last executing test programs: 1m45.265631363s ago: executing program 1 (id=432): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x10, 0x572, 0x8000, 0x9, "ff000d00009a468e0cd912098d00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000002c0)) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000200)={0xfff9, 0xcd3d, 0x8, 0x8, 0x9, "6c160020046b17c3"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x4) 1m45.226436605s ago: executing program 1 (id=434): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0xfffff9, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) r0 = syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0x615e, 0x0, 0x0, 0x1000034f}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r0, 0x200047bc, 0x0, 0x0, 0x0, 0x5e) 1m45.194101109s ago: executing program 1 (id=435): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000003c0), 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'veth1_to_batadv\x00', @local}) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) fremovexattr(r1, &(0x7f0000000000)=@known='system.posix_acl_default\x00') 1m44.305326415s ago: executing program 1 (id=449): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000001c40)=[{&(0x7f0000001ac0)="d956d8", 0x3}], 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) shutdown(r2, 0x2) splice(r0, 0x0, r2, 0x0, 0x2000000002ffff, 0x0) 1m44.235187451s ago: executing program 1 (id=451): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) listxattr(0x0, 0x0, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 1m44.13167614s ago: executing program 1 (id=454): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 1m29.085698447s ago: executing program 32 (id=454): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 2.590515948s ago: executing program 0 (id=2051): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 2.527681446s ago: executing program 0 (id=2055): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x800) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {0x0, 0x1}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x33}, 0x2, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) 2.461367023s ago: executing program 2 (id=2059): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000280)={@multicast2, @loopback, 0x1}, 0x10) 2.209873003s ago: executing program 2 (id=2064): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 1.782940929s ago: executing program 2 (id=2066): syz_open_procfs(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="44000000020301040000000000000000000000000800010001000000090002000000000202000000090002000000000201000000080003c0"], 0x44}}, 0x0) 1.68214054s ago: executing program 2 (id=2067): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sched_setscheduler(0x0, 0x2, 0x0) iopl(0x3) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mq_open(&(0x7f0000000580)='!\x7f\x00\xca\x00\x00\x00\f\x00vt\x00\x01E!\x05\x99\xb7|`', 0x6e93ebbbcc0884f2, 0x61, &(0x7f0000000480)={0x0, 0x2, 0x7}) mq_timedreceive(r1, &(0x7f0000000700)=""/200, 0xc8, 0x0, 0x0) 1.63291779s ago: executing program 0 (id=2068): pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r2 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r1, 0x0, 0x101, 0x0) close(r4) close(r2) socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x1100000000f334, 0x0) 1.372566789s ago: executing program 4 (id=2072): unshare(0x46070300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r2, &(0x7f0000000540)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000000000002b0, 0x401eb94) 1.298483104s ago: executing program 5 (id=2073): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000100)='reno\x00', 0x5) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup=r2, r1, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) write$tcp_congestion(r0, &(0x7f0000000300)='reno\x00', 0x5) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup=r2, r1, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) write$tcp_congestion(r0, &(0x7f0000000380)='reno\x00', 0x5) 1.267539998s ago: executing program 5 (id=2074): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x2, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x7e275}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6}, 0x48804) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01"], 0x0, 0x28}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000000000009500a500000000003e62782f6b62fe583a205a2a93679f78609d6ca7f05ba88e8460d0693a8e47c2857ff1c02f24ca929b6aec07a02b58cbd88131bb0d547c9bab43442e4535f88409162afd1ed8ff5a113677be48432632a733fb0c58fcdba24799f692860f292f268d00eac7dd739212a24e74fef584daca158d64b64536a0c21a0ab5a3e038038aaef7bd2ea0621eb7be6fc89005be16748d73f3a1887006e10ed1fb7d9eb609"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, r0, 0x8, 0x0, 0x0, 0x14}, 0x94) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x2001, 0x880b, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "dbdd9ede7e2313a7a23925f03dbbcf5cde982cab6b38bf7b463ae5f42c35dd1d", "6a7710ebcf55344ae76b375fa62e3502b74659d7dbde072d61b6238412ad5f1a0a4f358515e45cea781c9e9b26806f68", "dd72b3bd460f4ebd662f8cd823dfd0d963970deffa6dd57d8176d2b5", {"4e3bc06c34c945e45e27e747494b407f", "256d9ddc3e6e1f7c5f7b4c5e69c1dd72"}}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a"], 0x7c}}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$msr(r1, &(0x7f0000000d40)=""/43, 0x2b) 1.17413942s ago: executing program 5 (id=2075): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000280)={@multicast2, @loopback, 0x1}, 0x10) 1.062114138s ago: executing program 5 (id=2078): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) gettid() fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) 1.051225016s ago: executing program 3 (id=2079): socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$unix(0x1, 0x1, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x4, 0x3, 0x8, 0x0, 0x0, 0x6, 0x40000, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xfffffffffffffdd6, 0x39071b7200000000}, 0x2000, 0xfffffffffffffffa, 0x3, 0x6, 0x800, 0xd, 0xfffd, 0x0, 0x9, 0x0, 0x1000}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0xe) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 1.033520892s ago: executing program 3 (id=2080): bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000004) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x5, r1, &(0x7f0000000080), 0xffffffffffffffd) 1.011129248s ago: executing program 3 (id=2081): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) syz_open_procfs(0x0, &(0x7f0000000340)='status\x00') fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x10) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) 930.132992ms ago: executing program 4 (id=2083): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xe0b, 0xfefffffc, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}}, 