last executing test programs: 1.070969834s ago: executing program 0 (id=1740): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x5d, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x1ff}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x40}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0xfc}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xd}}}}}]}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) 959.859993ms ago: executing program 1 (id=1749): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x30, 0x1e, 0x1, 0x70bd2a, 0xfffffffc, {0x7, 0x0, 0x0, r1}, [@NDA_LLADDR={0xa}, @NDA_MASTER={0x8, 0x9, 0xfa}]}, 0x30}}, 0x4100) 959.589173ms ago: executing program 1 (id=1751): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x4000080) 854.035061ms ago: executing program 1 (id=1755): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) close(r0) 784.234117ms ago: executing program 1 (id=1756): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000001010101000000000000000002001c002000018006000340000000001400018008c301007f000001080002007f0000010c00198008000100", @ANYRES32=r0], 0x40}}, 0x0) 616.341151ms ago: executing program 1 (id=1759): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x3, 'dh\x00', 0x0, 0x4, 0x76}, 0x2c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e24, 0x3, 'lc\x00', 0xb, 0x323b, 0x3a}, {@rand_addr=0x64010102, 0x4e23, 0x0, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) 615.953311ms ago: executing program 2 (id=1761): mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./bus\x00', 0x1000) 599.557182ms ago: executing program 1 (id=1762): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) 577.727744ms ago: executing program 2 (id=1764): socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x80000000, 0x6}, 0x800, 0x10000, 0x1, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000106}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 422.861596ms ago: executing program 2 (id=1769): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000540)=@assoc_value={r1, 0x1100}, 0x8) 394.160688ms ago: executing program 3 (id=1771): r0 = creat(&(0x7f0000000040)='./file0\x00', 0xecf86c37d53049cd) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0'}, 0xb) close(r0) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) 393.406318ms ago: executing program 2 (id=1772): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c00)={'ip6tnl0\x00', &(0x7f0000000b80)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x8, 0x42, @private1, @empty, 0x1, 0x0, 0x6, 0x8}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x2}, 0x94) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',access=', @ANYRESDEC=0x0]) 350.830062ms ago: executing program 3 (id=1773): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e0000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) 304.348776ms ago: executing program 3 (id=1775): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f00000071c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)='H', 0x1}], 0x1}}], 0x1, 0x0) 304.095726ms ago: executing program 4 (id=1776): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 303.911926ms ago: executing program 2 (id=1777): r0 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5452, &(0x7f0000000000)) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x48840) 303.656956ms ago: executing program 0 (id=1778): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c}}], 0x20, 0xc804}}], 0x1, 0x24040810) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000004c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=ANY=[@ANYBLOB="05000000030000000000000000400000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000002"], 0x38}, 0x300}, 0x0) 280.086938ms ago: executing program 3 (id=1779): r0 = socket(0x28, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x4}) 269.675899ms ago: executing program 0 (id=1780): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x18) sigaltstack(0x0, 0x0) 212.340453ms ago: executing program 4 (id=1781): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x10, 0x5}, 0x86) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x3e}, 0x18) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x0) 211.985853ms ago: executing program 3 (id=1782): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) read(r1, &(0x7f00000001c0)=""/155, 0x9b) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="ec0000002100390d000000000000000000000000000000000000000000000000e000000200000000000000000000000000000000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ff010000000000000000000000000001ffffffff000000000000000000000000ac1414aa000000000000000000000000ac141400000000000000000000000000000000000000000011000a00ff010000000000000000000000000001"], 0xec}}, 0x0) 211.807043ms ago: executing program 0 (id=1783): unshare(0x20000400) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000002300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002180)={r0}, 0x4) 211.688403ms ago: executing program 4 (id=1784): unshare(0x4020400) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) unshare(0x4020400) ioctl$TIOCGPTPEER(r0, 0x5441, 0x9) 210.094133ms ago: executing program 3 (id=1785): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c04, &(0x7f0000000340), 0x1, 0x779, &(0x7f0000001900)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) 139.867849ms ago: executing program 2 (id=1786): r0 = semget$private(0x0, 0x4000000009, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0xec7b, 0x1000}], 0x1) semop(r0, &(0x7f0000000140)=[{0x0, 0xffff}], 0x1) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x5, 0x800}, {0x0, 0x9, 0x1000}, {0x4, 0xc}, {0x0, 0xffff, 0x800}, {0x3, 0xe, 0x1800}], 0x5, &(0x7f0000000040)={0x77359400}) 139.646499ms ago: executing program 4 (id=1787): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r0, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000011c0)=""/70, 0x46}, {&(0x7f00000000c0)=""/43, 0x2b}, {&(0x7f0000002a00)=""/4106, 0x104d}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x4}, 0x1801}], 0x1, 0x0, 0x0) 139.234729ms ago: executing program 0 (id=1796): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) 87.198653ms ago: executing program 4 (id=1788): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000043c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) 358µs ago: executing program 0 (id=1789): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0xffffbfc0, 0x4e30, 0xfffffc01, 0x4, 0x5, "6e29efcae4ed690034357541de3350304205d2", 0x800, 0x9}) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0xd) 0s ago: executing program 4 (id=1790): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000001100)={{}, {0x1, 0x6}, [], {0x4, 0x5}, [], {0x10, 0x3}, {0x20, 0x7}}, 0x24, 0x1) setreuid(0xffffffffffffffff, 0xee01) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.80' (ED25519) to the list of known hosts. [ 34.057547][ T29] audit: type=1400 audit(1755728771.746:62): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 34.058663][ T3291] cgroup: Unknown subsys name 'net' [ 34.080293][ T29] audit: type=1400 audit(1755728771.746:63): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.107678][ T29] audit: type=1400 audit(1755728771.776:64): avc: denied { unmount } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.222864][ T3291] cgroup: Unknown subsys name 'cpuset' [ 34.229159][ T3291] cgroup: Unknown subsys name 'rlimit' [ 34.340116][ T29] audit: type=1400 audit(1755728772.026:65): avc: denied { setattr } for pid=3291 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.363375][ T29] audit: type=1400 audit(1755728772.026:66): avc: denied { create } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.383882][ T29] audit: type=1400 audit(1755728772.026:67): avc: denied { write } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.404268][ T29] audit: type=1400 audit(1755728772.026:68): avc: denied { read } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.413953][ T3294] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 34.424547][ T29] audit: type=1400 audit(1755728772.036:69): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.457854][ T29] audit: type=1400 audit(1755728772.036:70): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 34.481228][ T29] audit: type=1400 audit(1755728772.126:71): avc: denied { relabelto } for pid=3294 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 34.540682][ T3291] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.646506][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 35.739251][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 35.772671][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 35.781880][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 35.790972][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.798071][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.805335][ T3301] bridge_slave_0: entered allmulticast mode [ 35.811774][ T3301] bridge_slave_0: entered promiscuous mode [ 35.823395][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 35.837762][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.844845][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.852019][ T3301] bridge_slave_1: entered allmulticast mode [ 35.858577][ T3301] bridge_slave_1: entered promiscuous mode [ 35.912822][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.932738][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.991764][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.998881][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.006122][ T3312] bridge_slave_0: entered allmulticast mode [ 36.012653][ T3312] bridge_slave_0: entered promiscuous mode [ 36.019861][ T3301] team0: Port device team_slave_0 added [ 36.025913][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.033004][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.040299][ T3302] bridge_slave_0: entered allmulticast mode [ 36.046864][ T3302] bridge_slave_0: entered promiscuous mode [ 36.053768][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.061032][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.068287][ T3302] bridge_slave_1: entered allmulticast mode [ 36.074622][ T3302] bridge_slave_1: entered promiscuous mode [ 36.091268][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.098566][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.105727][ T3304] bridge_slave_0: entered allmulticast mode [ 36.112181][ T3304] bridge_slave_0: entered promiscuous mode [ 36.118740][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.125852][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.133126][ T3312] bridge_slave_1: entered allmulticast mode [ 36.139816][ T3312] bridge_slave_1: entered promiscuous mode [ 36.146754][ T3301] team0: Port device team_slave_1 added [ 36.162946][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.170133][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.177315][ T3306] bridge_slave_0: entered allmulticast mode [ 36.183795][ T3306] bridge_slave_0: entered promiscuous mode [ 36.190423][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.197518][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.204690][ T3304] bridge_slave_1: entered allmulticast mode [ 36.211059][ T3304] bridge_slave_1: entered promiscuous mode [ 36.231873][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.239034][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.247476][ T3306] bridge_slave_1: entered allmulticast mode [ 36.253900][ T3306] bridge_slave_1: entered promiscuous mode [ 36.270453][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.277525][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.303525][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.315390][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.335106][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.345258][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.354702][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.361642][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.387554][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.403933][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.418966][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.441360][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.455876][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.465647][ T3312] team0: Port device team_slave_0 added [ 36.472911][ T3312] team0: Port device team_slave_1 added [ 36.479079][ T3302] team0: Port device team_slave_0 added [ 36.485739][ T3302] team0: Port device team_slave_1 added [ 36.492325][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.552246][ T3304] team0: Port device team_slave_0 added [ 36.560095][ T3301] hsr_slave_0: entered promiscuous mode [ 36.566206][ T3301] hsr_slave_1: entered promiscuous mode [ 36.572571][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.579516][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.605455][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.616756][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.623787][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.649731][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.660774][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.667764][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.693698][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.705142][ T3306] team0: Port device team_slave_0 added [ 36.711069][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.718411][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.744324][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.755721][ T3304] team0: Port device team_slave_1 added [ 36.776424][ T3306] team0: Port device team_slave_1 added [ 36.801563][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.808577][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.834545][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.846219][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.853246][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.879273][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.896611][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.903611][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.929526][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.940817][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.947832][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.973839][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.022908][ T3312] hsr_slave_0: entered promiscuous mode [ 37.029057][ T3312] hsr_slave_1: entered promiscuous mode [ 37.035013][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 37.040743][ T3312] Cannot create hsr debugfs directory [ 37.056253][ T3304] hsr_slave_0: entered promiscuous mode [ 37.062305][ T3304] hsr_slave_1: entered promiscuous mode [ 37.068065][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 37.073833][ T3304] Cannot create hsr debugfs directory [ 37.091540][ T3302] hsr_slave_0: entered promiscuous mode [ 37.097723][ T3302] hsr_slave_1: entered promiscuous mode [ 37.103921][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 37.109664][ T3302] Cannot create hsr debugfs directory [ 37.133414][ T3306] hsr_slave_0: entered promiscuous mode [ 37.139409][ T3306] hsr_slave_1: entered promiscuous mode [ 37.145277][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 37.151004][ T3306] Cannot create hsr debugfs directory [ 37.339620][ T3301] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.348282][ T3301] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.357178][ T3301] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.367878][ T3301] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.390894][ T3304] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.400100][ T3304] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.413079][ T3304] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.436789][ T3304] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.446128][ T3302] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.464515][ T3302] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.475642][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.486960][ T3302] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.495969][ T3302] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.526020][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.533563][ T3306] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.542826][ T3306] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.555704][ T3306] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.565942][ T3306] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.576401][ T1007] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.583475][ T1007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.606337][ T1007] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.613474][ T1007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.666487][ T3312] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.675832][ T3312] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.693407][ T3312] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.702684][ T3312] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.730116][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.753598][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.762397][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.782591][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.792519][ T1007] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.799711][ T1007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.808599][ T1007] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.815740][ T1007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.839041][ T1007] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.846174][ T1007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.860449][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.867593][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.882167][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.900108][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.931797][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.959962][ T3304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.979034][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.986184][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.007551][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.027688][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.039057][ T1007] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.046179][ T1007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.065644][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.089208][ T3306] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.099676][ T3306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.124915][ T1007] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.132025][ T1007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.141482][ T1007] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.148605][ T1007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.180408][ T3301] veth0_vlan: entered promiscuous mode [ 38.187372][ T3312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.209332][ T3301] veth1_vlan: entered promiscuous mode [ 38.217337][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.260925][ T3301] veth0_macvtap: entered promiscuous mode [ 38.279639][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.297547][ T3301] veth1_macvtap: entered promiscuous mode [ 38.328576][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.344087][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.358878][ T51] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.378078][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.404823][ T51] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.435304][ T51] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.445408][ T3304] veth0_vlan: entered promiscuous mode [ 38.477279][ T3306] veth0_vlan: entered promiscuous mode [ 38.485204][ T3301] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.495762][ T3302] veth0_vlan: entered promiscuous mode [ 38.506990][ T51] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.534968][ T3302] veth1_vlan: entered promiscuous mode [ 38.545718][ T3304] veth1_vlan: entered promiscuous mode [ 38.558042][ T3306] veth1_vlan: entered promiscuous mode [ 38.583631][ T3302] veth0_macvtap: entered promiscuous mode [ 38.591157][ T3312] veth0_vlan: entered promiscuous mode [ 38.606940][ T3306] veth0_macvtap: entered promiscuous mode [ 38.628349][ T3477] program syz.1.7 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 38.628916][ T3312] veth1_vlan: entered promiscuous mode [ 38.645091][ T3302] veth1_macvtap: entered promiscuous mode [ 38.654355][ T3306] veth1_macvtap: entered promiscuous mode [ 38.661136][ T3304] veth0_macvtap: entered promiscuous mode [ 38.678439][ T3312] veth0_macvtap: entered promiscuous mode [ 38.689509][ T3312] veth1_macvtap: entered promiscuous mode [ 38.701087][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.718557][ T3304] veth1_macvtap: entered promiscuous mode [ 38.725970][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.738802][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.751027][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.765221][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.774296][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.788176][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.809618][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.819455][ T51] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.828481][ T51] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.842712][ T51] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.879224][ T51] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.888696][ T51] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.899544][ T51] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.920907][ T51] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.978690][ T51] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.995749][ T51] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.004672][ T3491] Zero length message leads to an empty skb [ 39.011701][ T51] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.046531][ T51] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.062131][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 39.062147][ T29] audit: type=1400 audit(1755728776.746:110): avc: denied { create } for pid=3495 comm="syz.1.12" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 39.089508][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.115771][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.134302][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.147496][ T3498] hub 8-0:1.0: USB hub found [ 39.152514][ T29] audit: type=1400 audit(1755728776.796:111): avc: denied { write } for pid=3495 comm="syz.1.12" name="file0" dev="tmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 39.152513][ T51] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.174610][ T29] audit: type=1400 audit(1755728776.796:112): avc: denied { open } for pid=3495 comm="syz.1.12" path="/7/file0" dev="tmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 39.174640][ T29] audit: type=1400 audit(1755728776.796:113): avc: denied { ioctl } for pid=3495 comm="syz.1.12" path="/7/file0" dev="tmpfs" ino=53 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 39.229209][ T29] audit: type=1400 audit(1755728776.796:114): avc: denied { open } for pid=3496 comm="syz.3.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 39.248324][ T29] audit: type=1400 audit(1755728776.796:115): avc: denied { kernel } for pid=3496 comm="syz.3.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 39.267497][ T29] audit: type=1400 audit(1755728776.806:116): avc: denied { read write } for pid=3500 comm="syz.4.5" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 39.267849][ T3498] hub 8-0:1.0: 8 ports detected [ 39.291452][ T29] audit: type=1400 audit(1755728776.806:117): avc: denied { open } for pid=3500 comm="syz.4.5" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 39.321121][ T29] audit: type=1400 audit(1755728776.806:118): avc: denied { write } for pid=3496 comm="syz.3.13" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 39.354046][ T51] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.360847][ T29] audit: type=1400 audit(1755728776.896:119): avc: denied { allowed } for pid=3499 comm="syz.2.