last executing test programs: 1.737250052s ago: executing program 2 (id=492): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0) 1.380739968s ago: executing program 4 (id=500): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000007640)=[{{&(0x7f0000000740)=@caif=@dgm, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000f00)=""/4096, 0x1000}], 0x1}}], 0x1, 0x10000, 0x0) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a", 0x74}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa24713", 0x80}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.348975388s ago: executing program 0 (id=503): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xd, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000001300000000ffffffff851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bda100000000000007010000f8cfa3a0d402000008b19200b703000000000000850000008f00000095a8"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 1.340555989s ago: executing program 4 (id=504): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) recvmmsg(r0, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002f00)=""/130, 0x82}], 0x1}, 0xfffffffd}, {{0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}, 0xd335}], 0x2, 0x2120, 0x0) 1.321357149s ago: executing program 0 (id=505): mount$nfs4(&(0x7f0000000180)='/', &(0x7f00000001c0)='./file1\x00', 0x0, 0x2085008, 0x0) 1.321007959s ago: executing program 0 (id=506): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000711216000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) 1.286094699s ago: executing program 0 (id=507): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000000, &(0x7f0000000140)={0xa, 0x4e23, 0xaea9, @mcast2, 0x6}, 0x6) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x18000000000002a0, 0x34, 0x0, &(0x7f0000002100)="b9fa030711a5f32e019e14f088a847e0ffff00124000632177fbac141416e000030a94029f03030180b706000000000000008100", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f00000000c0)=0x2, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffff03ffffffbbbbbbbbbbbb0800450000300000000000019078ac1e0001ac1414aa030490781204183f250000000068000000010e8a7f0000017f000001"], 0x0) recvmmsg(r2, &(0x7f0000003000)=[{{0x0, 0x0, 0x0}, 0xffff}], 0x1, 0x40000100, 0x0) sendto$inet6(r0, &(0x7f0000000140)="8469b66f", 0x20, 0x0, 0x0, 0x0) 912.098095ms ago: executing program 2 (id=513): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) close(0x3) socket(0x40000000015, 0x5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 453.563283ms ago: executing program 2 (id=515): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f00000003c0), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x0) 427.287263ms ago: executing program 4 (id=516): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@typedef={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2d}, 0x12) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r0, 0x58, &(0x7f00000002c0)}, 0x10) 426.716733ms ago: executing program 0 (id=517): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x8, 0xc}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000004b7040000000000008500000003000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r3, 0x1, 0x0, 0x2000004, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 400.921054ms ago: executing program 2 (id=518): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000711214000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 375.288794ms ago: executing program 4 (id=520): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x92e2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x5c93067603d2de2a}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 374.948864ms ago: executing program 0 (id=521): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 374.857894ms ago: executing program 2 (id=522): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@struct={0x5, 0x0, 0x0, 0xf, 0x0, 0x5}]}, {0x0, [0x5f, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2b, 0x0, 0xa}, 0x28) 323.697075ms ago: executing program 4 (id=523): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x38, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r5}]}}}]}, 0x38}}, 0x0) 323.516905ms ago: executing program 2 (id=524): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f0000001c80)="bf", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4e1f, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={0x0, 0xc, 0x9, 0xfff}, 0x10) 323.261785ms ago: executing program 1 (id=525): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 321.568625ms ago: executing program 4 (id=526): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) recvmmsg(r0, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002f00)=""/130, 0x82}], 0x1}, 0xfffffffd}, {{0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}, 0xd335}], 0x2, 0x2120, 0x0) 261.413856ms ago: executing program 1 (id=527): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048050}, 0x0) 247.614736ms ago: executing program 1 (id=528): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x38, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r5}]}}}]}, 0x38}}, 0x0) 211.851196ms ago: executing program 1 (id=529): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="911059000000000095"], &(0x7f00000003c0)='syzkaller\x00'}, 0x94) 168.926727ms ago: executing program 1 (id=531): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socket$kcm(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) shutdown(r0, 0x0) recvmsg(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000000900)=""/223, 0xdf}], 0x1}, 0x102) 168.571117ms ago: executing program 1 (id=533): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000001200)={[{@block_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x200) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r2, 0x100, 0x0) getdents64(r2, 0x0, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071118300000000008510000002000000850000005500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) ftruncate(0xffffffffffffffff, 0x81fd) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 89.397098ms ago: executing program 3 (id=534): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10000000}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [], {{}, {0x6, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 89.187078ms ago: executing program 3 (id=535): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="060000000000000069116000000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 69.779209ms ago: executing program 3 (id=536): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100), 0x10}, 0x94) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="ec0000002100390d000000000000000000000000000000000000000000000000e000000200"/56, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ff010000000000000000000000000001ffffffff000000000000000000000000ac1414aa000000000000000000000000ac141400000000000000000000000000000000000000000011000a00ff010000000000000000000000000001ffffffff"], 