last executing test programs: 35.014706941s ago: executing program 2 (id=139): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) r1 = epoll_create(0x802) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000300)={0x10000001}) ioctl$FS_IOC_GETFLAGS(r0, 0x5437, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xc453, &(0x7f00000000c0), 0x4, 0x55f, &(0x7f00000001c0)="$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") pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 34.86715724s ago: executing program 2 (id=141): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4800000010000104000000000100000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300ff"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x100, {0x0, 0x0, 0x0, r2, 0x100, 0x306c}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x4}]}}}]}, 0x3c}}, 0xeb64d656001f6f32) 34.845890851s ago: executing program 2 (id=142): bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x780, &(0x7f0000000040)={0x0, 0x20c89f, 0x1c881, 0x1, 0xd1}) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000ad"], 0x0, 0x8}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 34.810640952s ago: executing program 2 (id=144): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9101) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00', 0x0) 34.700512879s ago: executing program 2 (id=146): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, 0x0, 0x0) 34.529090899s ago: executing program 2 (id=149): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) modify_ldt$write2(0x11, &(0x7f00000000c0)={0x3, 0x100000, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) 34.49759191s ago: executing program 32 (id=149): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) modify_ldt$write2(0x11, &(0x7f00000000c0)={0x3, 0x100000, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) 22.728354913s ago: executing program 0 (id=401): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000001140)=[@in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) 22.144378696s ago: executing program 0 (id=406): perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x1}, 0xc004, 0x10000, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106a053103000000000001"], 0x0) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x60, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_elf64(r0, &(0x7f0000002600)=ANY=[], 0x1820) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x12}}, 0x40) 21.284110977s ago: executing program 0 (id=415): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f0000000c40)=[{&(0x7f0000000200)='$\x00\x00\x00', 0x4}, {&(0x7f0000000240)="a43b2eaab4000000000000006558", 0xe}], 0x2) 21.159092524s ago: executing program 0 (id=418): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x3, 0x10) 20.832156692s ago: executing program 0 (id=426): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) 20.796245585s ago: executing program 0 (id=427): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r0, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f0000000240)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) 11.771622237s ago: executing program 1 (id=568): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f0000002280)=[{&(0x7f0000000100)="2ec0b70007e03d3e000000000000000508060000", 0x14}, {&(0x7f0000000200)="f66e736ea839a9504f36ab39e83fc1310000400000000000", 0x18}, {&(0x7f0000001080)="5cf5", 0x2}], 0x3) 11.683824533s ago: executing program 1 (id=570): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x312}, [@IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) 11.539541151s ago: executing program 1 (id=572): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32, @ANYRES16], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1d}}, 0x0, 0x7fff, 0x53, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 11.468322715s ago: executing program 1 (id=573): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) 11.464069866s ago: executing program 1 (id=574): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x9001, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x401, 0x20004, 0x572, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="04"], 0x9) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x0, @private2, 0x1}, @in6={0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x8000}], 0x38) 11.076220468s ago: executing program 1 (id=580): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x840, 0x191) r0 = syz_io_uring_setup(0x239, &(0x7f0000000540)={0x0, 0xfffffffd, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x168) 11.030241221s ago: executing program 33 (id=580): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x840, 0x191) r0 = syz_io_uring_setup(0x239, &(0x7f0000000540)={0x0, 0xfffffffd, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x168) 5.582635906s ago: executing program 34 (id=427): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r0, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f0000000240)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) 3.543967425s ago: executing program 3 (id=703): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x7, 0x0) shutdown(r1, 0x0) 911.706567ms ago: executing program 6 (id=784): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000180)=[{&(0x7f0000000240)="fb", 0x1}], 0x1, 0x0) close(r1) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x5) 887.342878ms ago: executing program 6 (id=785): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x203, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x8, 0x1, 0x8, 0x2020005, 0x40b, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r0, 0x2) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f00000001c0)=[{0x0, 0xe1, 0x0, 0x0, @time={0x0, 0x1}, {}, {}, @result={0x0, 0x1}}], 0x1c) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 812.257713ms ago: executing program 7 (id=786): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001e0000000c0001800800", @ANYRES32], 0x20}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x58, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x4, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x15}}, {0x8, 0x2, @remote}}}]}, @CTA_FILTER={0x24, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x6}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xa80}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x80}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x502}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x406c450}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r2, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) 811.758333ms ago: executing program 7 (id=787): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000600)="63e4ed8e46080000003389f7f986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 759.003056ms ago: executing program 6 (id=788): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x28}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x4098, &(0x7f0000000080)={[{@nogrpid}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x66}}, {@nodioread_nolock}, {@nodiscard}, {@noquota}]}, 0x3, 0x438, &(0x7f0000000d80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fstat(r1, &(0x7f0000000140)) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) 754.000136ms ago: executing program 7 (id=789): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x8008743f, &(0x7f0000000180)) 600.445015ms ago: executing program 7 (id=790): socket$kcm(0x11, 0xa, 0x300) socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x2, 0xa, 0x73) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xe, 0x42718, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0x40}, 0x104b18, 0x6, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 543.268258ms ago: executing program 4 (id=792): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x0, 0x0, 0x0, 0x80000002}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_setup(0x374, &(0x7f0000004200)=0x0) io_pgetevents(r0, 0x3, 0x3, &(0x7f0000000440)=[{}, {}, {}], &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) 460.443383ms ago: executing program 5 (id=793): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) r2 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="933c547ecfa7"}, 0x14) syz_emit_ethernet(0x32, &(0x7f0000000040)={@random="e90c610faca2", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0xc, 0x100}}}}}}}, 0x0) 459.885403ms ago: executing program 3 (id=794): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@usrquota}, {@errors_remount}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x15, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000240)={0x0, 0x5}, &(0x7f0000000480)=0x8) 459.323433ms ago: executing program 5 (id=795): r0 = socket(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x110, &(0x7f0000000480)={0x0, 0xfad6, 0x400, 0x2}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000000)={0xfeffffff, r0, 0x23, {0x3b4, 0x6d3}, 0x6}, 0x1) 406.478706ms ago: executing program 7 (id=796): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000680)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e21, @empty}}}, 0x118) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) 406.158506ms ago: executing program 5 (id=797): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000100)={@val={0xa, 0x10}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "000400", 0x0, 0x29, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2}}}}}, 0x3a) 405.983377ms ago: executing program 4 (id=798): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@private2, 0x0, r2}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000040)={@private2, r2}, 0x14) 394.303237ms ago: executing program 6 (id=799): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x62502, 0x0) read$ptp(r1, 0x0, 0x0) 340.55273ms ago: executing program 3 (id=800): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r1, 0x6) r2 = syz_io_uring_setup(0x112, &(0x7f00000002c0)={0x0, 0xf59b, 0x100, 0x10003, 0x0, 0x0, r0}, &(0x7f0000000140), &(0x7f0000000280)) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 340.09585ms ago: executing program 4 (id=801): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='mnt/encrypted_dir\x00', 0x200) write$cgroup_pid(r1, &(0x7f0000002700), 0x12) 339.68341ms ago: executing program 7 (id=802): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x600, 0x0, 0x4040010}, 0x30) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x54, r3, 0x1, 0x0, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x90}, {0xc, 0x90, 0x8000000}}]}, 0x54}, 0x1, 0x0, 0x0, 0x95}, 0x40090) 308.956392ms ago: executing program 4 (id=803): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000240)={'lo\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x1, 0x6, 0xfffff400}]}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'wg0\x00', 0x200}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000140)={'hsr0\x00'}) 302.774972ms ago: executing program 3 (id=804): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x0, 0x2}, 0x1cb20, 0x1, 0xfffffffc, 0x9, 0xb0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x2, 0x0, 0x0, 0x0, 0x8, 0x600, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x5, 0x8, 0x0, 0x8, 0xfff1}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x2000, 0x69, 0x10, 0x8a}}, &(0x7f0000000480)='GPL\x00'}, 0x80) 256.431415ms ago: executing program 6 (id=805): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x20040000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 255.836315ms ago: executing program 5 (id=806): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000340)="04", 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x237a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0}}], 0x1, 0x800) recvmmsg(r0, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=""/95, 0x5f}, 0x3}], 0x1, 0x12141, 0x0) 223.864597ms ago: executing program 5 (id=807): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x400, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90224fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 221.290807ms ago: executing program 3 (id=808): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x3c00, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000040)={0x7f, 0xffffffffffffffff, 0x20, {0x6, 0x3}, 0x5}, 0x1) 191.654838ms ago: executing program 6 (id=809): io_setup(0x3, &(0x7f0000000100)=0x0) io_getevents(r0, 0x2, 0x2, &(0x7f0000000340)=[{}, {}], 0x0) io_pgetevents(r0, 0x2, 0x2, &(0x7f0000000240)=[{}, {}], 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) io_submit(r0, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x101, r1, 0x0, 0x0, 0x4}]) io_submit(r0, 0x1, &(0x7f00000015c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0xfff, r1, 0x0, 0x0, 0x5}]) 108.457233ms ago: executing program 4 (id=810): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x2) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffdfffff}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000001, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1) 107.904854ms ago: executing program 5 (id=811): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x18, 0x1, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x1c025, 0xac5d, 0x0, 0x4, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) fallocate(r0, 0x0, 0x0, 0x2000402) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, 0x0, 0x40440c4) 94.078064ms ago: executing program 3 (id=812): unshare(0x600) r0 = io_uring_setup(0x70c6, &(0x7f00000002c0)={0x0, 0x9e58, 0x0, 0x0, 0x1d7}) close_range(r0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x2e, &(0x7f0000000000)=r1, 0x4) recvmsg(r1, &(0x7f0000000f40)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 4 (id=813): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) accept4$tipc(r0, &(0x7f0000000140), &(0x7f0000000180)=0x10, 0x80000) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.75' (ED25519) to the list of known hosts. [ 33.988306][ T29] audit: type=1400 audit(1769827472.440:62): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 34.011425][ T29] audit: type=1400 audit(1769827472.470:63): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.013646][ T3301] cgroup: Unknown subsys name 'net' [ 34.039070][ T29] audit: type=1400 audit(1769827472.490:64): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.133107][ T3301] cgroup: Unknown subsys name 'cpuset' [ 34.139391][ T3301] cgroup: Unknown subsys name 'rlimit' [ 34.311978][ T29] audit: type=1400 audit(1769827472.760:65): avc: denied { setattr } for pid=3301 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.346171][ T29] audit: type=1400 audit(1769827472.770:66): avc: denied { create } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.366762][ T29] audit: type=1400 audit(1769827472.770:67): avc: denied { write } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.387477][ T29] audit: type=1400 audit(1769827472.770:68): avc: denied { read } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.407925][ T29] audit: type=1400 audit(1769827472.780:69): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.432788][ T29] audit: type=1400 audit(1769827472.780:70): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 34.452598][ T3304] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 34.456110][ T29] audit: type=1400 audit(1769827472.790:71): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 34.512920][ T3301] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.680813][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 35.709869][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 35.774580][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.781822][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.789241][ T3313] bridge_slave_0: entered allmulticast mode [ 35.795618][ T3313] bridge_slave_0: entered promiscuous mode [ 35.816863][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 35.825596][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.832785][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.840189][ T3313] bridge_slave_1: entered allmulticast mode [ 35.846539][ T3313] bridge_slave_1: entered promiscuous mode [ 35.855547][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 35.908668][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.932876][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.941976][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.949069][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.956327][ T3314] bridge_slave_0: entered allmulticast mode [ 35.962668][ T3314] bridge_slave_0: entered promiscuous mode [ 35.984726][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.991868][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.999177][ T3314] bridge_slave_1: entered allmulticast mode [ 36.005575][ T3314] bridge_slave_1: entered promiscuous mode [ 36.012089][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 36.037857][ T3313] team0: Port device team_slave_0 added [ 36.050822][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.057931][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.065145][ T3318] bridge_slave_0: entered allmulticast mode [ 36.071719][ T3318] bridge_slave_0: entered promiscuous mode [ 36.083563][ T3313] team0: Port device team_slave_1 added [ 36.102139][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.109257][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.116481][ T3318] bridge_slave_1: entered allmulticast mode [ 36.123052][ T3318] bridge_slave_1: entered promiscuous mode [ 36.130643][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.146865][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.154204][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.161309][ T3316] bridge_slave_0: entered allmulticast mode [ 36.167791][ T3316] bridge_slave_0: entered promiscuous mode [ 36.174461][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.181540][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.188881][ T3316] bridge_slave_1: entered allmulticast mode [ 36.195239][ T3316] bridge_slave_1: entered promiscuous mode [ 36.202670][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.246288][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.253287][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.279202][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.293269][ T3314] team0: Port device team_slave_0 added [ 36.300023][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.310288][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.319643][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.326625][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.352602][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.371315][ T3314] team0: Port device team_slave_1 added [ 36.382812][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.392920][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.402339][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.409393][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.416760][ T3315] bridge_slave_0: entered allmulticast mode [ 36.423333][ T3315] bridge_slave_0: entered promiscuous mode [ 36.430028][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.437190][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.444476][ T3315] bridge_slave_1: entered allmulticast mode [ 36.450826][ T3315] bridge_slave_1: entered promiscuous mode [ 36.481119][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.488173][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.514171][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.525907][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.532952][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.558986][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.579618][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.601022][ T3318] team0: Port device team_slave_0 added [ 36.607885][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.617919][ T3316] team0: Port device team_slave_0 added [ 36.630904][ T3313] hsr_slave_0: entered promiscuous mode [ 36.636963][ T3313] hsr_slave_1: entered promiscuous mode [ 36.643620][ T3318] team0: Port device team_slave_1 added [ 36.654524][ T3316] team0: Port device team_slave_1 added [ 36.665815][ T3315] team0: Port device team_slave_0 added [ 36.695822][ T3315] team0: Port device team_slave_1 added [ 36.701594][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.708711][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.734691][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.747816][ T3314] hsr_slave_0: entered promiscuous mode [ 36.753874][ T3314] hsr_slave_1: entered promiscuous mode [ 36.759714][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 36.765518][ T3314] Cannot create hsr debugfs directory [ 36.797365][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.804352][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.830347][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.845730][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.852759][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.878795][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.898883][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.905881][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.931843][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.942902][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.949860][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.976053][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.004868][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.011884][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.037921][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.072608][ T3318] hsr_slave_0: entered promiscuous mode [ 37.078718][ T3318] hsr_slave_1: entered promiscuous mode [ 37.084832][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 37.090557][ T3318] Cannot create hsr debugfs directory [ 37.123181][ T3315] hsr_slave_0: entered promiscuous mode [ 37.129315][ T3315] hsr_slave_1: entered promiscuous mode [ 37.135213][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 37.140949][ T3315] Cannot create hsr debugfs directory [ 37.193300][ T3316] hsr_slave_0: entered promiscuous mode [ 37.199498][ T3316] hsr_slave_1: entered promiscuous mode [ 37.205459][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 37.211196][ T3316] Cannot create hsr debugfs directory [ 37.350069][ T3313] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.359114][ T3313] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.374630][ T3313] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.383717][ T3313] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.406206][ T3318] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.416940][ T3318] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.426176][ T3318] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.435195][ T3318] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.471564][ T3314] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.487345][ T3314] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.496944][ T3314] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.506111][ T3314] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.536160][ T3315] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.556767][ T3315] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.566555][ T3315] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.583609][ T3315] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.604229][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.620799][ T3316] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.629977][ T3316] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.639933][ T3316] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.648839][ T3316] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.670729][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.685956][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.713604][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.720694][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.729845][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.736978][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.747800][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.771419][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.795955][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.803076][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.814943][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.837441][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.845498][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.852593][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.861441][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.868565][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.886930][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.894036][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.925365][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.941127][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.956646][ T3318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.980590][ T3314] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.991088][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.011798][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.018931][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.027498][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.034625][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.061025][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.087355][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.109430][ T1596] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.116539][ T1596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.138903][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.159229][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.166352][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.180757][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.227803][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.276829][ T3313] veth0_vlan: entered promiscuous mode [ 38.294391][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.305742][ T3313] veth1_vlan: entered promiscuous mode [ 38.342732][ T3313] veth0_macvtap: entered promiscuous mode [ 38.363370][ T3313] veth1_macvtap: entered promiscuous mode [ 38.377032][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.414595][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.429927][ T3318] veth0_vlan: entered promiscuous mode [ 38.436402][ T3314] veth0_vlan: entered promiscuous mode [ 38.447456][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.458438][ T3318] veth1_vlan: entered promiscuous mode [ 38.466674][ T3314] veth1_vlan: entered promiscuous mode [ 38.479775][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.490880][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.505507][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.514877][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.541102][ T3318] veth0_macvtap: entered promiscuous mode [ 38.549918][ T3314] veth0_macvtap: entered promiscuous mode [ 38.565610][ T3318] veth1_macvtap: entered promiscuous mode [ 38.582061][ T3314] veth1_macvtap: entered promiscuous mode [ 38.590280][ T3313] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.604490][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.616466][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.638295][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.664847][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.692104][ T53] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.728337][ T53] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.737351][ T53] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.757412][ T53] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.767140][ T3315] veth0_vlan: entered promiscuous mode [ 38.778961][ T3316] veth0_vlan: entered promiscuous mode [ 38.802610][ T53] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.813096][ T3315] veth1_vlan: entered promiscuous mode [ 38.828931][ T3316] veth1_vlan: entered promiscuous mode [ 38.853529][ T53] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.882318][ T53] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.900978][ T3493] loop1: detected capacity change from 0 to 2048 [ 38.925581][ T3315] veth0_macvtap: entered promiscuous mode [ 38.932869][ T53] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.943976][ T3315] veth1_macvtap: entered promiscuous mode [ 38.952916][ T3493] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.969548][ T3316] veth0_macvtap: entered promiscuous mode [ 38.995455][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.004237][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.020132][ T3316] veth1_macvtap: entered promiscuous mode [ 39.023271][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.039828][ T3498] loop0: detected capacity change from 0 to 4096 [ 39.050419][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.059801][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 39.059817][ T29] audit: type=1400 audit(1769827477.510:117): avc: denied { create } for pid=3499 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 39.068846][ T3498] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.100135][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.126332][ T29] audit: type=1400 audit(1769827477.540:118): avc: denied { ioctl } for pid=3499 comm="syz.2.3" path="socket:[5033]" dev="sockfs" ino=5033 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 39.152213][ T3447] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.209113][ T29] audit: type=1400 audit(1769827477.660:119): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 39.238479][ T3509] loop2: detected capacity change from 0 to 1024 [ 39.247923][ T3509] ======================================================= [ 39.247923][ T3509] WARNING: The mand mount option has been deprecated and [ 39.247923][ T3509] and is ignored by this kernel. Remove the mand [ 39.247923][ T3509] option from the mount to silence this warning. [ 39.247923][ T3509] ======================================================= [ 39.253403][ T3447] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.298429][ T29] audit: type=1400 audit(1769827477.740:120): avc: denied { write } for pid=3496 comm="syz.0.8" path="/3/file1/cgroup" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 39.326779][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.336653][ T3509] EXT4-fs: Ignoring removed bh option [ 39.342829][ T3509] EXT4-fs: Ignoring removed nobh option [ 39.364674][ T29] audit: type=1400 audit(1769827477.820:121): avc: denied { map_create } for pid=3513 comm="syz.0.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 39.410159][ T3447] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.425948][ T29] audit: type=1400 audit(1769827477.840:122): avc: denied { map_read map_write } for pid=3513 comm="syz.0.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 39.446769][ T3509] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.463617][ T3519] loop4: detected capacity change from 0 to 128 [ 39.468879][ T3447] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.482706][ T53] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.505237][ T3519] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 39.511321][ T29] audit: type=1400 audit(1769827477.960:123): avc: denied { read } for pid=3508 comm="syz.2.11" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 39.524525][ T53] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.539354][ T29] audit: type=1400 audit(1769827477.960:124): avc: denied { open } for pid=3508 comm="syz.2.11" path="/1/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 39.563373][ T3509] capability: warning: `syz.2.11' uses deprecated v2 capabilities in a way that may be insecure [ 39.581359][ T53] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.588830][ T3519] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 39.593992][ T53] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.610409][ T29] audit: type=1400 audit(1769827477.980:125): avc: denied { setattr } for pid=3508 comm="syz.2.11" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 39.632661][ T29] audit: type=1400 audit(1769827478.040:126): avc: denied { mount } for pid=3518 comm="syz.0.13" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 39.668928][ T3519] EXT4-fs error (device loop4): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.4.5: bad entry in directory: directory entry overrun - offset=1012, inode=128, rec_len=65544, size=1024 fake=0 [ 39.700572][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.742895][ T3316] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 39.784024][ T3532] netlink: 56 bytes leftover after parsing attributes in process `syz.2.15'. [ 39.793943][ C0] hrtimer: interrupt took 87184 ns [ 39.948896][ T3543] loop4: detected capacity change from 0 to 2048 [ 39.994804][ T3543] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.068954][ T3543] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 40.191180][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.316856][ T3563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.29'. [ 40.355024][ T3569] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.519430][ T3583] netlink: 12 bytes leftover after parsing attributes in process `syz.2.38'. [ 40.557097][ T3583] netlink: 12 bytes leftover after parsing attributes in process `syz.2.38'. [ 40.566176][ T31] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.619548][ T31] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.630486][ T3583] Zero length message leads to an empty skb [ 40.631216][ T3585] netlink: 56 bytes leftover after parsing attributes in process `syz.3.39'. [ 40.666780][ T31] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.752897][ T31] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.790652][ T3598] loop1: detected capacity change from 0 to 128 [ 41.246700][ T31] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xb [ 41.580309][ T3640] loop2: detected capacity change from 0 to 512 [ 41.591841][ T3640] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 41.601837][ T3640] EXT4-fs (loop2): invalid journal inode [ 41.607943][ T3640] EXT4-fs (loop2): can't get journal size [ 41.624518][ T3640] EXT4-fs (loop2): 1 truncate cleaned up [ 41.630680][ T3640] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.650332][ T3640] EXT4-fs warning (device loop2): verify_group_input:137: Cannot add at group 3 (only 1 groups) [ 41.672128][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.710063][ T3651] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 41.716610][ T3651] syzkaller0: linktype set to 4 [ 41.896905][ T3665] netlink: 20 bytes leftover after parsing attributes in process `syz.2.71'. [ 42.102352][ T3658] syz.0.68 (3658) used greatest stack depth: 10016 bytes left [ 42.806000][ T3728] bond1: entered promiscuous mode [ 42.811285][ T3728] 8021q: adding VLAN 0 to HW filter on device bond1 [ 43.272781][ T3744] loop2: detected capacity change from 0 to 512 [ 43.300995][ T3744] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.105: iget: bad i_size value: -4294967286 [ 43.328167][ T3744] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.105: couldn't read orphan inode 15 (err -117) [ 43.344270][ T3753] syz.0.109 uses obsolete (PF_INET,SOCK_PACKET) [ 43.351702][ T3744] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.382706][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.474791][ T3768] netlink: 'syz.1.116': attribute type 4 has an invalid length. [ 43.492563][ T3768] netlink: 'syz.1.116': attribute type 4 has an invalid length. [ 43.527453][ T3775] netlink: 28 bytes leftover after parsing attributes in process `syz.0.120'. [ 43.536475][ T3775] netlink: 28 bytes leftover after parsing attributes in process `syz.0.120'. [ 43.838419][ T3802] loop0: detected capacity change from 0 to 512 [ 43.862825][ T3802] EXT4-fs: Ignoring removed oldalloc option [ 43.887076][ T3802] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 43.900198][ T3802] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 43.919746][ T3802] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 43.942385][ T3802] EXT4-fs (loop0): 1 truncate cleaned up [ 43.948655][ T3802] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.962654][ T3805] loop2: detected capacity change from 0 to 256 [ 43.994218][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.042349][ T3804] Process accounting resumed [ 44.047281][ T3804] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 44.056174][ T3804] FAT-fs (loop2): Filesystem has been set read-only [ 44.064200][ T3804] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 44.074411][ T36] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 44.086343][ T36] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 44.105873][ T29] kauditd_printk_skb: 191 callbacks suppressed [ 44.105890][ T29] audit: type=1400 audit(1769827482.560:318): avc: denied { read append } for pid=3812 comm="syz.3.133" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 44.135396][ T29] audit: type=1400 audit(1769827482.560:319): avc: denied { open } for pid=3812 comm="syz.3.133" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 44.163384][ T29] audit: type=1400 audit(1769827482.610:320): avc: denied { ioctl } for pid=3812 comm="syz.3.133" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 44.295030][ T3830] loop0: detected capacity change from 0 to 512 [ 44.301511][ T3828] loop2: detected capacity change from 0 to 512 [ 44.314785][ T3828] EXT4-fs (loop2): blocks per group (35) and clusters per group (32768) inconsistent [ 44.320690][ T3830] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.337047][ T3830] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.357459][ T3830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.140'. [ 44.377136][ T3830] 8021q: adding VLAN 0 to HW filter on device bond1 [ 44.456605][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.496256][ T29] audit: type=1400 audit(1769827482.950:321): avc: denied { mount } for pid=3840 comm="syz.2.144" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 44.519129][ T29] audit: type=1400 audit(1769827482.970:322): avc: denied { mounton } for pid=3840 comm="syz.2.144" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 44.551575][ T29] audit: type=1400 audit(1769827483.000:323): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 44.571479][ T29] audit: type=1400 audit(1769827483.000:324): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 44.688049][ T29] audit: type=1326 audit(1769827483.140:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3847 comm="syz.0.148" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc7ec62aeb9 code=0x0 [ 44.738797][ T29] audit: type=1400 audit(1769827483.190:326): avc: denied { mounton } for pid=3847 comm="syz.0.148" path="/33/file0" dev="tmpfs" ino=189 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 44.770783][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 44.781131][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.836139][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 44.846511][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.890965][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 44.901392][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.956321][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 44.966688][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.006998][ T3864] loop4: detected capacity change from 0 to 1024 [ 45.035184][ T3864] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 45.047432][ T3864] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.061175][ T29] audit: type=1400 audit(1769827483.520:327): avc: denied { map } for pid=3862 comm="syz.4.152" path="/19/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 45.066948][ T3851] chnl_net:caif_netlink_parms(): no params data found [ 45.092525][ T3864] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.152: bg 0: block 112: padding at end of block bitmap is not set [ 45.124845][ T3864] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 117 [ 45.137358][ T3864] EXT4-fs (loop4): This should not happen!! Data will be lost [ 45.137358][ T3864] [ 45.198252][ T3874] netlink: 4 bytes leftover after parsing attributes in process `syz.3.155'. [ 45.209148][ T3878] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: comm syz.4.152: lblock 0 mapped to illegal pblock 0 (length 4) [ 45.263348][ T3878] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 45.275810][ T3878] EXT4-fs (loop4): This should not happen!! Data will be lost [ 45.275810][ T3878] [ 45.289596][ T3864] syz.4.152 (3864) used greatest stack depth: 9992 bytes left [ 45.307754][ T3880] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 45.334816][ T3851] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.341969][ T3851] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.343395][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 