last executing test programs: 3.446074491s ago: executing program 4 (id=87): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1f075, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000413b88400819151300000000000109022dfe"], 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={0x0}) 3.105946058s ago: executing program 2 (id=96): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0xe, &(0x7f0000000000)={[{@nolazytime}, {@acl}]}, 0x3, 0x446, &(0x7f0000000880)="$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") rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x80, 0x120) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='./bus\x00') 3.043435879s ago: executing program 1 (id=98): syz_mount_image$ext4(&(0x7f0000000840)='ext4\x00', &(0x7f0000000880)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@quota}, {@nogrpid}, {@bh}]}, 0xff, 0x523, &(0x7f0000000c00)="$eJzs3c9vHFcdAPDvTLK2k7h1WnoABG1oCwFFWceb1qp6gHJCCFVC9AgiNfbGsrzrtbzrUptIuGeuSFTiBEf+AM49ceeC4MalHJD4YYFqJA5TzezY2di79qaJvZb385FG89688X7fizPvzbxd7wtgbN2IiJ2ImIiIdyNipjyelFu81d3y8z7ZfbC4t/tgMYkse+dfSVGeH4uen8ldK19zKiJ+8J2InyRH47a3tlcXGo36Rpmf7TTXZ9tb27dXmgvL9eX6Wq02Pzd/5427r9ceozVTx5a+1JwoU1/++I873/hZXq3p8khvO56mbtMrB3FylyPie6cRbAQule2ZGHVF+EzSiHg+Il4urv+ZuFT8NgGAiyzLZiKb6c0DABddWsyBJWm1nAuYjjStVrtzeC/E1bTRandu3W9tri1158quRyW9v9Ko3ynnCq9HJcnzc0X6Yb52KH83Ip6LiF9OXiny1cVWY2mUNz4AMMauHRr//zvZHf8BgAvu+I/NAAAXkfEfAMaP8R8Axo/xHwDGT3f8v/K4P5Zl2c9PozoAwBnw/A8A48f4DwBj5ftvv51v2V75/ddL721trrbeu71Ub69Wm5uL1cXWxnp1udVaLr6zp3nS6zVarfW512Lz/evfXG93Zttb2/earc21zr3ie73v1SvFWTtn0DIAYJDnXvroL0k+Ir95pdiiZy2HykhrBpy2dNQVAEbm0qgrAIyM1b5gfD18xn/sDwGYHoALos8SvY+Y6vcHQlmWZadXJeCU3fyC+X8YVz3z/z4FDGPmpPn/Ym1gbxLChWT+H8ZXliXDrvkfw54IAJxvx8zxXz/L+xBgdAa8//98uf9d+ebAj5YOn/HhadYKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzrf99X+r5TK/05Gm1WrEM8UCQJXk/kqjficino2IP09WJvP83IjrDAA8qfTvSbn+182ZV6cfKXrx2kFyIiJ++ut3fvX+Qqez8aeIieTfk/vHOx+Wx2snBps6jRYAAMfbH6eLfc+D/Ce7Dxb3t7Oszz++3b0ryOPu7U7E3kH8y3G52E9FJSKu/icp811Jz9zFk9j5ICI+36/9SUwXcyDdW5bD8fPYz5xp/PSR+Gm5QHNa/lt87inUBcbNR3n/81a/6y+NG8W+//U/VfRQT67s//KXWtwr+sCH8ff7v0sD+r8bw8Z47Q/f7aauHC37IOKLlyP2Y+/19D/78ZMB8V8dMv5fv/Tiy4PKst9E3Iz+8XtjzXaa67Ptre3bK82F5fpyfa1Wm5+bv/PG3ddrs8Uc9ezg0eCfb956dlBZ3v6rA+JPndD+rw7Z/t/+/90ffuWY+F9/pV/8NF44Jn4+Jn5tyPgLV38/8Lk7j790tP3JML//W0PG//hv20eWDQcARqe9tb260GjUNyTGNPHjOBfVGC6R/5c9B9Xom/jWWcWaiP5Fv3ile00fKsqyzxRrUI/xNGbdgPPg4KKPiP+NujIAAAAAAAAAAAAAAEBfZ/EXS6NuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABfXpwEAAP//+E3TQw==") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) fallocate(r0, 0x0, 0xbf5, 0x4) 2.947214591s ago: executing program 2 (id=101): r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000380)) 2.722808796s ago: executing program 2 (id=103): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x5) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x12}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.880180903s ago: executing program 2 (id=105): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) ioperm(0x0, 0x1, 0x1) 1.838031994s ago: executing program 1 (id=106): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001d00010000000000000000000a001000"], 0x1c}}, 0x0) 1.662851437s ago: executing program 4 (id=107): unshare(0x28040680) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) unshare(0x2a020480) 1.446902181s ago: executing program 2 (id=108): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3804402, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@nolazytime}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x55f, &(0x7f0000000c80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x101042, 0x1b6) fallocate(r0, 0x0, 0xfff, 0x5) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f00000008c0)="762c90e62c", 0x5}], 0x1, 0x0, 0x440, 0x10) 1.361395633s ago: executing program 4 (id=110): unshare(0x28000600) r0 = inotify_init() inotify_add_watch(r0, 0x0, 0x449) 1.361036453s ago: executing program 1 (id=111): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, 0x44118, 0x88f}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x8, 0x5, 0x0, 0x1, [@IFLA_BRPORT_FLUSH={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x4000000) 1.360898323s ago: executing program 0 (id=112): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000040), 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ptrace$pokeuser(0x6, r2, 0x358, 0x0) 1.360808873s ago: executing program 4 (id=113): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x3f8, 0x4, 0x70bd27, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x83678193b3d4c477}, 0x4080) 1.334121523s ago: executing program 0 (id=114): fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x52f}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1.243414615s ago: executing program 0 (id=115): syz_open_dev$hidraw(&(0x7f0000001bc0), 0x0, 0x4842) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.170644977s ago: executing program 0 (id=118): r0 = syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x1008002, &(0x7f0000000180)={[{@grpquota}, {@sysvgroups}, {@nomblk_io_submit}, {}, {@dioread_nolock}, {@jqfmt_vfsv0}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x0, 0x5e0, &(0x7f0000000bc0)="$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") quotactl_fd$Q_SETINFO(r0, 0xffffffff80000601, 0x0, &(0x7f0000000000)={0x8, 0x9, 0x0, 0x3}) 998.69478ms ago: executing program 3 (id=123): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) unshare(0x26020480) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) 998.57429ms ago: executing program 3 (id=124): unshare(0x2a020480) dup(0xffffffffffffffff) syz_read_part_table(0x5d4, &(0x7f0000000000)="$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") 973.53018ms ago: executing program 4 (id=125): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10000, &(0x7f0000001180)=ANY=[], 0x1, 0xa08, &(0x7f0000008280)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) open(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x272640, 0x52) openat(0xffffffffffffff9c, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80002, 0x0) 867.645653ms ago: executing program 3 (id=126): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, &(0x7f0000000000)=0xfe, 0x4) 758.743225ms ago: executing program 4 (id=127): socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r4}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) symlink(0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=@can_newroute={0x3c, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_AND={0x15, 0x1, {{{}, 0x0, 0x0, 0x0, 0x0, "7d7408e707adb5a5"}, 0x5}}, @CGW_CS_XOR={0x8, 0x5, {0x1, 0x0, 0xfffffffffffffffb}}, @CGW_MOD_UID={0x8, 0xe, 0xee01}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) unshare(0x64000600) 758.585115ms ago: executing program 3 (id=128): r0 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/116, 0x74}], 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)=""/200, 0xc8}], 0x1, 0x0) 638.799497ms ago: executing program 2 (id=129): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x404, &(0x7f0000000280)={[{@errors_remount}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@barrier}, {@lazytime}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r0 = creat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x192) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') preadv(r1, &(0x7f0000000080)=[{0x0}], 0x1, 0x114a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) write$cgroup_type(r0, &(0x7f0000000200), 0x175d9003) 625.583238ms ago: executing program 0 (id=130): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nombcache}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) sched_setscheduler(0x0, 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) truncate(&(0x7f0000000100)='./file0/file0\x00', 0x5) 430.868742ms ago: executing program 3 (id=131): rseq(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) unshare(0x20400) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0500000003f01f00810000007f00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r0, 0x0, 0x0}, 0x20) 317.883894ms ago: executing program 1 (id=132): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x8000000010, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) write(r0, &(0x7f00000002c0)="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", 0xfc) 174.325997ms ago: executing program 1 (id=133): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x4000006, 0x3, "42341f9b1000007e4f00"}) r2 = syz_open_pts(r1, 0x103100) dup3(r2, r1, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x0) 108.960558ms ago: executing program 1 (id=134): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00220f000000040b2100000095f5758483", @ANYBLOB="d6e4"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000480)={0x40, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, 0x0) 42.81969ms ago: executing program 0 (id=135): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_tracing={0x1a, 0xf, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffff8}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x18, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1134d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x44f0) 0s ago: executing program 3 (id=136): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) connect$inet(r3, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.124' (ED25519) to the list of known hosts. [ 33.195279][ T29] audit: type=1400 audit(1759202703.697:62): avc: denied { mounton } for pid=3290 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.196476][ T3290] cgroup: Unknown subsys name 'net' [ 33.218980][ T29] audit: type=1400 audit(1759202703.697:63): avc: denied { mount } for pid=3290 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.246472][ T29] audit: type=1400 audit(1759202703.727:64): avc: denied { unmount } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.370746][ T3290] cgroup: Unknown subsys name 'cpuset' [ 33.377347][ T3290] cgroup: Unknown subsys name 'rlimit' [ 33.489524][ T29] audit: type=1400 audit(1759202703.987:65): avc: denied { setattr } for pid=3290 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.514272][ T29] audit: type=1400 audit(1759202703.997:66): avc: denied { create } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.534756][ T29] audit: type=1400 audit(1759202703.997:67): avc: denied { write } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.552687][ T3292] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 33.555134][ T29] audit: type=1400 audit(1759202703.997:68): avc: denied { read } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 33.584122][ T29] audit: type=1400 audit(1759202703.997:69): avc: denied { mounton } for pid=3290 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.609056][ T29] audit: type=1400 audit(1759202703.997:70): avc: denied { mount } for pid=3290 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 33.610997][ T3290] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 33.632566][ T29] audit: type=1400 audit(1759202704.067:71): avc: denied { relabelto } for pid=3292 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 35.532356][ T3299] chnl_net:caif_netlink_parms(): no params data found [ 35.562008][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 35.649391][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 35.674302][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.681469][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.688588][ T3299] bridge_slave_0: entered allmulticast mode [ 35.695100][ T3299] bridge_slave_0: entered promiscuous mode [ 35.701579][ T3300] chnl_net:caif_netlink_parms(): no params data found [ 35.726189][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.733291][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.740765][ T3302] bridge_slave_0: entered allmulticast mode [ 35.747174][ T3302] bridge_slave_0: entered promiscuous mode [ 35.753866][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.761027][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.768227][ T3299] bridge_slave_1: entered allmulticast mode [ 35.774712][ T3299] bridge_slave_1: entered promiscuous mode [ 35.795504][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.802668][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.809848][ T3302] bridge_slave_1: entered allmulticast mode [ 35.816289][ T3302] bridge_slave_1: entered promiscuous mode [ 35.852739][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.861977][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 