last executing test programs: 6.140546197s ago: executing program 3 (id=201): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000140)=0x9d, 0x4) recvmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x101, 0x0) 1.320814032s ago: executing program 4 (id=316): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x8, 0xf}, 0x48) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000340), 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005580)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="cd", 0xffe5}], 0x1}}, {{0x0, 0x0, &(0x7f0000003240), 0x5, &(0x7f0000005740)=ANY=[], 0x12b0}}, {{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000000180)="26c726c468e31d1a6327e6fba34a7e8faee2ced06a29885b9feb475b7ce6c5429f118b6357534c47ff959fe9832a4a698464672b8f2ae35c7d30b3b63f5775166313b77e913373f68238c0d187950c0000773767ba65d6db2ce6101768b761ff13a1b15e", 0xffe4}], 0x1}}], 0x3, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsopen(&(0x7f0000000080)='proc\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000000c0)={0x3000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 1.113624169s ago: executing program 1 (id=319): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) r1 = socket$kcm(0x21, 0x2, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_getres(0x0, 0x0) msgsnd(0x0, &(0x7f0000000240)={0x3}, 0x8, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = dup2(r3, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = socket(0x2, 0x3, 0xff) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r5, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="643c87cf2bd21d995e613d73613b1e78334efea0", 0x14}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000500)="7dcc2c9d4eaf588822e6a9cc8eec13d9754bb76c", 0x14}], 0x302}}], 0x2, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a464357177330772"}}, 0x38}}, 0x0) 1.11110722s ago: executing program 3 (id=202): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x0) umount2(0x0, 0x0) setuid(0x0) 1.070370073s ago: executing program 3 (id=320): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="200000001400030500000000fffc0000020800ff", @ANYRES32=r2, @ANYBLOB="080002"], 0x20}}, 0x0) 1.070175493s ago: executing program 3 (id=321): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b50901000000001826000000f9ffffff180100002020702500000000802020207b9a00fe00000000bda9f9ff0000000037010000f8ffffffb702000008000000b70300000000000004000000060000002da0000000000000b50300000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.065815483s ago: executing program 3 (id=323): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400000010000100f0ffffff000000000000000a60000000060a09040000000000000000020000000900020073797a3200000000090001"], 0xbf}}, 0x0) 1.020217657s ago: executing program 3 (id=324): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000a40)="2e9b3d0006e03dd65193dfb6c575963f86ddf06712e9232f32238c4686c98db0049d90491ceaebfd26f4eef232b916039af858dbb8a19052343f", 0x3a}], 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r0) 778.019787ms ago: executing program 1 (id=326): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$iso9660(&(0x7f00000003c0), &(0x7f0000000040)='./file0/file0\x00', 0x400, &(0x7f00000009c0)={[{@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@dmode={'dmode', 0x3d, 0x3}}, {}, {@dmode={'dmode', 0x3d, 0x1f}}, {@unhide}, {@overriderock}, {}, {}, {@nojoliet}, {@hide}, {@session={'session', 0x3d, 0x3}}, {@check_relaxed}, {@hide}]}, 0x1, 0x40e, &(0x7f0000000a80)="$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") (fail_nth: 15) 700.937323ms ago: executing program 1 (id=329): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001d000100000014000000000007000000", @ANYRES32=r2], 0x30}}, 0x0) 624.512359ms ago: executing program 1 (id=330): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000900)={[{@dioread_lock}, {@noblock_validity}, {@data_err_abort}, {@init_itable}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4d0, &(0x7f00000001c0)="$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") 577.627533ms ago: executing program 0 (id=332): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="183d0c0000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file1\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1c, 0x20005, 0x8, 0x8, 0x1202, r0, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x1000005}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000677b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000002008500000003000000850000000800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, r5}}, 0x48) read$watch_queue(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20) r6 = creat(0x0, 0x0) close(r6) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0xffffffffffffffc0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) r10 = socket$caif_seqpacket(0x25, 0x5, 0x0) dup3(r10, r9, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x8, 0x0, 0x0, 0x7fc00101}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000d50000002a00c50095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000140)='ufshcd_auto_bkops_state\x00', r1}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) 463.345603ms ago: executing program 0 (id=335): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000001c0)=@framed={{}, [@jmp={0x5, 0x0, 0x849aee721dcc84be}], {0x95, 0x0, 0xff00}}, &(0x7f0000000100)='GPL\x00'}, 0x90) 454.848343ms ago: executing program 1 (id=336): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x43424) 426.196585ms ago: executing program 0 (id=337): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x38, r1, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x8000000}]}]}]}, 0x38}}, 0x0) 376.46149ms ago: executing program 0 (id=338): r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1f00c0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x18, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x8848}, 0x0) 375.92382ms ago: executing program 0 (id=339): r0 = perf_event_open(&(0x7f0000003740)={0x4, 0x80, 0x3, 0x7f, 0x9, 0x3, 0x0, 0x8, 0x510, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x3, 0x100000000000052c}, 0x101084, 0x1, 0x0, 0x0, 0x19, 0x401, 0x9, 0x0, 0xff, 0x0, 0x1001f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}}, 0x0, 0x0, r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f0000000300), &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) eventfd(0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x2, 0x0, 0x0) r6 = memfd_create(&(0x7f0000000940)='-B?\x1c\x91\xb4\xd1\x12\x96;\x8c\xd5NI\xc5j\xb6ppp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6\xd4y\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfaXA$\x9c\xa7\v\xb9\x1b/yt\xb1\x81\x19+\b2\xb3\xbb\x8d\xbc\xacva}knh#\xcf!\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f(\xeb\xed$\xa3\xaaP\x190a\xa9\xb2\x04K\x98F\xf6\xd7\xc7B\x93=\xabQ\xf7\x05\x1d\xa1\n\xb9\x16\x85\x89\x02S=W\x9e\x05\"O\xd8\xf9\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6=\xa1J\xab\xecC\xe2{\xfd\x8a\xb4\x8c\x9c\xfb\xf6\xe9\xd8]B6)\x9e\x9cR\xae\x12II\xd7\xf9\xfc\xf5G\xd8\xa4y\xef\x02', 0x7) r7 = dup(r6) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)) r8 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000080)={0x0, "c25d9a942197854e778a9e04c822020572ef3b29a8c91310d355c7d6a153fa6db35b2b94a29c23c2b633cacaea23a29600"}, 0x48, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000140)={r8, 0x1000, 0x1004}, 0x0, &(0x7f0000000a40)="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", &(0x7f0000005180)=""/4100) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r9 = getpid() sched_setaffinity(r9, 0x8, &(0x7f0000000180)=0x3f) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x10, 0x0, 0x7, 0x0, 0x0}) socket$inet_sctp(0x2, 0x0, 0x84) io_uring_enter(r1, 0x174f, 0x0, 0x5, 0x0, 0x0) socket(0x9, 0x2, 0x5) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_da_write_pages\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000000000095", @ANYRES32=0x0, @ANYRESOCT, @ANYRESHEX=0x0, @ANYRES32], &(0x7f0000000500)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x90) pread64(0xffffffffffffffff, &(0x7f0000004180)=""/4096, 0x1000, 0x0) ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, &(0x7f0000000580)={0x40, 'syz1\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='inet_sock_set_state\x00'}, 0x10) io_uring_setup(0x110a, &(0x7f0000000440)={0x0, 0x25b3, 0x200, 0x0, 0x0, 0x0, r4}) 375.68733ms ago: executing program 4 (id=340): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000f00)=ANY=[], 0x8) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1a12fe, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r4 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r3, &(0x7f00000002c0), 0xb) fallocate(r4, 0x20, 0x0, 0x10000) fallocate(r2, 0x8, 0x0, 0x7000) 373.64204ms ago: executing program 4 (id=341): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x8, 0xf}, 0x48) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000200)=@ccm_128={{0x304}, "76131e58a256d4af", "4448076cc60af592e807e038c4797041", "8076e30e", "f79d7fbbf3985dbb"}, 0x28) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f0000000300), 0x20000000}, 0x20) recvmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)=""/186, 0xba}], 0x1, 0x0, 0x38}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001cc0)={r7, &(0x7f0000001c80)}, 0x20) close(r6) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x4, &(0x7f0000000100)=@gcm_256={{}, "2474794233890da1", "d830005894bf527ae179a7173985202bbfb61b36f3678de8ea2d0d6616076243", "5615d9f5", "7c5cec21291a43fe"}, 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r2, 0x10d, 0x39, 0x0, &(0x7f0000000000)) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000340), 0x4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r8}, 0x10) r9 = socket(0x10, 0x3, 0x0) sendto$inet6(r9, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c000a0000000d0085a168d0bf46d32345653600648d0b00120002000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) 302.101596ms ago: executing program 0 (id=344): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x1c, &(0x7f0000003980)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}]}, &(0x7f0000003ac0)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x3930) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x43) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="4c000000100009060081ffffff00000000000000", @ANYRES32=0x0, @ANYBLOB="ad00a888000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x4c}}, 0x0) 256.136309ms ago: executing program 4 (id=347): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000440), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001000)={0x33fe0, r1, 0x601, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 255.939909ms ago: executing program 4 (id=348): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x94, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x821, 0x1}, [@IFLA_LINKINFO={0x70, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x64, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x2400}, @IFLA_GTP_LOCAL6={0x14, 0x8, @dev}, @IFLA_GTP_FD0={0x8, 0x1, @udp6}, @IFLA_GTP_FD1={0x8}, @IFLA_GTP_PDP_HASHSIZE={0x8}, @IFLA_GTP_CREATE_SOCKETS={0x5}, @IFLA_GTP_LOCAL6={0x14, 0x8, @loopback}, @IFLA_GTP_ROLE={0x8, 0x4, 0x1}, @IFLA_GTP_CREATE_SOCKETS={0x5}]}}}, @IFLA_PHYS_SWITCH_ID={0x4}]}, 0x94}}, 0x0) 204.379184ms ago: executing program 4 (id=349): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x3ff) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x8100000000000000) 203.915164ms ago: executing program 1 (id=350): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000a40)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000200)={r1, 0x0, 0xfffffffe}) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f00000000c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x24) prlimit64(0x0, 0x7, &(0x7f0000000000)={0x3}, 0x0) iopl(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ffffffff850000002d00000095", @ANYRESHEX=r2, @ANYBLOB="92dc72bf56df993e96a8698f2d437b4922120695b3e82b2947a8637fae84aeabf7e0249f3f19c12e7db44a0a8e0439bc2b3e8fab49fdcfbb17efce6d78be971ed9e1800d2c841cb3f2a401dc6f4a8e82a77cee928b8542359c88fd9ed3f51645685205623cb10caf692040d9059a522cd5bd1802524cdfb050204da7e1b07bc8027cffe2002a0d2ccdedc674652a5c71947e57b2dab643d1ceb69f0b60ec33eed2f6c071939200b30343c60ef9367fbaaedd0edaf19df767a52607d6eaad33e7439cc62155735afacf532f899230ef113cc473c917bd8b040e834ce9d0f497b4002fd6408d87"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19}, 0x90) connect$rxrpc(r3, &(0x7f0000004c00)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x6d91fb6122d899cd, 0x0, 0x0) syz_emit_ethernet(0x38, &(0x7f00000008c0)={@multicast, @empty, @val={@void}, {@llc_tr={0x11, {@snap={0x0, 0x0, "b020", "d1e549", 