45.349827][ T3851] bridge_slave_0: entered allmulticast mode [ 45.364868][ T3851] bridge_slave_0: entered promiscuous mode [ 45.371656][ T3851] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.378772][ T3851] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.386285][ T3851] bridge_slave_1: entered allmulticast mode [ 45.408576][ T3851] bridge_slave_1: entered promiscuous mode [ 45.417280][ T12] bridge_slave_1: left allmulticast mode [ 45.423097][ T12] bridge_slave_1: left promiscuous mode [ 45.428836][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.437771][ T12] bridge_slave_0: left allmulticast mode [ 45.443582][ T12] bridge_slave_0: left promiscuous mode [ 45.449257][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.642598][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 45.689592][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 45.705314][ T12] bond0 (unregistering): Released all slaves [ 45.717950][ T12] bond1 (unregistering): Released all slaves [ 45.744581][ T3916] netlink: 'syz.3.165': attribute type 13 has an invalid length. [ 45.752445][ T3916] netlink: 4 bytes leftover after parsing attributes in process `syz.3.165'. [ 45.774600][ T3918] process 'syz.0.166' launched './file1' with NULL argv: empty string added [ 45.783599][ T3851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.796575][ T3916] netlink: 'syz.3.165': attribute type 13 has an invalid length. [ 45.804413][ T3916] netlink: 4 bytes leftover after parsing attributes in process `syz.3.165'. [ 45.813348][ T31] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.825320][ T3447] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.835982][ T3851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.846603][ T3447] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.871795][ T3851] team0: Port device team_slave_0 added [ 45.886209][ T12] hsr_slave_0: left promiscuous mode [ 45.892031][ T12] hsr_slave_1: left promiscuous mode [ 45.909332][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.916867][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.939822][ T3927] netlink: 16 bytes leftover after parsing attributes in process `syz.4.170'. [ 45.949874][ T3927] netlink: 12 bytes leftover after parsing attributes in process `syz.4.170'. [ 45.972605][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.980067][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.993036][ T3927] netlink: 12 bytes leftover after parsing attributes in process `syz.4.170'. [ 46.013317][ T12] veth1_macvtap: left promiscuous mode [ 46.024528][ T3932] netlink: 40 bytes leftover after parsing attributes in process `syz.4.172'. [ 46.033570][ T12] veth0_macvtap: left promiscuous mode [ 46.039154][ T12] veth1_vlan: left promiscuous mode [ 46.065905][ T12] veth0_vlan: left promiscuous mode [ 46.162286][ T12] team0 (unregistering): Port device team_slave_1 removed [ 46.176294][ T12] team0 (unregistering): Port device team_slave_0 removed [ 46.219054][ T3447] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.230585][ T3851] team0: Port device team_slave_1 added [ 46.286858][ T3851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.294008][ T3851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.320049][ T3851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.394632][ T3851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.401693][ T3851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.427657][ T3851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.517488][ T3956] loop4: detected capacity change from 0 to 1024 [ 46.521977][ T3851] hsr_slave_0: entered promiscuous mode [ 46.532623][ T3851] hsr_slave_1: entered promiscuous mode [ 46.541643][ T3851] debugfs: 'hsr0' already exists in 'hsr' [ 46.547597][ T3851] Cannot create hsr debugfs directory [ 46.553754][ T3956] EXT4-fs: Ignoring removed mblk_io_submit option [ 46.627967][ T3956] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 46.644666][ T3956] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.703006][ T3851] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 46.705688][ T3956] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: block 3: comm syz.4.178: lblock 3 mapped to illegal pblock 3 (length 3) [ 46.726710][ T3851] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 46.744299][ T3851] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 46.762111][ T3956] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 46.762900][ T3851] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 46.774455][ T3956] EXT4-fs (loop4): This should not happen!! Data will be lost [ 46.774455][ T3956] [ 46.805122][ T3964] loop3: detected capacity change from 0 to 8192 [ 46.822934][ T3968] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: block 8: comm syz.4.178: lblock 8 mapped to illegal pblock 8 (length 8) [ 46.842668][ T3968] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 46.855059][ T3968] EXT4-fs (loop4): This should not happen!! Data will be lost [ 46.855059][ T3968] [ 46.865858][ T3305] loop3: p1 < > p2 p3 < p5 p6 > p4 [ 46.871079][ T3305] loop3: partition table partially beyond EOD, truncated [ 46.883682][ T3974] Driver unsupported XDP return value 0 on prog (id 27) dev N/A, expect packet loss! [ 46.887067][ T3305] loop3: p1 start 100663296 is beyond EOD, truncated [ 46.900021][ T3305] loop3: p2 size 134217732 extends beyond EOD, truncated [ 46.935466][ T3305] loop3: p4 size 14876672 extends beyond EOD, truncated [ 46.949045][ T3851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.961606][ T3305] loop3: p5 size 134217732 extends beyond EOD, truncated [ 46.974324][ T3851] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.981507][ T3305] loop3: p6 size 14876672 extends beyond EOD, truncated [ 47.042432][ T3964] loop3: p1 < > p2 p3 < p5 p6 > p4 [ 47.047668][ T3964] loop3: partition table partially beyond EOD, truncated [ 47.050043][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.061789][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.076995][ T3996] netlink: 'syz.1.184': attribute type 1 has an invalid length. [ 47.092575][ T3964] loop3: p1 start 100663296 is beyond EOD, truncated [ 47.099306][ T3964] loop3: p2 size 134217732 extends beyond EOD, truncated [ 47.104639][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.113507][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.130079][ T3956] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.178: bg 0: block 112: padding at end of block bitmap is not set [ 47.150376][ T3996] bond1: entered promiscuous mode [ 47.158041][ T3964] loop3: p4 size 14876672 extends beyond EOD, truncated [ 47.159901][ T3996] 8021q: adding VLAN 0 to HW filter on device bond1 [ 47.171770][ T3968] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: comm syz.4.178: lblock 0 mapped to illegal pblock 0 (length 3) [ 47.185430][ T3964] loop3: p5 size 134217732 extends beyond EOD, truncated [ 47.193524][ T3964] loop3: p6 size 14876672 extends beyond EOD, truncated [ 47.201169][ T3968] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 47.213510][ T3968] EXT4-fs (loop4): This should not happen!! Data will be lost [ 47.213510][ T3968] [ 47.256526][ T4000] bond1: (slave bridge1): making interface the new active one [ 47.264117][ T4000] bridge1: entered promiscuous mode [ 47.293066][ T52] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 28 [ 47.305431][ T52] EXT4-fs (loop4): This should not happen!! Data will be lost [ 47.305431][ T52] [ 47.315243][ T52] EXT4-fs (loop4): Total free blocks count 0 [ 47.323620][ T4000] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 47.479171][ T3883] udevd[3883]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 47.479181][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 47.496119][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 47.513216][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 47.525421][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 47.551487][ T3851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.574814][ T4024] netlink: 28 bytes leftover after parsing attributes in process `syz.1.189'. [ 47.829918][ T3851] veth0_vlan: entered promiscuous mode [ 47.858384][ T3851] veth1_vlan: entered promiscuous mode [ 47.889998][ T3851] veth0_macvtap: entered promiscuous mode [ 47.906788][ T3851] veth1_macvtap: entered promiscuous mode [ 47.932525][ T3851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.949554][ T3851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.974017][ T31] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.992986][ T31] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.008634][ T31] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.024294][ T31] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.186343][ T4109] loop0: detected capacity change from 0 to 1024 [ 48.197134][ T4109] EXT4-fs: Ignoring removed nobh option [ 48.202818][ T4109] EXT4-fs: Ignoring removed bh option [ 48.213600][ T4109] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0002-000000000000 r/w without journal. Quota mode: writeback. [ 48.274642][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0002-000000000000. [ 48.379930][ T4122] loop0: detected capacity change from 0 to 1024 [ 48.391149][ T4122] EXT4-fs: Ignoring removed oldalloc option [ 48.406830][ T4122] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.426210][ T4122] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.451665][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.203778][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 49.203793][ T29] audit: type=1400 audit(1769827487.660:360): avc: denied { create } for pid=4153 comm="syz.1.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 49.275169][ T29] audit: type=1400 audit(1769827487.690:361): avc: denied { bind } for pid=4153 comm="syz.1.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 49.294459][ T29] audit: type=1400 audit(1769827487.690:362): avc: denied { write } for pid=4153 comm="syz.1.220" path="socket:[7408]" dev="sockfs" ino=7408 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 49.381076][ T29] audit: type=1400 audit(1769827487.830:363): avc: denied { read } for pid=4164 comm="syz.4.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.690622][ T4178] loop4: detected capacity change from 0 to 4096 [ 49.736383][ T4178] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.764059][ T4178] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.228: corrupted inode contents [ 49.777730][ T4178] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #15: comm syz.4.228: mark_inode_dirty error [ 49.790210][ T4178] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.228: corrupted inode contents [ 49.803192][ T4178] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #15: comm syz.4.228: mark_inode_dirty error [ 49.816517][ T4178] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.228: corrupted inode contents [ 49.831607][ T4178] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #15: comm syz.4.228: mark_inode_dirty error [ 49.843333][ T4178] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.228: corrupted inode contents [ 49.855558][ T4178] EXT4-fs error (device loop4): ext4_truncate:4635: inode #15: comm syz.4.228: mark_inode_dirty error [ 49.867185][ T4178] EXT4-fs error (device loop4) in ext4_setattr:6035: Corrupt filesystem [ 49.878618][ T29] audit: type=1400 audit(1769827488.330:364): avc: denied { remove_name } for pid=4177 comm="syz.4.228" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.882940][ T4178] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.228: corrupted inode contents [ 49.901230][ T29] audit: type=1400 audit(1769827488.330:365): avc: denied { unlink } for pid=4177 comm="syz.4.228" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 49.958285][ T3316] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 49.971573][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.007574][ T4182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.230'. [ 50.018893][ T4184] loop4: detected capacity change from 0 to 1024 [ 50.053182][ T4184] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.138401][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.235094][ T4199] netlink: 32 bytes leftover after parsing attributes in process `syz.1.232'. [ 51.084685][ T4094] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 51.134533][ T29] audit: type=1400 audit(1769827489.590:366): avc: denied { create } for pid=4216 comm="syz.5.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 51.156140][ T29] audit: type=1400 audit(1769827489.610:367): avc: denied { create } for pid=4218 comm="syz.1.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 51.178835][ T29] audit: type=1400 audit(1769827489.610:368): avc: denied { sys_admin } for pid=4216 comm="syz.5.242" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 51.199717][ T29] audit: type=1400 audit(1769827489.630:369): avc: denied { connect } for pid=4218 comm="syz.1.