last executing test programs: 963.448086ms ago: executing program 0 (id=985): r0 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) ftruncate(r0, 0x2008002) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x12, r0, 0x0) ftruncate(r0, 0x1) 920.082297ms ago: executing program 0 (id=988): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x0, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/140, 0x8c}], 0x1, 0x0, 0x0) 907.195018ms ago: executing program 0 (id=990): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x22042, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0xbfd1, 0x0) 741.261972ms ago: executing program 4 (id=996): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffff, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000280)={[{@discard}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@stripe={'stripe', 0x3d, 0x8}}, {@orlov}, {@dioread_nolock}]}, 0x4, 0x45b, &(0x7f00000010c0)="$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") chdir(&(0x7f0000000140)='./file0\x00') creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 682.269153ms ago: executing program 4 (id=997): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{0x3}, {}, {}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x2}, {}, {0xfffffffc}, {0x0, 0xe}, {}, {}, {0x0, 0x4, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xe10}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xefa6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 651.242704ms ago: executing program 4 (id=998): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000640)='kmem_cache_free\x00', r0, 0x0, 0x9}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) 592.988875ms ago: executing program 4 (id=1000): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200"], 0x101000) 592.526176ms ago: executing program 4 (id=1002): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x3, 0x0, {0x0, 0xf5}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x14044080}, 0x0) 582.532876ms ago: executing program 4 (id=1003): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000740)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x5501, &(0x7f0000000080)=0x40010) 329.049931ms ago: executing program 2 (id=1011): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) unshare(0x22040080) unshare(0xe020280) 328.819161ms ago: executing program 2 (id=1012): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c0016800800010007"], 0x38}}, 0x0) 317.115252ms ago: executing program 2 (id=1013): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000640)='kmem_cache_free\x00', r0, 0x0, 0x9}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) 313.060172ms ago: executing program 1 (id=1014): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000006400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x7c}}, 0x0) 295.449203ms ago: executing program 2 (id=1015): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200"], 0x101000) 278.851843ms ago: executing program 1 (id=1016): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x3, 0x0, {0x0, 0xf5}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x14044080}, 0x0) 257.749363ms ago: executing program 1 (id=1017): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x280) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000021000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000400000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff020000000300000000000000ffff0000000000000000000000000000000062726983676530000000000000000000736974300000000000000000000000007465616d300000000000000000000000aaaaaaaaaaaa000000000000aaaaaaaaaabb0000000000000000d8010000d801000010020000636f6d6d656e7400000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073746174697374696300000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff000000001b0000000000000000007465616d5f736c6176655f310000000069726c616e300000000000000000000069726c616e3000e575dd73000000000073797a6b616c6c6572300000000000000180c2000000000000000000f646793b7b3900000000000000007000000070000000a8000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff00000000"]}, 0x3c0) 195.290965ms ago: executing program 1 (id=1019): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x10000043, 0x0, 0x0, 0x3}, 0xb09e2977203cb8be) bind$tipc(r0, 0x0, 0x0) sendmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x48040) 191.970595ms ago: executing program 2 (id=1029): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x3, 0x0, {0x0, 0xf5}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x14044080}, 0x0) 167.268346ms ago: executing program 1 (id=1021): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x1200000, &(0x7f0000000940)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@noquota}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000300), &(0x7f0000000480)=ANY=[], 0x109, 0x2) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000400)=ANY=[], 0x104, 0x0) 150.418926ms ago: executing program 3 (id=1022): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x1a) 128.120057ms ago: executing program 3 (id=1023): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)={0x0, 0x3, 0x7, 0x0, 0x40, 0x8b}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 102.477677ms ago: executing program 3 (id=1024): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) unshare(0x22040080) unshare(0xe020280) 69.559888ms ago: executing program 3 (id=1025): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c0016800800010007"], 0x38}}, 0x0) 38.886179ms ago: executing program 0 (id=1026): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000640)='kmem_cache_free\x00', r0, 0x0, 0x9}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) 37.392259ms ago: executing program 1 (id=1037): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)={0x0, 0x3, 0x7, 0x0, 0x40, 0x8b}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 30.250449ms ago: executing program 3 (id=1027): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000006400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x7c}}, 0x0) 18.248399ms ago: executing program 0 (id=1028): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200"], 0x101000) 2.21669ms ago: executing program 0 (id=1030): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x280) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) 1.88283ms ago: executing program 2 (id=1031): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) pselect6(0x40, &(0x7f0000001680)={0x7, 0x7, 0x1, 0xce, 0xac, 0x8000000000000000, 0x5, 0x6}, &(0x7f00000016c0)={0x8, 0x2, 0x82, 0x1, 0x3, 0x9288, 0x5, 0x787}, 0x0, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x7, 0x2, 0x3, 0x0, 0x3}) 0s ago: executing program 3 (id=1041): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000640)='kmem_cache_free\x00', r0, 0x0, 0x9}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) kernel console output (not intermixed with test programs): [ 21.864780][ T29] audit: type=1400 audit(1734115489.125:81): avc: denied { read } for pid=2981 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.1.57' (ED25519) to the list of known hosts. [ 26.301796][ T29] audit: type=1400 audit(1734115493.555:82): avc: denied { mounton } for pid=3284 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.303060][ T3284] cgroup: Unknown subsys name 'net' [ 26.324529][ T29] audit: type=1400 audit(1734115493.555:83): avc: denied { mount } for pid=3284 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.351958][ T29] audit: type=1400 audit(1734115493.585:84): avc: denied { unmount } for pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.511301][ T3284] cgroup: Unknown subsys name 'cpuset' [ 26.517534][ T3284] cgroup: Unknown subsys name 'rlimit' [ 26.627959][ T29] audit: type=1400 audit(1734115493.875:85): avc: denied { setattr } for pid=3284 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.653415][ T29] audit: type=1400 audit(1734115493.875:86): avc: denied { create } for pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.673967][ T29] audit: type=1400 audit(1734115493.875:87): avc: denied { write } for pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.694378][ T29] audit: type=1400 audit(1734115493.875:88): avc: denied { read } for pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.703052][ T3289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.714656][ T29] audit: type=1400 audit(1734115493.885:89): avc: denied { mounton } for pid=3284 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.748095][ T29] audit: type=1400 audit(1734115493.885:90): avc: denied { mount } for pid=3284 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.771501][ T29] audit: type=1400 audit(1734115493.985:91): avc: denied { relabelto } for pid=3289 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.800905][ T3284] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.468011][ T3296] chnl_net:caif_netlink_parms(): no params data found [ 28.546983][ T3297] chnl_net:caif_netlink_parms(): no params data found [ 28.593678][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 28.606311][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.613460][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.620701][ T3296] bridge_slave_0: entered allmulticast mode [ 28.627110][ T3296] bridge_slave_0: entered promiscuous mode [ 28.635684][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.642838][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.650009][ T3296] bridge_slave_1: entered allmulticast mode [ 28.656710][ T3296] bridge_slave_1: entered promiscuous mode [ 28.665843][ T3298] chnl_net:caif_netlink_parms(): no params data found [ 28.695859][ T3296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.717002][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 28.728550][ T3296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.754470][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.761602][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.768985][ T3297] bridge_slave_0: entered allmulticast mode [ 28.775546][ T3297] bridge_slave_0: entered promiscuous mode [ 28.793607][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.800690][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.807810][ T3297] bridge_slave_1: entered allmulticast mode [ 28.814275][ T3297] bridge_slave_1: entered promiscuous mode [ 28.831234][ T3296] team0: Port device team_slave_0 added [ 28.839688][ T3296] team0: Port device team_slave_1 added [ 28.878369][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.897110][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.904269][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.911520][ T3303] bridge_slave_0: entered allmulticast mode [ 28.917880][ T3303] bridge_slave_0: entered promiscuous mode [ 28.926513][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.933645][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.940803][ T3303] bridge_slave_1: entered allmulticast mode [ 28.947155][ T3303] bridge_slave_1: entered promiscuous mode [ 28.954285][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.963484][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.970588][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.977786][ T3298] bridge_slave_0: entered allmulticast mode [ 28.984542][ T3298] bridge_slave_0: entered promiscuous mode [ 28.991126][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.998092][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.024086][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.048537][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.055654][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.062826][ T3298] bridge_slave_1: entered allmulticast mode [ 29.069390][ T3298] bridge_slave_1: entered promiscuous mode [ 29.076006][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.083164][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.109090][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.145600][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.152796][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.159958][ T3304] bridge_slave_0: entered allmulticast mode [ 29.166403][ T3304] bridge_slave_0: entered promiscuous mode [ 29.173871][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.183091][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.190227][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.197430][ T3304] bridge_slave_1: entered allmulticast mode [ 29.203889][ T3304] bridge_slave_1: entered promiscuous mode [ 29.210587][ T3297] team0: Port device team_slave_0 added [ 29.222311][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.237592][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.247859][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.257937][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.267643][ T3297] team0: Port device team_slave_1 added [ 29.278717][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.321714][ T3303] team0: Port device team_slave_0 added [ 29.333335][ T3304] team0: Port device team_slave_0 added [ 29.339309][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.346307][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.372291][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.388470][ T3298] team0: Port device team_slave_0 added [ 29.396775][ T3296] hsr_slave_0: entered promiscuous mode [ 29.402989][ T3296] hsr_slave_1: entered promiscuous mode [ 29.411432][ T3303] team0: Port device team_slave_1 added [ 29.417683][ T3304] team0: Port device team_slave_1 added [ 29.423577][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.430628][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.456540][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.467802][ T3298] team0: Port device team_slave_1 added [ 29.499039][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.506063][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.532193][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.554530][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.562009][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.588296][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.599572][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.606568][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.632505][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.648840][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.655851][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.681869][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.698107][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.705532][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.731601][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.742544][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.749501][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.775499][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.807051][ T3297] hsr_slave_0: entered promiscuous mode [ 29.813182][ T3297] hsr_slave_1: entered promiscuous mode [ 29.819066][ T3297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.826746][ T3297] Cannot create hsr debugfs directory [ 29.844184][ T3304] hsr_slave_0: entered promiscuous mode [ 29.850330][ T3304] hsr_slave_1: entered promiscuous mode [ 29.856491][ T3304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.864092][ T3304] Cannot create hsr debugfs directory [ 29.925248][ T3298] hsr_slave_0: entered promiscuous mode [ 29.931473][ T3298] hsr_slave_1: entered promiscuous mode [ 29.937364][ T3298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.945011][ T3298] Cannot create hsr debugfs directory [ 29.955115][ T3303] hsr_slave_0: entered promiscuous mode [ 29.961428][ T3303] hsr_slave_1: entered promiscuous mode [ 29.967319][ T3303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.974914][ T3303] Cannot create hsr debugfs directory [ 30.129351][ T3296] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.144979][ T3296] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.159652][ T3296] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.170708][ T3296] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.183042][ T3297] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.194116][ T3297] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.204126][ T3297] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.215214][ T3297] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.238628][ T3304] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.249445][ T3304] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.262871][ T3304] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.272795][ T3304] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.319253][ T3298] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.328071][ T3298] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.338272][ T3298] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.352487][ T3298] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.390325][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.399902][ T3303] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.413748][ T3303] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.423131][ T3303] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.432147][ T3303] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.444820][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.454594][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.461697][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.472349][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.486306][ T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.496688][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.503967][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.519421][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.526702][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.535644][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.542769][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.599011][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.614260][ T3297] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.651609][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.672345][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.695022][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.712835][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.719993][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.730304][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.737446][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.755209][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.771807][ T371] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.778893][ T371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.788961][ T371] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.796233][ T371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.808471][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.820893][ T371] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.828052][ T371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.844666][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.855595][ T371] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.862716][ T371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.889722][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.902143][ T3298] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.912623][ T3298] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.936948][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.054783][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.089601][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.142171][ T3297] veth0_vlan: entered promiscuous mode [ 31.163150][ T3297] veth1_vlan: entered