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 39.418098][ T3514] loop0: detected capacity change from 0 to 128 [ 39.534596][ T3526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24'. [ 39.543998][ T3526] netlink: 312 bytes leftover after parsing attributes in process `syz.2.24'. [ 39.552994][ T3526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24'. [ 39.627938][ T3540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.31'. [ 39.707126][ T3549] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.833180][ T3560] loop3: detected capacity change from 0 to 128 [ 39.852069][ T3559] loop0: detected capacity change from 0 to 512 [ 39.882695][ T3559] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.895899][ T3559] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 39.996076][ T3559] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 40.116957][ T3559] EXT4-fs (loop0): 1 truncate cleaned up [ 40.145850][ T3559] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.232016][ T3578] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 40.238731][ T3578] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 40.246564][ T3578] vhci_hcd vhci_hcd.0: Device attached [ 40.275404][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.275895][ T3578] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 40.332266][ T3578] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(7) [ 40.338878][ T3578] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 40.346354][ T3578] vhci_hcd vhci_hcd.0: Device attached [ 40.387496][ T3590] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(10) [ 40.394237][ T3590] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 40.401952][ T3590] vhci_hcd vhci_hcd.0: Device attached [ 40.442328][ T3591] vhci_hcd: connection closed [ 40.442435][ T3583] vhci_hcd: connection closed [ 40.442961][ T3579] vhci_hcd: connection closed [ 40.455253][ T51] vhci_hcd: stop threads [ 40.464305][ T51] vhci_hcd: release socket [ 40.468794][ T51] vhci_hcd: disconnect device [ 40.483128][ T51] vhci_hcd: stop threads [ 40.487420][ T51] vhci_hcd: release socket [ 40.491971][ T51] vhci_hcd: disconnect device [ 40.497580][ T3484] usb 7-1: new high-speed USB device number 2 using vhci_hcd [ 40.513737][ T3580] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 40.537622][ T51] vhci_hcd: stop threads [ 40.541940][ T51] vhci_hcd: release socket [ 40.546396][ T51] vhci_hcd: disconnect device [ 40.630642][ T3603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.55'. [ 40.739850][ T3611] loop0: detected capacity change from 0 to 1024 [ 40.740691][ T3561] syz.1.37 (3561) used greatest stack depth: 10736 bytes left [ 40.786007][ T3611] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.872265][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.943904][ T3621] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3621 comm=syz.4.63 [ 40.956291][ T3621] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3621 comm=syz.4.63 [ 41.006141][ T3627] loop0: detected capacity change from 0 to 256 [ 41.050023][ T3627] ======================================================= [ 41.050023][ T3627] WARNING: The mand mount option has been deprecated and [ 41.050023][ T3627] and is ignored by this kernel. Remove the mand [ 41.050023][ T3627] option from the mount to silence this warning. [ 41.050023][ T3627] ======================================================= [ 41.158050][ T3627] FAT-fs (loop0): Directory bread(block 64) failed [ 41.177712][ T3627] FAT-fs (loop0): Directory bread(block 65) failed [ 41.206286][ T3627] FAT-fs (loop0): Directory bread(block 66) failed [ 41.232082][ T3627] FAT-fs (loop0): Directory bread(block 67) failed [ 41.244237][ T3627] FAT-fs (loop0): Directory bread(block 68) failed [ 41.268377][ T3627] FAT-fs (loop0): Directory bread(block 69) failed [ 41.276643][ T3627] FAT-fs (loop0): Directory bread(block 70) failed [ 41.296357][ T3627] FAT-fs (loop0): Directory bread(block 71) failed [ 41.306556][ T3627] FAT-fs (loop0): Directory bread(block 72) failed [ 41.330077][ T3656] loop4: detected capacity change from 0 to 1024 [ 41.337968][ T3627] FAT-fs (loop0): Directory bread(block 73) failed [ 41.403123][ T3632] loop3: detected capacity change from 0 to 32768 [ 41.455560][ T3656] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.552421][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.802150][ T3684] loop3: detected capacity change from 0 to 512 [ 41.825427][ T3684] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 41.873203][ T3684] EXT4-fs (loop3): 1 truncate cleaned up [ 41.890851][ T3684] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.907923][ T3696] bridge0: entered promiscuous mode [ 41.928017][ T3696] macsec1: entered promiscuous mode [ 41.937415][ T3696] bridge0: port 3(macsec1) entered blocking state [ 41.943971][ T3696] bridge0: port 3(macsec1) entered disabled state [ 41.958174][ T3696] macsec1: entered allmulticast mode [ 41.963548][ T3696] bridge0: entered allmulticast mode [ 41.975724][ T3696] macsec1: left allmulticast mode [ 41.980825][ T3696] bridge0: left allmulticast mode [ 42.001082][ T3696] bridge0: left promiscuous mode [ 42.067727][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.266800][ T3733] loop2: detected capacity change from 0 to 128 [ 42.272555][ T3732] bond0: option miimon: invalid value (18446744073709486081) [ 42.280566][ T3732] bond0: option miimon: allowed values 0 - 2147483647 [ 42.300738][ T3737] netlink: 'syz.3.107': attribute type 21 has an invalid length. [ 42.308973][ T3735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.108'. [ 42.346579][ T3735] netlink: 12 bytes leftover after parsing attributes in process `syz.4.108'. [ 42.528929][ T3758] loop4: detected capacity change from 0 to 1024 [ 42.549066][ T3758] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 42.571079][ T3758] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.867603][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.942348][ T3799] loop4: detected capacity change from 0 to 1024 [ 42.959371][ T3799] EXT4-fs: Ignoring removed nobh option [ 42.965142][ T3799] EXT4-fs: Ignoring removed bh option [ 43.001255][ T3799] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.047140][ T3799] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.133: Allocating blocks 497-513 which overlap fs metadata [ 43.075091][ T3799] EXT4-fs (loop4): pa ffff888106dd4000: logic 256, phys. 369, len 9 [ 43.083183][ T3799] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 43.192126][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.213555][ T3832] netlink: 28 bytes leftover after parsing attributes in process `syz.3.145'. [ 43.222522][ T3832] netlink: 28 bytes leftover after parsing attributes in process `syz.3.145'. [ 43.293787][ T3838] tap0: tun_chr_ioctl cmd 1074025677 [ 43.299242][ T3838] tap0: linktype set to 776 [ 43.599168][ T3864] capability: warning: `syz.2.159' uses deprecated v2 capabilities in a way that may be insecure [ 43.811427][ T3887] loop2: detected capacity change from 0 to 164 [ 43.917901][ T3902] netlink: 36 bytes leftover after parsing attributes in process `syz.2.175'. [ 44.035757][ T3920] loop0: detected capacity change from 0 to 1024 [ 44.061405][ T3920] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 44.076836][ T3920] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.101794][ T3920] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 3: comm syz.0.186: lblock 3 mapped to illegal pblock 3 (length 3) [ 44.128167][ T3920] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 44.141093][ T3920] EXT4-fs (loop0): This should not happen!! Data will be lost [ 44.141093][ T3920] [ 44.153178][ T29] kauditd_printk_skb: 134 callbacks suppressed [ 44.153191][ T29] audit: type=1326 audit(1755729010.831:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3929 comm="syz.3.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87a04ebe9 code=0x7ffc0000 [ 44.183141][ T29] audit: type=1326 audit(1755729010.841:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3929 comm="syz.3.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7ff87a04ebe9 code=0x7ffc0000 [ 44.206309][ T29] audit: type=1326 audit(1755729010.841:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3929 comm="syz.3.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87a04ebe9 code=0x7ffc0000 [ 44.230139][ T29] audit: type=1326 audit(1755729010.841:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3929 comm="syz.3.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87a04ebe9 code=0x7ffc0000 [ 44.253419][ T29] audit: type=1326 audit(1755729010.841:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3929 comm="syz.3.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff87a04ebe9 code=0x7ffc0000 [ 44.276641][ T29] audit: type=1326 audit(1755729010.841:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3929 comm="syz.3.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87a04ebe9 code=0x7ffc0000 [ 44.300329][ T29] audit: type=1326 audit(1755729010.841:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3929 comm="syz.3.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87a04ebe9 code=0x7ffc0000 [ 44.323669][ T29] audit: type=1326 audit(1755729010.841:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3929 comm="syz.3.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff87a04ebe9 code=0x7ffc0000 [ 44.346816][ T29] audit: type=1326 audit(1755729010.841:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3929 comm="syz.3.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87a04ebe9 code=0x7ffc0000 [ 44.370160][ T29] audit: type=1326 audit(1755729010.841:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3929 comm="syz.3.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87a04ebe9 code=0x7ffc0000 [ 44.409503][ T51] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:3: lblock 8 mapped to illegal pblock 8 (length 8) [ 44.425395][ T51] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 44.437807][ T51] EXT4-fs (loop0): This should not happen!! Data will be lost [ 44.437807][ T51] [ 44.450606][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 44.510917][ T3945] SELinux: Context system_u:object is not valid (left unmapped). [ 44.571213][ T3951] Driver unsupported XDP return value 0 on prog (id 70) dev N/A, expect packet loss! [ 44.657896][ T3964] loop2: detected capacity change from 0 to 512 [ 44.669198][ T3964] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 44.708023][ T3292] udevd[3292]: failed to send result of seq 7632 to main daemon: Connection refused [ 44.712744][ T3964] EXT4-fs (loop2): 1 truncate cleaned up [ 44.728735][ T3964] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.803570][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.824341][ T3987] loop0: detected capacity change from 0 to 512 [ 44.837773][ T3987] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.216: corrupted in-inode xattr: invalid ea_ino [ 44.851393][ T3987] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.216: couldn't read orphan inode 15 (err -117) [ 44.865778][ T3987] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.925097][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.945596][ T4004] __nla_validate_parse: 3 callbacks suppressed [ 44.945613][ T4004] netlink: 28 bytes leftover after parsing attributes in process `syz.3.223'. [ 44.960779][ T4004] netlink: 28 bytes leftover after parsing attributes in process `syz.3.223'. [ 45.041194][ T4019] bridge0: entered promiscuous mode [ 45.072772][ T4019] syz.0.227 (4019) used greatest stack depth: 10272 bytes left [ 45.177566][ T4039] loop2: detected capacity change from 0 to 512 [ 45.198870][ T4039] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 45.217801][ T4039] EXT4-fs (loop2): orphan cleanup on readonly fs [ 45.227715][ T4039] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.236: Block bitmap for bg 0 marked uninitialized [ 45.251082][ T4039] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 45.263562][ T4039] EXT4-fs (loop2): 1 orphan inode deleted [ 