last executing test programs: 4.586401289s ago: executing program 2 (id=358): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)={0x24, 0x3, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x8001}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) 4.54440369s ago: executing program 2 (id=360): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x1d8, 0xc8, 0x8, 0x1d8, 0x5803, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @mcast1, [0xffffff00, 0xff, 0xff], [0x0, 0xff000000, 0xff], 'pimreg\x00', 'wlan0\x00', {}, {}, 0x2c, 0x1, 0x1, 0x51}, 0x0, 0x190, 0x1d8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x8, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3274e082555f6722282f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5000000000800", 0x1, 0x1, {0xfffffffffffffffe}}}, @common=@inet=@ecn={{0x28}, {0x1, 0x11, 0x8, 0x6}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x0, 0x3, 'pptp\x00', {0x100000000}}}}, {{@ipv6={@remote, @mcast1, [0xff000000, 0x100000100], [], 'macvtap0\x00', 'macsec0\x00', {}, {}, 0x87}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0xffffffff, 0x0, 'netbios-ns\x00', 'syz0\x00', {0xd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRES8], 0x10, 0x121f, &(0x7f0000001840)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000005c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x210810, 0x0, 0x60, 0x0, &(0x7f0000000100)) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x10, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) setreuid(0xee01, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"/2745], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, &(0x7f0000000000)=0x3ea0, 0x4) syz_emit_ethernet(0x86, &(0x7f0000000300)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x17, 0x4, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x11, 0x2, @local, @local, {[@rr={0x7, 0x3}, @ssrr={0x89, 0x7, 0x9d, [@empty]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast1}, {@multicast2}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private=0xa010101}, {}, {@dev}, {@private}]}]}}}}}}}, 0x0) 2.05866545s ago: executing program 2 (id=372): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_get$pid(0x0, r0) ioprio_get$pid(0x2, 0x0) 1.856916485s ago: executing program 2 (id=377): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) 1.765109067s ago: executing program 2 (id=382): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c000000010401010000001700000000020000030500010001000000080005"], 0x2c}, 0x1, 0x0, 0x0, 0x400c090}, 0x40) 1.63790379s ago: executing program 2 (id=390): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB], 0x2c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 1.616474741s ago: executing program 32 (id=390): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB], 0x2c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 1.511869513s ago: executing program 0 (id=401): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x50}}, 0x840) 1.435812165s ago: executing program 0 (id=404): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000008c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'pimreg0\x00'}}]}]}, 0x28}}, 0x0) 1.354184677s ago: executing program 0 (id=408): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0x4, 0xfff3}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 1.268671859s ago: executing program 0 (id=411): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x303}, "04e7ffffff00", "fc094e36a7e397030000007e580400030000000000000000ffff00", "c700", "fffffffffffffffd"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 830.38058ms ago: executing program 5 (id=392): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x800, 0x5, 0xc000, 0xe, "0062ba7d8200000016001b000200f705096604"}) r1 = syz_open_pts(r0, 0xa0200) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000001c0)={0x9, 0x8, 0x0, 0x2, 0x9, "4d55db6a1d8a2afc1f4a59cb72b222408c710b", 0x5, 0x6}) 630.729195ms ago: executing program 4 (id=438): io_submit(0x0, 0xfffffffffffffdce, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') lseek(r1, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000140)=0xc378) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) recvfrom(r2, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r2, &(0x7f0000000640)=[{&(0x7f0000000440)="e9", 0x1}], 0x1) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) r3 = syz_open_dev$loop(&(0x7f0000000080), 0xf, 0x200) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x48040, 0x26) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x7}]}}}]}, 0x3c}}, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000006c0)={r4, 0x400, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0x14, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b02000000000000004a6783cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a000000020000000000000400", "675237604c40f78d2cfc03d805bfa55ba139c01802c4dae4162e43ac61b7ad33", [0x8, 0x200057ff]}}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000080)=[@mss], 0x1) 434.147699ms ago: executing program 0 (id=442): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42040, 0x1cb) fallocate(r0, 0x10, 0x8, 0x73) 433.909979ms ago: executing program 0 (id=444): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0xc2400, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x1024, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1016, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x1002, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "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"}}}}}}, 0x0) r2 = socket$inet(0x2, 0xa, 0x575e) listen(r2, 0x6) readv(r1, &(0x7f0000003d40)=[{0x0}, {&(0x7f0000004000)=""/4095, 0xfff}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x2000000, 0xb, 0x0, &(0x7f0000000200)="63eced8e46dc92b1823645", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 393.07626ms ago: executing program 1 (id=446): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x34, &(0x7f0000000240)={&(0x7f0000000040)={0x1, 0x840, 0x800, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{0x3, 0x1, 0x1, 0x1}, 0x3, 0x2, 0x0, 0x0, "5e3dba8ae862e81c"}}, 0x80}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="0100000044090000ffffffff00000000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}, 0x1, 0x0, 0x0, 0x20000040}, 0x8050) 313.363462ms ago: executing program 4 (id=448): r0 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0x0, 0x40, 0x2, 0x18}, &(0x7f0000000100), &(0x7f00000002c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x22, 0x0, 0x1) 294.807042ms ago: executing program 4 (id=450): unshare(0x6020400) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) flock(r0, 0xc) 250.220644ms ago: executing program 4 (id=452): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0xe, 0x40, 0x3, 0x41}, 0x50) mount(0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, &(0x7f0000000300), 0x0}, 0x20) 249.389384ms ago: executing program 4 (id=454): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)="cf", 0x1}], 0x1) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x22) tee(r1, r2, 0x3, 0x0) 197.179135ms ago: executing program 1 (id=456): capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) setresgid(0xee00, 0xee01, 0x0) 146.302037ms ago: executing program 3 (id=457): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}}, 0x24}}, 0xc840) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 146.200786ms ago: executing program 4 (id=458): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 146.070646ms ago: executing program 1 (id=459): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0xfde, 0x30, 0xd, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) 146.013637ms ago: executing program 1 (id=460): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd0500070088000000060005"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 138.803446ms ago: executing program 1 (id=461): syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000980)=ANY=[], 0x4, 