last executing test programs: 1.888890209s ago: executing program 3 (id=322): unshare(0x2a020400) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1431c2, 0x0) fcntl$getflags(r0, 0x408) 1.858555821s ago: executing program 3 (id=325): r0 = io_uring_setup(0x6001, &(0x7f0000000000)={0x0, 0xeec2, 0x800, 0x2, 0x10a}) close_range(r0, r0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) 1.013359826s ago: executing program 2 (id=366): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='sched\x00') exit(0xffff) write$tun(r0, 0x0, 0x0) 997.328077ms ago: executing program 3 (id=367): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2420005, 0xf, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001d00)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffff, 0x0, 0x2, 0xfffffffe, 0xb84, 0x7, 0x5, 0x0, 0x200000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x0, 0xc74, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x100, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x100, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x800, 0xffffffff, 0x0, 0xffff18e5, 0x0, 0x0, 0xfffff002, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffff, 0x0, 0x201, 0x3, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x4000, 0x20000000, 0x0, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0xffffffff, 0xf, 0xf, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x5, 0x1000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x100000, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x7, 0x0, 0xfffffffc, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xdc, 0x10000000, 0x7fffffff, 0x6, 0xfffffffd, {0x6, 0x2, 0x1, 0x401, 0x1, 0x22}, {0x9a, 0x0, 0x40, 0x5, 0x400}, 0x5, 0x2, 0x81}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x488}}, 0xc0) 925.92597ms ago: executing program 3 (id=371): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) 899.718512ms ago: executing program 3 (id=373): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0xb0, 0x4) 894.641331ms ago: executing program 4 (id=374): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/power/pm_freeze_timeout', 0x121a02, 0xe0) sendfile(r1, r0, 0x0, 0x8) 777.141447ms ago: executing program 4 (id=376): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000060000000800020006000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) 772.159677ms ago: executing program 3 (id=377): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x100000001}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_usb_disconnect(r0) 686.534191ms ago: executing program 4 (id=379): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 670.008761ms ago: executing program 4 (id=380): r0 = memfd_create(&(0x7f0000000580)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xd9\xb5\x00\x00$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xab\x00\xd7pB\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\x00\x00\x00\x00+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEGG\x97&\xef\x8e!}a\xff\xff\x00\x00\x90\xd7;\x12lE\x0es\xb7\xe9$=\xe0\x98E\xdc\x01\x9f\xb7\x10\xe8\x94\xa8\x9c>\x87\xfd\x864\xfaT!\xdb\x98\xaa\xb1\x8b\x99\x8b\x1e\xd2\xcb\xfduaO\x18\xc6\xc0\xb3hv%\v\x941\xdeL\x92-\xba\x10\x96eA\x11\x1a\x11\xf7q\b]\xe7v\'\xcf\xb9b%\xff\xa8\x99L\xa23N*\x1ag\x99\x8e@\x80-E&\x99\b\xebW\x19WG\xb3\x88\x1e<\\g\x1959\xc9\xfb\x91\xa3\xe0bp', 0x4) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0xc71, 0x2}) fallocate(r0, 0x3, 0x8dc, 0xfffffffb) 652.818402ms ago: executing program 4 (id=381): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/zoneinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 317.891736ms ago: executing program 1 (id=392): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, &(0x7f0000000240)) 294.137527ms ago: executing program 1 (id=394): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0500000001ea2f3352c9a24cfb0fe8f3", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="b7eb29"], 0x20000600}}, 0x0) 275.375138ms ago: executing program 1 (id=396): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0xf, 0x1, '/dev/ttyS3\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x84841}, 0x40800) 258.850079ms ago: executing program 1 (id=398): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000ffdbdf250900000064000380080001"], 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 219.71543ms ago: executing program 1 (id=402): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='vm_unmapped_area\x00', r0, 0x0, 0x80}, 0x18) syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x379}, &(0x7f0000000040), &(0x7f0000000080)) 205.097661ms ago: executing program 0 (id=403): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket(0x5, 0x80000, 0x0) 204.527501ms ago: executing program 1 (id=404): setuid(0xee00) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x93c9e418d46bacf1, 0xffffffffffffffff, 0x0) mincore(&(0x7f00005db000/0x2000)=nil, 0x2000, &(0x7f0000000280)=""/194) 181.846332ms ago: executing program 0 (id=405): prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\\\x00') r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x0) 167.344753ms ago: executing program 0 (id=406): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x16, 0xfff3}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x3}}}}]}, 0x40}}, 0x4000000) 163.629403ms ago: executing program 2 (id=407): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000000)=0xa4) 139.710234ms ago: executing program 0 (id=408): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001f80)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) splice(r0, &(0x7f0000001f40)=0x1, r1, 0x0, 0x3, 0x2) 138.930314ms ago: executing program 2 (id=409): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendto$packet(r0, 0x0, 0x0, 0x40, &(0x7f0000000a00)={0x11, 0x4, 0x0, 0x1, 0x47}, 0x14) 115.038585ms ago: executing program 0 (id=410): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4000, 0xfffffffd, @mcast2}, {0xa, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800086}, r1}}, 0x48) 108.382065ms ago: executing program 2 (id=411): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b80000001900010000000000008000002001000000000000000000000000000000000000000000000000000000000001000000000000000002000020"], 0xb8}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, "0bc0f7", 0x0, "de9560"}}}}}}, 0x0) 91.687976ms ago: executing program 2 (id=412): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x6, 0x100000000, 0x6, 0x2d1}) 77.942707ms ago: executing program 0 (id=413): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6, 0x5}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x2, 0x9, 0x8, 0x0, "1c"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x4, @mcast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x9, @empty, 0x6}}]}, 0x80}, 0x1, 0x7}, 0x0) 62.040167ms ago: executing program 4 (id=414): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000090000000000000003000000850000001300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000008c0)="c1dfb080cd21d308098e00008100", 0x0, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 2 (id=415): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x89204, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x9, 0x0, 0x0, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$sg(&(0x7f0000000440), 0xa, 0x241) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000001480)={0x0, 0xd, 0x1a}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.111' (ED25519) to the list of known hosts. [ 22.951863][ T29] audit: type=1400 audit(1763839522.908:62): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.974954][ T29] audit: type=1400 audit(1763839522.928:63): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.975735][ T3303] cgroup: Unknown subsys name 'net' [ 23.002886][ T29] audit: type=1400 audit(1763839522.958:64): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.131651][ T3303] cgroup: Unknown subsys name 'cpuset' [ 23.137709][ T3303] cgroup: Unknown subsys name 'rlimit' [ 23.227512][ T29] audit: type=1400 audit(1763839523.178:65): avc: denied { setattr } for pid=3303 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.251716][ T29] audit: type=1400 audit(1763839523.178:66): avc: denied { create } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 23.272274][ T29] audit: type=1400 audit(1763839523.178:67): avc: denied { write } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.278673][ T3305] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 23.292697][ T29] audit: type=1400 audit(1763839523.178:68): avc: denied { read } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.318128][ T3303] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.321659][ T29] audit: type=1400 audit(1763839523.178:69): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.355171][ T29] audit: type=1400 audit(1763839523.178:70): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.378863][ T29] audit: type=1400 audit(1763839523.258:71): avc: denied { relabelto } for pid=3305 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.066095][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 25.074964][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 25.091840][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 25.142574][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 25.197780][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.204956][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.212228][ T3321] bridge_slave_0: entered allmulticast mode [ 25.218615][ T3321] bridge_slave_0: entered promiscuous mode [ 25.241059][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.248168][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.255475][ T3312] bridge_slave_0: entered allmulticast mode [ 25.261810][ T3312] bridge_slave_0: entered promiscuous mode [ 25.268090][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.275216][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.282410][ T3321] bridge_slave_1: entered allmulticast mode [ 25.288587][ T3321] bridge_slave_1: entered promiscuous mode [ 25.294902][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.301956][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.309009][ T3317] bridge_slave_0: entered allmulticast mode [ 25.315404][ T3317] bridge_slave_0: entered promiscuous mode [ 25.323683][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 25.332074][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.339110][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.346255][ T3312] bridge_slave_1: entered allmulticast mode [ 25.352552][ T3312] bridge_slave_1: entered promiscuous mode [ 25.362763][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.369810][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.376958][ T3317] bridge_slave_1: entered allmulticast mode [ 25.383325][ T3317] bridge_slave_1: entered promiscuous mode [ 25.421936][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.445291][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.457200][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.467510][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.476704][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.483751][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.491018][ T3314] bridge_slave_0: entered allmulticast mode [ 25.497448][ T3314] bridge_slave_0: entered promiscuous mode [ 25.505077][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.514189][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.521241][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.528358][ T3314] bridge_slave_1: entered allmulticast mode [ 25.534797][ T3314] bridge_slave_1: entered promiscuous mode [ 25.552978][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.572608][ T3321] team0: Port device team_slave_0 added [ 25.595265][ T3321] team0: Port device team_slave_1 added [ 25.610258][ T3312] team0: Port device team_slave_0 added [ 25.617325][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.630794][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.637894][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.645240][ T3313] bridge_slave_0: entered allmulticast mode [ 25.651638][ T3313] bridge_slave_0: entered promiscuous mode [ 25.658103][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.665179][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.672449][ T3313] bridge_slave_1: entered allmulticast mode [ 25.678822][ T3313] bridge_slave_1: entered promiscuous mode [ 25.685596][ T3317] team0: Port device team_slave_0 added [ 25.692018][ T3312] team0: Port device team_slave_1 added [ 25.698465][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.717463][ T3317] team0: Port device team_slave_1 added [ 25.733333][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.740307][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.766288][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.796202][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.803170][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.829058][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.840931][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.857855][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.864967][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.891008][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.902328][ T3314] team0: Port device team_slave_0 added [ 25.908154][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.915102][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.941048][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.952926][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.959867][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.985993][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.997522][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.007402][ T3314] team0: Port device team_slave_1 added [ 26.025357][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.032329][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.058375][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.096176][ T3313] team0: Port device team_slave_0 added [ 26.103062][ T3313] team0: Port device team_slave_1 added [ 26.113546][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.120559][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.146458][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.160308][ T3321] hsr_slave_0: entered promiscuous mode [ 26.166518][ T3321] hsr_slave_1: entered promiscuous mode [ 26.186375][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.193342][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.219246][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.230251][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.237217][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.263090][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.287430][ T3312] hsr_slave_0: entered promiscuous mode [ 26.293442][ T3312] hsr_slave_1: entered promiscuous mode [ 26.299139][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 26.304886][ T3312] Cannot create hsr debugfs directory [ 26.315333][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.322302][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.348241][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.374145][ T3317] hsr_slave_0: entered promiscuous mode [ 26.380268][ T3317] hsr_slave_1: entered promiscuous mode [ 26.386114][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 26.391870][ T3317] Cannot create hsr debugfs directory [ 26.413899][ T3313] hsr_slave_0: entered promiscuous mode [ 26.419857][ T3313] hsr_slave_1: entered promiscuous mode [ 26.425660][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 26.431410][ T3313] Cannot create hsr debugfs directory [ 26.466915][ T3314] hsr_slave_0: entered promiscuous mode [ 26.472802][ T3314] hsr_slave_1: entered promiscuous mode [ 26.478560][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 26.484309][ T3314] Cannot create hsr debugfs directory [ 26.641497][ T3313] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 26.652577][ T3313] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 26.661013][ T3313] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 26.671842][ T3313] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 26.692207][ T3321] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 26.715952][ T3321] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 26.725067][ T3321] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 26.734014][ T3314] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 26.742901][ T3321] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 26.755840][ T3314] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 26.766917][ T3314] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 26.776501][ T3314] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 26.810788][ T3312] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 26.824634][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.833401][ T3312] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 26.843038][ T3312] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 26.857269][ T3312] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 26.880085][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.891649][ T3317] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 26.909777][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.917230][ T3317] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 26.925715][ T3317] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 26.936018][ T124] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.943192][ T124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.951944][ T124] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.958980][ T124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.971757][ T3317] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 26.995980][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.012403][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.019492][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.047194][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.054401][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.078956][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.109134][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.120210][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.136308][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.151903][ T124] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.159025][ T124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.168575][ T124] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.175669][ T124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.187481][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.201745][ T124] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.208905][ T124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.231816][ T124] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.238960][ T124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.256169][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.278822][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.295584][ T3314] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 27.306020][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.336307][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.350240][ T3313] veth0_vlan: entered promiscuous mode [ 27.368097][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.384618][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.391704][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.400516][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.407646][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.439836][ T3313] veth1_vlan: entered promiscuous mode [ 27.486444][ T3313] veth0_macvtap: entered promiscuous mode [ 27.498386][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.511838][ T3313] veth1_macvtap: entered promiscuous mode [ 27.528314][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.543621][ T3321] veth0_vlan: entered promiscuous mode [ 27.550768][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.564078][ T3321] veth1_vlan: entered promiscuous mode [ 27.573001][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.590804][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.610019][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.618973][ T3312] veth0_vlan: entered promiscuous mode [ 27.628561][ T3312] veth1_vlan: entered promiscuous mode [ 27.638658][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.648436][ T3321] veth0_macvtap: entered promiscuous mode [ 27.661375][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.684053][ T3321] veth1_macvtap: entered promiscuous mode [ 27.699343][ T3314] veth0_vlan: entered promiscuous mode [ 27.722525][ T3312] veth0_macvtap: entered promiscuous mode [ 27.729651][ T3312] veth1_macvtap: entered promiscuous mode [ 27.738494][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.742189][ T3313] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.750760][ T3314] veth1_vlan: entered promiscuous mode [ 27.769522][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.783005][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.793938][ T31] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.812916][ T3314] veth0_macvtap: entered promiscuous mode [ 27.833152][ T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.848733][ T3314] veth1_macvtap: entered promiscuous mode [ 27.861855][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.870673][ T31] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.892078][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.913004][ T31] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.926750][ T3317] veth0_vlan: entered promiscuous mode [ 27.943327][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.956644][ T783] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.968174][ T3489] loop2: detected capacity change from 0 to 512 [ 27.977949][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 27.977961][ T29] audit: type=1400 audit(1763839527.928:98): avc: denied { mount } for pid=3488 comm="syz.2.7" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 27.983866][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.014880][ T3317] veth1_vlan: entered promiscuous mode [ 28.025985][ T29] audit: type=1400 audit(1763839527.978:99): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 28.027824][ T3317] veth0_macvtap: entered promiscuous mode [ 28.053494][ T783] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.087803][ T783] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.098086][ T3317] veth1_macvtap: entered promiscuous mode [ 28.104494][ T29] audit: type=1400 audit(1763839528.038:100): avc: denied { prog_run } for pid=3493 comm="syz.2.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 28.130522][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.158063][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.170935][ T783] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.198683][ T783] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.221264][ T783] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.232291][ T29] audit: type=1400 audit(1763839528.178:101): avc: denied { map_create } for pid=3506 comm="syz.2.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 28.251325][ T29] audit: type=1400 audit(1763839528.178:102): avc: denied { map_read map_write } for pid=3506 comm="syz.2.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 28.274826][ T783] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.284445][ T783] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.299804][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.317875][ T29] audit: type=1400 audit(1763839528.208:103): avc: denied { create } for pid=3508 comm="syz.2.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 28.337424][ T29] audit: type=1400 audit(1763839528.208:104): avc: denied { setopt } for pid=3508 comm="syz.2.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 28.352397][ T3516] loop2: detected capacity change from 0 to 512 [ 28.356830][ T29] audit: type=1400 audit(1763839528.208:105): avc: denied { read } for pid=3508 comm="syz.2.