45.269614][ T4039] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 45.305782][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.450674][ T4062] netlink: 64 bytes leftover after parsing attributes in process `syz.1.245'. [ 45.459652][ T4062] netlink: 20 bytes leftover after parsing attributes in process `syz.1.245'. [ 45.516338][ T4070] loop1: detected capacity change from 0 to 1024 [ 45.524568][ T4070] EXT4-fs: inline encryption not supported [ 45.530457][ T4070] EXT4-fs: Ignoring removed i_version option [ 45.544834][ T4070] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.575038][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.607627][ T4076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.625704][ T4076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.651953][ T3484] vhci_hcd: vhci_device speed not set [ 45.726398][ T4092] loop1: detected capacity change from 0 to 512 [ 45.740873][ T4092] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 45.749467][ T4092] System zones: 1-12 [ 45.753862][ T4092] EXT4-fs error (device loop1): dx_probe:791: inode #2: comm syz.1.258: Directory hole found for htree index block 0 [ 45.767378][ T4092] EXT4-fs (loop1): Remounting filesystem read-only [ 45.774147][ T4092] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 45.776148][ T4097] loop3: detected capacity change from 0 to 512 [ 45.782477][ T4092] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 45.797346][ T4092] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.803887][ T4097] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.825890][ T4097] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.836813][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.879640][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.028495][ T4129] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.275'. [ 46.160044][ T4142] loop3: detected capacity change from 0 to 4096 [ 46.168851][ T4142] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.204537][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.335431][ T4171] netlink: 188 bytes leftover after parsing attributes in process `syz.3.295'. [ 46.393545][ T4177] 9pnet: Could not find request transport: r [ 46.431946][ T4185] netlink: 20 bytes leftover after parsing attributes in process `syz.3.302'. [ 46.477045][ T4194] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 46.485371][ T4196] netlink: 12 bytes leftover after parsing attributes in process `syz.0.307'. [ 46.503633][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.510883][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.687536][ T4227] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.725695][ T4227] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.764393][ T4235] loop3: detected capacity change from 0 to 1024 [ 46.775854][ T4227] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.804291][ T4235] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.835340][ T4227] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.838363][ T4235] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.885965][ T4235] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 3: comm syz.3.336: lblock 3 mapped to illegal pblock 3 (length 13) [ 46.905238][ T4235] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 46.917722][ T4235] EXT4-fs (loop3): This should not happen!! Data will be lost [ 46.917722][ T4235] [ 46.947251][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.977403][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.998204][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.021026][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.052312][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.090689][ T4246] loop0: detected capacity change from 0 to 512 [ 47.106958][ T4246] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.121808][ T4246] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.152760][ T4254] IPv6: Can't replace route, no match found [ 47.184810][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.216438][ T4262] netem: incorrect ge model size [ 47.221473][ T4262] netem: change failed [ 47.277805][ T4272] IPv6: Can't replace route, no match found [ 47.321108][ T4280] netlink: 32 bytes leftover after parsing attributes in process `syz.0.345'. [ 47.399862][ T4289] loop4: detected capacity change from 0 to 2048 [ 47.423433][ T4289] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.438866][ T4289] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.348: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 47.463928][ T4289] EXT4-fs (loop4): Remounting filesystem read-only [ 47.489836][ T4294] 9pnet: Could not find request transport: 7Taʪ/^i o [ 47.518159][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.519531][ T4305] netlink: 12 bytes leftover after parsing attributes in process `syz.1.355'. [ 47.819730][ T4359] tipc: Started in network mode [ 47.824812][ T4359] tipc: Node identity 7, cluster identity 4711 [ 47.830987][ T4359] tipc: Node number set to 7 [ 47.857610][ T4362] syzkaller1: tun_chr_ioctl cmd 1074812118 [ 48.178528][ T4406] loop9: detected capacity change from 0 to 7 [ 48.185326][ T4406] Buffer I/O error on dev loop9, logical block 0, async page read [ 48.193827][ T4406] Buffer I/O error on dev loop9, logical block 0, async page read [ 48.201794][ T4406] loop9: unable to read partition table [ 48.209639][ T4406] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 48.209639][ T4406] ) failed (rc=-5) [ 48.225215][ T4408] loop1: detected capacity change from 0 to 512 [ 48.234184][ T4408] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 48.245153][ T4408] EXT4-fs (loop1): 1 truncate cleaned up [ 48.251273][ T4408] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.352515][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.430121][ T4428] loop2: detected capacity change from 0 to 1764 [ 48.435857][ T4432] netlink: 'syz.1.415': attribute type 25 has an invalid length. [ 48.468433][ T4430] 9pnet: Could not find request transport: f0xffffffffffffffff [ 48.476785][ T4435] SELinux: policydb version 0 does not match my version range 15-35 [ 48.485164][ T4435] SELinux: failed to load policy [ 48.667925][ T4469] netlink: 'syz.3.431': attribute type 21 has an invalid length. [ 48.675992][ T4469] netlink: 'syz.3.431': attribute type 1 has an invalid length. [ 48.776337][ T4483] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4483 comm=syz.4.437 [ 48.788910][ T4483] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4483 comm=syz.4.437 [ 48.958771][ T4501] loop0: detected capacity change from 0 to 1024 [ 48.994950][ T4501] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.100044][ T4520] loop3: detected capacity change from 0 to 512 [ 49.146775][ T4501] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 49.150657][ T4520] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.172798][ T4501] EXT4-fs (loop0): Remounting filesystem read-only [ 49.174627][ T4520] ext4 filesystem being mounted at /97/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.201004][ T4520] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.453: corrupted inode contents [ 49.213444][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.225394][ T4520] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.453: mark_inode_dirty error [ 49.243728][ T4520] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.453: corrupted inode contents [ 49.298846][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.391649][ T29] kauditd_printk_skb: 140 callbacks suppressed [ 49.391666][ T29] audit: type=1400 audit(1755729016.071:404): avc: denied { sqpoll } for pid=4539 comm="syz.4.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 49.439828][ T29] audit: type=1400 audit(1755729016.081:405): avc: denied { create } for pid=4539 comm="syz.4.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 49.459437][ T29] audit: type=1400 audit(1755729016.081:406): avc: denied { write } for pid=4539 comm="syz.4.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 50.000541][ T4583] loop1: detected capacity change from 0 to 1764 [ 50.044837][ T29] audit: type=1400 audit(1755729016.731:407): avc: denied { module_load } for pid=4586 comm="syz.1.484" path="/sys/kernel/notes" dev="sysfs" ino=212 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 50.126975][ T29] audit: type=1400 audit(1755729016.781:408): avc: denied { mount } for pid=4588 comm="syz.3.485" name="/" dev="ramfs" ino=7912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 50.166502][ T29] audit: type=1400 audit(1755729016.811:409): avc: denied { unmount } for pid=3312 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 50.201184][ T4603] bond_slave_0: entered promiscuous mode [ 50.206967][ T4603] bond_slave_1: entered promiscuous mode [ 50.214209][ T4603] macsec1: entered allmulticast mode [ 50.216750][ T29] audit: type=1400 audit(1755729016.901:410): avc: denied { lock } for pid=4604 comm="syz.2.493" path="socket:[8403]" dev="sockfs" ino=8403 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 50.219531][ T4603] bond0: entered allmulticast mode [ 50.219550][ T4603] bond_slave_0: entered allmulticast mode [ 50.254476][ T4603] bond_slave_1: entered allmulticast mode [ 50.265991][ T4603] bond0: left allmulticast mode [ 50.270920][ T4603] bond_slave_0: left allmulticast mode [ 50.276562][ T4603] bond_slave_1: left allmulticast mode [ 50.282107][ T4603] bond_slave_0: left promiscuous mode [ 50.287596][ T4603] bond_slave_1: left promiscuous mode [ 50.350399][ T4619] __nla_validate_parse: 3 callbacks suppressed [ 50.350473][ T4619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.500'. [ 50.413044][ T4631] netlink: 32 bytes leftover after parsing attributes in process `syz.2.505'. [ 50.470879][ T4642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.510'. [ 50.484720][ T29] audit: type=1400 audit(1755729017.171:411): avc: denied { create } for pid=4641 comm="syz.3.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.504194][ T29] audit: type=1400 audit(1755729017.171:412): avc: denied { connect } for pid=4641 comm="syz.3.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.585782][ T29] audit: type=1400 audit(1755729017.271:413): avc: denied { create } for pid=4654 comm="syz.3.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 50.622704][ T4653] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.676865][ T4653] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.691811][ T4667] netlink: 'syz.4.523': attribute type 21 has an invalid length. [ 50.735898][ T4653] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.736942][ T4674] loop4: detected capacity change from 0 to 512 [ 50.764229][ T4674] EXT4-fs (loop4): too many log groups per flexible block group [ 50.772228][ T4674] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 50.779205][ T4674] EXT4-fs (loop4): mount failed [ 50.788034][ T4653] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.790438][ T4680] loop3: detected capacity change from 0 to 512 [ 50.825191][ T4680] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.837882][ T4680] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.870427][ T3441] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.871953][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.888151][ T3441] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.908135][ T3441] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.928060][ T3441] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.007622][ T4694] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 51.106026][ T4704] capability: warning: `syz.4.538' uses 32-bit capabilities (legacy support in use) [ 51.108608][ T4707] tap0: tun_chr_ioctl cmd 1074025677 [ 51.121074][ T4707] tap0: linktype set to 1 [ 51.194222][ T4718] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.235603][ T4718] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.305405][ T4718] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.384096][ T4718] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.467570][ T4745] netlink: 100 bytes leftover after parsing attributes in process `syz.1.549'. [ 51.522071][ T3441] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.545445][ T51] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.553984][ T51] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.563655][ T51] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.650695][ T4766] loop1: detected capacity change from 0 to 1024 [ 51.670599][ T4766] EXT4-fs: Ignoring removed oldalloc option [ 51.676744][ T4766] EXT4-fs: Ignoring removed i_version option [ 51.684788][ T4766] EXT4-fs (loop1): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 51.725675][ T4766] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.764468][ T4766] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.555: bg 0: block 360: padding at end of block bitmap is not set [ 51.780978][ T4766] syz.1.555 (4766) used greatest stack depth: 10240 bytes left [ 51.800602][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.825340][ T4785] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 51.831939][ T4785] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 51.833497][ T4790] netlink: 28 bytes leftover after parsing attributes in process `syz.1.560'. [ 51.839561][ T4785] vhci_hcd vhci_hcd.0: Device attached [ 51.848457][ T4790] netlink: 32 bytes leftover after parsing attributes in process `syz.1.560'. [ 51.863001][ T4790] netlink: 28 bytes leftover after parsing attributes in process `syz.1.560'. [ 51.872981][ T4790] netlink: 32 bytes leftover after parsing attributes in process `syz.1.560'. [ 51.886402][ T4788] vhci_hcd: connection closed [ 51.892089][ T51] vhci_hcd: stop threads [ 51.901067][ T51] vhci_hcd: release socket [ 51.905558][ T51] vhci_hcd: disconnect device [ 52.008205][ T4798] sch_fq: defrate 0 ignored. [ 52.300314][ C1] hrtimer: interrupt took 27216 ns [ 52.826833][ T4866] loop4: detected capacity change from 0 to 512 [ 52.849709][ T4866] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 52.866842][ T4866] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e09c, mo2=0002] [ 52.875449][ T4870] netlink: 16 bytes leftover after parsing attributes in process `syz.0.598'. [ 52.885744][ T4866] EXT4-fs (loop4): orphan cleanup on readonly fs [ 52.892159][ T4866] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.596: bad orphan inode 267 [ 52.904935][ T4866] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 52.933726][ T4866] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.596: dx entry: limit 0 != root limit 125 [ 52.945584][ T4866] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.596: Corrupt directory, running e2fsck is recommended [ 52.970618][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 53.037658][ T4886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.605'. [ 53.213224][ T4921] serio: Serial port ptm0 [ 53.302683][ T4930] loop2: detected capacity change from 0 to 512 [ 53.324803][ T4930] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.348998][ T4930] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.404266][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.522259][ T4951] loop2: detected capacity change from 0 to 128 [ 53.724330][ T4971] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 53.836628][ T36] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=36 comm=kworker/1:1 [ 54.176200][ T5007] loop1: detected capacity change from 0 to 1024 [ 54.183329][ T5007] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.195762][ T5007] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.231663][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.254213][ T5016] tmpfs: Unknown parameter 'smackfstransmute' [ 54.318273][ T5028] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5028 comm=syz.1.652 [ 54.411803][ T5046] loop1: detected capacity change from 0 to 128 [ 54.420327][ T5046] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 54.433012][ T5046] ext4 filesystem being mounted at /167/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 54.440509][ T5052] loop0: detected capacity change from 0 to 512 [ 54.450262][ T5052] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 54.477068][ T3301] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 54.493465][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 54.493483][ T29] audit: type=1326 audit(1755729021.181:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5057 comm="syz.1.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9388f3ebe9 code=0x7ffc0000 [ 54.522929][ T29] audit: type=1326 audit(1755729021.181:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5057 comm="syz.1.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9388f3ebe9 code=0x7ffc0000 [ 54.546860][ T29] audit: type=1326 audit(1755729021.181:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5057 comm="syz.1.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9388f3ebe9 code=0x7ffc0000 [ 54.570158][ T29] audit: type=1326 audit(1755729021.181:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5057 comm="syz.1.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9388f3ebe9 code=0x7ffc0000 [ 54.593483][ T29] audit: type=1326 audit(1755729021.181:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5057 comm="syz.1.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9388f3ebe9 code=0x7ffc0000 [ 54.616866][ T29] audit: type=1326 audit(1755729021.181:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5057 comm="syz.1.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f9388f3ebe9 code=0x7ffc0000 [ 54.640316][ T29] audit: type=1326 audit(1755729021.181:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5057 comm="syz.1.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9388f3ebe9 code=0x7ffc0000 [ 54.663594][ T29] audit: type=1326 audit(1755729021.181:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5057 comm="syz.1.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9388f3ebe9 code=0x7ffc0000 [ 54.697771][ T5067] netlink: 'syz.1.666': attribute type 21 has an invalid length. [ 55.053074][ T5116] 9pnet: Could not find request transport: f [ 55.222644][ T5132] tap0: tun_chr_ioctl cmd 1074025677 [ 55.228077][ T5132] tap0: linktype set to 768 [ 55.306199][ T29] audit: type=1326 audit(1755729021.991:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5137 comm="syz.1.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9388f3ebe9 code=0x7ffc0000 [ 55.329600][ T29] audit: type=1326 audit(1755729021.991:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5137 comm="syz.1.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9388f3ebe9 code=0x7ffc0000 [ 55.486497][ T5169] loop2: detected capacity change from 0 to 1024 [ 55.522302][ T5169] EXT4-fs: Ignoring removed oldalloc option [ 55.528273][ T5169] EXT4-fs: Ignoring removed i_version option [ 55.552350][ T5169] EXT4-fs (loop2): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 55.598479][ T5169] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.661398][ T5169] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.689: bg 0: block 360: padding at end of block bitmap is not set [ 55.812288][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.244242][ T5255] mmap: syz.4.719 (5255) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 56.349243][ T5267] netlink: 'syz.0.723': attribute type 3 has an invalid length. [ 56.356986][ T5267] __nla_validate_parse: 9 callbacks suppressed [ 56.356998][ T5267] netlink: 456 bytes leftover after parsing attributes in process `syz.0.723'. [ 56.474808][ T5278] loop1: detected capacity change from 0 to 1024 [ 56.481737][ T5278] EXT4-fs: Ignoring removed nobh option [ 56.553111][ T5288] 9pnet: Could not find request transport: f [ 56.570124][ T5278] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.639811][ T5293] loop0: detected capacity change from 0 to 2048 [ 56.655427][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.693674][ T5298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.735'. [ 56.712350][ T5293] loop0: p1 < > p2 p3 < p5 p6 > p4 [ 56.717690][ T5293] loop0: partition table partially beyond EOD, truncated [ 56.736775][ T5293] loop0: p1 start 4278190080 is beyond EOD, truncated [ 56.743678][ T5293] loop0: p2 start 16908800 is beyond EOD, truncated [ 56.757745][ T5293] loop0: p5 start 16908800 is beyond EOD, truncated [ 56.882882][ T5342] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.751'. [ 57.163261][ T5383] loop3: detected capacity change from 0 to 512 [ 57.182563][ T5383] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 57.203074][ T5389] can0: slcan on ttyS3. [ 57.208914][ T5383] EXT4-fs (loop3): 1 truncate cleaned up [ 57.215425][ T5383] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.266511][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.282122][ T5389] can0 (unregistered): slcan off ttyS3. [ 57.294856][ T5403] can0: slcan on ttyS3. [ 57.305337][ T5416] geneve2: entered promiscuous mode [ 57.310616][ T5416] geneve2: entered allmulticast mode [ 57.340185][ T5427] loop2: detected capacity change from 0 to 128 [ 57.348653][ T5429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.781'. [ 57.382202][ T5386] can0 (unregistered): slcan off ttyS3. [ 57.398365][ T5433] netlink: 20 bytes leftover after parsing attributes in process `syz.1.783'. [ 57.436126][ T9] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 57.443771][ T9] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 57.451171][ T9] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 57.463206][ T9] hid-generic 0003:0004:0000.0001: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 57.532217][ T5471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.795'. [ 57.550578][ T5471] IPVS: Error joining to the multicast group [ 57.652553][ T5515] SELinux: Context is not valid (left unmapped). [ 57.668820][ T5510] netlink: 4 bytes leftover after parsing attributes in process `syz.1.803'. [ 57.701998][ T5517] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=5517 comm=syz.4.806 [ 57.801148][ T5535] netlink: 'syz.0.813': attribute type 1 has an invalid length. [ 57.818546][ T5541] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 57.830685][ T5538] netlink: 'syz.2.816': attribute type 3 has an invalid length. [ 57.838399][ T5538] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.816'. [ 58.232735][ T5602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.830'. [ 58.260101][ T5606] netlink: 16 bytes leftover after parsing attributes in process `syz.3.832'. [ 58.731797][ T5668] loop1: detected capacity change from 0 to 128 [ 58.806867][ T5685] unsupported nla_type 65024 [ 59.154148][ T5728] can0: slcan on ttyS3. [ 59.216361][ T5737] loop3: detected capacity change from 0 to 2048 [ 59.271922][ T5728] can0 (unregistered): slcan off ttyS3. [ 59.277974][ T5737] loop3: p1 < > p2 p3 < p5 p6 > p4 [ 59.283204][ T5737] loop3: partition table partially beyond EOD, truncated [ 59.294275][ T5741] can0: slcan on ttyS3. [ 59.321944][ T5737] loop3: p1 start 4278190080 is beyond EOD, truncated [ 59.328747][ T5737] loop3: p2 start 16908800 is beyond EOD, truncated [ 59.347078][ T5753] loop1: detected capacity change from 0 to 512 [ 59.362948][ T5727] can0 (unregistered): slcan off ttyS3. [ 59.374457][ T5737] loop3: p5 start 16908800 is beyond EOD, truncated [ 59.394701][ T5754] loop4: detected capacity change from 0 to 1024 [ 59.403231][ T5753] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 59.437185][ T5754] EXT4-fs: Ignoring removed nobh option [ 59.456456][ T5753] EXT4-fs (loop1): 1 truncate cleaned up [ 59.464026][ T5753] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.532574][ T29] kauditd_printk_skb: 87 callbacks suppressed [ 59.532591][ T29] audit: type=1400 audit(1755729026.221:548): avc: denied { mounton } for pid=5769 comm="syz.0.880" path="/165/file0" dev="tmpfs" ino=868 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 59.615913][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.625078][ T5754] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.766425][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.922475][ T29] audit: type=1326 audit(1755729026.611:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5817 comm="syz.3.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87a04ebe9 code=0x7ffc0000 [ 59.945741][ T29] audit: type=1326 audit(1755729026.611:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5817 comm="syz.3.