0xec}}, 0x0) 38.167529ms ago: executing program 3 (id=537): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000007640)=[{{&(0x7f0000000740)=@caif=@dgm, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000f00)=""/4096, 0x1000}], 0x1}}], 0x1, 0x10000, 0x0) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a", 0x74}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa24713", 0x80}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 666.73µs ago: executing program 3 (id=538): socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000003600000085000000a000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r0, 0x0, 0x25, 0x0, @val=@tracing}, 0x40) syz_emit_ethernet(0x11, &(0x7f0000000100)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@x25={0x805, {0x3, 0x6}}}}, 0x0) 0s ago: executing program 3 (id=539): openat(0xffffffffffffff9c, 0x0, 0x442, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="9000000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000028000006800128009000100766c616e000000005800028006000100020000004c0003800c00010000000000050000000c00010000000000800000000c00010070000000018000000c00010009000000010001000c00010000000000090000000c000100030000000101000008000500", @ANYRES32=r1], 0x90}}, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b700000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000400)={0xa}) syz_usb_connect(0x4, 0x24, 0x0, 0x0) epoll_pwait(r2, &(0x7f0000000080)=[{}], 0x1, 0x4c6, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.74' (ED25519) to the list of known hosts. [ 23.192718][ T29] audit: type=1400 audit(1750796230.701:62): avc: denied { mounton } for pid=3293 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.193610][ T3293] cgroup: Unknown subsys name 'net' [ 23.215443][ T29] audit: type=1400 audit(1750796230.701:63): avc: denied { mount } for pid=3293 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.242805][ T29] audit: type=1400 audit(1750796230.731:64): avc: denied { unmount } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.394521][ T3293] cgroup: Unknown subsys name 'cpuset' [ 23.400758][ T3293] cgroup: Unknown subsys name 'rlimit' [ 23.570565][ T29] audit: type=1400 audit(1750796231.081:65): avc: denied { setattr } for pid=3293 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.593952][ T29] audit: type=1400 audit(1750796231.081:66): avc: denied { create } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.614756][ T29] audit: type=1400 audit(1750796231.081:67): avc: denied { write } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.635104][ T29] audit: type=1400 audit(1750796231.081:68): avc: denied { read } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.655376][ T29] audit: type=1400 audit(1750796231.091:69): avc: denied { mounton } for pid=3293 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.680273][ T29] audit: type=1400 audit(1750796231.091:70): avc: denied { mount } for pid=3293 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.687523][ T3296] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 23.714437][ T29] audit: type=1400 audit(1750796231.231:71): avc: denied { relabelto } for pid=3296 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 23.789050][ T3293] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.024704][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 25.085911][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 25.104148][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.111303][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.118555][ T3309] bridge_slave_0: entered allmulticast mode [ 25.125023][ T3309] bridge_slave_0: entered promiscuous mode [ 25.149913][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.157222][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.164647][ T3309] bridge_slave_1: entered allmulticast mode [ 25.170928][ T3309] bridge_slave_1: entered promiscuous mode [ 25.204827][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.227089][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.245068][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 25.271935][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 25.284538][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.291605][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.298978][ T3311] bridge_slave_0: entered allmulticast mode [ 25.305424][ T3311] bridge_slave_0: entered promiscuous mode [ 25.319365][ T3309] team0: Port device team_slave_0 added [ 25.330547][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.337631][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.344820][ T3311] bridge_slave_1: entered allmulticast mode [ 25.351270][ T3311] bridge_slave_1: entered promiscuous mode [ 25.361791][ T3309] team0: Port device team_slave_1 added [ 25.382831][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 25.401516][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.408781][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.435286][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.448827][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.455899][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.482662][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.514075][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.533605][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.547737][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.554854][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.562378][ T3304] bridge_slave_0: entered allmulticast mode [ 25.569176][ T3304] bridge_slave_0: entered promiscuous mode [ 25.587007][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.594264][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.601576][ T3304] bridge_slave_1: entered allmulticast mode [ 25.608022][ T3304] bridge_slave_1: entered promiscuous mode [ 25.630970][ T3311] team0: Port device team_slave_0 added [ 25.641829][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.649280][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.656494][ T3303] bridge_slave_0: entered allmulticast mode [ 25.663020][ T3303] bridge_slave_0: entered promiscuous mode [ 25.677091][ T3309] hsr_slave_0: entered promiscuous mode [ 25.683127][ T3309] hsr_slave_1: entered promiscuous mode [ 25.694478][ T3311] team0: Port device team_slave_1 added [ 25.705264][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.712424][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.719649][ T3303] bridge_slave_1: entered allmulticast mode [ 25.726331][ T3303] bridge_slave_1: entered promiscuous mode [ 25.737398][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.744512][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.751697][ T3317] bridge_slave_0: entered allmulticast mode [ 