0x0) sendto$packet(r0, &(0x7f0000000080)="39c394e534ecf02e7e0e9ca208004b54", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x95, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 847.928636ms ago: executing program 4 (id=2084): syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x4, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 820.969531ms ago: executing program 3 (id=2085): socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) execve(0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000540), 0x2402) read(r1, &(0x7f0000000440)=""/247, 0x26) tkill(r0, 0x7) 768.54849ms ago: executing program 0 (id=2086): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2, 0xffffffffffffffff}, &(0x7f0000000040)=0x2, &(0x7f0000000240)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r3, &(0x7f0000000300)="90b733b775", &(0x7f00000003c0)=""/176}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x37de6c8a68769c38}, 0x48) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x4d, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 768.2072ms ago: executing program 3 (id=2087): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x3, 0x8069}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x2}, 0x1}) io_uring_enter(r1, 0x20047f6, 0xa511, 0xa, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) 727.294472ms ago: executing program 2 (id=2088): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10000000002008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) syz_clone(0x80008000, 0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) 533.079565ms ago: executing program 4 (id=2089): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000340), 0x8) 415.701801ms ago: executing program 4 (id=2090): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x359}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 120.180883ms ago: executing program 3 (id=2091): socketpair$unix(0x1, 0x3, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000580)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r2, 0xfffffffffffffc01, 0x0) 77.757325ms ago: executing program 4 (id=2092): timer_settime(0x0, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040), 0x1, 0xbac, &(0x7f00000017c0)="$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") r0 = open(&(0x7f0000000140)='./file0/file0\x00', 0x64942, 0x106) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45fff219, 0x0, @perf_config_ext={0xd, 0x4}, 0x3110, 0x10000, 0x8, 0x1, 0x7, 0xffffffff, 0xb, 0x0, 0x7, 0x0, 0x20000006}, 0x0, 0x8, r0, 0xa) r1 = syz_io_uring_setup(0x111, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x1, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000240)=0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) io_uring_enter(r1, 0x47f6, 0x0, 0x24, 0x0, 0x0) 77.436345ms ago: executing program 5 (id=2093): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe00003a4, 0x0, "02823f6bd900000000000097efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 53.96113ms ago: executing program 2 (id=2094): unshare(0x2c020400) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) msgsnd(0x0, 0x0, 0x2000, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) pread64(r0, &(0x7f00000024c0)=""/209, 0xd1, 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x8) fcntl$getflags(r2, 0x401) 47.635259ms ago: executing program 5 (id=2095): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xe0b, 0xfefffffc, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}}, 0x0) sendto$packet(r0, &(0x7f0000000080)="39c394e534ecf02e7e0e9ca208004b54", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x95, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 47.044219ms ago: executing program 0 (id=2096): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020206b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000870000008500000006000000850000009e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') 0s ago: executing program 0 (id=2097): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) pselect6(0x7e, &(0x7f0000000100)={0x0, 0x0, 0x1000000000000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x3, 0x0, 0x5}, 0x0, 0x0) r2 = syz_io_uring_setup(0x3484, &(0x7f0000000500)={0x0, 0xd2a7, 0x10100, 0x1000, 0xdb}, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x7a98, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xfffffff8, 0x401, 0xfffffffd, 0xc4cf, 0x7, "0441920887e87fcb367800000000080100", 0x4, 0x200}) kernel console output (not intermixed with test programs): [ 35.907191][ T3787] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 35.933025][ T3787] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.127: bg 0: block 248: padding at end of block bitmap is not set [ 35.955986][ T3787] loop2: lost filesystem error report for type 5 error -117 [ 35.957452][ T3787] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.127: Failed to acquire dquot type 1 [ 35.964802][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 35.964820][ C1] EXT4-fs (loop2): last error at time 1772111548: ext4_validate_block_bitmap:441 [ 35.992715][ T3787] loop2: lost filesystem error report for type 5 error -117 [ 35.993504][ T3787] EXT4-fs (loop2): 1 truncate cleaned up [ 36.007119][ T3787] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 36.044811][ T3810] ip6gre1: entered promiscuous mode [ 36.073665][ T3810] ip6gre1: entered allmulticast mode [ 36.108977][ T3787] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.127'. [ 36.397319][ T3831] mmap: syz.1.143 (3831) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 36.434566][ T3850] netlink: 'syz.0.153': attribute type 2 has an invalid length. [ 36.442435][ T3850] netlink: 191880 bytes leftover after parsing attributes in process `syz.0.153'. [ 36.521093][ T3787] syz.2.127 (3787) used greatest stack depth: 9400 bytes left [ 36.563749][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 36.880943][ T3867] loop2: detected capacity change from 0 to 256 [ 36.923605][ T3867] FAT-fs (loop2): Directory bread(block 1285) failed [ 36.949368][ T3867] FAT-fs (loop2): Directory bread(block 1286) failed [ 36.969227][ T3867] FAT-fs (loop2): Directory bread(block 1287) failed [ 36.992357][ T3867] FAT-fs (loop2): Directory bread(block 1288) failed [ 37.097072][ T3878] policy can only be matched on NF_INET_PRE_ROUTING [ 37.097085][ T3878] unable to load match [ 37.123319][ T3880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.166'. [ 37.188671][ T3884] netlink: 20 bytes leftover after parsing attributes in process `syz.2.168'. [ 37.246726][ T3888] gretap0: entered promiscuous mode [ 37.293836][ T3896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.305074][ T3894] process 'syz.2.173' launched '/dev/fd/5' with NULL argv: empty string added [ 37.325103][ T3896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.538729][ T3914] Illegal XDP return value 4294967294 on prog (id 48) dev syz_tun, expect packet loss! [ 38.503367][ T3975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.205'. [ 38.781453][ T3981] netlink: 48 bytes leftover after parsing attributes in process `syz.1.208'. [ 39.175784][ T3990] netlink: 'syz.4.211': attribute type 1 has an invalid length. [ 39.215776][ T3990] gretap1: entered allmulticast mode [ 39.233305][ T3990] bond1: (slave gretap1): making interface the new active one [ 39.243365][ T3990] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 39.399352][ T4000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.215'. [ 39.603298][ T4014] netlink: 'syz.2.220': attribute type 2 has an invalid length. [ 39.612346][ T4014] netlink: 40 bytes leftover after parsing attributes in process `syz.2.220'. [ 39.837824][ T4039] loop4: detected capacity change from 0 to 1024 [ 39.871403][ T4042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.232'. [ 39.884409][ T4042] netlink: 'syz.1.232': attribute type 5 has an invalid length. [ 39.893804][ T4042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.232'. [ 39.906715][ T4042] geneve2: entered promiscuous mode [ 39.913086][ T4042] geneve2: entered allmulticast mode [ 39.913900][ T4039] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 39.920185][ T12] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 53125 - 0 [ 39.932604][ T4039] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.939660][ T12] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 53125 - 0 [ 39.958794][ T12] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 53125 - 0 [ 39.969930][ T12] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 53125 - 0 [ 40.042567][ T4039] EXT4-fs error (device loop4): ext4_map_blocks:818: inode #15: block 3: comm syz.4.231: lblock 3 mapped to illegal pblock 3 (length 3) [ 40.076289][ T4039] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 40.108057][ T4039] EXT4-fs (loop4): This should not happen!! Data will be lost [ 40.108057][ T4039] [ 40.125414][ T4039] EXT4-fs error (device loop4): ext4_map_blocks:818: inode #15: block 8: comm syz.4.231: lblock 8 mapped to illegal pblock 8 (length 8) [ 40.139704][ T4039] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 40.155348][ T4039] EXT4-fs (loop4): This should not happen!! Data will be lost [ 40.155348][ T4039] [ 40.166300][ T4039] EXT4-fs error (device loop4): ext4_map_blocks:818: inode #15: block 3: comm syz.4.231: lblock 3 mapped to illegal pblock 3 (length 3) [ 40.181117][ T4039] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 40.193808][ T4039] EXT4-fs (loop4): This should not happen!! Data will be lost [ 40.193808][ T4039] [ 40.229346][ T2053] EXT4-fs error (device loop4): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:7: lblock 8 mapped to illegal pblock 8 (length 8) [ 40.252790][ T2053] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 40.265370][ T2053] EXT4-fs (loop4): This should not happen!! Data will be lost [ 40.265370][ T2053] [ 40.275574][ T3455] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:8: bg 0: block 112: padding at end of block bitmap is not set [ 40.300572][ T3455] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 20 with max blocks 48 with error 117 [ 40.510669][ T4086] loop1: detected capacity change from 0 to 764 [ 40.536397][ T28] kauditd_printk_skb: 70 callbacks suppressed [ 40.536422][ T28] audit: type=1400 audit(1772111553.203:278): avc: denied { block_suspend } for pid=4087 comm="syz.4.249" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 40.567698][ T4086] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 40.604161][ T28] audit: type=1400 audit(1772111553.263:279): avc: denied { mount } for pid=4079 comm="syz.1.246" name="/" dev="loop1" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 40.682845][ T28] audit: type=1400 audit(1772111553.323:280): avc: denied { ioctl } for pid=4089 comm="syz.4.250" path="socket:[6131]" dev="sockfs" ino=6131 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 41.180788][ T4098] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.194505][ T4098] __nla_validate_parse: 1 callbacks suppressed [ 41.194519][ T4098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.252'. [ 41.305333][ T28] audit: type=1400 audit(1772111553.973:281): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 41.367869][ T28] audit: type=1400 audit(1772111554.033:282): avc: denied { nlmsg_write } for pid=4109 comm="syz.1.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 41.391944][ T28] audit: type=1400 audit(1772111554.053:283): avc: denied { write } for pid=4109 comm="syz.1.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 42.452016][ T4269] all: renamed from lo (while UP) [ 42.509116][ T4276] netlink: 12 bytes leftover after parsing attributes in process `syz.0.268'. [ 42.521051][ T4276] netlink: 12 bytes leftover after parsing attributes in process `syz.0.268'. [ 42.524461][ T4273] xt_hashlimit: size too large, truncated to 1048576 [ 42.569842][ T28] audit: type=1400 audit(1772111555.233:284): avc: denied { connect } for pid=4272 comm="syz.1.267" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 42.594372][ T4282] loop1: detected capacity change from 0 to 512 [ 42.601025][ T4282] EXT4-fs: Ignoring removed oldalloc option [ 42.612211][ T4282] EXT4-fs (loop1): 1 truncate cleaned up [ 42.618410][ T4282] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.692348][ T4289] capability: warning: `syz.0.272' uses deprecated v2 capabilities in a way that may be insecure [ 42.712318][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.825381][ T4297] loop0: detected capacity change from 0 to 128 [ 42.835860][ T28] audit: type=1400 audit(1772111555.503:285): avc: denied { mount } for pid=4296 comm="syz.0.276" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 42.873136][ T28] audit: type=1400 audit(1772111555.543:286): avc: denied { unmount } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 42.995868][ T4052] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 43.039755][ T28] audit: type=1400 audit(1772111555.703:287): avc: denied { create } for pid=4307 comm="syz.1.