last executing test programs: 9.148110597s ago: executing program 1 (id=121): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2}]}}]}, 0x48}}, 0x0) 9.11831196s ago: executing program 1 (id=124): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={<r2=>0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={r2}, &(0x7f0000000080)=0x8) 9.071407684s ago: executing program 1 (id=129): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) ptrace$cont(0x1f, r0, 0x0, 0x0) 8.961776504s ago: executing program 1 (id=134): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001d40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, 0x1c, &(0x7f00000012c0)=[{&(0x7f0000000180)='\ru', 0x2}], 0x1}}, {{&(0x7f0000001600)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x30}, 0x5}, 0x1c, &(0x7f0000001980)=[{&(0x7f0000001640)="03", 0x1}], 0x1}}], 0x2, 0x24008040) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000000), 0x8) 8.90342199s ago: executing program 1 (id=146): timer_settime(0x0, 0x5, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r0 = fsopen(&(0x7f0000000040)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='/sys/fs/smackfs/revoke-subject\x00', &(0x7f0000000080)='autofs\x00', 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x3d}], 0x5a) 8.864048943s ago: executing program 1 (id=138): r0 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}) io_uring_enter(r0, 0x6b4d, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x3, 0x7, 0x0, 0x0) 1.27129991s ago: executing program 2 (id=390): syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='pagemap\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}) madvise(&(0x7f0000569000/0x2000)=nil, 0x2000, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd/3\x00') 910.406114ms ago: executing program 3 (id=401): set_mempolicy(0x3, &(0x7f0000000040)=0x1, 0x4) r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_create(r0, 0x0, 0x0) write$selinux_create(r0, 0x0, 0x0) 910.111595ms ago: executing program 3 (id=402): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0641, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x13) ioctl$TUNSETLINK(r0, 0x400454cd, 0x301) 726.097542ms ago: executing program 3 (id=403): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x6acf, &(0x7f0000000940)={0x0, 0x467e}, &(0x7f00000009c0), &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000001c80)={0x1, 0x0, 0x2000000, &(0x7f0000001c00)=[{0x0}], 0x0}, 0x20) 704.068604ms ago: executing program 3 (id=405): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) 539.619189ms ago: executing program 3 (id=406): socket$can_raw(0x1d, 0x3, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) fspick(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x1) 465.726226ms ago: executing program 4 (id=409): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) getrusage(0x0, 0x0) 465.484016ms ago: executing program 0 (id=410): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2b, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x7c, 0x0, @multicast1, '\x00'}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 465.311886ms ago: executing program 3 (id=411): mlockall(0x3) write$UHID_DESTROY(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}}, 0x0) 415.991561ms ago: executing program 4 (id=412): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000200)={'veth1_virt_wifi\x00', 0xc00}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'pim6reg1\x00', 0x400}) 415.713191ms ago: executing program 0 (id=413): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0204"], 0x18) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000140)=ANY=[], 0x8) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote}, 0x1c) 415.485181ms ago: executing program 2 (id=414): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000001c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) 355.796107ms ago: executing program 0 (id=415): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f00000004c0)="f42130") 355.601377ms ago: executing program 0 (id=416): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) 303.624692ms ago: executing program 2 (id=417): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000004411207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioperm(0x0, 0x4, 0x2) 303.521782ms ago: executing program 4 (id=418): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', <r1=>0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00070c000000000000000007000000", @ANYRES32=r1, @ANYBLOB="40000f000a000200aaaaaaaaaa0c"], 0x28}}, 0x0) 222.802949ms ago: executing program 0 (id=419): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x633, 0x0, 0x0, {{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0xfd}}, {@in6=@loopback, 0x0, 0x32}, @in=@local, {}, {0x0, 0x0, 0x0, 0x5}, {}, 0x2, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 222.720409ms ago: executing program 2 (id=420): r0 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={0x0}) 159.557905ms ago: executing program 0 (id=421): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000280), 0x1, 0x76a, &(0x7f0000001b00)="$eJzs3d9rW1UcAPDvTdt17aatIOh8KghaGEvtrJuCDxMfRHAw0Ge3kGZlNm1Gk461FNwQwRdBxQdBX/bsj/nmqz9e9b/wQTamdsOJD1K5adJla9KlW5MI+XzgNOfce9Nzvjn3nnuSe0kC6FsT6Z9MxKGI+CiJGKstTyJiqJobjDixud3t9bV8mpLY2Hjzj6S6za31tXw0PCd1oFZ4MiJ+fD/icGZ7veWV1flcsVhYqpWnKgvnp8orq0fOLeTmCnOFxWPTMzNHj79w/NjexfrXL6sHr3/82rPfnPjnvSeufvhTEifiYG1dYxx7ZSImaq/JUPoS3uXVva6sx5JeN4AHkh6aA5tHeRyKsRio5loY6WbLAIBOeTciNgCAPpM4/wNAn6l/DnBrfS1fT739RKK7brwSEfs3469f39xcM1i7Zre/eh109FZy15WRJCLG96D+iYj44ru3v0pTdOg6JEAzly5HxJnxie3jf7LtnoXdeq6NbSbuKRv/oHu+T+c/Lzab/2W25j/RZP4z3OTYfRD3P/4z1/agmpbS+d/LDfe23W6Iv2Z8oFZ6pDrnG0rOnisW0rHt0YiYjKHhtDy9Qx2TN/+92Wpd4/zvz0/e+TKtP328s0Xm2uDw3c+ZzVVyDxNzoxuXI54abBZ/stX/SYv576k263j9pQ8+b7UujT+Nt562x99ZG1cinmna/3fuaEt2vD9xqro7TNV3iia+/fWz0Vb1N/Z/mtL66+8FuiHt/9Gd4x9PGu/XLO++jp+vjP3Qat3942++/+9L3qrm99WWXcxVKkvTEfuSN7YvP3rnufVyffs0/smnmx//O+3/6XvCM23GP3j9968fPP7OSuOf3VX/7z5z9fb8QKv62+v/mWpusraknfGv3QY+zGsHAAAAAAAAAAAAAAAAAAAAAAAAAO3KRMTBSDLZrXwmk81u/ob34zGaKZbKlcNnS8uLs1H9rezxGMrUv+pyrOH7UKdr34dfLx+9p/x8RDwWEZ8Oj1TL2XypONvr4AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg5kCL3/9P/Tbc69YBAB2zv9cNAAC6zvkfAPrP7s7/Ix1rBwDQPd7/A0D/cf4HgP7j/A8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECHnTp5Mk0bf6+v5dPy7IWV5fnShSOzhfJ8dmE5n82Xls5n50qluWIhmy8ttPxHlzYfiqXS+ZlYXL44VSmUK1PlldXTC6Xlxcrpcwu5ucLpwlDXIgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA9pVXVudzxWJhSUZGRmYr0zhKjPRugAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4n/svAAD//9EyKso=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x8048}], 0x1, 0x5412, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7a680000) 159.456165ms ago: executing program 4 (id=422): socket$can_raw(0x1d, 0x3, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) fspick(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x1) 142.500967ms ago: executing program 2 (id=423): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ppoll(&(0x7f0000000100)=[{r0, 0x1260}], 0x1, &(0x7f0000000180)={0x0, 0x989680}, 0x0, 0x0) write$tun(r0, &(0x7f0000000ac0)=ANY=[], 0xfdef) 120.594939ms ago: executing program 4 (id=424): socket(0x2, 0xa, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/packet\x00') read$msr(r0, &(0x7f0000000180)=""/126, 0x7e) 21.177558ms ago: executing program 4 (id=425): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) unlinkat(0xffffffffffffff9c, 0x0, 0x0) 0s ago: executing program 2 (id=426): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@link_local, @link_local, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x1, 0x3c, 0xfffc, 0x0, 0x6, 0x6, 0x0, @local, @multicast2}, @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0x3, 