promiscuous mode [ 31.176777][ T3304] veth0_vlan: entered promiscuous mode [ 31.192512][ T3296] veth0_vlan: entered promiscuous mode [ 31.202345][ T3297] veth0_macvtap: entered promiscuous mode [ 31.209461][ T3297] veth1_macvtap: entered promiscuous mode [ 31.219058][ T3304] veth1_vlan: entered promiscuous mode [ 31.227551][ T3296] veth1_vlan: entered promiscuous mode [ 31.241622][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.259222][ T3304] veth0_macvtap: entered promiscuous mode [ 31.273221][ T3304] veth1_macvtap: entered promiscuous mode [ 31.285078][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.297880][ T3298] veth0_vlan: entered promiscuous mode [ 31.306602][ T3298] veth1_vlan: entered promiscuous mode [ 31.314269][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.324788][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.335319][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.344564][ T3297] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.353389][ T3297] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.362260][ T3297] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.371122][ T3297] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.386505][ T3296] veth0_macvtap: entered promiscuous mode [ 31.394011][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.404585][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.415647][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.426382][ T3303] veth0_vlan: entered promiscuous mode [ 31.433528][ T3296] veth1_macvtap: entered promiscuous mode [ 31.447475][ T3304] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.456404][ T3304] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.465429][ T3304] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.474248][ T3304] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.488426][ T3303] veth1_vlan: entered promiscuous mode [ 31.498344][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.508977][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.519003][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.529599][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.540584][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.549822][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.560487][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.570348][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.580854][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.591548][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.605104][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 31.605121][ T29] audit: type=1400 audit(1734115498.855:110): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/root/syzkaller.1MUsnC/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 31.635828][ T29] audit: type=1400 audit(1734115498.855:111): avc: denied { mount } for pid=3297 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 31.658000][ T29] audit: type=1400 audit(1734115498.855:112): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/root/syzkaller.1MUsnC/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 31.683334][ T29] audit: type=1400 audit(1734115498.865:113): avc: denied { mount } for pid=3297 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 31.705360][ T29] audit: type=1400 audit(1734115498.865:114): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/root/syzkaller.1MUsnC/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 31.732265][ T29] audit: type=1400 audit(1734115498.865:115): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/root/syzkaller.1MUsnC/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4351 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 31.759762][ T29] audit: type=1400 audit(1734115498.865:116): avc: denied { unmount } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 31.781075][ T3296] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.789860][ T3296] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.798597][ T3296] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.807337][ T3296] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.816678][ T29] audit: type=1400 audit(1734115498.895:117): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 31.839638][ T29] audit: type=1400 audit(1734115498.895:118): avc: denied { mount } for pid=3297 comm="syz-executor" name="/" dev="gadgetfs" ino=4359 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 31.864717][ T3297] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.885304][ T3303] veth0_macvtap: entered promiscuous mode [ 31.900360][ T3303] veth1_macvtap: entered promiscuous mode [ 31.907193][ T3298] veth0_macvtap: entered promiscuous mode [ 31.908003][ T29] audit: type=1400 audit(1734115499.155:119): avc: denied { read write } for pid=3297 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.915031][ T3298] veth1_macvtap: entered promiscuous mode [ 31.955375][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.965957][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.975793][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.986269][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.996164][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.006649][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.023187][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.063538][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.074067][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.083964][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.094436][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.104344][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.114948][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.126249][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.135335][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.145826][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.155771][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.166290][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.176380][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.186919][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.196787][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.207276][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.218207][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.229683][ T3303] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.238565][ T3303] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.247496][ T3303] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.254556][ T3441] syz.0.1 (3441) used greatest stack depth: 10448 bytes left [ 32.256343][ T3303] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.274967][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.285535][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.295677][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.306320][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.316345][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.326963][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.336862][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.347431][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.358322][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.368594][ T3298] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.377606][ T3298] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.386537][ T3298] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.395366][ T3298] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.504406][ T3459] syz.4.12[3459] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.504583][ T3459] syz.4.12[3459] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.551873][ T3459] syz.4.12[3459] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.621621][ T3471] syz.3.15[3471] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.634559][ T3471] syz.3.15[3471] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.647690][ T3471] syz.3.15[3471] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.691146][ T3475] netlink: 'syz.4.17': attribute type 10 has an invalid length. [ 32.717488][ T3475] geneve1: entered promiscuous mode [ 32.734804][ T3475] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 33.103060][ T3519] loop3: detected capacity change from 0 to 128 [ 33.118695][ T3519] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 33.155200][ T3519] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 33.276950][ T3532] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 33.296701][ T3535] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 33.372498][ T3537] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.468413][ T3558] loop0: detected capacity change from 0 to 512 [ 33.475975][ T3558] ======================================================= [ 33.475975][ T3558] WARNING: The mand mount option has been deprecated and [ 33.475975][ T3558] and is ignored by this kernel. Remove the mand [ 33.475975][ T3558] option from the mount to silence this warning. [ 33.475975][ T3558] ======================================================= [ 33.516587][ T3562] loop4: detected capacity change from 0 to 256 [ 33.535707][ T3558] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 33.547234][ T3558] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 33.556020][ T3558] System zones: 1-12 [ 33.561204][ T3558] EXT4-fs (loop0): orphan cleanup on readonly fs [ 33.572209][ T3558] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 361: padding at end of block bitmap is not set [ 33.587617][ T3558] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 33.596986][ T3558] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #11: comm +}[@: attempt to clear invalid blocks 33619980 len 1 [ 33.612130][ T3558] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm +}[@: invalid indirect mapped block 1811939328 (level 0) [ 33.655474][ T3558] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm +}[@: invalid indirect mapped block 2 (level 2) [ 33.668987][ T3558] EXT4-fs (loop0): 1 truncate cleaned up [ 33.675251][ T3558] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 33.728688][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 33.982590][ T3594] netlink: 'syz.2.67': attribute type 10 has an invalid length. [ 33.994644][ T3594] geneve1: entered promiscuous mode [ 34.003728][ T3594] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 34.025372][ T3596] loop4: detected capacity change from 0 to 512 [ 34.033929][ T3596] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 34.052714][ T3599] loop2: detected capacity change from 0 to 256 [ 34.059826][ T3596] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 34.069085][ T3596] System zones: 1-12 [ 34.073205][ T3596] EXT4-fs (loop4): orphan cleanup on readonly fs [ 34.079932][ T3596] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 361: padding at end of block bitmap is not set [ 34.094379][ T3596] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 34.103501][ T3596] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #11: comm +}[@: attempt to clear invalid blocks 33619980 len 1 [ 34.117027][ T3596] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm +}[@: invalid indirect mapped block 1811939328 (level 0) [ 34.131283][ T3596] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm +}[@: invalid indirect mapped block 2 (level 2) [ 34.144581][ T3596] EXT4-fs (loop4): 1 truncate cleaned up [ 34.150742][ T3596] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 34.175131][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 34.295727][ T3615] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 34.358924][ T3622] loop2: detected capacity change from 0 to 512 [ 34.365527][ T3620] netlink: 12 bytes leftover after parsing attributes in process `syz.4.79'. [ 34.389469][ T3622] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 34.401228][ T3622] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 34.409231][ T3622] System zones: 1-12 [ 34.413715][ T3622] EXT4-fs (loop2): orphan cleanup on readonly fs [ 34.439372][ T3622] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 361: padding at end of block bitmap is not set [ 34.454865][ T3622] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 34.463911][ T3622] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #11: comm +}[@: attempt to clear invalid blocks 33619980 len 1 [ 34.483059][ T3631] netlink: 'syz.1.82': attribute type 10 has an invalid length. [ 34.493119][ T3631] geneve1: entered promiscuous mode [ 34.499559][ T3633] rdma_op ffff888117554d80 conn xmit_rdma 0000000000000000 [ 34.503273][ T3631] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 34.515485][ T3622] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm +}[@: invalid indirect mapped block 1811939328 (level 0) [ 34.531975][ T3622] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm +}[@: invalid indirect mapped block 2 (level 2) [ 34.549436][ T3622] EXT4-fs (loop2): 1 truncate cleaned up [ 34.553966][ T3635] loop1: detected capacity change from 0 to 256 [ 34.557157][ T3622] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 34.602433][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 35.221581][ T3658] netlink: 'syz.0.94': attribute type 10 has an invalid length. [ 35.221643][ T3656] netlink: 12 bytes leftover after parsing attributes in process `syz.1.95'. [ 35.239348][ T3658] geneve1: entered promiscuous mode [ 35.248988][ T3658] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 35.270050][ T3661] rdma_op ffff888100e28580 conn xmit_rdma 0000000000000000 [ 35.285719][ T3664] loop1: detected capacity change from 0 to 512 [ 35.292918][ T3664] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 35.306317][ T3664] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 35.354329][ T3664] System zones: 1-12 [ 35.358634][ T3664] EXT4-fs (loop1): orphan cleanup on readonly fs [ 35.365665][ T3664] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 361: padding at end of block bitmap is not set [ 35.380605][ T3664] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 35.401137][ T3664] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #11: comm +}[@: attempt to clear invalid blocks 33619980 len 1 [ 35.428092][ T3664] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm +}[@: invalid indirect mapped block 1811939328 (level 0) [ 35.442831][ T3664] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm +}[@: invalid indirect mapped block 2 (level 2) [ 35.456249][ T3664] EXT4-fs (loop1): 1 truncate cleaned up [ 35.479822][ T3664] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 35.513184][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 36.237861][ T3680] loop0: detected capacity change from 0 to 256 [ 36.376393][ T3695] netlink: 12 bytes leftover after parsing attributes in process `syz.3.109'. [ 36.398587][ T3698] syz.0.110[3698] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.398669][ T3698] syz.0.110[3698] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.412966][ T3698] syz.0.110[3698] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.432579][ T3700] netlink: 'syz.3.111': attribute type 10 has an invalid length. [ 36.453166][ T3700] geneve1: entered promiscuous mode [ 36.462151][ T3700] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 36.463437][ T3702] rdma_op ffff8881177fb580 conn xmit_rdma 0000000000000000 [ 36.529530][ T3708] loop3: detected capacity change from 0 to 512 [ 36.537984][ T3708] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 36.561018][ T3708] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 36.569633][ T3708] System zones: 1-12 [ 36.574031][ T3708] EXT4-fs (loop3): orphan cleanup on readonly fs [ 36.581153][ T3708] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 361: padding at end of block bitmap is not set [ 36.595604][ T3708] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 36.640993][ T3708] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #11: comm +}[@: attempt to clear invalid blocks 33619980 len 1 [ 36.662339][ T3708] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm +}[@: invalid indirect mapped block 1811939328 (level 0) [ 36.677623][ T3708] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm +}[@: invalid indirect mapped block 2 (level 2) [ 36.692036][ T3708] EXT4-fs (loop3): 1 truncate cleaned up [ 36.698120][ T3708] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 36.728210][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 36.765865][ T3727] loop3: detected capacity change from 0 to 256 [ 36.910925][ T3735] syz.3.126[3735] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.914828][ T3734] loop0: detected capacity change from 0 to 128 [ 36.933451][ T3734] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 36.946696][ T3734] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 36.987119][ T3738] rdma_op ffff888117554d80 conn xmit_rdma 0000000000000000 [ 36.995139][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 36.995154][ T29] audit: type=1400 audit(1734115504.245:196): avc: denied { validate_trans } for pid=3736 comm="syz.4.130" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 37.036954][ T29] audit: type=1400 audit(1734115504.285:197): avc: denied { connect } for pid=3740 comm="syz.3.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 37.056606][ T29] audit: type=1400 audit(1734115504.285:198): avc: denied { read } for pid=3740 comm="syz.3.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 37.095702][ T29] audit: type=1400 audit(1734115504.345:199): avc: denied { write } for pid=3740 comm="syz.3.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 37.115100][ T29] audit: type=1326 audit(1734115504.345:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3744 comm="syz.4.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65cf295d19 code=0x7ffc0000 [ 37.138907][ T29] audit: type=1326 audit(1734115504.345:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3744 comm="syz.4.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65cf295d19 code=0x7ffc0000 [ 37.170284][ T29] audit: type=1326 audit(1734115504.345:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3744 comm="syz.4.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f65cf295d19 code=0x7ffc0000 [ 37.193991][ T29] audit: type=1326 audit(1734115504.345:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3744 comm="syz.4.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65cf295d19 code=0x7ffc0000 [ 37.217478][ T29] audit: type=1326 audit(1734115504.345:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3744 comm="syz.4.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65cf295d19 code=0x7ffc0000 [ 37.240931][ T29] audit: type=1326 audit(1734115504.345:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3744 comm="syz.4.