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 43.500965][ T4357] delete_channel: no stack [ 43.606642][ T4374] netlink: 'syz.3.312': attribute type 1 has an invalid length. [ 43.652966][ T4374] bond1: entered promiscuous mode [ 43.658215][ T4374] 8021q: adding VLAN 0 to HW filter on device bond1 [ 43.699337][ T4374] 8021q: adding VLAN 0 to HW filter on device bond1 [ 43.718661][ T4374] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 43.740223][ T4392] loop5: detected capacity change from 0 to 7 [ 43.740332][ T4374] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 43.758280][ T4374] bond1: (slave vcan1): making interface the new active one [ 43.765992][ T4374] vcan1: entered promiscuous mode [ 43.773256][ T4374] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 43.880569][ T4405] loop3: detected capacity change from 0 to 512 [ 43.930987][ T4405] EXT4-fs: Ignoring removed nobh option [ 43.960448][ T4405] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 44.040185][ T4405] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 44.053556][ T4405] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 44.086033][ T4405] EXT4-fs (loop3): 1 truncate cleaned up [ 44.104365][ T4405] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.143352][ T4416] loop2: detected capacity change from 0 to 8192 [ 44.240331][ T3313] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 44.254559][ T3313] FAT-fs (loop2): Filesystem has been set read-only [ 44.388347][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.438646][ T4432] syz.3.333 uses obsolete (PF_INET,SOCK_PACKET) [ 44.606192][ T4442] xt_hashlimit: size too large, truncated to 1048576 [ 45.029247][ T4471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.082968][ T4471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.164041][ T4482] netlink: 24 bytes leftover after parsing attributes in process `syz.3.357'. [ 45.176459][ T4480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.355'. [ 45.185083][ T4484] loop0: detected capacity change from 0 to 512 [ 45.270503][ T4484] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 45.292016][ T4484] EXT4-fs (loop0): 1 orphan inode deleted [ 45.298276][ T4484] EXT4-fs (loop0): 1 truncate cleaned up [ 45.304656][ T4484] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.348449][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.372712][ T4504] loop0: detected capacity change from 0 to 512 [ 45.383672][ T4504] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 45.386285][ T4506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.365'. [ 45.403413][ T4504] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.362: bad orphan inode 131083 [ 45.414827][ T4504] loop0: lost filesystem error report for type 5 error -117 [ 45.415364][ T4504] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.417089][ T4506] erspan0: entered promiscuous mode [ 45.436339][ T4504] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.0.362: path /89/bus/file0: bad entry in directory: directory entry overrun - offset=80, inode=1560281102, rec_len=1024, size=60 fake=0 [ 45.440071][ T4506] macvtap1: entered promiscuous mode [ 45.467621][ T4506] macvtap1: entered allmulticast mode [ 45.473033][ T4506] erspan0: entered allmulticast mode [ 45.480493][ T4510] erspan0: left allmulticast mode [ 45.485678][ T4510] erspan0: left promiscuous mode [ 45.526615][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.606091][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 45.606106][ T28] audit: type=1400 audit(1772111558.273:310): avc: denied { name_bind } for pid=4521 comm="syz.1.370" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 45.639937][ T4524] netlink: 4 bytes leftover after parsing attributes in process `syz.3.372'. [ 45.687846][ T4532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.375'. [ 45.772971][ T4532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.375'. [ 45.835896][ T28] audit: type=1400 audit(1772111558.503:311): avc: denied { read } for pid=4543 comm="syz.3.382" path="socket:[7164]" dev="sockfs" ino=7164 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 45.925316][ T28] audit: type=1400 audit(1772111558.593:312): avc: denied { listen } for pid=4549 comm="syz.2.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 45.991711][ T35] kernel write not supported for file bpf-prog (pid: 35 comm: kworker/1:1) [ 46.024886][ T28] audit: type=1400 audit(1772111558.693:313): avc: denied { create } for pid=4557 comm="syz.2.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 46.074136][ T28] audit: type=1400 audit(1772111558.743:314): avc: denied { ioctl } for pid=4557 comm="syz.2.389" path="socket:[12298]" dev="sockfs" ino=12298 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 46.169619][ T4573] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.227275][ T4573] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.247830][ T4580] loop0: detected capacity change from 0 to 1024 [ 46.286729][ T4580] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.287198][ T4573] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.373867][ T4573] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.491038][ T1933] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.519925][ T1933] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.533142][ T1933] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.541543][ T1933] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.618728][ T4586] Process accounting resumed [ 46.891889][ T28] audit: type=1326 audit(1772111559.553:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4604 comm="syz.2.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30dacdc799 code=0x7fc00000 [ 46.893728][ T4610] sock: sock_set_timeout: `syz.4.408' (pid 4610) tries to set negative timeout [ 46.926541][ T28] audit: type=1400 audit(1772111559.563:316): avc: denied { create } for pid=4609 comm="syz.4.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 46.946179][ T28] audit: type=1400 audit(1772111559.563:317): avc: denied { setopt } for pid=4609 comm="syz.4.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 46.965849][ T28] audit: type=1400 audit(1772111559.613:318): avc: denied { read } for pid=4609 comm="syz.4.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 47.009267][ T28] audit: type=1400 audit(1772111559.673:319): avc: denied { mount } for pid=4615 comm="syz.4.411" name="/" dev="hugetlbfs" ino=12530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 47.046351][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.588659][ T4634] loop2: detected capacity change from 0 to 512 [ 47.598067][ T4634] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.611204][ T4634] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.632206][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.658387][ T4638] netlink: 'syz.2.420': attribute type 1 has an invalid length. [ 47.681269][ T4638] bond1: (slave geneve2): making interface the new active one [ 47.689279][ T4638] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 47.698060][ T4246] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 47.707199][ T4246] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 47.716241][ T4246] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 47.725415][ T4246] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 47.738285][ T4641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.421'. [ 48.578368][ T4681] netlink: 80 