0x0, 0x1, 0x401, 0x7fff, 0x3, 0x4e22, 0x4e24, 0x0, 0x1, 0x0, 0x0, 0x1}}}}}}, 0x0) kernel console output (not intermixed with test programs): [ 21.627424][ T29] audit: type=1400 audit(1726888901.476:81): avc: denied { read } for pid=2946 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.1.194' (ED25519) to the list of known hosts. [ 24.454970][ T29] audit: type=1400 audit(1726888904.306:82): avc: denied { mounton } for pid=3232 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.456266][ T3232] cgroup: Unknown subsys name 'net' [ 24.478311][ T29] audit: type=1400 audit(1726888904.306:83): avc: denied { mount } for pid=3232 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.506958][ T29] audit: type=1400 audit(1726888904.336:84): avc: denied { unmount } for pid=3232 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.649041][ T3232] cgroup: Unknown subsys name 'cpuset' [ 24.655311][ T3232] cgroup: Unknown subsys name 'rlimit' [ 24.843480][ T29] audit: type=1400 audit(1726888904.696:85): avc: denied { setattr } for pid=3232 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.869613][ T29] audit: type=1400 audit(1726888904.696:86): avc: denied { create } for pid=3232 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.877965][ T3253] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.890081][ T29] audit: type=1400 audit(1726888904.696:87): avc: denied { write } for pid=3232 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.919240][ T29] audit: type=1400 audit(1726888904.696:88): avc: denied { read } for pid=3232 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.940426][ T29] audit: type=1400 audit(1726888904.706:89): avc: denied { mounton } for pid=3232 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.965562][ T29] audit: type=1400 audit(1726888904.706:90): avc: denied { mount } for pid=3232 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 25.001778][ T3232] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.084498][ T3261] chnl_net:caif_netlink_parms(): no params data found [ 26.157799][ T3261] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.164951][ T3261] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.172449][ T3261] bridge_slave_0: entered allmulticast mode [ 26.179129][ T3261] bridge_slave_0: entered promiscuous mode [ 26.185979][ T3260] chnl_net:caif_netlink_parms(): no params data found [ 26.207586][ T3261] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.215056][ T3261] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.222300][ T3261] bridge_slave_1: entered allmulticast mode [ 26.229008][ T3261] bridge_slave_1: entered promiscuous mode [ 26.272310][ T3261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.284215][ T3261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.313046][ T3267] chnl_net:caif_netlink_parms(): no params data found [ 26.349324][ T3261] team0: Port device team_slave_0 added [ 26.356804][ T3261] team0: Port device team_slave_1 added [ 26.376697][ T3260] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.384110][ T3260] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.391494][ T3260] bridge_slave_0: entered allmulticast mode [ 26.398117][ T3260] bridge_slave_0: entered promiscuous mode [ 26.414398][ T3264] chnl_net:caif_netlink_parms(): no params data found [ 26.423450][ T3261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.430460][ T3261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.456705][ T3261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.468768][ T3260] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.475896][ T3260] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.483183][ T3260] bridge_slave_1: entered allmulticast mode [ 26.489663][ T3260] bridge_slave_1: entered promiscuous mode [ 26.507906][ T3261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.515384][ T3261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.542642][ T3261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.581574][ T3260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.591126][ T3267] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.598659][ T3267] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.606598][ T3267] bridge_slave_0: entered allmulticast mode [ 26.613313][ T3267] bridge_slave_0: entered promiscuous mode [ 26.629841][ T3260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.652205][ T3267] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.659785][ T3267] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.667489][ T3267] bridge_slave_1: entered allmulticast mode [ 26.674226][ T3267] bridge_slave_1: entered promiscuous mode [ 26.709651][ T3261] hsr_slave_0: entered promiscuous mode [ 26.716295][ T3261] hsr_slave_1: entered promiscuous mode [ 26.723713][ T3267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.742516][ T3274] chnl_net:caif_netlink_parms(): no params data found [ 26.757027][ T3267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.767341][ T3260] team0: Port device team_slave_0 added [ 26.774242][ T3260] team0: Port device team_slave_1 added [ 26.785638][ T3264] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.792893][ T3264] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.800228][ T3264] bridge_slave_0: entered allmulticast mode [ 26.806866][ T3264] bridge_slave_0: entered promiscuous mode [ 26.840436][ T3264] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.847728][ T3264] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.855008][ T3264] bridge_slave_1: entered allmulticast mode [ 26.861622][ T3264] bridge_slave_1: entered promiscuous mode [ 26.878051][ T3260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.885106][ T3260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.911644][ T3260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.931833][ T3267] team0: Port device team_slave_0 added [ 26.937777][ T3260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.944796][ T3260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.970998][ T3260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.991388][ T3267] team0: Port device team_slave_1 added [ 27.003645][ T3264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.016310][ T3264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.033043][ T3274] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.040142][ T3274] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.047372][ T3274] bridge_slave_0: entered allmulticast mode [ 27.053930][ T3274] bridge_slave_0: entered promiscuous mode [ 27.061317][ T3274] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.068436][ T3274] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.076225][ T3274] bridge_slave_1: entered allmulticast mode [ 27.082871][ T3274] bridge_slave_1: entered promiscuous mode [ 27.101365][ T3267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.108861][ T3267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.135572][ T3267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.170821][ T3264] team0: Port device team_slave_0 added [ 27.186820][ T3267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.194097][ T3267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.220893][ T3267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.233168][ T3274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.245848][ T3274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.256829][ T3264] team0: Port device team_slave_1 added [ 27.269439][ T3260] hsr_slave_0: entered promiscuous mode [ 27.275614][ T3260] hsr_slave_1: entered promiscuous mode [ 27.281648][ T3260] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.289328][ T3260] Cannot