last executing test programs: 2.343048985s ago: executing program 4 (id=365): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='bic', 0x3) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) 2.336707525s ago: executing program 4 (id=370): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x4000000, 0xffffffffffffffff, 0x0, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xcac1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.287216166s ago: executing program 4 (id=374): mmap(&(0x7f0000815000/0x1000)=nil, 0x1000, 0x300000c, 0x204031, 0xffffffffffffffff, 0xffffd000) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x8, 0x2) 2.286938506s ago: executing program 4 (id=377): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) sendmmsg$inet(r0, &(0x7f0000001000)=[{{&(0x7f0000000680)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000940)="b3fe109a0a0e5fbf3f4e8ce314c9dee2296599bb37db484506f7f4a1fab11782e0e1581812720001a80b9a0f3b1906d25b5efb254a1119eafe8167fa354fb03a066c8733d91c9127a8c77f2d647fbee113e52351c782ebfba85879d9482fd52ff178111c30472dc8243f1e28fc4d6127452b0d5b98c225054f78c4db08b2aaa9275252150a05682058a0c2b50728dd04c8040000007233", 0x97}, {&(0x7f0000000ec0)="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", 0x13a}], 0x2}}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="8c0c3d1d67c8bb03bb8583a03c80782dc91b7645b65ba2116c9e64ddbb0545cdc56ee7374538a65fd04d97df001c29c9b087138af146ce11e88845bc9556ab54ea3af37d14905a6715cb3d95950e673158092189a4ff888056524a743276bdca4c98e171c7731c42fa63f4a589800a0bc1da8d669bab3f7e49551957c66ce65a558c84b2cf257a964904d659cd", 0x8d}, {&(0x7f0000000b00)="a00bbe8964015ccf9616aacc5d9de4666219aa0475408027c9b20913c991c5db7da107255f95e0ab52dea95f73826f2c2592849e8030cb8cfa2c6dbcea59e596abe7c1edab0794bf677d6bbc8d0a7a10f38a1bb002eca8cb377070b3ae0c953666fa2172faef79188b1efa2a1f173f5f575dbc0237694450049cd3957383e34e32d293fd78b453389d715f9f97f3445e58921785d1ae09279d91e4eeb4794fa70e9942ca6874c36c3e856136c6d180bfa9bdc3cd6f0449c256ffbbbec269d9c1a1489d18986b1f51bc6e4eff6042acf1e6dbd5c7146110bf35284f73d4234ce4917759c8966c7b68bc7da4bc17a59d885903bb52649a5e97507029c77f6d676d467cb57fbada14763002e911ca7ad63588da11e4b3c7cc5aab6f156e5f23901cdd50b8db43109a935e9c2b8301398f5123ec2cce0a00d526d7406cd59e9c50aa115a2a269d7d6b342f9ca8e972066ace378b52f0099b5ed909", 0x159}, {&(0x7f0000000740)="c319cf272fefa48c3b8cc08760fd9d24a8b12249fa4a45c25032799042725eecb77e0d2a0191df2cd9ae72b7da6d9e5c2fb728a282ff50f4fd50488884bc66311445e2a7478c886c290dd3c0872c392e0c8145fe311cd88e6bad9f26c22b283a9d4812c3a4a1325e19be229046f9e452e3332092e806b7341f3152580d5996c980ba838a87d89f312a9486d0e2e9c280ac59d1aeebfa73970b74729ffb4dfea35e2dca68b2c2373f50315f22e443738d303584816bd35dec87", 0xb9}], 0x3}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)="ebd3f898a9f35f9f0687d56ed757eabb1ec4ae6ca742bca169389dc37b2bc6ea3018aaf5dde0b57f2e7c698da0de72d64894959dc5372a0defdf9d10a5fca8e5ec1a4813cc45e7a4a69bba49d31c2c40babd27642c8e81130cc35ee25ea5109a5b52ea11a044e158ed8f1d423847a9a497", 0x71}, {&(0x7f00000004c0)="7db538fba9d9a69edc1c8cdb7f78bdaf5a5b51158241af9a003eaca18f44be8ea83257d89d62f68cefad6c78998e0e2588b39df32d114b68c3e9f82c7c4343cd86efebf269f9c14356b1afc657700f6342ecec6cf6c24d82f412dcaac5cb0034955cf6b9292e554af52158fd559ebda9f2ded42beaa68dd1345376214fc553a3cae6dd55cc3b437e588ba64d7bf9f209a949d31a226860c14ced149be2ce4eb88b40b47e6970871824f4e1a98e9764588f0b178117a6d4d4471adbd30ba3e5a40de0ef50b307c318", 0xc8}], 0x2}}], 0x4, 0xc044) write$binfmt_misc(r0, &(0x7f0000000300), 0x5b0) 2.234718527s ago: executing program 4 (id=380): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000580), 0x109000, 0x0) readv(r1, &(0x7f0000000b00)=[{&(0x7f0000003800)=""/4082, 0xff2}, {&(0x7f00000006c0)=""/109, 0x6d}], 0x2) 2.229606277s ago: executing program 4 (id=383): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 1.077508629s ago: executing program 2 (id=413): unshare(0x2a020400) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x1000}], 0x1, 0x0, 0x0, 0x0) 1.05396024s ago: executing program 0 (id=415): r0 = syz_io_uring_setup(0xfb, &(0x7f00000003c0)={0x0, 0x4, 0x10100}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0, 0x40000103, 0x1}) io_uring_enter(r0, 0x46f6, 0x0, 0x0, 0x0, 0x0) 958.972742ms ago: executing program 0 (id=418): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0xdb08d879ebf174fa, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 802.743855ms ago: executing program 0 (id=422): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) nanosleep(&(0x7f0000000140), 0x0) 683.006937ms ago: executing program 0 (id=426): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000740)={0x2, 0xfffffff8, 0x8000000, 0x6, 0x1a, "10120dfe0ef7f0200000ff490a0080002a00"}) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000080)=0xa) 640.551868ms ago: executing program 0 (id=429): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001d80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0xfffffffb, @private0, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x2, 0x20, 0x4, 0xc2d}, &(0x7f00000001c0)=0x18) 558.648389ms ago: executing program 0 (id=431): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x4000004}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 528.08772ms ago: executing program 1 (id=432): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'macvtap0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4dc1}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_VERSION={0x5, 0x6, 0x1}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 454.987091ms ago: executing program 1 (id=433): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x11, 0x4, 0x4, 0x9}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0, 0x1000000}, 0x20) 454.860451ms ago: executing program 1 (id=434): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 420.211062ms ago: executing program 1 (id=435): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f00000003c0), 0xfc, 0x53e, &(0x7f0000000940)="$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") 386.658423ms ago: executing program 3 (id=436): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x6}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff88f7ffff4000630677fbac14142c88a8a0a688a89f4b4d2f87e56dca6aab84fe13f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x43, 0xffffffffffffff11, &(0x7f0000000000), &(0x7f0000000540)="9c18a537674b5d9e9185cd0add6d6d4c9e63ece1b58d7b42c6c27a5f1671fdf94432fc1baaef86573fc9fbb426f9284a6bd47174eb6fb9f893c18421d26d649d633a0f459969df8d3284737c5586cd696884192ce10db91e21fd978337408b7bd1cbb6789b51d63c8e68dab5da01c8e19d572950cfe2142e244990624270eaa2a2ded01d820cec011a6b05192b91cd193b1995bc296c249e1ef1570000000000000f75eec7040de10b5d8c536e5b5ce39ab84e658eb8f02fe112a5136cd3ac5c06848a40ec335a", 