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87a04ebe9 code=0x7ffc0000 [ 60.030034][ T5828] loop4: detected capacity change from 0 to 2048 [ 60.063915][ T29] audit: type=1326 audit(1755729026.661:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5817 comm="syz.3.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7ff87a04ebe9 code=0x7ffc0000 [ 60.087192][ T29] audit: type=1326 audit(1755729026.661:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5817 comm="syz.3.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87a04ebe9 code=0x7ffc0000 [ 60.110496][ T29] audit: type=1326 audit(1755729026.661:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5817 comm="syz.3.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87a04ebe9 code=0x7ffc0000 [ 60.147964][ T5846] loop3: detected capacity change from 0 to 1024 [ 60.156006][ T5828] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 60.161218][ T5828] loop4: partition table partially beyond EOD, truncated [ 60.215089][ T5846] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.266500][ T5862] binfmt_misc: register: failed to install interpreter file ./bus [ 60.278314][ T5828] loop4: p1 start 4278190080 is beyond EOD, truncated [ 60.285277][ T5828] loop4: p2 start 16908800 is beyond EOD, truncated [ 60.303699][ T29] audit: type=1400 audit(1755729026.821:554): avc: denied { create } for pid=5836 comm="syz.0.897" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 60.324483][ T29] audit: type=1400 audit(1755729026.861:555): avc: denied { unlink } for pid=3304 comm="syz-executor" name="file0" dev="tmpfs" ino=894 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 60.419341][ T5828] loop4: p5 start 16908800 is beyond EOD, truncated [ 60.431970][ T29] audit: type=1400 audit(1755729027.051:556): avc: denied { lock } for pid=5845 comm="syz.3.900" path="/176/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 60.433316][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.455165][ T29] audit: type=1400 audit(1755729027.091:557): avc: denied { audit_read } for pid=5870 comm="syz.0.909" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 60.778784][ T5916] loop1: detected capacity change from 0 to 2048 [ 60.861166][ T5916] loop1: p1 < > p2 p3 < p5 p6 > p4 [ 60.866524][ T5916] loop1: partition table partially beyond EOD, truncated [ 60.907852][ T5931] loop2: detected capacity change from 0 to 1024 [ 60.915854][ T5916] loop1: p1 start 4278190080 is beyond EOD, truncated [ 60.922695][ T5916] loop1: p2 start 16908800 is beyond EOD, truncated [ 60.945748][ T5916] loop1: p5 start 16908800 is beyond EOD, truncated [ 60.962948][ T5931] EXT4-fs: Ignoring removed nobh option [ 61.091231][ T5972] loop3: detected capacity change from 0 to 256 [ 61.215374][ T5989] loop1: detected capacity change from 0 to 512 [ 61.233778][ T5989] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 61.300116][ T5989] EXT4-fs (loop1): 1 orphan inode deleted [ 61.312069][ T12] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:0: Failed to release dquot type 1 [ 61.325993][ T5989] ext4 filesystem being mounted at /230/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.891145][ T6058] __nla_validate_parse: 9 callbacks suppressed [ 61.891162][ T6058] netlink: 168 bytes leftover after parsing attributes in process `syz.3.973'. [ 62.068112][ T6076] netlink: 1 bytes leftover after parsing attributes in process `syz.4.981'. [ 62.095147][ T6080] netlink: 340 bytes leftover after parsing attributes in process `syz.3.984'. [ 62.113785][ T6080] netlink: 48 bytes leftover after parsing attributes in process `syz.3.984'. [ 62.269847][ T6105] loop1: detected capacity change from 0 to 1024 [ 62.281359][ T6107] Invalid ELF header magic: != ELF [ 62.299312][ T6105] EXT4-fs: Ignoring removed nobh option [ 62.349517][ T6120] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1001'. [ 62.538977][ T6144] netlink: 'syz.2.1011': attribute type 1 has an invalid length. [ 62.546817][ T6144] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1011'. [ 62.646730][ T6169] loop4: detected capacity change from 0 to 1024 [ 62.654166][ T6169] EXT4-fs: Ignoring removed nobh option [ 62.690131][ T6181] loop3: detected capacity change from 0 to 1024 [ 62.712703][ T6181] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 62.794271][ T6205] Invalid ELF header magic: != ELF [ 62.829982][ T6211] loop1: detected capacity change from 0 to 512 [ 62.844725][ T6211] EXT4-fs: Ignoring removed nobh option [ 62.877550][ T6211] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.1035: corrupted inode contents [ 62.901023][ T6211] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #3: comm syz.1.1035: mark_inode_dirty error [ 62.916139][ T6232] loop4: detected capacity change from 0 to 512 [ 62.929441][ T6211] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.1035: corrupted inode contents [ 62.947766][ T6211] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.1035: mark_inode_dirty error [ 62.958477][ T6238] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1044'. [ 62.969642][ T6211] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.1035: Failed to acquire dquot type 0 [ 62.985267][ T6232] ext4 filesystem being mounted at /201/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.016550][ T6211] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.1035: corrupted inode contents [ 63.029625][ T6211] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.1035: mark_inode_dirty error [ 63.044973][ T6248] netlink: 'syz.3.1048': attribute type 4 has an invalid length. [ 63.053545][ T6211] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.1035: corrupted inode contents [ 63.081035][ T6211] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.1035: mark_inode_dirty error [ 63.097179][ T6211] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.1035: corrupted inode contents [ 63.109524][ T6211] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 63.121163][ T6211] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.1035: corrupted inode contents [ 63.138652][ T6211] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.1035: mark_inode_dirty error [ 63.162397][ T6211] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 63.176622][ T6211] EXT4-fs (loop1): 1 truncate cleaned up [ 63.179260][ T6264] sch_fq: defrate 4294967295 ignored. [ 63.192342][ T6211] ext4 filesystem being mounted at /249/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.259500][ T6278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1060'. [ 63.268553][ T6278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1060'. [ 63.286841][ T6211] syz.1.1035 (6211) used greatest stack depth: 9776 bytes left [ 63.406322][ T6303] loop4: detected capacity change from 0 to 512 [ 63.426617][ T6303] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 63.436231][ T6303] EXT4-fs (loop4): mount failed [ 63.578638][ T6341] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1085'. [ 63.588209][ T6341] 0{X: renamed from gretap0 (while UP) [ 63.595858][ T6341] 0{X: entered allmulticast mode [ 63.601802][ T6341] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 63.627898][ T6351] syz.1.1088 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 63.648683][ T6353] loop2: detected capacity change from 0 to 512 [ 63.656060][ T6353] ext4: Unknown parameter 'fowner' [ 63.657855][ T6356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.668798][ T6356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.677450][ T6356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.684927][ T6356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.830083][ T6399] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.837606][ T6399] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.846788][ T6399] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.847532][ T6402] serio: Serial port ttyS3 [ 63.854328][ T6399] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.891578][ T6407] SELinux: failed to load policy [ 63.984270][ T6419] syz.1.1109 (6419) used greatest stack depth: 9320 bytes left [ 64.011557][ T6424] 9pnet_fd: Insufficient options for proto=fd [ 64.065551][ T3388] kernel write not supported for file /tty/ldiscs (pid: 3388 comm: kworker/1:3) [ 64.098232][ T6437] loop4: detected capacity change from 0 to 512 [ 64.126453][ T6437] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.377930][ T6486] loop2: detected capacity change from 0 to 256 [ 64.386911][ T6488] netlink: 'syz.4.1138': attribute type 6 has an invalid length. [ 64.439607][ T6502] netlink: 'syz.2.1144': attribute type 4 has an invalid length. [ 64.489333][ T6510] loop2: detected capacity change from 0 to 512 [ 64.513994][ T6510] ext4 filesystem being mounted at /198/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.536332][ T6521] 0{X: renamed from gretap0 (while UP) [ 64.553228][ T6521] 0{X: entered allmulticast mode [ 64.562947][ T6521] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 64.606913][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 64.606958][ T29] audit: type=1400 audit(1755729032.291:627): avc: denied { read write } for pid=3306 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 64.637232][ T29] audit: type=1400 audit(1755729032.291:628): avc: denied { open } for pid=3306 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 64.675987][ T6538] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=6538 comm=syz.2.1156 [ 64.735642][ T6547] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6547 comm=syz.2.1162 [ 64.751764][ T29] audit: type=1400 audit(1755729032.351:629): avc: denied { ioctl } for pid=3306 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 64.777789][ T29] audit: type=1400 audit(1755729032.361:630): avc: denied { allowed } for pid=6537 comm="syz.2.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 64.797186][ T29] audit: type=1400 audit(1755729032.361:631): avc: denied { create } for pid=6537 comm="syz.2.1156" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 64.818417][ T29] audit: type=1400 audit(1755729032.381:632): avc: denied { prog_load } for pid=6541 comm="syz.3.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 64.837425][ T29] audit: type=1400 audit(1755729032.381:633): avc: denied { bpf } for pid=6541 comm="syz.3.1160" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 64.858418][ T29] audit: type=1400 audit(1755729032.381:634): avc: denied { perfmon } for pid=6541 comm="syz.3.1160" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 64.879307][ T29] audit: type=1400 audit(1755729032.381:635): avc: denied { prog_run } for pid=6541 comm="syz.3.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 64.898415][ T29] audit: type=1400 audit(1755729032.381:636): avc: denied { map_create } for pid=6541 comm="syz.3.