond1: option ad_user_port_key: invalid value (1136) [ 43.448660][ T5343] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 43.457870][ T5343] bond1 (unregistering): Released all slaves [ 43.627333][ T5371] loop4: detected capacity change from 0 to 2048 [ 43.657817][ T5371] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.674790][ T5371] EXT4-fs error (device loop4): ext4_ext_precache:632: inode #2: comm syz.4.876: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 43.694059][ T5371] EXT4-fs (loop4): Remounting filesystem read-only [ 43.723821][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.759208][ T29] audit: type=1400 audit(1766831003.274:390): avc: denied { create } for pid=5385 comm="syz.1.884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 43.779485][ T29] audit: type=1400 audit(1766831003.274:391): avc: denied { write } for pid=5385 comm="syz.1.884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 43.807312][ T29] audit: type=1400 audit(1766831003.324:392): avc: denied { create } for pid=5386 comm="syz.3.883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 43.827369][ T29] audit: type=1400 audit(1766831003.324:393): avc: denied { setopt } for pid=5386 comm="syz.3.883" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 43.870338][ T5398] loop1: detected capacity change from 0 to 512 [ 43.892316][ T5398] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 43.934000][ T5398] EXT4-fs (loop1): 1 truncate cleaned up [ 43.941226][ T5398] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.985764][ T5413] lo: entered promiscuous mode [ 43.990574][ T5413] lo: entered allmulticast mode [ 44.013961][ T5413] tunl0: entered promiscuous mode [ 44.019027][ T5413] tunl0: entered allmulticast mode [ 44.029704][ T5413] gre0: entered promiscuous mode [ 44.034651][ T5413] gre0: entered allmulticast mode [ 44.055620][ T5413] gretap0: entered promiscuous mode [ 44.061648][ T5413] gretap0: entered allmulticast mode [ 44.068818][ T5413] erspan0: entered promiscuous mode [ 44.074382][ T5413] erspan0: entered allmulticast mode [ 44.082289][ T5413] ip_vti0: entered promiscuous mode [ 44.087503][ T5413] ip_vti0: entered allmulticast mode [ 44.094922][ T5413] ip6_vti0: entered promiscuous mode [ 44.100952][ T5413] ip6_vti0: entered allmulticast mode [ 44.108316][ T5413] sit0: entered promiscuous mode [ 44.113379][ T5413] sit0: entered allmulticast mode [ 44.143797][ T5413] ip6tnl0: entered promiscuous mode [ 44.149250][ T5413] ip6tnl0: entered allmulticast mode [ 44.155179][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.198679][ T5413] ip6gre0: entered promiscuous mode [ 44.204619][ T5413] ip6gre0: entered allmulticast mode [ 44.216916][ T5413] syz_tun: entered promiscuous mode [ 44.222958][ T5413] syz_tun: entered allmulticast mode [ 44.241338][ T5413] ip6gretap0: entered promiscuous mode [ 44.246856][ T5413] ip6gretap0: entered allmulticast mode [ 44.254791][ T5413] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.261861][ T5413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.270292][ T5413] bridge0: entered promiscuous mode [ 44.275488][ T5413] bridge0: entered allmulticast mode [ 44.282734][ T5413] vcan0: entered promiscuous mode [ 44.287794][ T5413] vcan0: entered allmulticast mode [ 44.302108][ T5413] bond0: entered promiscuous mode [ 44.307172][ T5413] bond_slave_0: entered promiscuous mode [ 44.313731][ T5413] bond_slave_1: entered promiscuous mode [ 44.319534][ T5413] bond0: entered allmulticast mode [ 44.324652][ T5413] bond_slave_0: entered allmulticast mode [ 44.331073][ T5413] bond_slave_1: entered allmulticast mode [ 44.338031][ T5413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.346483][ T5413] team0: entered allmulticast mode [ 44.351989][ T5413] team_slave_0: entered allmulticast mode [ 44.357689][ T5413] team_slave_1: entered allmulticast mode [ 44.363839][ T5413] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.371907][ T5413] dummy0: entered promiscuous mode [ 44.377027][ T5413] dummy0: entered allmulticast mode [ 44.384380][ T5413] nlmon0: entered promiscuous mode [ 44.390012][ T5413] nlmon0: entered allmulticast mode [ 44.396795][ T5413] caif0: entered promiscuous mode [ 44.401912][ T5413] caif0: entered allmulticast mode [ 44.407022][ T5413] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 44.477953][ T5438] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.499906][ T5438] ext4 filesystem being mounted at /164/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 44.533965][ T5438] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.905: corrupted xattr block 33: invalid ea_ino [ 44.548255][ T5438] EXT4-fs (loop4): Remounting filesystem read-only [ 44.554884][ T5438] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 44.573877][ T5438] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 44.618112][ T5413] syz.3.895 (5413) used greatest stack depth: 10040 bytes left [ 44.652140][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.672852][ T5464] Invalid logical block size (427) [ 44.762197][ T5477] random: crng reseeded on system resumption [ 44.804150][ T5483] set_capacity_and_notify: 2 callbacks suppressed [ 44.804164][ T5483] loop1: detected capacity change from 0 to 2048 [ 44.822362][ T29] audit: type=1400 audit(1766831004.334:394): avc: denied { setopt } for pid=5486 comm="syz.4.