0x0, 0x0, 0x800006}, 0x3b) 276.129245ms ago: executing program 3 (id=437): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) pipe(&(0x7f0000000040)) unshare(0x2040400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x2, 0x80000000000004, 0x6}, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0xfffffffffffffffe, 0x1000000000, 0xfffffffffffffffc, 0xfffffffffffffffe}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 249.690265ms ago: executing program 2 (id=438): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(r0, r0, 0x0) setreuid(r0, 0x0) 226.641206ms ago: executing program 3 (id=439): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ptrace(0x10, r0) ptrace$getregset(0x4212, r0, 0x201, &(0x7f0000000240)={0x0}) 149.085887ms ago: executing program 1 (id=440): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x13497, 0x2021}, [@IFLA_LINK={0x8, 0x5, r2}, @IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffff7, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0xffe, {0x6}}]}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 148.938457ms ago: executing program 2 (id=441): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x4}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000003e000701fcfffffff6dbdf25017c0000080003804e2d", @ANYRESDEC=r1], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 118.749628ms ago: executing program 3 (id=442): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r0}, 0x18) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c}, 0x1c}}, 0x0) 116.636348ms ago: executing program 1 (id=443): io_setup(0x8, &(0x7f0000004200)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) io_getevents(r0, 0x1, 0x1, &(0x7f0000000180)=[{}], &(0x7f0000000040)={0x77359400}) 110.304088ms ago: executing program 2 (id=444): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) setsockopt$inet_mreqn(r0, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) 18.24945ms ago: executing program 2 (id=445): unshare(0x2040400) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x100, 0x2}, 0x6) connect$bt_l2cap(r0, &(0x7f0000000440)={0x1f, 0x400, @any, 0x0, 0x2}, 0xe) 18.03728ms ago: executing program 3 (id=446): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r0}, 0x10) timerfd_gettime(0xffffffffffffffff, 0x0) 201.65µs ago: executing program 2 (id=447): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=448): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r0}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.148' (ED25519) to the list of known hosts. [ 33.548085][ T29] audit: type=1400 audit(1758584160.872:62): avc: denied { mounton } for pid=3293 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.549267][ T3293] cgroup: Unknown subsys name 'net' [ 33.570882][ T29] audit: type=1400 audit(1758584160.872:63): avc: denied { mount } for pid=3293 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.598208][ T29] audit: type=1400 audit(1758584160.892:64): avc: denied { unmount } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.717211][ T3293] cgroup: Unknown subsys name 'cpuset' [ 33.723477][ T3293] cgroup: Unknown subsys name 'rlimit' [ 33.836196][ T29] audit: type=1400 audit(1758584161.152:65): avc: denied { setattr } for pid=3293 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.864790][ T29] audit: type=1400 audit(1758584161.162:66): avc: denied { create } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.885262][ T29] audit: type=1400 audit(1758584161.162:67): avc: denied { write } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.905714][ T29] audit: type=1400 audit(1758584161.162:68): avc: denied { read } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.922348][ T3295] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 33.926487][ T29] audit: type=1400 audit(1758584161.182:69): avc: denied { mounton } for pid=3293 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.959946][ T29] audit: type=1400 audit(1758584161.182:70): avc: denied { mount } for pid=3293 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 33.964269][ T3293] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 33.983240][ T29] audit: type=1400 audit(1758584161.252:71): avc: denied { relabelto } for pid=3295 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 35.141160][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 35.150091][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 35.180272][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 35.222840][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 35.253402][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 35.292047][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.299231][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.306460][ T3303] bridge_slave_0: entered allmulticast mode [ 35.312831][ T3303] bridge_slave_0: entered promiscuous mode [ 35.338616][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.345693][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.353422][ T3303] bridge_slave_1: entered allmulticast mode [ 35.360006][ T3303] bridge_slave_1: entered promiscuous mode [ 35.373994][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.381156][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.388442][ T3307] bridge_slave_0: entered allmulticast mode [ 35.394772][ T3307] bridge_slave_0: entered promiscuous mode [ 35.411194][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.418351][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.425561][ T3311] bridge_slave_0: entered allmulticast mode [ 35.432105][ T3311] bridge_slave_0: entered promiscuous mode [ 35.439107][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.446169][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.453413][ T3311] bridge_slave_1: entered allmulticast mode [ 35.459818][ T3311] bridge_slave_1: entered promiscuous mode [ 35.466125][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.473225][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.480466][ T3307] bridge_slave_1: entered allmulticast mode [ 35.487099][ T3307] bridge_slave_1: entered promiscuous mode [ 35.530332][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.539901][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.547004][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.554107][ T3302] bridge_slave_0: entered allmulticast mode [ 35.560627][ T3302] bridge_slave_0: entered promiscuous mode [ 35.572495][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.579640][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.586938][ T3313] bridge_slave_0: entered allmulticast mode [ 35.593379][ T3313] bridge_slave_0: entered promiscuous mode [ 35.605669][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.616161][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.626115][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.635310][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.642394][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.649669][ T3302] bridge_slave_1: entered allmulticast mode [ 35.655989][ T3302] bridge_slave_1: entered promiscuous mode [ 35.667586][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.674807][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.682165][ T3313] bridge_slave_1: entered allmulticast mode [ 35.688666][ T3313] bridge_slave_1: entered promiscuous mode [ 35.695823][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.723987][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.748561][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.764133][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.774125][ T3303] team0: Port device team_slave_0 added [ 35.780499][ T3307] team0: Port device team_slave_0 added [ 35.787042][ T3303] team0: Port device team_slave_1 added [ 35.793919][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.809615][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.824499][ T3307] team0: Port device team_slave_1 added [ 35.835723][ T3311] team0: Port device team_slave_0 added [ 35.852529][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.859543][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.885514][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.906985][ T3302] team0: Port device team_slave_0 added [ 35.913274][ T3311] team0: Port device team_slave_1 added [ 35.929925][ T3313] team0: Port device team_slave_0 added [ 35.935871][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.943085][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.969029][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.987994][ T3302] team0: Port device team_slave_1 added [ 35.999537][ T3313] team0: Port device team_slave_1 added [ 36.006109][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.013108][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.039200][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.055422][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.062411][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.088362][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.109753][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.117086][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.142991][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.164871][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.171883][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.197783][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.221970][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.229013][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.255042][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.266382][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.273391][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.299318][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.312668][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.319657][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.345636][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.358516][ T3303] hsr_slave_0: entered promiscuous mode [ 36.364576][ T3303] hsr_slave_1: entered promiscuous mode [ 36.372495][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.379653][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.405697][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.442752][ T3307] hsr_slave_0: entered promiscuous mode [ 36.448800][ T3307] hsr_slave_1: entered promiscuous mode [ 36.454655][ T3307] debugfs: 'hsr0' already exists in 'hsr' [ 36.460441][ T3307] Cannot create hsr debugfs directory [ 36.471057][ T3311] hsr_slave_0: entered promiscuous mode [ 36.477173][ T3311] hsr_slave_1: entered promiscuous mode [ 36.483001][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 36.488758][ T3311] Cannot create hsr debugfs directory [ 36.543470][ T3302] hsr_slave_0: entered promiscuous mode [ 36.549997][ T3302] hsr_slave_1: entered promiscuous mode [ 36.555848][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 36.561617][ T3302] Cannot create hsr debugfs directory [ 36.569309][ T3313] hsr_slave_0: entered promiscuous mode [ 36.575365][ T3313] hsr_slave_1: entered promiscuous mode [ 36.581367][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 36.587150][ T3313] Cannot create hsr debugfs directory [ 36.784615][ T3311] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.793543][ T3311] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.804964][ T3311] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.814019][ T3311] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.835677][ T3307] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.846698][ T3307] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.855331][ T3307] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.865053][ T3307] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.900264][ T3313] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.929051][ T3313] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.941895][ T3313] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.952122][ T3313] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 36.973677][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.989513][ T3302] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.008564][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.017837][ T3302] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.027908][ T3303] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.044142][ T3302] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.054296][ T3325] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.061448][ T3325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.071542][ T3303] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.081388][ T3302] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.093641][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.100752][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.109575][ T3303] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.122181][ T3303] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.135078][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.166296][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.181765][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.188850][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.213361][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.220444][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.285172][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.302127][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.325930][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.344386][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.359834][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.380407][ T3325] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.387521][ T3325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.396825][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.408854][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.420406][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.437776][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.444862][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.461862][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.468998][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.478792][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.485940][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.496229][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.503305][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.521462][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.528537][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.575555][ T3311] veth0_vlan: entered promiscuous mode [ 37.602674][ T3311] veth1_vlan: entered promiscuous mode [ 37.621459][ T3303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.686078][ T3311] veth0_macvtap: entered promiscuous mode [ 37.697323][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.706221][ T3311] veth1_macvtap: entered promiscuous mode [ 37.728297][ T3307] veth0_vlan: entered promiscuous mode [ 37.742451][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.750851][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.764618][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.773890][ T3307] veth1_vlan: entered promiscuous mode [ 37.784401][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.818395][ T31] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.828018][ T3307] veth0_macvtap: entered promiscuous mode [ 37.852703][ T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.861745][ T3307] veth1_macvtap: entered promiscuous mode [ 37.873096][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.899535][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.917606][ T31] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.939337][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.959045][ T3311] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 37.969935][ T1732] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.004323][ T3302] veth0_vlan: entered promiscuous mode [ 38.026382][ T1732] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.038410][ T3468] mmap: syz.3.4 (3468) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 38.053859][ T3302] veth1_vlan: entered promiscuous mode [ 38.061083][ T1732] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.082528][ T3451] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.093211][ T3303] veth0_vlan: entered promiscuous mode [ 38.104622][ T3302] veth0_macvtap: entered promiscuous mode [ 38.122378][ T3303] veth1_vlan: entered promiscuous mode [ 38.132163][ T3302] veth1_macvtap: entered promiscuous mode [ 38.152661][ T3303] veth0_macvtap: entered promiscuous mode [ 38.163645][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.183416][ T3303] veth1_macvtap: entered promiscuous mode [ 38.192529][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.210523][ T3313] veth0_vlan: entered promiscuous mode [ 38.232568][ T1732] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.253487][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.262319][ T3313] veth1_vlan: entered promiscuous mode [ 38.281068][ T1732] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.293893][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.309789][ T1732] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.330150][ T3313] veth0_macvtap: entered promiscuous mode [ 38.348061][ T3487] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.364014][ T1732] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.380633][ T3313] veth1_macvtap: entered promiscuous mode [ 38.387705][ T1732] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.400684][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.411379][ T1732] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.426407][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.442625][ T1732] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.465689][ T3494] serio: Serial port ptm0 [ 38.474759][ T1732] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.483618][ T3493] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12'. [ 38.502141][ T1732] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.516712][ T1732] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.530653][ T1732] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.544920][ T1732] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.579594][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 38.579636][ T29] audit: type=1400 audit(1758584165.902:117): avc: denied { write } for pid=3500 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 38.675443][ T29] audit: type=1400 audit(1758584165.932:118): avc: denied { create } for pid=3498 comm="syz.2.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 38.694776][ T29] audit: type=1400 audit(1758584165.932:119): avc: denied { write } for pid=3498 comm="syz.2.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 38.709759][ T3514] program syz.3.19 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 38.714085][ T29] audit: type=1400 audit(1758584165.992:120): avc: denied { read write } for pid=3507 comm="syz.2.17" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 38.747078][ T29] audit: type=1400 audit(1758584165.992:121): avc: denied { open } for pid=3507 comm="syz.2.17" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 38.814680][ T29] audit: type=1400 audit(1758584166.022:122): avc: denied { append } for pid=3513 comm="syz.3.19" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 38.838300][ T29] audit: type=1400 audit(1758584166.022:123): avc: denied { open } for pid=3513 comm="syz.3.19" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 38.883386][ T29] audit: type=1400 audit(1758584166.192:124): avc: denied { create } for pid=3517 comm="syz.3.