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 64.923988][ T6559] sctp: [Deprecated]: syz.2.1176 (pid 6559) Use of int in max_burst socket option. [ 64.923988][ T6559] Use struct sctp_assoc_value instead [ 64.958665][ T6561] 0{X: renamed from gretap0 (while UP) [ 64.967510][ T6561] 0{X: entered allmulticast mode [ 64.974015][ T6561] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 64.996462][ T6563] loop2: detected capacity change from 0 to 512 [ 65.014595][ T6563] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1168: bg 0: block 248: padding at end of block bitmap is not set [ 65.029730][ T6563] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.1168: Failed to acquire dquot type 1 [ 65.042685][ T6563] EXT4-fs (loop2): 1 truncate cleaned up [ 65.049002][ T6563] ext4 filesystem being mounted at /203/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.061324][ T6563] syz.2.1168 (6563) used greatest stack depth: 9200 bytes left [ 65.111092][ T6587] netlink: 'syz.1.1175': attribute type 21 has an invalid length. [ 65.232584][ T6610] loop3: detected capacity change from 0 to 512 [ 65.239333][ T6610] EXT4-fs: Ignoring removed bh option [ 65.246849][ T6610] EXT4-fs error (device loop3): __ext4_iget:5464: inode #15: block 1803188595: comm syz.3.1187: invalid block [ 65.261986][ T6610] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1187: couldn't read orphan inode 15 (err -117) [ 65.459650][ T6649] loop2: detected capacity change from 0 to 512 [ 65.467269][ T6649] EXT4-fs: Ignoring removed nobh option [ 65.475796][ T6652] SELinux: security policydb version 17 (MLS) not backwards compatible [ 65.484336][ T6652] SELinux: failed to load policy [ 65.492440][ T6649] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.1202: corrupted inode contents [ 65.514355][ T6649] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #3: comm syz.2.1202: mark_inode_dirty error [ 65.528067][ T6649] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.1202: corrupted inode contents [ 65.558159][ T6649] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.1202: mark_inode_dirty error [ 65.585367][ T6649] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.1202: Failed to acquire dquot type 0 [ 65.617804][ T6673] loop3: detected capacity change from 0 to 164 [ 65.628645][ T6673] process 'syz.3.1212' launched './file0' with NULL argv: empty string added [ 65.638904][ T6649] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1202: corrupted inode contents [ 65.643616][ T6673] syz.3.1212: attempt to access beyond end of device [ 65.643616][ T6673] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 65.653588][ T6649] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.1202: mark_inode_dirty error [ 65.667267][ T6673] syz.3.1212: attempt to access beyond end of device [ 65.667267][ T6673] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 65.690286][ T6649] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1202: corrupted inode contents [ 65.702753][ T6649] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.1202: mark_inode_dirty error [ 65.728423][ T6649] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1202: corrupted inode contents [ 65.744348][ T6649] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 65.744455][ T6682] loop1: detected capacity change from 0 to 256 [ 65.753229][ T6649] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1202: corrupted inode contents [ 65.772273][ T6649] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.1202: mark_inode_dirty error [ 65.784987][ T6649] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 65.795237][ T6649] EXT4-fs (loop2): 1 truncate cleaned up [ 65.801246][ T6649] ext4 filesystem being mounted at /214/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.916621][ T6709] loop3: detected capacity change from 0 to 512 [ 65.946649][ T6709] ext4 filesystem being mounted at /250/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.999390][ T6730] loop3: detected capacity change from 0 to 256 [ 66.033437][ T6741] loop2: detected capacity change from 0 to 512 [ 66.037215][ T6743] serio: Serial port ttyS3 [ 66.055309][ T6741] ext4 filesystem being mounted at /219/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.164094][ T6773] loop2: detected capacity change from 0 to 256 [ 66.186615][ T6773] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 66.224382][ T6773] FAT-fs (loop2): Directory bread(block 64) failed [ 66.230934][ T6773] FAT-fs (loop2): Directory bread(block 65) failed [ 66.257598][ T6773] FAT-fs (loop2): Directory bread(block 66) failed [ 66.273665][ T6773] FAT-fs (loop2): Directory bread(block 67) failed [ 66.287828][ T6773] FAT-fs (loop2): Directory bread(block 68) failed [ 66.312796][ T6773] FAT-fs (loop2): Directory bread(block 69) failed [ 66.329763][ T6773] FAT-fs (loop2): Directory bread(block 70) failed [ 66.347038][ T6773] FAT-fs (loop2): Directory bread(block 71) failed [ 66.354119][ T6773] FAT-fs (loop2): Directory bread(block 72) failed [ 66.362277][ T6773] FAT-fs (loop2): Directory bread(block 73) failed [ 66.433890][ T6811] netlink: 'syz.0.1249': attribute type 10 has an invalid length. [ 66.455859][ T6811] batman_adv: batadv0: Adding interface: macvlan0 [ 66.462530][ T6811] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.509454][ T6811] batman_adv: batadv0: Interface activated: macvlan0 [ 66.572926][ T6826] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6826 comm=syz.3.1256 [ 66.957267][ T6857] __nla_validate_parse: 18 callbacks suppressed [ 66.957281][ T6857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1270'. [ 66.979619][ T6857] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.987181][ T6857] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.997513][ T6857] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.004962][ T6857] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.016273][ T6857] batman_adv: batadv0: Interface deactivated: macvlan0 [ 67.023346][ T6857] batman_adv: batadv0: Removing interface: macvlan0 [ 67.049025][ T6864] loop3: detected capacity change from 0 to 512 [ 67.059166][ T6864] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 67.071600][ T6864] EXT4-fs (loop3): 1 truncate cleaned up [ 67.085083][ T6864] EXT4-fs (loop3): shut down requested (2) [ 67.129643][ T6880] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1277'. [ 67.470249][ T6911] netlink: 'syz.2.1290': attribute type 4 has an invalid length. [ 67.633480][ T6930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1297'. [ 67.717337][ T6944] macvlan2: entered promiscuous mode [ 67.722714][ T6944] bridge0: entered promiscuous mode [ 67.779043][ T6961] loop1: detected capacity change from 0 to 256 [ 67.786446][ T6961] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 67.821121][ T6961] FAT-fs (loop1): Directory bread(block 64) failed [ 67.829520][ T6961] FAT-fs (loop1): Directory bread(block 65) failed [ 67.837015][ T6961] FAT-fs (loop1): Directory bread(block 66) failed [ 67.844002][ T6968] netlink: 'syz.2.1309': attribute type 10 has an invalid length. [ 67.844037][ T6961] FAT-fs (loop1): Directory bread(block 67) failed [ 67.851849][ T6968] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1309'. [ 67.869600][ T6961] FAT-fs (loop1): Directory bread(block 68) failed [ 67.872130][ T6968] batman_adv: batadv0: Adding interface: macvlan0 [ 67.876260][ T6961] FAT-fs (loop1): Directory bread(block 69) failed [ 67.882641][ T6968] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.928537][ T6961] FAT-fs (loop1): Directory bread(block 70) failed [ 67.937103][ T6968] batman_adv: batadv0: Interface activated: macvlan0 [ 67.942148][ T6961] FAT-fs (loop1): Directory bread(block 71) failed [ 67.959945][ T6961] FAT-fs (loop1): Directory bread(block 72) failed [ 67.980998][ T6961] FAT-fs (loop1): Directory bread(block 73) failed [ 68.088411][ T6977] loop2: detected capacity change from 0 to 2048 [ 68.130008][ T6988] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6988 comm=syz.4.1317 [ 68.216166][ T7003] loop3: detected capacity change from 0 to 512 [ 68.222960][ T7003] EXT4-fs: Ignoring removed oldalloc option [ 68.229858][ T7003] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 68.243639][ T7003] EXT4-fs (loop3): 1 truncate cleaned up [ 68.474942][ T7057] loop3: detected capacity change from 0 to 128 [ 68.485771][ T7057] syz.3.1340: attempt to access beyond end of device [ 68.485771][ T7057] loop3: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 68.500865][ T7061] loop4: detected capacity change from 0 to 128 [ 68.510643][ T7061] ext4 filesystem being mounted at /262/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 68.746049][ T7068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.756238][ T7068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.015563][ T7127] bridge0: entered promiscuous mode [ 69.021071][ T7127] macvlan2: entered promiscuous mode [ 69.140200][ T7145] loop1: detected capacity change from 0 to 1024 [ 69.147216][ T7145] EXT4-fs: Ignoring removed nomblk_io_submit option [ 69.304093][ T7160] bridge0: entered promiscuous mode [ 69.309474][ T7160] macvlan3: entered promiscuous mode [ 69.366612][ T7176] loop1: detected capacity change from 0 to 256 [ 69.436624][ T36] IPVS: starting estimator thread 0... [ 69.532555][ T7188] IPVS: using max 1968 ests per chain, 98400 per kthread [ 69.655579][ T29] kauditd_printk_skb: 155 callbacks suppressed [ 69.655596][ T29] audit: type=1400 audit(1755729805.343:788): avc: denied { map } for pid=7196 comm="syz.0.1391" path="socket:[15059]" dev="sockfs" ino=15059 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 69.685817][ T29] audit: type=1400 audit(1755729805.353:789): avc: denied { ioctl } for pid=7196 comm="syz.0.1391" path="socket:[15060]" dev="sockfs" ino=15060 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 69.856725][ T29] audit: type=1400 audit(1755729805.543:790): avc: denied { create } for pid=7216 comm="syz.0.1401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 69.890366][ T7219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1402'. [ 70.106943][ T7254] SELinux: failed to load policy [ 70.141379][ T7256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1417'. [ 70.186575][ T7262] loop2: detected capacity change from 0 to 8192 [ 70.246905][ T7269] loop2: detected capacity change from 0 to 2048 [ 70.258562][ T7274] loop1: detected capacity change from 0 to 128 [ 70.266837][ T7274] EXT4-fs mount: 38 callbacks suppressed [ 70.266847][ T7274] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 70.275066][ T7269] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.284833][ T7274] ext4 filesystem being mounted at /312/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 70.336148][ T3301] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 70.393945][ T29] audit: type=1400 audit(1755729806.083:791): avc: denied { read } for pid=7289 comm="syz.3.1428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.431526][ T29] audit: type=1400 audit(1755729806.083:792): avc: denied { name_bind } for pid=7292 comm="syz.1.1429" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 70.453181][ T29] audit: type=1400 audit(1755729806.083:793): avc: denied { node_bind } for pid=7292 comm="syz.1.1429" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 70.520450][ T7298] bridge1: entered allmulticast mode [ 70.530571][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.570599][ T29] audit: type=1400 audit(1755729806.253:794): avc: denied { map } for pid=7305 comm="syz.2.1433" path="socket:[15192]" dev="sockfs" ino=15192 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 70.615860][ T7310] loop2: detected capacity change from 0 to 1024 [ 70.645464][ T7310] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 70.657877][ T7310] ext4 filesystem being mounted at /270/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.674020][ T29] audit: type=1400 audit(1755729806.363:795): avc: denied { map } for pid=7309 comm="syz.2.1434" path="/270/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 70.697040][ T29] audit: type=1400 audit(1755729806.363:796): avc: denied { execute } for pid=7309 comm="syz.2.1434" path="/270/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 70.724978][ T29] audit: type=1326 audit(1755729806.413:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7314 comm="syz.1.