35.876512][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.886631][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.906742][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.939928][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.947037][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.954201][ T3304] bridge_slave_0: entered allmulticast mode [ 35.960601][ T3304] bridge_slave_0: entered promiscuous mode [ 35.986675][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.993787][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.000926][ T3304] bridge_slave_1: entered allmulticast mode [ 36.007283][ T3304] bridge_slave_1: entered promiscuous mode [ 36.018730][ T3299] team0: Port device team_slave_0 added [ 36.027771][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.034860][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.042069][ T3300] bridge_slave_0: entered allmulticast mode [ 36.048460][ T3300] bridge_slave_0: entered promiscuous mode [ 36.055608][ T3302] team0: Port device team_slave_0 added [ 36.068266][ T3299] team0: Port device team_slave_1 added [ 36.076391][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.083495][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.090993][ T3300] bridge_slave_1: entered allmulticast mode [ 36.097431][ T3300] bridge_slave_1: entered promiscuous mode [ 36.104484][ T3302] team0: Port device team_slave_1 added [ 36.116270][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.152398][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.161764][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.168817][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.194842][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.212043][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.221406][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.228359][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.254373][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.275382][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.282443][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.308677][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.327885][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.337382][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.344543][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.370440][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.382059][ T3304] team0: Port device team_slave_0 added [ 36.388853][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.396027][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.403181][ T3308] bridge_slave_0: entered allmulticast mode [ 36.409661][ T3308] bridge_slave_0: entered promiscuous mode [ 36.430208][ T3304] team0: Port device team_slave_1 added [ 36.442291][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.449355][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.456627][ T3308] bridge_slave_1: entered allmulticast mode [ 36.463574][ T3308] bridge_slave_1: entered promiscuous mode [ 36.482158][ T3300] team0: Port device team_slave_0 added [ 36.509765][ T3300] team0: Port device team_slave_1 added [ 36.517582][ T3302] hsr_slave_0: entered promiscuous mode [ 36.523781][ T3302] hsr_slave_1: entered promiscuous mode [ 36.536558][ T3299] hsr_slave_0: entered promiscuous mode [ 36.542571][ T3299] hsr_slave_1: entered promiscuous mode [ 36.548487][ T3299] debugfs: 'hsr0' already exists in 'hsr' [ 36.554258][ T3299] Cannot create hsr debugfs directory [ 36.578335][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.593785][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.600820][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.626917][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.645548][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.652539][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.678504][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.689810][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.696768][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.722822][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.734497][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.749119][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.756124][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.782052][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.815859][ T3308] team0: Port device team_slave_0 added [ 36.828718][ T3308] team0: Port device team_slave_1 added [ 36.879454][ T3300] hsr_slave_0: entered promiscuous mode [ 36.885469][ T3300] hsr_slave_1: entered promiscuous mode [ 36.891513][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 36.897236][ T3300] Cannot create hsr debugfs directory [ 36.904677][ T3304] hsr_slave_0: entered promiscuous mode [ 36.910913][ T3304] hsr_slave_1: entered promiscuous mode [ 36.916680][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 36.922444][ T3304] Cannot create hsr debugfs directory [ 36.936259][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.943286][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.969306][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.995785][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.002791][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.028749][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.112101][ T3308] hsr_slave_0: entered promiscuous mode [ 37.118156][ T3308] hsr_slave_1: entered promiscuous mode [ 37.123987][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 37.129759][ T3308] Cannot create hsr debugfs directory [ 37.199446][ T3299] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.221674][ T3299] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.238007][ T3299] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.256183][ T3299] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.283599][ T3302] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.299152][ T3302] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.308751][ T3302] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.317903][ T3302] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.340676][ T3304] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.351119][ T3304] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.360215][ T3304] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.378311][ T3304] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.422018][ T3308] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.447147][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.454353][ T3308] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.464723][ T3308] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.473850][ T3308] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.502213][ T3300] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.511365][ T3300] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.527795][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.536977][ T3300] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.547749][ T3300] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.559340][ T1885] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.566503][ T1885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.577354][ T1885] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.584510][ T1885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.609898][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.632668][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.649926][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.668909][ T1885] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.676022][ T1885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.685026][ T1885] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.692105][ T1885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.719130][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.750812][ T1885] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.757909][ T1885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.766985][ T1885] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.774075][ T1885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.793835][ T3302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.841061][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.863312][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.877141][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.892463][ T1885] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.899580][ T1885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.908530][ T1885] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.915638][ T1885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.928783][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.940545][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.963633][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.977900][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.006724][ T3308] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.017169][ T3308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.035291][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.042416][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.051892][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.058945][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.094438][ T3300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.195583][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.207380][ T3302] veth0_vlan: entered promiscuous mode [ 38.224735][ T3299] veth0_vlan: entered promiscuous mode [ 38.239050][ T3302] veth1_vlan: entered promiscuous mode [ 38.252791][ T3299] veth1_vlan: entered promiscuous mode [ 38.267099][ T3299] veth0_macvtap: entered promiscuous mode [ 38.288429][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.305427][ T3302] veth0_macvtap: entered promiscuous mode [ 38.313190][ T3304] veth0_vlan: entered promiscuous mode [ 38.321207][ T3299] veth1_macvtap: entered promiscuous mode [ 38.327588][ T3304] veth1_vlan: entered promiscuous mode [ 38.338552][ T3302] veth1_macvtap: entered promiscuous mode [ 38.355220][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.378815][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.399242][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.408054][ T3304] veth0_macvtap: entered promiscuous mode [ 38.417855][ T112] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.440819][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.449333][ T3304] veth1_macvtap: entered promiscuous mode [ 38.456085][ T112] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.487432][ T112] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.504189][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.516994][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 38.517084][ T29] audit: type=1400 audit(1759202709.017:81): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/root/syzkaller.iEfcVU/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 38.547587][ T29] audit: type=1400 audit(1759202709.017:82): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 38.572533][ T29] audit: type=1400 audit(1759202709.017:83): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/root/syzkaller.iEfcVU/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 38.578290][ T112] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.598320][ T29] audit: type=1400 audit(1759202709.017:84): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 38.622976][ T3300] veth0_vlan: entered promiscuous mode [ 38.628902][ T29] audit: type=1400 audit(1759202709.017:85): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/root/syzkaller.iEfcVU/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 38.645094][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.660845][ T29] audit: type=1400 audit(1759202709.017:86): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/root/syzkaller.iEfcVU/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 38.660881][ T29] audit: type=1400 audit(1759202709.017:87): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 38.660906][ T29] audit: type=1400 audit(1759202709.077:88): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 38.663922][ T29] audit: type=1400 audit(1759202709.077:89): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="gadgetfs" ino=3722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 38.679138][ T3308] veth0_vlan: entered promiscuous mode [ 38.769379][ T3299] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.784983][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.797733][ T3300] veth1_vlan: entered promiscuous mode [ 38.816766][ T29] audit: type=1400 audit(1759202709.307:90): avc: denied { read write } for