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.903098][ T29] audit: type=1400 audit(1758584166.192:125): avc: denied { ioctl } for pid=3517 comm="syz.3.22" path="socket:[5211]" dev="sockfs" ino=5211 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.935686][ T29] audit: type=1400 audit(1758584166.222:126): avc: denied { create } for pid=3527 comm="syz.0.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 38.989362][ T3537] capability: warning: `syz.2.29' uses deprecated v2 capabilities in a way that may be insecure [ 39.246780][ T3574] netlink: 64691 bytes leftover after parsing attributes in process `syz.4.46'. [ 40.190086][ T3661] netlink: 'syz.1.87': attribute type 1 has an invalid length. [ 40.439687][ T3682] loop0: detected capacity change from 0 to 1024 [ 40.446400][ T3682] ======================================================= [ 40.446400][ T3682] WARNING: The mand mount option has been deprecated and [ 40.446400][ T3682] and is ignored by this kernel. Remove the mand [ 40.446400][ T3682] option from the mount to silence this warning. [ 40.446400][ T3682] ======================================================= [ 40.493629][ T3682] EXT4-fs: Ignoring removed orlov option [ 40.537110][ T3682] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c118, mo2=0002] [ 40.575748][ T3682] System zones: 0-1, 3-12 [ 40.586681][ T3682] EXT4-fs (loop0): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.617345][ T3704] loop3: detected capacity change from 0 to 164 [ 40.635246][ T3682] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 40.650571][ T3704] rock: directory entry would overflow storage [ 40.656920][ T3704] rock: sig=0x4f50, size=4, remaining=3 [ 40.662531][ T3704] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 40.682915][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 40.713427][ T3717] syz.1.100 (3717) used greatest stack depth: 9384 bytes left [ 40.879885][ T3743] loop2: detected capacity change from 0 to 1024 [ 40.898996][ T3743] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 40.910008][ T3743] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 40.923651][ T3743] JBD2: no valid journal superblock found [ 40.929474][ T3743] EXT4-fs (loop2): Could not load journal inode [ 40.939788][ T3749] IPv6: NLM_F_CREATE should be specified when creating new route [ 40.992135][ T3756] loop1: detected capacity change from 0 to 512 [ 41.015660][ T3756] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 41.028866][ T3756] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 41.044720][ T3756] EXT4-fs (loop1): 1 truncate cleaned up [ 41.057138][ T3756] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.101614][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.140941][ T3773] program syz.4.125 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 41.176793][ T3776] netlink: 28 bytes leftover after parsing attributes in process `syz.1.126'. [ 41.185747][ T3776] netlink: 28 bytes leftover after parsing attributes in process `syz.1.126'. [ 41.194671][ T3776] netlink: 28 bytes leftover after parsing attributes in process `syz.1.126'. [ 41.233359][ T3783] loop4: detected capacity change from 0 to 128 [ 41.261913][ T3783] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 41.269824][ T3783] FAT-fs (loop4): Filesystem has been set read-only [ 41.278399][ T3783] syz.4.129: attempt to access beyond end of device [ 41.278399][ T3783] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 41.326974][ T3783] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 41.334877][ T3783] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 41.353650][ T3790] syz.4.129: attempt to access beyond end of device [ 41.353650][ T3790] loop4: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 41.366983][ T3790] Buffer I/O error on dev loop4, logical block 2065, async page read [ 41.377938][ T3790] syz.4.129: attempt to access beyond end of device [ 41.377938][ T3790] loop4: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 41.391356][ T3790] Buffer I/O error on dev loop4, logical block 2066, async page read [ 41.400621][ T3790] syz.4.129: attempt to access beyond end of device [ 41.400621][ T3790] loop4: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 41.413874][ T3790] Buffer I/O error on dev loop4, logical block 2067, async page read [ 41.426794][ T3793] loop2: detected capacity change from 0 to 512 [ 41.444765][ T3797] loop1: detected capacity change from 0 to 512 [ 41.451336][ T3790] syz.4.129: attempt to access beyond end of device [ 41.451336][ T3790] loop4: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 41.464594][ T3790] Buffer I/O error on dev loop4, logical block 2068, async page read [ 41.473924][ T3790] syz.4.129: attempt to access beyond end of device [ 41.473924][ T3790] loop4: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 41.487204][ T3790] Buffer I/O error on dev loop4, logical block 2069, async page read [ 41.495863][ T3790] syz.4.129: attempt to access beyond end of device [ 41.495863][ T3790] loop4: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 41.499016][ T3793] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.509072][ T3790] Buffer I/O error on dev loop4, logical block 2070, async page read [ 41.509724][ T3790] syz.4.129: attempt to access beyond end of device [ 41.509724][ T3790] loop4: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 41.522017][ T3793] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.529849][ T3790] Buffer I/O error on dev loop4, logical block 2071, async page read [ 41.560739][ T3797] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 41.576514][ T3790] syz.4.129: attempt to access beyond end of device [ 41.576514][ T3790] loop4: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 41.589738][ T3790] Buffer I/O error on dev loop4, logical block 2072, async page read [ 41.599861][ T3783] syz.4.129: attempt to access beyond end of device [ 41.599861][ T3783] loop4: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 41.610553][ T3797] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.134: Failed to acquire dquot type 1 [ 41.613100][ T3783] Buffer I/O error on dev loop4, logical block 2065, async page read [ 41.636053][ T3797] EXT4-fs (loop1): 1 truncate cleaned up [ 41.644838][ T3797] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.651543][ T3783] Buffer I/O error on dev loop4, logical block 2066, async page read [ 41.670027][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.693047][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.793645][ T3816] pim6reg0: tun_chr_ioctl cmd 21731 [ 41.815994][ T3820] netlink: 28 bytes leftover after parsing attributes in process `syz.2.143'. [ 41.900696][ T3822] bond0: entered promiscuous mode [ 41.905775][ T3822] bond_slave_0: entered promiscuous mode [ 41.911623][ T3822] bond_slave_1: entered promiscuous mode [ 41.921980][ T3822] dummy0: entered promiscuous mode [ 41.928822][ T3822] hsr1: entered promiscuous mode [ 41.933852][ T3822] hsr1: entered allmulticast mode [ 41.938969][ T3822] bond0: entered allmulticast mode [ 41.944158][ T3822] bond_slave_0: entered allmulticast mode [ 41.949946][ T3822] bond_slave_1: entered allmulticast mode [ 41.959716][ T3822] dummy0: entered allmulticast mode [ 41.965861][ T3829] loop1: detected capacity change from 0 to 512 [ 41.984399][ T3829] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.097054][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.122714][ T3844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.152'. [ 42.161980][ T3851] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 42.172283][ T3851] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 42.272350][ T3869] program syz.0.165 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 42.390925][ T3896] Illegal XDP return value 4294967274 on prog (id 76) dev N/A, expect packet loss! [ 42.414200][ T3900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.179'. [ 42.460229][ T3883] loop4: detected capacity change from 0 to 8192 [ 42.478161][ T3902] netlink: 'syz.0.181': attribute type 1 has an invalid length. [ 42.576025][ T3925] netlink: 16 bytes leftover after parsing attributes in process `syz.2.193'. [ 42.589580][ T3927] loop4: detected capacity change from 0 to 256 [ 42.620251][ T3927] FAT-fs (loop4): Directory bread(block 64) failed [ 42.628751][ T3927] FAT-fs (loop4): Directory bread(block 65) failed [ 42.636136][ T3927] FAT-fs (loop4): Directory bread(block 66) failed [ 42.643158][ T3927] FAT-fs (loop4): Directory bread(block 67) failed [ 42.652787][ T3927] FAT-fs (loop4): Directory bread(block 68) failed [ 42.659402][ T3927] FAT-fs (loop4): Directory bread(block 69) failed [ 42.666136][ T3927] FAT-fs (loop4): Directory bread(block 70) failed [ 42.675037][ T3927] FAT-fs (loop4): Directory bread(block 71) failed [ 42.681722][ T3927] FAT-fs (loop4): Directory bread(block 72) failed [ 42.691857][ T3927] FAT-fs (loop4): Directory bread(block 73) failed [ 42.695696][ T3938] netlink: 'syz.2.197': attribute type 1 has an invalid length. [ 42.706512][ T3938] NCSI netlink: No device for ifindex 131092 [ 42.795209][ T3947] loop2: detected capacity change from 0 to 8192 [ 42.807089][ T3947] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 42.842344][ T3955] SELinux: security_context_str_to_sid () failed with errno=-22 [ 42.907327][ T3963] usb usb8: usbfs: process 3963 (syz.2.209) did not claim interface 0 before use [ 43.110626][ T3986] loop3: detected capacity change from 0 to 512 [ 43.146746][ T3986] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.173489][ T3986] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.189420][ T3986] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.220: corrupted xattr block 19: overlapping e_value [ 43.207259][ T3986] EXT4-fs (loop3): Remounting filesystem read-only [ 43.213895][ T3986] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 43.223133][ T3986] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 43.242952][ T4001] C: renamed from team_slave_0 (while UP) [ 43.252298][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.261664][ T4001] netlink: 'syz.2.225': attribute type 4 has an invalid length. [ 43.269556][ T4001] netlink: 116 bytes leftover after parsing attributes in process `syz.2.225'. [ 43.280093][ T4001] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 43.325825][ T4005] capability: warning: `syz.2.227' uses 32-bit capabilities (legacy support in use) [ 43.448460][ T4022] loop3: detected capacity change from 0 to 256 [ 43.535997][ T4035] program syz.0.241 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 43.572622][ T4038] __nla_validate_parse: 5 callbacks suppressed [ 43.572647][ T4038] netlink: 16 bytes leftover after parsing attributes in process `syz.1.243'. [ 43.675084][ T4052] netlink: 256 bytes leftover after parsing attributes in process `syz.4.250'. [ 43.802044][ T29] kauditd_printk_skb: 201 callbacks suppressed [ 43.802061][ T29] audit: type=1400 audit(1758584171.122:326): avc: denied { validate_trans } for pid=4071 comm="syz.1.256" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 43.838936][ T4075] loop2: detected capacity change from 0 to 512 [ 43.860566][ T4080] netlink: 'syz.1.261': attribute type 1 has an invalid length. [ 43.868336][ T4080] netlink: 180900 bytes leftover after parsing attributes in process `syz.1.261'. [ 43.869608][ T4075] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 43.911643][ T29] audit: type=1400 audit(1758584171.232:327): avc: denied { bind } for pid=4083 comm="syz.1.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 43.959732][ T4075] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.989731][ T4075] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.004197][ T29] audit: type=1400 audit(1758584171.322:328): avc: denied { create } for pid=4098 comm="syz.3.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 44.016443][ C0] hrtimer: interrupt took 32294 ns [ 44.051237][ T29] audit: type=1400 audit(1758584171.372:329): avc: denied { setopt } for pid=4098 comm="syz.3.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 44.071134][ T29] audit: type=1400 audit(1758584171.392:330): avc: denied { remove_name } for pid=4074 comm="syz.2.259" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 44.071187][ T29] audit: type=1400 audit(1758584171.392:331): avc: denied { unlink } for pid=4074 comm="syz.2.259" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 44.089509][ T4106] loop0: detected capacity change from 0 to 512 [ 44.089739][ T4106] EXT4-fs: Ignoring removed nobh option [ 44.122044][ T4106] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.272: iget: bad i_size value: 38620345925642 [ 44.122172][ T4106] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.272: couldn't read orphan inode 15 (err -117) [ 44.122756][ T4106] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.124075][ T4108] loop3: detected capacity change from 0 to 512 [ 44.132270][ T29] audit: type=1400 audit(1758584171.442:332): avc: denied { read append open } for pid=4105 comm="syz.0.272" path="/49/file1/cpuacct.usage_percpu_user" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 44.294962][ T4118] loop4: detected capacity change from 0 to 1024 [ 44.309784][ T4118] EXT4-fs: Ignoring removed nobh option [ 44.315503][ T4118] EXT4-fs: inline encryption not supported [ 44.328359][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.329139][ T4118] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.385968][ T29] audit: type=1400 audit(1758584171.702:333): avc: denied { block_suspend } for pid=4127 comm="syz.2.278" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 44.463016][ T29] audit: type=1400 audit(1758584171.772:334): avc: denied { setattr } for pid=4116 comm="syz.4.276" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 44.515816][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.540817][ T4139] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 44.590125][ T29] audit: type=1400 audit(1758584171.912:335): avc: denied { ioctl } for pid=4138 comm="syz.3.286" path="socket:[6556]" dev="sockfs" ino=6556 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.646257][ T4149] netlink: 'syz.2.290': attribute type 21 has an invalid length. [ 44.654331][ T4149] netlink: 132 bytes leftover after parsing attributes in process `syz.2.290'. [ 44.663375][ T4149] netlink: 'syz.2.290': attribute type 1 has an invalid length. [ 44.788932][ T37] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm kworker/u8:2: bg 0: block 5: invalid block bitmap [ 44.802856][ T37] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 44.815416][ T37] EXT4-fs (loop0): This should not happen!! Data will be lost [ 44.815416][ T37] [ 44.825128][ T37] EXT4-fs (loop0): Total free blocks count 0 [ 44.831155][ T37] EXT4-fs (loop0): Free/Dirty block details [ 44.837122][ T37] EXT4-fs (loop0): free_blocks=0 [ 44.842078][ T37] EXT4-fs (loop0): dirty_blocks=16016 [ 44.847496][ T37] EXT4-fs (loop0): Block reservation details [ 44.853490][ T37] EXT4-fs (loop0): i_reserved_data_blocks=16016 [ 44.881735][ T37] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 44.961247][ T4181] netlink: 28 bytes leftover after parsing attributes in process `syz.2.305'. [ 44.970206][ T4181] netlink: 28 bytes leftover after parsing attributes in process `syz.2.305'. [ 45.007137][ T4187] loop4: detected capacity change from 0 to 512 [ 45.046223][ T4191] loop3: detected capacity change from 0 to 1024 [ 45.054513][ T4187] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.069042][ T4191] EXT4-fs: Ignoring removed bh option [ 45.075008][ T4191] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 45.075614][ T4197] netlink: 16 bytes leftover after parsing attributes in process `syz.0.306'. [ 45.086213][ T4187] ext4 filesystem being mounted at /48/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.112333][ T4199] loop2: detected capacity change from 0 to 512 [ 45.121858][ T4199] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 45.139026][ T4191] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.166852][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.188514][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.220879][ T4214] netlink: 256 bytes leftover after parsing attributes in process `syz.4.315'. [ 45.241013][ T4217] erspan0: entered promiscuous mode [ 45.266060][ T4221] loop1: detected capacity change from 0 to 164 [ 45.331735][ T4234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.326'. [ 45.340727][ T4234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.326'. [ 45.349583][ T4234] netlink: 'syz.1.326': attribute type 14 has an invalid length. [ 45.357368][ T4234] netlink: 'syz.1.326': attribute type 12 has an invalid length. [ 45.368188][ T4239] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4239 comm=syz.3.330 [ 45.371092][ T4234] Zero length message leads to an empty skb [ 45.522666][ T4267] loop0: detected capacity change from 0 to 1024 [ 45.552623][ T4267] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.565837][ T4271] loop2: detected capacity change from 0 to 512 [ 45.588461][ T4271] journal_path: Non-blockdev passed as './bus' [ 45.594749][ T4271] EXT4-fs: error: could not find journal device path [ 45.620034][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.629983][ T4281] bond1: entered promiscuous mode [ 45.635053][ T4281] bond1: entered allmulticast mode [ 45.655101][ T4281] 8021q: adding VLAN 0 to HW filter on device bond1 [ 45.674231][ T4281] bond1 (unregistering): Released all slaves [ 45.764269][ T4308] program syz.2.361 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 45.776234][ T4308] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 46.032378][ T4361] loop3: detected capacity change from 0 to 1024 [ 46.058495][ T4361] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 46.077360][ T4361] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.127938][ T51] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm kworker/u8:3: lblock 0 mapped to illegal pblock 0 (length 1) [ 46.143568][ T51] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 46.155980][ T51] EXT4-fs (loop3): This should not happen!! Data will be lost [ 46.155980][ T51] [ 46.195970][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 46.258425][ T4373] program syz.3.388 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 46.299181][ T4375] loop3: detected capacity change from 0 to 256 [ 46.341681][ T4377] SELinux: policydb version 0 does not match my version range 15-35 [ 46.351397][ T4377] SELinux: failed to load policy [ 46.558335][ T4389] loop1: detected capacity change from 0 to 128 [ 46.683528][ T4399] loop3: detected capacity change from 0 to 512 [ 46.695815][ T4399] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 46.720584][ T4399] EXT4-fs (loop3): 1 truncate cleaned up [ 46.743537][ T4399] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.153886][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.191896][ T4432] random: crng reseeded on system resumption [ 47.247975][ T4437] loop0: detected capacity change from 0 to 2048 [ 47.289029][ T4437] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 47.371441][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 47.516174][ T4465] SELinux: failed to load policy [ 47.808916][ T4483] loop1: detected capacity change from 0 to 512 [ 47.862074][ T4483] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.435: Failed to acquire dquot type 1 [ 47.891019][ T4483] EXT4-fs (loop1): 1 truncate cleaned up [ 47.899770][ T4483] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.918707][ T4483] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.013066][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.100875][ T4501] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4501 comm=syz.3.442 [ 48.206522][ T4354] ================================================================== [ 48.214668][ T4354] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 48.224236][ T3313] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 48.224513][ T4354] [ 48.224519][ T4354] read-write to 0xffffffff868099c0 of 8 bytes by interrupt on cpu 0: [ 48.235453][ T3313] CPU: 0 UID: 0 PID: 3313 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 48.235491][ T3313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 48.235508][ T3313] Call Trace: [ 48.235517][ T3313] [ 48.235527][ T3313] __dump_stack+0x1d/0x30 [ 48.235558][ T3313] dump_stack_lvl+0xe8/0x140 [ 48.235585][ T3313] dump_stack+0x15/0x1b [ 48.235648][ T3313] dump_header+0x81/0x220 [ 48.235694][ T3313] oom_kill_process+0x342/0x400 [ 48.235756][ T3313] out_of_memory+0x979/0xb80 [ 48.235803][ T3313] try_charge_memcg+0x5e6/0x9e0 [ 48.235850][ T3313] charge_memcg+0x51/0xc0 [ 48.235952][ T3313] __mem_cgroup_charge+0x28/0xb0 [ 48.235979][ T3313] filemap_add_folio+0x4e/0x1b0 [ 48.236025][ T3313] __filemap_get_folio+0x31e/0x6b0 [ 48.236054][ T3313] filemap_fault+0x41f/0xb40 [ 48.236105][ T3313] __do_fault+0xbc/0x200 [ 48.236140][ T3313] handle_mm_fault+0xf78/0x2c20 [ 48.236231][ T3313] do_user_addr_fault+0x636/0x1090 [ 48.236281][ T3313] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 48.236319][ T3313] exc_page_fault+0x62/0xa0 [ 48.236403][ T3313] asm_exc_page_fault+0x26/0x30 [ 48.236436][ T3313] RIP: 0033:0x7fadc6cb5db4 [ 48.236457][ T3313] Code: 85 ed 09 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 e8 f9 ea 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 f8 ea 00 48 01 d1 [ 48.236480][ T3313] RSP: 002b:00007ffd3a5ff800 EFLAGS: 00010202 [ 48.236502][ T3313] RAX: 0000001b33124000 RBX: 000000000000008f RCX: 000000000000b798 [ 48.236520][ T3313] RDX: 0000000002afc20f RSI: 00007ffd3a5ff890 RDI: 0000000000000001 [ 48.236614][ T3313] RBP: 00007ffd3a5ff83c R08: 000000000a3f96b8 R09: 7fffffffffffffff [ 48.236630][ T3313] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 48.236668][ T3313] R13: 00000000000927c0 R14: 000000000000b517 R15: 00007ffd3a5ff890 [ 48.236694][ T3313] [ 48.236733][ T3313] memory: usage 307200kB, limit 307200kB, failcnt 427 [ 48.237692][ T4354] tick_do_update_jiffies64+0x113/0x1c0 [ 48.246013][ T3313] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0 [ 48.255893][ T4354] tick_nohz_handler+0x7f/0x2d0 [ 48.255918][ T4354] __hrtimer_run_queues+0x20f/0x5a0 [ 48.255942][ T4354] hrtimer_interrupt+0x21a/0x460 [ 48.255965][ T4354] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 48.266070][ T3313] kmem: usage 295720kB, limit 9007199254740988kB, failcnt 0 [ 48.269339][ T4354] sysvec_apic_timer_interrupt+0x6f/0x80 [ 48.272295][ T3313] Memory cgroup stats for /syz4 [ 48.276619][ T4354] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 48.281260][ T3313] : [ 48.285370][ T4354] copy_page_range+0xc91/0x3c20 [ 48.285405][ T4354] dup_mmap+0x885/0xf20 [ 48.285422][ T4354] copy_mm+0x11a/0x370 [ 48.285445][ T4354] copy_process+0xd08/0x2000 [ 48.515506][ T4354] kernel_clone+0x16c/0x5c0 [ 48.520034][ T4354] __x64_sys_clone+0xe6/0x120 [ 48.524728][ T4354] x64_sys_call+0x119c/0x2ff0 [ 48.529416][ T4354] do_syscall_64+0xd2/0x200 [ 48.533945][ T4354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.539850][ T4354] [ 48.542180][ T4354] read to 0xffffffff868099c0 of 8 bytes by task 4354 on cpu 1: [ 48.549725][ T4354] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 48.555984][ T4354] count_shadow_nodes+0x6a/0x230 [ 48.560931][ T4354] do_shrink_slab+0x60/0x680 [ 48.565540][ T4354] shrink_slab+0x448/0x760 [ 48.569978][ T4354] shrink_node+0x6c3/0x2120 [ 48.574499][ T4354] do_try_to_free_pages+0x3f6/0xcd0 [ 48.579728][ T4354] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 48.585638][ T4354] try_charge_memcg+0x358/0x9e0 [ 48.590499][ T4354] charge_memcg+0x51/0xc0 [ 48.594838][ T4354] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 48.600825][ T4354] __read_swap_cache_async+0x1df/0x350 [ 48.606305][ T4354] swap_cluster_readahead+0x376/0x3e0 [ 48.611896][ T4354] swapin_readahead+0xde/0x6f0 [ 48.616680][ T4354] do_swap_page+0x301/0x2430 [ 48.621368][ T4354] handle_mm_fault+0x9a5/0x2c20 [ 48.626228][ T4354] do_user_addr_fault+0x636/0x1090 [ 48.631361][ T4354] exc_page_fault+0x62/0xa0 [ 48.635884][ T4354] asm_exc_page_fault+0x26/0x30 [ 48.640742][ T4354] [ 48.643065][ T4354] value changed: 0x00000000ffff9d6b -> 0x00000000ffff9d6c [ 48.650176][ T4354] [ 48.652501][ T4354] Reported by Kernel Concurrency Sanitizer on: [ 48.658653][ T4354] CPU: 1 UID: 0 PID: 4354 Comm: syz.4.383 Not tainted syzkaller #0 PREEMPT(voluntary) [ 48.668294][ T4354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 48.678367][ T4354] ================================================================== [ 48.725549][ T3313] cache 0 [ 48.728873][ T3313] rss 11755520 [ 48.732261][ T3313] shmem 0 [ 48.735210][ T3313] mapped_file 0 [ 48.738837][ T3313] dirty 0 [ 48.741788][ T3313] writeback 0 [ 48.745081][ T3313] workingset_refault_anon 54 [ 48.749707][ T3313] workingset_refault_file 333 [ 48.754412][ T3313] swap 200704 [ 48.757743][ T3313] swapcached 0 [ 48.761117][ T3313] pgpgin 7590 [ 48.764415][ T3313] pgpgout 4720 [ 48.768055][ T3313] pgfault 10457 [ 48.771521][ T3313] pgmajfault 53 [ 48.775035][ T3313] inactive_anon 0 [ 48.778779][ T3313] active_anon 0 [ 48.782249][ T3313] inactive_file 11755520 [ 48.786573][ T3313] active_file 0 [ 48.790044][ T3313] unevictable 0 [ 48.793510][ T3313] hierarchical_memory_limit 314572800 [ 48.798988][ T3313] hierarchical_memsw_limit 9223372036854771712 [ 48.805153][ T3313] total_cache 0 [ 48.808655][ T3313] total_rss 11755520 [ 48.812554][ T3313] total_shmem 0 [ 48.816014][ T3313] total_mapped_file 0 [ 48.820023][ T3313] total_dirty 0 [ 48.823492][ T3313] total_writeback 0 [ 48.827360][ T3313] total_workingset_refault_anon 54 [ 48.832478][ T3313] total_workingset_refault_file 333 [ 48.837705][ T3313] total_swap 200704 [ 48.841589][ T3313] total_swapcached 0 [ 48.845564][ T3313] total_pgpgin 7590 [ 48.849416][ T3313] total_pgpgout 4720 [ 48.853327][ T3313] total_pgfault 10457 [ 48.857374][ T3313] total_pgmajfault 53 [ 48.861362][ T3313] total_inactive_anon 0 [ 48.865579][ T3313] total_active_anon 0 [ 48.869609][ T3313] total_inactive_file 11755520 [ 48.874453][ T3313] total_active_file 0 [ 48.878473][ T3313] total_unevictable 0 [ 48.882492][ T3313] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.383,pid=4354,uid=0 [ 48.897050][ T3313] Memory cgroup out of memory: Killed process 4354 (syz.4.383) total-vm:94088kB, anon-rss:12652kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 50.672010][ T4355] syz.4.383 (4355) used greatest stack depth: 7512 bytes left