bytes leftover after parsing attributes in process `syz.3.438'. [ 48.615652][ T4681] netlink: 80 bytes leftover after parsing attributes in process `syz.3.438'. [ 48.690655][ T4683] loop4: detected capacity change from 0 to 8192 [ 49.172198][ T4705] netlink: 4 bytes leftover after parsing attributes in process `syz.3.448'. [ 49.445512][ T4719] sock: sock_timestamping_bind_phc: sock not bind to device [ 49.741437][ T4733] ip6tnl1: entered promiscuous mode [ 49.760910][ T4735] netlink: 'syz.0.463': attribute type 3 has an invalid length. [ 49.778757][ T4735] netlink: 'syz.0.463': attribute type 1 has an invalid length. [ 49.798334][ T4735] netlink: 198116 bytes leftover after parsing attributes in process `syz.0.463'. [ 49.822801][ T4737] netlink: 28 bytes leftover after parsing attributes in process `syz.4.464'. [ 50.014360][ T4749] netlink: 'syz.3.471': attribute type 1 has an invalid length. [ 50.042760][ T4749] netlink: 'syz.3.471': attribute type 4 has an invalid length. [ 50.050425][ T4749] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.471'. [ 50.276868][ T4769] netlink: 24 bytes leftover after parsing attributes in process `syz.0.479'. [ 50.607859][ T4786] netlink: 'syz.2.485': attribute type 1 has an invalid length. [ 50.632843][ T4786] netlink: 'syz.2.485': attribute type 4 has an invalid length. [ 50.640508][ T4786] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.485'. [ 50.906450][ T4767] pimreg: entered allmulticast mode [ 50.948698][ T4767] pimreg: left allmulticast mode [ 52.313977][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 52.313993][ T28] audit: type=1400 audit(1772111564.983:331): avc: denied { cmd } for pid=4838 comm="syz.4.507" path="socket:[12956]" dev="sockfs" ino=12956 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 52.778413][ T4868] netlink: 'syz.0.520': attribute type 2 has an invalid length. [ 52.786863][ T4868] netlink: 14 bytes leftover after parsing attributes in process `syz.0.520'. [ 53.755819][ T4888] ipip0: entered promiscuous mode [ 53.977623][ T4902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.536'. [ 54.122880][ T4902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.536'. [ 54.131890][ T4902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.536'. [ 54.159971][ T4902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.536'. [ 54.329510][ T28] audit: type=1400 audit(1772111566.983:332): avc: denied { kexec_image_load } for pid=4914 comm="syz.3.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 54.392792][ T28] audit: type=1400 audit(1772111567.013:333): avc: denied { listen } for pid=4908 comm="syz.4.538" laddr=::ffff:0.0.0.0 lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 54.955237][ T4920] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 54.965298][ T4920] SELinux: failed to load policy [ 56.295247][ T4915] kexec: Could not allocate control_code_buffer [ 56.495104][ T4964] loop2: detected capacity change from 0 to 512 [ 56.552118][ T4964] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 56.567460][ T4964] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.629041][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.681022][ T4971] loop2: detected capacity change from 0 to 512 [ 56.715328][ T4971] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 56.735956][ T4971] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.564: invalid indirect mapped block 2683928664 (level 1) [ 56.755098][ T4971] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 56.755246][ T4971] EXT4-fs (loop2): Remounting filesystem read-only [ 56.764604][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 56.764620][ C0] EXT4-fs (loop2): initial error at time 1772111569: ext4_free_branches:1023: inode 13 [ 56.764668][ C0] EXT4-fs (loop2): last error at time 1772111569: ext4_free_branches:1023: inode 13 [ 56.852864][ T4971] EXT4-fs (loop2): 1 truncate cleaned up [ 56.858860][ T4971] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.939024][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.345192][ T28] audit: type=1400 audit(1772111570.013:334): avc: denied { write } for pid=4993 comm="syz.2.574" name="001" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 57.434335][ T4997] netlink: 'syz.2.575': attribute type 3 has an invalid length. [ 57.455579][ T4997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.575'. [ 57.589913][ T28] audit: type=1400 audit(1772111570.253:335): avc: denied { remount } for pid=5001 comm="syz.2.577" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 58.374547][ T5016] loop0: detected capacity change from 0 to 512 [ 58.415807][ T28] audit: type=1400 audit(1772111571.083:336): avc: denied { mount } for pid=5015 comm="syz.0.582" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 58.499445][ T28] audit: type=1400 audit(1772111571.163:337): avc: denied { remount } for pid=5015 comm="syz.0.582" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 58.532827][ T28] audit: type=1400 audit(1772111571.193:338): avc: denied { unmount } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 58.638877][ T28] audit: type=1400 audit(1772111571.303:339): avc: denied { allowed } for pid=5028 comm="syz.0.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 58.733530][ T5035] loop2: detected capacity change from 0 to 1024 [ 58.740395][ T5035] EXT4-fs: Ignoring removed bh option [ 58.805665][ T5035] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.834422][ T5035] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4222: comm syz.2.590: Allocating blocks 497-513 which overlap fs metadata [ 58.862536][ T28] audit: type=1400 audit(1772111571.523:340): avc: denied { watch } for pid=5034 comm="syz.2.590" path="/136/file1" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 58.864888][ T5035] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4222: comm syz.2.590: Allocating blocks 497-513 which overlap fs metadata [ 58.915649][ T5035] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:5037: inode #15: block 64: len 64: ext4_ext_map_blocks returned -117 [ 59.000713][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.519971][ T5054] netlink: 20 bytes leftover after parsing attributes in process `syz.0.598'. [ 59.534370][ T28] audit: type=1400 audit(1772111572.203:341): avc: denied { bind } for pid=5052 comm="syz.2.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.577564][ T5054] netlink: 20 bytes leftover after parsing attributes in process `syz.0.598'. [ 59.606719][ T28] audit: type=1400 audit(1772111572.203:342): avc: denied { listen } for pid=5052 comm="syz.2.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.661979][ T28] audit: type=1400 audit(1772111572.203:343): avc: denied { connect } for pid=5052 comm="syz.2.