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9388f3ebe9 code=0x7ffc0000 [ 70.782213][ T56] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: comm kworker/u8:4: lblock 0 mapped to illegal pblock 0 (length 1) [ 70.796046][ T56] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 70.808462][ T56] EXT4-fs (loop2): This should not happen!! Data will be lost [ 70.808462][ T56] [ 70.819257][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 70.886575][ T7331] loop2: detected capacity change from 0 to 1024 [ 70.893416][ T7333] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1443'. [ 70.906912][ T7331] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 70.923261][ T7331] ext4 filesystem being mounted at /273/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.937645][ T7331] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 3: comm syz.2.1442: lblock 3 mapped to illegal pblock 3 (length 3) [ 70.964007][ T7331] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 70.976413][ T7331] EXT4-fs (loop2): This should not happen!! Data will be lost [ 70.976413][ T7331] [ 71.012550][ T37] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:2: lblock 8 mapped to illegal pblock 8 (length 8) [ 71.037008][ T37] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 71.049367][ T37] EXT4-fs (loop2): This should not happen!! Data will be lost [ 71.049367][ T37] [ 71.079789][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 71.170255][ T7371] 9pnet_fd: Insufficient options for proto=fd [ 71.209659][ T7375] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 71.339945][ T7402] loop3: detected capacity change from 0 to 1024 [ 71.349426][ T7402] EXT4-fs: inline encryption not supported [ 71.366899][ T7402] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.392092][ T7413] loop1: detected capacity change from 0 to 512 [ 71.399323][ T7413] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 71.411346][ T7413] EXT4-fs (loop1): 1 truncate cleaned up [ 71.418499][ T7413] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.431640][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.528594][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.608569][ T7445] vhci_hcd: invalid port number 96 [ 71.613792][ T7445] vhci_hcd: default hub control req: 0300 vfffc i0060 l0 [ 71.738878][ T7452] loop1: detected capacity change from 0 to 8192 [ 71.925993][ T7494] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1508'. [ 72.020789][ T7513] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1516'. [ 72.125366][ T7531] loop2: detected capacity change from 0 to 128 [ 72.242844][ T7554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1534'. [ 72.304963][ T7562] loop3: detected capacity change from 0 to 512 [ 72.325557][ T7562] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.1538: iget: bad i_size value: 38620345925642 [ 72.341449][ T7562] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1538: couldn't read orphan inode 15 (err -117) [ 72.354189][ T7562] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.369391][ T7562] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.1538: bg 0: block 5: invalid block bitmap [ 72.382278][ T7562] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 5 with error 28 [ 72.394561][ T7562] EXT4-fs (loop3): This should not happen!! Data will be lost [ 72.394561][ T7562] [ 72.404259][ T7562] EXT4-fs (loop3): Total free blocks count 0 [ 72.410300][ T7562] EXT4-fs (loop3): Free/Dirty block details [ 72.416250][ T7562] EXT4-fs (loop3): free_blocks=0 [ 72.421263][ T7562] EXT4-fs (loop3): dirty_blocks=5 [ 72.426359][ T7562] EXT4-fs (loop3): Block reservation details [ 72.432375][ T7562] EXT4-fs (loop3): i_reserved_data_blocks=5 [ 72.454062][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.527613][ T7592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1549'. [ 72.556814][ T7598] loop3: detected capacity change from 0 to 1024 [ 72.584959][ T7598] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 72.604336][ T7605] 9pnet_fd: Insufficient options for proto=fd [ 72.657694][ T7615] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 72.667747][ T7615] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 72.706513][ T3441] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm kworker/u8:7: lblock 0 mapped to illegal pblock 0 (length 1) [ 72.723245][ T3441] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 72.735676][ T3441] EXT4-fs (loop3): This should not happen!! Data will be lost [ 72.735676][ T3441] [ 72.746859][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 72.756075][ T7623] loop1: detected capacity change from 0 to 512 [ 72.773782][ T7631] loop3: detected capacity change from 0 to 128 [ 72.780987][ T7623] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 72.786113][ T7631] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 72.796406][ T7623] EXT4-fs (loop1): mount failed [ 72.832068][ T3312] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.878286][ T7648] loop3: detected capacity change from 0 to 512 [ 72.886534][ T7648] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 72.906315][ T7648] EXT4-fs (loop3): 1 truncate cleaned up [ 72.913780][ T7648] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.006855][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.086469][ T7676] loop2: detected capacity change from 0 to 128 [ 73.097283][ T7676] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 73.125417][ T3306] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 73.143306][ T7686] random: crng reseeded on system resumption [ 73.150274][ T7687] syz.2.1579 (7687): /proc/7685/oom_adj is deprecated, please use /proc/7685/oom_score_adj instead. [ 73.223923][ T7697] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1585'. [ 73.397624][ T7705] openvswitch: netlink: Message has 6 unknown bytes. [ 73.468872][ T37] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 73.555518][ T7713] loop4: detected capacity change from 0 to 128 [ 73.564058][ T7713] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 73.589178][ T3302] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 73.668633][ T7730] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1595'. [ 73.841371][ T7744] loop4: detected capacity change from 0 to 128 [ 73.871178][ T7750] openvswitch: netlink: Message has 6 unknown bytes. [ 74.008145][ T7773] loop1: detected capacity change from 0 to 4096 [ 74.018564][ T7773] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.049598][ T7788] loop2: detected capacity change from 0 to 256 [ 74.165960][ T7803] dummy0: entered promiscuous mode [ 74.171422][ T7803] macsec2: entered allmulticast mode [ 74.177173][ T7803] dummy0: entered allmulticast mode [ 74.193667][ T7803] dummy0: left allmulticast mode [ 74.198655][ T7803] dummy0: left promiscuous mode [ 74.220416][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.369549][ T7843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1639'. [ 74.602054][ T7880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1655'. [ 74.611389][ T7880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1655'. [ 74.791659][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 74.791675][ T29] audit: type=1400 audit(74.761:855): avc: denied { create } for pid=7903 comm="syz.0.1665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 74.817182][ T29] audit: type=1400 audit(74.781:856): avc: denied { write } for pid=7903 comm="syz.0.1665" path="socket:[17106]" dev="sockfs" ino=17106 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 74.847185][ T7906] bridge1: entered allmulticast mode [ 74.961659][ T29] audit: type=1400 audit(74.931:857): avc: denied { create } for pid=7915 comm="syz.4.1669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 75.002190][ T29] audit: type=1326 audit(74.971:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7919 comm="syz.4.1672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37af9ebe9 code=0x7ffc0000 [ 75.024957][ T29] audit: type=1326 audit(74.971:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7919 comm="syz.4.1672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37af9ebe9 code=0x7ffc0000 [ 75.047613][ T29] audit: type=1326 audit(74.971:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7919 comm="syz.4.1672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc37af9ebe9 code=0x7ffc0000 [ 75.086393][ T29] audit: type=1326 audit(74.981:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7919 comm="syz.4.1672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37af9ebe9 code=0x7ffc0000 [ 75.087207][ T7922] 0{X: left allmulticast mode [ 75.109146][ T29] audit: type=1326 audit(74.981:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7919 comm="syz.4.1672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc37af9ebe9 code=0x7ffc0000 [ 75.137087][ T29] audit: type=1326 audit(75.041:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7919 comm="syz.4.1672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37af9ebe9 code=0x7ffc0000 [ 75.138467][ T7922] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 75.159890][ T29] audit: type=1326 audit(75.041:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7919 comm="syz.4.1672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37af9ebe9 code=0x7ffc0000 [ 75.233450][ T7928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1676'. [ 75.304681][ T7944] openvswitch: netlink: Message has 6 unknown bytes. [ 75.328142][ T7946] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1683'. [ 75.520619][ T7982] loop4: detected capacity change from 0 to 764 [ 75.533979][ T7982] iso9660: Unknown parameter 'kmem_cache_free' [ 75.751476][ T8030] loop2: detected capacity change from 0 to 1024 [ 75.776870][ T8030] EXT4-fs: inline encryption not supported [ 75.782872][ T8030] EXT4-fs: Ignoring removed i_version option [ 75.815064][ T8030] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.849736][ T8030] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 75.879722][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.040992][ T8093] SELinux: Context @ is not valid (left unmapped). [ 76.077604][ T8100] dummy0: entered promiscuous mode [ 76.082978][ T8100] macsec1: entered allmulticast mode [ 76.088405][ T8100] dummy0: entered allmulticast mode [ 76.095370][ T8100] dummy0: left allmulticast mode [ 76.100385][ T8100] dummy0: left promiscuous mode [ 76.172471][ T8077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.190573][ T8077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.379377][ T8144] loop3: detected capacity change from 0 to 256 [ 76.404186][ T3484] IPVS: starting estimator thread 0... [ 76.503182][ T8150] IPVS: using max 2352 ests per chain, 117600 per kthread [ 76.846617][ T8209] loop3: detected capacity change from 0 to 2048 [ 76.866135][ T8209] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.922892][ T8216] random: crng reseeded on system resumption [ 77.001816][ T8209] ================================================================== [ 77.009962][ T8209] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 77.017384][ T8209] [ 77.019726][ T8209] read-write to 0xffff888119591228 of 8 bytes by task 3441 on cpu 1: [ 77.027799][ T8209] __xa_clear_mark+0xf5/0x1e0 [ 77.032493][ T8209] __folio_end_writeback+0x177/0x470 [ 77.037790][ T8209] folio_end_writeback+0x71/0x3d0 [ 77.042830][ T8209] ext4_finish_bio+0x459/0x8c0 [ 77.047686][ T8209] ext4_release_io_end+0x9f/0x1f0 [ 77.052733][ T8209] ext4_end_io_end+0x18d/0x240 [ 77.057513][ T8209] ext4_end_io_rsv_work+0x151/0x1e0 [ 77.062721][ T8209] process_scheduled_works+0x4ce/0x9d0 [ 77.068189][ T8209] worker_thread+0x582/0x770 [ 77.072794][ T8209] kthread+0x486/0x510 [ 77.076872][ T8209] ret_from_fork+0xda/0x150 [ 77.081410][ T8209] ret_from_fork_asm+0x1a/0x30 [ 77.086186][ T8209] [ 77.088510][ T8209] read to 0xffff888119591228 of 8 bytes by task 8209 on cpu 0: [ 77.096055][ T8209] xas_find_marked+0x218/0x620 [ 77.100849][ T8209] find_get_entry+0x5d/0x380 [ 77.105455][ T8209] filemap_get_folios_tag+0x13b/0x210 [ 77.110846][ T8209] file_write_and_wait_range+0x1ea/0x2c0 [ 77.116494][ T8209] generic_buffers_fsync_noflush+0x45/0x120 [ 77.122395][ T8209] ext4_sync_file+0x1ab/0x690 [ 77.127086][ T8209] vfs_fsync_range+0x10d/0x130 [ 77.131851][ T8209] ext4_buffered_write_iter+0x34f/0x3c0 [ 77.137404][ T8209] ext4_file_write_iter+0xdbf/0xf00 [ 77.142609][ T8209] do_iter_readv_writev+0x499/0x540 [ 77.147810][ T8209] vfs_writev+0x2df/0x8b0 [ 77.152144][ T8209] __se_sys_pwritev2+0xfc/0x1c0 [ 77.157002][ T8209] __x64_sys_pwritev2+0x67/0x80 [ 77.161858][ T8209] x64_sys_call+0x2c55/0x2ff0 [ 77.166540][ T8209] do_syscall_64+0xd2/0x200 [ 77.171050][ T8209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.176944][ T8209] [ 77.179263][ T8209] value changed: 0xfffc000000000000 -> 0xfff0000000000000 [ 77.186361][ T8209] [ 77.188678][ T8209] Reported by Kernel Concurrency Sanitizer on: [ 77.194851][ T8209] CPU: 0 UID: 0 PID: 8209 Comm: syz.3.1785 Not tainted syzkaller #0 PREEMPT(voluntary) [ 77.204582][ T8209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 77.214642][ T8209] ================================================================== [ 77.299003][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.572800][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 86.132799][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!