pid=3302 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.835371][ T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.854559][ T3469] loop2: detected capacity change from 0 to 1024 [ 38.860170][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.879106][ T3469] ======================================================= [ 38.879106][ T3469] WARNING: The mand mount option has been deprecated and [ 38.879106][ T3469] and is ignored by this kernel. Remove the mand [ 38.879106][ T3469] option from the mount to silence this warning. [ 38.879106][ T3469] ======================================================= [ 38.880306][ T3308] veth1_vlan: entered promiscuous mode [ 38.931775][ T3308] veth0_macvtap: entered promiscuous mode [ 38.941981][ T3469] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.971688][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.992862][ T3308] veth1_macvtap: entered promiscuous mode [ 38.996604][ T3469] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.3: Allocating blocks 449-513 which overlap fs metadata [ 39.029903][ T31] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.033079][ T3468] EXT4-fs (loop2): pa ffff888106e13070: logic 48, phys. 177, len 21 [ 39.047332][ T3468] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 39.053261][ T3300] veth0_macvtap: entered promiscuous mode [ 39.075845][ T51] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.088986][ T51] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.100094][ T3300] veth1_macvtap: entered promiscuous mode [ 39.107886][ T51] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.128962][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.140054][ T3479] unsupported nla_type 52263 [ 39.147643][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.161594][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.170286][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.182163][ T112] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.199212][ T112] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.225049][ T112] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.235385][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.261760][ T112] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.271295][ T112] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.288218][ T112] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.312057][ T112] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.334776][ T112] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.386037][ T3486] loop1: detected capacity change from 0 to 512 [ 39.406341][ T3486] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.423027][ T3486] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.564413][ T3497] netlink: 'syz.3.9': attribute type 4 has an invalid length. [ 39.613172][ T3497] netlink: 'syz.3.9': attribute type 4 has an invalid length. [ 39.628142][ T3497] syz.3.9 (3497) used greatest stack depth: 10640 bytes left [ 39.638459][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.661144][ T3502] loop3: detected capacity change from 0 to 512 [ 39.668199][ T3502] EXT4-fs: Ignoring removed mblk_io_submit option [ 39.887284][ T3502] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.900503][ T3502] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 40.099137][ T3388] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.107783][ T3509] loop1: detected capacity change from 0 to 1024 [ 40.114823][ T3502] EXT4-fs (loop3): 1 truncate cleaned up [ 40.125385][ T3502] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.127862][ T3388] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 40.146677][ T3509] EXT4-fs: Ignoring removed bh option [ 40.194363][ T3509] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.231830][ T3506] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 40.286271][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.439411][ T3525] loop4: detected capacity change from 0 to 512 [ 40.494289][ T3525] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.509624][ T3511] 9pnet: Could not find request transport: fd0x0000000000000003 [ 40.535928][ T3525] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 40.561180][ T3529] loop1: detected capacity change from 0 to 1024 [ 40.583254][ T3525] EXT4-fs (loop4): 1 truncate cleaned up [ 40.595263][ T3529] EXT4-fs: Ignoring removed bh option [ 40.612353][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.631388][ T3525] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.678406][ T3529] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.163600][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.679059][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.755850][ T3583] loop3: detected capacity change from 0 to 512 [ 41.791085][ T3583] EXT4-fs: Ignoring removed nobh option [ 41.876431][ T3583] netlink: 176 bytes leftover after parsing attributes in process `syz.3.23'. [ 41.913061][ T3592] loop2: detected capacity change from 0 to 512 [ 41.947940][ T3592] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.961153][ T3592] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 41.980285][ T3592] mmap: syz.2.27 (3592) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 42.000901][ T3603] bridge0: entered promiscuous mode [ 42.006280][ T3603] macsec1: entered promiscuous mode [ 42.012999][ T3603] bridge0: port 3(macsec1) entered blocking state [ 42.020666][ T3603] bridge0: port 3(macsec1) entered disabled state [ 42.027608][ T3603] macsec1: entered allmulticast mode [ 42.032942][ T3603] bridge0: entered allmulticast mode [ 42.038699][ T3603] macsec1: left allmulticast mode [ 42.044801][ T3603] bridge0: left allmulticast mode [ 42.050740][ T3603] bridge0: left promiscuous mode [ 42.071624][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.324076][ T3612] loop4: detected capacity change from 0 to 1024 [ 42.341987][ T3612] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.393616][ T3612] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 42.491335][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.738952][ T3626] loop3: detected capacity change from 0 to 1024 [ 42.783087][ T3626] EXT4-fs: Ignoring removed bh option [ 42.803669][ T3626] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.893749][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.978257][ T3644] FAULT_INJECTION: forcing a failure. [ 42.978257][ T3644] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 42.991429][ T3644] CPU: 1 UID: 0 PID: 3644 Comm: syz.2.43 Not tainted syzkaller #0 PREEMPT(voluntary) [ 42.991460][ T3644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 42.991476][ T3644] Call Trace: [ 42.991484][ T3644] [ 42.991551][ T3644] __dump_stack+0x1d/0x30 [ 42.991596][ T3644] dump_stack_lvl+0xe8/0x140 [ 42.991622][ T3644] dump_stack+0x15/0x1b [ 42.991644][ T3644] should_fail_ex+0x265/0x280 [ 42.991682][ T3644] should_fail+0xb/0x20 [ 42.991717][ T3644] should_fail_usercopy+0x1a/0x20 [ 42.991770][ T3644] strncpy_from_user+0x25/0x230 [ 42.991800][ T3644] ? __kmalloc_cache_noprof+0x189/0x320 [ 42.991872][ T3644] __se_sys_memfd_create+0x1ff/0x590 [ 42.991904][ T3644] __x64_sys_memfd_create+0x31/0x40 [ 42.991934][ T3644] x64_sys_call+0x2abe/0x2ff0 [ 42.991990][ T3644] do_syscall_64+0xd2/0x200 [ 42.992017][ T3644] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 42.992074][ T3644] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 42.992109][ T3644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.992131][ T3644] RIP: 0033:0x7fe6d305eec9 [ 42.992149][ T3644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.992260][ T3644] RSP: 002b:00007fe6d1abee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 42.992338][ T3644] RAX: ffffffffffffffda RBX: 000000000000052b RCX: 00007fe6d305eec9 [ 42.992437][ T3644] RDX: 00007fe6d1abeef0 RSI: 0000000000000000 RDI: 00007fe6d30e2960 [ 42.992454][ T3644] RBP: 0000200000000a00 R08: 00007fe6d1abebb7 R09: 00007fe6d1abee40 [ 42.992467][ T3644] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0 [ 42.992481][ T3644] R13: 00007fe6d1abeef0 R14: 00007fe6d1abeeb0 R15: 0000200000000040 [ 42.992499][ T3644] [ 43.203651][ T3647] sctp: [Deprecated]: syz.1.44 (pid 3647) Use of int in max_burst socket option deprecated. [ 43.203651][ T3647] Use struct sctp_assoc_value instead [ 43.327860][ T3661] loop3: detected capacity change from 0 to 512 [ 43.361417][ T3661] EXT4-fs: Ignoring removed mblk_io_submit option [ 43.394506][ T3661] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 43.406833][ T3667] netlink: 'syz.4.50': attribute type 4 has an invalid length. [ 43.421845][ T3661] EXT4-fs (loop3): 1 truncate cleaned up [ 43.428071][ T3667] netlink: 'syz.4.50': attribute type 4 has an invalid length. [ 43.439519][ T3661] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.525780][ T29] kauditd_printk_skb: 859 callbacks suppressed [ 43.525798][ T29] audit: type=1326 audit(1759202714.027:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3652 comm="syz.0.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f70de81eec9 code=0x7ffc0000 [ 43.537607][ T3678] veth0: entered promiscuous mode [ 43.564896][ T29] audit: type=1400 audit(1759202714.037:951): avc: denied { setopt } for pid=3677 comm="syz.4.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 43.585162][ T29] audit: type=1326 audit(1759202714.057:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3652 comm="syz.0.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f70de81eec9 code=0x7ffc0000 [ 43.614363][ T29] audit: type=1326 audit(1759202714.077:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3652 comm="syz.0.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f70de81eec9 code=0x7ffc0000 [ 43.637589][ T29] audit: type=1326 audit(1759202714.087:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3652 comm="syz.0.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f70de81eec9 code=0x7ffc0000 [ 43.661104][ T29] audit: type=1326 audit(1759202714.097:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3652 comm="syz.0.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f70de81eec9 code=0x7ffc0000 [ 43.684756][ T29] audit: type=1326 audit(1759202714.107:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3652 comm="syz.0.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f70de81eec9 code=0x7ffc0000 [ 43.695885][ T3682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.54'. [ 43.717888][ T3680] loop2: detected capacity change from 0 to 1024 [ 43.724786][ T3680] EXT4-fs: Ignoring removed bh option [ 43.732080][ T29] audit: type=1326 audit(1759202714.117:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3652 comm="syz.0.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f70de81eec9 code=0x7ffc0000 [ 43.755777][ T29] audit: type=1326 audit(1759202714.127:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3652 comm="syz.0.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f70de81eec9 code=0x7ffc0000 [ 43.779705][ T29] audit: type=1326 audit(1759202714.137:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3652 comm="syz.0.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f70de81eec9 code=0x7ffc0000 [ 43.846298][ T3680] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.935696][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.951112][ T3688] bridge0: entered promiscuous mode [ 43.956442][ T3688] macsec1: entered promiscuous mode [ 43.963148][ T3688] bridge0: port 3(macsec1) entered blocking state [ 43.969773][ T3688] bridge0: port 3(macsec1) entered disabled state [ 43.977656][ T3688] macsec1: entered allmulticast mode [ 43.983300][ T3688] bridge0: entered allmulticast mode [ 43.998886][ T3688] macsec1: left allmulticast mode [ 44.004038][ T3688] bridge0: left allmulticast mode [ 44.016788][ T3688] bridge0: left promiscuous mode [ 44.064374][ T3690] loop2: detected capacity change from 0 to 512 [ 44.075447][ T3690] EXT4-fs (loop2): orphan cleanup on readonly fs [ 44.082563][ T3690] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.56: bad orphan inode 13 [ 44.111029][ T3690] ext4_test_bit(bit=12, block=18) = 1 [ 44.116474][ T3690] is_bad_inode(inode)=0 [ 44.120699][ T3690] NEXT_ORPHAN(inode)=2130706432 [ 44.125726][ T3690] max_ino=32 [ 44.128927][ T3690] i_nlink=1 [ 44.150764][ T3690] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 44.164993][ T3690] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.188160][ T3693] FAULT_INJECTION: forcing a failure. [ 44.188160][ T3693] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 44.201383][ T3693] CPU: 1 UID: 0 PID: 3693 Comm: syz.1.57 Not tainted syzkaller #0 PREEMPT(voluntary) [ 