0x26d, &(0x7f00000005c0)="$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") r0 = creat(&(0x7f0000000080)='./bus\x00', 0x27) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0xffffffffffffffff}}, 0x10) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0x2000}]) 101.764457ms ago: executing program 3 (id=462): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2728, 0x0, &(0x7f0000000000)) 30.446879ms ago: executing program 3 (id=463): r0 = socket$tipc(0x1e, 0x5, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) sendmsg$tipc(r0, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0) unshare(0x22020600) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x0, 0x2, 0x6, 0xffffffffffffffff, 0x3000000}, &(0x7f0000000000)={0x1f, 0x2, 0x3, 0x0, 0x0, 0x7, 0xd, 0x1000001}, 0x0, 0x0, 0x0) 30.377129ms ago: executing program 3 (id=464): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) setns(0xc9, 0x0) socket(0x8, 0x5, 0x5) 30.311689ms ago: executing program 3 (id=465): r0 = creat(&(0x7f0000000340)='./file0\x00', 0x28) close(r0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) r2 = dup(r1) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) r5 = pidfd_getfd(r4, r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 14.127989ms ago: executing program 1 (id=466): r0 = syz_open_dev$loop(&(0x7f0000000000), 0xfff, 0x100) ioctl$BLKGETNRZONES(r0, 0x80041285, 0x0) 0s ago: executing program 3 (id=467): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000000000)={[{@barrier}, {@jqfmt_vfsv0}, {@abort}, {}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x6, 0x48d, &(0x7f0000000980)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x224061, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) 0s ago: executing program 5 (id=468): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfa0c, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x470bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6a, 0x3, 0xffffffffffffffff, 0x3ff, 0x7}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.180' (ED25519) to the list of known hosts. [ 21.488502][ T30] audit: type=1400 audit(1787313463.974:64): avc: denied { mounton } for pid=277 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.489525][ T277] cgroup: Unknown subsys name 'net' [ 21.511573][ T30] audit: type=1400 audit(1787313463.974:65): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.539531][ T30] audit: type=1400 audit(1787313464.004:66): avc: denied { unmount } for pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.539564][ T277] cgroup: Unknown subsys name 'devices' [ 21.657188][ T277] cgroup: Unknown subsys name 'hugetlb' [ 21.662992][ T277] cgroup: Unknown subsys name 'rlimit' [ 21.799057][ T30] audit: type=1400 audit(1787313464.284:67): avc: denied { setattr } for pid=277 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.812453][ T279] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 21.822343][ T30] audit: type=1400 audit(1787313464.284:68): avc: denied { mounton } for pid=277 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.855726][ T30] audit: type=1400 audit(1787313464.284:69): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.858066][ T277] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.879936][ T30] audit: type=1400 audit(1787313464.314:70): avc: denied { relabelto } for pid=279 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.914370][ T30] audit: type=1400 audit(1787313464.314:71): avc: denied { write } for pid=279 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.940270][ T30] audit: type=1400 audit(1787313464.344:72): avc: denied { read } for pid=277 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.966141][ T30] audit: type=1400 audit(1787313464.344:73): avc: denied { open } for pid=277 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.591115][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.598221][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.606030][ T285] device bridge_slave_0 entered promiscuous mode [ 22.614356][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.621592][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.629355][ T285] device bridge_slave_1 entered promiscuous mode [ 22.697449][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.704720][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.712438][ T287] device bridge_slave_0 entered promiscuous mode [ 22.719402][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.726471][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.733877][ T287] device bridge_slave_1 entered promiscuous mode [ 22.764890][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.772063][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.779531][ T289] device bridge_slave_0 entered promiscuous mode [ 22.786349][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.793569][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.801109][ T289] device bridge_slave_1 entered promiscuous mode [ 22.838110][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.845615][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.853065][ T288] device bridge_slave_0 entered promiscuous mode [ 22.876747][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.883834][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.891551][ T288] device bridge_slave_1 entered promiscuous mode [ 22.937789][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.944876][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.952366][ T286] device bridge_slave_0 entered promiscuous mode [ 22.962073][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.969385][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.976845][ T286] device bridge_slave_1 entered promiscuous mode [ 23.038201][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.045372][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.052672][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.059850][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.082781][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.090053][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.097351][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.104654][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.140180][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.147448][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.154732][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.162062][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.196773][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.203926][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.211247][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.218302][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.228278][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.235458][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.242782][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.250383][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.279464][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.287324][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.294556][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.302533][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.310299][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.317718][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.325624][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.333443][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.340962][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.348523][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.356866][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.364491][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.390170][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.398006][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.406519][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.414901][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.421969][