25.758196][ T3317] bridge_slave_0: entered promiscuous mode [ 25.771027][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.781408][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.795026][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.802100][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.809521][ T3317] bridge_slave_1: entered allmulticast mode [ 25.815990][ T3317] bridge_slave_1: entered promiscuous mode [ 25.843446][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.862663][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.869689][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.895688][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.911908][ T3304] team0: Port device team_slave_0 added [ 25.918868][ T3304] team0: Port device team_slave_1 added [ 25.925824][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.936105][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.945523][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.952468][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.978588][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.001915][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.042854][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.050005][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.076146][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.087547][ T3303] team0: Port device team_slave_0 added [ 26.093454][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.100536][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.126871][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.144025][ T3317] team0: Port device team_slave_0 added [ 26.152784][ T3317] team0: Port device team_slave_1 added [ 26.159264][ T3303] team0: Port device team_slave_1 added [ 26.192393][ T3311] hsr_slave_0: entered promiscuous mode [ 26.198687][ T3311] hsr_slave_1: entered promiscuous mode [ 26.204559][ T3311] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.212107][ T3311] Cannot create hsr debugfs directory [ 26.230721][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.237870][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.264055][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.275435][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.282423][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.308506][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.319762][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.326752][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.352795][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.384279][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.391395][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.418318][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.435537][ T3304] hsr_slave_0: entered promiscuous mode [ 26.442480][ T3304] hsr_slave_1: entered promiscuous mode [ 26.449249][ T3304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.457128][ T3304] Cannot create hsr debugfs directory [ 26.489334][ T3303] hsr_slave_0: entered promiscuous mode [ 26.495364][ T3303] hsr_slave_1: entered promiscuous mode [ 26.501284][ T3303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.509080][ T3303] Cannot create hsr debugfs directory [ 26.534575][ T3317] hsr_slave_0: entered promiscuous mode [ 26.540513][ T3317] hsr_slave_1: entered promiscuous mode [ 26.546596][ T3317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.554480][ T3317] Cannot create hsr debugfs directory [ 26.633472][ T3309] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 26.655603][ T3309] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 26.664543][ T3309] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 26.686845][ T3309] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 26.755408][ T3311] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 26.775133][ T3311] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 26.788298][ T3311] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 26.798228][ T3311] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 26.817353][ T3304] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 26.830731][ T3304] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 26.845809][ T3304] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 26.855714][ T3304] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 26.880683][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.890141][ T3303] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 26.899607][ T3303] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 26.909427][ T3303] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 26.918423][ T3303] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 26.948567][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.957934][ T785] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.965101][ T785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.984402][ T785] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.992450][ T785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.007513][ T3317] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 27.016870][ T3317] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 27.026635][ T3317] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 27.051701][ T3317] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 27.101554][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.116721][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.131583][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.142785][ T785] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.150587][ T785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.163354][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.170870][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.189789][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.199253][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.208211][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.226087][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.233213][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.260397][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.270890][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.280894][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.309092][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.317561][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.336805][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.346366][ T785] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.353591][ T785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.383888][ T3304] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 27.394420][ T3304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.414630][ T3422] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.422373][ T3422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.432082][ T3422] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.440593][ T3422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.453297][ T3422] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.460583][ T3422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.499410][ T3309] veth0_vlan: entered promiscuous mode [ 27.526268][ T3309] veth1_vlan: entered promiscuous mode [ 27.556114][ T3309] veth0_macvtap: entered promiscuous mode [ 27.565983][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.578573][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.587954][ T3309] veth1_macvtap: entered promiscuous mode [ 27.615237][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.628658][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.648230][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.680070][ T3309] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.689481][ T3309] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.698897][ T3309] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.708739][ T3309] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.737105][ T3311] veth0_vlan: entered promiscuous mode [ 27.763711][ T3311] veth1_vlan: entered promiscuous mode [ 27.776559][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.818247][ T3311] veth0_macvtap: entered promiscuous mode [ 27.838925][ T3311] veth1_macvtap: entered promiscuous mode [ 27.847558][ T3309] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.855512][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.871315][ T3303] veth0_vlan: entered promiscuous mode [ 27.885525][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.900005][ T3303] veth1_vlan: entered promiscuous mode [ 27.910134][ T3311] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.918993][ T3311] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.927761][ T3311] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.936616][ T3311] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.976121][ T3303] veth0_macvtap: entered promiscuous mode [ 27.985207][ T3317] veth0_vlan: entered promiscuous mode [ 27.995360][ T3303] veth1_macvtap: entered promiscuous mode [ 28.003052][ T3317] veth1_vlan: entered promiscuous mode [ 28.043702][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.065141][ T3304] veth0_vlan: entered promiscuous mode [ 28.079708][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.088216][ T3304] veth1_vlan: entered promiscuous mode [ 28.120042][ T3317] veth0_macvtap: entered promiscuous mode [ 28.137427][ T3317] veth1_macvtap: entered promiscuous mode [ 28.157815][ T3304] veth0_macvtap: entered promiscuous mode [ 28.171497][ T3303] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.180431][ T3303] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.189247][ T3303] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.198059][ T3303] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.215622][ T3304] veth1_macvtap: entered promiscuous mode [ 28.227137][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.236187][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 28.236199][ T29] audit: type=1400 audit(1750796235.751:103): avc: denied { name_bind } for pid=3488 comm="syz.1.12" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 28.239749][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.242320][ T29] audit: type=1400 audit(1750796235.751:104): avc: denied { node_bind } for pid=3488 comm="syz.1.12" saddr=224.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 28.294588][ T29] audit: type=1400 audit(1750796235.781:105): avc: denied { write } for pid=3488 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 28.313982][ T29] audit: type=1400 audit(1750796235.781:106): avc: denied { read } for pid=3488 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 28.349164][ T3491] loop3: detected capacity change from 0 to 128 [ 28.356021][ T3491] EXT4-fs: Ignoring removed nobh option [ 28.382063][ T29] audit: type=1400 audit(1750796235.891:107): avc: denied { create } for pid=3492 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 28.425461][ T29] audit: type=1400 audit(1750796235.931:108): avc: denied { setopt } for pid=3492 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 28.444796][ T29] audit: type=1400 audit(1750796235.931:109): avc: denied { write } for pid=3492 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 28.503288][ T3491] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 28.517248][ T3491] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 28.553291][ T29] audit: type=1400 audit(1750796236.031:110): avc: denied { mount } for pid=3485 comm="syz.3.11" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 28.574781][ T29] audit: type=1400 audit(1750796236.041:111): avc: denied { add_name } for pid=3485 comm="syz.3.11" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 28.595388][ T29] audit: type=1400 audit(1750796236.041:112): avc: denied { create } for pid=3485 comm="syz.3.11" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 28.670688][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.679200][ T3317] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.688022][ T3317] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.696856][ T3317] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.705658][ T3317] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.722335][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.745960][ T3304] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.754880][ T3304] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.763671][ T3304] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.772526][ T3304] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.037018][ T3309] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 29.448342][ T3544] loop4: detected capacity change from 0 to 1024 [ 29.482606][ T3544] ======================================================= [ 29.482606][ T3544] WARNING: The mand mount option has been deprecated and [ 29.482606][ T3544] and is ignored by this kernel. Remove the mand [ 29.482606][ T3544] option from the mount to silence this warning. [ 29.482606][ T3544] ======================================================= [ 29.570526][ T3544] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.596347][ T3547] loop2: detected capacity change from 0 to 256 [ 29.606424][ T3547] /dev/loop2: Can't open blockdev [ 29.640171][ T3554] loop0: detected capacity change from 0 to 512 [ 29.648612][ T3554] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 29.698953][ T3554] EXT4-fs (loop0): orphan cleanup on readonly fs [ 29.706866][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.728560][ T3554] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.34: Failed to acquire dquot type 1 [ 29.760418][ T3405] IPVS: starting estimator thread 0... [ 29.771901][ T3554] EXT4-fs (loop0): 1 truncate