create hsr debugfs directory [ 27.311961][ T3264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.319629][ T3264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.347844][ T3264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.376337][ T3264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.383770][ T3264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.411592][ T3264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.427800][ T3274] team0: Port device team_slave_0 added [ 27.454062][ T3267] hsr_slave_0: entered promiscuous mode [ 27.460230][ T3267] hsr_slave_1: entered promiscuous mode [ 27.466216][ T3267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.473815][ T3267] Cannot create hsr debugfs directory [ 27.485509][ T3274] team0: Port device team_slave_1 added [ 27.526564][ T3264] hsr_slave_0: entered promiscuous mode [ 27.532932][ T3264] hsr_slave_1: entered promiscuous mode [ 27.539319][ T3264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.546902][ T3264] Cannot create hsr debugfs directory [ 27.576354][ T3274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.583944][ T3274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.610355][ T3274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.636901][ T3274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.644561][ T3274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.671085][ T3274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.703947][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 27.703971][ T29] audit: type=1400 audit(1726888907.556:104): avc: denied { create } for pid=3261 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.731815][ T29] audit: type=1400 audit(1726888907.576:105): avc: denied { write } for pid=3261 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.753622][ T29] audit: type=1400 audit(1726888907.576:106): avc: denied { read } for pid=3261 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.782268][ T3261] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.805153][ T3261] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.819139][ T3274] hsr_slave_0: entered promiscuous mode [ 27.826143][ T3274] hsr_slave_1: entered promiscuous mode [ 27.832584][ T3274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.840216][ T3274] Cannot create hsr debugfs directory [ 27.850733][ T3261] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.858768][ T29] audit: type=1400 audit(1726888907.716:107): avc: denied { remove_name } for pid=2946 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 27.860124][ T3261] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.881924][ T29] audit: type=1400 audit(1726888907.716:108): avc: denied { rename } for pid=2946 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 27.913623][ T29] audit: type=1400 audit(1726888907.716:109): avc: denied { create } for pid=2946 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 27.997257][ T3260] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.007165][ T3260] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.027235][ T3260] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.037957][ T3260] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.072190][ T3267] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.083057][ T3267] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.092325][ T3267] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.102246][ T3267] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.137542][ T3264] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.147788][ T3264] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.163579][ T3264] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.178438][ T3264] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.213907][ T3274] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.224611][ T3274] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.237230][ T3274] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.253580][ T3261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.263063][ T3274] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.286732][ T3261] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.301788][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.308990][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.334556][ T3260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.354470][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.361714][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.383007][ T3260] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.394061][ T3267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.423950][ T3267] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.433176][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.441704][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.465015][ T3274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.475369][ T3264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.485940][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.494101][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.503790][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.512100][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.529064][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.537888][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.554088][ T3274] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.579471][ T3267] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.591431][ T3267] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.617294][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.625255][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.639813][ T3260] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.657768][ T3264] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.670359][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.678069][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.711897][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.720726][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.748970][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.758515][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.774653][ T3274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.805243][ T3267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.842768][ T3260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.870658][ T3261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.918216][ T3274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.006310][ T3267] veth0_vlan: entered promiscuous mode [ 29.034950][ T3264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.049410][ T3267] veth1_vlan: entered promiscuous mode [ 29.096480][ T3260] veth0_vlan: entered promiscuous mode [ 29.107467][ T3267] veth0_macvtap: entered promiscuous mode [ 29.116517][ T3261] veth0_vlan: entered promiscuous mode [ 29.129173][ T3267] veth1_macvtap: entered promiscuous mode [ 29.144513][ T3267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.154242][ T3260] veth1_vlan: entered promiscuous mode [ 29.161306][ T3261] veth1_vlan: entered promiscuous mode [ 29.177574][ T3267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.204445][ T3274] veth0_vlan: entered promiscuous mode [ 29.214080][ T3267] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.223506][ T3267] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.233064][ T3267] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.243349][ T3267] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.268106][ T3261] veth0_macvtap: entered promiscuous mode [ 29.277109][ T3261] veth1_macvtap: entered promiscuous mode [ 29.285259][ T3274] veth1_vlan: entered promiscuous mode [ 29.315451][ T29] audit: type=1400 audit(1726888909.166:110): avc: denied { mounton } for pid=3267 comm="syz-executor" path="/root/syzkaller.McOuqD/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 29.327960][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.354696][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.365269][ T29] audit: type=1400 audit(1726888909.166:111): avc: denied { mount } for pid=3267 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 29.368608][ T3261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.389635][ T29] audit: type=1400 audit(1726888909.166:112): avc: denied { mounton } for pid=3267 comm="syz-executor" path="/root/syzkaller.McOuqD/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 29.417441][ T3274] veth0_macvtap: entered promiscuous mode [ 29.423774][ T29] audit: type=1400 audit(1726888909.166:113): avc: denied { mount } for pid=3267 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 29.434413][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.465328][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.477994][ T3261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.494498][ T3260] veth0_macvtap: entered promiscuous mode [ 29.503161][ T3261] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.513883][ T3261] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.525371][ T3261] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.537737][ T3261] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.552891][ T3274] veth1_macvtap: entered promiscuous mode [ 29.582065][ T3260] veth1_macvtap: entered promiscuous mode [ 29.611079][ T3264] veth0_vlan: entered promiscuous mode [ 29.640142][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.652423][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.663014][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.674891][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.688993][ T3260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.699232][ T3274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.710961][ T3274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.722387][ T3274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.734046][ T3274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.744733][ T3274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.755803][ T3274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.771124][ T3274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.793303][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.804537][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.815025][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.826589][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.852785][ T3260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.854194][ T3403] loop0: detected capacity change from 0 to 8192 [ 29.864567][ T3264] veth1_vlan: entered promiscuous mode [ 29.870926][ T3403] ======================================================= [ 29.870926][ T3403] WARNING: The mand mount option has been deprecated and [ 29.870926][ T3403] and is ignored by this kernel. Remove the mand [ 29.870926][ T3403] option from the mount to silence this warning. [ 29.870926][ T3403] ======================================================= [ 29.919202][ T3403] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 29.927839][ T3274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.944360][ T3274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.955022][ T3274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.966213][ T3274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.976962][ T3274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.988322][ T3274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.005769][ T3274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.015537][ T3260] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.026697][ T3260] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.036933][ T3260] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.046668][ T3260] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.084592][ T3413] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.095831][ T3264] veth0_macvtap: entered promiscuous mode [ 30.106481][ T3411] netlink: 'syz.1.10': attribute type 2 has an invalid length. [ 30.123459][ T3413] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9'. [ 30.134639][ T3264] veth1_macvtap: entered promiscuous mode [ 30.143948][ T3274] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.153267][ T3274] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.164016][ T3274] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.174168][ T3274] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.202858][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.218536][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.229205][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.240835][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.251051][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.262027][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.272945][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.285309][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.297444][ T3264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.315360][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.327853][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.338661][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.350504][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.361258][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.372849][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.383544][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.397226][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.410720][ T3264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.420699][ T3264] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.431309][ T3264] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.441945][ T3264] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.451634][ T3264] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.612938][ T3440] loop2: detected capacity change from 0 to 512 [ 30.672282][ T3440] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 30.685451][ T3431] loop0: detected capacity change from 0 to 8192 [ 30.693029][ T3449] netlink: 'syz.3.21': attribute type 1 has an invalid length. [ 30.701012][ T3449] netlink: 'syz.3.21': attribute type 2 has an invalid length. [ 30.703855][ T3450] loop1: detected capacity change from 0 to 2048 [ 30.708982][ T3449] netlink: 16074 bytes leftover after parsing attributes in process `syz.3.21'. [ 30.735794][ T3440] EXT4-fs warning (device loop2): dx_probe:869: inode #2: comm syz.2.3: Unimplemented hash flags: 0x0001 [ 30.747743][ T3440] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.3: Corrupt directory, running e2fsck is recommended [ 30.793943][ T3440] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 3: comm syz.2.3: path /0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 30.842612][ T3450] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.899839][ T3450] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 30.900557][ T3461] syz.4.25[3461] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 30.914959][ T3461] syz.4.25[3461] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 30.919566][ T3450] syz.1.20 (3450) used greatest stack depth: 11000 bytes left [ 30.956558][ T3261] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.013839][ T3466] loop3: detected capacity change from 0 to 1024 [ 31.019282][ T3274] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.020718][ T3466] EXT4-fs: Ignoring removed orlov option [ 