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 51.277000][ T4222] loop5: detected capacity change from 0 to 512 [ 51.308084][ T4222] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.330876][ T4222] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.383626][ T4238] loop4: detected capacity change from 0 to 256 [ 51.431708][ T4244] loop1: detected capacity change from 0 to 512 [ 51.438329][ T4238] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 51.451411][ T3851] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.455720][ T4244] vfat: Bad value for 'nonumtail' [ 51.539176][ T4255] loop1: detected capacity change from 0 to 1024 [ 51.550167][ T4255] EXT4-fs: Ignoring removed orlov option [ 51.554184][ T4257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.566964][ T4257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.589012][ T4255] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.604712][ T4261] netlink: 20 bytes leftover after parsing attributes in process `syz.5.260'. [ 51.614992][ T4261] netlink: 20 bytes leftover after parsing attributes in process `syz.5.260'. [ 51.670639][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.920027][ T4287] mmap: syz.1.264 (4287) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 52.028482][ T4295] loop5: detected capacity change from 0 to 1024 [ 52.037722][ T4295] EXT4-fs: inline encryption not supported [ 52.043671][ T4295] EXT4-fs: Ignoring removed orlov option [ 52.069031][ T4295] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.117380][ T4301] loop4: detected capacity change from 0 to 512 [ 52.159408][ T3851] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.175628][ T4301] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.210052][ T4301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.277'. [ 52.328625][ T4316] netlink: 'syz.0.284': attribute type 7 has an invalid length. [ 52.359763][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.362542][ T4316] netlink: 'syz.0.284': attribute type 7 has an invalid length. [ 52.378084][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.397539][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.408610][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.439979][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.653192][ T4350] loop1: detected capacity change from 0 to 128 [ 52.677770][ T4350] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 52.700108][ T4350] ext4 filesystem being mounted at /66/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 52.822793][ T4362] loop0: detected capacity change from 0 to 1024 [ 52.846959][ T3314] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.868144][ T4362] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 52.884020][ T4362] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.937342][ T4362] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #15: block 3: comm syz.0.303: lblock 3 mapped to illegal pblock 3 (length 2) [ 52.972980][ T4362] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #15: comm syz.0.303: lblock 0 mapped to illegal pblock 0 (length 3) [ 53.002295][ T4362] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 53.014692][ T4362] EXT4-fs (loop0): This should not happen!! Data will be lost [ 53.014692][ T4362] [ 53.034004][ T4374] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #15: block 4: comm syz.0.303: lblock 4 mapped to illegal pblock 4 (length 1) [ 53.061756][ T4374] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 117 [ 53.074125][ T4374] EXT4-fs (loop0): This should not happen!! Data will be lost [ 53.074125][ T4374] [ 53.115517][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 53.192949][ T4387] EXT4-fs: inline encryption not supported [ 53.221011][ T4387] EXT4-fs (loop4): 1 orphan inode deleted [ 53.233451][ T1596] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:5: Failed to release dquot type 1 [ 53.251053][ T4387] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.290589][ T4387] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.453095][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.579825][ T4422] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 53.633679][ T4425] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 53.695177][ T4432] netlink: 68 bytes leftover after parsing attributes in process `syz.1.325'. [ 53.846121][ T4445] netlink: 'syz.1.331': attribute type 2 has an invalid length. [ 53.853862][ T4445] netlink: 28 bytes leftover after parsing attributes in process `syz.1.331'. [ 53.902736][ T4452] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 53.933751][ T4452] ext4 filesystem being mounted at /65/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 53.973808][ T3316] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 54.179605][ T3401] kernel write not supported for file bpf-prog (pid: 3401 comm: kworker/0:4) [ 54.233587][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 54.233604][ T29] audit: type=1400 audit(1769827492.690:465): avc: denied { read } for pid=4477 comm="syz.0.346" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 54.263788][ T29] audit: type=1400 audit(1769827492.690:466): avc: denied { open } for pid=4477 comm="syz.0.346" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 54.292853][ T4478] program syz.0.346 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 54.322005][ T29] audit: type=1400 audit(1769827492.770:467): avc: denied { read write } for pid=4480 comm="syz.1.347" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 54.345436][ T29] audit: type=1400 audit(1769827492.770:468): avc: denied { open } for pid=4480 comm="syz.1.347" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 54.391534][ T4484] netlink: 'syz.1.349': attribute type 1 has an invalid length. [ 54.399464][ T4484] netlink: 'syz.1.349': attribute type 4 has an invalid length. [ 54.407249][ T4484] netlink: 15334 bytes leftover after parsing attributes in process `syz.1.349'. [ 54.431039][ T29] audit: type=1400 audit(1769827492.820:469): avc: denied { ioctl } for pid=4480 comm="syz.1.347" path="/dev/ptp0" dev="devtmpfs" ino=246 ioctlcmd=0x3d03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 54.612100][ T29] audit: type=1400 audit(1769827493.060:470): avc: denied { checkpoint_restore } for pid=4473 comm="syz.4.344" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 54.651614][ T4505] syz.3.353: attempt to access beyond end of device [ 54.651614][ T4505] loop3: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 54.665558][ T4505] Buffer I/O error on dev loop3, logical block 57847, async page read [ 54.716330][ T4505] syz.3.353: attempt to access beyond end of device [ 54.716330][ T4505] loop3: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 54.730345][ T4505] Buffer I/O error on dev loop3, logical block 57847, async page read [ 54.782311][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 54.806941][ T4509] set_capacity_and_notify: 4 callbacks suppressed [ 54.806956][ T4509] loop4: detected capacity change from 0 to 164 [ 54.825985][ T4505] syz.3.353: attempt to access beyond end of device [ 54.825985][ T4505] loop3: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 54.840089][ T4505] Buffer I/O error on dev loop3, logical block 57847, async page read [ 54.888741][ T29] audit: type=1400 audit(1769827493.340:471): avc: denied { mount } for pid=4508 comm="syz.4.357" name="/" dev="loop4" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 54.911698][ T4509] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 54.994793][ T29] audit: type=1400 audit(1769827749.452:472): avc: denied { unmount } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 55.258183][ T4535] SELinux: failed to load policy [ 55.263318][ T29] audit: type=1400 audit(1769827749.712:473): avc: denied { load_policy } for pid=4534 comm="syz.1.369" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 55.427838][ T4550] loop4: detected capacity change from 0 to 256 [ 55.437882][ T29] audit: type=1400 audit(1769827749.892:474): avc: denied { map } for pid=4547 comm="syz.1.376" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 55.479893][ T4550] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 55.489058][ T4550] FAT-fs (loop4): bogus number of directory entries (1) [ 55.496110][ T4550] FAT-fs (loop4): Can't find a valid FAT filesystem [ 55.688634][ T4567] loop0: detected capacity change from 0 to 8192 [ 55.696392][ T4567] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 55.711310][ T4572] loop5: detected capacity change from 0 to 512 [ 55.722768][ T4572] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 55.758148][ T4572] EXT4-fs (loop5): 1 truncate cleaned up [ 55.786750][ T4572] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.804995][ T4581] loop0: detected capacity change from 0 to 128 [ 55.827161][ T3851] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.868601][ T4581] syz.0.388: attempt to access beyond end of device [ 55.868601][ T4581] loop0: rw=0, sector=121, nr_sectors = 920 limit=128 [ 56.120809][ T4593] loop0: detected capacity change from 0 to 2048 [ 56.128021][ T4593] EXT4-fs: Ignoring removed mblk_io_submit option [ 56.166572][ T4593] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.237941][ T4593] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.394: bg 0: block 234: padding at end of block bitmap is not set [ 56.252765][ T4593] EXT4-fs (loop0): Remounting filesystem read-only [ 56.307516][ T4593] syz.0.394 (4593) used greatest stack depth: 9968 bytes left [ 56.390237][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.244552][ T4625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.265524][ T4625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.305410][ T4625] ref_ctr_offset mismatch. inode: 0x1ce offset: 0x0 ref_ctr_offset(old): 0x100 ref_ctr_offset(new): 0x0 [ 57.424979][ T4627] netlink: 24 bytes leftover after parsing attributes in process `syz.3.407'. [ 57.447923][ T4627] netlink: 'syz.3.407': attribute type 1 has an invalid length. [ 57.455838][ T4627] netlink: 'syz.3.407': attribute type 2 has an invalid length. [ 57.463556][ T4627] netlink: 24 bytes leftover after parsing attributes in process `syz.3.407'. [ 57.717052][ T4643] vhci_hcd vhci_hcd.4: invalid port number 254 [ 58.265158][ T4689] IPv6: A: Disabled Multicast RS [ 61.126998][ T4686] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 61.209177][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 61.209192][ T29] audit: type=1400 audit(1769827755.662:501): avc: denied { allowed } for pid=4747 comm="syz.3.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 61.302717][ T29] audit: type=1326 audit(1769827755.752:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4755 comm="syz.5.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72dcbaeb9 code=0x7ffc0000 [ 61.325990][ T29] audit: type=1326 audit(1769827755.752:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4755 comm="syz.5.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72dcbaeb9 code=0x7ffc0000 [ 61.349439][ T29] audit: type=1326 audit(1769827755.752:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4755 comm="syz.5.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff72dcbaeb9 code=0x7ffc0000 [ 61.372711][ T29] audit: type=1326 audit(1769827755.752:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4755 comm="syz.5.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72dcbaeb9 code=0x7ffc0000 [ 61.396005][ T29] audit: type=1326 audit(1769827755.752:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4755 comm="syz.5.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72dcbaeb9 code=0x7ffc0000 [ 61.419376][ T29] audit: type=1326 audit(1769827755.752:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4755 comm="syz.5.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff72dcbaeb9 code=0x7ffc0000 [ 61.442665][ T29] audit: type=1326 audit(1769827755.752:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4755 comm="syz.5.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72dcbaeb9 code=0x7ffc0000 [ 61.466045][ T29] audit: type=1326 audit(1769827755.752:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4755 comm="syz.5.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72dcbaeb9 code=0x7ffc0000 [ 61.528226][ T29] audit: type=1326 audit(1769827755.812:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4755 comm="syz.5.