0x7, "5b9b76d9d679a05749bd61776d4daf15c8d3497446fc3d3bf9a42328ee"}}}}}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24049845, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x0, r0}) syz_open_procfs$pagemap(r2, &(0x7f00000000c0)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000280)) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100), 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000240)={0x0, 0xca, "93c7b8a3260970a404e4ed590d11a5b2acbd6fbcbc6b33a99745c93718f979ee985a6723bbd945e904a24bde7540e1c1b20d8b21a1ecdfe5e17e51e028f8df0342d6741cae1cde37b20e072687b99e4e95cec178ae58647f948213b1343225c8b021ab70e2b4f17733fea26947fff1db24277aacc9add21ba9519a6e5889d151080d84010ece841d22baf697f2b7ab5068b7d8f9dcc50dcbd658f3de8b87c175e5e9cf7506e9ab7496d9f2f88ed5dbf2477b63e51eabe52738ed653d15ae704cc0d61ad6d287fe4ec372"}, &(0x7f0000000040)=0xd2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x1c, r5, 0x451498c376979b4d, 0x0, 0x0, {}, [@GTPA_O_TEI={0x8, 0x9, 0x20000001}]}, 0x1c}}, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f0000000040)=@framed={{}, [@jmp={0x6, 0x0, 0x2}]}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x90) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x120, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x120}, 0x1, 0x0, 0x0, 0x43090}, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='rxrpc_rx_icmp\x00', r8}, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r6, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x1}], 0x1}}], 0x1, 0x0) 186.813265ms ago: executing program 2 (id=351): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') epoll_create1(0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) socket$l2tp(0x2, 0x2, 0x73) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="58000000030605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3, &(0x7f0000000000), 0x1, 0x614, &(0x7f0000000ac0)="$eJzs3c1vFOUfAPDvbN/b388WNCoepIkxkCgtLWCIMRGORkLw5eap0EKQQgmt0SKJJcGLifHiwcSTB/G/UBKvHrx68OLJkBBjOIhBWTO7O+10u1v6trtt9/NJhp1npjvPM2W//c4++zyzAbSt4fSfQsS+iLiaRAzm9nVGZedw+efu/3njXLokUSy+80cSNz5JFvLHSiqPA5Un/zsYyc+FiL0dK+udnb9+aWJ6eupapTw6d/nq6Oz89UMXL09cmLowdWX8lfHjx44eOz52eFPnl6/61K33Pxz87PR73379MBn77tfTSZyIR5UfSM+r+rk9m6o5/Z0NR7HsQX57+ns9vsljbxd/DWavkyVJ9Qa2rfOV1+OTEfFMDEZH7n9zMD59q6WNAxqqmESWo4C2k2wo/nu3viFAk2XXAdl7+1rvg1cqNPiqBGiGeyfLHQDl2O+KiCz+O8t9g9Eb6db++8myfp4kIjbXM1eW1vHTj6dvpUvU6YcDGmPhZtbLXZ3/k1JsDkVvqdR/v7As/gu5Jd3+9gbrH64qi39onoWbEfFsJf93x7rifzgX/2c3WL/4BwAAAAAAgK1z52REvFxr/F9hcfxPd43xPwMRcWIL6q/z+V/f0pbC3cpKsgXVATn3Tka8VnP87+IY36GOSun/pfEAXcn5i9NThyPiiYg4GF09aXms6rj5EcKHPt/7Vb368+P/0iWtPxsLWDnS3c6qibiTE3MTmz1vIOLezYjnSuN/91e2LB//k+b/pEb+T+P76hrr2Pvi7TP19j0+/oFGKX4TcaBm/l+63E5Wvz/HaOl6YDS7Kljp+Y+/+L5e/eIfWifN//2rx39Pkr9fz+z6jt8dEUfmO4v19m/0+r87ebcjO37qo4m5uWtjEd3JqZXbx9fXZthxzv6zfEJvHVk8ZPGSxv/BF1bv/1u8/s/FYV9ELKyxaU8/Gvit3j75H1onjf/JVfL/G2+WS0v5f/0r47eHfqhX/5k15f+jpZx+sLJF/x/krbgfR/b52WMDtPltBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICdrxAR/4ukMLK4XiiMjEQMRMRT0V+Ynpmde+n8zAdXJtN9pe//L2Tf9DtYLifZ9/8P5crjVeUjEbEnIr7s6CuVR87NTE+2+uQBAAAAAAAAAAAAAAAAAABgmxgozfkv9lTP/0/93tHq1gEN11l5FO/Qfjo3/MxiT/mxb+saAzTVxuMf2OnWHv9dDW0H0Hz14//Bw2JJU5sDNJHrf2hfG4x/HxfALiD/Q7taY59eb6PbAbSC/A8AAAAAALvKnv13fkkiYuHVvtKS6q7sM9gfdrdCqxsAtIwxvNC+Omda3QKgVbzHB5LFtb9rTvavP/o/aUyDAAAAAAAAAAAAAIAVDuwz/x/a1erz/43th91slfn/tYLf7QJgF6n/1R9yP+x23uMDj8v25v8DAAAAAAAAAAAAwDbQe/3SxPT01LXZ+Z238vr2aMb6VhYmtkUztnTlUWOO3BUR2+MEm72S3YKjCXXFQu1dLf67BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALPovAAD//8g9LAI=") socket$nl_generic(0x10, 0x3, 0x10) dup2(0xffffffffffffffff, 0xffffffffffffffff) 90.229653ms ago: executing program 2 (id=352): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x91) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000480)=ANY=[], 0xcc}, 0x1, 0x0, 0x0, 0x40804}, 0x8080) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="aab800000000000002000000e00000020000000000000000000000000000b100"/144], 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'team_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r3], 0x270}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1516c00e1afb4ddd86bb5644f88ee3b77e0313afd611d68b49ee34a772f416bf12311afe5748c37dbb8cfdcc037a4510e24c336298d8e46a6b3a4f942fae578499eced6b59f03b458d33d65c711dd4b8f4eb01183e73dfbe6cf36941ba38283f96d115eb14cbe047a3e9c2c7687c087f83", @ANYRESDEC], 0xec}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r3], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', r3, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000001818110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='signal_generate\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xc}, 0x48) socket$packet(0x11, 0x0, 0x300) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000001f80)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r7, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000006c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xc7, &(0x7f00000003c0), 0x0, 0x10, &(0x7f0000000440), &(0x7f00000004c0), 0x8, 0x31, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r8 = memfd_secret(0x0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800), 0x1000, &(0x7f0000000980)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_fscache}, {@noextend}, {@noextend}, {@fscache}, {@access_any}, {@version_L}, {@access_client}]}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 36.574707ms ago: executing program 2 (id=353): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0x14, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x1e00, 0x1}, 0x48) 36.267458ms ago: executing program 2 (id=354): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x7ffc0002}]}) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x0) umount2(0x0, 0x0) setuid(0x0) 35.144988ms ago: executing program 2 (id=355): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = dup(0xffffffffffffffff) setuid(0xee00) pwritev2(r2, &(0x7f0000000500)=[{&(0x7f00000000c0)="aa", 0x1}], 0x1, 0x0, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x0, 0x0, 0x4}) 0s ago: executing program 2 (id=356): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$iso9660(&(0x7f00000003c0), &(0x7f0000000040)='./file0/file0\x00', 0x400, &(0x7f00000009c0)={[{@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@dmode={'dmode', 0x3d, 0x3}}, {}, {@dmode={'dmode', 0x3d, 0x1f}}, {@unhide}, {@overriderock}, {}, {}, {@nojoliet}, {@hide}, {@uid}, {@check_relaxed}, {@hide}]}, 0x1, 0x40e, &(0x7f0000000a80)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x20) kernel console output (not intermixed with test programs): [ 18.681968][ T29] audit: type=1400 audit(1721513552.120:81): avc: denied { read } for pid=2768 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.10.20' (ED25519) to the list of known hosts. [ 21.322645][ T29] audit: type=1400 audit(1721513554.760:82): avc: denied { mounton } for pid=3056 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.323159][ T3056] cgroup: Unknown subsys name 'net' [ 21.346973][ T29] audit: type=1400 audit(1721513554.760:83): avc: denied { mount } for pid=3056 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.381460][ T29] audit: type=1400 audit(1721513554.790:84): avc: denied { unmount } for pid=3056 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.551316][ T3056] cgroup: Unknown subsys name 'rlimit' [ 21.704618][ T29] audit: type=1400 audit(1721513555.140:85): avc: denied { create } for pid=3056 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.729568][ T29] audit: type=1400 audit(1721513555.140:86): avc: denied { write } for pid=3056 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.754357][ T29] audit: type=1400 audit(1721513555.140:87): avc: denied { read } for pid=3056 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.776823][ T29] audit: type=1400 audit(1721513555.140:88): avc: denied { mounton } for pid=3056 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.785000][ T3074] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.804612][ T29] audit: type=1400 audit(1721513555.140:89): avc: denied { mount } for pid=3056 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.839902][ T29] audit: type=1400 audit(1721513555.250:90): avc: denied { relabelto } for pid=3074 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.870865][ T29] audit: type=1400 audit(1721513555.250:91): avc: denied { write } for pid=3074 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.902371][ T3056] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.917701][ T3083] chnl_net:caif_netlink_parms(): no params data found [ 22.998956][ T3082] chnl_net:caif_netlink_parms(): no params data found [ 23.061402][ T3083] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.069461][ T3083] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.078727][ T3083] bridge_slave_0: entered allmulticast mode [ 23.086584][ T3083] bridge_slave_0: entered promiscuous mode [ 23.094674][ T3083] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.102681][ T3083] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.111709][ T3083] bridge_slave_1: entered allmulticast mode [ 23.118588][ T3083] bridge_slave_1: entered promiscuous mode [ 23.138851][ T3089] chnl_net:caif_netlink_parms(): no params data found [ 23.173775][ T3083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.194142][ T3083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.206149][ T3086] chnl_net:caif_netlink_parms(): no params data found [ 23.219653][ T3082] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.227599][ T3082] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.236249][ T3082] bridge_slave_0: entered allmulticast mode [ 23.243449][ T3082] bridge_slave_0: entered promiscuous mode [ 23.263252][ T3082] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.270931][ T3082] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.279828][ T3082] bridge_slave_1: entered allmulticast mode [ 23.286290][ T3082] bridge_slave_1: entered promiscuous mode [ 23.293422][ T3088] chnl_net:caif_netlink_parms(): no params data found [ 23.327432][ T3082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.338417][ T3083] team0: Port device team_slave_0 added [ 23.345477][ T3083] team0: Port device team_slave_1 added [ 23.369792][ T3082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.404107][ T3089] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.412925][ T3089] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.422011][ T3089] bridge_slave_0: entered allmulticast mode [ 23.433773][ T3089] bridge_slave_0: entered promiscuous mode [ 23.458373][ T3089] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.467872][ T3089] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.477895][ T3089] bridge_slave_1: entered allmulticast mode [ 23.486059][ T3089] bridge_slave_1: entered promiscuous mode [ 23.500043][ T3083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.509849][ T3083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.540064][ T3083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.566855][ T3082] team0: Port device team_slave_0 added [ 23.573418][ T3083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.581199][ T3083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.610923][ T3083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.638326][ T3082] team0: Port device team_slave_1 added [ 23.651792][ T3086] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.659400][ T3086] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.667315][ T3086] bridge_slave_0: entered allmulticast mode [ 23.675742][ T3086] bridge_slave_0: entered promiscuous mode [ 23.688570][ T3089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.699191][ T3088] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.706767][ T3088] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.714395][ T3088] bridge_slave_0: entered allmulticast mode [ 23.720875][ T3088] bridge_slave_0: entered promiscuous mode [ 23.727728][ T3088] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.735469][ T3088] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.743005][ T3088] bridge_slave_1: entered allmulticast mode [ 23.749817][ T3088] bridge_slave_1: entered promiscuous mode [ 23.762026][ T3086] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.769241][ T3086] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.777074][ T3086] bridge_slave_1: entered allmulticast mode [ 23.784573][ T3086] bridge_slave_1: entered promiscuous mode [ 23.799817][ T3089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.821652][ T3082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.828724][ T3082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.860295][ T3082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.890220][ T3082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.899360][ T3082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.929858][ T3082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.947565][ T3086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.959036][ T3089] team0: Port device team_slave_0 added [ 23.971682][ T3088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.984105][ T3088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.998782][ T3086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.012813][ T3089] team0: Port device team_slave_1 added [ 24.020606][ T3083] hsr_slave_0: entered promiscuous mode [ 24.027495][ T3083] hsr_slave_1: entered promiscuous mode [ 24.072621][ T3082] hsr_slave_0: entered promiscuous mode [ 24.079164][ T3082] hsr_slave_1: entered promiscuous mode [ 24.085427][ T3082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.093025][ T3082] Cannot create hsr debugfs directory [ 24.099154][ T3086] team0: Port device team_slave_0 added [ 24.110279][ T3089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.118120][ T3089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.147396][ T3089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.159199][ T3088] team0: Port device team_slave_0 added [ 24.166335][ T3088] team0: Port device team_slave_1 added [ 24.172667][ T3086] team0: Port device team_slave_1 added [ 24.188819][ T3089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.196270][ T3089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.224649][ T3089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.259469][ T3088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.266495][ T3088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.293683][ T3088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.307402][ T3086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.317193][ T3086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.346926][ T3086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.367956][ T3088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.375756][ T3088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.406284][ T3088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.418114][ T3086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.427539][ T3086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.460635][ T3086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.519396][ T3089] hsr_slave_0: entered promiscuous mode [ 24.529164][ T3089] hsr_slave_1: entered promiscuous mode [ 24.536035][ T3089] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.546683][ T3089] Cannot create hsr debugfs directory [ 24.572479][ T3086] hsr_slave_0: entered promiscuous mode [ 24.580418][ T3086] hsr_slave_1: entered promiscuous mode [ 24.589886][ T3086] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.600405][ T3086] Cannot create hsr debugfs directory [ 24.659040][ T3088] hsr_slave_0: entered promiscuous mode [ 24.667931][ T3088] hsr_slave_1: entered promiscuous mode [ 24.676205][ T3088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.687639][ T3088] Cannot create hsr debugfs directory [ 24.754319][ T3083] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 24.773379][ T3083] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 24.784046][ T3083] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 24.811821][ T3083] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 24.857700][ T3082] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 24.883288][ T3082] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 24.892079][ T3082] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 24.914973][ T3082] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 24.943634][ T3088] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 24.953401][ T3088] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 24.962553][ T3088] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 24.977475][ T3088] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 25.009158][ T3089] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 25.018406][ T3089] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 25.029457][ T3089] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 25.041357][ T3089] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 25.078283][ T3086] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 25.093392][ T3086] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 25.107240][ T3086] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 25.118239][ T3086] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 25.135628][ T3083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.182737][ T3082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.194551][ T3083] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.210163][ T3161] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.220322][ T3161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.248114][ T907] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.255812][ T907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.268030][ T3082] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.292373][ T3165] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.300979][ T3165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.328145][ T907] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.336675][ T907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.353019][ T3088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.370772][ T3089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.384192][ T3086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.414482][ T3086] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.437885][ T3088] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.452856][ T3089] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.464702][ T3161] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.475762][ T3161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.494296][ T3082] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.529178][ T3086] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 25.544616][ T3086] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.566810][ T3161] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.577861][ T3161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.594795][ T3161] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.603881][ T3161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.618711][ T3161] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.626913][ T3161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.640382][ T3161] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.648033][ T3161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.670510][ T907] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.680545][ T907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.733304][ T3083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.764230][ T3086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.779015][ T3082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.852142][ T3088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.903565][ T3089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.964129][ T3082] veth0_vlan: entered promiscuous mode [ 25.985349][ T3086] veth0_vlan: entered promiscuous mode [ 26.013575][ T3082] veth1_vlan: entered promiscuous mode [ 26.033412][ T3083] veth0_vlan: entered promiscuous mode [ 26.044705][ T3086] veth1_vlan: entered promiscuous mode [ 26.063105][ T3083] veth1_vlan: entered promiscuous mode [ 26.096325][ T3082] veth0_macvtap: entered promiscuous mode [ 26.112956][ T3086] veth0_macvtap: entered promiscuous mode [ 26.123637][ T3088] veth0_vlan: entered promiscuous mode [ 26.132387][ T3082] veth1_macvtap: entered promiscuous mode [ 26.151194][ T3086] veth1_macvtap: entered promiscuous mode [ 26.162711][ T3088] veth1_vlan: entered promiscuous mode [ 26.174658][ T3083] veth0_macvtap: entered promiscuous mode [ 26.189027][ T3082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.199249][ T3083] veth1_macvtap: entered promiscuous mode [ 26.214963][ T3082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.224559][ T3089] veth0_vlan: entered promiscuous mode [ 26.237159][ T3082] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.247964][ T3082] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.257437][ T3082] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.269312][ T3082] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.290895][ T3086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.306638][ T3086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.321118][ T3086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.332697][ T3089] veth1_vlan: entered promiscuous mode [ 26.344782][ T3086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.356466][ T3086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.372266][ T3086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.385558][ T3083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.404173][ T3083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.418971][ T3083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.433837][ T3083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.448379][ T3083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.466216][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 26.466228][ T29] audit: type=1400 audit(1721513559.900:109): avc: denied { mounton } for pid=3082 comm="syz-executor" path="/root/syzkaller.4IJvg0/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 26.470520][ T3088] veth0_macvtap: entered promiscuous mode [ 26.480586][ T29] audit: type=1400 audit(1721513559.910:110): avc: denied { mount } for pid=3082 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 26.530047][ T3086] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.544545][ T29] audit: type=1400 audit(1721513559.910:111): avc: denied { mounton } for pid=3082 comm="syz-executor" path="/root/syzkaller.4IJvg0/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 26.558348][ T3086] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.589809][ T29] audit: type=1400 audit(1721513559.910:112): avc: denied { mount } for pid=3082 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 26.589836][ T29] audit: type=1400 audit(1721513559.910:113): avc: denied { unmount } for pid=3082 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 26.605748][ T3086] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.665659][ T3086] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.676707][ T29] audit: type=1400 audit(1721513560.120:114): avc: denied { mounton } for pid=3082 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=452 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 26.694076][ T3083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.718630][ T3083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.729614][ T3083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.741744][ T3083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.754655][ T3083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.769976][ T3088] veth1_macvtap: entered promiscuous mode [ 26.787482][ T3089] veth0_macvtap: entered promiscuous mode [ 26.788677][ T29] audit: type=1400 audit(1721513560.220:115): avc: denied { read write } for pid=3082 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 26.798023][ T3088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.834875][ T3088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.840945][ T29] audit: type=1400 audit(1721513560.260:116): avc: denied { open } for pid=3082 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 26.845850][ T3088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.872370][ T29] audit: type=1400 audit(1721513560.260:117): avc: denied { ioctl } for pid=3082 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 26.883721][ T3088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.924923][ T3088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.930223][ T29] audit: type=1400 audit(1721513560.360:118): avc: denied { prog_load } for pid=3225 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 26.936093][ T3088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.972808][ T3088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.988344][ T3083] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.997442][ T3083] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.006547][ T3083] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.015881][ T3083] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.027086][ T3228] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6'. [ 27.037168][ T3088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.049005][ T3088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.059250][ T3088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.069810][ T3088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.079656][ T3088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.090145][ T3088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.101487][ T3088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.115476][ T3089] veth1_macvtap: entered promiscuous mode [ 27.132441][ T3088] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.141706][ T3088] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.150643][ T3088] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.159600][ T3088] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.190728][ T3089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.203286][ T3089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.213333][ T3089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.224737][ T3089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.235042][ T3089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.247119][ T3089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.257778][ T3089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.269188][ T3089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.281448][ T3089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.302388][ T3089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.313638][ T3089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.324960][ T3089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.336688][ T3089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.346947][ T3089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.357420][ T3089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.367255][ T3089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.377726][ T3089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.389816][ T3089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.440918][ T3089] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.451290][ T3089] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.460180][ T3089] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.469104][ T3089] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.485179][ T3240] netlink: 'syz.3.10': attribute type 10 has an invalid length. [ 27.506347][ T3240] team0: Failed to send options change via netlink (err -105) [ 27.514138][ T3240] team0: Port device netdevsim1 added [ 27.522210][ T3240] netlink: 'syz.3.10': attribute type 10 has an invalid length. [ 27.568947][ T3252] loop1: detected capacity change from 0 to 128 [ 27.603634][ T3244] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59920 sclass=netlink_route_socket pid=3244 comm=syz.2.9 [ 27.620658][ T3254] loop0: detected capacity change from 0 to 1024 [ 27.657710][ T3254] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 27.664957][ T3259] loop4: detected capacity change from 0 to 512 [ 27.689555][ C1] hrtimer: interrupt took 64109 ns [ 27.721568][ T3259] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 27.735413][ T3259] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.826598][ T3259] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.5: Directory hole found for htree leaf block 0 [ 27.893036][ T3259] syz.4.5 (3259) used greatest stack depth: 11088 bytes left [ 27.912063][ T3089] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.931977][ T3290] netlink: 172 bytes leftover after parsing attributes in process `syz.3.23'. [ 28.121074][ T3300] pim6reg1: entered promiscuous mode [ 28.126491][ T3300] pim6reg1: entered allmulticast mode [ 28.133440][ T3083] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.183239][ T3313] loop1: detected capacity change from 0 to 512 [ 28.204170][ T3313] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 28.220861][ T3313] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 28.248078][ T3313] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 28.278028][ T3313] EXT4-fs (loop1): 1 truncate cleaned up [ 28.290264][ T3313] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 28.329915][ T3088] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.376376][ T3325] tipc: Started in network mode [ 28.381588][ T3325] tipc: Node identity 9a9693b30382, cluster identity 4711 [ 28.389877][ T3325] tipc: Enabled bearer , priority 0 [ 28.506090][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 28.599624][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.608538][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.616095][ T3301] bridge_slave_0: entered allmulticast mode [ 28.623104][ T3301] bridge_slave_0: entered promiscuous mode [ 28.636195][ T3324] tipc: Disabling bearer [ 28.645268][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.652538][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.660485][ T3301] bridge_slave_1: entered allmulticast mode [ 28.667380][ T3301] bridge_slave_1: entered promiscuous mode [ 28.718041][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.737006][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.767421][ T3301] team0: Port device team_slave_0 added [ 28.776466][ T3301] team0: Port device team_slave_1 added [ 28.813736][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.822167][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.851845][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.870714][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.878560][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.910309][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.952831][ T3301] hsr_slave_0: entered promiscuous mode [ 28.962219][ T3301] hsr_slave_1: entered promiscuous mode [ 28.969052][ T3301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.980987][ T3301] Cannot create hsr debugfs directory [ 29.034258][ T3088] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 29.045878][ T3088] CPU: 1 PID: 3088 Comm: syz-executor Not tainted 6.10.0-syzkaller-10729-g3c3ff7be9729 #0 [ 29.057077][ T3088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 29.068729][ T3088] Call Trace: [ 29.072249][ T3088] [ 29.075198][ T3088] dump_stack_lvl+0xf2/0x150 [ 29.079879][ T3088] dump_stack+0x15/0x20 [ 29.084157][ T3088] dump_header+0x83/0x2d0 [ 29.088749][ T3088] oom_kill_process+0x33e/0x4c0 [ 29.093688][ T3088] out_of_memory+0x9af/0xbe0 [ 29.098933][ T3088] ? try_to_free_mem_cgroup_pages+0x22a/0x4e0 [ 29.105106][ T3088] mem_cgroup_out_of_memory+0x13e/0x190 [ 29.110965][ T3088] try_charge_memcg+0x745/0xcd0 [ 29.115830][ T3088] ? _raw_spin_unlock+0x26/0x50 [ 29.120811][ T3088] ? radix_tree_lookup+0xf9/0x150 [ 29.125953][ T3088] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 29.132051][ T3088] __read_swap_cache_async+0x2b9/0x520 [ 29.137636][ T3088] swap_cluster_readahead+0x276/0x3f0 [ 29.143012][ T3088] swapin_readahead+0xe2/0x7a0 [ 29.147798][ T3088] ? __filemap_get_folio+0x420/0x5b0 [ 29.153363][ T3088] ? swap_cache_get_folio+0x6e/0x210 [ 29.158651][ T3088] do_swap_page+0x3bc/0x1840 [ 29.163676][ T3088] ? hrtimer_try_to_cancel+0x106/0x1d0 [ 29.169745][ T3088] ? __rcu_read_lock+0x36/0x50 [ 29.174590][ T3088] handle_mm_fault+0x8b9/0x2ac0 [ 29.179461][ T3088] exc_page_fault+0x3b9/0x650 [ 29.184161][ T3088] asm_exc_page_fault+0x26/0x30 [ 29.189035][ T3088] RIP: 0033:0x7f149bb87b05 [ 29.193451][ T3088] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 3e da 12 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 29.213444][ T3088] RSP: 002b:00007ffdfac8a608 EFLAGS: 00010246 [ 29.219590][ T3088] RAX: 0000000000000000 RBX: 0000000000000016 RCX: 00007f149bb87b03 [ 29.227574][ T3088] RDX: 00007ffdfac8a620 RSI: 0000000000000000 RDI: 0000000000000000 [ 29.235616][ T3088] RBP: 00007ffdfac8a69c R08: 000000003b28edb6 R09: 7fffffffffffffff [ 29.243597][ T3088] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 29.252025][ T3088] R13: 0000000000000bb8 R14: 0000000000006f50 R15: 0000000000006f50 [ 29.260068][ T3088] [ 29.263209][ T3088] memory: usage 307200kB, limit 307200kB, failcnt 202 [ 29.271096][ T3088] memory+swap: usage 293516kB, limit 9007199254740988kB, failcnt 0 [ 29.279402][ T3088] kmem: usage 293312kB, limit 9007199254740988kB, failcnt 0 [ 29.286865][ T3088] Memory cgroup stats for /syz1: [ 29.292576][ T3088] cache 12288 [ 29.301049][ T3088] rss 0 [ 29.303865][ T3088] shmem 0 [ 29.306854][ T3088] mapped_file 12288 [ 29.310693][ T3088] dirty 12288 [ 29.314002][ T3088] writeback 0 [ 29.317446][ T3088] workingset_refault_anon 5 [ 29.322081][ T3088] workingset_refault_file 0 [ 29.327189][ T3088] swap 98304 [ 29.330496][ T3088] swapcached 12288 [ 29.334209][ T3088] pgpgin 552 [ 29.337928][ T3088] pgpgout 546 [ 29.341228][ T3088] pgfault 1113 [ 29.344848][ T3088] pgmajfault 4 [ 29.348356][ T3088] inactive_anon 0 [ 29.352255][ T3088] active_anon 12288 [ 29.356136][ T3088] inactive_file 0 [ 29.360355][ T3088] active_file 12288 [ 29.364278][ T3088] unevictable 0 [ 29.367725][ T3088] hierarchical_memory_limit 314572800 [ 29.373154][ T3088] hierarchical_memsw_limit 9223372036854771712 [ 29.383509][ T3088] total_cache 12288 [ 29.389316][ T3088] total_rss 0 [ 29.394556][ T3088] total_shmem 0 [ 29.400295][ T3088] total_mapped_file 12288 [ 29.406053][ T3088] total_dirty 12288 [ 29.410104][ T3088] total_writeback 0 [ 29.414985][ T3088] total_workingset_refault_anon 5 [ 29.423213][ T3088] total_workingset_refault_file 0 [ 29.429302][ T3088] total_swap 98304 [ 29.435280][ T3088] total_swapcached 12288 [ 29.441046][ T3088] total_pgpgin 552 [ 29.445700][ T3088] total_pgpgout 546 [ 29.451617][ T3088] total_pgfault 1113 [ 29.456835][ T3088] total_pgmajfault 4 [ 29.461554][ T3088] total_inactive_anon 0 [ 29.465848][ T3088] total_active_anon 12288 [ 29.470269][ T3088] total_inactive_file 0 [ 29.474587][ T3088] total_active_file 12288 [ 29.478996][ T3088] total_unevictable 0 [ 29.483005][ T3088] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.39,pid=3340,uid=0 [ 29.498145][ T3088] Memory cgroup out of memory: Killed process 3340 (syz.1.39) total-vm:82668kB, anon-rss:452kB, file-rss:9272kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 29.518897][ T3340] syz.1.39 (3340) used greatest stack depth: 10168 bytes left [ 29.531810][ T3342] syz.1.39 (3342) used greatest stack depth: 10104 bytes left [ 29.596768][ T3301] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.873407][ T3382] loop1: detected capacity change from 0 to 128 [ 29.883240][ T3382] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 29.898155][ T3382] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 29.939237][ T3088] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 29.963318][ T3385] capability: warning: `syz.1.55' uses deprecated v2 capabilities in a way that may be insecure [ 29.981967][ T3385] loop1: detected capacity change from 0 to 1024 [ 29.999878][ T3385] syz.1.55 uses obsolete (PF_INET,SOCK_PACKET) [ 30.113506][ T3379] syz.0.53 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 30.125128][ T3379] CPU: 0 PID: 3379 Comm: syz.0.53 Not tainted 6.10.0-syzkaller-10729-g3c3ff7be9729 #0 [ 30.134778][ T3379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 30.144869][ T3379] Call Trace: [ 30.148151][ T3379] [ 30.151072][ T3379] dump_stack_lvl+0xf2/0x150 [ 30.155665][ T3379] dump_stack+0x15/0x20 [ 30.159834][ T3379] dump_header+0x83/0x2d0 [ 30.164372][ T3379] oom_kill_process+0x33e/0x4c0 [ 30.169331][ T3379] out_of_memory+0x9af/0xbe0 [ 30.174033][ T3379] ? try_to_free_mem_cgroup_pages+0x22a/0x4e0 [ 30.180223][ T3379] mem_cgroup_out_of_memory+0x13e/0x190 [ 30.185849][ T3379] try_charge_memcg+0x745/0xcd0 [ 30.190873][ T3379] ? _raw_spin_unlock+0x26/0x50 [ 30.196111][ T3379] ? radix_tree_lookup+0xf9/0x150 [ 30.201186][ T3379] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 30.207316][ T3379] __read_swap_cache_async+0x2b9/0x520 [ 30.212840][ T3379] swap_cluster_readahead+0x276/0x3f0 [ 30.218426][ T3379] swapin_readahead+0xe2/0x7a0 [ 30.223193][ T3379] ? __filemap_get_folio+0x420/0x5b0 [ 30.228508][ T3379] ? swap_cache_get_folio+0x6e/0x210 [ 30.233842][ T3379] do_swap_page+0x3bc/0x1840 [ 30.238522][ T3379] ? cgroup_rstat_updated+0x99/0x550 [ 30.243811][ T3379] ? __rcu_read_lock+0x36/0x50 [ 30.248585][ T3379] handle_mm_fault+0x8b9/0x2ac0 [ 30.253741][ T3379] exc_page_fault+0x3b9/0x650 [ 30.259224][ T3379] asm_exc_page_fault+0x26/0x30 [ 30.264179][ T3379] RIP: 0033:0x7f572a4fa624 [ 30.268962][ T3379] Code: 00 69 3d 93 b0 de 00 e8 03 00 00 48 8d 1d 54 b9 2b 00 e8 9f b4 12 00 eb 11 0f 1f 44 00 00 48 81 c3 d8 00 00 00 48 39 dd 74 bc <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 87 ee ff ff eb [ 30.289245][ T3379] RSP: 002b:00007fffd6708940 EFLAGS: 00010202 [ 30.297656][ T3379] RAX: 0000000000000000 RBX: 00007f572a7b5f60 RCX: 0000000000000000 [ 30.305895][ T3379] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555570965808 [ 30.314849][ T3379] RBP: 00007f572a7b7a60 R08: 0000000000000000 R09: 7fffffffffffffff [ 30.323173][ T3379] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000077d8 [ 30.331468][ T3379] R13: 0000000000000032 R14: 00007f572a7b7a60 R15: 00007fffd6708a20 [ 30.340302][ T3379] [ 30.343923][ T3379] memory: usage 307200kB, limit 307200kB, failcnt 206 [ 30.351330][ T3379] memory+swap: usage 307304kB, limit 9007199254740988kB, failcnt 0 [ 30.359254][ T3379] kmem: usage 289472kB, limit 9007199254740988kB, failcnt 0 [ 30.367127][ T3379] Memory cgroup stats for /syz0: [ 30.369192][ T3379] cache 8192 [ 30.378209][ T3379] rss 0 [ 30.381125][ T3379] shmem 0 [ 30.384247][ T3379] mapped_file 8192 [ 30.388051][ T3379] dirty 8192 [ 30.392297][ T3379] writeback 4096 [ 30.395847][ T3379] workingset_refault_anon 0 [ 30.400711][ T3379] workingset_refault_file 0 [ 30.405209][ T3379] swap 106496 [ 30.408477][ T3379] swapcached 4096 [ 30.412313][ T3379] pgpgin 2273 [ 30.415599][ T3379] pgpgout 2270 [ 30.419041][ T3379] pgfault 2824 [ 30.422462][ T3379] pgmajfault 2 [ 30.425816][ T3379] inactive_anon 4096 [ 30.429730][ T3379] active_anon 0 [ 30.433261][ T3379] inactive_file 8192 [ 30.437144][ T3379] active_file 0 [ 30.440647][ T3379] unevictable 0 [ 30.444167][ T3379] hierarchical_memory_limit 314572800 [ 30.449626][ T3379] hierarchical_memsw_limit 9223372036854771712 [ 30.455867][ T3379] total_cache 8192 [ 30.459858][ T3379] total_rss 0 [ 30.463138][ T3379] total_shmem 0 [ 30.466685][ T3379] total_mapped_file 8192 [ 30.471046][ T3379] total_dirty 8192 [ 30.474814][ T3379] total_writeback 4096 [ 30.479032][ T3379] total_workingset_refault_anon 0 [ 30.484110][ T3379] total_workingset_refault_file 0 [ 30.489391][ T3379] total_swap 106496 [ 30.493250][ T3379] total_swapcached 4096 [ 30.497418][ T3379] total_pgpgin 2273 [ 30.501599][ T3379] total_pgpgout 2270 [ 30.505555][ T3379] total_pgfault 2824 [ 30.509440][ T3379] total_pgmajfault 2 [ 30.513343][ T3379] total_inactive_anon 4096 [ 30.517776][ T3379] total_active_anon 0 [ 30.521786][ T3379] total_inactive_file 8192 [ 30.526189][ T3379] total_active_file 0 [ 30.530180][ T3379] total_unevictable 0 [ 30.534311][ T3379] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.53,pid=3379,uid=0 [ 30.549226][ T3379] Memory cgroup out of memory: Killed process 3379 (syz.0.53) total-vm:82668kB, anon-rss:580kB, file-rss:9272kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 30.557799][ T3390] loop2: detected capacity change from 0 to 1764 [ 30.573734][ T3390] iso9660: Unknown parameter '{' [ 30.583340][ T3390] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 30.645357][ T3400] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.696408][ T3407] loop2: detected capacity change from 0 to 512 [ 30.712771][ T3407] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.725543][ T3407] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 30.755175][ T3086] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.814018][ T3413] sctp: [Deprecated]: syz.2.66 (pid 3413) Use of struct sctp_assoc_value in delayed_ack socket option. [ 30.814018][ T3413] Use struct sctp_sack_info instead [ 30.887109][ T3421] loop2: detected capacity change from 0 to 512 [ 30.901700][ T3421] EXT4-fs error (device loop2): ext4_quota_enable:7018: comm syz.2.69: Bad quota inum: 1, type: 2 [ 30.926058][ T3421] EXT4-fs warning (device loop2): ext4_enable_quotas:7066: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 30.951351][ T3421] EXT4-fs (loop2): mount failed [ 31.003715][ T3435] netlink: 68 bytes leftover after parsing attributes in process `syz.2.74'. [ 31.031219][ T3435] 9pnet_fd: Insufficient options for proto=fd [ 31.299705][ T3404] syz.0.63 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 31.314217][ T3404] CPU: 0 PID: 3404 Comm: syz.0.63 Not tainted 6.10.0-syzkaller-10729-g3c3ff7be9729 #0 [ 31.326145][ T3404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 31.336289][ T3404] Call Trace: [ 31.339680][ T3404] [ 31.342640][ T3404] dump_stack_lvl+0xf2/0x150 [ 31.347354][ T3404] dump_stack+0x15/0x20 [ 31.351907][ T3404] dump_header+0x83/0x2d0 [ 31.356577][ T3404] oom_kill_process+0x33e/0x4c0 [ 31.361416][ T3404] out_of_memory+0x9af/0xbe0 [ 31.366133][ T3404] ? try_to_free_mem_cgroup_pages+0x22a/0x4e0 [ 31.372412][ T3404] mem_cgroup_out_of_memory+0x13e/0x190 [ 31.378769][ T3404] try_charge_memcg+0x745/0xcd0 [ 31.383744][ T3404] ? get_page_from_freelist+0x1a30/0x1a70 [ 31.390781][ T3404] obj_cgroup_charge_pages+0xbd/0x1d0 [ 31.396230][ T3404] __memcg_kmem_charge_page+0x9d/0x170 [ 31.403168][ T3404] __alloc_pages_noprof+0x1bc/0x360 [ 31.409164][ T3404] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 31.416300][ T3404] alloc_pages_noprof+0xe1/0x100 [ 31.422116][ T3404] __vmalloc_node_range_noprof+0x719/0xef0 [ 31.429498][ T3404] __kvmalloc_node_noprof+0x121/0x170 [ 31.436022][ T3404] ? ip_set_alloc+0x1f/0x30 [ 31.441100][ T3404] ip_set_alloc+0x1f/0x30 [ 31.446709][ T3404] hash_netiface_create+0x273/0x730 [ 31.453303][ T3404] ? __nla_parse+0x40/0x60 [ 31.458897][ T3404] ? __pfx_hash_netiface_create+0x10/0x10 [ 31.467101][ T3404] ip_set_create+0x359/0x8a0 [ 31.472684][ T3404] ? strnstr+0xf1/0x100 [ 31.477300][ T3404] ? __nla_parse+0x40/0x60 [ 31.482711][ T3404] nfnetlink_rcv_msg+0x4a9/0x570 [ 31.488352][ T3404] netlink_rcv_skb+0x12c/0x230 [ 31.493306][ T3404] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 31.498933][ T3404] nfnetlink_rcv+0x16c/0x15b0 [ 31.503888][ T3404] ? kmem_cache_free+0xd8/0x280 [ 31.508864][ T3404] ? nlmon_xmit+0x51/0x60 [ 31.513613][ T3404] ? __kfree_skb+0x102/0x150 [ 31.518670][ T3404] ? consume_skb+0x57/0x180 [ 31.523250][ T3404] ? nlmon_xmit+0x51/0x60 [ 31.527564][ T3404] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 31.533082][ T3404] ? __dev_queue_xmit+0xb86/0x1fe0 [ 31.538425][ T3404] ? ref_tracker_free+0x3a5/0x410 [ 31.543545][ T3404] ? __dev_queue_xmit+0x161/0x1fe0 [ 31.549428][ T3404] ? __netlink_deliver_tap+0x495/0x4c0 [ 31.556038][ T3404] netlink_unicast+0x593/0x670 [ 31.561488][ T3404] netlink_sendmsg+0x5cc/0x6e0 [ 31.566362][ T3404] ? __pfx_netlink_sendmsg+0x10/0x10 [ 31.571660][ T3404] __sock_sendmsg+0x140/0x180 [ 31.576481][ T3404] ____sys_sendmsg+0x312/0x410 [ 31.581334][ T3404] __sys_sendmsg+0x1e9/0x280 [ 31.585921][ T3404] ? futex_wait+0x18e/0x1c0 [ 31.590805][ T3404] __x64_sys_sendmsg+0x46/0x50 [ 31.595623][ T3404] x64_sys_call+0x26f8/0x2e00 [ 31.600316][ T3404] do_syscall_64+0xc9/0x1c0 [ 31.604983][ T3404] ? clear_bhb_loop+0x55/0xb0 [ 31.609853][ T3404] ? clear_bhb_loop+0x55/0xb0 [ 31.615003][ T3404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 31.621497][ T3404] RIP: 0033:0x7f572a625b59 [ 31.626128][ T3404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 31.645819][ T3404] RSP: 002b:00007f57298a7048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 31.654503][ T3404] RAX: ffffffffffffffda RBX: 00007f572a7b5f60 RCX: 00007f572a625b59 [ 31.662987][ T3404] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 31.671565][ T3404] RBP: 00007f572a694e5d R08: 0000000000000000 R09: 0000000000000000 [ 31.679703][ T3404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 31.687870][ T3404] R13: 000000000000000b R14: 00007f572a7b5f60 R15: 00007fffd6708858 [ 31.695918][ T3404] [ 31.700447][ T3404] memory: usage 307168kB, limit 307200kB, failcnt 276 [ 31.708222][ T3404] memory+swap: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 31.716149][ T3404] kmem: usage 306984kB, limit 9007199254740988kB, failcnt 0 [ 31.723636][ T3404] Memory cgroup stats for /syz0: [ 31.723988][ T3404] cache 8192 [ 31.732256][ T3404] rss 180224 [ 31.735456][ T3404] shmem 0 [ 31.738829][ T3404] mapped_file 8192 [ 31.743124][ T3404] dirty 8192 [ 31.747188][ T3404] writeback 0 [ 31.750697][ T3404] workingset_refault_anon 22 [ 31.755344][ T3404] workingset_refault_file 15 [ 31.760058][ T3404] swap 24576 [ 31.763253][ T3404] swapcached 4096 [ 31.766924][ T3404] pgpgin 2403 [ 31.770222][ T3404] pgpgout 2357 [ 31.773601][ T3404] pgfault 3075 [ 31.778090][ T3404] pgmajfault 8 [ 31.781928][ T3404] inactive_anon 0 [ 31.786008][ T3404] active_anon 4096 [ 31.789738][ T3404] inactive_file 0 [ 31.793365][ T3404] active_file 0 [ 31.796823][ T3404] unevictable 184320 [ 31.800868][ T3404] hierarchical_memory_limit 314572800 [ 31.806330][ T3404] hierarchical_memsw_limit 9223372036854771712 [ 31.812914][ T3404] total_cache 8192 [ 31.815780][ T3455] __find_get_block_slow() failed. block=144115188075855872, b_blocknr=0, b_state=0x0011601b, b_size=4096, device sda1 blocksize: 4096 [ 31.816617][ T3404] total_rss 180224 [ 31.816626][ T3404] total_shmem 0 [ 31.831118][ T3455] grow_buffers: requested out-of-range block 144115188075855872 for device sda1 [ 31.834549][ T3404] total_mapped_file 8192 [ 31.837988][ T3455] EXT4-fs warning (device sda1): ext4_resize_fs:2018: can't read last block, resize aborted [ 31.848340][ T3404] total_dirty 8192 [ 31.866292][ T3404] total_writeback 0 [ 31.870124][ T3404] total_workingset_refault_anon 22 [ 31.875285][ T3404] total_workingset_refault_file 15 [ 31.880464][ T3404] total_swap 24576 [ 31.884250][ T3404] total_swapcached 4096 [ 31.888478][ T3404] total_pgpgin 2403 [ 31.892382][ T3404] total_pgpgout 2357 [ 31.896260][ T3404] total_pgfault 3075 [ 31.901168][ T3404] total_pgmajfault 8 [ 31.905143][ T3404] total_inactive_anon 0 [ 31.910212][ T3404] total_active_anon 4096 [ 31.914491][ T3404] total_inactive_file 0 [ 31.919274][ T3404] total_active_file 0 [ 31.923385][ T3404] total_unevictable 184320 [ 31.928000][ T3404] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.63,pid=3402,uid=0 [ 31.942712][ T3404] Memory cgroup out of memory: Killed process 3404 (syz.0.63) total-vm:80752kB, anon-rss:432kB, file-rss:9976kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 32.119092][ T3404] syz.0.63 (3404) used greatest stack depth: 7528 bytes left [ 32.290964][ T3301] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.371402][ T3301] team0: Port device netdevsim1 removed [ 32.392251][ T3301] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.406281][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 32.406293][ T29] audit: type=1400 audit(1721513565.840:229): avc: denied { read } for pid=3472 comm="syz.1.88" path="socket:[4263]" dev="sockfs" ino=4263 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 32.447289][ T29] audit: type=1400 audit(1721513565.880:230): avc: denied { bind } for pid=3457 comm="syz.2.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 32.467031][ T3459] loop2: detected capacity change from 0 to 512 [ 32.474058][ T29] audit: type=1400 audit(1721513565.880:231): avc: denied { name_bind } for pid=3457 comm="syz.2.83" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 32.496005][ T29] audit: type=1400 audit(1721513565.880:232): avc: denied { node_bind } for pid=3457 comm="syz.2.83" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 32.523514][ T3473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.88'. [ 32.526724][ T29] audit: type=1400 audit(1721513565.880:233): avc: denied { write } for pid=3457 comm="syz.2.83" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 32.554165][ T29] audit: type=1400 audit(1721513565.880:234): avc: denied { read } for pid=3457 comm="syz.2.83" name="vsock" dev="devtmpfs" ino=231 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.576803][ T29] audit: type=1400 audit(1721513565.880:235): avc: denied { open } for pid=3457 comm="syz.2.83" path="/dev/vsock" dev="devtmpfs" ino=231 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.600002][ T29] audit: type=1400 audit(1721513565.910:236): avc: denied { write } for pid=3457 comm="syz.2.83" name="rdma_cm" dev="devtmpfs" ino=226 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.606872][ T3484] SELinux: Context system_u:object_r:apt_var_lib_t:s0 is not valid (left unmapped). [ 32.624787][ T29] audit: type=1400 audit(1721513566.040:237): avc: denied { create } for pid=3483 comm="syz.0.