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.692826][ T5059] netlink: 16 bytes leftover after parsing attributes in process `syz.0.601'. [ 59.714496][ T5059] gtp0: entered promiscuous mode [ 59.765132][ T5065] loop0: detected capacity change from 0 to 164 [ 59.781426][ T5065] rock: directory entry would overflow storage [ 59.812990][ T5065] rock: sig=0x4f50, size=4, remaining=3 [ 59.818683][ T5065] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 59.883996][ T5071] netlink: 56 bytes leftover after parsing attributes in process `syz.3.605'. [ 60.463138][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 61.065427][ T5141] team0 (unregistering): Port device team_slave_0 removed [ 61.115220][ T5141] team0 (unregistering): Port device team_slave_1 removed [ 61.156256][ T5149] netlink: 'syz.3.638': attribute type 2 has an invalid length. [ 61.447366][ T5169] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.647'. [ 62.047688][ T5194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.656'. [ 62.223737][ T3917] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 62.254355][ T5201] loop4: detected capacity change from 0 to 512 [ 62.341629][ T5201] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.395840][ T5201] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.484116][ T5213] netlink: 136 bytes leftover after parsing attributes in process `syz.3.664'. [ 62.505166][ T35] IPVS: starting estimator thread 0... [ 62.517898][ T5213] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 62.592801][ T5215] IPVS: using max 2544 ests per chain, 127200 per kthread [ 63.078387][ T5232] geneve2: entered promiscuous mode [ 63.112819][ T5232] geneve2: entered allmulticast mode [ 63.120492][ T40] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 63.149069][ T40] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 63.184953][ T40] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 63.203172][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.223377][ T40] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 63.370533][ T5252] netlink: 12 bytes leftover after parsing attributes in process `syz.0.678'. [ 63.418577][ T5252] bond1: entered promiscuous mode [ 63.438737][ T5249] loop4: detected capacity change from 0 to 8192 [ 63.441727][ T5252] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.489038][ T5259] netlink: 12 bytes leftover after parsing attributes in process `syz.0.678'. [ 63.528488][ T5259] netlink: 12 bytes leftover after parsing attributes in process `syz.0.678'. [ 63.627670][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 63.627800][ T28] audit: type=1400 audit(1772111576.293:359): avc: denied { create } for pid=5261 comm="syz.4.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 63.675925][ T5266] loop4: detected capacity change from 0 to 1024 [ 63.687066][ T28] audit: type=1400 audit(1772111576.293:360): avc: denied { ioctl } for pid=5261 comm="syz.4.682" path="socket:[14479]" dev="sockfs" ino=14479 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 63.714374][ T5266] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 63.726647][ T5266] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.775004][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 63.957691][ T28] audit: type=1400 audit(1772111576.623:361): avc: denied { read } for pid=5282 comm="syz.0.690" laddr=ff02::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 63.995825][ T5285] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 64.245618][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a8da400: rx timeout, send abort [ 64.263945][ T28] audit: type=1400 audit(1772111576.933:362): avc: denied { read } for pid=2981 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 64.302781][ T28] audit: type=1400 audit(1772111576.933:363): avc: denied { search } for pid=2981 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.344733][ T28] audit: type=1400 audit(1772111576.933:364): avc: denied { search } for pid=2981 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.394179][ T28] audit: type=1400 audit(1772111576.933:365): avc: denied { add_name } for pid=2981 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.442774][ T28] audit: type=1400 audit(1772111576.933:366): avc: denied { create } for pid=2981 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 64.499881][ T28] audit: type=1400 audit(1772111576.933:367): avc: denied { append open } for pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 64.531806][ T28] audit: type=1400 audit(1772111576.933:368): avc: denied { getattr } for pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 64.723033][ T5295] chnl_net:caif_netlink_parms(): no params data found [ 64.745633][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b41b200: rx timeout, send abort [ 64.753990][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a8da400: abort rx timeout. Force session deactivation [ 64.839757][ T5295] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.846957][ T5295] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.854171][ T5295] bridge_slave_0: entered allmulticast mode [ 64.860797][ T5295] bridge_slave_0: entered promiscuous mode [ 64.868104][ T5295] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.875281][ T5295] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.882490][ T5295] bridge_slave_1: entered allmulticast mode [ 64.889424][ T5295] bridge_slave_1: entered promiscuous mode [ 64.907655][ T5295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.918388][ T5295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.938561][ T5295] team0: Port device team_slave_0 added [ 64.945756][ T5295] team0: Port device team_slave_1 added [ 64.962541][ T5295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.969585][ T5295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.995679][ T5295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.007096][ T5295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.014123][ T5295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.040187][ T5295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.177944][ T5295] hsr_slave_0: entered promiscuous mode [ 65.202348][ T5295] hsr_slave_1: entered promiscuous mode [ 65.226913][ T5295] debugfs: 'hsr0' already exists in 'hsr' [ 65.234999][ T5295] Cannot create hsr debugfs directory [ 65.253994][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b41b200: abort rx timeout. Force session deactivation [ 65.277277][ T58] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.287898][ T58] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 53125 - 0 [ 65.361932][ T58] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.381795][ T5332] loop2: detected capacity change from 0 to 1024 [ 65.396855][ T58] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 53125 - 0 [ 65.411374][ T5332] EXT4-fs: inline encryption not supported [ 65.441427][ T5332] EXT4-fs: Ignoring removed nobh option [ 65.457115][ T5295] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 65.463540][ T5343] sock: sock_set_timeout: `syz.0.709' (pid 5343) tries to set negative timeout [ 65.464428][ T5332] EXT4-fs: Ignoring removed bh option [ 65.497437][ T58] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.509877][ T58] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 53125 - 0 [ 65.530949][ T5295] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 65.539312][ T5332] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.559050][ T5295] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 65.573340][ T5295] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 65.586958][ T58] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.597548][ T58] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 53125 - 0 [ 65.660864][ T5295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.675162][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.680034][ T5295] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.707232][ T1933] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.714335][ T1933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.772479][ T1933] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.779677][ T1933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.856270][ T58] bridge_slave_1: left allmulticast mode [ 65.867479][ T58] bridge_slave_1: left promiscuous mode [ 65.883017][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.892004][ T58] bridge_slave_0: left allmulticast mode [ 65.897897][ T58] bridge_slave_0: left promiscuous mode [ 65.903829][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.055016][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.065421][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.076141][ T58] bond0 (unregistering): Released all slaves [ 66.108717][ T5295] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.160612][ T58] hsr_slave_0: left promiscuous mode [ 66.174349][ T58] hsr_slave_1: left promiscuous mode [ 66.183658][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.202937][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.212252][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.232220][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.257234][ T58] veth1_macvtap: left promiscuous mode [ 66.280547][ T58] veth0_macvtap: left promiscuous mode [ 66.289053][ T58] veth1_vlan: left promiscuous mode [ 66.297503][ T58] veth0_vlan: left promiscuous mode [ 66.924094][ T58] team0 (unregistering): Port device team_slave_1 removed [ 66.948273][ T58] team0 (unregistering): Port device team_slave_0 removed [ 67.007284][ T58] team0 (unregistering): Port device dummy0 removed [ 67.072544][ T5295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.300702][ T5461] netlink: 16 bytes leftover after parsing attributes in process `syz.0.728'. [ 67.333499][ T5295] veth0_vlan: entered promiscuous mode [ 67.360404][ T5295] veth1_vlan: entered promiscuous mode [ 67.394721][ T5295] veth0_macvtap: entered promiscuous mode [ 67.414294][ T5295] veth1_macvtap: entered promiscuous mode [ 67.450146][ T5295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.474143][ T5295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.512616][ T1933] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.532114][ T1933] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.558057][ T1933] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.577869][ T1933] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.682803][ T5489] netlink: 12 bytes leftover after parsing attributes in process `syz.0.746'. [ 67.702504][ T5495] netlink: 24 bytes leftover after parsing attributes in process `syz.4.735'. [ 67.929349][ T5517] io-wq is not configured for unbound workers [ 68.022521][ T5522] netlink: 'syz.5.747': attribute type 29 has an invalid length. [ 68.062607][ T5522] netlink: 'syz.5.747': attribute type 29 has an invalid length. [ 68.100252][ T5522] netlink: 'syz.5.747': attribute type 29 has an invalid length. [ 68.690604][ T3387] IPVS: starting estimator thread 0... [ 68.782849][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 68.782865][ T28] audit: type=1400 audit(1772111581.443:427): avc: denied { write } for pid=5577 comm="syz.3.771" laddr=fe80::10 lport=55126 faddr=fe80::3c fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 68.804675][ T5574] IPVS: using max 2400 ests per chain, 120000 per kthread [ 68.890389][ T5576] loop5: detected capacity change from 0 to 1024 [ 68.896691][ T5585] netlink: zone id is out of range [ 68.902817][ T5585] netlink: zone id is out of range [ 68.908106][ T5585] netlink: zone id is out of range [ 68.911885][ T5576] EXT4-fs: inline encryption not supported [ 68.919728][ T5585] netlink: zone id is out of range [ 68.921426][ T5576] EXT4-fs: Ignoring removed nobh option [ 68.932506][ T5576] EXT4-fs: Ignoring removed bh option [ 68.951720][ T5585] netlink: zone id is out of range [ 68.971530][ T28] audit: type=1326 audit(1772111581.633:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5582 comm="syz.0.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95c87ec799 code=0x7ffc0000 [ 68.994942][ T5585] netlink: zone id is out of range [ 69.000534][ T5585] netlink: zone id is out of range [ 69.008336][ T5585] netlink: zone id is out of range [ 69.014315][ T5585] netlink: zone id is out of range [ 69.022380][ T5585] netlink: zone id is out of range [ 69.057405][ T28] audit: type=1326 audit(1772111581.633:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5582 comm="syz.0.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95c87ec799 code=0x7ffc0000 [ 69.086212][ T28] audit: type=1326 audit(1772111581.633:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5582 comm="syz.0.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f95c87ec799 code=0x7ffc0000 [ 69.094789][ T5576] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.125393][ T28] audit: type=1326 audit(1772111581.633:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5582 comm="syz.0.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95c87ec799 code=0x7ffc0000 [ 69.149032][ T28] audit: type=1326 audit(1772111581.633:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5582 comm="syz.0.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95c87ec799 code=0x7ffc0000 [ 69.188508][ T28] audit: type=1326 audit(1772111581.633:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5582 comm="syz.0.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f95c87ec799 code=0x7ffc0000 [ 69.202339][ T5614] netlink: 'syz.0.780': attribute type 5 has an invalid length. [ 69.222296][ T28] audit: type=1326 audit(1772111581.633:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5582 comm="syz.0.