cleaned up [ 29.793054][ T3554] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-00000040ed00 ro without journal. Quota mode: writeback. [ 29.873998][ T3566] IPVS: using max 2784 ests per chain, 139200 per kthread [ 29.881751][ T3554] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 30.021777][ T3554] EXT4-fs warning (device loop0): ext4_multi_mount_protect:332: MMP startup interrupted, failing mount [ 30.021777][ T3554] [ 30.058739][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-00000040ed00. [ 30.967159][ T3594] loop4: detected capacity change from 0 to 1024 [ 30.977792][ T3596] syzkaller0: entered promiscuous mode [ 30.983392][ T3596] syzkaller0: entered allmulticast mode [ 31.021138][ T3598] loop3: detected capacity change from 0 to 2048 [ 31.047276][ T3594] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.191817][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.201728][ T3607] loop1: detected capacity change from 0 to 1024 [ 31.230431][ T3607] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.324952][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.604068][ T9] IPVS: starting estimator thread 0... [ 31.694282][ T3643] IPVS: using max 2592 ests per chain, 129600 per kthread [ 31.857721][ T3651] loop1: detected capacity change from 0 to 1024 [ 31.884756][ T3651] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.922569][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.454369][ T3664] loop3: detected capacity change from 0 to 2048 [ 33.446580][ T3696] netlink: 'syz.3.87': attribute type 4 has an invalid length. [ 33.464255][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 33.464274][ T29] audit: type=1400 audit(1750796240.901:149): avc: denied { create } for pid=3688 comm="syz.3.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 33.490854][ T29] audit: type=1400 audit(1750796240.901:150): avc: denied { getopt } for pid=3688 comm="syz.3.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 33.510266][ T29] audit: type=1400 audit(1750796240.901:151): avc: denied { read } for pid=3688 comm="syz.3.87" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 33.534271][ T29] audit: type=1400 audit(1750796240.901:152): avc: denied { open } for pid=3688 comm="syz.3.87" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 33.558658][ T29] audit: type=1400 audit(1750796240.901:153): avc: denied { ioctl } for pid=3688 comm="syz.3.87" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 34.004290][ T29] audit: type=1400 audit(1750796241.511:154): avc: denied { write } for pid=3705 comm="syz.0.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 34.024063][ T29] audit: type=1400 audit(1750796241.511:155): avc: denied { connect } for pid=3705 comm="syz.0.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 34.043695][ T29] audit: type=1400 audit(1750796241.511:156): avc: denied { name_connect } for pid=3705 comm="syz.0.93" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 34.128645][ T29] audit: type=1400 audit(1750796241.621:157): avc: denied { name_connect } for pid=3705 comm="syz.0.93" dest=19999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 34.150590][ T29] audit: type=1400 audit(1750796241.631:158): avc: denied { create } for pid=3710 comm="syz.1.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 34.187343][ T3718] loop3: detected capacity change from 0 to 2048 [ 34.196193][ T3722] netlink: 32 bytes leftover after parsing attributes in process `syz.1.100'. [ 34.277965][ T3733] loop1: detected capacity change from 0 to 512 [ 34.296384][ T3733] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.309580][ T3733] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 34.327041][ T3738] loop4: detected capacity change from 0 to 1024 [ 34.333976][ T3733] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 34.357417][ T3738] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.364419][ T3733] EXT4-fs (loop1): 1 truncate cleaned up [ 34.380657][ T3733] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.420149][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.508720][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.570575][ T3759] loop3: detected capacity change from 0 to 2048 [ 34.582313][ T3756] netlink: 32 bytes leftover after parsing attributes in process `syz.4.111'. [ 34.919717][ T3789] netlink: 156 bytes leftover after parsing attributes in process `syz.0.126'. [ 34.945354][ T3791] Zero length message leads to an empty skb [ 34.971914][ T3793] loop4: detected capacity change from 0 to 2048 [ 36.655484][ T3873] loop1: detected capacity change from 0 to 2048 [ 36.733985][ T3883] loop3: detected capacity change from 0 to 1024 [ 36.757263][ T3883] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.786120][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.949851][ T3900] syz.0.172 (3900) used greatest stack depth: 10880 bytes left [ 36.994354][ T3904] loop4: detected capacity change from 0 to 2048 [ 37.024062][ T3908] loop1: detected capacity change from 0 to 1024 [ 37.046082][ T3908] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.131642][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.847487][ T3945] loop2: detected capacity change from 0 to 1024 [ 37.879583][ T3945] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.928253][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.236390][ T3983] loop1: detected capacity change from 0 to 128 [ 38.243165][ T3983] EXT4-fs: Ignoring removed nobh option [ 38.275269][ T3983] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 38.486436][ T3983] ext4 filesystem being mounted at /51/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 38.946924][ T3311] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 39.075887][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 39.075917][ T29] audit: type=1400 audit(1750796246.591:178): avc: denied { write } for pid=4006 comm="syz.2.213" name="ip6_flowlabel" dev="proc" ino=4026532980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 39.180196][ T4021] loop2: detected capacity change from 0 to 512 [ 39.188550][ T4018] loop3: detected capacity change from 0 to 2048 [ 39.202981][ T4021] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 39.218637][ T4021] EXT4-fs (loop2): orphan cleanup on readonly fs [ 39.225640][ T4021] Quota error (device loop2): do_check_range: Getting block 196613 out of range 1-5 [ 39.235094][ T4021] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 39.244640][ T4021] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.221: Failed to acquire dquot type 1 [ 39.256399][ T4021] EXT4-fs (loop2): 1 truncate cleaned up [ 39.263920][ T4021] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-00000040ed00 ro without journal. Quota mode: writeback. [ 39.280763][ T4021] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 39.291554][ T4021] EXT4-fs warning (device