last executing test programs: 1.443581491s ago: executing program 1 (id=803): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x12088d4, &(0x7f0000001040)={[{@nogrpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1}}, {@orlov}, {@commit}, {@data_err_ignore}, {@nouid32}, {@noauto_da_alloc}]}, 0x4, 0x505, &(0x7f0000000540)="$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") lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x1c, 0x0) stat(0x0, 0x0) chown(&(0x7f0000000140)='./file1\x00', 0xee01, 0x0) 1.17097044s ago: executing program 4 (id=811): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r0, &(0x7f00000003c0), 0x0}, 0x20) 1.147847561s ago: executing program 1 (id=814): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000180001002abd7000000000000a100000fc02fe000005000008000400", @ANYRES32=r1, @ANYBLOB="06001500080000001800168014"], 0x44}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) 1.074055843s ago: executing program 4 (id=819): perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x22, 0x0, 0x7, 0x4, 0x0, 0x5, 0xa16ae, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x8287, 0x2, 0xffffffff, 0x7, 0x7f, 0x9, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = io_uring_setup(0x669, &(0x7f00000002c0)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x12, 0x0, r1) 1.028595835s ago: executing program 4 (id=821): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 985.448216ms ago: executing program 1 (id=823): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f00000003c0)=[{0x0, 0x1}, {0x4, 0x4}], 0x2, 0x0) semop(r0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(r0, &(0x7f0000001240)=[{0x0, 0xffff, 0x1000}], 0x1) 768.489244ms ago: executing program 2 (id=830): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbff, {{@in=@multicast1, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4d2, 0x32}, @in6=@private2, {0x5, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x100, 0x1}, {}, 0x70bd2c, 0x3505, 0xa, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x40, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r2}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 714.545926ms ago: executing program 0 (id=831): setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x101000, 0x800, 0x3, 0x1}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001"], 0x34}}, 0x0) 667.214898ms ago: executing program 0 (id=832): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0xffffd000) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0xb}, 0x20) 470.869894ms ago: executing program 3 (id=834): r0 = socket(0xa, 0x5, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x8000, 0x10, 0x0, 0x10, {{0x5, 0x4, 0x3, 0x18, 0x14, 0x68, 0x0, 0xf, 0x2f, 0x0, @local, @multicast2}}}}) 454.801805ms ago: executing program 0 (id=835): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x9, "c46e9fd1a84b7fefa0bf2cca6beb9363a680b652a86bcf56a1b9f4e6b54cc6beca5462202c484c10ca5386103a5ccbe47b7b9aa6d8d701a3ba6a6c0ce8b978", 0x1}, 0x60) r1 = dup(r0) sendmsg$sock(r1, &(0x7f0000000180)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x0, 0x1}, 0x80, &(0x7f0000001840)=[{&(0x7f00000002c0)="1cc0d09b58d82f66d550f79edbf494a7744a0a7d844ec7c9a58bb539d918dbd30a3a4378bc10f3ae08b34e30137a2d711daa3bb08d998cca6158958881e637af4c15c7050cede8c26e71b2f90c9aed2134540d8ee2da39de353f86715e744d388e01e5714f705eb57958136e1cda911004d6dd89e8b17c6929832e4bd1c9ba", 0x7f}, {&(0x7f00000014c0)="acb84e", 0x3}], 0x2}, 0xc004000) 443.671535ms ago: executing program 3 (id=836): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0x2, 0x4e20, 0x0, @local, 0x6}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x9c, 0x11, 0xff, @remote, @mcast2, {[], {0x4f20, 0xe22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "0185134372446b63f4a9f1dabf6a0bdcbcd5235f8e78eac207f174028bf01aad", "7c269401476e3e012fa8e66e904dcd37f99b4f81b10e92d3f9f5e798de88bd23ca8e3f2155654fdcc87453025baa6840", "af941fbfeed0bd78a40c117998f3f054c46704735d948e7ea72a8936", {"1a8a905ce8ee8798dfdbf2bae3764e97", "4fc3ca5e160ed750474da90e2a078b59"}}}}}}}}, 0x0) 429.627716ms ago: executing program 0 (id=837): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x100000b, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x2000, 0x0) 389.942527ms ago: executing program 0 (id=838): r0 = socket$inet6(0xa, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x68, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x14080, 0x10000}, [@IFLA_VFINFO_LIST={0x40, 0x16, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x10, 0x5}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x7fffffff, 0xb85}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x2, 0xa02c}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x5, 0x7}}]}]}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x361ff}]}, 0x68}}, 0x0) 360.447618ms ago: executing program 3 (id=839): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x1}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000005300)=[{0x28, 0x9, 0xfb, 0xfffff034}, {0x6, 0x26, 0x0, 0x100000}]}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000500)={@local, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @local, @remote, @random="28f479fa4bc1", @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x0) 295.52098ms ago: executing program 0 (id=840): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) munlockall() 276.643681ms ago: executing program 3 (id=841): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xb, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r1, &(0x7f0000000c00), 0x0}, 0x20) 261.166251ms ago: executing program 2 (id=842): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000000000)="be39", 0xffeb}, {0x0}], 0x2, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0x20}, 0x0) recvmmsg(r1, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, &(0x7f0000008340)=[{&(0x7f0000006d00)=""/4096, 0x1000}], 0x1}, 0x1d}], 0x2, 0x2, 0x0) 236.813523ms ago: executing program 3 (id=843): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000002000000080003"], 0x34}}, 0x884) 223.922273ms ago: executing program 2 (id=844): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xf8c, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x8002, 0x16}, 0x0, 0x10004, 0x7, 0x5, 0xabca, 0x5, 0xa, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) 178.097184ms ago: executing program 4 (id=845): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000840)="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", 0x362}], 0x1, 0x0, 0x30, 0x40400d1}}], 0x1, 0x810) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b80)=ANY=[@ANYBLOB="240000001800010000000000010000001d01000008000900", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYBLOB="17"], 0x24}}, 0x20008030) 155.213025ms ago: executing program 3 (id=846): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x4, &(0x7f0000000500)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7f}}]}, 0x1, 0x4c0, &(0x7f0000000f00)="$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") r0 = creat(&(0x7f0000000200)='./file1\x00', 0x1) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x20052f8, 0xfffffff8, 0x100802, 0x2, 0x8}) write$cgroup_devices(r0, 0x0, 0x0) 148.110415ms ago: executing program 2 (id=847): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'erspan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x154, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x128, 0x2, [@TCA_RED_STAB={0x104, 0x2, "2d08975d6faf5ebb5a358b443bd02c619eec018738528d8cd4f9397d08eee669902f832081a9f5013f95004803f30956e0e09810810c12483a8c5b09f7d0872cd554dac1e60b6402f21270f406e4b85f53fa2882d0441214ba816165e14176b932224bc5b61ad05f8ecf683c5dbd434d94c763419a6763d7b30686088811807b86f46b058190552c1b7024340ee6d00512d1c137dde6b5ad0569068832e9519f90ab66172a2dd10203f560c0051e2ea70d27344e83c22f7a8be3880849656a69278012c49110ece1dcd9b2b918097841a13073cb89a54b9ebfebac5de414890336cc11d1449703a8d9b50ff5bbb5bf3a576348e6e3b123265c5c7044c7612949"}, @TCA_RED_FLAGS={0xc, 0x4, {0x0, 0x8}}, @TCA_RED_PARMS={0x14, 0x1, {0x1, 0x800, 0xcf1, 0xe, 0xd, 0xd, 0x8}}]}}]}, 0x154}}, 0x0) 145.746666ms ago: executing program 4 (id=848): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r1) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x4800) 122.713036ms ago: executing program 1 (id=849): r0 = msgget$private(0x0, 0x3ac) msgsnd(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e7f"], 0x8, 0x0) msgget$private(0x0, 0x146) msgctl$IPC_RMID(r0, 0x0) 94.700807ms ago: executing program 4 (id=850): pipe(&(0x7f0000000040)={0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) io_cancel(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x6, 0x200, 0xffffffffffffffff, 0x0, 0x0, 0x8dc3, 0x0, 0x3}, 0x0) 89.852237ms ago: executing program 1 (id=851): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) unshare(0x2c020400) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xd4) ioctl$BLKPG(r0, 0x1274, 0x0) 79.874248ms ago: executing program 2 (id=852): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@private0, 0x10, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}, 0x400}, [@tmpl={0x44, 0x5, [{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2, 0x4, 0x3, 0xff}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc020000000000000000000000000001fe80000000000000000000000000002000000000000000000a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ac1414aa000000000000000000000000ffffffff000000000000000000000000fc020000000000000000000000000001200100000000000000000000000000003c04"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 31.64828ms ago: executing program 1 (id=853): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x3) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 0s ago: executing program 2 (id=854): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r2, &(0x7f0000000300)}, 0x20) kernel console output (not intermixed with test programs): [ 19.635470][ T28] audit: type=1400 audit(1775066163.616:62): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.657469][ T28] audit: type=1400 audit(1775066163.616:63): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.680145][ T28] audit: type=1400 audit(1775066163.616:64): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.703202][ T28] audit: type=1400 audit(1775066163.616:65): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.726484][ T28] audit: type=1400 audit(1775066163.616:66): avc: denied { read open } for pid=3193 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.63' (ED25519) to the list of known hosts. [ 24.781492][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 24.781508][ T28] audit: type=1400 