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 32.658151][ T29] audit: type=1400 audit(1721513566.070:238): avc: denied { relabelto } for pid=3483 comm="syz.0.92" name="file0" dev="tmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:apt_var_lib_t:s0" [ 32.685993][ T3301] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.745617][ T3301] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.756468][ T40] bridge_slave_1: left allmulticast mode [ 32.759960][ T3491] loop1: detected capacity change from 0 to 2048 [ 32.762241][ T40] bridge_slave_1: left promiscuous mode [ 32.774202][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.790513][ T40] bridge_slave_0: left allmulticast mode [ 32.796225][ T40] bridge_slave_0: left promiscuous mode [ 32.801970][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.831187][ T3491] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.915906][ T3501] EXT4-fs error (device loop1): ext4_search_dir:1505: inode #2: block 16: comm syz.1.95: bad entry in directory: inode out of bounds - offset=44, inode=185, rec_len=16, size=2048 fake=0 [ 32.960638][ T3501] EXT4-fs error (device loop1): ext4_find_dest_de:2067: inode #2: block 16: comm syz.1.95: bad entry in directory: inode out of bounds - offset=44, inode=185, rec_len=16, size=2048 fake=0 [ 33.002510][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 33.023690][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 33.042088][ T40] bond0 (unregistering): Released all slaves [ 33.059281][ T3301] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 33.068713][ T3301] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 33.107617][ T3301] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 33.158574][ T40] hsr_slave_0: left promiscuous mode [ 33.173130][ T40] hsr_slave_1: left promiscuous mode [ 33.191636][ T3088] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.209791][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 33.217396][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 33.226686][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 33.234686][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 33.255975][ T40] veth1_macvtap: left promiscuous mode [ 33.262179][ T40] veth0_macvtap: left promiscuous mode [ 33.267948][ T40] veth1_vlan: left promiscuous mode [ 33.273299][ T40] veth0_vlan: left promiscuous mode [ 33.386275][ T40] team0 (unregistering): Port device team_slave_1 removed [ 33.396669][ T40] team0 (unregistering): Port device team_slave_0 removed [ 33.443256][ T3511] netlink: 'syz.4.101': attribute type 6 has an invalid length. [ 33.472404][ T3521] vhci_hcd: default hub control req: 0000 v0000 i0000 l2 [ 33.496575][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.518935][ T3523] loop0: detected capacity change from 0 to 1024 [ 33.523924][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.546398][ T3523] EXT4-fs: Ignoring removed orlov option [ 33.553758][ T3523] /dev/loop0: Can't open blockdev [ 33.560520][ T3162] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.567600][ T3162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.581451][ T3162] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.588780][ T3162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.603279][ T3531] loop0: detected capacity change from 0 to 512 [ 33.628912][ T3531] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.630922][ T3301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.660129][ T3531] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 33.707824][ T3083] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.743760][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.877392][ T3301] veth0_vlan: entered promiscuous mode [ 33.897894][ T3301] veth1_vlan: entered promiscuous mode [ 33.926796][ T3301] veth0_macvtap: entered promiscuous mode [ 33.935254][ T3301] veth1_macvtap: entered promiscuous mode [ 33.973171][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.983875][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.993967][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.994580][ T3560] loop2: detected capacity change from 0 to 512 [ 34.004691][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.012604][ T3560] EXT4-fs: Ignoring removed bh option [ 34.020692][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.020707][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.020714][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.038017][ T3560] EXT4-fs error (device loop2): __ext4_iget:4985: inode #15: block 1803188595: comm syz.2.113: invalid block [ 34.046530][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.057811][ T3560] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.113: couldn't read orphan inode 15 (err -117) [ 34.073265][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.079517][ T3560] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.099280][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.120447][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.130292][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.141138][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.151312][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.162074][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.171880][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.182322][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.203679][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.213837][ T3086] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.225048][ T3301] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.234395][ T3301] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.243415][ T3301] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.252283][ T3301] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.260390][ T3571] netlink: 24 bytes leftover after parsing attributes in process `syz.4.123'. [ 34.327808][ T3582] loop2: detected capacity change from 0 to 128 [ 34.349156][ T3585] loop0: detected capacity change from 0 to 512 [ 34.372257][ T3582] Cannot find add_set index 0 as target [ 34.389459][ T3593] loop3: detected capacity change from 0 to 2048 [ 34.400060][ T3593] ======================================================= [ 34.400060][ T3593] WARNING: The mand mount option has been deprecated and [ 34.400060][ T3593] and is ignored by this kernel. Remove the mand [ 34.400060][ T3593] option from the mount to silence this warning. [ 34.400060][ T3593] ======================================================= [ 34.407073][ T3599] loop4: detected capacity change from 0 to 512 [ 34.452494][ T3599] EXT4-fs: Ignoring removed mblk_io_submit option [ 34.459380][ T3593] ext4: Unknown parameter 'noacl' [ 34.470197][ T3599] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 34.475035][ T3585] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.488365][ T3599] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 34.502652][ T3599] System zones: 1-12 [ 34.507344][ T3585] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 34.529356][ T3599] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.129: corrupted in-inode xattr: e_value size too large [ 34.566806][ T3599] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.129: couldn't read orphan inode 15 (err -117) [ 34.579845][ T3083] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.581027][ T3599] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.625476][ T3089] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.627160][ T3628] loop2: detected capacity change from 0 to 512 [ 34.642625][ T3628] EXT4-fs: Ignoring removed bh option [ 34.654911][ T3628] EXT4-fs error (device loop2): __ext4_iget:4985: inode #15: block 1803188595: comm syz.2.139: invalid block [ 34.687317][ T3629] loop0: detected capacity change from 0 to 1024 [ 34.703200][ T3629] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.719615][ T3628] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.139: couldn't read orphan inode 15 (err -117) [ 34.755154][ T3646] netlink: 'syz.4.145': attribute type 13 has an invalid length. [ 34.763067][ T3646] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.145'. [ 34.763688][ T3650] loop1: detected capacity change from 0 to 128 [ 34.775730][ T3629] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.794429][ T3628] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.809284][ T3650] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 34.854943][ T3086] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.946676][ T3671] loop0: detected capacity change from 0 to 512 [ 34.981278][ T3671] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.996428][ T3671] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 35.012354][ T3677] loop4: detected capacity change from 0 to 128 [ 35.057066][ T3677] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 35.058177][ T3693] vhci_hcd: invalid port number 129 [ 35.075538][ T3693] vhci_hcd: default hub control req: 0200 v0000 i0081 l0 [ 35.087181][ T3677] ext4 filesystem being mounted at /26/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 35.129881][ T3083] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.163504][ T3089] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 35.180668][ T3705] netlink: 'syz.4.170': attribute type 7 has an invalid length. [ 35.188590][ T3705] netlink: 140 bytes leftover after parsing attributes in process `syz.4.170'. [ 35.234672][ T3708] loop1: detected capacity change from 0 to 512 [ 35.261373][ T3712] loop3: detected capacity change from 0 to 256 [ 35.267475][ T3708] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 35.273955][ T3712] msdos: Unknown parameter '0x000000000000ee00tbMԍ' [ 35.308142][ T3715] mmap: syz.4.174 (3715) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 35.322061][ T3708] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 35.370192][ T3708] EXT4-fs (loop1): 1 truncate cleaned up [ 35.388983][ T3715] loop4: detected capacity change from 0 to 2048 [ 35.406913][ T3708] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.438320][ T3715] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.456912][ T3708] smc: net device sit0 applied user defined pnetid SYZ0 [ 35.493333][ T3729] loop0: detected capacity change from 0 to 512 [ 35.498355][ T3708] netlink: 280 bytes leftover after parsing attributes in process `syz.1.171'. [ 35.524092][ T3088] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.542743][ T3729] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.564517][ T3729] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 35.583711][ T3089] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.584975][ T3737] loop2: detected capacity change from 0 to 1764 [ 35.626322][ T3737] ISOFS: Unable to identify CD-ROM format. [ 35.636945][ T3083] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.737245][ T3758] loop4: detected capacity change from 0 to 512 [ 35.745198][ T3758] EXT4-fs: Ignoring removed mblk_io_submit option [ 35.755076][ T3758] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 35.764809][ T3758] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 35.776112][ T3768] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.779514][ T3758] System zones: 1-12 [ 35.794069][ T3758] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.189: corrupted in-inode xattr: e_value size too large [ 35.813428][ T3758] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.189: couldn't read orphan inode 15 (err -117) [ 35.825980][ T3758] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.845048][ T8] IPVS: starting estimator thread 0... [ 35.845379][ T3089] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.931542][ T3772] IPVS: using max 2544 ests per chain, 127200 per kthread [ 35.956748][ T3792] loop2: detected capacity change from 0 to 512 [ 35.972567][ T3792] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.986246][ T3792] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.001789][ T3792] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 36.028869][ T3792] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 28 [ 36.042531][ T3792] EXT4-fs (loop2): This should not happen!! Data will be lost [ 36.042531][ T3792] [ 36.052325][ T3792] EXT4-fs (loop2): Total free blocks count 0 [ 36.058316][ T3792] EXT4-fs (loop2): Free/Dirty block details [ 36.064314][ T3792] EXT4-fs (loop2): free_blocks=65280 [ 36.069627][ T3792] EXT4-fs (loop2): dirty_blocks=31 [ 36.074739][ T3792] EXT4-fs (loop2): Block reservation details [ 36.080812][ T3792] EXT4-fs (loop2): i_reserved_data_blocks=31 [ 36.097823][ T11] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 30 with error 28 [ 36.175233][ T3820] loop2: detected capacity change from 0 to 512 [ 36.182594][ T3820] ext4: Bad value for 'inode_readahead_blks' [ 36.223024][ T3824] netlink: 68 bytes leftover after parsing attributes in process `syz.2.207'. [ 36.232003][ T3824] netlink: 36 bytes leftover after parsing attributes in process `syz.2.207'. [ 36.243467][ T3804] chnl_net:caif_netlink_parms(): no params data found [ 36.276535][ T3826] loop2: detected capacity change from 0 to 512 [ 36.283870][ T3826] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 36.295713][ T3804] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.295805][ T3826] EXT4-fs (loop2): 1 truncate cleaned up [ 36.302857][ T3804] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.316795][ T3804] bridge_slave_0: entered allmulticast mode [ 36.317431][ T3826] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.323476][ T3804] bridge_slave_0: entered promiscuous mode [ 36.341427][ T3826] Zero length message leads to an empty skb [ 36.342162][ T3804] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.354443][ T3804] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.361606][ T3804] bridge_slave_1: entered allmulticast mode [ 36.368450][ T3804] bridge_slave_1: entered promiscuous mode [ 36.375413][ T3086] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.397537][ T3804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.408688][ T3804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.438083][ T3804] team0: Port device team_slave_0 added [ 36.445232][ T3804] team0: Port device team_slave_1 added [ 36.459524][ T3804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.466638][ T3804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.493309][ T3804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.495069][ T3804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.512348][ T3804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.538562][ T3804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.573819][ T3804] hsr_slave_0: entered promiscuous mode [ 36.582492][ T3804] hsr_slave_1: entered promiscuous mode [ 36.585137][ T3840] loop1: detected capacity change from 0 to 512 [ 36.595897][ T3804] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.596166][ T3840] ext4: Unknown parameter 'subj_role' [ 36.612057][ T3804] Cannot create hsr debugfs directory [ 36.675813][ T3804] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.727391][ T3853] netlink: 32 bytes leftover after parsing attributes in process `syz.4.216'. [ 36.754772][ T3856] loop4: detected capacity change from 0 to 128 [ 36.763083][ T3856] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 36.862560][ T3871] loop4: detected capacity change from 0 to 1024 [ 36.882420][ T3871] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.898000][ T3871] netlink: 116 bytes leftover after parsing attributes in process `syz.4.223'. [ 36.910943][ T3879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.225'. [ 37.030303][ T3089] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.392192][ T3922] netlink: 'syz.1.237': attribute type 10 has an invalid length. [ 37.428460][ T3926] loop1: detected capacity change from 0 to 128 [ 37.441125][ T3926] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 37.457631][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 37.457642][ T29] audit: type=1400 audit(1721517665.889:390): avc: denied { getopt } for pid=3923 comm="syz.2.