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.447128][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.455342][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.463471][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.470646][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.478799][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.487177][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.494410][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.502005][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.510077][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.518267][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.526732][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.534086][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.541612][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.549982][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.557060][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.564628][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.573631][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.580741][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.591067][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.599709][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.606747][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.614097][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.622512][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.629950][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.649959][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.657908][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.666092][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.674515][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.683000][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.690072][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.697678][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.706424][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.714553][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.722198][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.729879][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.738302][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.746819][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.755284][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.764113][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.773777][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.796291][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.804599][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.812879][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.821223][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.829396][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.838016][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.846333][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.854455][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.862825][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.871554][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.891815][ T287] device veth0_vlan entered promiscuous mode [ 23.900747][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.909196][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.917832][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.926278][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.934267][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.941938][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.960414][ T285] device veth0_vlan entered promiscuous mode [ 23.969926][ T286] device veth0_vlan entered promiscuous mode [ 23.976524][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.985162][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.993694][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.002289][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.010920][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.019738][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.028392][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.037097][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.045823][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.053935][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.062405][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.070744][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.078315][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.085859][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.093227][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.104231][ T289] device veth0_vlan entered promiscuous mode [ 24.114328][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.122226][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.130892][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.138676][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.151943][ T286] device veth1_macvtap entered promiscuous mode [ 24.163539][ T288] device veth0_vlan entered promiscuous mode [ 24.170580][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.178841][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.187057][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.194521][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.204780][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.213219][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.227601][ T285] device veth1_macvtap entered promiscuous mode [ 24.238219][ T289] device veth1_macvtap entered promiscuous mode [ 24.245963][ T287] device veth1_macvtap entered promiscuous mode [ 24.252762][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.260728][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.269564][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.278431][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.286907][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.295821][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.303934][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.312653][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.320437][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.329042][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.337875][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.365441][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.373800][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.382946][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.391620][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.400701][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.409328][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.417692][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.426400][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.435036][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.443655][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.452095][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.460680][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.482581][ T286] request_module fs-gadgetfs succeeded, but still no fs? [ 24.497211][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.511797][ T288] device veth1_macvtap entered promiscuous mode [ 24.583928][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.604065][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.771088][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.894944][ T319] syz.3.4 (319) used greatest stack depth: 22184 bytes left [ 24.950629][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.461108][ T344] ======================================================= [ 25.461108][ T344] WARNING: The mand mount option has been deprecated and [ 25.461108][ T344] and is ignored by this kernel. Remove the mand [ 25.461108][ T344] option from the mount to silence this warning. [ 25.461108][ T344] ======================================================= [ 25.550427][ T343] loop0: detected capacity change from 