loop2): ext4_multi_mount_protect:332: MMP startup interrupted, failing mount [ 39.291554][ T4021] [ 39.315064][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-00000040ed00. [ 39.338432][ T4035] loop1: detected capacity change from 0 to 512 [ 39.355976][ T4035] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.370518][ T4035] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.389891][ T4035] EXT4-fs (loop1): shut down requested (0) [ 39.401219][ T4035] syz.1.226 (4035) used greatest stack depth: 10848 bytes left [ 39.409802][ T29] audit: type=1400 audit(1750796246.921:179): avc: denied { read } for pid=2977 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 39.431962][ T29] audit: type=1400 audit(1750796246.921:180): avc: denied { search } for pid=2977 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.453542][ T29] audit: type=1400 audit(1750796246.921:181): avc: denied { search } for pid=2977 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.475291][ T29] audit: type=1400 audit(1750796246.921:182): avc: denied { add_name } for pid=2977 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.496152][ T29] audit: type=1400 audit(1750796246.921:183): avc: denied { create } for pid=2977 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.517393][ T29] audit: type=1400 audit(1750796246.921:184): avc: denied { append open } for pid=2977 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.540535][ T29] audit: type=1400 audit(1750796246.921:185): avc: denied { getattr } for pid=2977 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.590566][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.643783][ T4059] loop1: detected capacity change from 0 to 2048 [ 39.676485][ T4066] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.749687][ T4071] loop2: detected capacity change from 0 to 7 [ 39.827101][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 39.836318][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 39.847657][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 39.856884][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 39.865047][ T4071] loop2: unable to read partition table [ 39.872069][ T4071] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 39.882289][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 39.891489][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 40.022413][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 40.031658][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 40.043869][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 40.053059][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 40.061752][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 40.070932][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 40.079058][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 40.088243][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 40.346302][ T4108] Illegal XDP return value 498204707 on prog (id 69) dev N/A, expect packet loss! [ 40.567281][ T4138] loop2: detected capacity change from 0 to 512 [ 40.574921][ T4138] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 40.591955][ T4138] EXT4-fs (loop2): orphan cleanup on readonly fs [ 40.600346][ T4138] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.269: Failed to acquire dquot type 1 [ 40.613353][ T4138] EXT4-fs (loop2): 1 truncate cleaned up [ 40.621091][ T4138] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-00000040ed00 ro without journal. Quota mode: writeback. [ 40.734317][ T4138] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 40.755545][ T4138] EXT4-fs warning (device loop2): ext4_multi_mount_protect:332: MMP startup interrupted, failing mount [ 40.755545][ T4138] [ 40.910209][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-00000040ed00. [ 41.096928][ T4169] loop2: detected capacity change from 0 to 128 [ 41.103770][ T4169] EXT4-fs: Ignoring removed nobh option [ 41.109677][ T4169] /dev/loop2: Can't open blockdev [ 41.184219][ T9] IPVS: starting estimator thread 0... [ 41.274914][ T4171] IPVS: using max 2592 ests per chain, 129600 per kthread [ 41.514092][ T4184] loop3: detected capacity change from 0 to 1024 [ 41.537163][ T4184] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.554818][ T4185] loop1: detected capacity change from 0 to 2048 [ 41.617190][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.853690][ T4206] loop1: detected capacity change from 0 to 128 [ 41.861031][ T4206] EXT4-fs: Ignoring removed nobh option [ 42.016186][ T4206] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 42.029686][ T4206] ext4 filesystem being mounted at /66/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 42.296248][ T4220] loop2: detected capacity change from 0 to 1024 [ 42.315538][ T4220] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.380025][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.615950][ T3311] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.374554][ T4286] loop2: detected capacity change from 0 to 2048 [ 43.810022][ T4296] loop2: detected capacity change from 0 to 128 [ 43.816776][ T4296] EXT4-fs: Ignoring removed nobh option [ 43.848344][ T4300] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 43.872368][ T4296] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.894387][ T4296] ext4 filesystem being mounted at /57/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 43.950787][ T4309] loop3: detected capacity change from 0 to 1024 [ 44.005321][ T4309] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.030637][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.044145][ T4322] tmpfs: Bad value for 'size' [ 44.064589][ T4325] loop3: detected capacity change from 0 to 512 [ 44.086966][ T4325] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.104856][ T4325] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.128049][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.165589][ T4335] loop4: detected capacity change from 0 to 2048 [ 44.236657][ T4345] loop4: detected capacity change from 0 to 1024 [ 44.259670][ T4345] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.301431][ T3317] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 44.314470][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.429024][ T4365] loop3: detected capacity change from 0 to 128 [ 44.435945][ T4365] EXT4-fs: Ignoring removed nobh option [ 44.781189][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 44.781208][ T29] audit: type=1400 audit(1750796252.261:192): avc: denied { create } for pid=4378 comm="syz.4.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 44.810013][ T4365] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 44.824113][ T4365] ext4 filesystem being mounted at /86/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 45.190609][ T3309] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.409816][ T4410] capability: warning: `syz.0.379' uses deprecated v2 capabilities in a way that may be insecure [ 45.556338][ T29] audit: type=1400 audit(1750796253.061:193): avc: denied { bind } for pid=4426 comm="syz.0.