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f65cf295d19 code=0x7ffc0000 [ 37.243984][ T3750] loop3: detected capacity change from 0 to 512 [ 37.276779][ T3750] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 37.295347][ T3750] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 37.303585][ T3750] System zones: 1-12 [ 37.307665][ T3750] EXT4-fs (loop3): orphan cleanup on readonly fs [ 37.314333][ T3750] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 361: padding at end of block bitmap is not set [ 37.331967][ T3750] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 37.341046][ T3750] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #11: comm +}[@: attempt to clear invalid blocks 33619980 len 1 [ 37.360006][ T3748] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 37.366801][ T3750] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm +}[@: invalid indirect mapped block 1811939328 (level 0) [ 37.397038][ T3750] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm +}[@: invalid indirect mapped block 2 (level 2) [ 37.421209][ T3750] EXT4-fs (loop3): 1 truncate cleaned up [ 37.427743][ T3750] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 37.465655][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 37.467051][ T3765] loop4: detected capacity change from 0 to 128 [ 37.483145][ T3765] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 37.507952][ T3765] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 37.636941][ T3783] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 37.734865][ T3795] loop2: detected capacity change from 0 to 512 [ 37.750733][ T3795] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 37.772669][ T3795] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 37.780851][ T3795] System zones: 1-12 [ 37.785214][ T3795] EXT4-fs (loop2): orphan cleanup on readonly fs [ 37.792138][ T3795] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 361: padding at end of block bitmap is not set [ 37.807957][ T3795] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 37.824443][ T3795] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #11: comm +}[@: attempt to clear invalid blocks 33619980 len 1 [ 37.846961][ T3795] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm +}[@: invalid indirect mapped block 1811939328 (level 0) [ 37.868467][ T3795] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm +}[@: invalid indirect mapped block 2 (level 2) [ 37.894249][ T3795] EXT4-fs (loop2): 1 truncate cleaned up [ 37.900631][ T3795] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 37.941410][ T3815] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 37.953888][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 37.973326][ T3811] loop4: detected capacity change from 0 to 8192 [ 38.809408][ T3820] loop3: detected capacity change from 0 to 512 [ 38.812092][ T3821] loop4: detected capacity change from 0 to 1024 [ 38.821201][ T3823] loop0: detected capacity change from 0 to 512 [ 38.837989][ T3823] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 38.858485][ T3821] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.871686][ T3823] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 38.879512][ T3820] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.893816][ T3821] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 38.897359][ T3823] System zones: 1-12 [ 38.908986][ T3820] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.923334][ T3821] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 16384 with max blocks 1 with error 28 [ 38.936082][ T3821] EXT4-fs (loop4): This should not happen!! Data will be lost [ 38.936082][ T3821] [ 38.945806][ T3821] EXT4-fs (loop4): Total free blocks count 0 [ 38.951888][ T3821] EXT4-fs (loop4): Free/Dirty block details [ 38.957816][ T3821] EXT4-fs (loop4): free_blocks=68451041280 [ 38.959034][ T3823] EXT4-fs (loop0): orphan cleanup on readonly fs [ 38.963684][ T3821] EXT4-fs (loop4): dirty_blocks=16 [ 38.975207][ T3821] EXT4-fs (loop4): Block reservation details [ 38.981271][ T3821] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 38.987274][ T3823] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 361: padding at end of block bitmap is not set [ 39.012770][ T3821] syz.4.171 (3821) used greatest stack depth: 9976 bytes left [ 39.022362][ T3823] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 39.033808][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.035446][ T3823] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #11: comm +}[@: attempt to clear invalid blocks 33619980 len 1 [ 39.054314][ T3839] loop2: detected capacity change from 0 to 512 [ 39.058140][ T3823] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm +}[@: invalid indirect mapped block 1811939328 (level 0) [ 39.077246][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.086966][ T3823] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm +}[@: invalid indirect mapped block 2 (level 2) [ 39.129830][ T3823] EXT4-fs (loop0): 1 truncate cleaned up [ 39.136449][ T3823] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 39.136910][ T3839] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.174248][ T3839] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 39.224385][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.279155][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 39.352409][ T3866] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 39.427584][ T3879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.188'. [ 39.495998][ T3887] loop0: detected capacity change from 0 to 512 [ 39.503177][ T3887] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 39.513373][ T3887] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 39.521859][ T3887] System zones: 1-12 [ 39.526020][ T3887] EXT4-fs (loop0): orphan cleanup on readonly fs [ 39.532572][ T3887] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 361: padding at end of block bitmap is not set [ 39.546650][ T3887] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 39.555661][ T3887] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #11: comm +}[@: attempt to clear invalid blocks 33619980 len 1 [ 39.569193][ T3887] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm +}[@: invalid indirect mapped block 1811939328 (level 0) [ 39.582877][ T3887] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm +}[@: invalid indirect mapped block 2 (level 2) [ 39.595965][ T3887] EXT4-fs (loop0): 1 truncate cleaned up [ 39.602031][ T3887] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 39.626891][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 40.437462][ T3927] Process accounting resumed [ 40.474318][ T3929] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 40.504323][ T3935] capability: warning: `syz.2.217' uses deprecated v2 capabilities in a way that may be insecure [ 40.539675][ T3935] loop2: detected capacity change from 0 to 2048 [ 40.631478][ T3935] loop2: p1 < > p4 [ 40.637806][ T3935] loop2: p4 size 8388608 extends beyond EOD, truncated [ 40.645950][ T3947] loop0: detected capacity change from 0 to 512 [ 40.663689][ T3947] EXT4-fs: Ignoring removed orlov option [ 40.687218][ T3947] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 40.714971][ T3950] loop4: detected capacity change from 0 to 1024 [ 40.722790][ T3950] EXT4-fs: Ignoring removed nomblk_io_submit option [ 40.729817][ T3947] EXT4-fs (loop0): orphan cleanup on readonly fs [ 40.743432][ T3950] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 40.762184][ T3947] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.222: bg 0: block 248: padding at end of block bitmap is not set [ 40.782314][ T3947] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.222: Failed to acquire dquot type 1 [ 40.795811][ T3950] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e05ce01c, mo2=0002] [ 40.806415][ T3947] EXT4-fs (loop0): 1 truncate cleaned up [ 40.812196][ T3950] System zones: 0-1, 3-36 [ 40.818329][ T3947] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.833415][ T3950] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.864535][ T3947] syz.0.222 (3947) used greatest stack depth: 9304 bytes left [ 40.874631][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.920566][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.958579][ T3969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.231'. [ 40.977955][ T3969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.985468][ T3969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.015234][ T3969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.022767][ T3969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.038384][ T3976] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 41.049265][ T3976] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.056526][ T3976] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.064479][ T3976] bridge0: entered allmulticast mode [ 41.064487][ T3973] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 41.168495][ T3991] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 41.188358][ T3991] syzkaller0: linktype set to 821 [ 41.220225][ T3996] mmap: syz.0.245 (3996) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 41.275350][ T3993] loop3: detected capacity change from 0 to 8192 [ 41.296330][ T4003] netlink: 268 bytes leftover after parsing attributes in process `syz.1.248'. [ 41.305441][ T4003] unsupported nla_type 65024 [ 41.316752][ T3999] loop4: detected capacity change from 0 to 8192 [ 41.326482][ T3993] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 41.360730][ T3999] loop4: p1 p2 < > p3 p4 < p5 > [ 41.365822][ T3999] loop4: p1 size 108986237 extends beyond EOD, truncated [ 41.382622][ T4005] loop2: detected capacity change from 0 to 2048 [ 41.395123][ T3999] loop4: p3 size 131072 extends beyond EOD, truncated [ 41.409656][ T3999] loop4: p5 size 108986237 extends beyond EOD, truncated [ 41.464108][ T4020] Illegal XDP return value 4294967294 on prog (id 107) dev N/A, expect packet loss! [ 41.470675][ T4005] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.490880][ T4005] EXT4-fs error (device loop2): ext4_find_extent:938: inode #2: comm syz.2.249: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 41.506588][ T2999] loop4: p1 p2 < > p3 p4 < p5 > [ 41.515858][ T2999] loop4: p1 size 108986237 extends beyond EOD, truncated [ 41.520459][ T4005] EXT4-fs (loop2): Remounting filesystem read-only [ 41.524377][ T2999] loop4: p3 size 131072 extends beyond EOD, truncated [ 41.537233][ T2999] loop4: p5 size 108986237 extends beyond EOD, truncated [ 41.579647][ T3576] udevd[3576]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 41.590949][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.613516][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 41.625857][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 41.645001][ T4040] udevd[4040]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 41.648950][ T4039] udevd[4039]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 41.736928][ T4051] netlink: 32 bytes leftover after parsing attributes in process `syz.0.266'. [ 41.757300][ T4039] udevd[4039]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 41.757634][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 41.777008][ T4051] netlink: 32 bytes leftover after parsing attributes in process `syz.0.266'. [ 41.780032][ T4040] udevd[4040]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 41.797101][ T3576] udevd[3576]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 41.801549][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 41.895642][ T4066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.272'. [ 42.065482][ T29] kauditd_printk_skb: 106 callbacks suppressed [ 42.065500][ T29] audit: type=1400 audit(1734115509.315:310): avc: denied { create } for pid=4082 comm="syz.0.