0 to 1024 [ 25.630835][ T343] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 25.698699][ T359] loop0: detected capacity change from 0 to 512 [ 25.742015][ T363] capability: warning: `syz.4.15' uses deprecated v2 capabilities in a way that may be insecure [ 25.814739][ T359] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 25.854164][ T373] netlink: 'syz.1.18': attribute type 1 has an invalid length. [ 25.872117][ T370] loop4: detected capacity change from 0 to 1024 [ 25.875406][ T372] loop2: detected capacity change from 0 to 8192 [ 25.885953][ T359] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 25.915294][ T379] netlink: 60 bytes leftover after parsing attributes in process `syz.3.22'. [ 25.925159][ T359] EXT4-fs error (device loop0): ext4_acquire_dquot:6227: comm syz.0.12: Failed to acquire dquot type 0 [ 25.950563][ T379] netlink: 60 bytes leftover after parsing attributes in process `syz.3.22'. [ 25.960131][ T379] Zero length message leads to an empty skb [ 25.994958][ T370] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 26.058455][ T370] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 26.131218][ T394] loop3: detected capacity change from 0 to 512 [ 26.173348][ T394] FAT-fs (loop3): Invalid FSINFO signature: 0x41613352, 0x61417272 (sector = 1) [ 26.207465][ T406] loop0: detected capacity change from 0 to 512 [ 26.232263][ T406] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 26.253948][ T406] EXT4-fs error (device loop0): ext4_iget_extra_inode:4604: inode #15: comm syz.0.33: corrupted in-inode xattr [ 26.268867][ T10] FAT-fs (loop3): Invalid FSINFO signature: 0x41613352, 0x61417272 (sector = 1) [ 26.279705][ T406] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.33: couldn't read orphan inode 15 (err -117) [ 26.293274][ T406] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,inode_readahead_blks=0x0000000008000000,nodiscard,noload,user_xattr,mblk_io_submit,noinit_itable,journal_ioprio=0x0000000000000006,max_dir_size_kb=0x0000000000000009,init_itable=0x0000000000001,errors=continue. Quota mode: none. [ 26.353274][ T422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.37'. [ 26.365112][ T422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.37'. [ 26.389207][ T425] capability: warning: `syz.4.42' uses 32-bit capabilities (legacy support in use) [ 26.443317][ T63] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 26.451256][ T63] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 26.459439][ T63] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 26.467427][ T63] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 26.476319][ T63] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 26.505977][ T63] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 26.532596][ T63] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 26.557643][ T63] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 26.572509][ T63] hid-generic 0000:0000:0001.0001: hidraw0: HID v0.10 Device [syz0] on syz1 [ 26.649948][ T449] xt_CT: No such helper "netbios-ns" [ 26.688676][ T449] loop4: detected capacity change from 0 to 8192 [ 26.698367][ T449] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 26.763209][ T448] loop0: detected capacity change from 0 to 512 [ 26.819117][ T447] fido_id[447]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 26.892169][ T448] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 26.966106][ T30] kauditd_printk_skb: 77 callbacks suppressed [ 26.966147][ T30] audit: type=1400 audit(1787313725.456:149): avc: denied { mount } for pid=446 comm="syz.0.50" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 26.995035][ T448] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 27.069185][ T30] audit: type=1400 audit(1787313725.556:150): avc: denied { append } for pid=446 comm="syz.0.50" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 27.099793][ T30] audit: type=1400 audit(1787313725.576:151): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 27.121043][ T30] audit: type=1400 audit(1787313725.586:152): avc: denied { setopt } for pid=454 comm="syz.3.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 27.310001][ T457] tipc: Started in network mode [ 27.335711][ T457] tipc: Node identity 663f83e73b7, cluster identity 4711 [ 27.364399][ T457] tipc: Enabled bearer , priority 0 [ 27.395527][ T30] audit: type=1400 audit(1787313725.886:153): avc: denied { ioctl } for pid=456 comm="syz.2.51" path="socket:[16510]" dev="sockfs" ino=16510 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.465035][ T466] device syzkaller0 entered promiscuous mode [ 27.551935][ T456] tipc: Resetting bearer [ 27.577022][ T456] tipc: Disabling bearer [ 27.584381][ T30] audit: type=1400 audit(1787313726.066:154): avc: denied { mounton } for pid=485 comm="syz.3.65" path="/16/file0" dev="tmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 27.609605][ T30] audit: type=1400 audit(1787313726.096:155): avc: denied { read write } for pid=471 comm="syz.0.58" name="fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 27.623344][ T484] netlink: 52 bytes leftover after parsing attributes in process `syz.1.64'. [ 27.634255][ T30] audit: type=1400 audit(1787313726.096:156): avc: denied { open } for pid=471 comm="syz.0.58" path="/dev/fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 27.708144][ T30] audit: type=1400 audit(1787313726.196:157): avc: denied { read } for pid=499 comm="syz.1.69" name="usbmon8" dev="devtmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 27.753474][ T30] audit: type=1400 audit(1787313726.226:158): avc: denied { open } for pid=499 comm="syz.1.69" path="/dev/usbmon8" dev="devtmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 27.793297][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 27.809383][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 27.851313][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 27.907720][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 27.936189][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 27.984290][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 27.984532][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 27.984781][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.011327][ T538] loop3: detected capacity change from 0 to 1024 [ 28.063765][ T542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.89'. [ 28.066225][ T538] EXT4-fs (loop3): bad geometry: bigalloc file system with non-zero first_data_block [ 28.066225][ T538] [ 28.118289][ T547] loop1: detected capacity change from 0 to 512 [ 28.152559][ T547] EXT4-fs (loop1): Ignoring removed nobh option [ 28.168146][ T548] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,lazytime,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,inlinecrypt,grpid,noauto_da_alloc,nouid32,,errors=continue. Quota mode: none. [ 28.193094][ T547] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,grpquota,,errors=continue. Quota mode: writeback. [ 28.212135][ T547] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.264246][ T547] EXT4-fs error (device loop1): ext4_empty_dir:3139: inode #12: comm syz.1.91: Directory hole found for htree leaf block 0 [ 28.414938][ T574] netlink: 52 bytes leftover after parsing attributes in process `syz.0.103'. [ 28.446207][ T574] netlink: 12 bytes leftover after parsing attributes in process `syz.0.103'. [ 28.468625][ T578] netlink: 12 bytes leftover after parsing attributes in process `syz.4.106'. [ 28.646238][ T583] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 28.682924][ T583] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 28.720797][ T589] attempt to access beyond end of device [ 28.720797][ T589] loop3: rw=2049, want=250, limit=128 [ 28.756922][ T583] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2809: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 28.785107][ T583] EXT4-fs (loop1): 1 truncate cleaned up [ 28.791350][ T583] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,discard,resgid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,max_dir_size_kb=0x0000000000000004,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 28.825313][ T582] syz.4.106 (582) used greatest stack depth: 22088 bytes left [ 28.855833][ T307] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 28.875702][ T307] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 29.074817][ T610] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,. Quota mode: none. [ 29.159806][ T610] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.209221][ T610] EXT4-fs (loop1): shut down requested (2) [ 29.232407][ T610] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 29.252620][ T610] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 29.342109][ T633] syz.1.124 (633) used greatest stack depth: 21640 bytes left [ 29.425017][ T631] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 29.554157][ T667] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 29.584779][ T655] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,auto_da_alloc=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 29.612428][ T655] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.637875][ T655] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 29.677028][ T667] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 29.688520][ T667] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.753843][ T693] SELinux: failed to load policy [ 29.811822][ T705] tipc: Cannot configure node identity twice [ 29.855133][ T705] tipc: New replicast peer: 127.0.0.1 [ 29.861289][ T705] tipc: Enabled bearer , priority 10 [ 29.909517][ T340] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 29.932858][ T340] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 29.952665][ T340] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 30.052850][ T744] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 30.065569][ T744] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.142269][ T744] EXT4-fs error (device loop2): ext4_validate_block_bitmap:420: comm syz.2.180: bg 0: bad block bitmap checksum [ 30.188508][ T744] EXT4-fs error (device loop2): ext4_acquire_dquot:6227: comm syz.2.180: Failed to acquire dquot type 0 [ 30.200854][ T759] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 30.333337][ T773] netlink: 'syz.3.193': attribute type 4 has an invalid length. [ 30.554078][ T783] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,max_dir_size_kb=0x0000000000000004,noquota,. Quota mode: none. [ 30.624780][ T783] EXT4-fs error (device loop3): ext4_lookup:1850: inode #2: comm syz.3.197: bad inode number: 15 [ 30.638906][ T810] set_capacity_and_notify: 13 callbacks suppressed [ 30.639038][ T810] loop4: detected capacity change from 0 to 2048 [ 30.720548][ T783] EXT4-fs (loop3): Remounting filesystem read-only [ 30.866440][ T810] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,errors=remount-ro,resgid=0x0000000000000000,barrier,quota,delalloc,. Quota mode: writeback. [ 30.925467][ T340] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 30.933177][ T835] netlink: 84 bytes leftover after parsing attributes in process `syz.0.222'. [ 30.962122][ T810] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.985285][ T6] tipc: Node number set to 1565492199 [ 31.120208][ T852] x_tables: unsorted entry at hook 2 [ 31.152035][ T854] loop3: detected capacity change from 0 to 512 [ 31.160300][ T856] loop0: detected capacity change from 0 to 512 [ 31.276682][ T856] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 31.305562][ T854] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,,errors=continue. Quota mode: writeback. [ 31.329721][ T856] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.229: casefold flag without casefold feature [ 31.343678][ T856] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.229: couldn't read orphan inode 15 (err -117) [ 31.347337][ T854] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.367003][ T856] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,,errors=continue. Quota mode: none. [ 31.415882][ T856] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #2: block 4: comm syz.0.229: lblock 0 mapped to illegal pblock 4 (length 1) [ 31.470547][ T854] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.228: bg 0: block 400: padding at end of block bitmap is not set [ 31.668818][ T10] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm kworker/u4:1: bg 0: block 345: padding at end of block bitmap is not set [ 31.782619][ T10] EXT4-fs (loop4): Remounting filesystem read-only [ 31.840062][ T877] loop3: detected capacity change from 0 to 2048 [ 31.987958][ T885] loop0: detected capacity change from 0 to 512 [ 32.022849][ T877] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,max_dir_size_kb=0x0000000000000004,noquota,. Quota mode: none. [ 32.038682][ T885] EXT4-fs (loop0): Ignoring removed oldalloc option [ 32.054078][ T885] EXT4-fs (loop0): Ignoring removed oldalloc option [ 32.068497][ T877] EXT4-fs (loop3): shut down requested (2) [ 32.068985][ T885] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.241: inode #1: comm syz.0.241: iget: illegal inode # [ 32.091337][ T885] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.241: error while reading EA inode 1 err=-117 [ 32.104407][ T885] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.241: inode #1: comm syz.0.241: iget: illegal inode # [ 32.135724][ T885] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.241: error while reading EA inode 1 err=-117 [ 32.169144][ T885] EXT4-fs (loop0): 1 orphan inode deleted [ 32.172067][ T910] loop4: detected capacity change from 0 to 128 [ 32.175554][ T885] EXT4-fs (loop0): mounted filesystem without journal. Opts: resuid=0x0000000000000000,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,oldalloc,grpquota,usrjquota=,oldalloc,,errors=continue. Quota mode: writeback. [ 32.232630][ T910] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 32.245418][ T910] System zones: 1-3, 19-19, 35-36 [ 32.274352][ T922] loop3: detected capacity change from 0 to 512 [ 32.276805][ T910] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback. [ 32.302266][ T30] kauditd_printk_skb: 89 callbacks suppressed [ 32.302288][ T30] audit: type=1400 audit(1787313730.786:246): avc: denied { ioctl } for pid=925 comm="syz.0.254" path="/dev/usbmon7" dev="devtmpfs" ino=176 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 32.304895][ T910] ext4 filesystem being mounted at /62/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 32.347414][ T928] x_tables: unsorted underflow at hook 2 [ 32.424438][ T922] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 32.450860][ T30] audit: type=1400 audit(1787313730.936:247): avc: denied { create } for pid=937 comm="syz.2.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 32.465470][ T922] ext4 filesystem being mounted at /53/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.513456][ T922] Quota error (device loop3): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 32.524563][ T922] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 32.535124][ T922] EXT4-fs error (device loop3): ext4_acquire_dquot:6227: comm syz.3.256: Failed to acquire dquot type 0 [ 32.606242][ T30] audit: type=1400 audit(1787313731.096:248): avc: denied { connect } for pid=949 comm="syz.1.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 32.627361][ T952] netlink: 52 bytes leftover after parsing attributes in process `syz.2.266'. [ 32.636537][ T30] audit: type=1400 audit(1787313731.116:249): avc: denied { read } for pid=949 comm="syz.1.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 32.682161][ T30] audit: type=1400 audit(1787313731.166:250): avc: denied { write } for pid=949 comm="syz.1.