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 45.668085][ T4433] loop2: detected capacity change from 0 to 7 [ 45.686936][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 45.696260][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 45.791735][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 45.801141][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 45.814553][ T4433] loop2: unable to read partition table [ 45.822979][ T3382] IPVS: starting estimator thread 0... [ 45.828123][ T4433] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 45.842484][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 45.851714][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 45.907065][ T4431] syz.2.388 (4431) used greatest stack depth: 10728 bytes left [ 45.934369][ T4435] IPVS: using max 2640 ests per chain, 132000 per kthread [ 45.942765][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 45.951960][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 45.963839][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 45.973811][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 45.985604][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 45.995022][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 46.013190][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 46.022380][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 46.096621][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 46.105840][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 46.113948][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 46.123131][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 46.131189][ T2995] loop2: unable to read partition table [ 46.142663][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 46.151882][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 46.477192][ T29] audit: type=1400 audit(1750796253.961:194): avc: denied { listen } for pid=4459 comm="syz.3.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 46.553042][ T29] audit: type=1400 audit(1750796254.061:195): avc: denied { read } for pid=4467 comm="syz.0.403" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 46.576167][ T29] audit: type=1400 audit(1750796254.061:196): avc: denied { open } for pid=4467 comm="syz.0.403" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 46.608959][ T29] audit: type=1400 audit(1750796254.091:197): avc: denied { write } for pid=4467 comm="syz.0.403" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 46.852755][ T4486] loop2: detected capacity change from 0 to 7 [ 46.860541][ T4486] loop2: unable to read partition table [ 46.867824][ T4486] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 46.971729][ T29] audit: type=1400 audit(1750796254.481:198): avc: denied { bind } for pid=4487 comm="syz.1.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 46.991401][ T29] audit: type=1400 audit(1750796254.481:199): avc: denied { listen } for pid=4487 comm="syz.1.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 47.011138][ T29] audit: type=1400 audit(1750796254.481:200): avc: denied { connect } for pid=4487 comm="syz.1.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 47.031664][ T29] audit: type=1400 audit(1750796254.481:201): avc: denied { write } for pid=4487 comm="syz.1.410" path="socket:[7537]" dev="sockfs" ino=7537 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 47.812291][ T4521] loop3: detected capacity change from 0 to 512 [ 47.836740][ T4521] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.850871][ T4521] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.871942][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.012472][ T4539] loop2: detected capacity change from 0 to 7 [ 48.034328][ T4541] loop2: unable to read partition table [ 48.075308][ T4539] loop2: unable to read partition table [ 48.083981][ T4539] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 48.095841][ T2995] loop2: unable to read partition table [ 48.127387][ T2995] loop2: unable to read partition table [ 48.134704][ T9] IPVS: starting estimator thread 0... [ 48.163690][ T2995] loop2: unable to read partition table [ 48.226187][ T4544] IPVS: using max 2592 ests per chain, 129600 per kthread [ 48.261882][ T2995] loop2: unable to read partition table [ 48.281356][ T2995] loop2: unable to read partition table [ 49.393337][ T4600] loop2: detected capacity change from 0 to 7 [ 49.402644][ T4600] loop2: unable to read partition table [ 49.408704][ T4600] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 49.516098][ T4606] loop3: detected capacity change from 0 to 128 [ 49.522879][ T4606] EXT4-fs: Ignoring removed nobh option [ 49.642572][ T4610] netlink: 32 bytes leftover after parsing attributes in process `syz.1.458'. [ 49.872536][ T4606] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.885635][ T4606] ext4 filesystem being mounted at /115/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 50.120740][ T2995] loop2: unable to read partition table [ 50.155918][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 50.155932][ T29] audit: type=1400 audit(1750796257.671:204): avc: denied { mounton } for pid=4627 comm="syz.0.465" path="/78/file1" dev="tmpfs" ino=425 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 50.225931][ T29] audit: type=1400 audit(1750796257.741:205): avc: denied { ioctl } for pid=4633 comm="syz.0.468" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x4518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 50.272343][ T3309] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.564755][ T4677] loop3: detected capacity change from 0 to 128 [ 50.571515][ T4677] EXT4-fs: Ignoring removed nobh option [ 50.632777][ T4677] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 50.646362][ T4677] ext4 filesystem being mounted at /124/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 50.714798][ T4682] loop1: detected capacity change from 0 to 1024 [ 50.745442][ T4682] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.869479][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.952807][ T4692] loop1: detected capacity change from 0 to 128 [ 50.964165][ T29] audit: type=1400 audit(1750796258.471:206): avc: denied { mount } for pid=4691 comm="syz.1.493" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 50.997762][ T29] audit: type=1400 audit(1750796258.511:207): avc: denied { unmount } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 51.159308][ T4703] syz.4.498 uses obsolete (PF_INET,SOCK_PACKET) [ 51.311551][ T3309] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 51.931807][ T4739] loop1: detected capacity change from 0 to 512 [ 51.976979][ T4739] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.995214][ T4739] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.156193][ T4739] EXT4-fs (loop1): shut down requested (0) [ 52.185346][ T4739] syz.1.514 (4739) used greatest stack depth: 10384 bytes left [ 52.196833][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.235157][ T4755] netlink: 156 bytes leftover after parsing attributes in process `syz.1.519'. [ 52.438507][ T4781] loop1: detected capacity change from 0 to 1024 [ 52.453205][ T4781] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.485506][ T29] audit: type=1400 audit(1750796260.001:208): avc: denied { mounton } for pid=4780 comm="syz.1.533" path="/104/bus/file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 52.539833][ T4791] netlink: 156 bytes leftover after parsing attributes in process `syz.3.536'. [ 52.753037][ T4781] ================================================================== [ 52.761170][ T4781] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 52.768310][ T4781] [ 52.770639][ T4781] write to 0xffff8881152d93ec of 4 bytes by task 4794 on cpu 0: [ 52.778373][ T4781] xas_set_mark+0x12b/0x140 [ 52.782908][ T4781] __folio_start_writeback+0x1dd/0x440 [ 52.788389][ T4781] ext4_bio_write_folio+0x5ad/0x9f0 [ 52.793606][ T4781] mpage_submit_folio+0xe4/0x170 [ 52.798576][ T4781] mpage_process_page_bufs+0x39b/0x4a0 [ 52.804063][ T4781] mpage_prepare_extent_to_map+0x741/0xaa0 [ 52.809900][ T4781] ext4_do_writepages+0xa1a/0x21c0 [ 52.815035][ T4781] ext4_writepages+0x176/0x300 [ 52.819832][ T4781] do_writepages+0x1c3/0x310 [ 52.824466][ T4781] file_write_and_wait_range+0x156/0x2c0 [ 52.830146][ T4781] generic_buffers_fsync_noflush+0x45/0x120 [ 52.836069][ T4781] ext4_sync_file+0x1ab/0x690 [ 52.840781][ T4781] vfs_fsync_range+0x10a/0x130 [ 52.845605][ T4781] ext4_buffered_write_iter+0x34f/0x3c0 [ 52.851175][ T4781] ext4_file_write_iter+0x383/0xf00 [ 52.856397][ T4781] iter_file_splice_write+0x5ef/0x970 [ 52.861795][ T4781] direct_splice_actor+0x153/0x2a0 [ 52.866949][ T4781] splice_direct_to_actor+0x30f/0x680 [ 52.872343][ T4781] do_splice_direct+0xda/0x150 [ 52.877138][ T4781] do_sendfile+0x380/0x650 [ 52.881574][ T4781] __x64_sys_sendfile64+0x105/0x150 [ 52.886788][ T4781] x64_sys_call+0xb39/0x2fb0 [ 52.891414][ T4781] do_syscall_64+0xd2/0x200 [ 52.895927][ T4781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.901837][ T4781] [ 52.904176][ T4781] read to 0xffff8881152d93ec of 4 bytes by task 4781 on cpu 1: [ 52.911820][ T4781] xas_find_marked+0x5dc/0x620 [ 52.916609][ T4781] find_get_entry+0x5d/0x380 [ 52.921219][ T4781] filemap_get_folios_tag+0x92/0x210 [ 52.926617][ T4781] mpage_prepare_extent_to_map+0x320/0xaa0 [ 52.932445][ T4781] ext4_do_writepages+0x6ea/0x21c0 [ 52.937665][ T4781] ext4_writepages+0x176/0x300 [ 52.942457][ T4781] do_writepages+0x1c3/0x310 [ 52.947060][ T4781] file_write_and_wait_range+0x156/0x2c0 [ 52.952723][ T4781] generic_buffers_fsync_noflush+0x45/0x120 [ 52.958650][ T4781] ext4_sync_file+0x1ab/0x690 [ 52.963343][ T4781] vfs_fsync_range+0x10a/0x130 [ 52.968158][ T4781] ext4_buffered_write_iter+0x34f/0x3c0 [ 52.973717][ T4781] ext4_file_write_iter+0x383/0xf00 [ 52.978927][ T4781] iter_file_splice_write+0x5ef/0x970 [ 52.984321][ T4781] direct_splice_actor+0x153/0x2a0 [ 52.989803][ T4781] splice_direct_to_actor+0x30f/0x680 [ 52.995195][ T4781] do_splice_direct+0xda/0x150 [ 52.999970][ T4781] do_sendfile+0x380/0x650 [ 53.004391][ T4781] __x64_sys_sendfile64+0x105/0x150 [ 53.009607][ T4781] x64_sys_call+0xb39/0x2fb0 [ 53.014219][ T4781] do_syscall_64+0xd2/0x200 [ 53.018728][ T4781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.024777][ T4781] [ 53.027104][ T4781] value changed: 0x0a000021 -> 0x04000021 [ 53.032833][ T4781] [ 53.035152][ T4781] Reported by Kernel Concurrency Sanitizer on: [ 53.041332][ T4781] CPU: 1 UID: 0 PID: 4781 Comm: syz.1.533 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(voluntary) [ 53.053772][ T4781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 53.063851][ T4781] ================================================================== [ 53.342572][ T4781] syz.1.533 (4781) used greatest stack depth: 9080 bytes left [ 53.352852][ T29] audit: type=1400 audit(1750796260.861:209): avc: denied { remove_name } for pid=3311 comm="syz-executor" name="lost+found" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 53.376307][ T29] audit: type=1400 audit(1750796260.861:210): avc: denied { rmdir } for pid=3311 comm="syz-executor" name="lost+found" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 53.377670][ T3311] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 53.398965][ T29] audit: type=1400 audit(1750796260.861:211): avc: denied { unmount } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 53.418042][ T3311] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 53.453436][ T29] audit: type=1400 audit(1750796260.891:212): avc: denied { unlink } for pid=3311 comm="syz-executor" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 53.476261][ T29] audit: type=1400 audit(1750796260.891:213): avc: denied { unlink } for pid=3311 comm="syz-executor" name="file1" dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 53.505666][ T3658] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.708921][ T153] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.747767][ T153] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.797543][ T153] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.838221][ T153] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.924025][ T153] bridge_slave_1: left allmulticast mode [ 53.929770][ T153] bridge_slave_1: left promiscuous mode [ 53.935489][ T153] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.964658][ T153] bridge_slave_0: left allmulticast mode [ 53.970358][ T153] bridge_slave_0: left promiscuous mode [ 53.976136][ T153] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.086807][ T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.096992][ T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.107563][ T153] bond0 (unregistering): Released all slaves [ 54.162709][ T153] hsr_slave_0: left promiscuous mode [ 54.173274][ T153] hsr_slave_1: left promiscuous mode [ 54.189303][ T153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.196896][ T153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.225062][ T153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.232590][ T153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.243646][ T153] veth1_macvtap: left promiscuous mode [ 54.249826][ T153] veth0_macvtap: left promiscuous mode [ 54.256192][ T153] veth1_vlan: left promiscuous mode [ 54.261450][ T153] veth0_vlan: left promiscuous mode [ 54.328628][ T153] team0 (unregistering): Port device team_slave_1 removed [ 54.338792][ T153] team0 (unregistering): Port device team_slave_0 removed [ 54.586252][ T153] IPVS: stop unused estimator thread 0...