31.072028][ T3466] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.092456][ T3474] loop4: detected capacity change from 0 to 512 [ 31.105246][ T3477] capability: warning: `syz.0.28' uses deprecated v2 capabilities in a way that may be insecure [ 31.127169][ T3481] loop2: detected capacity change from 0 to 128 [ 31.134237][ T3474] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.32: attempt to clear invalid blocks 2 len 1 [ 31.168075][ T3474] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 31.183314][ T3474] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.32: invalid indirect mapped block 1819239214 (level 0) [ 31.184279][ T3260] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.203690][ T3474] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.32: invalid indirect mapped block 1819239214 (level 1) [ 31.224041][ T3474] EXT4-fs (loop4): 1 truncate cleaned up [ 31.232640][ T3474] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.274388][ T3491] bridge0: port 3(syz_tun) entered blocking state [ 31.281215][ T3491] bridge0: port 3(syz_tun) entered disabled state [ 31.300783][ T3491] syz_tun: entered allmulticast mode [ 31.317000][ T3491] syz_tun: entered promiscuous mode [ 31.335153][ T3491] bridge0: port 3(syz_tun) entered blocking state [ 31.341742][ T3491] bridge0: port 3(syz_tun) entered forwarding state [ 31.350884][ T3474] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.32: Unrecognised inode hash code 20 [ 31.362504][ T3474] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.32: Corrupt directory, running e2fsck is recommended [ 31.377048][ T3474] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.32: Unrecognised inode hash code 20 [ 31.388653][ T3474] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.32: Corrupt directory, running e2fsck is recommended [ 31.408116][ T3474] EXT4-fs error (device loop4): ext4_find_dest_de:2069: inode #2: block 13: comm syz.4.32: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 31.452036][ T3505] loop2: detected capacity change from 0 to 128 [ 31.499788][ T3501] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.4.32: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 31.592873][ T3264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.818254][ T3539] mmap: syz.3.60 (3539) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 32.012003][ T3557] netlink: 12 bytes leftover after parsing attributes in process `syz.0.68'. [ 32.024496][ T3553] netlink: 12 bytes leftover after parsing attributes in process `syz.2.66'. [ 32.260885][ T3567] loop0: detected capacity change from 0 to 512 [ 32.298290][ T3567] EXT4-fs (loop0): orphan cleanup on readonly fs [ 32.305026][ T3567] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 32.430916][ T3567] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.73: invalid indirect mapped block 2683928664 (level 1) [ 32.449060][ T3567] EXT4-fs (loop0): Remounting filesystem read-only [ 32.466729][ T3567] EXT4-fs (loop0): 1 truncate cleaned up [ 32.476155][ T3567] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 32.495578][ T3567] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 32.514312][ T3578] loop2: detected capacity change from 0 to 1024 [ 32.523834][ T3567] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.558146][ T3578] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 32.568500][ T3578] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 32.584932][ T3567] loop0: detected capacity change from 0 to 256 [ 32.597512][ T3567] vfat: Unknown parameter '�N���0�[q)�0�L�۾��ԚwS���oϬ�j�M��j�xN�)-T�Q��ذ`�Gbj朏�ت��T�큵��Y�h�(�'j!kX�x�' [ 32.610765][ T3578] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 32.637330][ T3578] EXT4-fs error (device loop2): ext4_get_journal_inode:5762: inode #5: comm syz.2.77: unexpected bad inode w/o EXT4_IGET_BAD [ 32.651452][ T3578] EXT4-fs (loop2): no journal found [ 32.655001][ T3580] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 32.656945][ T3578] EXT4-fs (loop2): can't get journal size [ 32.657721][ T3578] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 32.664510][ T3580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 32.701908][ T3274] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.730434][ T3580] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 32.773215][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 32.773242][ T29] audit: type=1400 audit(1726888912.633:180): avc: denied { create } for pid=3584 comm="syz.1.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.800569][ T29] audit: type=1400 audit(1726888912.633:181): avc: denied { connect } for pid=3584 comm="syz.1.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.826169][ T29] audit: type=1400 audit(1726888912.683:182): avc: denied { bind } for pid=3588 comm="syz.1.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 32.858998][ T3592] loop0: detected capacity change from 0 to 512 [ 32.867721][ T3594] tap0: tun_chr_ioctl cmd 1074025692 [ 32.877745][ T3592] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 not in group (block 458757)! [ 32.889122][ T3592] EXT4-fs (loop0): group descriptors corrupted! [ 32.914054][ T29] audit: type=1400 audit(1726888912.773:183): avc: denied { read } for pid=3597 comm="syz.2.86" dev="nsfs" ino=4026532899 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 32.936057][ T29] audit: type=1400 audit(1726888912.793:184): avc: denied { open } for pid=3597 comm="syz.2.86" path="net:[4026532899]" dev="nsfs" ino=4026532899 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 32.960694][ T3604] syz.0.89[3604] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.960769][ T3604] syz.0.89[3604] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.980172][ T3602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.88'. [ 33.002777][ T3608] netlink: 2124 bytes leftover after parsing attributes in process `syz.4.90'. [ 33.013443][ T3604] netlink: 36 bytes leftover after parsing attributes in process `syz.0.89'. [ 33.044418][ T29] audit: type=1400 audit(1726888912.903:185): avc: denied { setopt } for pid=3609 comm="syz.0.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.058553][ T3614] syz.1.92[3614] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.078089][ T3614] syz.1.92[3614] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.106383][ T3616] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 33.126160][ T3616] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 33.134485][ T3616] vhci_hcd vhci_hcd.0: Device attached [ 33.142452][ T29] audit: type=1400 audit(1726888913.003:186): avc: denied { getopt } for pid=3623 comm="syz.0.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 33.162759][ T29] audit: type=1400 audit(1726888913.003:187): avc: denied { write } for pid=3613 comm="syz.1.92" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.220056][ T29] audit: type=1400 audit(1726888913.083:188): avc: denied { create } for pid=3629 comm="syz.3.