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 32.774895][ T30] audit: type=1400 audit(1787313731.236:251): avc: denied { write } for pid=958 comm="syz.3.271" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 32.854034][ T966] loop3: detected capacity change from 0 to 1024 [ 32.916768][ T966] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 32.945809][ T966] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.004729][ T974] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 33.029568][ T30] audit: type=1400 audit(1787313731.516:252): avc: denied { relabelto } for pid=973 comm="syz.1.276" name="69" dev="tmpfs" ino=370 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 33.076571][ T974] loop1: detected capacity change from 0 to 128 [ 33.139796][ T974] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 33.153574][ T30] audit: type=1400 audit(1787313731.556:253): avc: denied { associate } for pid=973 comm="syz.1.276" name="69" dev="tmpfs" ino=370 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hwdata_t:s0" [ 33.177676][ T974] ext4 filesystem being mounted at /69/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 33.187132][ T983] loop3: detected capacity change from 0 to 128 [ 33.331645][ T987] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 33.344950][ T987] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.410286][ T999] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 33.419922][ T999] EXT4-fs error (device loop2): ext4_iget_extra_inode:4604: inode #15: comm syz.2.287: corrupted in-inode xattr [ 33.439372][ T999] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.287: couldn't read orphan inode 15 (err -117) [ 33.449209][ T1003] EXT4-fs error (device loop4): ext4_fill_super:4863: inode #2: comm syz.4.289: iget: checksum invalid [ 33.465741][ T999] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,inode_readahead_blks=0x0000000008000000,nodiscard,noload,user_xattr,mblk_io_submit,noinit_itable,journal_ioprio=0x0000000000000006,max_dir_size_kb=0x0000000000000009,init_itable=0x0000000000001,errors=continue. Quota mode: none. [ 33.467134][ T1003] EXT4-fs (loop4): get root inode failed [ 33.519624][ T1003] EXT4-fs (loop4): mount failed [ 33.547345][ T1019] netlink: 52 bytes leftover after parsing attributes in process `syz.1.296'. [ 33.598373][ T1027] netlink: 44 bytes leftover after parsing attributes in process `syz.2.295'. [ 33.631142][ T1017] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,,errors=continue. Quota mode: writeback. [ 33.643984][ T1017] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.205338][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 35.115244][ C0] sched: RT throttling activated [ 35.654965][ T1060] netlink: 44 bytes leftover after parsing attributes in process `syz.4.314'. [ 36.695312][ T293] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 36.740667][ T1106] set_capacity_and_notify: 4 callbacks suppressed [ 36.740685][ T1106] loop0: detected capacity change from 0 to 4096 [ 36.790191][ T1116] netlink: 52 bytes leftover after parsing attributes in process `syz.3.336'. [ 36.861101][ T1106] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 37.105369][ T293] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.121654][ T293] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 37.141480][ T1145] process 'syz.2.348' launched './file0' with NULL argv: empty string added [ 37.178644][ T1147] device syzkaller0 entered promiscuous mode [ 37.240873][ T1149] netlink: 20 bytes leftover after parsing attributes in process `syz.2.350'. [ 37.302296][ T1151] loop2: detected capacity change from 0 to 1024 [ 37.308874][ T293] usb 5-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 37.335294][ T293] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.343343][ T293] usb 5-1: Product: syz [ 37.365287][ T293] usb 5-1: Manufacturer: syz [ 37.375714][ T293] usb 5-1: SerialNumber: syz [ 37.438174][ T1151] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,delalloc,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 37.496333][ T1151] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.542931][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 37.542956][ T30] audit: type=1400 audit(1787313736.026:300): avc: denied { lock } for pid=1150 comm="syz.2.351" path="/63/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 37.577875][ T1161] loop1: detected capacity change from 0 to 512 [ 37.593469][ T1163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.355'. [ 37.627690][ T30] audit: type=1400 audit(1787313736.116:301): avc: denied { read } for pid=1082 comm="syz.4.322" name="control" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 37.706671][ T1161] EXT4-fs (loop1): mounted filesystem without journal. Opts: resuid=0x0000000000000000,bsddf,,errors=continue. Quota mode: writeback. [ 37.725390][ T1161] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.745364][ T293] usb 5-1: 0:2 : does not exist [ 37.745598][ T30] audit: type=1400 audit(1787313736.116:302): avc: denied { open } for pid=1082 comm="syz.4.322" path="/74/dev/mapper/control" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 37.780530][ T293] usb 5-1: USB disconnect, device number 2 [ 37.789703][ T30] audit: type=1400 audit(1787313736.116:303): avc: denied { ioctl } for pid=1082 comm="syz.4.322" path="/74/dev/mapper/control" dev="devtmpfs" ino=262 ioctlcmd=0xfd0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 37.805795][ T1161] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #15: comm syz.1.356: corrupted xattr block 33 [ 37.858686][ T1161] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 37.867880][ T1161] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #15: comm syz.1.356: corrupted xattr block 33 [ 37.880225][ T1161] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #15: comm syz.1.356: corrupted xattr block 33 [ 37.902119][ T1161] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 37.913939][ T30] audit: type=1400 audit(1787313736.396:304): avc: denied { setattr } for pid=1160 comm="syz.1.356" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 37.968964][ T30] audit: type=1400 audit(1787313736.396:305): avc: denied { setopt } for pid=1178 comm="syz.0.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.989921][ T1183] xt_CT: No such helper "netbios-ns" [ 38.026530][ T1183] loop2: detected capacity change from 0 to 8192 [ 40.130315][ T1183] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 40.152091][ T327] udevd[327]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 40.175606][ T1189] xt_hashlimit: size too large, truncated to 1048576 [ 40.208429][ T1192] loop4: detected capacity change from 0 to 1024 [ 40.239744][ T1196] xt_hashlimit: size too large, truncated to 1048576 [ 40.258764][ T1197] loop1: detected capacity change from 0 to 512 [ 40.260068][ T30] audit: type=1400 audit(1787313738.686:306): avc: denied { ioctl } for pid=1191 comm="syz.4.368" path="/dev/ppp" dev="devtmpfs" ino=154 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 40.321525][ T1192] EXT4-fs (loop4): Ignoring removed bh option [ 40.337878][ T1197] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 40.365262][ C0] tipc: RX(663f83e73b7): key[1] is activated [ 40.372257][ T1192] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,dioread_lock,usrquota,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000004,bh,init_itable,. Quota mode: writeback. [ 40.428786][ T1197] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.484825][ T30] audit: type=1400 audit(1787313738.966:307): avc: denied { nlmsg_read } for pid=1212 comm="syz.0.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 40.541367][ T30] audit: type=1400 audit(1787313739.026:308): avc: denied { listen } for pid=1221 comm="syz.3.