audit(1775066168.766:70): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.810894][ T28] audit: type=1400 audit(1775066168.796:71): avc: denied { mount } for pid=3297 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.811566][ T3297] cgroup: Unknown subsys name 'net' [ 24.838941][ T28] audit: type=1400 audit(1775066168.826:72): avc: denied { unmount } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.938938][ T3297] cgroup: Unknown subsys name 'cpuset' [ 24.945310][ T3297] cgroup: Unknown subsys name 'rlimit' [ 25.074322][ T28] audit: type=1400 audit(1775066169.056:73): avc: denied { setattr } for pid=3297 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.097936][ T28] audit: type=1400 audit(1775066169.056:74): avc: denied { create } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.124273][ T28] audit: type=1400 audit(1775066169.056:75): avc: denied { write } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.145648][ T28] audit: type=1400 audit(1775066169.056:76): avc: denied { read } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.153651][ T3300] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.166637][ T28] audit: type=1400 audit(1775066169.086:77): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.199969][ T28] audit: type=1400 audit(1775066169.086:78): avc: denied { mount } for pid=3297 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.224284][ T28] audit: type=1400 audit(1775066169.106:79): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 25.249626][ T3297] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.305801][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 26.382544][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.389984][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.397073][ T3313] bridge_slave_0: entered allmulticast mode [ 26.403587][ T3313] bridge_slave_0: entered promiscuous mode [ 26.412363][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.419523][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.426592][ T3313] bridge_slave_1: entered allmulticast mode [ 26.433188][ T3313] bridge_slave_1: entered promiscuous mode [ 26.452803][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 26.474148][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.483451][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 26.496117][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.553835][ T3313] team0: Port device team_slave_0 added [ 26.580998][ T3313] team0: Port device team_slave_1 added [ 26.604307][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.611477][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.618942][ T3311] bridge_slave_0: entered allmulticast mode [ 26.625333][ T3311] bridge_slave_0: entered promiscuous mode [ 26.631899][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 26.646036][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.653429][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.660624][ T3310] bridge_slave_0: entered allmulticast mode [ 26.666873][ T3310] bridge_slave_0: entered promiscuous mode [ 26.676863][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.684034][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.691307][ T3311] bridge_slave_1: entered allmulticast mode [ 26.697655][ T3311] bridge_slave_1: entered promiscuous mode [ 26.710085][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.717056][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.743089][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.754056][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.761184][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.768320][ T3310] bridge_slave_1: entered allmulticast mode [ 26.774629][ T3310] bridge_slave_1: entered promiscuous mode [ 26.795673][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.802744][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.828816][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.857365][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.870351][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.883137][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.897116][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 26.906810][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.952049][ T3310] team0: Port device team_slave_0 added [ 26.957693][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.964978][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.972113][ T3316] bridge_slave_0: entered allmulticast mode [ 26.978779][ T3316] bridge_slave_0: entered promiscuous mode [ 26.991616][ T3313] hsr_slave_0: entered promiscuous mode [ 26.997709][ T3313] hsr_slave_1: entered promiscuous mode [ 27.004544][ T3311] team0: Port device team_slave_0 added [ 27.011295][ T3310] team0: Port device team_slave_1 added [ 27.017028][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.024199][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.031379][ T3316] bridge_slave_1: entered allmulticast mode [ 27.037748][ T3316] bridge_slave_1: entered promiscuous mode [ 27.049222][ T3311] team0: Port device team_slave_1 added [ 27.064204][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.071257][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.097284][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.120835][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.127807][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.154320][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.174688][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.198084][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.211531][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.218725][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.244768][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.269623][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.276628][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.302706][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.320457][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.327591][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.334816][ T3319] bridge_slave_0: entered allmulticast mode [ 27.341231][ T3319] bridge_slave_0: entered promiscuous mode [ 27.364176][ T3316] team0: Port device team_slave_0 added [ 27.370690][ T3316] team0: Port device team_slave_1 added [ 27.390596][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.397693][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.405023][ T3319] bridge_slave_1: entered allmulticast mode [ 27.411527][ T3319] bridge_slave_1: entered promiscuous mode [ 27.433502][ T3310] hsr_slave_0: entered promiscuous mode [ 27.439609][ T3310] hsr_slave_1: entered promiscuous mode [ 27.445414][ T3310] debugfs: 'hsr0' already exists in 'hsr' [ 27.451168][ T3310] Cannot create hsr debugfs directory [ 27.473186][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.483538][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.503787][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.510850][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.537016][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.549624][ T3311] hsr_slave_0: entered promiscuous mode [ 27.555712][ T3311] hsr_slave_1: entered promiscuous mode [ 27.561617][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 27.567331][ T3311] Cannot create hsr debugfs directory [ 27.577327][ T3319] team0: Port device team_slave_0 added [ 27.583692][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.590682][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.616596][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.633106][ T3319] team0: Port device team_slave_1 added [ 27.656858][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.664032][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.690061][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.710524][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.717732][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.743819][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.767346][ T3316] hsr_slave_0: entered promiscuous mode [ 27.773666][ T3316] hsr_slave_1: entered promiscuous mode [ 27.779727][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 27.785454][ T3316] Cannot create hsr debugfs directory [ 27.853922][ T3319] hsr_slave_0: entered promiscuous mode [ 27.859975][ T3319] hsr_slave_1: entered promiscuous mode [ 27.865798][ T3319] debugfs: 'hsr0' already exists in 'hsr' [ 27.871577][ T3319] Cannot create hsr debugfs directory [ 27.894180][ T3313] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 27.919153][ T3313] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 27.927633][ T3313] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 27.950348][ T3313] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.006714][ T3310] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.027498][ T3310] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.041584][ T3310] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.056158][ T3310] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.065202][ T3311] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.074418][ T3311] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.086884][ T3311] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.099016][ T3311] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.128991][ T3316] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.153954][ T3316] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.165917][ T3316] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.175916][ T3316] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.207660][ T3319] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.222358][ T3319] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.231196][ T3319] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.240370][ T3319] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.255235][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.278470][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.286721][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.309290][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.316487][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.333852][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.340939][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.353284][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.363810][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.380637][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.387702][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.406347][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.416721][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.423818][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.437790][ T3310] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.448886][ T3310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.474854][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.494246][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.501345][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.510370][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.517545][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.539609][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.560434][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.572620][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.582946][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.597569][ T3311] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.608292][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.622726][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.649649][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.656718][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.665516][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.672588][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.701967][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.709074][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.729922][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.737082][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.756567][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.809259][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.860032][ T3310] veth0_vlan: entered promiscuous mode [ 28.869740][ T3310] veth1_vlan: entered promiscuous mode [ 28.901728][ T3310] veth0_macvtap: entered promiscuous mode [ 28.930928][ T3310] veth1_macvtap: entered promiscuous mode [ 28.945463][ T3311] veth0_vlan: entered promiscuous mode [ 28.958698][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.972552][ T3313] veth0_vlan: entered promiscuous mode [ 28.979134][ T3311] veth1_vlan: entered promiscuous mode [ 28.986985][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.999589][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.009417][ T3313] veth1_vlan: entered promiscuous mode [ 29.019288][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.034877][ T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.049579][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.063605][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.081694][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.104222][ T3313] veth0_macvtap: entered promiscuous mode [ 29.121200][ T3311] veth0_macvtap: entered promiscuous mode [ 29.129254][ T3313] veth1_macvtap: entered promiscuous mode [ 29.154379][ T3311] veth1_macvtap: entered promiscuous mode [ 29.175278][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.201617][ T3310] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.219002][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.246519][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.269520][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.282637][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.299690][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.309455][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.327082][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.336610][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.353727][ T3319] veth0_vlan: entered promiscuous mode [ 29.362556][ T3319] veth1_vlan: entered promiscuous mode [ 29.368701][ T3481] loop3: detected capacity change from 0 to 512 [ 29.379635][ T30] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.386781][ T3481] EXT4-fs (loop3): 1 truncate cleaned up [ 29.392273][ T30] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.415568][ T3316] veth0_vlan: entered promiscuous mode [ 29.423321][ T3481] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.440923][ T30] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.443144][ T3481] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.6: bg 0: block 465: padding at end of block bitmap is not set [ 29.464416][ T3481] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 29.476832][ T3481] EXT4-fs (loop3): This should not happen!! Data will be lost [ 29.476832][ T3481] [ 29.487408][ T3481] EXT4-fs (loop3): Total free blocks count 0 [ 29.489802][ T3316] veth1_vlan: entered promiscuous mode [ 29.493524][ T3481] EXT4-fs (loop3): Free/Dirty block details [ 29.515293][ T3319] veth0_macvtap: entered promiscuous mode [ 29.521646][ T3481] EXT4-fs (loop3): free_blocks=0 [ 29.526913][ T3481] EXT4-fs (loop3): dirty_blocks=2 [ 29.533037][ T3481] EXT4-fs (loop3): Block reservation details [ 29.542201][ T3481] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 29.547390][ T3316] veth0_macvtap: entered promiscuous mode [ 29.559985][ T3319] veth1_macvtap: entered promiscuous mode [ 29.582790][ T3316] veth1_macvtap: entered promiscuous mode [ 29.596347][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.623153][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.629322][ T3481] syz.3.6 (3481) used greatest stack depth: 9600 bytes left [ 29.634949][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.650684][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.660234][ T39] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.670217][ T3310] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 29.687574][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.700069][ T39] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.710546][ T39] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.740410][ T39] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.761920][ T39] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.783833][ T39] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.793073][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 29.793089][ T28] audit: type=1400 audit(1775066173.776:123): avc: denied { map } for pid=3496 comm="syz.3.8" path="socket:[4667]" dev="sockfs" ino=4667 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.825098][ T39] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.843075][ T28] audit: type=1400 audit(1775066173.776:124): avc: denied { read } for pid=3496 comm="syz.3.8" path="socket:[4667]" dev="sockfs" ino=4667 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.866562][ T28] audit: type=1400 audit(1775066173.776:125): avc: denied { mounton } for pid=3319 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 29.900449][ T28] audit: type=1400 audit(1775066173.876:126): avc: denied { map_create } for pid=3499 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 29.908626][ T39] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.939379][ T28] audit: type=1400 audit(1775066173.876:127): avc: denied { map_read map_write } for pid=3499 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 30.079919][ T28] audit: type=1400 audit(1775066174.066:128): avc: denied { create } for pid=3510 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 30.118174][ T3513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 30.157365][ T3513] netlink: 'syz.0.1': attribute type 18 has an invalid length. [ 30.171036][ T28] audit: type=1400 audit(1775066174.086:129): avc: denied { connect } for pid=3510 comm="syz.1.13" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 30.190222][ T3513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 30.245490][ T28] audit: type=1400 audit(1775066174.086:130): avc: denied { write } for pid=3510 comm="syz.1.13" laddr=::1 lport=4 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 30.271404][ T28] audit: type=1400 audit(1775066174.196:131): avc: denied { setopt } for pid=3510 comm="syz.1.13" laddr=::1 lport=4 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 30.327922][ C0] hrtimer: interrupt took 60337 ns [ 30.358277][ T28] audit: type=1400 audit(1775066174.326:132): avc: denied { shutdown } for pid=3524 comm="syz.4.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 30.409819][ T3529] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 30.451845][ T3529] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 30.617311][ T3545] netlink: 24 bytes leftover after parsing attributes in process `syz.3.25'. [ 30.628546][ T3545] netlink: 24 bytes leftover after parsing attributes in process `syz.3.25'. [ 30.714369][ T3553] capability: warning: `syz.0.29' uses deprecated v2 capabilities in a way that may be insecure [ 30.830378][ T3559] loop0: detected capacity change from 0 to 512 [ 30.856877][ T3559] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 30.875549][ T3559] FAT-fs (loop0): Filesystem has been set read-only [ 30.961478][ T3563] loop4: detected capacity change from 0 to 512 [ 30.983122][ T3563] ======================================================= [ 30.983122][ T3563] WARNING: The mand mount option has been deprecated and [ 30.983122][ T3563] and is ignored by this kernel. Remove the mand [ 30.983122][ T3563] option from the mount to silence this warning. [ 30.983122][ T3563] ======================================================= [ 31.056445][ T3505] IPVS: starting estimator thread 0... [ 31.124792][ T3578] loop0: detected capacity change from 0 to 1024 [ 31.148139][ T3571] IPVS: using max 2592 ests per chain, 129600 per kthread [ 31.158899][ T3578] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 31.167108][ T3578] System zones: 0-1, 3-36 [ 31.175480][ T3578] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.42: bad orphan inode 134217728 [ 31.186683][ T3578] loop0: lost filesystem error report for type 5 error -117 [ 31.187173][ T3578] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.211241][ T3578] EXT4-fs (loop0): shut down requested (2) [ 31.218948][ T3578] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 31.232455][ T3578] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 31.245946][ T3578] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 31.266832][ T3582] loop2: detected capacity change from 0 to 512 [ 31.310882][ T3582] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.323643][ T3582] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.989520][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.015180][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.066681][ T3596] loop4: detected capacity change from 0 to 1024 [ 32.105727][ T3596] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.148556][ T69] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.169755][ T3596] EXT4-fs error (device loop4): ext4_empty_dir:3118: inode #11: block 32: comm syz.4.50: bad entry in directory: directory entry overrun - offset=24, inode=255, rec_len=1024, size=1024 fake=0 [ 32.203415][ T69] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.298352][ T69] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.315003][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.359227][ T3622] netlink: 32 bytes leftover after parsing attributes in process `syz.4.56'. [ 32.424265][ T69] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.627128][ T69] bridge_slave_1: left allmulticast mode [ 32.647942][ T69] bridge_slave_1: left promiscuous mode [ 32.653667][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.685731][ T69] bridge_slave_0: left allmulticast mode [ 32.698307][ T69] bridge_slave_0: left promiscuous mode [ 32.708176][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.859341][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 32.872773][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 32.888559][ T69] bond0 (unregistering): Released all slaves [ 32.902133][ T3649] C: renamed from team_slave_0 (while UP) [ 32.910188][ T3649] netlink: 'syz.1.65': attribute type 2 has an invalid length. [ 32.917774][ T3649] netlink: 112 bytes leftover after parsing attributes in process `syz.1.65'. [ 32.927231][ T3649] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 32.946864][ T3611] chnl_net:caif_netlink_parms(): no params data found [ 33.017990][ T69] hsr_slave_0: left promiscuous mode [ 33.026299][ T69] hsr_slave_1: left promiscuous mode [ 33.032400][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 33.040101][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 33.051934][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 33.061653][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 33.072367][ T69] veth1_macvtap: left promiscuous mode [ 33.078336][ T69] veth0_macvtap: left promiscuous mode [ 33.084000][ T69] veth1_vlan: left promiscuous mode [ 33.089366][ T69] veth0_vlan: left promiscuous mode [ 33.163528][ T69] team0 (unregistering): Port device team_slave_1 removed [ 33.173077][ T69] team0 (unregistering): Port device team_slave_0 removed [ 33.218602][ T3611] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.225873][ T3611] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.233323][ T3611] bridge_slave_0: entered allmulticast mode [ 33.259387][ T3611] bridge_slave_0: entered promiscuous mode [ 33.284181][ T3611] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.298554][ T3611] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.318089][ T3611] bridge_slave_1: entered allmulticast mode [ 33.341031][ T3611] bridge_slave_1: entered promiscuous mode [ 33.349786][ T3703] loop1: detected capacity change from 0 to 512 [ 33.360729][ T3703] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 33.370563][ T3611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.382401][ T3611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.382700][ T3703] EXT4-fs (loop1): 1 truncate cleaned up [ 33.401981][ T3703] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.424747][ T3611] team0: Port device team_slave_0 added [ 33.459554][ T3611] team0: Port device team_slave_1 added [ 33.511700][ T3611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.524194][ T3611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.550973][ T3611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.562890][ T3611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.569908][ T3611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.605524][ T3611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.671240][ T3611] hsr_slave_0: entered promiscuous mode [ 33.683209][ T3611] hsr_slave_1: entered promiscuous mode [ 33.691615][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.709148][ T3611] debugfs: 'hsr0' already exists in 'hsr' [ 33.715008][ T3611] Cannot create hsr debugfs directory [ 33.763285][ T30] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.803205][ T30] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.901012][ T30] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.912703][ T3739] loop4: detected capacity change from 0 to 2048 [ 33.935546][ T3739] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.017135][ T30] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.029169][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.176162][ T3770] loop4: detected capacity change from 0 to 512 [ 34.195563][ T30] bridge_slave_1: left allmulticast mode [ 34.205857][ T30] bridge_slave_1: left promiscuous mode [ 34.212349][ T3770] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 34.213177][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.230587][ T3770] EXT4-fs (loop4): 1 truncate cleaned up [ 34.236776][ T30] bridge_slave_0: left allmulticast mode [ 34.237335][ T3770] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.255153][ T30] bridge_slave_0: left promiscuous mode [ 34.255297][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.281191][ T3770] EXT4-fs (loop4): shut down requested (2) [ 34.287423][ T3770] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 34.297006][ T3770] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 34.314257][ T3770] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 34.353231][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.473229][ T3792] netlink: 24 bytes leftover after parsing attributes in process `syz.4.97'. [ 34.490639][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 34.515522][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 34.526459][ T30] bond0 (unregistering): Released all slaves [ 34.593027][ T30] hsr_slave_0: left promiscuous mode [ 34.601119][ T30] hsr_slave_1: left promiscuous mode [ 34.609296][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 34.617018][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 34.633933][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 34.641894][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 34.660589][ T30] veth1_macvtap: left promiscuous mode [ 34.666112][ T30] veth0_macvtap: left promiscuous mode [ 34.672720][ T30] veth1_vlan: left promiscuous mode [ 34.678120][ T30] veth0_vlan: left promiscuous mode [ 34.753576][ T30] team0 (unregistering): Port device team_slave_1 removed [ 34.762860][ T30] team0 (unregistering): Port device team_slave_0 removed [ 34.795623][ T3611] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 34.813754][ T3611] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 34.845737][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 34.845785][ T28] audit: type=1400 audit(1775066178.826:183): avc: denied { bind } for pid=3803 comm="syz.1.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 34.871711][ T3611] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 34.879007][ T28] audit: type=1400 audit(1775066178.866:184): avc: denied { name_bind } for pid=3803 comm="syz.1.101" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 34.903561][ T3611] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 34.908326][ T28] audit: type=1400 audit(1775066178.866:185): avc: denied { node_bind } for pid=3803 comm="syz.1.101" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 34.951989][ T3740] chnl_net:caif_netlink_parms(): no params data found [ 35.029182][ T3740] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.038159][ T3740] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.045497][ T3740] bridge_slave_0: entered allmulticast mode [ 35.052811][ T3740] bridge_slave_0: entered promiscuous mode [ 35.060171][ T3740] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.067359][ T3740] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.074941][ T3740] bridge_slave_1: entered allmulticast mode [ 35.081703][ T3740] bridge_slave_1: entered promiscuous mode [ 35.111875][ T3834] loop4: detected capacity change from 0 to 512 [ 35.123958][ T3611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.133514][ T3740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.153617][ T3834] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 35.164417][ T3834] FAT-fs (loop4): Filesystem has been set read-only [ 35.165644][ T3740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.181575][ T3834] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 35.195969][ T28] audit: type=1400 audit(1775066179.176:186): avc: denied { read } for pid=3832 comm="syz.4.104" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 35.224789][ T28] audit: type=1400 audit(1775066179.176:187): avc: denied { open } for pid=3832 comm="syz.4.104" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 35.250732][ T28] audit: type=1400 audit(1775066179.176:188): avc: denied { ioctl } for pid=3832 comm="syz.4.104" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 35.283208][ T3740] team0: Port device team_slave_0 added [ 35.303736][ T3611] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.312434][ T3740] team0: Port device team_slave_1 added [ 35.341325][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.348425][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.360070][ T3740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.367571][ T3740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.394246][ T3740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.405642][ T3843] netlink: 'syz.4.106': attribute type 14 has an invalid length. [ 35.439595][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.446718][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.474820][ T28] audit: type=1400 audit(1775066179.446:189): avc: denied { create } for pid=3851 comm="syz.4.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 35.507993][ T28] audit: type=1400 audit(1775066179.446:190): avc: denied { setopt } for pid=3851 comm="syz.4.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 35.509312][ T3740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.540842][ T28] audit: type=1400 audit(1775066179.526:191): avc: denied { write } for pid=3851 comm="syz.4.