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7ff72dcbaeb9 code=0x7ffc0000 [ 61.597374][ T4764] loop3: detected capacity change from 0 to 256 [ 61.620474][ T4764] FAT-fs (loop3): codepage cp950 not found [ 61.907326][ T4805] loop4: detected capacity change from 0 to 512 [ 61.942462][ T4805] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 61.960152][ T4807] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 61.983101][ T4809] netlink: 'syz.5.459': attribute type 9 has an invalid length. [ 61.985391][ T4805] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.990768][ T4809] netlink: 4 bytes leftover after parsing attributes in process `syz.5.459'. [ 62.016274][ T4805] ext4 filesystem being mounted at /93/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 62.021168][ T4809] netlink: 'syz.5.459': attribute type 9 has an invalid length. [ 62.026533][ T53] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.034245][ T4809] netlink: 4 bytes leftover after parsing attributes in process `syz.5.459'. [ 62.043105][ T53] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.060637][ T53] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.069841][ T53] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.079856][ T4805] EXT4-fs (loop4): shut down requested (2) [ 62.116634][ T4816] loop3: detected capacity change from 0 to 1024 [ 62.133094][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.166755][ T4816] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.196979][ T4816] netlink: 104 bytes leftover after parsing attributes in process `syz.3.461'. [ 62.228573][ T4822] loop4: detected capacity change from 0 to 512 [ 62.256722][ T4822] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 62.304511][ T4822] netlink: 24 bytes leftover after parsing attributes in process `syz.4.462'. [ 62.331365][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.390717][ T4835] loop3: detected capacity change from 0 to 256 [ 62.408610][ T4835] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 62.424255][ T4835] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 63.591429][ T4896] loop1: detected capacity change from 0 to 1024 [ 63.897810][ T4912] netlink: 104 bytes leftover after parsing attributes in process `syz.3.502'. [ 63.913139][ T4912] netlink: 104 bytes leftover after parsing attributes in process `syz.3.502'. [ 63.989145][ T4920] loop3: detected capacity change from 0 to 2048 [ 64.018004][ T4920] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.127522][ T4923] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 64.152467][ T4923] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 128 with error 28 [ 64.164935][ T4923] EXT4-fs (loop3): This should not happen!! Data will be lost [ 64.164935][ T4923] [ 64.174630][ T4923] EXT4-fs (loop3): Total free blocks count 0 [ 64.180666][ T4923] EXT4-fs (loop3): Free/Dirty block details [ 64.186612][ T4923] EXT4-fs (loop3): free_blocks=2415919504 [ 64.192448][ T4923] EXT4-fs (loop3): dirty_blocks=128 [ 64.197684][ T4923] EXT4-fs (loop3): Block reservation details [ 64.203710][ T4923] EXT4-fs (loop3): i_reserved_data_blocks=8 [ 64.637025][ T4929] loop5: detected capacity change from 0 to 512 [ 64.679484][ T4929] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 64.752029][ T4929] EXT4-fs (loop5): 1 truncate cleaned up [ 64.802648][ T4929] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.900058][ T52] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 128 with max blocks 2048 with error 28 [ 64.926902][ T4939] netlink: 24 bytes leftover after parsing attributes in process `syz.1.514'. [ 65.007398][ T3851] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.012734][ T4939] netlink: 24 bytes leftover after parsing attributes in process `syz.1.514'. [ 65.197217][ T4954] loop5: detected capacity change from 0 to 512 [ 65.258549][ T4954] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.521: bg 0: block 393: padding at end of block bitmap is not set [ 65.302482][ T4954] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 65.325691][ T4954] EXT4-fs (loop5): 2 truncates cleaned up [ 65.332099][ T4954] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.366404][ T4964] netlink: 48 bytes leftover after parsing attributes in process `syz.1.525'. [ 65.392863][ T4966] loop4: detected capacity change from 0 to 1024 [ 65.399319][ T4954] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.5.521: path /63/file0/file0: bad entry in directory: directory entry overrun - offset=196864, inode=4278190093, rec_len=196860, size=60 fake=0 [ 65.454101][ T4966] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.473099][ T3851] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.565458][ T4975] netlink: 20 bytes leftover after parsing attributes in process `syz.5.528'. [ 65.600896][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.722194][ T4985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.731866][ T4985] syz.4.533 (4985) used greatest stack depth: 9272 bytes left [ 66.263526][ T5007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.543'. [ 66.272467][ T5007] netlink: 20 bytes leftover after parsing attributes in process `syz.4.543'. [ 66.431868][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 66.431895][ T29] audit: type=1400 audit(1769827760.882:563): avc: denied { create } for pid=5014 comm="syz.4.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 66.475358][ T29] audit: type=1400 audit(1769827760.932:564): avc: denied { listen } for pid=5016 comm="syz.3.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 66.511565][ T29] audit: type=1400 audit(1769827760.932:565): avc: denied { accept } for pid=5016 comm="syz.3.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 66.539993][ T29] audit: type=1400 audit(1769827760.992:566): avc: denied { ioctl } for pid=5018 comm="syz.4.548" path="socket:[9684]" dev="sockfs" ino=9684 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 66.606123][ T5021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.549'. [ 66.630722][ T5021] ip6gre1: entered promiscuous mode [ 66.636070][ T5021] ip6gre1: entered allmulticast mode [ 66.669145][ T29] audit: type=1400 audit(1769827761.122:567): avc: denied { setopt } for pid=5027 comm="syz.5.552" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 66.684675][ T53] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 66.691911][ T29] audit: type=1400 audit(1769827761.142:568): avc: denied { write } for pid=5027 comm="syz.5.552" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 66.697556][ T53] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 66.720748][ T5032] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 66.727039][ T3394] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 66.752915][ T5030] netlink: 'syz.1.554': attribute type 83 has an invalid length. [ 66.790852][ T5037] loop3: detected capacity change from 0 to 512 [ 66.804042][ T5037] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 66.832329][ T29] audit: type=1326 audit(1769827761.212:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5028 comm="syz.4.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f223830aeb9 code=0x7ffc0000 [ 66.855605][ T29] audit: type=1326 audit(1769827761.212:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5028 comm="syz.4.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f223830aeb9 code=0x7ffc0000 [ 66.878996][ T29] audit: type=1326 audit(1769827761.222:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5028 comm="syz.4.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f223830aeb9 code=0x7ffc0000 [ 66.902343][ T29] audit: type=1326 audit(1769827761.262:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5028 comm="syz.4.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f223830aeb9 code=0x7ffc0000 [ 66.941781][ T5037] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.556: bad orphan inode 13 [ 66.985600][ T5037] ext4_test_bit(bit=12, block=18) = 1 [ 66.991015][ T5037] is_bad_inode(inode)=0 [ 66.995222][ T5037] NEXT_ORPHAN(inode)=0 [ 66.999306][ T5037] max_ino=32 [ 67.002600][ T5037] i_nlink=1 [ 67.033431][ T5037] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 67.112611][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 67.182331][ T3401] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 67.464873][ T5065] loop5: detected capacity change from 0 to 512 [ 67.482275][ T5065] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 67.499727][ T5065] EXT4-fs (loop5): invalid journal inode [ 67.512332][ T5065] EXT4-fs (loop5): can't get journal size [ 67.521853][ T5065] EXT4-fs (loop5): 1 truncate cleaned up [ 67.625507][ T5074] netlink: 'syz.1.570': attribute type 1 has an invalid length. [ 67.663464][ T5074] 8021q: adding VLAN 0 to HW filter on device bond2 [ 67.742485][ T3401] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 68.197269][ T1596] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.279367][ T1596] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.382842][ T5102] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 68.426690][ T1596] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.506352][ T1596] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.647452][ T5123] sctp: [Deprecated]: syz.3.587 (pid 5123) Use of int in max_burst socket option deprecated. [ 68.647452][ T5123] Use struct sctp_assoc_value instead [ 68.692300][ T5104] chnl_net:caif_netlink_parms(): no params data found [ 68.702190][ T1596] bridge_slave_1: left allmulticast mode [ 68.707927][ T1596] bridge_slave_1: left promiscuous mode [ 68.713610][ T1596] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.722881][ T1596] bridge_slave_0: left allmulticast mode [ 68.728620][ T1596] bridge_slave_0: left promiscuous mode [ 68.734355][ T1596] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.914073][ T1596] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 68.922784][ T1596] bridge1 (unregistering): left promiscuous mode [ 68.975063][ T1596] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 68.990802][ T1596] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.002870][ T1596] bond0 (unregistering): Released all slaves [ 69.013390][ T1596] bond1 (unregistering): Released all slaves [ 69.023327][ T1596] bond2 (unregistering): Released all slaves [ 69.086984][ T1596] hsr_slave_0: left promiscuous mode [ 69.106774][ T1596] hsr_slave_1: left promiscuous mode [ 69.113425][ T1596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.120906][ T1596] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.148685][ T1596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.156144][ T1596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.184248][ T1596] veth1_macvtap: left promiscuous mode [ 69.196371][ T1596] veth0_macvtap: left promiscuous mode [ 69.207371][ T1596] veth1_vlan: left promiscuous mode [ 69.234488][ T1596] veth0_vlan: left promiscuous mode [ 69.415485][ T5151] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 69.445477][ T1596] team0 (unregistering): Port device team_slave_1 removed [ 69.468396][ T1596] team0 (unregistering): Port device team_slave_0 removed [ 69.625034][ T5104] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.632308][ T5104] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.649777][ T5104] bridge_slave_0: entered allmulticast mode [ 69.666582][ T5104] bridge_slave_0: entered promiscuous mode [ 69.673708][ T5104] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.680799][ T5104] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.688279][ T5104] bridge_slave_1: entered allmulticast mode [ 69.694873][ T5104] bridge_slave_1: entered promiscuous mode [ 69.713105][ T5104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.723580][ T5104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.743142][ T5104] team0: Port device team_slave_0 added [ 69.749641][ T5104] team0: Port device team_slave_1 added [ 69.809481][ T5104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.816581][ T5104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.842616][ T5104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.859445][ T5104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.866506][ T5104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.892529][ T5104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.946992][ T5178] loop5: detected capacity change from 0 to 128 [ 70.012531][ T5104] hsr_slave_0: entered promiscuous mode [ 70.034520][ T5104] hsr_slave_1: entered promiscuous mode [ 70.075635][ T5104] debugfs: 'hsr0' already exists in 'hsr' [ 70.081399][ T5104] Cannot create hsr debugfs directory [ 70.288697][ T5210] loop4: detected capacity change from 0 to 512 [ 70.309265][ T5210] EXT4-fs: Ignoring removed mblk_io_submit option [ 70.369026][ T5104] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 70.372459][ T5210] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 70.396617][ T5104] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 70.403931][ T5210] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e028, mo2=0002] [ 70.421346][ T5104] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 70.430764][ T5210] EXT4-fs (loop4): orphan cleanup on readonly fs [ 70.447695][ T5104] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 70.455689][ T5210] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.611: bg 0: block 361: padding at end of block bitmap is not set [ 70.474476][ T5210] EXT4-fs (loop4): Remounting filesystem read-only [ 70.482695][ T5210] EXT4-fs (loop4): 1 truncate cleaned up [ 70.491395][ T5210] EXT4-fs mount: 2 callbacks suppressed [ 70.491422][ T5210] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 70.529065][ T5104] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.536933][ T5104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.544967][ T5104] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.552866][ T5104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.571722][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 70.605907][ T5104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.632641][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.642331][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.681830][ T5233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.614'. [ 70.701261][ T5104] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.730518][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.737704][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.760970][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.768209][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.818729][ T5104] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.829198][ T5104] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.862426][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 70.987352][ T5104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.089765][ T3677] kernel write not supported for file bpf-prog (pid: 3677 comm: kworker/1:4) [ 71.307693][ T5104] veth0_vlan: entered promiscuous mode [ 71.378672][ T5104] veth1_vlan: entered promiscuous mode [ 71.412365][ T5104] veth0_macvtap: entered promiscuous mode [ 71.456396][ T5104] veth1_macvtap: entered promiscuous mode [ 71.489271][ T5104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.516357][ T5104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.541707][ T1596] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.580883][ T1596] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.599771][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 71.599800][ T29] audit: type=1400 audit(1769827766.052:596): avc: denied { mounton } for pid=5104 comm="syz-executor" path="/root/syzkaller.vr6Krp/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=11104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 71.642345][ T1596] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.661616][ T1596] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.928809][ T5238] syz.4.615 (5238) used greatest stack depth: 6208 bytes left [ 72.220160][ T5316] netlink: 20 bytes leftover after parsing attributes in process `syz.4.632'. [ 72.229161][ T5316] netlink: 20 bytes leftover after parsing attributes in process `syz.4.632'. [ 72.502936][ T5328] batadv0: entered promiscuous mode [ 72.533568][ T5328] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 72.602298][ T29] audit: type=1400 audit(1769827767.052:597): avc: denied { mount } for pid=5333 comm="syz.6.640" name="/" dev="autofs" ino=11218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 72.702324][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.801522][ T29] audit: type=1400 audit(1769827767.252:598): avc: denied { write } for pid=5357 comm="syz.6.