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 28.387520][ T3514] loop0: detected capacity change from 0 to 1024 [ 28.391562][ T3454] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.410630][ T3454] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.422054][ T3516] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 28.435614][ T3514] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.448400][ T29] audit: type=1400 audit(1763839528.388:106): avc: denied { create } for pid=3521 comm="syz.1.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.468778][ T29] audit: type=1400 audit(1763839528.388:107): avc: denied { write } for pid=3521 comm="syz.1.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.491514][ T3516] EXT4-fs (loop2): orphan cleanup on readonly fs [ 28.498087][ T3516] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.16: iget: bad i_size value: 360287970189639680 [ 28.503845][ T3514] EXT4-fs warning (device loop0): empty_inline_dir:1749: bad inline directory (dir #12) - no `..' [ 28.527958][ T3516] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.16: couldn't read orphan inode 15 (err -117) [ 28.545020][ T3516] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 28.579130][ T3530] syz.1.20 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 28.590351][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.616706][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.672556][ T3539] ucma_write: process 14 (syz.1.25) changed security contexts after opening file descriptor, this is not allowed. [ 28.782573][ T3555] capability: warning: `syz.2.33' uses deprecated v2 capabilities in a way that may be insecure [ 28.972732][ T3588] ref_ctr_offset mismatch. inode: 0x38 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 29.091757][ T3604] netlink: 32 bytes leftover after parsing attributes in process `syz.0.55'. [ 29.100644][ T3604] batadv0: entered promiscuous mode [ 29.126967][ T3609] loop3: detected capacity change from 0 to 512 [ 29.141893][ T3609] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 29.204558][ T3619] program syz.3.63 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 29.311532][ T3635] smc: net device bond0 applied user defined pnetid SYZ0 [ 29.417496][ T3653] loop3: detected capacity change from 0 to 512 [ 29.442822][ T3653] ======================================================= [ 29.442822][ T3653] WARNING: The mand mount option has been deprecated and [ 29.442822][ T3653] and is ignored by this kernel. Remove the mand [ 29.442822][ T3653] option from the mount to silence this warning. [ 29.442822][ T3653] ======================================================= [ 29.454336][ T3659] ieee802154 phy0 wpan0: encryption failed: -22 [ 29.478421][ T3653] EXT4-fs: Ignoring removed bh option [ 29.489793][ T3653] EXT4-fs: Ignoring removed mblk_io_submit option [ 29.549550][ T3653] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.593627][ T3667] Driver unsupported XDP return value 0 on prog (id 10) dev N/A, expect packet loss! [ 29.595775][ T3653] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 29.630753][ T3671] SELinux: Context Ü is not valid (left unmapped). [ 29.696203][ T3653] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.80: invalid fast symlink length 10 [ 29.735359][ T3683] can0: slcan on ptm0. [ 29.750507][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.777735][ T3689] loop3: detected capacity change from 0 to 512 [ 29.816317][ T3689] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.829424][ T3689] ext4 filesystem being mounted at /12/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 29.861342][ T3680] can0 (unregistered): slcan off ptm0. [ 29.885883][ T3689] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #2: comm syz.3.97: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 29.916048][ T3689] EXT4-fs (loop3): Remounting filesystem read-only [ 29.920242][ T3704] tipc: Started in network mode [ 29.927641][ T3704] tipc: Node identity ff000000000000000000000000000001, cluster identity 4711 [ 29.937258][ T3704] tipc: Enabling of bearer rejected, failed to enable media [ 30.024880][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.121929][ T3743] capability: warning: `syz.4.115' uses 32-bit capabilities (legacy support in use) [ 30.312442][ T3784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.129'. [ 30.321293][ T3784] netlink: 84 bytes leftover after parsing attributes in process `syz.4.129'. [ 30.330550][ T3787] mmap: syz.3.110 (3787) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 30.383438][ T3796] loop0: detected capacity change from 0 to 512 [ 30.394627][ T3796] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.421639][ T3796] EXT4-fs error (device loop0): ext4_readdir:224: inode #12: comm syz.0.134: path /31/file0/file0: directory fails checksum at offset 0 [ 30.480052][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.514264][ T3810] syz.0.138 (3810) used greatest stack depth: 10664 bytes left [ 30.552570][ T3816] loop2: detected capacity change from 0 to 1024 [ 30.561387][ T3816] EXT4-fs: Ignoring removed nomblk_io_submit option [ 30.568540][ T3816] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 30.587071][ T3816] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 30.602510][ T3816] System zones: 0-1, 3-36 [ 30.613258][ T3816] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.619348][ T3830] loop0: detected capacity change from 0 to 1024 [ 30.641967][ T3830] EXT4-fs: Ignoring removed nomblk_io_submit option [ 30.644123][ T3830] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e041c01c, mo2=0002] [ 30.657495][ T3830] System zones: 0-1, 3-36 [ 30.658446][ T3830] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.662889][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.705777][ T3833] loop2: detected capacity change from 0 to 512 [ 30.712747][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.724442][ T3833] EXT4-fs: Ignoring removed i_version option [ 30.730501][ T3833] EXT4-fs: Ignoring removed bh option [ 30.765469][ T3844] loop3: detected capacity change from 0 to 1024 [ 30.783140][ T3833] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.803767][ T3833] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 30.803982][ T3851] IPVS: stopping master sync thread 3852 ... [ 30.820129][ T3852] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 30.843317][ T3844] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 30.866416][ T3844] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.882457][ T3844] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm syz.3.155: lblock 0 mapped to illegal pblock 0 (length 1) [ 30.907519][ T3844] EXT4-fs (loop3): Remounting filesystem read-only [ 30.908130][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.935233][ T3865] netlink: 'syz.1.164': attribute type 3 has an invalid length. [ 30.947394][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 30.992200][ T3870] netlink: 16 bytes leftover after parsing attributes in process `syz.3.165'. [ 31.033060][ T3877] loop2: detected capacity change from 0 to 128 [ 31.050134][ T3877] FAT-fs (loop2): Directory bread(block 32) failed [ 31.077343][ T3883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.172'. [ 31.078283][ T3877] FAT-fs (loop2): Directory bread(block 33) failed [ 31.096806][ T3877] FAT-fs (loop2): Directory bread(block 34) failed [ 31.104297][ T3877] FAT-fs (loop2): Directory bread(block 35) failed [ 31.111552][ T3877] FAT-fs (loop2): Directory bread(block 36) failed [ 31.118149][ T3877] FAT-fs (loop2): Directory bread(block 37) failed [ 31.132859][ T3877] FAT-fs (loop2): Directory bread(block 38) failed [ 31.141359][ T3877] FAT-fs (loop2): Directory bread(block 39) failed [ 31.148092][ T3877] FAT-fs (loop2): Directory bread(block 40) failed [ 31.154988][ T3877] FAT-fs (loop2): Directory bread(block 41) failed [ 31.173124][ T3892] loop3: detected capacity change from 0 to 512 [ 31.181544][ T3892] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 31.193200][ T3892] EXT4-fs (loop3): orphan cleanup on readonly fs [ 31.200013][ T3892] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.176: bg 0: block 248: padding at end of block bitmap is not set [ 31.215607][ T3892] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.176: Failed to acquire dquot type 1 [ 31.231587][ T3892] EXT4-fs (loop3): 1 truncate cleaned up [ 31.240065][ T3892] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 31.267545][ T3892] syz.3.176 (3892) used greatest stack depth: 9200 bytes left [ 31.279750][ T3896] loop2: detected capacity change from 0 to 1024 [ 31.304530][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.335855][ T3896] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 31.369395][ T3896] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.405718][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 31.454327][ T3914] loop4: detected capacity change from 0 to 2048 [ 31.478807][ T3914] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.527775][ T3914] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.180: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 31.567546][ T3937] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 31.579749][ T3937] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 31.614451][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.655732][ T3950] loop4: detected capacity change from 0 to 128 [ 31.699604][ T3956] loop3: detected capacity change from 0 to 512 [ 31.711685][ T3958] loop2: detected capacity change from 0 to 512 [ 31.718642][ T3958] EXT4-fs: Ignoring removed nomblk_io_submit option [ 31.725673][ T3958] EXT4-fs: Ignoring removed oldalloc option [ 31.733770][ T3958] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: comm syz.2.205: Parent and EA inode have the same ino 15 [ 31.741476][ T3956] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 31.747617][ T3958] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 31.768945][ T3958] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: comm syz.2.205: Parent and EA inode have the same ino 15 [ 31.781967][ T3958] EXT4-fs (loop2): 1 orphan inode deleted [ 31.788193][ T3958] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.820661][ T3958] EXT4-fs error (device loop2): ext4_lookup:1787: inode #15: comm syz.2.205: unexpected EA_INODE flag [ 31.824032][ T3969] loop4: detected capacity change from 0 to 512 [ 31.833311][ T3956] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 31.864218][ T3956] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.203: bg 0: block 248: padding at end of block bitmap is not set [ 31.880717][ T3969] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.894636][ T3969] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 31.894867][ T3956] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.203: Failed to acquire dquot type 1 [ 31.929842][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.939779][ T3956] EXT4-fs (loop3): 1 truncate cleaned up [ 31.943357][ T3969] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 31.946620][ T3956] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 31.985534][ T3969] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 32.006608][ T3956] syz.3.203 (3956) used greatest stack depth: 8976 bytes left [ 32.043541][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.055043][ T3984] netlink: 60 bytes leftover after parsing attributes in process `syz.2.215'. [ 32.066236][ T3984] netlink: 60 bytes leftover after parsing attributes in process `syz.2.215'. [ 32.085041][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 32.129373][ T3998] bond1: (slave bond_slave_1): Device is not our slave [ 32.136388][ T3998] bond1: option active_slave: invalid value (bond_slave_1) [ 32.148925][ T3998] bond1 (unregistering): Released all slaves [ 32.160211][ T4002] Zero length message leads to an empty skb [ 32.283903][ T4032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.238'. [ 32.324380][ T4037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.241'. [ 32.386786][ T4043] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 32.408908][ T4046] loop4: detected capacity change from 0 to 164 [ 32.416355][ T4043] bond1 (unregistering): Released all slaves [ 32.437129][ T4049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.244'. [ 32.452596][ T4046] Unable to read rock-ridge attributes [ 32.469502][ T4046] Unable to read rock-ridge attributes [ 32.741470][ T4089] tipc: Started in network mode [ 32.746402][ T4089] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 32.755978][ T4089] tipc: Enabling of bearer rejected, failed to enable media [ 32.852416][ T4105] loop0: detected capacity change from 0 to 764 [ 32.952835][ T4121] 9pnet_rdma: rdma_create_trans (4121): problem binding to privport: 13 [ 32.966287][ T4124] loop0: detected capacity change from 0 to 1024 [ 33.009103][ T4124] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.053845][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 33.053916][ T29] audit: type=1400 audit(1763839533.008:230): avc: denied { watch } for pid=4138 comm="syz.4.288" path="/66" dev="tmpfs" ino=352 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 33.121695][ T29] audit: type=1400 audit(1763839533.078:231): avc: denied { unlink } for pid=4122 comm="syz.0.282" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 33.122256][ T4140] EXT4-fs error (device loop0): ext4_free_inode:354: comm syz.0.282: bit already cleared for inode 15 [ 33.228164][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.237888][ T29] audit: type=1400 audit(1763839533.198:232): avc: denied { connect } for pid=4158 comm="syz.4.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 33.296943][ T4170] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 33.315235][ T4169] IPVS: stopping backup sync thread 4170 ... [ 33.355617][ T4178] loop2: detected capacity change from 0 to 512 [ 33.374382][ T29] audit: type=1400 audit(1763839533.318:233): avc: denied { getopt } for pid=4180 comm="syz.3.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 33.418081][ T4178] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.473440][ T4178] ext4 filesystem being mounted at /65/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 33.524428][ T29] audit: type=1400 audit(1763839533.478:234): avc: denied { rmdir } for pid=4177 comm="syz.2.307" name="control" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 33.573672][ T29] audit: type=1400 audit(1763839533.528:235): avc: denied { checkpoint_restore } for pid=4205 comm="syz.1.318" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 33.609148][ T4209] netlink: 'syz.0.319': attribute type 1 has an invalid length. [ 33.633950][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.750411][ T29] audit: type=1400 audit(1763839533.698:236): avc: denied { read write } for pid=4232 comm="syz.4.331" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 33.774084][ T29] audit: type=1400 audit(1763839533.698:237): avc: denied { ioctl open } for pid=4232 comm="syz.4.331" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 33.798117][ T4234] random: crng reseeded on system resumption [ 33.811244][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 33.865877][ T29] audit: type=1400 audit(1763839533.818:238): avc: denied { read } for pid=4240 comm="syz.4.334" name="mISDNtimer" dev="devtmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.879926][ T4243] loop2: detected capacity change from 0 to 512 [ 33.888770][ T29] audit: type=1400 audit(1763839533.818:239): avc: denied { open } for pid=4240 comm="syz.4.334" path="/dev/mISDNtimer" dev="devtmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.912829][ T4243] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.933650][ T4243] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.993151][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.096198][ T4269] loop4: detected capacity change from 0 to 1024 [ 34.103772][ T4270] loop2: detected capacity change from 0 to 128 [ 34.122399][ T4269] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 34.140441][ T4269] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.177077][ T4269] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: comm syz.4.347: lblock 0 mapped to illegal pblock 0 (length 6) [ 34.219907][ T4269] EXT4-fs (loop4): Remounting filesystem read-only [ 34.247835][ T4281] loop2: detected capacity change from 0 to 256 [ 34.259299][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 34.281230][ T4281] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 34.308506][ T4281] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 34.317092][ T4281] FAT-fs (loop2): Filesystem has been set read-only [ 34.529836][ T4309] loop4: detected capacity change from 0 to 256 [ 34.552630][ T2967] kernel write not supported for file /sg0 (pid: 2967 comm: kworker/1:2) [ 34.576458][ T4309] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2097152) [ 34.584329][ T4309] FAT-fs (loop4): Filesystem has been set read-only [ 34.653448][ T4324] loop0: detected capacity change from 0 to 512 [ 34.666000][ T4324] EXT4-fs warning (device loop0): ext4_xattr_inode_get:546: inode #11: comm syz.0.372: ea_inode file size=0 entry size=6 [ 34.688115][ T4324] ------------[ cut here ]------------ [ 34.693711][ T4324] EA inode 11 i_nlink=2 [ 34.693949][ T4324] WARNING: CPU: 0 PID: 4324 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x36a/0x380 [ 34.708593][ T4324] Modules linked in: [ 34.712561][ T4324] CPU: 0 UID: 0 PID: 4324 Comm: syz.0.372 Not tainted syzkaller #0 PREEMPT(voluntary) [ 34.722222][ T4324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 34.732341][ T4324] RIP: 0010:ext4_xattr_inode_update_ref+0x36a/0x380 [ 34.738945][ T4324] Code: 90 49 8d 7e 40 e8 06 f8 b8 ff 4d 8b 6e 40 4c 89 e7 e8 1a f3 b8 ff 41 8b 56 48 48 c7 c7 a5 d6 55 86 4c 89 ee e8 f7 f3 67 ff 90 <0f> 0b 90 90 e9 ff fe ff ff e8 78 f2 b5 03 0f 1f 84 00 00 00 00 00 [ 34.758714][ T4324] RSP: 0018:ffffc9000ff2f778 EFLAGS: 00010246 [ 34.764813][ T4324] RAX: 74608ae67e74f600 RBX: ffff888119c88eb0 RCX: 0000000000080000 [ 34.772921][ T4324] RDX: ffffc90001d31000 RSI: 000000000000526b RDI: 000000000000526c [ 34.780922][ T4324] RBP: 0000000000000002 R08: 0001c9000ff2f5f7 R09: 0000000000000000 [ 34.788987][ T4324] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff888119c88e60 [ 34.797026][ T4324] R13: 000000000000000b R14: ffff888119c88e18 R15: 0000000000000001 [ 34.805129][ T4324] FS: 00007ff59059f6c0(0000) GS:ffff8882aee11000(0000) knlGS:0000000000000000 [ 34.814151][ T4324] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.820750][ T4324] CR2: 0000000000000000 CR3: 000000011a466000 CR4: 00000000003506f0 [ 34.828768][ T4324] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000000000000000 [ 34.836861][ T4324] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 34.844963][ T4324] Call Trace: [ 34.848235][ T4324] [ 34.851287][ T4324] ext4_xattr_inode_dec_ref_all+0x579/0x830 [ 34.857210][ T4324] ? errseq_check+0x2c/0x50 [ 34.861774][ T4324] ext4_xattr_delete_inode+0x6b7/0x790 [ 34.867255][ T4324] ? ext4_truncate+0x92e/0xae0 [ 34.872166][ T4324] ext4_evict_inode+0xa6a/0xd90 [ 34.877146][ T4324] ? __pfx_ext4_evict_inode+0x10/0x10 [ 34.882566][ T4324] evict+0x2e3/0x550 [ 34.886480][ T4324] ? __dquot_initialize+0x146/0x7c0 [ 34.891777][ T4324] iput+0x4ed/0x650 [ 34.895748][ T4324] ext4_process_orphan+0x1a9/0x1c0 [ 34.901026][ T4324] ext4_orphan_cleanup+0x6a8/0xa00 [ 34.906381][ T4324] ext4_fill_super+0x3483/0x3810 [ 34.911594][ T4324] ? snprintf+0x86/0xb0 [ 34.915920][ T4324] ? set_blocksize+0x1a8/0x310 [ 34.920852][ T4324] ? sb_set_blocksize+0xe3/0x100 [ 34.926023][ T4324] ? setup_bdev_super+0x30e/0x370 [ 34.931283][ T4324] ? __pfx_ext4_fill_super+0x10/0x10 [ 34.936765][ T4324] get_tree_bdev_flags+0x291/0x300 [ 34.942749][ T4324] ? __pfx_ext4_fill_super+0x10/0x10 [ 34.948198][ T4324] get_tree_bdev+0x1f/0x30 [ 34.952842][ T4324] ext4_get_tree+0x1c/0x30 [ 34.957387][ T4324] vfs_get_tree+0x57/0x1d0 [ 34.961974][ T4324] do_new_mount+0x24d/0x660 [ 34.966754][ T4324] path_mount+0x4a5/0xb70 [ 34.971920][ T4324] ? user_path_at+0x109/0x130 [ 34.976806][ T4324] __se_sys_mount+0x28c/0x2e0 [ 34.981666][ T4324] __x64_sys_mount+0x67/0x80 [ 34.986385][ T4324] x64_sys_call+0x2b51/0x3000 [ 34.991236][ T4324] do_syscall_64+0xd2/0x200 [ 34.995915][ T4324] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 35.002749][ T4324] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 35.008856][ T4324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.014913][ T4324] RIP: 0033:0x7ff591b40eea [ 35.019524][ T4324] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 35.040018][ T4324] RSP: 002b:00007ff59059ee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 35.048660][ T4324] RAX: ffffffffffffffda RBX: 00007ff59059eef0 RCX: 00007ff591b40eea [ 35.056817][ T4324] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ff59059eeb0 [ 35.065556][ T4324] RBP: 0000200000000180 R08: 00007ff59059eef0 R09: 0000000000800700 [ 35.073686][ T4324] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 35.081837][ T4324] R13: 00007ff59059eeb0 R14: 0000000000000473 R15: 0000200000000680 [ 35.089940][ T4324] [ 35.093710][ T4324] ---[ end trace 0000000000000000 ]--- [ 35.099584][ T4324] EXT4-fs (loop0): 1 orphan inode deleted [ 35.105984][ T4324] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.144671][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.191274][ C1] sd 0:0:1:0: [sda] tag#852 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 35.201593][ C1] sd 0:0:1:0: [sda] tag#852 CDB: Read(6) 08 00 00 00 00 00 [ 35.287083][ T4384] __nla_validate_parse: 3 callbacks suppressed [ 35.287105][ T4384] netlink: 88 bytes leftover after parsing attributes in process `syz.1.398'. [ 35.459352][ T4413] loop2: detected capacity change from 0 to 1024 [ 35.467326][ T4413] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.483169][ T4413] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.538274][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.552709][ T3313] ================================================================== [ 35.560810][ T3313] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 35.568383][ T3313] [ 35.570711][ T3313] read-write to 0xffff888237c25ee8 of 1 bytes by task 4396 on cpu 0: [ 35.578774][ T3313] folio_add_lru+0xa5/0x1f0 [ 35.583281][ T3313] shmem_get_folio_gfp+0x7ab/0xd60 [ 35.588414][ T3313] shmem_fault+0xf6/0x250 [ 35.592759][ T3313] __do_fault+0xbc/0x200 [ 35.597014][ T3313] handle_mm_fault+0xf78/0x2be0 [ 35.601877][ T3313] __get_user_pages+0x102a/0x1ed0 [ 35.606898][ T3313] __mm_populate+0x243/0x3a0 [ 35.611476][ T3313] vm_mmap_pgoff+0x232/0x2e0 [ 35.616065][ T3313] ksys_mmap_pgoff+0xc2/0x310 [ 35.620726][ T3313] x64_sys_call+0x14a3/0x3000 [ 35.625394][ T3313] do_syscall_64+0xd2/0x200 [ 35.629887][ T3313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.635799][ T3313] [ 35.638108][ T3313] read to 0xffff888237c25ee8 of 1 bytes by task 3313 on cpu 1: [ 35.645719][ T3313] __lru_add_drain_all+0x17e/0x450 [ 35.650846][ T3313] lru_add_drain_all+0x10/0x20 [ 35.655597][ T3313] invalidate_bdev+0x47/0x70 [ 35.660170][ T3313] ext4_put_super+0x624/0x7d0 [ 35.664843][ T3313] generic_shutdown_super+0xe6/0x210 [ 35.670214][ T3313] kill_block_super+0x2a/0x70 [ 35.674892][ T3313] ext4_kill_sb+0x42/0x80 [ 35.679214][ T3313] deactivate_locked_super+0x75/0x1c0 [ 35.684764][ T3313] deactivate_super+0x97/0xa0 [ 35.689439][ T3313] cleanup_mnt+0x269/0x2e0 [ 35.694029][ T3313] __cleanup_mnt+0x19/0x20 [ 35.698444][ T3313] task_work_run+0x131/0x1a0 [ 35.703061][ T3313] exit_to_user_mode_loop+0xed/0x110 [ 35.708339][ T3313] do_syscall_64+0x1d6/0x200 [ 35.713348][ T3313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.719228][ T3313] [ 35.721536][ T3313] value changed: 0x14 -> 0x17 [ 35.726205][ T3313] [ 35.728521][ T3313] Reported by Kernel Concurrency Sanitizer on: [ 35.734655][ T3313] CPU: 1 UID: 0 PID: 3313 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 35.746102][ T3313] Tainted: [W]=WARN [ 35.749885][ T3313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 35.759924][ T3313] ================================================================== [ 35.826745][ T4431] program syz.2.415 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 41.891213][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog