last executing test programs:

9.148110597s ago: executing program 1 (id=121):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2}]}}]}, 0x48}}, 0x0)

9.11831196s ago: executing program 1 (id=124):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={<r2=>0x0}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={r2}, &(0x7f0000000080)=0x8)

9.071407684s ago: executing program 1 (id=129):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0x1f, r0, 0x0, 0x0)

8.961776504s ago: executing program 1 (id=134):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f0000001d40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, 0x1c, &(0x7f00000012c0)=[{&(0x7f0000000180)='\ru', 0x2}], 0x1}}, {{&(0x7f0000001600)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x30}, 0x5}, 0x1c, &(0x7f0000001980)=[{&(0x7f0000001640)="03", 0x1}], 0x1}}], 0x2, 0x24008040)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000000), 0x8)

8.90342199s ago: executing program 1 (id=146):
timer_settime(0x0, 0x5, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
r0 = fsopen(&(0x7f0000000040)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='/sys/fs/smackfs/revoke-subject\x00', &(0x7f0000000080)='autofs\x00', 0x0)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x3d}], 0x5a)

8.864048943s ago: executing program 1 (id=138):
r0 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0})
io_uring_enter(r0, 0x6b4d, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x0, 0x3, 0x7, 0x0, 0x0)

1.27129991s ago: executing program 2 (id=390):
syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='pagemap\x00')
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]})
madvise(&(0x7f0000569000/0x2000)=nil, 0x2000, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd/3\x00')

910.406114ms ago: executing program 3 (id=401):
set_mempolicy(0x3, &(0x7f0000000040)=0x1, 0x4)
r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$selinux_create(r0, 0x0, 0x0)
write$selinux_create(r0, 0x0, 0x0)

910.111595ms ago: executing program 3 (id=402):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0641, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272})
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x13)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x301)

726.097542ms ago: executing program 3 (id=403):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10)
r1 = syz_io_uring_setup(0x6acf, &(0x7f0000000940)={0x0, 0x467e}, &(0x7f00000009c0), &(0x7f00000003c0))
io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000001c80)={0x1, 0x0, 0x2000000, &(0x7f0000001c00)=[{0x0}], 0x0}, 0x20)

704.068604ms ago: executing program 3 (id=405):
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0)

539.619189ms ago: executing program 3 (id=406):
socket$can_raw(0x1d, 0x3, 0x1)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
fspick(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x1)

465.726226ms ago: executing program 4 (id=409):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
getrusage(0x0, 0x0)

465.484016ms ago: executing program 0 (id=410):
syz_emit_ethernet(0x0, 0x0, 0x0)
r0 = socket$nl_generic(0x11, 0x3, 0x10)
syz_emit_ethernet(0x2b, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x7c, 0x0, @multicast1, '\x00'}}}}}, 0x0)
sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)

465.311886ms ago: executing program 3 (id=411):
mlockall(0x3)
write$UHID_DESTROY(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}}, 0x0)

415.991561ms ago: executing program 4 (id=412):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000200)={'veth1_virt_wifi\x00', 0xc00})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'pim6reg1\x00', 0x400})

415.713191ms ago: executing program 0 (id=413):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0204"], 0x18)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000140)=ANY=[], 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote}, 0x1c)

415.485181ms ago: executing program 2 (id=414):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000001c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10)

355.796107ms ago: executing program 0 (id=415):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f00000004c0)="f42130")

355.601377ms ago: executing program 0 (id=416):
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0)

303.624692ms ago: executing program 2 (id=417):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000004411207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
ioperm(0x0, 0x4, 0x2)

303.521782ms ago: executing program 4 (id=418):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00070c000000000000000007000000", @ANYRES32=r1, @ANYBLOB="40000f000a000200aaaaaaaaaa0c"], 0x28}}, 0x0)

222.802949ms ago: executing program 0 (id=419):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x633, 0x0, 0x0, {{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0xfd}}, {@in6=@loopback, 0x0, 0x32}, @in=@local, {}, {0x0, 0x0, 0x0, 0x5}, {}, 0x2, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0)

222.720409ms ago: executing program 2 (id=420):
r0 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={0x0})

159.557905ms ago: executing program 0 (id=421):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000280), 0x1, 0x76a, &(0x7f0000001b00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x8048}], 0x1, 0x5412, 0x0, 0x0)
sendfile(r0, r0, 0x0, 0x7a680000)

159.456165ms ago: executing program 4 (id=422):
socket$can_raw(0x1d, 0x3, 0x1)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
fspick(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x1)

142.500967ms ago: executing program 2 (id=423):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ppoll(&(0x7f0000000100)=[{r0, 0x1260}], 0x1, &(0x7f0000000180)={0x0, 0x989680}, 0x0, 0x0)
write$tun(r0, &(0x7f0000000ac0)=ANY=[], 0xfdef)

120.594939ms ago: executing program 4 (id=424):
socket(0x2, 0xa, 0x0)
socket$packet(0x11, 0x2, 0x300)
r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/packet\x00')
read$msr(r0, &(0x7f0000000180)=""/126, 0x7e)

21.177558ms ago: executing program 4 (id=425):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
unlinkat(0xffffffffffffff9c, 0x0, 0x0)

0s ago: executing program 2 (id=426):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc)
syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@link_local, @link_local, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x1, 0x3c, 0xfffc, 0x0, 0x6, 0x6, 0x0, @local, @multicast2}, @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0x3, 0x0, 0x1, 0x401, 0x7fff, 0x3, 0x4e22, 0x4e24, 0x0, 0x1, 0x0, 0x0, 0x1}}}}}}, 0x0)

kernel console output (not intermixed with test programs):

[   21.627424][   T29] audit: type=1400 audit(1726888901.476:81): avc:  denied  { read } for  pid=2946 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
Warning: Permanently added '10.128.1.194' (ED25519) to the list of known hosts.
[   24.454970][   T29] audit: type=1400 audit(1726888904.306:82): avc:  denied  { mounton } for  pid=3232 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   24.456266][ T3232] cgroup: Unknown subsys name 'net'
[   24.478311][   T29] audit: type=1400 audit(1726888904.306:83): avc:  denied  { mount } for  pid=3232 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   24.506958][   T29] audit: type=1400 audit(1726888904.336:84): avc:  denied  { unmount } for  pid=3232 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   24.649041][ T3232] cgroup: Unknown subsys name 'cpuset'
[   24.655311][ T3232] cgroup: Unknown subsys name 'rlimit'
[   24.843480][   T29] audit: type=1400 audit(1726888904.696:85): avc:  denied  { setattr } for  pid=3232 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   24.869613][   T29] audit: type=1400 audit(1726888904.696:86): avc:  denied  { create } for  pid=3232 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   24.877965][ T3253] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   24.890081][   T29] audit: type=1400 audit(1726888904.696:87): avc:  denied  { write } for  pid=3232 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   24.919240][   T29] audit: type=1400 audit(1726888904.696:88): avc:  denied  { read } for  pid=3232 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   24.940426][   T29] audit: type=1400 audit(1726888904.706:89): avc:  denied  { mounton } for  pid=3232 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   24.965562][   T29] audit: type=1400 audit(1726888904.706:90): avc:  denied  { mount } for  pid=3232 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   25.001778][ T3232] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   26.084498][ T3261] chnl_net:caif_netlink_parms(): no params data found
[   26.157799][ T3261] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.164951][ T3261] bridge0: port 1(bridge_slave_0) entered disabled state
[   26.172449][ T3261] bridge_slave_0: entered allmulticast mode
[   26.179129][ T3261] bridge_slave_0: entered promiscuous mode
[   26.185979][ T3260] chnl_net:caif_netlink_parms(): no params data found
[   26.207586][ T3261] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.215056][ T3261] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.222300][ T3261] bridge_slave_1: entered allmulticast mode
[   26.229008][ T3261] bridge_slave_1: entered promiscuous mode
[   26.272310][ T3261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   26.284215][ T3261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   26.313046][ T3267] chnl_net:caif_netlink_parms(): no params data found
[   26.349324][ T3261] team0: Port device team_slave_0 added
[   26.356804][ T3261] team0: Port device team_slave_1 added
[   26.376697][ T3260] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.384110][ T3260] bridge0: port 1(bridge_slave_0) entered disabled state
[   26.391494][ T3260] bridge_slave_0: entered allmulticast mode
[   26.398117][ T3260] bridge_slave_0: entered promiscuous mode
[   26.414398][ T3264] chnl_net:caif_netlink_parms(): no params data found
[   26.423450][ T3261] batman_adv: batadv0: Adding interface: batadv_slave_0
[   26.430460][ T3261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   26.456705][ T3261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   26.468768][ T3260] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.475896][ T3260] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.483183][ T3260] bridge_slave_1: entered allmulticast mode
[   26.489663][ T3260] bridge_slave_1: entered promiscuous mode
[   26.507906][ T3261] batman_adv: batadv0: Adding interface: batadv_slave_1
[   26.515384][ T3261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   26.542642][ T3261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   26.581574][ T3260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   26.591126][ T3267] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.598659][ T3267] bridge0: port 1(bridge_slave_0) entered disabled state
[   26.606598][ T3267] bridge_slave_0: entered allmulticast mode
[   26.613313][ T3267] bridge_slave_0: entered promiscuous mode
[   26.629841][ T3260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   26.652205][ T3267] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.659785][ T3267] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.667489][ T3267] bridge_slave_1: entered allmulticast mode
[   26.674226][ T3267] bridge_slave_1: entered promiscuous mode
[   26.709651][ T3261] hsr_slave_0: entered promiscuous mode
[   26.716295][ T3261] hsr_slave_1: entered promiscuous mode
[   26.723713][ T3267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   26.742516][ T3274] chnl_net:caif_netlink_parms(): no params data found
[   26.757027][ T3267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   26.767341][ T3260] team0: Port device team_slave_0 added
[   26.774242][ T3260] team0: Port device team_slave_1 added
[   26.785638][ T3264] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.792893][ T3264] bridge0: port 1(bridge_slave_0) entered disabled state
[   26.800228][ T3264] bridge_slave_0: entered allmulticast mode
[   26.806866][ T3264] bridge_slave_0: entered promiscuous mode
[   26.840436][ T3264] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.847728][ T3264] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.855008][ T3264] bridge_slave_1: entered allmulticast mode
[   26.861622][ T3264] bridge_slave_1: entered promiscuous mode
[   26.878051][ T3260] batman_adv: batadv0: Adding interface: batadv_slave_0
[   26.885106][ T3260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   26.911644][ T3260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   26.931833][ T3267] team0: Port device team_slave_0 added
[   26.937777][ T3260] batman_adv: batadv0: Adding interface: batadv_slave_1
[   26.944796][ T3260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   26.970998][ T3260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   26.991388][ T3267] team0: Port device team_slave_1 added
[   27.003645][ T3264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   27.016310][ T3264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   27.033043][ T3274] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.040142][ T3274] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.047372][ T3274] bridge_slave_0: entered allmulticast mode
[   27.053930][ T3274] bridge_slave_0: entered promiscuous mode
[   27.061317][ T3274] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.068436][ T3274] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.076225][ T3274] bridge_slave_1: entered allmulticast mode
[   27.082871][ T3274] bridge_slave_1: entered promiscuous mode
[   27.101365][ T3267] batman_adv: batadv0: Adding interface: batadv_slave_0
[   27.108861][ T3267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   27.135572][ T3267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   27.170821][ T3264] team0: Port device team_slave_0 added
[   27.186820][ T3267] batman_adv: batadv0: Adding interface: batadv_slave_1
[   27.194097][ T3267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   27.220893][ T3267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   27.233168][ T3274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   27.245848][ T3274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   27.256829][ T3264] team0: Port device team_slave_1 added
[   27.269439][ T3260] hsr_slave_0: entered promiscuous mode
[   27.275614][ T3260] hsr_slave_1: entered promiscuous mode
[   27.281648][ T3260] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   27.289328][ T3260] Cannot create hsr debugfs directory
[   27.311961][ T3264] batman_adv: batadv0: Adding interface: batadv_slave_0
[   27.319629][ T3264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   27.347844][ T3264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   27.376337][ T3264] batman_adv: batadv0: Adding interface: batadv_slave_1
[   27.383770][ T3264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   27.411592][ T3264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   27.427800][ T3274] team0: Port device team_slave_0 added
[   27.454062][ T3267] hsr_slave_0: entered promiscuous mode
[   27.460230][ T3267] hsr_slave_1: entered promiscuous mode
[   27.466216][ T3267] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   27.473815][ T3267] Cannot create hsr debugfs directory
[   27.485509][ T3274] team0: Port device team_slave_1 added
[   27.526564][ T3264] hsr_slave_0: entered promiscuous mode
[   27.532932][ T3264] hsr_slave_1: entered promiscuous mode
[   27.539319][ T3264] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   27.546902][ T3264] Cannot create hsr debugfs directory
[   27.576354][ T3274] batman_adv: batadv0: Adding interface: batadv_slave_0
[   27.583944][ T3274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   27.610355][ T3274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   27.636901][ T3274] batman_adv: batadv0: Adding interface: batadv_slave_1
[   27.644561][ T3274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   27.671085][ T3274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   27.703947][   T29] kauditd_printk_skb: 13 callbacks suppressed
[   27.703971][   T29] audit: type=1400 audit(1726888907.556:104): avc:  denied  { create } for  pid=3261 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   27.731815][   T29] audit: type=1400 audit(1726888907.576:105): avc:  denied  { write } for  pid=3261 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   27.753622][   T29] audit: type=1400 audit(1726888907.576:106): avc:  denied  { read } for  pid=3261 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   27.782268][ T3261] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   27.805153][ T3261] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   27.819139][ T3274] hsr_slave_0: entered promiscuous mode
[   27.826143][ T3274] hsr_slave_1: entered promiscuous mode
[   27.832584][ T3274] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   27.840216][ T3274] Cannot create hsr debugfs directory
[   27.850733][ T3261] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   27.858768][   T29] audit: type=1400 audit(1726888907.716:107): avc:  denied  { remove_name } for  pid=2946 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   27.860124][ T3261] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   27.881924][   T29] audit: type=1400 audit(1726888907.716:108): avc:  denied  { rename } for  pid=2946 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   27.913623][   T29] audit: type=1400 audit(1726888907.716:109): avc:  denied  { create } for  pid=2946 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   27.997257][ T3260] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   28.007165][ T3260] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   28.027235][ T3260] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   28.037957][ T3260] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   28.072190][ T3267] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   28.083057][ T3267] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   28.092325][ T3267] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   28.102246][ T3267] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   28.137542][ T3264] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   28.147788][ T3264] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   28.163579][ T3264] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   28.178438][ T3264] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   28.213907][ T3274] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   28.224611][ T3274] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   28.237230][ T3274] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   28.253580][ T3261] 8021q: adding VLAN 0 to HW filter on device bond0
[   28.263063][ T3274] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   28.286732][ T3261] 8021q: adding VLAN 0 to HW filter on device team0
[   28.301788][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.308990][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.334556][ T3260] 8021q: adding VLAN 0 to HW filter on device bond0
[   28.354470][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.361714][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.383007][ T3260] 8021q: adding VLAN 0 to HW filter on device team0
[   28.394061][ T3267] 8021q: adding VLAN 0 to HW filter on device bond0
[   28.423950][ T3267] 8021q: adding VLAN 0 to HW filter on device team0
[   28.433176][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.441704][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.465015][ T3274] 8021q: adding VLAN 0 to HW filter on device bond0
[   28.475369][ T3264] 8021q: adding VLAN 0 to HW filter on device bond0
[   28.485940][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.494101][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.503790][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.512100][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.529064][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.537888][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.554088][ T3274] 8021q: adding VLAN 0 to HW filter on device team0
[   28.579471][ T3267] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   28.591431][ T3267] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   28.617294][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.625255][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.639813][ T3260] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   28.657768][ T3264] 8021q: adding VLAN 0 to HW filter on device team0
[   28.670359][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.678069][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.711897][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.720726][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.748970][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.758515][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.774653][ T3274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   28.805243][ T3267] 8021q: adding VLAN 0 to HW filter on device batadv0
[   28.842768][ T3260] 8021q: adding VLAN 0 to HW filter on device batadv0
[   28.870658][ T3261] 8021q: adding VLAN 0 to HW filter on device batadv0
[   28.918216][ T3274] 8021q: adding VLAN 0 to HW filter on device batadv0
[   29.006310][ T3267] veth0_vlan: entered promiscuous mode
[   29.034950][ T3264] 8021q: adding VLAN 0 to HW filter on device batadv0
[   29.049410][ T3267] veth1_vlan: entered promiscuous mode
[   29.096480][ T3260] veth0_vlan: entered promiscuous mode
[   29.107467][ T3267] veth0_macvtap: entered promiscuous mode
[   29.116517][ T3261] veth0_vlan: entered promiscuous mode
[   29.129173][ T3267] veth1_macvtap: entered promiscuous mode
[   29.144513][ T3267] batman_adv: batadv0: Interface activated: batadv_slave_0
[   29.154242][ T3260] veth1_vlan: entered promiscuous mode
[   29.161306][ T3261] veth1_vlan: entered promiscuous mode
[   29.177574][ T3267] batman_adv: batadv0: Interface activated: batadv_slave_1
[   29.204445][ T3274] veth0_vlan: entered promiscuous mode
[   29.214080][ T3267] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   29.223506][ T3267] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   29.233064][ T3267] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   29.243349][ T3267] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   29.268106][ T3261] veth0_macvtap: entered promiscuous mode
[   29.277109][ T3261] veth1_macvtap: entered promiscuous mode
[   29.285259][ T3274] veth1_vlan: entered promiscuous mode
[   29.315451][   T29] audit: type=1400 audit(1726888909.166:110): avc:  denied  { mounton } for  pid=3267 comm="syz-executor" path="/root/syzkaller.McOuqD/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   29.327960][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   29.354696][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   29.365269][   T29] audit: type=1400 audit(1726888909.166:111): avc:  denied  { mount } for  pid=3267 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   29.368608][ T3261] batman_adv: batadv0: Interface activated: batadv_slave_0
[   29.389635][   T29] audit: type=1400 audit(1726888909.166:112): avc:  denied  { mounton } for  pid=3267 comm="syz-executor" path="/root/syzkaller.McOuqD/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   29.417441][ T3274] veth0_macvtap: entered promiscuous mode
[   29.423774][   T29] audit: type=1400 audit(1726888909.166:113): avc:  denied  { mount } for  pid=3267 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   29.434413][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   29.465328][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   29.477994][ T3261] batman_adv: batadv0: Interface activated: batadv_slave_1
[   29.494498][ T3260] veth0_macvtap: entered promiscuous mode
[   29.503161][ T3261] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   29.513883][ T3261] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   29.525371][ T3261] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   29.537737][ T3261] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   29.552891][ T3274] veth1_macvtap: entered promiscuous mode
[   29.582065][ T3260] veth1_macvtap: entered promiscuous mode
[   29.611079][ T3264] veth0_vlan: entered promiscuous mode
[   29.640142][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   29.652423][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   29.663014][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   29.674891][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   29.688993][ T3260] batman_adv: batadv0: Interface activated: batadv_slave_0
[   29.699232][ T3274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   29.710961][ T3274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   29.722387][ T3274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   29.734046][ T3274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   29.744733][ T3274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   29.755803][ T3274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   29.771124][ T3274] batman_adv: batadv0: Interface activated: batadv_slave_0
[   29.793303][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   29.804537][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   29.815025][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   29.826589][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   29.852785][ T3260] batman_adv: batadv0: Interface activated: batadv_slave_1
[   29.854194][ T3403] loop0: detected capacity change from 0 to 8192
[   29.864567][ T3264] veth1_vlan: entered promiscuous mode
[   29.870926][ T3403] =======================================================
[   29.870926][ T3403] WARNING: The mand mount option has been deprecated and
[   29.870926][ T3403]          and is ignored by this kernel. Remove the mand
[   29.870926][ T3403]          option from the mount to silence this warning.
[   29.870926][ T3403] =======================================================
[   29.919202][ T3403] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   29.927839][ T3274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   29.944360][ T3274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   29.955022][ T3274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   29.966213][ T3274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   29.976962][ T3274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   29.988322][ T3274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.005769][ T3274] batman_adv: batadv0: Interface activated: batadv_slave_1
[   30.015537][ T3260] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   30.026697][ T3260] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   30.036933][ T3260] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   30.046668][ T3260] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   30.084592][ T3413] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   30.095831][ T3264] veth0_macvtap: entered promiscuous mode
[   30.106481][ T3411] netlink: 'syz.1.10': attribute type 2 has an invalid length.
[   30.123459][ T3413] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9'.
[   30.134639][ T3264] veth1_macvtap: entered promiscuous mode
[   30.143948][ T3274] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   30.153267][ T3274] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   30.164016][ T3274] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   30.174168][ T3274] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   30.202858][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   30.218536][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.229205][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   30.240835][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.251051][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   30.262027][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.272945][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   30.285309][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.297444][ T3264] batman_adv: batadv0: Interface activated: batadv_slave_0
[   30.315360][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   30.327853][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.338661][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   30.350504][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.361258][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   30.372849][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.383544][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   30.397226][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.410720][ T3264] batman_adv: batadv0: Interface activated: batadv_slave_1
[   30.420699][ T3264] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   30.431309][ T3264] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   30.441945][ T3264] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   30.451634][ T3264] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   30.612938][ T3440] loop2: detected capacity change from 0 to 512
[   30.672282][ T3440] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   30.685451][ T3431] loop0: detected capacity change from 0 to 8192
[   30.693029][ T3449] netlink: 'syz.3.21': attribute type 1 has an invalid length.
[   30.701012][ T3449] netlink: 'syz.3.21': attribute type 2 has an invalid length.
[   30.703855][ T3450] loop1: detected capacity change from 0 to 2048
[   30.708982][ T3449] netlink: 16074 bytes leftover after parsing attributes in process `syz.3.21'.
[   30.735794][ T3440] EXT4-fs warning (device loop2): dx_probe:869: inode #2: comm syz.2.3: Unimplemented hash flags: 0x0001
[   30.747743][ T3440] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.3: Corrupt directory, running e2fsck is recommended
[   30.793943][ T3440] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 3: comm syz.2.3: path /0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0
[   30.842612][ T3450] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   30.899839][ T3450] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   30.900557][ T3461] syz.4.25[3461] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   30.914959][ T3461] syz.4.25[3461] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   30.919566][ T3450] syz.1.20 (3450) used greatest stack depth: 11000 bytes left
[   30.956558][ T3261] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   31.013839][ T3466] loop3: detected capacity change from 0 to 1024
[   31.019282][ T3274] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   31.020718][ T3466] EXT4-fs: Ignoring removed orlov option
[   31.072028][ T3466] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   31.092456][ T3474] loop4: detected capacity change from 0 to 512
[   31.105246][ T3477] capability: warning: `syz.0.28' uses deprecated v2 capabilities in a way that may be insecure
[   31.127169][ T3481] loop2: detected capacity change from 0 to 128
[   31.134237][ T3474] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.32: attempt to clear invalid blocks 2 len 1
[   31.168075][ T3474] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[   31.183314][ T3474] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.32: invalid indirect mapped block 1819239214 (level 0)
[   31.184279][ T3260] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   31.203690][ T3474] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.32: invalid indirect mapped block 1819239214 (level 1)
[   31.224041][ T3474] EXT4-fs (loop4): 1 truncate cleaned up
[   31.232640][ T3474] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   31.274388][ T3491] bridge0: port 3(syz_tun) entered blocking state
[   31.281215][ T3491] bridge0: port 3(syz_tun) entered disabled state
[   31.300783][ T3491] syz_tun: entered allmulticast mode
[   31.317000][ T3491] syz_tun: entered promiscuous mode
[   31.335153][ T3491] bridge0: port 3(syz_tun) entered blocking state
[   31.341742][ T3491] bridge0: port 3(syz_tun) entered forwarding state
[   31.350884][ T3474] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.32: Unrecognised inode hash code 20
[   31.362504][ T3474] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.32: Corrupt directory, running e2fsck is recommended
[   31.377048][ T3474] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.32: Unrecognised inode hash code 20
[   31.388653][ T3474] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.32: Corrupt directory, running e2fsck is recommended
[   31.408116][ T3474] EXT4-fs error (device loop4): ext4_find_dest_de:2069: inode #2: block 13: comm syz.4.32: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[   31.452036][ T3505] loop2: detected capacity change from 0 to 128
[   31.499788][ T3501] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.4.32: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[   31.592873][ T3264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   31.818254][ T3539] mmap: syz.3.60 (3539) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   32.012003][ T3557] netlink: 12 bytes leftover after parsing attributes in process `syz.0.68'.
[   32.024496][ T3553] netlink: 12 bytes leftover after parsing attributes in process `syz.2.66'.
[   32.260885][ T3567] loop0: detected capacity change from 0 to 512
[   32.298290][ T3567] EXT4-fs (loop0): orphan cleanup on readonly fs
[   32.305026][ T3567] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[   32.430916][ T3567] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.73: invalid indirect mapped block 2683928664 (level 1)
[   32.449060][ T3567] EXT4-fs (loop0): Remounting filesystem read-only
[   32.466729][ T3567] EXT4-fs (loop0): 1 truncate cleaned up
[   32.476155][ T3567] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   32.495578][ T3567] SELinux: (dev loop0, type ext4) getxattr errno 5
[   32.514312][ T3578] loop2: detected capacity change from 0 to 1024
[   32.523834][ T3567] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   32.558146][ T3578] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[   32.568500][ T3578] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[   32.584932][ T3567] loop0: detected capacity change from 0 to 256
[   32.597512][ T3567] vfat: Unknown parameter '�N���0�[q)�0�L�۾��ԚwS���oϬ�j�M��j�xN�)-T�Q��ذ`�Gbj朏�ت��T�큵��Y�h�(�'j!kX�x�'
[   32.610765][ T3578] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled
[   32.637330][ T3578] EXT4-fs error (device loop2): ext4_get_journal_inode:5762: inode #5: comm syz.2.77: unexpected bad inode w/o EXT4_IGET_BAD
[   32.651452][ T3578] EXT4-fs (loop2): no journal found
[   32.655001][ T3580] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   32.656945][ T3578] EXT4-fs (loop2): can't get journal size
[   32.657721][ T3578] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   32.664510][ T3580] batman_adv: batadv0: Removing interface: batadv_slave_0
[   32.701908][ T3274] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   32.730434][ T3580] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[   32.773215][   T29] kauditd_printk_skb: 66 callbacks suppressed
[   32.773242][   T29] audit: type=1400 audit(1726888912.633:180): avc:  denied  { create } for  pid=3584 comm="syz.1.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   32.800569][   T29] audit: type=1400 audit(1726888912.633:181): avc:  denied  { connect } for  pid=3584 comm="syz.1.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   32.826169][   T29] audit: type=1400 audit(1726888912.683:182): avc:  denied  { bind } for  pid=3588 comm="syz.1.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   32.858998][ T3592] loop0: detected capacity change from 0 to 512
[   32.867721][ T3594] tap0: tun_chr_ioctl cmd 1074025692
[   32.877745][ T3592] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 not in group (block 458757)!
[   32.889122][ T3592] EXT4-fs (loop0): group descriptors corrupted!
[   32.914054][   T29] audit: type=1400 audit(1726888912.773:183): avc:  denied  { read } for  pid=3597 comm="syz.2.86" dev="nsfs" ino=4026532899 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   32.936057][   T29] audit: type=1400 audit(1726888912.793:184): avc:  denied  { open } for  pid=3597 comm="syz.2.86" path="net:[4026532899]" dev="nsfs" ino=4026532899 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   32.960694][ T3604] syz.0.89[3604] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   32.960769][ T3604] syz.0.89[3604] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   32.980172][ T3602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.88'.
[   33.002777][ T3608] netlink: 2124 bytes leftover after parsing attributes in process `syz.4.90'.
[   33.013443][ T3604] netlink: 36 bytes leftover after parsing attributes in process `syz.0.89'.
[   33.044418][   T29] audit: type=1400 audit(1726888912.903:185): avc:  denied  { setopt } for  pid=3609 comm="syz.0.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   33.058553][ T3614] syz.1.92[3614] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   33.078089][ T3614] syz.1.92[3614] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   33.106383][ T3616] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4)
[   33.126160][ T3616] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   33.134485][ T3616] vhci_hcd vhci_hcd.0: Device attached
[   33.142452][   T29] audit: type=1400 audit(1726888913.003:186): avc:  denied  { getopt } for  pid=3623 comm="syz.0.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   33.162759][   T29] audit: type=1400 audit(1726888913.003:187): avc:  denied  { write } for  pid=3613 comm="syz.1.92" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   33.220056][   T29] audit: type=1400 audit(1726888913.083:188): avc:  denied  { create } for  pid=3629 comm="syz.3.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   33.250802][ T3630] netlink: 12 bytes leftover after parsing attributes in process `syz.3.102'.
[   33.260817][ T3626] loop2: detected capacity change from 0 to 2048
[   33.268166][   T29] audit: type=1400 audit(1726888913.113:189): avc:  denied  { write } for  pid=3627 comm="syz.1.100" name="001" dev="devtmpfs" ino=144 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   33.299804][ T3628] vhci_hcd: invalid port number 61
[   33.396118][   T24] usb 9-1: new high-speed USB device number 2 using vhci_hcd
[   33.402015][ T3652] netlink: 2124 bytes leftover after parsing attributes in process `syz.0.109'.
[   33.491208][ T3667] netlink: 12 bytes leftover after parsing attributes in process `syz.0.115'.
[   33.494828][ T3669] SELinux:  Context system_u:object_r:initctl_t:s0 is not valid (left unmapped).
[   33.518993][ T3665] vhci_hcd: invalid port number 61
[   33.666288][ T3620] vhci_hcd: connection reset by peer
[   33.684438][   T11] vhci_hcd: stop threads
[   33.688826][   T11] vhci_hcd: release socket
[   33.693642][   T11] vhci_hcd: disconnect device
[   33.700714][ T3698] syz.3.131 uses obsolete (PF_INET,SOCK_PACKET)
[   33.709838][ T3699] SELinux:  Context system_u:object_r:device_t:s0 is not valid (left unmapped).
[   33.710766][ T3698] @: renamed from bond0 (while UP)
[   33.768746][ T3696] vhci_hcd: invalid port number 61
[   33.773482][ T3703] syz.1.134 (3703) used greatest stack depth: 9496 bytes left
[   33.805202][ T3709] loop3: detected capacity change from 0 to 256
[   33.919018][ T3728] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4)
[   33.925585][ T3728] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   33.933324][ T3728] vhci_hcd vhci_hcd.0: Device attached
[   33.972637][ T3735] loop4: detected capacity change from 0 to 512
[   33.989603][ T3735] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[   34.178338][ T3336] usb 5-1: new high-speed USB device number 2 using vhci_hcd
[   34.221406][ T3756] syz.0.157[3756] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   34.221482][ T3756] syz.0.157[3756] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   34.300530][ T3760] loop4: detected capacity change from 0 to 512
[   34.339247][ T3760] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   34.355268][ T3760] EXT4-fs warning (device loop4): dx_probe:869: inode #2: comm syz.4.160: Unimplemented hash flags: 0x0001
[   34.366761][ T3760] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.160: Corrupt directory, running e2fsck is recommended
[   34.380457][ T3760] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 3: comm syz.4.160: path /20/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0
[   34.486372][ T3767] loop0: detected capacity change from 0 to 256
[   34.545199][ T3731] vhci_hcd: connection reset by peer
[   34.558322][   T36] vhci_hcd: stop threads
[   34.562663][   T36] vhci_hcd: release socket
[   34.567186][   T36] vhci_hcd: disconnect device
[   34.572433][ T3264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.820963][ T3794] loop4: detected capacity change from 0 to 256
[   34.873198][ T3798] loop3: detected capacity change from 0 to 512
[   34.918046][ T3795] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4)
[   34.924789][ T3795] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   34.932450][ T3795] vhci_hcd vhci_hcd.0: Device attached
[   34.960952][ T3798] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   34.998314][ T3798] EXT4-fs warning (device loop3): dx_probe:869: inode #2: comm syz.3.176: Unimplemented hash flags: 0x0001
[   35.010002][ T3798] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.176: Corrupt directory, running e2fsck is recommended
[   35.023472][ T3798] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 3: comm syz.3.176: path /29/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0
[   35.168508][ T3260] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.308227][ T3337] usb 1-1: new high-speed USB device number 2 using vhci_hcd
[   35.390484][ T3847] __nla_validate_parse: 3 callbacks suppressed
[   35.390502][ T3847] netlink: 20 bytes leftover after parsing attributes in process `syz.4.200'.
[   35.450992][ T3849] loop3: detected capacity change from 0 to 512
[   35.475039][ T3849] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[   35.478711][ T3797] vhci_hcd: connection reset by peer
[   35.512601][  T945] vhci_hcd: stop threads
[   35.516973][  T945] vhci_hcd: release socket
[   35.521480][  T945] vhci_hcd: disconnect device
[   35.693796][ T3865] loop4: detected capacity change from 0 to 4096
[   35.769328][ T3865] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   35.919199][ T3264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.937402][ T3877] loop0: detected capacity change from 0 to 512
[   36.005494][ T3879] netlink: 4 bytes leftover after parsing attributes in process `syz.3.214'.
[   36.069153][ T3877] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.089544][ T3877] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   36.391946][ T3267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.477309][ T3892] Cannot find set identified by id 0 to match
[   36.668020][    C1] hrtimer: interrupt took 45138 ns
[   36.799837][ T3898] netlink: 20 bytes leftover after parsing attributes in process `syz.3.222'.
[   36.925692][ T3904] loop3: detected capacity change from 0 to 4096
[   36.943640][ T3910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   36.958566][ T3904] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.971879][ T3910] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   37.040136][ T3919] loop4: detected capacity change from 0 to 512
[   37.055990][ T3260] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.070454][ T3919] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[   37.164046][ T3927] tap0: tun_chr_ioctl cmd 2147767519
[   37.184394][ T3929] loop0: detected capacity change from 0 to 1024
[   37.240068][ T3929] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   37.291510][ T3929] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   37.379410][ T3267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.536630][ T3953] loop0: detected capacity change from 0 to 512
[   37.545608][ T3953] EXT4-fs (loop0): VFS: Can't find ext4 filesystem
[   37.670310][ T3972] loop3: detected capacity change from 0 to 128
[   37.679469][ T3973] netlink: 16 bytes leftover after parsing attributes in process `syz.0.257'.
[   37.688876][ T3973] netlink: 92 bytes leftover after parsing attributes in process `syz.0.257'.
[   37.719109][ T3972] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   37.747353][ T3972] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   37.841469][ T3989] loop2: detected capacity change from 0 to 512
[   37.848438][ T3989] EXT4-fs: Ignoring removed nomblk_io_submit option
[   37.855164][ T3989] EXT4-fs: Ignoring removed orlov option
[   37.873643][ T3989] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[   37.883542][ T3989] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c198, mo2=0002]
[   37.892148][ T3989] System zones: 1-12
[   37.896418][ T3989] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.264: corrupted in-inode xattr: e_value size too large
[   37.911910][ T3989] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.264: couldn't read orphan inode 15 (err -117)
[   37.925787][ T3989] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   37.977312][ T3260] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   38.017060][ T3274] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.366795][ T4025] loop4: detected capacity change from 0 to 512
[   38.387141][ T4025] EXT4-fs: Ignoring removed nomblk_io_submit option
[   38.394542][ T4025] EXT4-fs: Ignoring removed orlov option
[   38.425908][ T4025] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[   38.447063][ T4025] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c198, mo2=0002]
[   38.468081][ T4025] System zones: 1-12
[   38.477463][ T4025] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.279: corrupted in-inode xattr: e_value size too large
[   38.498115][   T24] vhci_hcd: vhci_device speed not set
[   38.516445][ T4036] netlink: 16 bytes leftover after parsing attributes in process `syz.3.283'.
[   38.525924][ T4036] netlink: 92 bytes leftover after parsing attributes in process `syz.3.283'.
[   38.556385][ T4025] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.279: couldn't read orphan inode 15 (err -117)
[   38.597443][ T4025] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   38.687559][ T3264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.772011][ T4048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   38.799714][   T29] kauditd_printk_skb: 56 callbacks suppressed
[   38.799777][   T29] audit: type=1400 audit(1726888918.663:246): avc:  denied  { name_bind } for  pid=4050 comm="syz.3.292" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   38.832232][   T29] audit: type=1400 audit(1726888918.663:247): avc:  denied  { node_bind } for  pid=4050 comm="syz.3.292" saddr=fe80::bb src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[   38.860912][ T4048] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   38.989677][ T4065] netlink: 16 bytes leftover after parsing attributes in process `syz.2.297'.
[   39.002919][ T4065] netlink: 92 bytes leftover after parsing attributes in process `syz.2.297'.
[   39.006422][ T4069] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.309'.
[   39.044808][ T4067] loop0: detected capacity change from 0 to 512
[   39.077193][ T4067] EXT4-fs: Ignoring removed nomblk_io_submit option
[   39.079820][ T4075] loop2: detected capacity change from 0 to 128
[   39.084701][ T4067] EXT4-fs: Ignoring removed orlov option
[   39.102513][ T4067] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[   39.248786][ T4067] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c198, mo2=0002]
[   39.270008][ T4067] System zones: 1-12
[   39.273580][ T4075] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   39.280640][ T4067] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.298: corrupted in-inode xattr: e_value size too large
[   39.306723][ T4075] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   39.320962][ T4067] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.298: couldn't read orphan inode 15 (err -117)
[   39.328289][ T3336] vhci_hcd: vhci_device speed not set
[   39.338841][ T4067] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   39.390646][ T3274] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   39.400641][ T3267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.547005][   T29] audit: type=1400 audit(1726888919.383:248): avc:  denied  { read } for  pid=4092 comm="syz.0.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   39.816118][   T29] audit: type=1326 audit(1861106647.666:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4117 comm="syz.0.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73eb8adef9 code=0x7ffc0000
[   39.858188][   T29] audit: type=1326 audit(1861106647.696:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4117 comm="syz.0.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f73eb8adef9 code=0x7ffc0000
[   39.886957][   T29] audit: type=1326 audit(1861106647.696:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4117 comm="syz.0.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73eb8adef9 code=0x7ffc0000
[   39.912854][   T29] audit: type=1326 audit(1861106647.696:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4117 comm="syz.0.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73eb8adef9 code=0x7ffc0000
[   39.938436][   T29] audit: type=1326 audit(1861106647.696:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4117 comm="syz.0.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f73eb8adef9 code=0x7ffc0000
[   39.965821][   T29] audit: type=1326 audit(1861106647.696:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4117 comm="syz.0.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73eb8adef9 code=0x7ffc0000
[   39.993034][   T29] audit: type=1326 audit(1861106647.696:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4117 comm="syz.0.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73eb8adef9 code=0x7ffc0000
[   40.118430][ T4131] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   40.144545][ T4131] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   40.475648][ T4167] devtmpfs: Unknown parameter 'dirsync�'
[   40.608098][ T3337] vhci_hcd: vhci_device speed not set
[   40.964645][ T4212] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   40.977408][ T4212] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[   40.991392][ T4212] bridge_slave_0: default FDB implementation only supports local addresses
[   41.013071][ T4211] tap0: tun_chr_ioctl cmd 1074025677
[   41.029834][ T4211] tap0: linktype set to 769
[   41.524482][ T4272] loop0: detected capacity change from 0 to 1024
[   41.557634][ T4272] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.610971][ T4272] EXT4-fs warning (device loop0): empty_inline_dir:1839: bad inline directory (dir #12) - no `..'
[   41.641261][ T3267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.715267][ T4287] loop4: detected capacity change from 0 to 2048
[   41.808831][ T4291] tap0: tun_chr_ioctl cmd 1074025677
[   41.814425][ T4291] tap0: linktype set to 769
[   41.835702][ T4287] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.852290][ T4287] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   41.867928][ T4287] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 17 with error 28
[   41.881451][ T4287] EXT4-fs (loop4): This should not happen!! Data will be lost
[   41.881451][ T4287] 
[   41.891927][ T4287] EXT4-fs (loop4): Total free blocks count 0
[   41.898048][ T4287] EXT4-fs (loop4): Free/Dirty block details
[   41.904264][ T4287] EXT4-fs (loop4): free_blocks=2415919104
[   41.910117][ T4287] EXT4-fs (loop4): dirty_blocks=32
[   41.915725][ T4287] EXT4-fs (loop4): Block reservation details
[   41.922290][ T4287] EXT4-fs (loop4): i_reserved_data_blocks=2
[   41.943145][ T4294] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 27 with error 28
[   42.093432][ T4301] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   42.106186][ T4301] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[   42.119365][ T4301] bridge_slave_0: default FDB implementation only supports local addresses
[   42.185835][ T4310] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   42.407980][ T4328] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   42.420422][ T4328] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[   42.433073][ T4328] bridge_slave_0: default FDB implementation only supports local addresses
[   42.598493][ T4342] loop0: detected capacity change from 0 to 2048
[   42.633026][ T4348] syz.4.425[4348] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   42.633087][ T4348] syz.4.425[4348] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   42.655725][ T4342] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.743718][ T4316] ==================================================================
[   42.751865][ T4316] BUG: KCSAN: data-race in mem_cgroup_iter / mem_cgroup_iter
[   42.759293][ T4316] 
[   42.761636][ T4316] read-write to 0xffff888108704668 of 4 bytes by task 4329 on cpu 0:
[   42.769727][ T4316]  mem_cgroup_iter+0x28e/0x380
[   42.774525][ T4316]  shrink_node+0x74a/0x1d40
[   42.779040][ T4316]  do_try_to_free_pages+0x3c6/0xc50
[   42.784270][ T4316]  try_to_free_mem_cgroup_pages+0x1f3/0x4f0
[   42.790204][ T4316]  try_charge_memcg+0x2bc/0x810
[   42.795081][ T4316]  obj_cgroup_charge_pages+0xbd/0x1a0
[   42.800478][ T4316]  __memcg_kmem_charge_page+0x9d/0x170
[   42.805963][ T4316]  __alloc_pages_noprof+0x1bc/0x360
[   42.811184][ T4316]  alloc_pages_mpol_noprof+0xb1/0x1e0
[   42.816582][ T4316]  alloc_pages_noprof+0xe1/0x100
[   42.821529][ T4316]  __vmalloc_node_range_noprof+0x736/0xec0
[   42.827350][ T4316]  __kvmalloc_node_noprof+0x121/0x170
[   42.832742][ T4316]  ip_set_alloc+0x1f/0x30
[   42.837078][ T4316]  hash_netiface_create+0x273/0x730
[   42.842547][ T4316]  ip_set_create+0x359/0x8a0
[   42.847169][ T4316]  nfnetlink_rcv_msg+0x4a9/0x570
[   42.852136][ T4316]  netlink_rcv_skb+0x12c/0x230
[   42.856918][ T4316]  nfnetlink_rcv+0x16c/0x15c0
[   42.861706][ T4316]  netlink_unicast+0x599/0x670
[   42.866493][ T4316]  netlink_sendmsg+0x5cc/0x6e0
[   42.871274][ T4316]  __sock_sendmsg+0x140/0x180
[   42.875993][ T4316]  ____sys_sendmsg+0x312/0x410
[   42.880861][ T4316]  __sys_sendmsg+0x1dd/0x270
[   42.885559][ T4316]  __x64_sys_sendmsg+0x46/0x50
[   42.890347][ T4316]  x64_sys_call+0x2689/0x2d60
[   42.895037][ T4316]  do_syscall_64+0xc9/0x1c0
[   42.899543][ T4316]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   42.905459][ T4316] 
[   42.907872][ T4316] read to 0xffff888108704668 of 4 bytes by task 4316 on cpu 1:
[   42.915440][ T4316]  mem_cgroup_iter+0xba/0x380
[   42.920152][ T4316]  shrink_node+0x458/0x1d40
[   42.924674][ T4316]  do_try_to_free_pages+0x3c6/0xc50
[   42.929896][ T4316]  try_to_free_mem_cgroup_pages+0x1f3/0x4f0
[   42.935810][ T4316]  try_charge_memcg+0x2bc/0x810
[   42.940679][ T4316]  __mem_cgroup_charge+0x63/0x100
[   42.945715][ T4316]  filemap_add_folio+0x53/0x1b0
[   42.950583][ T4316]  page_cache_ra_unbounded+0x175/0x310
[   42.956233][ T4316]  page_cache_async_ra+0x40c/0x420
[   42.961355][ T4316]  filemap_fault+0x2ca/0xa60
[   42.965960][ T4316]  __do_fault+0xb6/0x200
[   42.970308][ T4316]  handle_mm_fault+0xe7f/0x2a40
[   42.975254][ T4316]  __get_user_pages+0x499/0x10d0
[   42.980206][ T4316]  __mm_populate+0x25b/0x3b0
[   42.984811][ T4316]  __se_sys_mlockall+0x2c5/0x370
[   42.989851][ T4316]  __x64_sys_mlockall+0x1f/0x30
[   42.994805][ T4316]  x64_sys_call+0x1e3a/0x2d60
[   42.999499][ T4316]  do_syscall_64+0xc9/0x1c0
[   43.004013][ T4316]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   43.009924][ T4316] 
[   43.012256][ T4316] value changed: 0x000001c6 -> 0x000001c8
[   43.018156][ T4316] 
[   43.020491][ T4316] Reported by Kernel Concurrency Sanitizer on:
[   43.026737][ T4316] CPU: 1 UID: 0 PID: 4316 Comm: syz.3.411 Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0
[   43.037073][ T4316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[   43.047136][ T4316] ==================================================================
[   43.063483][ T4342] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   43.084582][ T4342] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 17 with error 28
[   43.097232][ T4342] EXT4-fs (loop0): This should not happen!! Data will be lost
[   43.097232][ T4342] 
[   43.107073][ T4342] EXT4-fs (loop0): Total free blocks count 0
[   43.113158][ T4342] EXT4-fs (loop0): Free/Dirty block details
[   43.119085][ T4342] EXT4-fs (loop0): free_blocks=2415919104
[   43.124825][ T4342] EXT4-fs (loop0): dirty_blocks=32
[   43.130030][ T4342] EXT4-fs (loop0): Block reservation details
[   43.136025][ T4342] EXT4-fs (loop0): i_reserved_data_blocks=2
[   43.169430][ T4315] syz.3.411 invoked oom-killer: gfp_mask=0x408d40(GFP_NOFS|__GFP_NOFAIL|__GFP_ZERO|__GFP_ACCOUNT), order=0, oom_score_adj=1000
[   43.182778][ T4315] CPU: 0 UID: 0 PID: 4315 Comm: syz.3.411 Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0
[   43.193045][ T4315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[   43.203204][ T4315] Call Trace:
[   43.206501][ T4315]  <TASK>
[   43.209457][ T4315]  dump_stack_lvl+0xf2/0x150
[   43.214093][ T4315]  dump_stack+0x15/0x20
[   43.218280][ T4315]  dump_header+0x83/0x2d0
[   43.222646][ T4315]  oom_kill_process+0x341/0x4c0
[   43.227520][ T4315]  out_of_memory+0x9af/0xbe0
[   43.232134][ T4315]  ? __rcu_read_unlock+0x4e/0x70
[   43.237207][ T4315]  mem_cgroup_out_of_memory+0x13e/0x190
[   43.242798][ T4315]  try_charge_memcg+0x51b/0x810
[   43.247673][ T4315]  obj_cgroup_charge_pages+0xbd/0x1a0
[   43.253079][ T4315]  __memcg_slab_post_alloc_hook+0x2ac/0x650
[   43.259207][ T4315]  ? jbd2_journal_dirty_metadata+0x244/0x6d0
[   43.265290][ T4315]  ? alloc_buffer_head+0x35/0x1f0
[   43.270386][ T4315]  kmem_cache_alloc_noprof+0x1a6/0x290
[   43.275955][ T4315]  alloc_buffer_head+0x35/0x1f0
[   43.280841][ T4315]  folio_alloc_buffers+0x168/0x310
[   43.286039][ T4315]  create_empty_buffers+0x2c/0x200
[   43.291238][ T4315]  __block_write_begin_int+0x1dd/0xfa0
[   43.296882][ T4315]  ? __pfx_ext4_da_get_block_prep+0x10/0x10
[   43.302885][ T4315]  ? __ext4_journal_stop+0xff/0x120
[   43.308222][ T4315]  ? ext4_dirty_inode+0xa5/0xb0
[   43.313229][ T4315]  ? __mark_inode_dirty+0x1b7/0x7e0
[   43.318543][ T4315]  ? __pfx_ext4_da_get_block_prep+0x10/0x10
[   43.324456][ T4315]  block_page_mkwrite+0x1bd/0x3f0
[   43.329543][ T4315]  ext4_page_mkwrite+0x73d/0xb70
[   43.334525][ T4315]  ? __rcu_read_lock+0x36/0x50
[   43.339314][ T4315]  ? folio_unlock+0xdc/0x130
[   43.344011][ T4315]  handle_mm_fault+0x135a/0x2a40
[   43.348982][ T4315]  exc_page_fault+0x296/0x650
[   43.353793][ T4315]  asm_exc_page_fault+0x26/0x30
[   43.358689][ T4315] RIP: 0033:0x7f628337cb06
[   43.363111][ T4315] Code: 00 48 89 df 48 89 54 24 10 83 c5 01 e8 23 b5 fe ff 48 8b 43 38 48 8b 54 24 10 41 83 c7 01 83 43 28 08 48 8d 48 f8 48 89 4b 38 <48> 89 50 f8 45 3b 7d 04 0f 82 68 fe ff ff e9 00 ff ff ff 0f 1f 80
[   43.383090][ T4315] RSP: 002b:00007ffdb918bc90 EFLAGS: 00010202
[   43.389174][ T4315] RAX: 0000001b2fa1f000 RBX: 00007f6284185720 RCX: 0000001b2fa1eff8
[   43.397236][ T4315] RDX: ffffffff814deee1 RSI: 0000000000000008 RDI: 00007f6284185720
[   43.405228][ T4315] RBP: 00000000000001f7 R08: 00007f6283640000 R09: 00007f6283642000
[   43.413236][ T4315] R10: 00000000814deee5 R11: 0000000000000003 R12: ffffffff814defd6
[   43.421401][ T4315] R13: 00007f62836560f0 R14: 0000000000000008 R15: 0000000000011766
[   43.429400][ T4315]  ? folio_unlock+0x26/0x130
[   43.434044][ T4315]  ? folio_add_wait_queue+0x31/0xf0
[   43.439690][ T4315]  </TASK>
[   43.442850][ T4315] memory: usage 307200kB, limit 307200kB, failcnt 315
[   43.450206][ T4315] memory+swap: usage 307300kB, limit 9007199254740988kB, failcnt 0
[   43.458223][ T4315] kmem: usage 279008kB, limit 9007199254740988kB, failcnt 0
[   43.465515][ T4315] Memory cgroup stats for /syz3:
[   43.468921][ T4354] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 27 with error 28
[   43.680771][ T4315] cache 18485248
[   43.684367][ T4315] rss 17088512
[   43.687740][ T4315] shmem 0
[   43.690758][ T4315] mapped_file 18272256
[   43.694870][ T4315] dirty 77824
[   43.698192][ T4315] writeback 0
[   43.701651][ T4315] workingset_refault_anon 12
[   43.706250][ T4315] workingset_refault_file 151
[   43.710965][ T4315] swap 102400
[   43.714308][ T4315] swapcached 4096
[   43.717958][ T4315] pgpgin 23904
[   43.721366][ T4315] pgpgout 15218
[   43.725008][ T4315] pgfault 25240
[   43.728481][ T4315] pgmajfault 16
[   43.731972][ T4315] inactive_anon 4096
[   43.735914][ T4315] active_anon 0
[   43.739393][ T4315] inactive_file 73728
[   43.743385][ T4315] active_file 208896
[   43.747288][ T4315] unevictable 35291136
[   43.751430][ T4315] hierarchical_memory_limit 314572800
[   43.756891][ T4315] hierarchical_memsw_limit 9223372036854771712
[   43.763085][ T4315] total_cache 18485248
[   43.767162][ T4315] total_rss 17088512
[   43.771182][ T4315] total_shmem 0
[   43.774988][ T4315] total_mapped_file 18272256
[   43.779850][ T4315] total_dirty 77824
[   43.783763][ T4315] total_writeback 0
[   43.787637][ T4315] total_workingset_refault_anon 12
[   43.794564][ T4315] total_workingset_refault_file 151
[   43.800858][ T4315] total_swap 102400
[   43.804686][ T4315] total_swapcached 4096
[   43.808962][ T4315] total_pgpgin 23904
[   43.812903][ T4315] total_pgpgout 15218
[   43.816914][ T4315] total_pgfault 25240
[   43.821285][ T4315] total_pgmajfault 16
[   43.825425][ T4315] total_inactive_anon 4096
[   43.829925][ T4315] total_active_anon 0
[   43.833969][ T4315] total_inactive_file 73728
[   43.838554][ T4315] total_active_file 208896
[   43.842979][ T4315] total_unevictable 35291136
[   43.847591][ T4315] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.411,pid=4315,uid=0
[   43.862296][ T4315] Memory cgroup out of memory: Killed process 4315 (syz.3.411) total-vm:87116kB, anon-rss:17252kB, file-rss:34128kB, shmem-rss:0kB, UID:0 pgtables:176kB oom_score_adj:1000
[   43.955201][ T4329] syz.3.411 (4329) used greatest stack depth: 7528 bytes left