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 40.567696][ T30] audit: type=1400 audit(1787313739.036:309): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 40.572936][ T1226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.384'. [ 40.618721][ T1228] tipc: Can't bind to reserved service type 2 [ 40.618726][ T1226] netlink: 24 bytes leftover after parsing attributes in process `syz.0.384'. [ 40.639795][ T1226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.384'. [ 40.654194][ T1226] netlink: 24 bytes leftover after parsing attributes in process `syz.0.384'. [ 40.896161][ T1258] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.903585][ T1258] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.926785][ T1258] device bridge_slave_0 entered promiscuous mode [ 40.940510][ T1273] tipc: Enabling of bearer rejected, media not registered [ 40.956617][ T1258] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.975785][ T1258] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.984523][ T1258] device bridge_slave_1 entered promiscuous mode [ 40.996663][ T1281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.408'. [ 41.036310][ T1286] netlink: 88 bytes leftover after parsing attributes in process `syz.4.410'. [ 41.102721][ T1290] device syzkaller0 entered promiscuous mode [ 41.142378][ T1258] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.150019][ T1258] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.157712][ T1258] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.164751][ T1258] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.199453][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.208128][ T1301] ip_tables: iptables: counters copy to user failed while replacing table [ 41.217152][ T482] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.236890][ T482] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.263538][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.276497][ T482] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.283934][ T482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.292292][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.300718][ T482] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.308043][ T482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.318962][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.332501][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.347974][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.370163][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.384717][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.394065][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.403388][ T1258] device veth0_vlan entered promiscuous mode [ 41.436874][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.450069][ T1258] device veth1_macvtap entered promiscuous mode [ 41.452003][ T1327] loop4: detected capacity change from 0 to 2048 [ 41.473665][ T1039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.509540][ T1039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.586456][ T1327] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,errors=remount-ro,max_dir_size_kb=0x0000000000000004,grpjquota=,. Quota mode: none. [ 41.604253][ T1340] loop1: detected capacity change from 0 to 1024 [ 41.613435][ T1344] loop3: detected capacity change from 0 to 512 [ 41.648019][ T1344] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.435: iget: bad i_size value: 38620345925642 [ 41.661953][ T1344] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.435: couldn't read orphan inode 15 (err -117) [ 41.692575][ T1340] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #3: block 2: comm syz.1.434: lblock 2 mapped to illegal pblock 2 (length 1) [ 41.720978][ T1344] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 41.726709][ T1340] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #3: block 48: comm syz.1.434: lblock 0 mapped to illegal pblock 48 (length 1) [ 41.738508][ T1344] EXT4-fs error (device loop3): ext4_check_dx_root:2266: inode #2: comm syz.3.435: Corrupt dir, invalid name_len for '.', running e2fsck is recommended [ 41.762396][ T1340] EXT4-fs error (device loop1): ext4_acquire_dquot:6227: comm syz.1.434: Failed to acquire dquot type 0 [ 41.778194][ T1340] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 41.788130][ T1340] EXT4-fs error (device loop1): ext4_evict_inode:285: inode #11: comm syz.1.434: mark_inode_dirty error [ 41.799607][ T1340] EXT4-fs warning (device loop1): ext4_evict_inode:288: couldn't mark inode dirty (err -117) [ 41.810347][ T1340] EXT4-fs (loop1): 1 orphan inode deleted [ 41.825333][ T482] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 41.825560][ T1340] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,nombcache,,errors=continue. Quota mode: none. [ 41.841440][ T1358] loop5: detected capacity change from 0 to 7 [ 41.870120][ T482] EXT4-fs error (device loop1): ext4_release_dquot:6263: comm kworker/u4:5: Failed to release dquot type 0 [ 41.914998][ T1366] netlink: 20 bytes leftover after parsing attributes in process `syz.3.443'. [ 41.971123][ T285] EXT4-fs error (device loop1): __ext4_get_inode_loc:4365: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 41.984983][ T1371] syz.0.444 uses obsolete (PF_INET,SOCK_PACKET) [ 41.992184][ T285] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 42.038362][ T285] EXT4-fs error (device loop1): ext4_quota_off:6533: inode #3: comm syz-executor: mark_inode_dirty error [ 42.231322][ T1403] loop1: detected capacity change from 0 to 128 [ 42.376704][ T1414] loop3: detected capacity change from 0 to 512 [ 42.416006][ T1418] ================================================================== [ 42.425005][ T1418] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x88e/0x3200 [ 42.434697][ T1418] Read of size 8 at addr ffff8881378e55c0 by task syz.5.468/1418 [ 42.442983][ T1418] [ 42.445407][ T1418] CPU: 0 PID: 1418 Comm: syz.5.468 Not tainted syzkaller #0 [ 42.453159][ T1418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 42.464734][ T1418] Call Trace: [ 42.468576][ T1418] [ 42.471697][ T1418] __dump_stack+0x21/0x30 [ 42.477684][ T1418] dump_stack_lvl+0x110/0x170 [ 42.482761][ T1418] ? show_regs_print_info+0x20/0x20 [ 42.488337][ T1418] ? load_image+0x3f0/0x3f0 [ 42.493228][ T1418] print_address_description+0x7f/0x2c0 [ 42.498799][ T1418] ? tc_setup_flow_action+0x88e/0x3200 [ 42.507497][ T1418] kasan_report+0x10f/0x150 [ 42.512104][ T1418] ? tc_setup_flow_action+0x88e/0x3200 [ 42.519255][ T1418] __asan_report_load8_noabort+0x14/0x20 [ 42.526153][ T1418] tc_setup_flow_action+0x88e/0x3200 [ 42.531746][ T1418] mall_replace_hw_filter+0x2db/0x8d0 [ 42.537783][ T1418] ? pcpu_block_update_hint_alloc+0x8bc/0xc50 [ 42.544264][ T1418] ? mall_set_parms+0x520/0x520 [ 42.549666][ T1418] ? tcf_exts_destroy+0xb0/0xb0 [ 42.555061][ T1418] ? pcpu_alloc+0x1118/0x16f0 [ 42.560120][ T1418] ? mall_set_parms+0x1e4/0x520 [ 42.565617][ T1418] mall_change+0x544/0x760 [ 42.570153][ T1418] ? __kasan_check_write+0x14/0x20 [ 42.575795][ T1418] ? mall_get+0xa0/0xa0 [ 42.580602][ T1418] ? tcf_chain_tp_insert_unique+0x946/0xa70 [ 42.588540][ T1418] ? mall_get+0xa0/0xa0 [ 42.593955][ T1418] tc_new_tfilter+0x13df/0x1990 [ 42.599747][ T1418] ? tcf_gate_entry_destructor+0x20/0x20 [ 42.605760][ T1418] ? security_capable+0x87/0xb0 [ 42.611443][ T1418] ? ns_capable+0x8c/0xf0 [ 42.616055][ T1418] ? netlink_net_capable+0x125/0x160 [ 42.621935][ T1418] ? tcf_gate_entry_destructor+0x20/0x20 [ 42.627879][ T1418] rtnetlink_rcv_msg+0x83c/0xcb0 [ 42.633114][ T1418] ? rtnetlink_bind+0x80/0x80 [ 42.639087][ T1418] ? avc_has_perm_noaudit+0x390/0x490 [ 42.645745][ T1418] ? memcpy+0x56/0x70 [ 42.650387][ T1418] ? avc_has_perm_noaudit+0x30a/0x490 [ 42.656119][ T1418] ? arch_stack_walk+0xee/0x140 [ 42.661447][ T1418] ? avc_denied+0x1b0/0x1b0 [ 42.667210][ T1418] ? stack_trace_save+0xa6/0xf0 [ 42.672270][ T1418] ? avc_has_perm+0x163/0x250 [ 42.677507][ T1418] ? avc_has_perm_noaudit+0x490/0x490 [ 42.683120][ T1418] ? x64_sys_call+0x4b/0x9a0 [ 42.688039][ T1418] ? selinux_nlmsg_lookup+0x39d/0x440 [ 42.693632][ T1418] netlink_rcv_skb+0x1e9/0x430 [ 42.698508][ T1418] ? rtnetlink_bind+0x80/0x80 [ 42.703550][ T1418] ? netlink_ack+0xb10/0xb10 [ 42.708646][ T1418] ? _copy_from_iter+0x4a4/0x10a0 [ 42.713984][ T1418] ? __netlink_lookup+0x387/0x3b0 [ 42.719593][ T1418] rtnetlink_rcv+0x1c/0x20 [ 42.726011][ T1418] netlink_unicast+0x86c/0xa30 [ 42.731612][ T1418] netlink_sendmsg+0x879/0xb80 [ 42.736894][ T1418] ? netlink_getsockopt+0x530/0x530 [ 42.742469][ T1418] ? security_socket_sendmsg+0x82/0xa0 [ 42.748547][ T1418] ? netlink_getsockopt+0x530/0x530 [ 42.754654][ T1418] ____sys_sendmsg+0x5be/0x8f0 [ 42.760421][ T1418] ? __sys_sendmsg_sock+0x40/0x40 [ 42.766106][ T1418] ? import_iovec+0x7c/0xb0 [ 42.772039][ T1418] ___sys_sendmsg+0x236/0x2e0 [ 42.777597][ T1418] ? __sys_sendmsg+0x280/0x280 [ 42.782762][ T1418] ? sock_show_fdinfo+0xa0/0xa0 [ 42.789255][ T1418] ? __fdget+0x1a1/0x230 [ 42.794092][ T1418] __x64_sys_sendmsg+0x201/0x2d0 [ 42.799442][ T1418] ? ___sys_sendmsg+0x2e0/0x2e0 [ 42.804848][ T1418] ? __kasan_check_write+0x14/0x20 [ 42.810283][ T1418] ? switch_fpu_return+0x15d/0x2c0 [ 42.815804][ T1418] x64_sys_call+0x4b/0x9a0 [ 42.820331][ T1418] do_syscall_64+0x4c/0xa0 [ 42.825063][ T1418] ? clear_bhb_loop+0x50/0xa0 [ 42.830276][ T1418] ? clear_bhb_loop+0x50/0xa0 [ 42.835238][ T1418] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 42.841519][ T1418] RIP: 0033:0x7fefe7b450d9 [ 42.845945][ T1418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.866077][ T1418] RSP: 002b:00007fefe659e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 42.874959][ T1418] RAX: ffffffffffffffda RBX: 00007fefe7dccfa0 RCX: 00007fefe7b450d9 [ 42.883352][ T1418] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 42.892176][ T1418] RBP: 00007fefe7bdc024 R08: 0000000000000000 R09: 0000000000000000 [ 42.900263][ T1418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 42.908708][ T1418] R13: 00007fefe7dcd038 R14: 00007fefe7dccfa0 R15: 00007ffc0185ae08 [ 42.917464][ T1418] [ 42.920730][ T1418] [ 42.923161][ T1418] Allocated by task 1418: [ 42.927613][ T1418] __kasan_kmalloc+0xd4/0x100 [ 42.932489][ T1418] __kmalloc+0x13d/0x2c0 [ 42.936843][ T1418] tcf_idr_create+0x5f/0x790 [ 42.943995][ T1418] tcf_idr_create_from_flags+0x61/0x70 [ 42.949850][ T1418] tcf_gact_init+0x342/0x570 [ 42.954651][ T1418] tcf_action_init_1+0x3fd/0x6b0 [ 42.960484][ T1418] tcf_action_init+0x233/0x7a0 [ 42.965337][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 42.965907][ T1418] tcf_exts_validate+0x24a/0x580 [ 42.965929][ T1418] mall_set_parms+0x48/0x520 [ 42.983696][ T1418] mall_change+0x478/0x760 [ 42.988345][ T1418] tc_new_tfilter+0x13df/0x1990 [ 42.993578][ T1418] rtnetlink_rcv_msg+0x83c/0xcb0 [ 42.998529][ T1418] netlink_rcv_skb+0x1e9/0x430 [ 43.003571][ T1418] rtnetlink_rcv+0x1c/0x20 [ 43.008128][ T1418] netlink_unicast+0x86c/0xa30 [ 43.013105][ T1418] netlink_sendmsg+0x879/0xb80 [ 43.018160][ T1418] ____sys_sendmsg+0x5be/0x8f0 [ 43.024043][ T1418] ___sys_sendmsg+0x236/0x2e0 [ 43.029553][ T1418] __x64_sys_sendmsg+0x201/0x2d0 [ 43.034514][ T1418] x64_sys_call+0x4b/0x9a0 [ 43.039125][ T1418] do_syscall_64+0x4c/0xa0 [ 43.043756][ T1418] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 43.049943][ T1418] [ 43.052415][ T1418] The buggy address belongs to the object at ffff8881378e5500 [ 43.052415][ T1418] which belongs to the cache kmalloc-192 of size 192 [ 43.067932][ T1418] The buggy address is located 0 bytes to the right of [ 43.067932][ T1418] 192-byte region [ffff8881378e5500, ffff8881378e55c0) [ 43.082189][ T1418] The buggy address belongs to the page: [ 43.087836][ T1418] page:ffffea0004de3940 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1378e5 [ 43.098363][ T1418] flags: 0x4000000000000200(slab|zone=1) [ 43.104077][ T1418] raw: 4000000000000200 0000000000000000 dead000000000122 ffff888100042c00 [ 43.113534][ T1418] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 43.122892][ T1418] page dumped because: kasan: bad access detected [ 43.131150][ T1418] page_owner tracks the page as allocated [ 43.137144][ T1418] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 101, ts 42380827313, free_ts 42366064919 [ 43.153754][ T1418] post_alloc_hook+0x192/0x1b0 [ 43.158919][ T1418] prep_new_page+0x1c/0x110 [ 43.163990][ T1418] get_page_from_freelist+0x2c3a/0x2cd0 [ 43.169773][ T1418] __alloc_pages+0x1a2/0x460 [ 43.174494][ T1418] new_slab+0xa0/0x4d0 [ 43.178756][ T1418] ___slab_alloc+0x3ac/0x840 [ 43.183469][ T1418] __slab_alloc+0x49/0x90 [ 43.188451][ T1418] kmem_cache_alloc_trace+0x146/0x270 [ 43.193871][ T1418] kernfs_fop_open+0x375/0xbb0 [ 43.198742][ T1418] do_dentry_open+0x82a/0x1010 [ 43.203779][ T1418] vfs_open+0x73/0x80 [ 43.207792][ T1418] path_openat+0x26e6/0x2f80 [ 43.212846][ T1418] do_filp_open+0x1df/0x400 [ 43.217450][ T1418] do_sys_openat2+0x15e/0x7f0 [ 43.222221][ T1418] __x64_sys_openat+0x136/0x160 [ 43.227429][ T1418] x64_sys_call+0x219/0x9a0 [ 43.231964][ T1418] page last free stack trace: [ 43.237295][ T1418] free_unref_page_prepare+0x5fa/0x600 [ 43.242884][ T1418] free_unref_page+0xae/0x540 [ 43.247679][ T1418] __free_pages+0x6c/0x100 [ 43.252123][ T1418] __free_slab+0xe5/0x1e0 [ 43.256657][ T1418] __unfreeze_partials+0x15a/0x190 [ 43.262541][ T1418] put_cpu_partial+0xc6/0x120 [ 43.267411][ T1418] __slab_free+0x1d4/0x290 [ 43.271944][ T1418] ___cache_free+0x104/0x120 [ 43.276824][ T1418] qlink_free+0x4d/0x90 [ 43.281574][ T1418] qlist_free_all+0x5f/0xb0 [ 43.286747][ T1418] kasan_quarantine_reduce+0x14a/0x170 [ 43.292513][ T1418] __kasan_slab_alloc+0x2f/0xe0 [ 43.297737][ T1418] slab_post_alloc_hook+0x4f/0x2b0 [ 43.303020][ T1418] __kmalloc+0x120/0x2c0 [ 43.307589][ T1418] kvmalloc_node+0x211/0x320 [ 43.312807][ T1418] seq_read_iter+0x1f1/0xce0 [ 43.317729][ T1418] [ 43.320337][ T1418] Memory state around the buggy address: [ 43.326589][ T1418] ffff8881378e5480: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 43.335057][ T1418] ffff8881378e5500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 43.345773][ T1418] >ffff8881378e5580: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 43.354025][ T1418] ^ [ 43.361345][ T1418] ffff8881378e5600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 43.370279][ T1418] ffff8881378e5680: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 43.378988][ T1418] ================================================================== [ 43.387503][ T1418] Disabling lock debugging due to kernel taint [ 43.402301][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 43.402321][ T30] audit: type=1400 audit(1787313741.886:331): avc: denied { write } for pid=277 comm="syz-executor" path="pipe:[15000]" dev="pipefs" ino=15000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 43.548708][ T1414] EXT4-fs: failed to create workqueue [ 43.556711][ T1414] EXT4-fs (loop3): mount failed [ 43.579144][ T285] syz-executor (285) used greatest stack depth: 21096 bytes left [ 44.356065][ T45] device bridge_slave_1 left promiscuous mode [ 44.370033][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.378043][ T45] device bridge_slave_0 left promiscuous mode [ 44.384275][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.392325][ T45] device veth1_macvtap left promiscuous mode [ 44.398391][ T45] device veth0_vlan left promiscuous mode [ 45.436550][ T45] device bridge_slave_1 left promiscuous mode [ 45.443534][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.451906][ T45] device bridge_slave_0 left promiscuous mode [ 45.458650][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.467348][ T45] device bridge_slave_1 left promiscuous mode [ 45.474286][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.482733][ T45] device bridge_slave_0 left promiscuous mode [ 45.489995][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.497882][ T45] device bridge_slave_1 left promiscuous mode [ 45.504522][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.512647][ T45] device bridge_slave_0 left promiscuous mode [ 45.519925][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.529141][ T45] device veth1_macvtap left promiscuous mode [ 45.535369][ T45] device veth0_vlan left promiscuous mode [ 45.542076][ T45] device veth1_macvtap left promiscuous mode [ 45.548243][ T45] device veth0_vlan left promiscuous mode [ 45.554271][ T45] device veth1_macvtap left promiscuous mode [ 45.560506][ T45] device veth0_vlan left promiscuous mode