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 44.857311][ T5483] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 44.901330][ T29] audit: type=1400 audit(1766831004.404:395): avc: denied { connect } for pid=5492 comm="syz.4.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 44.944756][ T5495] netlink: 'syz.0.929': attribute type 14 has an invalid length. [ 44.952560][ T5495] __nla_validate_parse: 18 callbacks suppressed [ 44.952576][ T5495] netlink: 156 bytes leftover after parsing attributes in process `syz.0.929'. [ 45.047132][ T5509] loop2: detected capacity change from 0 to 128 [ 45.070887][ T5509] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 45.073320][ T5512] netlink: 104 bytes leftover after parsing attributes in process `syz.0.937'. [ 45.085790][ T5509] ext4 filesystem being mounted at /182/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 45.155787][ T5519] netlink: 16 bytes leftover after parsing attributes in process `syz.3.940'. [ 45.174459][ T5521] loop1: detected capacity change from 0 to 256 [ 45.183905][ T5521] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 198) [ 45.192622][ T5521] FAT-fs (loop1): Filesystem has been set read-only [ 45.200157][ T3325] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.208545][ T5521] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 198) [ 45.244541][ T5521] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 198) [ 45.280277][ T3314] ================================================================== [ 45.288387][ T3314] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 45.295779][ T3314] [ 45.298097][ T3314] read-write to 0xffff88811b8576b8 of 8 bytes by interrupt on cpu 1: [ 45.306162][ T3314] __xa_clear_mark+0xf5/0x1e0 [ 45.310839][ T3314] __folio_end_writeback+0xf4/0x360 [ 45.316059][ T3314] folio_end_writeback_no_dropbehind+0x6d/0x1b0 [ 45.322301][ T3314] folio_end_writeback+0x1c/0x70 [ 45.327236][ T3314] end_buffer_async_write+0x156/0x1f0 [ 45.332600][ T3314] end_bio_bh_io_sync+0x79/0xa0 [ 45.337452][ T3314] bio_endio+0x37e/0x420 [ 45.341698][ T3314] blk_update_request+0x336/0x730 [ 45.346722][ T3314] blk_mq_end_request+0x26/0x50 [ 45.351573][ T3314] lo_complete_rq+0x98/0x140 [ 45.356151][ T3314] blk_done_softirq+0x77/0xb0 [ 45.360823][ T3314] handle_softirqs+0xba/0x290 [ 45.365500][ T3314] run_ksoftirqd+0x1c/0x30 [ 45.369907][ T3314] smpboot_thread_fn+0x32b/0x530 [ 45.374842][ T3314] kthread+0x489/0x510 [ 45.378911][ T3314] ret_from_fork+0x149/0x290 [ 45.383498][ T3314] ret_from_fork_asm+0x1a/0x30 [ 45.388257][ T3314] [ 45.390568][ T3314] read to 0xffff88811b8576b8 of 8 bytes by task 3314 on cpu 0: [ 45.398095][ T3314] xas_find_marked+0x218/0x620 [ 45.402867][ T3314] find_get_entry+0x5d/0x380 [ 45.407452][ T3314] filemap_get_folios_tag+0x13b/0x210 [ 45.412818][ T3314] filemap_write_and_wait_range+0x1d3/0x340 [ 45.418702][ T3314] sync_blockdev+0x35/0x50 [ 45.423112][ T3314] kill_block_super+0x3c/0x70 [ 45.427782][ T3314] deactivate_locked_super+0x75/0x1c0 [ 45.433157][ T3314] deactivate_super+0x97/0xa0 [ 45.437833][ T3314] cleanup_mnt+0x2a9/0x320 [ 45.442245][ T3314] __cleanup_mnt+0x19/0x20 [ 45.446655][ T3314] task_work_run+0x131/0x1a0 [ 45.451233][ T3314] exit_to_user_mode_loop+0x1fe/0x740 [ 45.456595][ T3314] do_syscall_64+0x1e1/0x2b0 [ 45.461190][ T3314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.467080][ T3314] [ 45.469387][ T3314] value changed: 0x0000000000000003 -> 0x0000000000000000 [ 45.476476][ T3314] [ 45.478783][ T3314] Reported by Kernel Concurrency Sanitizer on: [ 45.484921][ T3314] CPU: 0 UID: 0 PID: 3314 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 45.496370][ T3314] Tainted: [W]=WARN [ 45.500157][ T3314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 45.510201][ T3314] ================================================================== [ 45.557983][ T5533] netlink: 'syz.4.947': attribute type 13 has an invalid length. [ 45.623041][ T5533] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.630385][ T5533] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.677738][ T5533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.690205][ T5533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.751866][ T53] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.761600][ T53] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.770704][ T53] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.780408][ T53] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0