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 35.560134][ T3740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.586694][ T3740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.640224][ T3740] hsr_slave_0: entered promiscuous mode [ 35.646284][ T3740] hsr_slave_1: entered promiscuous mode [ 35.663867][ T3740] debugfs: 'hsr0' already exists in 'hsr' [ 35.670376][ T3740] Cannot create hsr debugfs directory [ 35.860943][ T28] audit: type=1400 audit(1775066179.846:192): avc: denied { write } for pid=3890 comm="syz.1.114" name="mISDNtimer" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.883340][ T3611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.017114][ T3909] random: crng reseeded on system resumption [ 36.043887][ T3909] Restarting kernel threads ... [ 36.064201][ T3909] Done restarting kernel threads. [ 36.095314][ T3611] veth0_vlan: entered promiscuous mode [ 36.106841][ T3740] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.121727][ T3611] veth1_vlan: entered promiscuous mode [ 36.132448][ T3740] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.149628][ T3740] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.174659][ T3611] veth0_macvtap: entered promiscuous mode [ 36.194235][ T3740] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.220296][ T3611] veth1_macvtap: entered promiscuous mode [ 36.234645][ T3611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.250525][ T3938] loop2: detected capacity change from 0 to 1024 [ 36.261844][ T3938] EXT4-fs: inline encryption not supported [ 36.276816][ T3611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.309639][ T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.321868][ T3938] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 36.356538][ T3938] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.376783][ T50] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.393442][ T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.415433][ T3740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.435329][ T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.441421][ T3938] EXT4-fs error (device loop2): ext4_free_blocks:6724: comm syz.2.123: Freeing blocks not in datazone - block = 0, count = 16 [ 36.447748][ T3740] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.468788][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.475943][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.487774][ T3963] sock: sock_set_timeout: `syz.4.126' (pid 3963) tries to set negative timeout [ 36.505760][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.521977][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.541288][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 36.591062][ T3974] capability: warning: `syz.2.127' uses 32-bit capabilities (legacy support in use) [ 36.602955][ T3974] program syz.2.127 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 36.621633][ T3740] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.706467][ T3989] loop2: detected capacity change from 0 to 512 [ 36.721099][ T3989] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.735183][ T3740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.743567][ T3989] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 36.777236][ T3989] EXT4-fs (loop2): 1 truncate cleaned up [ 36.788561][ T3989] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.837733][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.878561][ T4007] loop4: detected capacity change from 0 to 1024 [ 36.914781][ T4007] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.955373][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.179566][ T3740] veth0_vlan: entered promiscuous mode [ 37.214130][ T3740] veth1_vlan: entered promiscuous mode [ 37.282648][ T3740] veth0_macvtap: entered promiscuous mode [ 37.313041][ T3740] veth1_macvtap: entered promiscuous mode [ 37.350578][ T3740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.394430][ T3740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.464342][ T69] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.487574][ T4040] loop3: detected capacity change from 0 to 512 [ 37.495172][ T69] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.518711][ T4040] EXT4-fs: Ignoring removed nobh option [ 37.554391][ T4040] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 37.572878][ T69] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.604129][ T4040] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 37.617829][ T69] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.661964][ T4046] loop1: detected capacity change from 0 to 512 [ 37.690086][ T4040] EXT4-fs (loop3): 1 truncate cleaned up [ 37.709507][ T4046] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.146: invalid indirect mapped block 256 (level 2) [ 37.726139][ T4040] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.761913][ T4046] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 37.764359][ T4046] EXT4-fs (loop1): 2 truncates cleaned up [ 37.773703][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 37.773742][ C0] EXT4-fs (loop1): initial error at time 1775066181: ext4_free_branches:1023: inode 11 [ 37.773773][ C0] EXT4-fs (loop1): last error at time 1775066181: ext4_free_branches:1023: inode 11 [ 37.810388][ T4046] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.867440][ T3611] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.426582][ T50] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm kworker/u8:3: bg 0: block 5: invalid block bitmap [ 38.441175][ T50] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 38.454017][ T50] EXT4-fs (loop1): This should not happen!! Data will be lost [ 38.454017][ T50] [ 38.464122][ T50] EXT4-fs (loop1): Total free blocks count 0 [ 38.470270][ T50] EXT4-fs (loop1): Free/Dirty block details [ 38.476390][ T50] EXT4-fs (loop1): free_blocks=0 [ 38.496501][ T50] EXT4-fs (loop1): dirty_blocks=16008 [ 38.508928][ T50] EXT4-fs (loop1): Block reservation details [ 38.521622][ T50] EXT4-fs (loop1): i_reserved_data_blocks=16008 [ 38.812073][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 38.865778][ T3311] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 39.041792][ T4113] loop4: detected capacity change from 0 to 2048 [ 39.091310][ T4113] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.329487][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.385677][ T4133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.179'. [ 39.411767][ T4133] ip6gre1: entered promiscuous mode [ 39.417465][ T4133] ip6gre1: entered allmulticast mode [ 39.426827][ T39] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 39.438003][ T39] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 39.448311][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 39.490490][ T4143] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.493069][ T4141] loop4: detected capacity change from 0 to 1024 [ 39.519246][ T3505] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 39.538233][ T4141] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.674673][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.694583][ T4152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.189'. [ 39.724209][ T4152] batman_adv: batadv0: Adding interface: ipvlan2 [ 39.741296][ T4152] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.778368][ T4152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.789304][ T4152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.801198][ T4152] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 39.861598][ T4160] tun0: tun_chr_ioctl cmd 1074812117 [ 39.893502][ T4162] loop4: detected capacity change from 0 to 512 [ 39.901929][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 39.901943][ T28] audit: type=1400 audit(1775066183.896:234): avc: denied { create } for pid=4163 comm="syz.0.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 39.929394][ T4162] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.193: bad orphan inode 15 [ 39.950682][ T4164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.194'. [ 39.953170][ T4162] loop4: lost filesystem error report for type 5 error -117 [ 39.966779][ T4162] ext4_test_bit(bit=14, block=5) = 0 [ 39.970093][ T28] audit: type=1400 audit(1775066183.936:235): avc: denied { write } for pid=4163 comm="syz.0.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 39.974238][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 39.974256][ C0] EXT4-fs (loop4): initial error at time 1775066183: ext4_orphan_get:1423 [ 40.014782][ C0] EXT4-fs (loop4): last error at time 1775066183: ext4_orphan_get:1423 [ 40.018951][ T28] audit: type=1400 audit(1775066183.936:236): avc: denied { nlmsg_write } for pid=4163 comm="syz.0.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 40.037279][ T4162] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.116822][ T4162] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 40.141148][ T28] audit: type=1400 audit(1775066184.096:237): avc: denied { unlink } for pid=4161 comm="syz.4.193" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 40.158041][ T4162] EXT4-fs error (device loop4): ext4_free_inode:354: comm syz.4.193: bit already cleared for inode 13 [ 40.164562][ T4176] EXT4-fs error (device loop4): __ext4_new_inode:1079: comm syz.4.193: reserved inode found cleared - inode=1 [ 40.186602][ T28] audit: type=1400 audit(1775066184.126:238): avc: denied { read write } for pid=4173 comm="syz.3.198" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 40.211328][ T28] audit: type=1400 audit(1775066184.126:239): avc: denied { open } for pid=4173 comm="syz.3.198" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 40.260773][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.273852][ T28] audit: type=1400 audit(1775066184.256:240): avc: denied { read } for pid=4179 comm="syz.2.200" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 40.314373][ T28] audit: type=1400 audit(1775066184.296:241): avc: denied { watch watch_reads } for pid=4181 comm="syz.2.201" path="/41" dev="tmpfs" ino=222 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 40.390024][ T4188] loop1: detected capacity change from 0 to 128 [ 40.398221][ T3505] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 40.408225][ T4192] netlink: 32 bytes leftover after parsing attributes in process `syz.4.205'. [ 40.441560][ T4194] loop1: detected capacity change from 0 to 512 [ 40.459986][ T4194] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.484358][ T4194] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 40.518440][ T4198] GUP no longer grows the stack in syz.4.207 (4198): 200000009000-20000000a000 (200000005000) [ 40.529376][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.538441][ T4198] CPU: 1 UID: 0 PID: 4198 Comm: syz.4.207 Not tainted syzkaller #0 PREEMPT(full) [ 40.538588][ T4198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 40.538600][ T4198] Call Trace: [ 40.538607][ T4198] [ 40.538615][ T4198] __dump_stack+0x1d/0x30 [ 40.538646][ T4198] dump_stack_lvl+0x95/0xd0 [ 40.538672][ T4198] dump_stack+0x15/0x1b [ 40.538774][ T4198] __get_user_pages+0x195b/0x1ea0 [ 40.538891][ T4198] ? __mt_destroy+0xce/0xe0 [ 40.538919][ T4198] __gup_longterm_locked+0x8d7/0xe30 [ 40.538938][ T4198] ? __rcu_read_unlock+0x33/0x70 [ 40.538967][ T4198] ? try_get_folio+0x369/0x3b0 [ 40.539030][ T4198] ? try_grab_folio_fast+0xdc/0x370 [ 40.539053][ T4198] gup_fast_fallback+0x1f3/0x13c0 [ 40.539126][ T4198] get_user_pages_fast+0x5f/0x90 [ 40.539165][ T4198] __iov_iter_get_pages_alloc+0x24e/0x6f0 [ 40.539211][ T4198] iov_iter_get_pages2+0x5e/0xa0 [ 40.539294][ T4198] __se_sys_vmsplice+0x541/0xfd0 [ 40.539330][ T4198] __x64_sys_vmsplice+0x55/0x70 [ 40.539420][ T4198] x64_sys_call+0x28e9/0x3020 [ 40.539492][ T4198] do_syscall_64+0x12c/0x370 [ 40.539517][ T4198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.539551][ T4198] RIP: 0033:0x7fb5bf7ec819 [ 40.539567][ T4198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.539592][ T4198] RSP: 002b:00007fb5be247028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 40.539616][ T4198] RAX: ffffffffffffffda RBX: 00007fb5bfa65fa0 RCX: 00007fb5bf7ec819 [ 40.539638][ T4198] RDX: 0000000000000002 RSI: 0000200000000280 RDI: 0000000000000004 [ 40.539650][ T4198] RBP: 00007fb5bf882c91 R08: 0000000000000000 R09: 0000000000000000 [ 40.539662][ T4198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 40.539698][ T4198] R13: 00007fb5bfa66038 R14: 00007fb5bfa65fa0 R15: 00007ffd1eede2f8 [ 40.539719][ T4198] [ 40.795947][ T28] audit: type=1400 audit(1775066184.776:242): avc: denied { name_bind } for pid=4200 comm="syz.1.208" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 40.844597][ T28] audit: type=1400 audit(1775066184.776:243): avc: denied { node_bind } for pid=4200 comm="syz.1.208" saddr=224.0.0.2 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 40.896772][ T4207] loop4: detected capacity change from 0 to 512 [ 40.950837][ T4207] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 40.970778][ T4207] EXT4-fs (loop4): orphan cleanup on readonly fs [ 40.990941][ T4207] EXT4-fs error (device loop4): ext4_do_update_inode:5602: inode #16: comm syz.4.212: corrupted inode contents [ 41.015904][ T4207] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 41.016121][ T4207] EXT4-fs (loop4): Remounting filesystem read-only [ 41.025392][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 41.025415][ C1] EXT4-fs (loop4): initial error at time 1775066184: ext4_do_update_inode:5602: inode 16 [ 41.025441][ C1] EXT4-fs (loop4): last error at time 1775066184: ext4_do_update_inode:5602: inode 16 [ 41.060804][ T4207] EXT4-fs (loop4): 1 truncate cleaned up [ 41.083832][ T50] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 41.096995][ T50] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 41.108127][ T50] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 41.118996][ T4207] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.180197][ T4226] loop0: detected capacity change from 0 to 256 [ 41.191106][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.203691][ T4226] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 41.245457][ T4228] program syz.2.221 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 41.277799][ T4230] netlink: 4 bytes leftover after parsing attributes in process `syz.4.220'. [ 41.562833][ T4245] loop2: detected capacity change from 0 to 128 [ 41.599462][ T4254] loop3: detected capacity change from 0 to 512 [ 41.624349][ T4245] msdos: Bad value for 'gid' [ 41.642381][ T4254] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 41.652003][ T4245] msdos: Bad value for 'gid' [ 41.804737][ T4254] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 41.827890][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 41.834378][ C0] EXT4-fs (loop3): initial error at time 1775066185: ext4_mb_generate_buddy:1317 [ 41.840435][ T4254] EXT4-fs error (device loop3): ext4_acquire_dquot:7026: comm syz.3.230: Failed to acquire dquot type 1 [ 41.843547][ C0] EXT4-fs (loop3): last error at time 1775066185: ext4_mb_generate_buddy:1317 [ 41.875665][ T4264] loop2: detected capacity change from 0 to 512 [ 41.888526][ T4254] loop3: lost filesystem error report for type 5 error -28 [ 41.908006][ T4254] EXT4-fs (loop3): 1 truncate cleaned up [ 41.968384][ T4254] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.029328][ T4254] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 42.093532][ T4254] syz.3.230 (4254) used greatest stack depth: 9536 bytes left [ 42.108987][ T3611] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.216080][ T4273] syz.2.235: attempt to access beyond end of device [ 42.216080][ T4273] loop2: rw=0, sector=432, nr_sectors = 128 limit=512 [ 42.257745][ T4289] netlink: 16 bytes leftover after parsing attributes in process `syz.0.246'. [ 42.306463][ T4293] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.382836][ T12] kworker/u8:0: attempt to access beyond end of device [ 42.382836][ T12] loop2: rw=1, sector=560, nr_sectors = 2576 limit=512 [ 42.405487][ T4297] loop0: detected capacity change from 0 to 1024 [ 42.415262][ T12] kworker/u8:0: attempt to access beyond end of device [ 42.415262][ T12] loop2: rw=1, sector=3136, nr_sectors = 2080 limit=512 [ 42.477378][ T12] kworker/u8:0: attempt to access beyond end of device [ 42.477378][ T12] loop2: rw=1, sector=5216, nr_sectors = 2048 limit=512 [ 42.497115][ T4297] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.512620][ T12] kworker/u8:0: attempt to access beyond end of device [ 42.512620][ T12] loop2: rw=1, sector=7264, nr_sectors = 2064 limit=512 [ 42.541288][ T12] kworker/u8:0: attempt to access beyond end of device [ 42.541288][ T12] loop2: rw=1, sector=9328, nr_sectors = 3600 limit=512 [ 42.555813][ T3740] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.562471][ T12] kworker/u8:0: attempt to access beyond end of device [ 42.562471][ T12] loop2: rw=1, sector=12928, nr_sectors = 3536 limit=512 [ 42.622088][ T4313] netlink: 16 bytes leftover after parsing attributes in process `syz.4.258'. [ 42.679084][ T4317] loop2: detected capacity change from 0 to 1024 [ 42.689707][ T4319] mmap: syz.0.261 (4319) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 42.690005][ T4317] EXT4-fs: Ignoring removed bh option [ 42.732660][ T4317] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 42.833106][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 42.975880][ T4346] SELinux: failed to load policy [ 43.035955][ T4354] loop2: detected capacity change from 0 to 764 [ 43.050493][ T4354] rock: directory entry would overflow storage [ 43.086461][ T4354] rock: sig=0x5245, size=8, remaining=5 [ 43.127938][ T4359] SELinux: failed to load policy [ 43.287456][ T4382] netlink: 'syz.4.290': attribute type 83 has an invalid length. [ 43.300183][ T4384] netlink: 28 bytes leftover after parsing attributes in process `syz.2.289'. [ 43.470830][ T4401] ip6tnl1: entered allmulticast mode [ 43.496213][ T50] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 43.514993][ T50] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 43.522641][ T23] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 43.527985][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 43.648092][ T23] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 43.749712][ T4413] syz.0.304 (4413) used greatest stack depth: 8904 bytes left [ 43.809020][ T4424] program syz.4.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 43.859166][ T4429] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.872259][ T4429] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.886604][ T4429] netlink: 56 bytes leftover after parsing attributes in process `syz.4.309'. [ 43.896436][ T4429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.309'. [ 43.916589][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.230412][ T4469] pimreg: tun_chr_ioctl cmd 2148553947 [ 44.335690][ T4481] Driver unsupported XDP return value 0 on prog (id 39) dev N/A, expect packet loss! [ 44.427277][ T4490] UHID_CREATE from different security context by process 159 (syz.1.337), this is not allowed. [ 44.569014][ T4501] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 44.582227][ T4501] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 44.591715][ T4501] EXT4-fs (loop2): 1 truncate cleaned up [ 44.597739][ T4501] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.211111][ T28] kauditd_printk_skb: 124 callbacks suppressed [ 45.211129][ T28] audit: type=1400 audit(1775066189.196:358): avc: denied { watch watch_reads } for pid=4503 comm="syz.0.343" path="/51" dev="tmpfs" ino=276 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 45.289307][ T4506] option changes via remount are deprecated (pid=4505 comm=syz.0.344) [ 45.297639][ T28] audit: type=1400 audit(1775066189.276:359): avc: denied { remount } for pid=4505 comm="syz.0.344" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 45.336118][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.336970][ T28] audit: type=1400 audit(1775066189.316:360): avc: denied { unmount } for pid=3740 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 45.389184][ T4518] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.405614][ T4518] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.467287][ T28] audit: type=1400 audit(1775066189.446:361): avc: denied { bind } for pid=4523 comm="syz.2.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 45.508509][ T3740] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.543523][ T28] audit: type=1400 audit(1775066189.446:362): avc: denied { write } for pid=4523 comm="syz.2.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 45.602683][ T28] audit: type=1400 audit(1775066189.566:363): avc: denied { ioctl } for pid=4532 comm="syz.2.356" path="socket:[7927]" dev="sockfs" ino=7927 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 45.683936][ T28] audit: type=1400 audit(1775066189.626:364): avc: denied { create } for pid=4534 comm="syz.2.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 45.737893][ T28] audit: type=1326 audit(1775066189.636:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4534 comm="syz.2.359" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ed77cc819 code=0x0 [ 45.787898][ T28] audit: type=1400 audit(1775066189.666:366): avc: denied { create } for pid=4540 comm="syz.0.