44.201451][ T3693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 44.201466][ T3693] Call Trace: [ 44.201478][ T3693] [ 44.201487][ T3693] __dump_stack+0x1d/0x30 [ 44.201512][ T3693] dump_stack_lvl+0xe8/0x140 [ 44.201536][ T3693] dump_stack+0x15/0x1b [ 44.201556][ T3693] should_fail_ex+0x265/0x280 [ 44.201593][ T3693] should_fail+0xb/0x20 [ 44.201627][ T3693] should_fail_usercopy+0x1a/0x20 [ 44.201665][ T3693] _copy_from_iter+0xd2/0xe80 [ 44.201705][ T3693] ? __build_skb_around+0x1a0/0x200 [ 44.201800][ T3693] ? __alloc_skb+0x223/0x320 [ 44.201866][ T3693] netlink_sendmsg+0x471/0x6b0 [ 44.201965][ T3693] ? __pfx_netlink_sendmsg+0x10/0x10 [ 44.201997][ T3693] __sock_sendmsg+0x145/0x180 [ 44.202021][ T3693] ____sys_sendmsg+0x31e/0x4e0 [ 44.202108][ T3693] ___sys_sendmsg+0x17b/0x1d0 [ 44.202186][ T3693] __x64_sys_sendmsg+0xd4/0x160 [ 44.202302][ T3693] x64_sys_call+0x191e/0x2ff0 [ 44.202364][ T3693] do_syscall_64+0xd2/0x200 [ 44.202383][ T3693] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 44.202450][ T3693] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 44.202496][ T3693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.202523][ T3693] RIP: 0033:0x7fde35dbeec9 [ 44.202539][ T3693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.202558][ T3693] RSP: 002b:00007fde34827038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 44.202658][ T3693] RAX: ffffffffffffffda RBX: 00007fde36015fa0 RCX: 00007fde35dbeec9 [ 44.202672][ T3693] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 44.202684][ T3693] RBP: 00007fde34827090 R08: 0000000000000000 R09: 0000000000000000 [ 44.202696][ T3693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.202708][ T3693] R13: 00007fde36016038 R14: 00007fde36015fa0 R15: 00007ffdb51020b8 [ 44.202727][ T3693] [ 44.479163][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.555709][ T3703] loop2: detected capacity change from 0 to 512 [ 44.563687][ T3703] EXT4-fs: Ignoring removed bh option [ 44.578992][ T3703] EXT4-fs: Ignoring removed mblk_io_submit option [ 44.587684][ T2990] udevd[2990]: worker [3475] terminated by signal 33 (Unknown signal 33) [ 45.522016][ T3703] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 45.591516][ T3703] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 45.605027][ T3703] EXT4-fs (loop2): orphan cleanup on readonly fs [ 45.620290][ T3703] EXT4-fs error (device loop2): ext4_acquire_dquot:6943: comm syz.2.62: Failed to acquire dquot type 1 [ 45.637642][ T3703] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.62: Invalid block bitmap block 0 in block_group 0 [ 45.673986][ T3718] loop3: detected capacity change from 0 to 512 [ 45.680472][ T3703] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.62: Invalid block bitmap block 0 in block_group 0 [ 45.700936][ T3718] EXT4-fs: Ignoring removed mblk_io_submit option [ 45.707463][ T3718] EXT4-fs: inline encryption not supported [ 45.726094][ T3718] EXT4-fs: test_dummy_encryption option not supported [ 45.768750][ T3703] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.62: Invalid block bitmap block 0 in block_group 0 [ 45.812845][ T3703] EXT4-fs error (device loop2): ext4_acquire_dquot:6943: comm syz.2.62: Failed to acquire dquot type 1 [ 45.840104][ T3703] EXT4-fs error (device loop2): ext4_acquire_dquot:6943: comm syz.2.62: Failed to acquire dquot type 1 [ 45.865262][ T3703] EXT4-fs (loop2): 1 orphan inode deleted [ 45.889403][ T3703] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 46.030114][ T3732] hub 2-0:1.0: USB hub found [ 46.034843][ T3732] hub 2-0:1.0: 8 ports detected [ 46.867861][ T3703] syz.2.62 (3703) used greatest stack depth: 9000 bytes left [ 46.889492][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.909644][ T3740] loop1: detected capacity change from 0 to 512 [ 46.920637][ T3744] capability: warning: `syz.2.74' uses 32-bit capabilities (legacy support in use) [ 46.969185][ T3751] loop3: detected capacity change from 0 to 128 [ 46.978702][ T3751] FAT-fs (loop3): bogus logical sector size 0 [ 46.981180][ T3740] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 46.984990][ T3751] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 47.006689][ T3751] FAT-fs (loop3): Can't find a valid FAT filesystem [ 47.022184][ T3740] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.034000][ T3758] loop4: detected capacity change from 0 to 128 [ 47.369902][ T3774] loop3: detected capacity change from 0 to 1024 [ 47.433452][ T3774] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 47.579951][ T3774] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #3: comm syz.3.86: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 3(4), depth 0(0) [ 47.675090][ T3774] EXT4-fs error (device loop3): ext4_quota_enable:7137: comm syz.3.86: Bad quota inode: 3, type: 0 [ 47.736240][ T3781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.753168][ T3774] EXT4-fs warning (device loop3): ext4_enable_quotas:7178: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 47.786810][ T3781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.794948][ T3774] EXT4-fs (loop3): mount failed [ 47.822605][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 47.882568][ T3792] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 47.935310][ T3794] loop3: detected capacity change from 0 to 128 [ 47.969368][ T3796] loop1: detected capacity change from 0 to 2048 [ 48.040506][ T3796] loop1: p1 < > p4 [ 48.046188][ T3796] loop1: p4 size 722688 extends beyond EOD, truncated [ 48.054258][ T3799] loop3: detected capacity change from 0 to 128 [ 48.063756][ T3801] loop2: detected capacity change from 0 to 512 [ 48.070713][ T3801] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 48.098850][ T3801] EXT4-fs (loop2): 1 truncate cleaned up [ 48.107447][ T3801] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.130495][ T3801] EXT4-fs error (device loop2): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.2.96: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 48.153181][ T3808] loop1: detected capacity change from 0 to 512 [ 48.154377][ T3801] EXT4-fs error (device loop2) in ext4_delete_entry:2739: Corrupt filesystem [ 48.169752][ T3808] EXT4-fs: Ignoring removed bh option [ 48.174300][ T3801] EXT4-fs warning (device loop2): ext4_rename_delete:3731: inode #2: comm syz.2.96: Deleting old file: nlink 4, error=-117 [ 48.272314][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.283341][ T3808] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.297425][ T3808] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.378043][ T3819] 9pnet_fd: Insufficient options for proto=fd [ 49.279554][ T3827] loop3: detected capacity change from 0 to 512 [ 49.413713][ T3827] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 49.453549][ T3827] EXT4-fs (loop3): 1 truncate cleaned up [ 49.626471][ T3827] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.643186][ T29] kauditd_printk_skb: 480 callbacks suppressed [ 49.643204][ T29] audit: type=1400 audit(1759202720.147:1434): avc: denied { add_name } for pid=3824 comm="syz.3.104" name="file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 49.670897][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.671436][ T29] audit: type=1400 audit(1759202720.147:1435): avc: denied { link } for pid=3824 comm="syz.3.104" name="file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 49.723110][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.743132][ T3839] loop2: detected capacity change from 0 to 1024 [ 49.768003][ T29] audit: type=1400 audit(1759202720.267:1436): avc: denied { nlmsg_read } for pid=3846 comm="syz.4.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 49.770475][ T3839] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.845070][ T29] audit: type=1400 audit(1759202720.297:1437): avc: denied { bind } for pid=3848 comm="syz.3.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 49.865578][ T29] audit: type=1400 audit(1759202720.297:1438): avc: denied { setopt } for pid=3848 comm="syz.3.109" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.886207][ T29] audit: type=1400 audit(1759202720.297:1439): avc: denied { connect } for pid=3848 comm="syz.3.109" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.963631][ T3862] loop0: detected capacity change from 0 to 1024 [ 49.987750][ T3862] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.002693][ T3862] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.020351][ T29] audit: type=1400 audit(1759202720.527:1440): avc: denied { getopt } for pid=3865 comm="syz.3.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.064350][ T29] audit: type=1400 audit(1759202720.557:1441): avc: denied { setopt } for pid=3867 comm="syz.3.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.084448][ T29] audit: type=1400 audit(1759202720.557:1442): avc: denied { listen } for pid=3867 comm="syz.3.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.159868][ T3874] loop3: detected capacity change from 0 to 2048 [ 50.190805][ T3876] loop4: detected capacity change from 0 to 1764 [ 50.200855][ T3862] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 50.212865][ T29] audit: type=1400 audit(1759202720.717:1443): avc: denied { mount } for pid=3875 comm="syz.4.125" name="/" dev="loop4" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 50.259181][ T3839] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.288182][ T3862] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.512143][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.525208][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.731578][ T3843] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.797942][ T3896] loop2: detected capacity change from 0 to 512 [ 50.815267][ T3895] loop0: detected capacity change from 0 to 1024 [ 50.850361][ T3896] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 50.869053][ T3895] EXT4-fs: Ignoring removed orlov option [ 50.877092][ T3898] netlink: 'syz.1.132': attribute type 12 has an invalid length. [ 50.903373][ T3895] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 50.925730][ T3896] EXT4-fs (loop2): 1 truncate cleaned up [ 50.962467][ T3896] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.992604][ T3895] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.062343][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.107741][ T3906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.116597][ T3906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.154263][ T3909] SELinux: failed to load policy [ 51.789198][ T3300] ================================================================== [ 51.797341][ T3300] BUG: KCSAN: data-race in shmem_add_to_page_cache / shmem_getattr [ 51.805281][ T3300] [ 51.807629][ T3300] read-write to 0xffff88811bee73b0 of 8 bytes by task 3913 on cpu 1: [ 51.815707][ T3300] shmem_add_to_page_cache+0x414/0x530 [ 51.821215][ T3300] shmem_get_folio_gfp+0x4e8/0xd60 [ 51.826369][ T3300] shmem_write_begin+0xa8/0x190 [ 51.831251][ T3300] generic_perform_write+0x184/0x490 [ 51.836576][ T3300] shmem_file_write_iter+0xc5/0xf0 [ 51.841717][ T3300] __kernel_write_iter+0x2d3/0x540 [ 51.846867][ T3300] dump_user_range+0x61e/0x8f0 [ 51.851664][ T3300] elf_core_dump+0x1e00/0x1f90 [ 51.856461][ T3300] coredump_write+0xb0a/0xe30 [ 51.861168][ T3300] vfs_coredump+0x142f/0x20c0 [ 51.865860][ T3300] get_signal+0xd85/0xf70 [ 51.870225][ T3300] arch_do_signal_or_restart+0x96/0x480 [ 51.875813][ T3300] irqentry_exit_to_user_mode+0x5e/0xa0 [ 51.881398][ T3300] irqentry_exit+0x12/0x50 [ 51.885856][ T3300] asm_exc_page_fault+0x26/0x30 [ 51.890732][ T3300] [ 51.893075][ T3300] read to 0xffff88811bee73b0 of 8 bytes by task 3300 on cpu 0: [ 51.900648][ T3300] shmem_getattr+0x68/0x200 [ 51.905180][ T3300] vfs_getattr_nosec+0x146/0x1e0 [ 51.910158][ T3300] vfs_statx+0x113/0x390 [ 51.914433][ T3300] vfs_fstatat+0x115/0x170 [ 51.918869][ T3300] __se_sys_newfstatat+0x55/0x260 [ 51.923917][ T3300] __x64_sys_newfstatat+0x55/0x70 [ 51.928982][ T3300] x64_sys_call+0x135a/0x2ff0 [ 51.933686][ T3300] do_syscall_64+0xd2/0x200 [ 51.938203][ T3300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.944122][ T3300] [ 51.946473][ T3300] value changed: 0x00000000000015db -> 0x00000000000015dd [ 51.953586][ T3300] [ 51.955967][ T3300] Reported by Kernel Concurrency Sanitizer on: [ 51.962128][ T3300] CPU: 0 UID: 0 PID: 3300 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 51.972046][ T3300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 51.982236][ T3300] ================================================================== [ 52.007089][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.