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 72.880816][ T5362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.902670][ T5362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.047173][ T29] audit: type=1326 audit(1769827767.502:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5368 comm="syz.6.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e6a3aeb9 code=0x7ffc0000 [ 73.070516][ T29] audit: type=1326 audit(1769827767.502:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5368 comm="syz.6.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e6a3aeb9 code=0x7ffc0000 [ 73.093821][ T29] audit: type=1326 audit(1769827767.502:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5368 comm="syz.6.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e6a3aeb9 code=0x7ffc0000 [ 73.117572][ T29] audit: type=1326 audit(1769827767.502:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5368 comm="syz.6.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f64e6a3aeb9 code=0x7ffc0000 [ 73.142009][ T29] audit: type=1326 audit(1769827767.502:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5368 comm="syz.6.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e6a3aeb9 code=0x7ffc0000 [ 73.165372][ T29] audit: type=1326 audit(1769827767.502:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5368 comm="syz.6.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e6a3aeb9 code=0x7ffc0000 [ 73.188729][ T29] audit: type=1326 audit(1769827767.502:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5368 comm="syz.6.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e6a3aeb9 code=0x7ffc0000 [ 73.431686][ T3315] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 73.442744][ T3315] CPU: 0 UID: 0 PID: 3315 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 73.442850][ T3315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 73.442871][ T3315] Call Trace: [ 73.442882][ T3315] [ 73.442891][ T3315] __dump_stack+0x1d/0x30 [ 73.442917][ T3315] dump_stack_lvl+0x95/0xd0 [ 73.442968][ T3315] dump_stack+0x15/0x1b [ 73.442993][ T3315] dump_header+0x80/0x240 [ 73.443018][ T3315] oom_kill_process+0x295/0x350 [ 73.443082][ T3315] out_of_memory+0x97d/0xb80 [ 73.443105][ T3315] try_charge_memcg+0x62e/0xa10 [ 73.443161][ T3315] __mem_cgroup_charge+0x65/0x150 [ 73.443242][ T3315] filemap_add_folio+0x110/0x350 [ 73.443273][ T3315] __filemap_get_folio_mpol+0x326/0x680 [ 73.443348][ T3315] filemap_fault+0x473/0xbb0 [ 73.443375][ T3315] ? css_rstat_updated+0xbb/0x280 [ 73.443421][ T3315] __do_fault+0xbc/0x200 [ 73.443445][ T3315] handle_mm_fault+0x11d7/0x3030 [ 73.443492][ T3315] ? vma_start_read+0x1c7/0x2c0 [ 73.443521][ T3315] do_user_addr_fault+0x62f/0x1050 [ 73.443572][ T3315] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 73.443599][ T3315] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 73.443646][ T3315] ? irqentry_exit+0x3c/0x510 [ 73.443674][ T3315] exc_page_fault+0x62/0xa0 [ 73.443695][ T3315] asm_exc_page_fault+0x26/0x30 [ 73.443728][ T3315] RIP: 0033:0x7f1e195d8fb4 [ 73.443752][ T3315] Code: 85 62 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 00 c8 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 c6 ed 00 48 01 d1 [ 73.443775][ T3315] RSP: 002b:00007ffede331f70 EFLAGS: 00010206 [ 73.443794][ T3315] RAX: 0000001b33b24000 RBX: 0000000000000111 RCX: 0000000000011d28 [ 73.443861][ T3315] RDX: 00000000055662ca RSI: 00007ffede332000 RDI: 0000000000000001 [ 73.443877][ T3315] RBP: 00007ffede331fac R08: 00000000145c593d R09: 7fffffffffffffff [ 73.443895][ T3315] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 73.443911][ T3315] R13: 00000000000927c0 R14: 0000000000011d00 R15: 00007ffede332000 [ 73.443934][ T3315] [ 73.443942][ T3315] memory: usage 307200kB, limit 307200kB, failcnt 2074 [ 73.653168][ T3315] memory+swap: usage 307708kB, limit 9007199254740988kB, failcnt 0 [ 73.661091][ T3315] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 73.668461][ T3315] Memory cgroup stats for /syz3: [ 73.737422][ T3315] cache 524288 [ 73.745927][ T3315] rss 106496 [ 73.749153][ T3315] shmem 0 [ 73.752128][ T3315] mapped_file 0 [ 73.755684][ T3315] dirty 0 [ 73.758642][ T3315] writeback 0 [ 73.761942][ T3315] workingset_refault_anon 52 [ 73.766752][ T3315] workingset_refault_file 257 [ 73.771550][ T3315] swap 405504 [ 73.774923][ T3315] swapcached 110592 [ 73.778745][ T3315] pgpgin 40295 [ 73.782134][ T3315] pgpgout 40137 [ 73.785652][ T3315] pgfault 30388 [ 73.789131][ T3315] pgmajfault 49 [ 73.792629][ T3315] inactive_anon 0 [ 73.796283][ T3315] active_anon 118784 [ 73.800196][ T3315] inactive_file 0 [ 73.803886][ T3315] active_file 524288 [ 73.807811][ T3315] unevictable 0 [ 73.811316][ T3315] hierarchical_memory_limit 314572800 [ 73.816857][ T3315] hierarchical_memsw_limit 9223372036854771712 [ 73.823053][ T3315] total_cache 524288 [ 73.826967][ T3315] total_rss 106496 [ 73.830837][ T3315] total_shmem 0 [ 73.834358][ T3315] total_mapped_file 0 [ 73.838351][ T3315] total_dirty 0 [ 73.841892][ T3315] total_writeback 0 [ 73.845989][ T3315] total_workingset_refault_anon 52 [ 73.851131][ T3315] total_workingset_refault_file 257 [ 73.856508][ T3315] total_swap 405504 [ 73.860327][ T3315] total_swapcached 110592 [ 73.864743][ T3315] total_pgpgin 40295 [ 73.868658][ T3315] total_pgpgout 40137 [ 73.872684][ T3315] total_pgfault 30388 [ 73.876765][ T3315] total_pgmajfault 49 [ 73.880770][ T3315] total_inactive_anon 0 [ 73.885010][ T3315] total_active_anon 118784 [ 73.889439][ T3315] total_inactive_file 0 [ 73.893728][ T3315] total_active_file 524288 [ 73.898159][ T3315] total_unevictable 0 [ 73.902185][ T3315] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.446,pid=4785,uid=0 [ 73.917031][ T3315] Memory cgroup out of memory: Killed process 4785 (syz.3.446) total-vm:94000kB, anon-rss:1240kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 74.025149][ T5391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.662'. [ 74.033996][ T5391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.662'. [ 74.101042][ T5391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.662'. [ 74.101431][ T53] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.109881][ T5391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.662'. [ 74.128031][ T5400] netlink: 8 bytes leftover after parsing attributes in process `syz.5.665'. [ 74.136935][ T5400] netlink: 12 bytes leftover after parsing attributes in process `syz.5.665'. [ 74.149323][ T5400] geneve2: entered promiscuous mode [ 74.154688][ T5400] geneve2: entered allmulticast mode [ 74.167876][ T1596] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.178195][ T1596] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.226050][ T53] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.248830][ T53] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.264448][ T5406] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 74.279950][ T1596] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.290450][ T1596] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.340091][ T53] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.409787][ T1596] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.420208][ T1596] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.551549][ T1596] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.562000][ T1596] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.613627][ T5390] chnl_net:caif_netlink_parms(): no params data found [ 74.696666][ T10] IPVS: starting estimator thread 0... [ 74.779307][ T5390] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.786478][ T5390] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.793750][ T5443] IPVS: using max 2448 ests per chain, 122400 per kthread [ 74.801572][ T5390] bridge_slave_0: entered allmulticast mode [ 74.808568][ T5390] bridge_slave_0: entered promiscuous mode [ 74.818842][ T1596] bridge_slave_1: left allmulticast mode [ 74.824545][ T1596] bridge_slave_1: left promiscuous mode [ 74.830376][ T1596] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.842514][ T5459] netlink: 4 bytes leftover after parsing attributes in process `syz.6.681'. [ 74.851333][ T5459] netlink: 'syz.6.681': attribute type 15 has an invalid length. [ 74.859180][ T5459] netlink: 'syz.6.681': attribute type 18 has an invalid length. [ 74.877618][ T1596] bridge_slave_0: left allmulticast mode [ 74.883428][ T1596] bridge_slave_0: left promiscuous mode [ 74.889135][ T1596] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.031404][ T1596] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.048984][ T1596] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.061730][ T1596] bond0 (unregistering): Released all slaves [ 75.079781][ T1596] bond1 (unregistering): Released all slaves [ 75.094447][ T5390] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.101551][ T5390] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.109747][ T5390] bridge_slave_1: entered allmulticast mode [ 75.116454][ T5390] bridge_slave_1: entered promiscuous mode [ 75.137606][ T5459] vxlan0: entered promiscuous mode [ 75.156044][ T1596] hsr_slave_0: left promiscuous mode [ 75.162313][ T1596] hsr_slave_1: left promiscuous mode [ 75.168038][ T1596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.175732][ T1596] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.184674][ T1596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.192097][ T1596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.203526][ T1596] veth1_macvtap: left promiscuous mode [ 75.209119][ T1596] veth0_macvtap: left promiscuous mode [ 75.214889][ T1596] veth1_vlan: left promiscuous mode [ 75.220251][ T1596] veth0_vlan: left promiscuous mode [ 75.228793][ T5494] netlink: 'syz.4.692': attribute type 1 has an invalid length. [ 75.311164][ T1596] team0 (unregistering): Port device team_slave_1 removed [ 75.321191][ T1596] team0 (unregistering): Port device team_slave_0 removed [ 75.356037][ T3432] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.385745][ T5494] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.400272][ T5498] bond1: (slave geneve2): making interface the new active one [ 75.409299][ T5498] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 75.418076][ T3432] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.428852][ T5390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.448830][ T3432] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.458926][ T5390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.492746][ T3432] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.508153][ T5390] team0: Port device team_slave_0 added [ 75.514925][ T5390] team0: Port device team_slave_1 added [ 75.530542][ T5390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.537583][ T5390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.563531][ T5390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.574953][ T5390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.582019][ T5390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.608026][ T5390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.663898][ T5390] hsr_slave_0: entered promiscuous mode [ 75.670143][ T5390] hsr_slave_1: entered promiscuous mode [ 75.866424][ T5390] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 75.884711][ T5390] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 75.903828][ T5550] __nla_validate_parse: 1 callbacks suppressed [ 75.903845][ T5550] netlink: 24 bytes leftover after parsing attributes in process `syz.4.708'. [ 75.930356][ T5390] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 75.940765][ T5548] loop6: detected capacity change from 0 to 256 [ 75.949727][ T5390] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 75.952546][ T5550] netlink: 24 bytes leftover after parsing attributes in process `syz.4.708'. [ 76.098442][ T5390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.165109][ T5390] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.180372][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.187701][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.204771][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.211877][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.243222][ T5390] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 76.253669][ T5390] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.392805][ T5390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.554372][ T5627] loop6: detected capacity change from 0 to 1024 [ 76.568963][ T5627] EXT4-fs: Ignoring removed orlov option [ 76.591894][ T5627] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.604077][ T29] kauditd_printk_skb: 420 callbacks suppressed [ 76.604092][ T29] audit: type=1326 audit(1769827771.042:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5531 comm="syz.3.