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.488003][ T29] audit: type=1400 audit(1721517665.889:391): avc: denied { audit_read } for pid=3923 comm="syz.2.238" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 37.559228][ T3930] loop2: detected capacity change from 0 to 512 [ 37.586579][ T3930] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.611281][ T29] audit: type=1400 audit(1721517666.039:392): avc: denied { connect } for pid=3944 comm="syz.0.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 37.617803][ T3947] loop1: detected capacity change from 0 to 512 [ 37.632272][ T3930] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 37.648648][ T3947] EXT4-fs: Ignoring removed nobh option [ 37.668758][ T3949] __nla_validate_parse: 2 callbacks suppressed [ 37.668776][ T3949] netlink: 277 bytes leftover after parsing attributes in process `syz.0.245'. [ 37.690462][ T3086] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.712280][ T3947] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.735489][ T3954] loop2: detected capacity change from 0 to 136 [ 37.739904][ T3947] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.757367][ T29] audit: type=1326 audit(2000000000.130:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3956 comm="syz.4.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadf2cb5b59 code=0x7ffc0000 [ 37.758670][ T3955] loop0: detected capacity change from 0 to 512 [ 37.781249][ T29] audit: type=1326 audit(2000000000.130:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3956 comm="syz.4.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadf2cb5b59 code=0x7ffc0000 [ 37.791698][ T3955] EXT4-fs: Ignoring removed i_version option [ 37.819219][ T3955] ext4: Unknown parameter 'mask' [ 37.828233][ T3957] loop4: detected capacity change from 0 to 1024 [ 37.844091][ T3088] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.860616][ T3961] loop2: detected capacity change from 0 to 128 [ 37.861017][ T3957] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.871675][ T29] audit: type=1326 audit(2000000000.190:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3956 comm="syz.4.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fadf2cb5b59 code=0x7ffc0000 [ 37.888553][ T3957] netlink: 116 bytes leftover after parsing attributes in process `syz.4.248'. [ 37.904463][ T29] audit: type=1326 audit(2000000000.190:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3956 comm="syz.4.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadf2cb5b59 code=0x7ffc0000 [ 37.904544][ T29] audit: type=1326 audit(2000000000.190:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3956 comm="syz.4.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadf2cb5b59 code=0x7ffc0000 [ 37.904565][ T29] audit: type=1326 audit(2000000000.190:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3956 comm="syz.4.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fadf2cb5b59 code=0x7ffc0000 [ 37.942331][ T3961] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 37.962324][ T29] audit: type=1326 audit(2000000000.190:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3956 comm="syz.4.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadf2cb5b59 code=0x7ffc0000 [ 38.021872][ T3957] netlink: 'syz.4.248': attribute type 6 has an invalid length. [ 38.093139][ T3089] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.135824][ T3976] loop4: detected capacity change from 0 to 512 [ 38.155570][ T3970] loop2: detected capacity change from 0 to 2048 [ 38.175340][ T3976] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.189958][ T3970] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.197593][ T3976] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 38.204496][ T3970] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 38.230420][ T3970] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 15 with max blocks 1 with error 28 [ 38.242923][ T3970] EXT4-fs (loop2): This should not happen!! Data will be lost [ 38.242923][ T3970] [ 38.252688][ T3970] EXT4-fs (loop2): Total free blocks count 0 [ 38.258941][ T3970] EXT4-fs (loop2): Free/Dirty block details [ 38.265057][ T3970] EXT4-fs (loop2): free_blocks=2415919104 [ 38.270827][ T3970] EXT4-fs (loop2): dirty_blocks=16 [ 38.276212][ T3970] EXT4-fs (loop2): Block reservation details [ 38.282333][ T3970] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 38.289299][ T3089] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.326679][ T3995] loop1: detected capacity change from 0 to 128 [ 38.334587][ T3995] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 38.644591][ T4013] loop0: detected capacity change from 0 to 512 [ 38.661395][ T4013] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.674575][ T4013] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 38.693998][ T3083] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.718957][ T4017] loop0: detected capacity change from 0 to 512 [ 38.726918][ T4017] EXT4-fs (loop0): corrupt root inode, run e2fsck [ 38.735334][ T4017] EXT4-fs (loop0): mount failed [ 38.915562][ T3604] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 38.940983][ T4028] loop2: detected capacity change from 0 to 128 [ 38.947951][ T4028] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 38.978817][ T4030] loop2: detected capacity change from 0 to 512 [ 38.991943][ T4030] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.004593][ T4030] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 39.017929][ T4030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.274'. [ 39.036477][ T3086] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.057288][ T4034] netlink: 'syz.2.275': attribute type 2 has an invalid length. [ 39.102043][ T4040] loop2: detected capacity change from 0 to 2048 [ 39.110590][ T4040] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.278: bad orphan inode 8192 [ 39.121461][ T4040] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.140967][ T4040] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61456 sclass=netlink_route_socket pid=4040 comm=syz.2.278 [ 39.165387][ T3086] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.174821][ T4044] loop4: detected capacity change from 0 to 512 [ 39.207746][ T4044] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.221270][ T4044] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 39.238835][ T3804] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.253241][ T3089] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.271698][ T4052] sit1: entered promiscuous mode [ 39.277223][ T4052] sit1: entered allmulticast mode [ 39.305693][ T3804] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.313499][ T4057] loop4: detected capacity change from 0 to 128 [ 39.324426][ T4057] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 39.363375][ T3804] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.380467][ T4060] bridge0: port 2(bridge_slave_1) entered listening state [ 39.395654][ T4066] netlink: 4 bytes leftover after parsing attributes in process `syz.4.288'. [ 39.405588][ T4066] serio: Serial port pts0 [ 39.415779][ T3604] bridge_slave_1: left allmulticast mode [ 39.421493][ T3604] bridge_slave_1: left promiscuous mode [ 39.424592][ T4060] loop2: detected capacity change from 0 to 8192 [ 39.427098][ T3604] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.441229][ T3604] bridge_slave_0: left allmulticast mode [ 39.447031][ T3604] bridge_slave_0: left promiscuous mode [ 39.452755][ T3604] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.472776][ T4060] loop2: p2 [ 39.476117][ T4060] loop2: p2 start 4278194190 is beyond EOD, truncated [ 39.501641][ T2786] loop2: p2 [ 39.505120][ T2786] loop2: p2 start 4278194190 is beyond EOD, truncated [ 39.582750][ T3604] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 39.593134][ T3604] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 39.605124][ T3604] bond0 (unregistering): Released all slaves [ 39.652044][ T3804] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.666973][ T3804] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.673036][ C0] eth0: bad gso: type: 1, size: 1408 [ 39.680842][ C0] eth0: bad gso: type: 1, size: 1408 [ 39.688968][ T3804] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.703608][ T3804] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.716157][ T3604] hsr_slave_0: left promiscuous mode [ 39.721726][ T3604] hsr_slave_1: left promiscuous mode [ 39.727411][ T3604] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.735357][ T3604] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.744162][ T3604] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.752624][ T3604] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.762815][ T3604] veth1_macvtap: left promiscuous mode [ 39.768364][ T3604] veth0_macvtap: left promiscuous mode [ 39.774011][ T3604] veth1_vlan: left promiscuous mode [ 39.779351][ T3604] veth0_vlan: left promiscuous mode [ 39.851448][ T3604] team0 (unregistering): Port device team_slave_1 removed [ 39.861374][ T3604] team0 (unregistering): Port device team_slave_0 removed [ 39.899463][ T4080] netlink: 12 bytes leftover after parsing attributes in process `syz.4.293'. [ 39.909020][ T4082] netlink: 'syz.0.294': attribute type 21 has an invalid length. [ 39.916850][ T4082] netlink: 176 bytes leftover after parsing attributes in process `syz.0.294'. [ 39.924335][ T4080] loop4: detected capacity change from 0 to 1024 [ 39.934460][ T4080] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 39.949536][ T4080] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e842e118, mo2=0000] [ 39.958260][ T4080] System zones: 0-1, 3-12 [ 39.965194][ T4080] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.293: Invalid block bitmap block 0 in block_group 0 [ 39.985105][ T4080] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.293: Failed to acquire dquot type 0 [ 40.011570][ T4080] EXT4-fs error (device loop4): ext4_free_blocks:6590: comm syz.4.293: Freeing blocks not in datazone - block = 0, count = 4096 [ 40.017367][ T3804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.025507][ T4080] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.293: Invalid inode bitmap blk 0 in block_group 0 [ 40.035744][ T4084] sit1: entered promiscuous mode [ 40.049718][ T4084] sit1: entered allmulticast mode [ 40.056007][ T3602] EXT4-fs error (device loop4): ext4_release_dquot:6871: comm kworker/u8:12: Failed to release dquot type 0 [ 40.076773][ T3804] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.084916][ T4080] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 40.090887][ T4087] loop2: detected capacity change from 0 to 128 [ 40.097565][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.107025][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.118783][ T4087] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 40.126354][ T4080] EXT4-fs (loop4): 1 orphan inode deleted [ 40.142688][ T4080] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.144590][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.162363][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.183397][ T3804] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 40.193942][ T3804] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.234607][ T4102] loop2: detected capacity change from 0 to 512 [ 40.237348][ T3804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.269072][ T4102] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 40.295135][ T4102] EXT4-fs error (device loop2): ext4_get_journal_inode:5740: comm syz.2.300: inode #67108864: comm syz.2.300: iget: illegal inode # [ 40.310213][ T3089] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.337343][ T4119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.304'. [ 40.347512][ T4119] serio: Serial port pts0 [ 40.352339][ T4102] EXT4-fs (loop2): no journal found [ 40.420377][ T3804] veth0_vlan: entered promiscuous mode [ 40.429384][ T3804] veth1_vlan: entered promiscuous mode [ 40.440767][ T4133] loop2: detected capacity change from 0 to 512 [ 40.456123][ T4102] tipc: Started in network mode [ 40.461197][ T4102] tipc: Node identity , cluster identity 4711 [ 40.467326][ T4102] tipc: Failed to obtain node identity [ 40.472929][ T4102] tipc: Enabling of bearer rejected, failed to enable media [ 40.483629][ T4132] netlink: 'syz.0.306': attribute type 12 has an invalid length. [ 40.491570][ T4132] netlink: 132 bytes leftover after parsing attributes in process `syz.0.306'. [ 40.514780][ T3804] veth0_macvtap: entered promiscuous mode [ 40.527222][ T4133] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 40.539384][ T4132] cgroup: Bad value for 'name' [ 40.545175][ T4133] EXT4-fs (loop2): orphan cleanup on readonly fs [ 40.556154][ T3804] veth1_macvtap: entered promiscuous mode [ 40.578169][ T4133] EXT4-fs warning (device loop2): ext4_enable_quotas:7066: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 40.584791][ T4144] loop4: detected capacity change from 0 to 128 [ 40.601815][ T4144] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 40.608713][ T4133] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 40.620783][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 40.636631][ T4133] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #13: comm syz.2.300: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 40.663465][ T4151] loop4: detected capacity change from 0 to 512 [ 40.669826][ T4133] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.300: couldn't read orphan inode 13 (err -117) [ 40.682228][ T3804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.683454][ T4133] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.692790][ T3804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.706472][ T4151] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 40.715058][ T3804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.734465][ T3804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.744372][ T3804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.755385][ T3804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.765681][ T3804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.776447][ T3804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.783137][ T4152] loop0: detected capacity change from 0 to 512 [ 40.790564][ T3804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.803584][ T4102] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 40.806020][ T4154] Cannot find del_set index 1 as target [ 40.818944][ T4149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.312'. [ 40.830384][ T3804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.841031][ T3804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.851039][ T3804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.861554][ T3804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.871498][ T3804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.880258][ T4102] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 40.882009][ T3804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.900527][ T3804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.911572][ T3804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.927317][ T3804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.930641][ T4102] EXT4-fs warning (device loop2): ext4_enable_quotas:7066: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 40.936276][ T3804] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.958233][ T3804] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.967101][ T3804] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.967769][ T4152] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 40.975895][ T3804] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.996379][ T4133] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 41.007084][ T4133] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 41.007907][ T4152] EXT4-fs (loop0): 1 truncate cleaned up [ 41.021953][ T4152] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.030957][ T4133] EXT4-fs warning (device loop2): ext4_enable_quotas:7066: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 41.097529][ T4152] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.123734][ T4185] netlink: 52 bytes leftover after parsing attributes in process `syz.3.323'. [ 41.130819][ T4186] loop0: detected capacity change from 0 to 128 [ 41.141090][ T4186] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 41.177997][ T4190] loop0: detected capacity change from 0 to 512 [ 41.187141][ T4192] FAULT_INJECTION: forcing a failure. [ 41.187141][ T4192] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 41.194822][ T4190] EXT4-fs (loop0): Can't support bigalloc feature without extents feature [ 41.194822][ T4190] [ 41.200535][ T4192] CPU: 0 PID: 4192 Comm: syz.1.326 Not tainted 6.10.0-syzkaller-10729-g3c3ff7be9729 #0 [ 41.211149][ T4190] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 41.220714][ T4192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 41.229895][ T4190] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 41.239641][ T4192] Call Trace: [ 41.239649][ T4192] [ 41.239656][ T4192] dump_stack_lvl+0xf2/0x150 [ 41.262735][ T4192] dump_stack+0x15/0x20 [ 41.266895][ T4192] should_fail_ex+0x229/0x230 [ 41.271848][ T4192] __should_fail_alloc_page+0xfd/0x110 [ 41.278448][ T4192] __alloc_pages_noprof+0x109/0x360 [ 41.283660][ T4192] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 41.289956][ T4192] vma_alloc_folio_noprof+0x176/0x2d0 [ 41.295421][ T4192] do_wp_page+0x62b/0x22b0 [ 41.299820][ T4192] ? __rcu_read_lock+0x36/0x50 [ 41.304735][ T4192] ? __rcu_read_lock+0x36/0x50 [ 41.309499][ T4192] handle_mm_fault+0xc4c/0x2ac0 [ 41.314473][ T4192] exc_page_fault+0x3b9/0x650 [ 41.319188][ T4192] asm_exc_page_fault+0x26/0x30 [ 41.324124][ T4192] RIP: 0033:0x7f149ba1b503 [ 41.328701][ T4192] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 41.348378][ T4192] RSP: 002b:00007f149add64b0 EFLAGS: 00010202 [ 41.354547][ T4192] RAX: 0000000000009800 RBX: 00007f149add6550 RCX: 00007f14929b7000 [ 41.362527][ T4192] RDX: 00007f149add66f0 RSI: 0000000000000000 RDI: 00007f149add65f0 [ 41.370577][ T4192] RBP: 0000000000000051 R08: 0000000000000005 R09: 0000000000000003 [ 41.381925][ T4192] R10: 0000000000000008 R11: 00007f149add6550 R12: 0000000000000001 [ 41.391388][ T4192] R13: 00007f149bbd5fa0 R14: 0000000000000001 R15: 00007f149add65f0 [ 41.402651][ T4192] [ 41.407356][ T3083] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.408078][ T4192] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 41.433787][ T4192] loop1: detected capacity change from 0 to 136 [ 41.449045][ T3086] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.479318][ T4188] syzkaller0: entered promiscuous mode [ 41.485037][ T4188] syzkaller0: entered allmulticast mode [ 41.491638][ T4196] loop0: detected capacity change from 0 to 512 [ 41.505716][ T4194] pim6reg1: entered promiscuous mode [ 41.511189][ T4194] pim6reg1: entered allmulticast mode [ 41.525083][ T4196] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.530374][ T4205] loop1: detected capacity change from 0 to 512 [ 41.542403][ T4196] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 41.573138][ T4205] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 41.584894][ T4205] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 41.595024][ T4205] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.330: Corrupt directory, running e2fsck is recommended [ 41.609252][ T4205] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 41.617673][ T4205] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.330: corrupted in-inode xattr: invalid ea_ino [ 41.622675][ T3083] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.641130][ T4205] EXT4-fs (loop1): Remounting filesystem read-only [ 41.648341][ T4205] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.665163][ T4205] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 41.672421][ T4205] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.705792][ T4217] team0: entered promiscuous mode [ 41.710915][ T4217] team_slave_0: entered promiscuous mode [ 41.716713][ T4217] team_slave_1: entered promiscuous mode [ 41.724260][ T4217] syz_tun: entered promiscuous mode [ 41.747362][ T4221] loop1: detected capacity change from 0 to 512 [ 41.757602][ T4216] syz_tun: left promiscuous mode [ 41.762829][ T4216] team0: left promiscuous mode [ 41.767612][ T4216] team_slave_0: left promiscuous mode [ 41.773185][ T4216] team_slave_1: left promiscuous mode [ 41.815398][ T4221] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 41.852543][ T4221] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.947958][ T3088] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 41.980861][ T4263] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4263 comm=syz.2.346 [ 42.038078][ T4275] loop2: detected capacity change from 0 to 1024 [ 42.045182][ T4275] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (24866!=20869) [ 42.055091][ T4275] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 42.065685][ T4275] EXT4-fs (loop2): invalid journal inode [ 42.134299][ T4285] loop2: detected capacity change from 0 to 512 [ 42.151997][ T4285] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.164656][ T4285] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 42.186949][ T3086] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.206005][ T4289] loop2: detected capacity change from 0 to 136 [ 42.213154][ T3071] ================================================================== [ 42.221240][ T3071] BUG: KCSAN: data-race in do_mpage_readpage / set_blocksize [ 42.228592][ T3071] [ 42.230895][ T3071] write to 0xffff8881004c16ee of 1 bytes by task 4289 on cpu 0: [ 42.238496][ T3071] set_blocksize+0x224/0x280 [ 42.243085][ T3071] sb_min_blocksize+0x63/0xe0 [ 42.247753][ T3071] isofs_fill_super+0x105/0x1290 [ 42.252682][ T3071] get_tree_bdev+0x256/0x2e0 [ 42.257253][ T3071] isofs_get_tree+0x1c/0x30 [ 42.261740][ T3071] vfs_get_tree+0x56/0x1d0 [ 42.266229][ T3071] do_new_mount+0x227/0x690 [ 42.270721][ T3071] path_mount+0x49b/0xb30 [ 42.275052][ T3071] __se_sys_mount+0x27c/0x2d0 [ 42.279738][ T3071] __x64_sys_mount+0x67/0x80 [ 42.284325][ T3071] x64_sys_call+0xd11/0x2e00 [ 42.288955][ T3071] do_syscall_64+0xc9/0x1c0 [ 42.293440][ T3071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.299314][ T3071] [ 42.301618][ T3071] read to 0xffff8881004c16ee of 1 bytes by task 3071 on cpu 1: [ 42.309400][ T3071] do_mpage_readpage+0x55/0xcb0 [ 42.314494][ T3071] mpage_readahead+0x1ad/0x2d0 [ 42.319234][ T3071] blkdev_readahead+0x1c/0x30 [ 42.323895][ T3071] read_pages+0xa0/0x540 [ 42.328117][ T3071] page_cache_ra_unbounded+0x285/0x2e0 [ 42.333555][ T3071] force_page_cache_ra+0x18e/0x1d0 [ 42.338647][ T3071] page_cache_sync_ra+0xcc/0xf0 [ 42.343568][ T3071] filemap_get_pages+0x252/0xfb0 [ 42.348492][ T3071] filemap_read+0x21c/0x690 [ 42.352976][ T3071] blkdev_read_iter+0x217/0x2c0 [ 42.357804][ T3071] vfs_read+0x5e9/0x6e0 [ 42.361938][ T3071] ksys_read+0xeb/0x1b0 [ 42.366094][ T3071] __x64_sys_read+0x42/0x50 [ 42.370576][ T3071] x64_sys_call+0x2a36/0x2e00 [ 42.375232][ T3071] do_syscall_64+0xc9/0x1c0 [ 42.379720][ T3071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.385615][ T3071] [ 42.387916][ T3071] value changed: 0x0c -> 0x0a [ 42.392565][ T3071] [ 42.394951][ T3071] Reported by Kernel Concurrency Sanitizer on: [ 42.401076][ T3071] CPU: 1 PID: 3071 Comm: udevd Not tainted 6.10.0-syzkaller-10729-g3c3ff7be9729 #0 [ 42.410336][ T3071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 42.420379][ T3071] ================================================================== [ 42.804176][ T29] kauditd_printk_skb: 125 callbacks suppressed [ 42.804188][ T29] audit: type=1326 audit(2000000005.180:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4271 comm="syz.1.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f149bb55b59 code=0x7fc00000