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 45.835703][ T28] audit: type=1400 audit(1775066189.676:367): avc: denied { sys_admin } for pid=4540 comm="syz.0.354" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 46.021595][ T4558] set_capacity_and_notify: 5 callbacks suppressed [ 46.021614][ T4558] loop3: detected capacity change from 0 to 2048 [ 46.049689][ T4558] EXT4-fs: Ignoring removed oldalloc option [ 46.081959][ T4558] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 46.095832][ T4558] System zones: 0-7 [ 46.104046][ T4558] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.120334][ T4558] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.367: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 46.140435][ T4558] EXT4-fs (loop3): Remounting filesystem read-only [ 46.161950][ T3611] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.262862][ T4572] loop3: detected capacity change from 0 to 512 [ 46.282566][ T4572] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.336791][ T3611] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.470657][ T4587] Zero length message leads to an empty skb [ 46.566246][ T4593] __nla_validate_parse: 1 callbacks suppressed [ 46.566330][ T4593] netlink: 830 bytes leftover after parsing attributes in process `syz.2.381'. [ 47.219818][ T4607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.387'. [ 47.288847][ T4619] loop2: detected capacity change from 0 to 256 [ 47.336252][ T4619] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 47.361338][ T4625] sctp: [Deprecated]: syz.1.396 (pid 4625) Use of int in max_burst socket option. [ 47.361338][ T4625] Use struct sctp_assoc_value instead [ 47.376591][ T4619] FAT-fs (loop2): Filesystem has been set read-only [ 47.383745][ T4619] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 47.420219][ T4619] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 47.591405][ T4641] netlink: 212 bytes leftover after parsing attributes in process `syz.1.402'. [ 47.682109][ T4621] loop4: detected capacity change from 0 to 32768 [ 47.758100][ C1] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 47.758118][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 47.977690][ T4678] netlink: 'syz.0.419': attribute type 16 has an invalid length. [ 48.046122][ T4680] loop2: detected capacity change from 0 to 4096 [ 48.096613][ T4680] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.140747][ T4691] netlink: 56 bytes leftover after parsing attributes in process `syz.0.426'. [ 48.160054][ T4680] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 48.178032][ T4680] EXT4-fs (loop2): can't disable delalloc during remount [ 48.212328][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.380719][ T4722] netlink: 'syz.4.440': attribute type 14 has an invalid length. [ 48.409897][ T4725] loop1: detected capacity change from 0 to 128 [ 48.423307][ T4726] loop2: detected capacity change from 0 to 512 [ 48.492076][ T4730] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 48.499771][ T4734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.447'. [ 48.500590][ T4730] vhci_hcd vhci_hcd.2: invalid port number 96 [ 48.535241][ T4739] ªªªªªª: renamed from vlan0 (while UP) [ 48.537303][ T4730] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 48.573244][ T4734] n: the hash_elasticity option has been deprecated and is always 16 [ 48.588017][ T4734] n: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 48.598173][ T4743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.447'. [ 48.609403][ T4743] n: the hash_elasticity option has been deprecated and is always 16 [ 48.618054][ T4743] n: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 48.642770][ T50] Bluetooth: hci0: Frame reassembly failed (-84) [ 48.652499][ T4745] loop2: detected capacity change from 0 to 2048 [ 48.680685][ T4745] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.708048][ T4745] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.732099][ T4745] EXT4-fs: Ignoring removed i_version option [ 48.738227][ T4745] EXT4-fs (loop2): stripe (253) is not aligned with cluster size (16), stripe is disabled [ 48.748857][ T4745] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 48.790261][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.855868][ T4769] netlink: 212 bytes leftover after parsing attributes in process `syz.0.462'. [ 48.907620][ T4775] netlink: 28 bytes leftover after parsing attributes in process `syz.1.464'. [ 48.917024][ T4775] netlink: 28 bytes leftover after parsing attributes in process `syz.1.464'. [ 48.987349][ T4781] loop1: detected capacity change from 0 to 1024 [ 49.019367][ T4781] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.085016][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.190950][ T4797] loop2: detected capacity change from 0 to 256 [ 49.208326][ T4797] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 49.502824][ T4817] netlink: 28 bytes leftover after parsing attributes in process `syz.3.482'. [ 49.625901][ T4826] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 49.638196][ T4826] syzkaller0: linktype set to 825 [ 49.651263][ T4829] veth0_vlan: entered allmulticast mode [ 49.699681][ T4829] veth0_vlan: left promiscuous mode [ 49.718757][ T4829] veth0_vlan: entered promiscuous mode [ 49.769274][ T4836] syz.1.491 uses obsolete (PF_INET,SOCK_PACKET) [ 50.231552][ T4864] netlink: 'syz.1.502': attribute type 10 has an invalid length. [ 50.248043][ T4864] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.255367][ T4864] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.278054][ T4864] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.285170][ T4864] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.292667][ T4864] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.299804][ T4864] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.309628][ T4864] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 50.325309][ T4867] bridge_slave_1: left allmulticast mode [ 50.331066][ T4867] bridge_slave_1: left promiscuous mode [ 50.336771][ T4867] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.381367][ T4867] bridge_slave_0: left allmulticast mode [ 50.387519][ T4867] bridge_slave_0: left promiscuous mode [ 50.393359][ T4867] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.414222][ T4867] bond0: (slave bridge0): Releasing backup interface [ 50.474406][ T28] kauditd_printk_skb: 68 callbacks suppressed [ 50.474426][ T28] audit: type=1400 audit(1775066194.456:436): avc: denied { bind } for pid=4870 comm="syz.0.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 50.499808][ T28] audit: type=1400 audit(1775066194.456:437): avc: denied { name_bind } for pid=4870 comm="syz.0.504" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 50.499838][ T28] audit: type=1400 audit(1775066194.456:438): avc: denied { node_bind } for pid=4870 comm="syz.0.504" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 50.717986][ T3663] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 50.750688][ T28] audit: type=1400 audit(1775066194.736:439): avc: denied { setopt } for pid=4892 comm="syz.4.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 50.986706][ T4919] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96 [ 51.037749][ T28] audit: type=1400 audit(1775066195.016:440): avc: denied { bind } for pid=4922 comm="syz.0.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 51.125564][ T4935] loop1: detected capacity change from 0 to 512 [ 51.137532][ T4935] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 51.166387][ T4935] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.534: Invalid inode bitmap blk 4 in block_group 0 [ 51.204817][ T4935] loop1: lost filesystem error report for type 5 error -117 [ 51.206407][ T4935] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.297062][ T28] audit: type=1400 audit(1775066195.276:441): avc: denied { create } for pid=4951 comm="syz.0.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.317179][ T28] audit: type=1400 audit(1775066195.286:442): avc: denied { bind } for pid=4951 comm="syz.0.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.337826][ T28] audit: type=1400 audit(1775066195.286:443): avc: denied { setopt } for pid=4951 comm="syz.0.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.339978][ T4954] program syz.0.542 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 51.374932][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.509888][ T28] audit: type=1400 audit(1775066195.496:444): avc: denied { read } for pid=4968 comm="syz.1.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 51.597931][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 51.661744][ T4981] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 51.740077][ T28] audit: type=1400 audit(1775066195.726:445): avc: denied { write } for pid=4984 comm="syz.3.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 52.061952][ T4998] loop2: detected capacity change from 0 to 2048 [ 52.095012][ T4998] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.170969][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.218506][ T5004] netlink: 'syz.2.562': attribute type 7 has an invalid length. [ 52.291590][ T5010] __nla_validate_parse: 7 callbacks suppressed [ 52.291607][ T5010] netlink: 20 bytes leftover after parsing attributes in process `syz.2.565'. [ 52.338226][ T1033] kernel write not supported for file /input/event2 (pid: 1033 comm: kworker/0:2) [ 52.486499][ T5034] netlink: 100 bytes leftover after parsing attributes in process `syz.0.578'. [ 52.486501][ T5033] netlink: 'syz.4.577': attribute type 1 has an invalid length. [ 52.531019][ T5036] netlink: 188 bytes leftover after parsing attributes in process `syz.0.579'. [ 52.557424][ T5036] netlink: 40 bytes leftover after parsing attributes in process `syz.0.579'. [ 52.712944][ T5054] loop2: detected capacity change from 0 to 512 [ 52.748627][ T5056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.588'. [ 52.787681][ T5054] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.858095][ T5054] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.077130][ T5076] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 53.627836][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.969631][ T5115] loop3: detected capacity change from 0 to 512 [ 53.977179][ T5115] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 54.006229][ T5115] EXT4-fs (loop3): 1 truncate cleaned up [ 54.018434][ T5115] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.075739][ T3611] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.273819][ T5142] loop3: detected capacity change from 0 to 512 [ 54.294551][ T5142] EXT4-fs: Ignoring removed nobh option [ 54.323204][ T5142] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 54.329646][ T5152] netlink: 16 bytes leftover after parsing attributes in process `syz.1.631'. [ 54.349161][ T5142] EXT4-fs (loop3): 1 truncate cleaned up [ 54.361026][ T5153] bond2 (unregistering): Released all slaves [ 54.368737][ T5142] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.388758][ T5142] EXT4-fs (loop3): Online defrag not supported for non-extent files [ 54.440661][ T3611] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.487175][ T5169] loop3: detected capacity change from 0 to 512 [ 54.509263][ T5169] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 54.517563][ T5169] EXT4-fs (loop3): orphan cleanup on readonly fs [ 54.526492][ T5169] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.636: bg 0: block 305: padding at end of block bitmap is not set [ 54.540970][ T5169] loop3: lost filesystem error report for type 5 error -117 [ 54.541255][ T5169] EXT4-fs (loop3): Remounting filesystem read-only [ 54.548598][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 54.548617][ C0] EXT4-fs (loop3): initial error at time 1775066198: ext4_validate_block_bitmap:441 [ 54.548642][ C0] EXT4-fs (loop3): last error at time 1775066198: ext4_validate_block_bitmap:441 [ 54.580670][ T5169] EXT4-fs (loop3): 1 truncate cleaned up [ 54.586631][ T83] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 54.597450][ T5179] loop2: detected capacity change from 0 to 512 [ 54.598021][ T83] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 54.614435][ T83] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 54.638035][ T5179] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.650913][ T5179] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.655213][ T5169] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 54.664676][ T5179] EXT4-fs (loop2): shut down requested (1) [ 54.704398][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.758418][ T3611] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.417226][ T5210] loop1: detected capacity change from 0 to 1024 [ 55.425946][ T5209] netlink: 12 bytes leftover after parsing attributes in process `syz.4.656'. [ 55.430197][ T5210] EXT4-fs: Ignoring removed bh option [ 55.456830][ T5210] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 55.516063][ T5210] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.541747][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 55.541765][ T28] audit: type=1400 audit(1775066199.526:472): avc: denied { write } for pid=5220 comm="syz.4.660" path="socket:[10927]" dev="sockfs" ino=10927 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 55.643989][ T28] audit: type=1400 audit(1775066199.606:473): avc: denied { create } for pid=5226 comm="syz.2.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 55.663638][ T5210] EXT4-fs (loop1): shut down requested (2) [ 55.665248][ T28] audit: type=1400 audit(1775066199.606:474): avc: denied { write } for pid=5226 comm="syz.2.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 55.689305][ T28] audit: type=1400 audit(1775066199.616:475): avc: denied { setopt } for pid=5228 comm="syz.0.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 55.691668][ T5210] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 55.794203][ T5210] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 55.863485][ T5210] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 55.888260][ T28] audit: type=1400 audit(1775066199.846:476): avc: denied { read } for pid=5208 comm="syz.1.654" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 55.910963][ T28] audit: type=1400 audit(1775066199.896:477): avc: denied { open } for pid=5208 comm="syz.1.654" path="/127/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 56.015568][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.020861][ T5262] program syz.0.678 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 56.066001][ T28] audit: type=1400 audit(1775066200.046:478): avc: denied { accept } for pid=5259 comm="syz.4.677" lport=50362 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 56.112718][ T28] audit: type=1400 audit(1775066200.076:479): avc: denied { execute } for pid=5264 comm="syz.2.680" path=2F6D656D66643AFD0F6D33232F202864656C6574656429 dev="hugetlbfs" ino=10207 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 56.633661][ T28] audit: type=1400 audit(1775066200.616:480): avc: denied { create } for pid=5301 comm="syz.3.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 56.656704][ T28] audit: type=1400 audit(1775066200.636:481): avc: denied { write } for pid=5301 comm="syz.3.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 56.717949][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 56.919867][ T5317] SELinux: failed to load policy [ 57.433673][ T5364] netlink: 28 bytes leftover after parsing attributes in process `syz.2.723'. [ 57.483387][ T5370] netlink: 28 bytes leftover after parsing attributes in process `syz.2.726'. [ 57.546922][ T5377] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5377 comm=syz.0.729 [ 57.677053][ T5395] loop2: detected capacity change from 0 to 512 [ 57.692568][ T5395] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.723381][ T5395] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.818566][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.859798][ T5406] loop4: detected capacity change from 0 to 128 [ 58.164413][ T5429] netlink: 136 bytes leftover after parsing attributes in process `syz.1.752'. [ 59.069095][ T5495] loop1: detected capacity change from 0 to 1024 [ 59.081077][ T5495] EXT4-fs (loop1): bad geometry: bigalloc file system with non-zero first_data_block [ 59.081077][ T5495] [ 59.107209][ T5496] program syz.4.782 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.508653][ T5501] loop1: detected capacity change from 0 to 512 [ 59.562362][ T5503] loop3: detected capacity change from 0 to 512 [ 59.595471][ T5503] EXT4-fs: Ignoring removed nobh option [ 59.615988][ T5507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.788'. [ 59.696773][ T5503] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.716816][ T5503] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.755565][ T3611] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.892491][ T5535] delete_channel: no stack [ 59.958807][ T5542] loop1: detected capacity change from 0 to 512 [ 59.965439][ T5542] EXT4-fs: Ignoring removed orlov option [ 60.039993][ T5542] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.059522][ T5553] netlink: 'syz.0.808': attribute type 1 has an invalid length. [ 60.066873][ T5542] ext4 filesystem being mounted at /158/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.091986][ T5542] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.803: corrupted xattr block 33: bad e_name length [ 60.107982][ T5542] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 60.117322][ T5542] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.803: corrupted xattr block 33: bad e_name length [ 60.136408][ T5542] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.803: corrupted xattr block 33: bad e_name length [ 60.150852][ T5542] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 60.166892][ T5542] EXT4-fs error (device loop1): ext4_get_inode_usage:888: inode #15: comm syz.1.803: corrupted xattr block 33: bad e_name length [ 60.245529][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.277576][ T5573] 9p: Bad value for 'source' [ 60.282655][ T5571] program syz.2.817 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 60.331179][ T5576] IPv6: NLM_F_CREATE should be specified when creating new route [ 60.590649][ T5602] loop4: detected capacity change from 0 to 128 [ 60.714602][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 60.714628][ T28] audit: type=1400 audit(1775066204.696:500): avc: denied { bind } for pid=5615 comm="syz.0.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 60.772852][ T28] audit: type=1400 audit(1775066204.706:501): avc: denied { node_bind } for pid=5615 comm="syz.0.832" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 60.836399][ T28] audit: type=1400 audit(1775066204.816:502): avc: denied { append } for pid=5623 comm="syz.3.833" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 60.868376][ T28] audit: type=1400 audit(1775066204.816:503): avc: denied { write } for pid=5623 comm="syz.3.833" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 61.013831][ T5604] netdevsim netdevsim2 netdevsim0: IPsec offload requires 128 bit authentication [ 61.024436][ T5636] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 61.163109][ T5645] netlink: 24 bytes leftover after parsing attributes in process `syz.3.843'. [ 61.259803][ T5657] loop3: detected capacity change from 0 to 512 [ 61.291180][ T28] audit: type=1400 audit(1775066205.276:504): avc: denied { write } for pid=5658 comm="syz.1.851" name="file0" dev="tmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 61.325591][ T5657] /dev/loop3: Can't open blockdev [ 61.342168][ T28] audit: type=1400 audit(1775066205.276:505): avc: denied { open } for pid=5658 comm="syz.1.851" path="/162/file0" dev="tmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 61.380268][ T2999] ================================================================== [ 61.388479][ T2999] BUG: KCSAN: data-race in d_make_discardable / lookup_fast [ 61.395799][ T2999] [ 61.397949][ T28] audit: type=1400 audit(1775066205.306:506): avc: denied { ioctl } for pid=5658 comm="syz.1.851" path="/162/file0" dev="tmpfs" ino=850 ioctlcmd=0x1274 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 61.398135][ T2999] write to 0xffff888107bb4c00 of 4 bytes by task 3302 on cpu 1: [ 61.398154][ T2999] d_make_discardable+0x4f/0xa0 [ 61.398181][ T2999] simple_unlink+0x68/0x80 [ 61.398197][ T2999] shmem_unlink+0x12d/0x140 [ 61.444056][ T2999] vfs_unlink+0x1c7/0x490 [ 61.448462][ T2999] filename_unlinkat+0x1e2/0x410 [ 61.453451][ T2999] __se_sys_unlink+0x2b/0xe0 [ 61.458062][ T2999] __x64_sys_unlink+0x1f/0x30 [ 61.462848][ T2999] x64_sys_call+0x2eb6/0x3020 [ 61.467539][ T2999] do_syscall_64+0x12c/0x370 [ 61.472318][ T2999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.478323][ T2999] [ 61.480662][ T2999] read to 0xffff888107bb4c00 of 4 bytes by task 2999 on cpu 0: [ 61.488216][ T2999] lookup_fast+0xf0/0x320 [ 61.492574][ T2999] path_lookupat+0x15c/0x500 [ 61.497185][ T2999] filename_lookup+0x190/0x390 [ 61.501960][ T2999] do_readlinkat+0x74/0x2f0 [ 61.506481][ T2999] __x64_sys_readlink+0x47/0x60 [ 61.511338][ T2999] x64_sys_call+0x2b51/0x3020 [ 61.516066][ T2999] do_syscall_64+0x12c/0x370 [ 61.520754][ T2999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.526912][ T2999] [ 61.529242][ T2999] value changed: 0x08300080 -> 0x00004080 [ 61.534968][ T2999] [ 61.537305][ T2999] Reported by Kernel Concurrency Sanitizer on: [ 61.543459][ T2999] CPU: 0 UID: 0 PID: 2999 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 61.552410][ T2999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 61.562553][ T2999] ================================================================== [ 68.237975][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!