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 42.093956][ T29] audit: type=1326 audit(1734115509.325:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4086 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65cf295d19 code=0x7ffc0000 [ 42.117407][ T29] audit: type=1326 audit(1734115509.325:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4086 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65cf295d19 code=0x7ffc0000 [ 42.140725][ T29] audit: type=1326 audit(1734115509.325:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4086 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65cf295d19 code=0x7ffc0000 [ 42.164038][ T29] audit: type=1326 audit(1734115509.325:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4086 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65cf295d19 code=0x7ffc0000 [ 42.187394][ T29] audit: type=1326 audit(1734115509.345:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4086 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65cf295d19 code=0x7ffc0000 [ 42.210913][ T29] audit: type=1326 audit(1734115509.345:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4086 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65cf295d19 code=0x7ffc0000 [ 42.234192][ T29] audit: type=1326 audit(1734115509.345:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4086 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f65cf295d19 code=0x7ffc0000 [ 42.257791][ T29] audit: type=1326 audit(1734115509.345:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4086 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65cf295d19 code=0x7ffc0000 [ 42.281093][ T29] audit: type=1400 audit(1734115509.425:319): avc: denied { read } for pid=4088 comm="syz.2.283" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 42.332844][ T4099] loop0: detected capacity change from 0 to 128 [ 42.379306][ T4101] bond1: entered promiscuous mode [ 42.384507][ T4101] bond1: entered allmulticast mode [ 42.399635][ T4101] 8021q: adding VLAN 0 to HW filter on device bond1 [ 42.421071][ T4101] bond1 (unregistering): Released all slaves [ 42.567374][ T4123] xt_hashlimit: max too large, truncated to 1048576 [ 42.575086][ T4123] Cannot find set identified by id 0 to match [ 42.717839][ T4136] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.734039][ T4130] netlink: 64 bytes leftover after parsing attributes in process `syz.2.299'. [ 43.002629][ T4153] syz.0.309 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 43.024460][ T4154] netlink: 20 bytes leftover after parsing attributes in process `syz.4.313'. [ 43.135131][ T4165] SELinux: policydb version 0 does not match my version range 15-33 [ 43.145787][ T4165] SELinux: failed to load policy [ 43.407520][ T4199] wireguard: wg1: Could not create IPv4 socket [ 43.433533][ T4203] process 'syz.1.335' launched './file1' with NULL argv: empty string added [ 43.537293][ T4217] loop0: detected capacity change from 0 to 1024 [ 43.545513][ T4217] EXT4-fs: Ignoring removed orlov option [ 43.551349][ T4217] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.569626][ T4219] serio: Serial port ptm0 [ 43.575587][ T4217] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.608716][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.831198][ T4258] netlink: 32 bytes leftover after parsing attributes in process `syz.1.361'. [ 43.849407][ T4256] hub 9-0:1.0: USB hub found [ 43.875946][ T4256] hub 9-0:1.0: 8 ports detected [ 43.913860][ T4270] capability: warning: `syz.2.366' uses 32-bit capabilities (legacy support in use) [ 43.956574][ T4275] loop2: detected capacity change from 0 to 128 [ 43.991546][ T4275] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 44.012055][ T4281] loop0: detected capacity change from 0 to 256 [ 44.024234][ T4275] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.080706][ T4275] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 44.139982][ T4299] ieee802154 phy0 wpan0: encryption failed: -22 [ 44.146518][ T4293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.378'. [ 44.254888][ T4307] loop2: detected capacity change from 0 to 512 [ 44.321482][ T4307] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.351038][ T4307] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.372740][ T4324] loop0: detected capacity change from 0 to 512 [ 44.415142][ T4324] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 44.428285][ T4324] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 44.442709][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.443444][ T4324] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 44.466106][ T4324] EXT4-fs (loop0): 1 truncate cleaned up [ 44.472485][ T4324] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.513489][ T4324] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 44.530185][ T4324] EXT4-fs (loop0): Remounting filesystem read-only [ 44.536756][ T4324] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -5) [ 44.549908][ T4340] __nla_validate_parse: 2 callbacks suppressed [ 44.549925][ T4340] netlink: 76 bytes leftover after parsing attributes in process `syz.3.398'. [ 44.606846][ T4342] tap0: tun_chr_ioctl cmd 1074025677 [ 44.612321][ T4342] tap0: linktype set to 774 [ 44.620472][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.662311][ T4353] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 44.760584][ T4366] loop4: detected capacity change from 0 to 128 [ 44.800790][ T4366] netlink: 12 bytes leftover after parsing attributes in process `syz.4.411'. [ 44.879333][ T4380] Invalid ELF header magic: != ELF [ 44.935845][ T4386] loop4: detected capacity change from 0 to 512 [ 45.002933][ T4395] 9pnet_fd: p9_fd_create_tcp (4395): problem connecting socket to 127.0.0.1 [ 45.152442][ T4413] 9p: Unknown access argument 18446744073709551615: -34 [ 45.166095][ T4417] netlink: 'syz.1.434': attribute type 4 has an invalid length. [ 45.173825][ T4417] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.434'. [ 45.319500][ T4440] loop0: detected capacity change from 0 to 256 [ 45.365025][ T4445] loop1: detected capacity change from 0 to 164 [ 45.505257][ T4468] bpf_get_probe_write_proto: 2 callbacks suppressed [ 45.505344][ T4468] syz.1.457[4468] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.512460][ T4468] syz.1.457[4468] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.530214][ T4468] syz.1.457[4468] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.669092][ T4477] sctp: [Deprecated]: syz.1.461 (pid 4477) Use of struct sctp_assoc_value in delayed_ack socket option. [ 45.669092][ T4477] Use struct sctp_sack_info instead [ 45.712487][ T4485] 9pnet_fd: Insufficient options for proto=fd [ 45.727815][ T4486] netlink: 4 bytes leftover after parsing attributes in process `syz.3.465'. [ 45.831783][ T4498] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 45.840045][ T4498] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 46.035733][ T4526] loop2: detected capacity change from 0 to 512 [ 46.073162][ T4526] EXT4-fs: Ignoring removed orlov option [ 46.106185][ T4526] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c118, mo2=0002] [ 46.120065][ T4526] EXT4-fs (loop2): too many log groups per flexible block group [ 46.127893][ T4526] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 46.135263][ T4526] EXT4-fs (loop2): mount failed [ 46.258798][ T4563] program syz.0.500 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 46.336647][ T4572] loop0: detected capacity change from 0 to 512 [ 46.378478][ T4572] EXT4-fs (loop0): 1 truncate cleaned up [ 46.389853][ T4572] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.409920][ T4578] loop1: detected capacity change from 0 to 1764 [ 46.471329][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.549881][ T4596] Invalid ELF header magic: != ELF [ 46.672567][ T4615] loop0: detected capacity change from 0 to 512 [ 46.697233][ T4615] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 46.706027][ T4615] EXT4-fs (loop0): orphan cleanup on readonly fs [ 46.712741][ T4615] EXT4-fs warning (device loop0): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 46.727589][ T4615] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 46.735795][ T4615] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #16: comm syz.0.523: casefold flag without casefold feature [ 46.755943][ T4615] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.523: couldn't read orphan inode 16 (err -117) [ 46.783335][ T4615] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 46.824195][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.861447][ T4639] SELinux: policydb version 0 does not match my version range 15-33 [ 46.875605][ T4639] SELinux: failed to load policy [ 46.936824][ T4649] pim6reg: entered allmulticast mode [ 46.957960][ T4649] pim6reg: left allmulticast mode [ 47.053920][ T4664] loop4: detected capacity change from 0 to 512 [ 47.069537][ T4664] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 47.080861][ T29] kauditd_printk_skb: 193 callbacks suppressed [ 47.080878][ T29] audit: type=1400 audit(1734115514.335:512): avc: denied { create } for pid=4667 comm="syz.0.