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 33.250802][ T3630] netlink: 12 bytes leftover after parsing attributes in process `syz.3.102'. [ 33.260817][ T3626] loop2: detected capacity change from 0 to 2048 [ 33.268166][ T29] audit: type=1400 audit(1726888913.113:189): avc: denied { write } for pid=3627 comm="syz.1.100" name="001" dev="devtmpfs" ino=144 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 33.299804][ T3628] vhci_hcd: invalid port number 61 [ 33.396118][ T24] usb 9-1: new high-speed USB device number 2 using vhci_hcd [ 33.402015][ T3652] netlink: 2124 bytes leftover after parsing attributes in process `syz.0.109'. [ 33.491208][ T3667] netlink: 12 bytes leftover after parsing attributes in process `syz.0.115'. [ 33.494828][ T3669] SELinux: Context system_u:object_r:initctl_t:s0 is not valid (left unmapped). [ 33.518993][ T3665] vhci_hcd: invalid port number 61 [ 33.666288][ T3620] vhci_hcd: connection reset by peer [ 33.684438][ T11] vhci_hcd: stop threads [ 33.688826][ T11] vhci_hcd: release socket [ 33.693642][ T11] vhci_hcd: disconnect device [ 33.700714][ T3698] syz.3.131 uses obsolete (PF_INET,SOCK_PACKET) [ 33.709838][ T3699] SELinux: Context system_u:object_r:device_t:s0 is not valid (left unmapped). [ 33.710766][ T3698] @: renamed from bond0 (while UP) [ 33.768746][ T3696] vhci_hcd: invalid port number 61 [ 33.773482][ T3703] syz.1.134 (3703) used greatest stack depth: 9496 bytes left [ 33.805202][ T3709] loop3: detected capacity change from 0 to 256 [ 33.919018][ T3728] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 33.925585][ T3728] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 33.933324][ T3728] vhci_hcd vhci_hcd.0: Device attached [ 33.972637][ T3735] loop4: detected capacity change from 0 to 512 [ 33.989603][ T3735] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 34.178338][ T3336] usb 5-1: new high-speed USB device number 2 using vhci_hcd [ 34.221406][ T3756] syz.0.157[3756] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.221482][ T3756] syz.0.157[3756] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.300530][ T3760] loop4: detected capacity change from 0 to 512 [ 34.339247][ T3760] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 34.355268][ T3760] EXT4-fs warning (device loop4): dx_probe:869: inode #2: comm syz.4.160: Unimplemented hash flags: 0x0001 [ 34.366761][ T3760] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.160: Corrupt directory, running e2fsck is recommended [ 34.380457][ T3760] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 3: comm syz.4.160: path /20/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 34.486372][ T3767] loop0: detected capacity change from 0 to 256 [ 34.545199][ T3731] vhci_hcd: connection reset by peer [ 34.558322][ T36] vhci_hcd: stop threads [ 34.562663][ T36] vhci_hcd: release socket [ 34.567186][ T36] vhci_hcd: disconnect device [ 34.572433][ T3264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.820963][ T3794] loop4: detected capacity change from 0 to 256 [ 34.873198][ T3798] loop3: detected capacity change from 0 to 512 [ 34.918046][ T3795] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 34.924789][ T3795] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 34.932450][ T3795] vhci_hcd vhci_hcd.0: Device attached [ 34.960952][ T3798] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 34.998314][ T3798] EXT4-fs warning (device loop3): dx_probe:869: inode #2: comm syz.3.176: Unimplemented hash flags: 0x0001 [ 35.010002][ T3798] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.176: Corrupt directory, running e2fsck is recommended [ 35.023472][ T3798] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 3: comm syz.3.176: path /29/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 35.168508][ T3260] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.308227][ T3337] usb 1-1: new high-speed USB device number 2 using vhci_hcd [ 35.390484][ T3847] __nla_validate_parse: 3 callbacks suppressed [ 35.390502][ T3847] netlink: 20 bytes leftover after parsing attributes in process `syz.4.200'. [ 35.450992][ T3849] loop3: detected capacity change from 0 to 512 [ 35.475039][ T3849] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 35.478711][ T3797] vhci_hcd: connection reset by peer [ 35.512601][ T945] vhci_hcd: stop threads [ 35.516973][ T945] vhci_hcd: release socket [ 35.521480][ T945] vhci_hcd: disconnect device [ 35.693796][ T3865] loop4: detected capacity change from 0 to 4096 [ 35.769328][ T3865] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.919199][ T3264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.937402][ T3877] loop0: detected capacity change from 0 to 512 [ 36.005494][ T3879] netlink: 4 bytes leftover after parsing attributes in process `syz.3.214'. [ 36.069153][ T3877] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.089544][ T3877] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.391946][ T3267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.477309][ T3892] Cannot find set identified by id 0 to match [ 36.668020][ C1] hrtimer: interrupt took 45138 ns [ 36.799837][ T3898] netlink: 20 bytes leftover after parsing attributes in process `syz.3.222'. [ 36.925692][ T3904] loop3: detected capacity change from 0 to 4096 [ 36.943640][ T3910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.958566][ T3904] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.971879][ T3910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.040136][ T3919] loop4: detected capacity change from 0 to 512 [ 37.055990][ T3260] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.070454][ T3919] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 37.164046][ T3927] tap0: tun_chr_ioctl cmd 2147767519 [ 37.184394][ T3929] loop0: detected capacity change from 0 to 1024 [ 37.240068][ T3929] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.291510][ T3929] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.379410][ T3267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.536630][ T3953] loop0: detected capacity change from 0 to 512 [ 37.545608][ T3953] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 37.670310][ T3972] loop3: detected capacity change from 0 to 128 [ 37.679469][ T3973] netlink: 16 bytes leftover after parsing attributes in process `syz.0.257'. [ 37.688876][ T3973] netlink: 92 bytes leftover after parsing attributes in process `syz.0.257'. [ 37.719109][ T3972] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 37.747353][ T3972] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 37.841469][ T3989] loop2: detected capacity change from 0 to 512 [ 37.848438][ T3989] EXT4-fs: Ignoring removed nomblk_io_submit option [ 37.855164][ T3989] EXT4-fs: Ignoring removed orlov option [ 37.873643][ T3989] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 37.883542][ T3989] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c198, mo2=0002] [ 37.892148][ T3989] System zones: 1-12 [ 37.896418][ T3989] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.264: corrupted in-inode xattr: e_value size too large [ 37.911910][ T3989] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.264: couldn't read orphan inode 15 (err -117) [ 37.925787][ T3989] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.977312][ T3260] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 38.017060][ T3274] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.366795][ T4025] loop4: detected capacity change from 0 to 512 [ 38.387141][ T4025] EXT4-fs: Ignoring removed nomblk_io_submit option [ 38.394542][ T4025] EXT4-fs: Ignoring removed orlov option [ 38.425908][ T4025] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 38.447063][ T4025] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c198, mo2=0002] [ 38.468081][ T4025] System zones: 1-12 [ 38.477463][ T4025] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.279: corrupted in-inode xattr: e_value size too large [ 38.498115][ T24] vhci_hcd: vhci_device speed not set [ 38.516445][ T4036] netlink: 16 bytes leftover after parsing attributes in process `syz.3.283'. [ 38.525924][ T4036] netlink: 92 bytes leftover after parsing attributes in process `syz.3.283'. [ 38.556385][ T4025] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.279: couldn't read orphan inode 15 (err -117) [ 38.597443][ T4025] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.687559][ T3264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.772011][ T4048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.799714][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 38.799777][ T29] audit: type=1400 audit(1726888918.663:246): avc: denied { name_bind } for pid=4050 comm="syz.3.292" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 38.832232][ T29] audit: type=1400 audit(1726888918.663:247): avc: denied { node_bind } for pid=4050 comm="syz.3.292" saddr=fe80::bb src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 38.860912][ T4048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.989677][ T4065] netlink: 16 bytes leftover after parsing attributes in process `syz.2.297'. [ 39.002919][ T4065] netlink: 92 bytes leftover after parsing attributes in process `syz.2.297'. [ 39.006422][ T4069] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.309'. [ 39.044808][ T4067] loop0: detected capacity change from 0 to 512 [ 39.077193][ T4067] EXT4-fs: Ignoring removed nomblk_io_submit option [ 39.079820][ T4075] loop2: detected capacity change from 0 to 128 [ 39.084701][ T4067] EXT4-fs: Ignoring removed orlov option [ 39.102513][ T4067] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 39.248786][ T4067] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c198, mo2=0002] [ 39.270008][ T4067] System zones: 1-12 [ 39.273580][ T4075] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 39.280640][ T4067] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.298: corrupted in-inode xattr: e_value size too large [ 39.306723][ T4075] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 39.320962][ T4067] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.298: couldn't read orphan inode 15 (err -117) [ 39.328289][ T3336] vhci_hcd: vhci_device speed not set [ 39.338841][ T4067] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.390646][ T3274] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 39.400641][ T3267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.547005][ T29] audit: type=1400 audit(1726888919.383:248): avc: denied { read } for pid=4092 comm="syz.0.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 39.816118][ T29] audit: type=1326 audit(1861106647.666:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4117 comm="syz.0.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73eb8adef9 code=0x7ffc0000 [ 39.858188][ T29] audit: type=1326 audit(1861106647.696:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4117 comm="syz.0.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f73eb8adef9 code=0x7ffc0000 [ 39.886957][ T29] audit: type=1326 audit(1861106647.696:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4117 comm="syz.0.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73eb8adef9 code=0x7ffc0000 [ 39.912854][ T29] audit: type=1326 audit(1861106647.696:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4117 comm="syz.0.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73eb8adef9 code=0x7ffc0000 [ 39.938436][ T29] audit: type=1326 audit(1861106647.696:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4117 comm="syz.0.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f73eb8adef9 code=0x7ffc0000 [ 39.965821][ T29] audit: type=1326 audit(1861106647.696:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4117 comm="syz.0.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73eb8adef9 code=0x7ffc0000 [ 39.993034][ T29] audit: type=1326 audit(1861106647.696:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4117 comm="syz.0.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73eb8adef9 code=0x7ffc0000 [ 40.118430][ T4131] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 40.144545][ T4131] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 40.475648][ T4167] devtmpfs: Unknown parameter 'dirsync�' [ 40.608098][ T3337] vhci_hcd: vhci_device speed not set [ 40.964645][ T4212] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 40.977408][ T4212] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 40.991392][ T4212] bridge_slave_0: default FDB implementation only supports local addresses [ 41.013071][ T4211] tap0: tun_chr_ioctl cmd 1074025677 [ 41.029834][ T4211] tap0: linktype set to 769 [ 41.524482][ T4272] loop0: detected capacity change from 0 to 1024 [ 41.557634][ T4272] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.610971][ T4272] EXT4-fs warning (device loop0): empty_inline_dir:1839: bad inline directory (dir #12) - no `..' [ 41.641261][ T3267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.715267][ T4287] loop4: detected capacity change from 0 to 2048 [ 41.808831][ T4291] tap0: tun_chr_ioctl cmd 1074025677 [ 41.814425][ T4291] tap0: linktype set to 769 [ 41.835702][ T4287] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.852290][ T4287] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 41.867928][ T4287] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 17 with error 28 [ 41.881451][ T4287] EXT4-fs (loop4): This should not happen!! Data will be lost [ 41.881451][ T4287] [ 41.891927][ T4287] EXT4-fs (loop4): Total free blocks count 0 [ 41.898048][ T4287] EXT4-fs (loop4): Free/Dirty block details [ 41.904264][ T4287] EXT4-fs (loop4): free_blocks=2415919104 [ 41.910117][ T4287] EXT4-fs (loop4): dirty_blocks=32 [ 41.915725][ T4287] EXT4-fs (loop4): Block reservation details [ 41.922290][ T4287] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 41.943145][ T4294] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 27 with error 28 [ 42.093432][ T4301] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 42.106186][ T4301] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 42.119365][ T4301] bridge_slave_0: default FDB implementation only supports local addresses [ 42.185835][ T4310] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.407980][ T4328] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 42.420422][ T4328] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 42.433073][ T4328] bridge_slave_0: default FDB implementation only supports local addresses [ 42.598493][ T4342] loop0: detected capacity change from 0 to 2048 [ 42.633026][ T4348] syz.4.425[4348] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.633087][ T4348] syz.4.425[4348] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.655725][ T4342] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.743718][ T4316] ================================================================== [ 42.751865][ T4316] BUG: KCSAN: data-race in mem_cgroup_iter / mem_cgroup_iter [ 42.759293][ T4316] [ 42.761636][ T4316] read-write to 0xffff888108704668 of 4 bytes by task 4329 on cpu 0: [ 42.769727][ T4316] mem_cgroup_iter+0x28e/0x380 [ 42.774525][ T4316] shrink_node+0x74a/0x1d40 [ 42.779040][ T4316] do_try_to_free_pages+0x3c6/0xc50 [ 42.784270][ T4316] try_to_free_mem_cgroup_pages+0x1f3/0x4f0 [ 42.790204][ T4316] try_charge_memcg+0x2bc/0x810 [ 42.795081][ T4316] obj_cgroup_charge_pages+0xbd/0x1a0 [ 42.800478][ T4316] __memcg_kmem_charge_page+0x9d/0x170 [ 42.805963][ T4316] __alloc_pages_noprof+0x1bc/0x360 [ 42.811184][ T4316] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 42.816582][ T4316] alloc_pages_noprof+0xe1/0x100 [ 42.821529][ T4316] __vmalloc_node_range_noprof+0x736/0xec0 [ 42.827350][ T4316] __kvmalloc_node_noprof+0x121/0x170 [ 42.832742][ T4316] ip_set_alloc+0x1f/0x30 [ 42.837078][ T4316] hash_netiface_create+0x273/0x730 [ 42.842547][ T4316] ip_set_create+0x359/0x8a0 [ 42.847169][ T4316] nfnetlink_rcv_msg+0x4a9/0x570 [ 42.852136][ T4316] netlink_rcv_skb+0x12c/0x230 [ 42.856918][ T4316] nfnetlink_rcv+0x16c/0x15c0 [ 42.861706][ T4316] netlink_unicast+0x599/0x670 [ 42.866493][ T4316] netlink_sendmsg+0x5cc/0x6e0 [ 42.871274][ T4316] __sock_sendmsg+0x140/0x180 [ 