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1e196cb78e code=0x7ffc0000 [ 76.642739][ T29] audit: type=1326 audit(1769827771.062:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5531 comm="syz.3.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1e1970aeb9 code=0x7ffc0000 [ 76.717540][ T5104] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.740671][ T5390] veth0_vlan: entered promiscuous mode [ 76.755114][ T5390] veth1_vlan: entered promiscuous mode [ 76.775963][ T5390] veth0_macvtap: entered promiscuous mode [ 76.784188][ T5390] veth1_macvtap: entered promiscuous mode [ 76.806665][ T5390] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.828425][ T5390] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.863462][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.885898][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.895540][ T29] audit: type=1400 audit(1769827771.352:1028): avc: denied { mount } for pid=5390 comm="syz-executor" name="/" dev="gadgetfs" ino=3599 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 76.898551][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.935357][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.018789][ T29] audit: type=1400 audit(1769827771.472:1029): avc: denied { listen } for pid=5666 comm="syz.7.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 77.133061][ T5680] loop6: detected capacity change from 0 to 2048 [ 77.192750][ T3305] loop6: p1 < > p4 [ 77.202592][ T3305] loop6: p4 size 8388608 extends beyond EOD, truncated [ 77.247271][ T5680] loop6: p1 < > p4 [ 77.268774][ T5680] loop6: p4 size 8388608 extends beyond EOD, truncated [ 77.302600][ T3001] loop6: p1 < > p4 [ 77.307129][ T3001] loop6: p4 size 8388608 extends beyond EOD, truncated [ 77.450085][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 77.455484][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 77.508308][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 77.510310][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 77.913748][ T5745] loop6: detected capacity change from 0 to 128 [ 77.927570][ T5745] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 77.943906][ T5745] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 77.962505][ T5745] ext2 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.002366][ T5104] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 78.053946][ T29] audit: type=1326 audit(1769827772.512:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5753 comm="syz.6.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e6a3aeb9 code=0x7ffc0000 [ 78.077551][ T29] audit: type=1326 audit(1769827772.512:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5753 comm="syz.6.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e6a3aeb9 code=0x7ffc0000 [ 78.105860][ T29] audit: type=1326 audit(1769827772.512:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5753 comm="syz.6.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f64e6a3aeb9 code=0x7ffc0000 [ 78.129297][ T29] audit: type=1326 audit(1769827772.532:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5753 comm="syz.6.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e6a3aeb9 code=0x7ffc0000 [ 78.152729][ T29] audit: type=1326 audit(1769827772.532:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5753 comm="syz.6.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e6a3aeb9 code=0x7ffc0000 [ 78.176172][ T29] audit: type=1326 audit(1769827772.532:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5753 comm="syz.6.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f64e6a3aeb9 code=0x7ffc0000 [ 78.262309][ T5767] netlink: 'syz.7.777': attribute type 1 has an invalid length. [ 78.448483][ T5787] netlink: 24 bytes leftover after parsing attributes in process `syz.7.786'. [ 78.527410][ T5779] loop4: detected capacity change from 0 to 512 [ 78.550361][ T5779] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 78.565762][ T5791] loop6: detected capacity change from 0 to 512 [ 78.587678][ T5791] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 78.599400][ T5791] EXT4-fs (loop6): 1 truncate cleaned up [ 78.605738][ T5791] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.896641][ T5104] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.968635][ T5821] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.998023][ T5826] netlink: 28 bytes leftover after parsing attributes in process `syz.6.805'. [ 79.007064][ T5826] netlink: 'syz.6.805': attribute type 7 has an invalid length. [ 79.014779][ T5826] netlink: 'syz.6.805': attribute type 8 has an invalid length. [ 79.022470][ T5826] netlink: 4 bytes leftover after parsing attributes in process `syz.6.805'. [ 79.040587][ T5826] erspan0: entered promiscuous mode [ 79.049411][ T5826] gretap0: entered promiscuous mode [ 79.102287][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 79.108763][ T5834] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.807'. [ 79.148672][ T5839] Falling back ldisc for ttyS3. [ 79.302180][ T5841] ================================================================== [ 79.310398][ T5841] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 79.318235][ T5841] [ 79.320558][ T5841] write to 0xffffea00042d7658 of 8 bytes by task 5845 on cpu 0: [ 79.328213][ T5841] __filemap_remove_folio+0x201/0x300 [ 79.333607][ T5841] filemap_remove_folio+0x6d/0x1d0 [ 79.338720][ T5841] truncate_inode_folio+0x42/0x50 [ 79.343750][ T5841] shmem_undo_range+0x273/0xad0 [ 79.348608][ T5841] shmem_fallocate+0x881/0x920 [ 79.353413][ T5841] vfs_fallocate+0x3b6/0x450 [ 79.358031][ T5841] __x64_sys_fallocate+0x7a/0xd0 [ 79.362979][ T5841] x64_sys_call+0x1cd4/0x3000 [ 79.367676][ T5841] do_syscall_64+0xc0/0x2a0 [ 79.372223][ T5841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.378160][ T5841] [ 79.380510][ T5841] read to 0xffffea00042d7658 of 8 bytes by task 5841 on cpu 1: [ 79.388086][ T5841] folio_mapping+0xa1/0xe0 [ 79.392557][ T5841] evict_folios+0x2b67/0x35b0 [ 79.397273][ T5841] try_to_shrink_lruvec+0x5f6/0x960 [ 79.402488][ T5841] shrink_lruvec+0x24e/0x1bc0 [ 79.407215][ T5841] shrink_node+0x68e/0x2000 [ 79.411733][ T5841] do_try_to_free_pages+0x404/0xcc0 [ 79.416988][ T5841] try_to_free_mem_cgroup_pages+0x222/0x470 [ 79.422897][ T5841] try_charge_memcg+0x37e/0xa10 [ 79.427764][ T5841] obj_cgroup_charge_pages+0x23/0xc0 [ 79.433054][ T5841] __memcg_kmem_charge_page+0x9e/0x170 [ 79.438523][ T5841] __alloc_frozen_pages_noprof+0x18a/0x350 [ 79.444357][ T5841] alloc_pages_mpol+0xb3/0x260 [ 79.449136][ T5841] alloc_pages_noprof+0x8f/0x130 [ 79.454092][ T5841] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 79.460013][ T5841] __kvmalloc_node_noprof+0x471/0x680 [ 79.465410][ T5841] ip_set_alloc+0x24/0x30 [ 79.469757][ T5841] hash_netiface_create+0x282/0x740 [ 79.474982][ T5841] ip_set_create+0x3cf/0x970 [ 79.479584][ T5841] nfnetlink_rcv_msg+0x509/0x5d0 [ 79.484556][ T5841] netlink_rcv_skb+0x123/0x220 [ 79.489341][ T5841] nfnetlink_rcv+0x167/0x1720 [ 79.494080][ T5841] netlink_unicast+0x5c0/0x690 [ 79.498875][ T5841] netlink_sendmsg+0x5c8/0x6f0 [ 79.503646][ T5841] ____sys_sendmsg+0x5af/0x600 [ 79.508461][ T5841] ___sys_sendmsg+0x195/0x1e0 [ 79.513155][ T5841] __x64_sys_sendmsg+0xd4/0x160 [ 79.518006][ T5841] x64_sys_call+0x17ba/0x3000 [ 79.522708][ T5841] do_syscall_64+0xc0/0x2a0 [ 79.527253][ T5841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.533148][ T5841] [ 79.535464][ T5841] value changed: 0xffff88811b3dc1f0 -> 0x0000000000000000 [ 79.542561][ T5841] [ 79.544912][ T5841] Reported by Kernel Concurrency Sanitizer on: [ 79.551091][ T5841] CPU: 1 UID: 0 PID: 5841 Comm: syz.5.811 Not tainted syzkaller #0 PREEMPT(voluntary) [ 79.560741][ T5841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 79.570825][ T5841] ================================================================== [ 79.901471][ T5841] syz.5.811 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 79.915631][ T5841] CPU: 0 UID: 0 PID: 5841 Comm: syz.5.811 Not tainted syzkaller #0 PREEMPT(voluntary) [ 79.915654][ T5841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 79.915710][ T5841] Call Trace: [ 79.915717][ T5841] [ 79.915724][ T5841] __dump_stack+0x1d/0x30 [ 79.915773][ T5841] dump_stack_lvl+0x95/0xd0 [ 79.915827][ T5841] dump_stack+0x15/0x1b [ 79.915851][ T5841] dump_header+0x80/0x240 [ 79.915870][ T5841] oom_kill_process+0x295/0x350 [ 79.915896][ T5841] out_of_memory+0x97d/0xb80 [ 79.915920][ T5841] try_charge_memcg+0x62e/0xa10 [ 79.915951][ T5841] obj_cgroup_charge_pages+0x23/0xc0 [ 79.915987][ T5841] __memcg_kmem_charge_page+0x9e/0x170 [ 79.916045][ T5841] __alloc_frozen_pages_noprof+0x18a/0x350 [ 79.916082][ T5841] alloc_pages_mpol+0xb3/0x260 [ 79.916110][ T5841] alloc_pages_noprof+0x8f/0x130 [ 79.916212][ T5841] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 79.916281][ T5841] __kvmalloc_node_noprof+0x471/0x680 [ 79.916318][ T5841] ? ip_set_alloc+0x24/0x30 [ 79.916422][ T5841] ? ip_set_alloc+0x24/0x30 [ 79.916465][ T5841] ip_set_alloc+0x24/0x30 [ 79.916494][ T5841] hash_netiface_create+0x282/0x740 [ 79.916568][ T5841] ? __pfx_hash_netiface_create+0x10/0x10 [ 79.916605][ T5841] ip_set_create+0x3cf/0x970 [ 79.916640][ T5841] ? __nla_parse+0x40/0x60 [ 79.916743][ T5841] nfnetlink_rcv_msg+0x509/0x5d0 [ 79.916805][ T5841] netlink_rcv_skb+0x123/0x220 [ 79.916846][ T5841] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 79.916933][ T5841] nfnetlink_rcv+0x167/0x1720 [ 79.916973][ T5841] ? __kfree_skb+0x109/0x150 [ 79.917010][ T5841] ? nlmon_xmit+0x4f/0x60 [ 79.917113][ T5841] ? consume_skb+0x49/0x140 [ 79.917146][ T5841] ? nlmon_xmit+0x4f/0x60 [ 79.917200][ T5841] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 79.917251][ T5841] ? __dev_queue_xmit+0x139a/0x1f20 [ 79.917291][ T5841] ? __dev_queue_xmit+0x148/0x1f20 [ 79.917427][ T5841] ? ref_tracker_free+0x37d/0x3e0 [ 79.917475][ T5841] ? __netlink_deliver_tap+0x4dc/0x500 [ 79.917514][ T5841] netlink_unicast+0x5c0/0x690 [ 79.917613][ T5841] netlink_sendmsg+0x5c8/0x6f0 [ 79.917697][ T5841] ? __pfx_netlink_sendmsg+0x10/0x10 [ 79.917725][ T5841] ____sys_sendmsg+0x5af/0x600 [ 79.917766][ T5841] ___sys_sendmsg+0x195/0x1e0 [ 79.917846][ T5841] __x64_sys_sendmsg+0xd4/0x160 [ 79.917934][ T5841] x64_sys_call+0x17ba/0x3000 [ 79.917955][ T5841] do_syscall_64+0xc0/0x2a0 [ 79.918015][ T5841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.918041][ T5841] RIP: 0033:0x7ff72dcbaeb9 [ 79.918061][ T5841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.918131][ T5841] RSP: 002b:00007ff72c717028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 79.918147][ T5841] RAX: ffffffffffffffda RBX: 00007ff72df35fa0 RCX: 00007ff72dcbaeb9 [ 79.918158][ T5841] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 79.918207][ T5841] RBP: 00007ff72dd28c1f R08: 0000000000000000 R09: 0000000000000000 [ 79.918246][ T5841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.918256][ T5841] R13: 00007ff72df36038 R14: 00007ff72df35fa0 R15: 00007ffe94b01d18 [ 79.918328][ T5841] [ 79.918343][ T5841] memory: usage 307200kB, limit 307200kB, failcnt 242 [ 80.238258][ T5841] memory+swap: usage 307496kB, limit 9007199254740988kB, failcnt 0 [ 80.246285][ T5841] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 80.253629][ T5841] Memory cgroup stats for /syz5: [ 80.254246][ T5841] cache 0 [ 80.262184][ T5841] rss 4096 [ 80.265325][ T5841] shmem 0 [ 80.268294][ T5841] mapped_file 0 [ 80.271759][ T5841] dirty 0 [ 80.274746][ T5841] writeback 0 [ 80.278117][ T5841] workingset_refault_anon 606 [ 80.282914][ T5841] workingset_refault_file 0 [ 80.287454][ T5841] swap 303104 [ 80.290831][ T5841] swapcached 8192 [ 80.294534][ T5841] pgpgin 23475 [ 80.297921][ T5841] pgpgout 23473 [ 80.301377][ T5841] pgfault 38267 [ 80.304893][ T5841] pgmajfault 105 [ 80.308471][ T5841] inactive_anon 0 [ 80.312145][ T5841] active_anon 8192 [ 80.315943][ T5841] inactive_file 0 [ 80.319650][ T5841] active_file 0 [ 80.323157][ T5841] unevictable 0 [ 80.326631][ T5841] hierarchical_memory_limit 314572800 [ 80.332177][ T5841] hierarchical_memsw_limit 9223372036854771712 [ 80.338382][ T5841] total_cache 0 [ 80.341929][ T5841] total_rss 4096 [ 80.345515][ T5841] total_shmem 0 [ 80.348993][ T5841] total_mapped_file 0 [ 80.353044][ T5841] total_dirty 0 [ 80.356602][ T5841] total_writeback 0 [ 80.360437][ T5841] total_workingset_refault_anon 606 [ 80.365750][ T5841] total_workingset_refault_file 0 [ 80.370818][ T5841] total_swap 303104 [ 80.374671][ T5841] total_swapcached 8192 [ 80.378906][ T5841] total_pgpgin 23475 [ 80.382932][ T5841] total_pgpgout 23473 [ 80.386997][ T5841] total_pgfault 38267 [ 80.390995][ T5841] total_pgmajfault 105 [ 80.395168][ T5841] total_inactive_anon 0 [ 80.399409][ T5841] total_active_anon 8192 [ 80.403875][ T5841] total_inactive_file 0 [ 80.408044][ T5841] total_active_file 0 [ 80.412013][ T5841] total_unevictable 0 [ 80.416047][ T5841] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.811,pid=5840,uid=0 [ 80.430712][ T5841] Memory cgroup out of memory: Killed process 5840 (syz.5.811) total-vm:94264kB, anon-rss:1204kB, file-rss:22284kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 80.725308][ T5821] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.775196][ T5821] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.815030][ T5821] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.878711][ T52] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.890208][ T52] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.902065][ T52] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.913806][ T52] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0