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 47.103989][ T4668] loop0: detected capacity change from 0 to 1024 [ 47.122530][ T29] audit: type=1400 audit(1734115514.375:513): avc: denied { read write } for pid=4669 comm="syz.3.549" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 47.151836][ T4664] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.169094][ T4668] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 47.178782][ T29] audit: type=1400 audit(1734115514.375:514): avc: denied { open } for pid=4669 comm="syz.3.549" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 47.202229][ T4664] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.210025][ T4668] EXT4-fs warning (device loop0): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 47.232388][ T4668] EXT4-fs (loop0): mount failed [ 47.268458][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.308116][ T29] audit: type=1400 audit(1734115514.555:515): avc: denied { create } for pid=4681 comm="syz.3.553" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 47.347478][ T29] audit: type=1400 audit(1734115514.575:516): avc: denied { ioctl } for pid=4686 comm="syz.0.555" path="socket:[7744]" dev="sockfs" ino=7744 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 47.372975][ T29] audit: type=1400 audit(1734115514.575:517): avc: denied { read } for pid=4681 comm="syz.3.553" name="file0" dev="tmpfs" ino=625 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 47.395165][ T29] audit: type=1400 audit(1734115514.575:518): avc: denied { open } for pid=4681 comm="syz.3.553" path="/119/file0" dev="tmpfs" ino=625 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 47.417916][ T29] audit: type=1400 audit(1734115514.585:519): avc: denied { ioctl } for pid=4681 comm="syz.3.553" path="/119/file0" dev="tmpfs" ino=625 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 47.442936][ T29] audit: type=1400 audit(1734115514.625:520): avc: denied { unlink } for pid=3303 comm="syz-executor" name="file0" dev="tmpfs" ino=625 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 47.498602][ T29] audit: type=1400 audit(1734115514.745:521): avc: denied { name_bind } for pid=4693 comm="syz.0.558" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 47.560419][ T4698] netlink: 16 bytes leftover after parsing attributes in process `syz.0.559'. [ 47.569600][ T4698] netem: invalid attributes len -13 [ 47.574893][ T4698] netem: change failed [ 47.787158][ T4723] loop2: detected capacity change from 0 to 512 [ 47.807952][ T4729] netlink: 52 bytes leftover after parsing attributes in process `syz.1.574'. [ 47.905602][ T4731] loop3: detected capacity change from 0 to 8192 [ 47.907729][ T4723] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.924757][ T4723] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.938771][ T35] kernel write not supported for file /219/attr/keycreate (pid: 35 comm: kworker/1:1) [ 47.986257][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.991655][ T4741] syz.0.580[4741] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.995530][ T4741] syz.0.580[4741] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.007987][ T4741] syz.0.580[4741] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.157159][ T4759] loop0: detected capacity change from 0 to 512 [ 48.226422][ T4759] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.588: corrupted in-inode xattr: invalid ea_ino [ 48.273977][ T4759] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.588: couldn't read orphan inode 15 (err -117) [ 48.351563][ T4790] loop3: detected capacity change from 0 to 1024 [ 48.360642][ T4790] EXT4-fs: Ignoring removed orlov option [ 48.366423][ T4790] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.378316][ T4759] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.403515][ T4759] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.588: invalid indirect mapped block 234881024 (level 0) [ 48.418142][ T4790] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.449444][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.465586][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.485524][ T4801] program syz.2.608 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 48.514443][ T4805] syz.3.609[4805] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.514526][ T4805] syz.3.609[4805] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.526057][ T4809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.611'. [ 48.535856][ T4805] syz.3.609[4805] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.548022][ T4805] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 48.574970][ T4805] SELinux: failed to load policy [ 48.618553][ T4815] loop1: detected capacity change from 0 to 512 [ 48.661770][ T4819] netlink: 16 bytes leftover after parsing attributes in process `syz.2.616'. [ 48.664929][ T4817] loop3: detected capacity change from 0 to 2048 [ 48.678882][ T4815] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 48.694282][ T4817] EXT4-fs: Ignoring removed mblk_io_submit option [ 48.707486][ T4815] EXT4-fs (loop1): 1 truncate cleaned up [ 48.714000][ T4815] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.748674][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.760912][ T4817] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.860623][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.954065][ T4847] netlink: 'syz.0.627': attribute type 6 has an invalid length. [ 49.257470][ T4883] netlink: 133492 bytes leftover after parsing attributes in process `syz.0.645'. [ 49.303957][ T4878] wireguard0: entered promiscuous mode [ 49.309628][ T4878] wireguard0: entered allmulticast mode [ 49.359121][ T4895] 9pnet: Could not find request transport: f [ 49.385797][ T4898] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.405259][ T4898] batadv_slave_1: entered promiscuous mode [ 49.472511][ T4914] netlink: 'syz.1.658': attribute type 3 has an invalid length. [ 49.480271][ T4914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.658'. [ 49.594429][ T4919] pimreg: entered allmulticast mode [ 49.605138][ T4919] pimreg: left allmulticast mode [ 49.775633][ T4956] random: crng reseeded on system resumption [ 49.838575][ T4965] __nla_validate_parse: 1 callbacks suppressed [ 49.838598][ T4965] netlink: 16 bytes leftover after parsing attributes in process `syz.2.681'. [ 49.970112][ T4980] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4980 comm=syz.2.688 [ 49.993117][ T4985] Invalid ELF header magic: != ELF [ 50.148768][ T5011] wireguard0: entered promiscuous mode [ 50.154382][ T5011] wireguard0: entered allmulticast mode [ 50.297593][ T5033] syz.3.713[5033] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.356502][ T5041] netlink: 'syz.4.717': attribute type 1 has an invalid length. [ 50.454872][ T5053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.722'. [ 50.463756][ T5053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.722'. [ 50.641130][ T5076] sg_write: process 326 (syz.3.734) changed security contexts after opening file descriptor, this is not allowed. [ 50.686496][ T5076] program syz.3.734 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 50.699995][ T5082] loop2: detected capacity change from 0 to 512 [ 50.707771][ T5082] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 50.737456][ T5082] EXT4-fs (loop2): 1 truncate cleaned up [ 50.750705][ T5082] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.785489][ T5082] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.736: corrupted in-inode xattr: overlapping e_value [ 50.810573][ T5082] EXT4-fs warning (device loop2): ext4_xattr_set_entry:1772: inode #15: comm syz.2.736: unable to update i_inline_off [ 50.826869][ T5094] netlink: 72 bytes leftover after parsing attributes in process `syz.3.742'. [ 50.847392][ T5082] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.736: corrupted in-inode xattr: overlapping e_value [ 50.892750][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.897461][ T5103] loop0: detected capacity change from 0 to 128 [ 50.921542][ T5103] FAT-fs (loop0): bogus number of reserved sectors [ 50.928182][ T5103] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 50.937580][ T5103] FAT-fs (loop0): Can't find a valid FAT filesystem [ 50.958065][ T5108] netlink: 16 bytes leftover after parsing attributes in process `syz.2.747'. [ 51.118742][ T5133] netlink: 133492 bytes leftover after parsing attributes in process `syz.0.761'. [ 51.160988][ T5138] netlink: 256 bytes leftover after parsing attributes in process `syz.1.763'. [ 51.272872][ T5153] bpf_get_probe_write_proto: 2 callbacks suppressed [ 51.272891][ T5153] syz.1.770[5153] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.284572][ T5153] syz.1.770[5153] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.296118][ T5153] syz.1.770[5153] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.297323][ T5155] loop2: detected capacity change from 0 to 512 [ 51.398284][ T5155] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.411061][ T5155] ext4 filesystem being mounted at /154/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.435765][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.473987][ T5170] syz.2.776: attempt to access beyond end of device [ 51.473987][ T5170] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 51.543285][ T5176] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 51.549242][ T5176] syzkaller0: linktype set to 776 [ 51.591510][ T5182] syz.4.783[5182] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.591671][ T5182] syz.4.783[5182] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.611549][ T5182] syz.4.783[5182] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.661652][ T5189] SELinux: syz.2.785 (5189) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 51.760086][ T5203] netlink: 'syz.3.794': attribute type 27 has an invalid length. [ 51.782259][ T5203] bond0: (slave bond_slave_0): Releasing backup interface [ 51.869032][ T5214] loop2: detected capacity change from 0 to 1024 [ 51.891665][ T5214] journal_path: Non-blockdev passed as './file0' [ 51.898074][ T5214] EXT4-fs: error: could not find journal device path [ 52.096894][ T5241] netlink: 12 bytes leftover after parsing attributes in process `syz.1.812'. [ 52.140459][ T29] kauditd_printk_skb: 228 callbacks suppressed [ 52.140476][ T29] audit: type=1400 audit(1734115519.385:750): avc: denied { read write } for pid=3297 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 52.171024][ T29] audit: type=1400 audit(1734115519.385:751): avc: denied { open } for pid=3297 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 52.195085][ T29] audit: type=1400 audit(1734115519.385:752): avc: denied { ioctl } for pid=3297 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 52.255274][ T29] audit: type=1400 audit(1734115519.475:753): avc: denied { prog_load } for pid=5246 comm="syz.2.815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 52.274243][ T29] audit: type=1400 audit(1734115519.475:754): avc: denied { bpf } for pid=5246 comm="syz.2.815" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 52.294631][ T29] audit: type=1400 audit(1734115519.475:755): avc: denied { perfmon } for pid=5246 comm="syz.2.815" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 52.315499][ T29] audit: type=1400 audit(1734115519.475:756): avc: denied { prog_run } for pid=5246 comm="syz.2.815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 52.334520][ T29] audit: type=1400 audit(1734115519.485:757): avc: denied { append } for pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 52.357248][ T29] audit: type=1326 audit(1734115519.495:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5246 comm="syz.2.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f172f325d19 code=0x7ffc0000 [ 52.380625][ T29] audit: type=1326 audit(1734115519.495:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5246 comm="syz.2.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f172f325d19 code=0x7ffc0000 [ 52.460909][ T5267] loop3: detected capacity change from 0 to 512 [ 52.480950][ T5267] EXT4-fs: Invalid want_extra_isize 7 [ 52.617429][ T5279] netlink: 'syz.2.828': attribute type 10 has an invalid length. [ 52.625319][ T5279] netlink: 'syz.2.828': attribute type 27 has an invalid length. [ 52.685606][ T5287] netlink: 28 bytes leftover after parsing attributes in process `syz.2.831'. [ 52.750558][ T5291] SELinux: failed to load policy [ 52.759711][ T5299] netlink: 72 bytes leftover after parsing attributes in process `syz.0.834'. [ 52.828909][ T5305] vlan2: entered allmulticast mode [ 53.099519][ T5335] loop0: detected capacity change from 0 to 256 [ 53.146466][ T5335] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 53.345373][ T2999] udevd[2999]: worker [3576] terminated by signal 33 (Unknown signal 33) [ 53.376456][ T2999] udevd[2999]: worker [3576] failed while handling '/devices/virtual/block/loop0' [ 53.417901][ T5381] IPv6: NLM_F_CREATE should be specified when creating new route [ 53.455994][ T5395] loop3: detected capacity change from 0 to 164 [ 53.544434][ T5409] loop0: detected capacity change from 0 to 512 [ 53.666358][ T5409] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 53.687399][ T5409] ext4 filesystem being mounted at /191/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.701524][ T5425] syz.2.882[5425] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.701590][ T5425] syz.2.882[5425] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.715437][ T5425] syz.2.882[5425] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.734731][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 53.910881][ T5441] vhci_hcd: invalid port number 236 [ 53.916183][ T5441] vhci_hcd: default hub control req: 030f v0f00 i00ec l0 [ 54.000101][ T5453] loop2: detected capacity change from 0 to 512 [ 54.081207][ T5453] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.093949][ T5453] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.103190][ T5466] loop3: detected capacity change from 0 to 4096 [ 54.134729][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.148963][ T5466] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.241839][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.283806][ T5493] vhci_hcd: invalid port number 255 [ 54.289115][ T5493] vhci_hcd: default hub control req: 801a v087e i00ff l0 [ 54.416480][ T5505] loop3: detected capacity change from 0 to 2048 [ 54.458276][ T5505] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.505120][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.699833][ T5544] program syz.3.929 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 54.914204][ T5578] __nla_validate_parse: 2 callbacks suppressed [ 54.914222][ T5578] netlink: 44 bytes leftover after parsing attributes in process `syz.2.941'. [ 54.967449][ T5586] syz.0.944[5586] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.970211][ T5586] netlink: 16 bytes leftover after parsing attributes in process `syz.0.944'. [ 55.014879][ T5592] netlink: 108 bytes leftover after parsing attributes in process `syz.4.946'. [ 55.054023][ T5592] netlink: 108 bytes leftover after parsing attributes in process `syz.4.946'. [ 55.063107][ T5592] netlink: 84 bytes leftover after parsing attributes in process `syz.4.946'. [ 55.085718][ T5601] loop2: detected capacity change from 0 to 764 [ 55.111184][ T5601] rock: directory entry would overflow storage [ 55.117476][ T5601] rock: sig=0x4654, size=5, remaining=4 [ 55.135013][ T5608] SELinux: Context system_u:object_r:updpwd_exec_t:s0 is not valid (left unmapped). [ 55.161407][ T5604] loop0: detected capacity change from 0 to 512 [ 55.198431][ T5604] EXT4-fs (loop0): too many log groups per flexible block group [ 55.206336][ T5604] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 55.228956][ T5604] EXT4-fs (loop0): mount failed [ 55.327266][ T5635] netlink: 180 bytes leftover after parsing attributes in process `syz.3.959'. [ 55.345826][ T5635] netlink: 56 bytes leftover after parsing attributes in process `syz.3.959'. [ 55.361684][ T5640] batadv_slave_1: entered allmulticast mode [ 55.368165][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.571766][ T5669] loop0: detected capacity change from 0 to 512 [ 55.617129][ T5669] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.635216][ T5669] ext4 filesystem being mounted at /213/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.665506][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.906239][ T5714] loop4: detected capacity change from 0 to 512 [ 55.913028][ T5714] EXT4-fs: Ignoring removed orlov option [ 55.919343][ T5714] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 55.931290][ T5714] EXT4-fs (loop4): 1 orphan inode deleted [ 55.937104][ T5714] EXT4-fs (loop4): 1 truncate cleaned up [ 55.943250][ T5714] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.957035][ T5714] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 56.000927][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.129366][ T5729] ebtables: ebtables: counters copy to user failed while replacing table [ 56.234128][ T5741] loop2: detected capacity change from 0 to 1024 [ 56.241066][ T5741] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.252370][ T5741] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.277821][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.448975][ T5761] ebtables: ebtables: counters copy to user failed while replacing table [ 56.547313][ T5773] loop1: detected capacity change from 0 to 1024 [ 56.560596][ T5773] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.596725][ T5773] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.651851][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.707711][ T4039] ================================================================== [ 56.715864][ T4039] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_unlink [ 56.722922][ T4039] [ 56.725267][ T4039] write to 0xffff8881042cd264 of 4 bytes by task 4040 on cpu 1: [ 56.734134][ T4039] shmem_unlink+0x13b/0x170 [ 56.738665][ T4039] vfs_unlink+0x275/0x430 [ 56.743019][ T4039] do_unlinkat+0x237/0x4d0 [ 56.747453][ T4039] __x64_sys_unlink+0x2e/0x40 [ 56.752153][ T4039] x64_sys_call+0x2329/0x2dc0 [ 56.756848][ T4039] do_syscall_64+0xc9/0x1c0 [ 56.761362][ T4039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.767284][ T4039] [ 56.769620][ T4039] read to 0xffff8881042cd264 of 4 bytes by task 4039 on cpu 0: [ 56.777170][ T4039] fill_mg_cmtime+0x58/0x280 [ 56.781767][ T4039] generic_fillattr+0x241/0x330 [ 56.786622][ T4039] shmem_getattr+0x17b/0x200 [ 56.791230][ T4039] vfs_statx_path+0x171/0x2d0 [ 56.795926][ T4039] vfs_statx+0xe1/0x170 [ 56.800099][ T4039] __se_sys_newfstatat+0xdc/0x300 [ 56.805144][ T4039] __x64_sys_newfstatat+0x55/0x70 [ 56.810181][ T4039] x64_sys_call+0x236d/0x2dc0 [ 56.814868][ T4039] do_syscall_64+0xc9/0x1c0 [ 56.819376][ T4039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.825312][ T4039] [ 56.827634][ T4039] value changed: 0x399c8aa3 -> 0x39e2a526 [ 56.833369][ T4039] [ 56.835718][ T4039] Reported by Kernel Concurrency Sanitizer on: [ 56.841890][ T4039] CPU: 0 UID: 0 PID: 4039 Comm: udevd Not tainted 6.13.0-rc2-syzkaller-00192-g243f750a2df0 #0 [ 56.852144][ T4039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 56.862293][ T4039] ================================================================== [ 56.914154][ T5797] ebtables: ebtables: counters copy to user failed while replacing table