42.875993][ T4316] ____sys_sendmsg+0x312/0x410 [ 42.880861][ T4316] __sys_sendmsg+0x1dd/0x270 [ 42.885559][ T4316] __x64_sys_sendmsg+0x46/0x50 [ 42.890347][ T4316] x64_sys_call+0x2689/0x2d60 [ 42.895037][ T4316] do_syscall_64+0xc9/0x1c0 [ 42.899543][ T4316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.905459][ T4316] [ 42.907872][ T4316] read to 0xffff888108704668 of 4 bytes by task 4316 on cpu 1: [ 42.915440][ T4316] mem_cgroup_iter+0xba/0x380 [ 42.920152][ T4316] shrink_node+0x458/0x1d40 [ 42.924674][ T4316] do_try_to_free_pages+0x3c6/0xc50 [ 42.929896][ T4316] try_to_free_mem_cgroup_pages+0x1f3/0x4f0 [ 42.935810][ T4316] try_charge_memcg+0x2bc/0x810 [ 42.940679][ T4316] __mem_cgroup_charge+0x63/0x100 [ 42.945715][ T4316] filemap_add_folio+0x53/0x1b0 [ 42.950583][ T4316] page_cache_ra_unbounded+0x175/0x310 [ 42.956233][ T4316] page_cache_async_ra+0x40c/0x420 [ 42.961355][ T4316] filemap_fault+0x2ca/0xa60 [ 42.965960][ T4316] __do_fault+0xb6/0x200 [ 42.970308][ T4316] handle_mm_fault+0xe7f/0x2a40 [ 42.975254][ T4316] __get_user_pages+0x499/0x10d0 [ 42.980206][ T4316] __mm_populate+0x25b/0x3b0 [ 42.984811][ T4316] __se_sys_mlockall+0x2c5/0x370 [ 42.989851][ T4316] __x64_sys_mlockall+0x1f/0x30 [ 42.994805][ T4316] x64_sys_call+0x1e3a/0x2d60 [ 42.999499][ T4316] do_syscall_64+0xc9/0x1c0 [ 43.004013][ T4316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.009924][ T4316] [ 43.012256][ T4316] value changed: 0x000001c6 -> 0x000001c8 [ 43.018156][ T4316] [ 43.020491][ T4316] Reported by Kernel Concurrency Sanitizer on: [ 43.026737][ T4316] CPU: 1 UID: 0 PID: 4316 Comm: syz.3.411 Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 43.037073][ T4316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 43.047136][ T4316] ================================================================== [ 43.063483][ T4342] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 43.084582][ T4342] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 17 with error 28 [ 43.097232][ T4342] EXT4-fs (loop0): This should not happen!! Data will be lost [ 43.097232][ T4342] [ 43.107073][ T4342] EXT4-fs (loop0): Total free blocks count 0 [ 43.113158][ T4342] EXT4-fs (loop0): Free/Dirty block details [ 43.119085][ T4342] EXT4-fs (loop0): free_blocks=2415919104 [ 43.124825][ T4342] EXT4-fs (loop0): dirty_blocks=32 [ 43.130030][ T4342] EXT4-fs (loop0): Block reservation details [ 43.136025][ T4342] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 43.169430][ T4315] syz.3.411 invoked oom-killer: gfp_mask=0x408d40(GFP_NOFS|__GFP_NOFAIL|__GFP_ZERO|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 43.182778][ T4315] CPU: 0 UID: 0 PID: 4315 Comm: syz.3.411 Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 43.193045][ T4315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 43.203204][ T4315] Call Trace: [ 43.206501][ T4315] <TASK> [ 43.209457][ T4315] dump_stack_lvl+0xf2/0x150 [ 43.214093][ T4315] dump_stack+0x15/0x20 [ 43.218280][ T4315] dump_header+0x83/0x2d0 [ 43.222646][ T4315] oom_kill_process+0x341/0x4c0 [ 43.227520][ T4315] out_of_memory+0x9af/0xbe0 [ 43.232134][ T4315] ? __rcu_read_unlock+0x4e/0x70 [ 43.237207][ T4315] mem_cgroup_out_of_memory+0x13e/0x190 [ 43.242798][ T4315] try_charge_memcg+0x51b/0x810 [ 43.247673][ T4315] obj_cgroup_charge_pages+0xbd/0x1a0 [ 43.253079][ T4315] __memcg_slab_post_alloc_hook+0x2ac/0x650 [ 43.259207][ T4315] ? jbd2_journal_dirty_metadata+0x244/0x6d0 [ 43.265290][ T4315] ? alloc_buffer_head+0x35/0x1f0 [ 43.270386][ T4315] kmem_cache_alloc_noprof+0x1a6/0x290 [ 43.275955][ T4315] alloc_buffer_head+0x35/0x1f0 [ 43.280841][ T4315] folio_alloc_buffers+0x168/0x310 [ 43.286039][ T4315] create_empty_buffers+0x2c/0x200 [ 43.291238][ T4315] __block_write_begin_int+0x1dd/0xfa0 [ 43.296882][ T4315] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 43.302885][ T4315] ? __ext4_journal_stop+0xff/0x120 [ 43.308222][ T4315] ? ext4_dirty_inode+0xa5/0xb0 [ 43.313229][ T4315] ? __mark_inode_dirty+0x1b7/0x7e0 [ 43.318543][ T4315] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 43.324456][ T4315] block_page_mkwrite+0x1bd/0x3f0 [ 43.329543][ T4315] ext4_page_mkwrite+0x73d/0xb70 [ 43.334525][ T4315] ? __rcu_read_lock+0x36/0x50 [ 43.339314][ T4315] ? folio_unlock+0xdc/0x130 [ 43.344011][ T4315] handle_mm_fault+0x135a/0x2a40 [ 43.348982][ T4315] exc_page_fault+0x296/0x650 [ 43.353793][ T4315] asm_exc_page_fault+0x26/0x30 [ 43.358689][ T4315] RIP: 0033:0x7f628337cb06 [ 43.363111][ T4315] Code: 00 48 89 df 48 89 54 24 10 83 c5 01 e8 23 b5 fe ff 48 8b 43 38 48 8b 54 24 10 41 83 c7 01 83 43 28 08 48 8d 48 f8 48 89 4b 38 <48> 89 50 f8 45 3b 7d 04 0f 82 68 fe ff ff e9 00 ff ff ff 0f 1f 80 [ 43.383090][ T4315] RSP: 002b:00007ffdb918bc90 EFLAGS: 00010202 [ 43.389174][ T4315] RAX: 0000001b2fa1f000 RBX: 00007f6284185720 RCX: 0000001b2fa1eff8 [ 43.397236][ T4315] RDX: ffffffff814deee1 RSI: 0000000000000008 RDI: 00007f6284185720 [ 43.405228][ T4315] RBP: 00000000000001f7 R08: 00007f6283640000 R09: 00007f6283642000 [ 43.413236][ T4315] R10: 00000000814deee5 R11: 0000000000000003 R12: ffffffff814defd6 [ 43.421401][ T4315] R13: 00007f62836560f0 R14: 0000000000000008 R15: 0000000000011766 [ 43.429400][ T4315] ? folio_unlock+0x26/0x130 [ 43.434044][ T4315] ? folio_add_wait_queue+0x31/0xf0 [ 43.439690][ T4315] </TASK> [ 43.442850][ T4315] memory: usage 307200kB, limit 307200kB, failcnt 315 [ 43.450206][ T4315] memory+swap: usage 307300kB, limit 9007199254740988kB, failcnt 0 [ 43.458223][ T4315] kmem: usage 279008kB, limit 9007199254740988kB, failcnt 0 [ 43.465515][ T4315] Memory cgroup stats for /syz3: [ 43.468921][ T4354] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 27 with error 28 [ 43.680771][ T4315] cache 18485248 [ 43.684367][ T4315] rss 17088512 [ 43.687740][ T4315] shmem 0 [ 43.690758][ T4315] mapped_file 18272256 [ 43.694870][ T4315] dirty 77824 [ 43.698192][ T4315] writeback 0 [ 43.701651][ T4315] workingset_refault_anon 12 [ 43.706250][ T4315] workingset_refault_file 151 [ 43.710965][ T4315] swap 102400 [ 43.714308][ T4315] swapcached 4096 [ 43.717958][ T4315] pgpgin 23904 [ 43.721366][ T4315] pgpgout 15218 [ 43.725008][ T4315] pgfault 25240 [ 43.728481][ T4315] pgmajfault 16 [ 43.731972][ T4315] inactive_anon 4096 [ 43.735914][ T4315] active_anon 0 [ 43.739393][ T4315] inactive_file 73728 [ 43.743385][ T4315] active_file 208896 [ 43.747288][ T4315] unevictable 35291136 [ 43.751430][ T4315] hierarchical_memory_limit 314572800 [ 43.756891][ T4315] hierarchical_memsw_limit 9223372036854771712 [ 43.763085][ T4315] total_cache 18485248 [ 43.767162][ T4315] total_rss 17088512 [ 43.771182][ T4315] total_shmem 0 [ 43.774988][ T4315] total_mapped_file 18272256 [ 43.779850][ T4315] total_dirty 77824 [ 43.783763][ T4315] total_writeback 0 [ 43.787637][ T4315] total_workingset_refault_anon 12 [ 43.794564][ T4315] total_workingset_refault_file 151 [ 43.800858][ T4315] total_swap 102400 [ 43.804686][ T4315] total_swapcached 4096 [ 43.808962][ T4315] total_pgpgin 23904 [ 43.812903][ T4315] total_pgpgout 15218 [ 43.816914][ T4315] total_pgfault 25240 [ 43.821285][ T4315] total_pgmajfault 16 [ 43.825425][ T4315] total_inactive_anon 4096 [ 43.829925][ T4315] total_active_anon 0 [ 43.833969][ T4315] total_inactive_file 73728 [ 43.838554][ T4315] total_active_file 208896 [ 43.842979][ T4315] total_unevictable 35291136 [ 43.847591][ T4315] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.411,pid=4315,uid=0 [ 43.862296][ T4315] Memory cgroup out of memory: Killed process 4315 (syz.3.411) total-vm:87116kB, anon-rss:17252kB, file-rss:34128kB, shmem-rss:0kB, UID:0 pgtables:176kB oom_score_adj:1000 [ 43.955201][ T4329] syz.3.411 (4329) used greatest stack depth: 7528 bytes left