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95c87ec799 code=0x7ffc0000 [ 69.257495][ T28] audit: type=1326 audit(1772111581.633:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5582 comm="syz.0.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95c87ec799 code=0x7ffc0000 [ 69.287871][ T28] audit: type=1400 audit(1772111581.723:436): avc: denied { execute } for pid=5602 comm="syz.3.777" path="/177/cpu.stat" dev="tmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 69.340909][ T5295] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.015034][ T5653] netlink: 2036 bytes leftover after parsing attributes in process `syz.5.790'. [ 70.028423][ T5655] netlink: 12 bytes leftover after parsing attributes in process `syz.4.794'. [ 70.037596][ T5653] netlink: 24 bytes leftover after parsing attributes in process `syz.5.790'. [ 70.137385][ T5668] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.799'. [ 70.146814][ T5668] netlink: 24 bytes leftover after parsing attributes in process `syz.4.799'. [ 71.571247][ T5739] netlink: 12 bytes leftover after parsing attributes in process `syz.3.819'. [ 72.741248][ T5171] IPVS: starting estimator thread 0... [ 72.832863][ T5831] IPVS: using max 2928 ests per chain, 146400 per kthread [ 73.443058][ T3318] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 73.455145][ T3318] CPU: 0 UID: 0 PID: 3318 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 73.455223][ T3318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 73.455239][ T3318] Call Trace: [ 73.455245][ T3318] [ 73.455254][ T3318] __dump_stack+0x1d/0x30 [ 73.455339][ T3318] dump_stack_lvl+0x95/0xd0 [ 73.455364][ T3318] dump_stack+0x15/0x1b [ 73.455386][ T3318] dump_header+0x80/0x240 [ 73.455455][ T3318] oom_kill_process+0x295/0x350 [ 73.455475][ T3318] out_of_memory+0x97d/0xb80 [ 73.455568][ T3318] try_charge_memcg+0x62e/0xa10 [ 73.455598][ T3318] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 73.455647][ T3318] __swap_cache_prepare_and_add+0x386/0x530 [ 73.455683][ T3318] swap_cache_alloc_folio+0xa2/0x120 [ 73.455712][ T3318] swap_cluster_readahead+0x36b/0x3d0 [ 73.455746][ T3318] swapin_readahead+0xde/0x840 [ 73.455781][ T3318] ? mm_trace_rss_stat+0x1d/0xf0 [ 73.455881][ T3318] ? __rcu_read_unlock+0x33/0x70 [ 73.455970][ T3318] ? __rcu_read_unlock+0x4e/0x70 [ 73.455989][ T3318] ? swap_cache_get_folio+0x26f/0x280 [ 73.456017][ T3318] do_swap_page+0x309/0x2210 [ 73.456105][ T3318] ? css_rstat_updated+0xbb/0x280 [ 73.456188][ T3318] ? __rcu_read_lock+0x36/0x50 [ 73.456203][ T3318] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 73.456226][ T3318] handle_mm_fault+0xb40/0x3020 [ 73.456325][ T3318] ? vma_start_read+0x1c7/0x2c0 [ 73.456378][ T3318] do_user_addr_fault+0x62f/0x1050 [ 73.456409][ T3318] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 73.456503][ T3318] ? trace_page_fault_user+0x1f/0xe0 [ 73.456533][ T3318] exc_page_fault+0x62/0xa0 [ 73.456601][ T3318] asm_exc_page_fault+0x26/0x30 [ 73.456623][ T3318] RIP: 0033:0x7f96c90ba7b7 [ 73.456646][ T3318] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 00 b0 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 ae ed 00 48 01 d1 39 7c 24 [ 73.456677][ T3318] RSP: 002b:00007fff75a84520 EFLAGS: 00010206 [ 73.456697][ T3318] RAX: 0000001b33a24000 RBX: 0000000000000155 RCX: 0000000000011d28 [ 73.456711][ T3318] RDX: 000000000641faf0 RSI: 00007fff75a845b0 RDI: 0000000000000007 [ 73.456726][ T3318] RBP: 00007fff75a8455c R08: 0000000017df11d1 R09: 7fffffffffffffff [ 73.456751][ T3318] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 73.456765][ T3318] R13: 00000000000927c0 R14: 0000000000011cf4 R15: 00007fff75a845b0 [ 73.456783][ T3318] [ 73.456841][ T3318] memory: usage 307200kB, limit 307200kB, failcnt 232 [ 73.701197][ T3318] memory+swap: usage 307400kB, limit 9007199254740988kB, failcnt 0 [ 73.701236][ T3318] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 73.701247][ T3318] Memory cgroup stats for /syz4: [ 73.701417][ T3318] cache 0 [ 73.701424][ T3318] rss 0 [ 73.701429][ T3318] shmem 0 [ 73.701435][ T3318] mapped_file 0 [ 73.701440][ T3318] dirty 0 [ 73.701446][ T3318] writeback 0 [ 73.701452][ T3318] workingset_refault_anon 81 [ 73.701499][ T3318] workingset_refault_file 1 [ 73.701507][ T3318] swap 204800 [ 73.701514][ T3318] swapcached 204800 [ 73.701522][ T3318] pgpgin 36640 [ 73.701575][ T3318] pgpgout 36640 [ 73.701582][ T3318] pgfault 39524 [ 73.701589][ T3318] pgmajfault 53 [ 73.701595][ T3318] inactive_anon 0 [ 73.701600][ T3318] active_anon 0 [ 73.701606][ T3318] inactive_file 0 [ 73.701612][ T3318] active_file 0 [ 73.701618][ T3318] unevictable 0 [ 73.701624][ T3318] hierarchical_memory_limit 314572800 [ 73.701631][ T3318] hierarchical_memsw_limit 9223372036854771712 [ 73.701682][ T3318] total_cache 0 [ 73.701695][ T3318] total_rss 0 [ 73.701702][ T3318] total_shmem 0 [ 73.701710][ T3318] total_mapped_file 0 [ 73.701717][ T3318] total_dirty 0 [ 73.701723][ T3318] total_writeback 0 [ 73.701731][ T3318] total_workingset_refault_anon 81 [ 73.701739][ T3318] total_workingset_refault_file 1 [ 73.701748][ T3318] total_swap 204800 [ 73.701755][ T3318] total_swapcached 204800 [ 73.701763][ T3318] total_pgpgin 36640 [ 73.701770][ T3318] total_pgpgout 36640 [ 73.701850][ T3318] total_pgfault 39524 [ 73.701856][ T3318] total_pgmajfault 53 [ 73.701862][ T3318] total_inactive_anon 0 [ 73.701869][ T3318] total_active_anon 0 [ 73.701875][ T3318] total_inactive_file 0 [ 73.701896][ T3318] total_active_file 0 [ 73.701902][ T3318] total_unevictable 0 [ 73.701909][ T3318] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.826,pid=5819,uid=0 [ 73.702044][ T3318] Memory cgroup out of memory: Killed process 5819 (syz.4.826) total-vm:96340kB, anon-rss:1224kB, file-rss:22532kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 73.742901][ T5820] syz.4.826 (5820) used greatest stack depth: 7008 bytes left [ 74.118054][ T28] kauditd_printk_skb: 454 callbacks suppressed [ 74.118068][ T28] audit: type=1400 audit(1772111586.783:891): avc: denied { connect } for pid=5874 comm="syz.5.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 74.383076][ T28] audit: type=1326 audit(1772111587.043:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5861 comm="syz.0.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95c87ec799 code=0x7fc00000 [ 74.703442][ T28] audit: type=1400 audit(1772111587.363:893): avc: denied { write } for pid=5917 comm="syz.5.860" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 75.702380][ T6014] netlink: 'syz.3.872': attribute type 2 has an invalid length. [ 75.711074][ T6014] netlink: 14 bytes leftover after parsing attributes in process `syz.3.872'. [ 76.344734][ T6039] net_ratelimit: 152 callbacks suppressed [ 76.344758][ T6039] ip6_tunnel: non-ECT from fe80:0000:0000:0000:875a:6505:9ff5:7b00 with DS=0x31 [ 76.360254][ T6039] ip6_tunnel: non-ECT from fe80:0000:0000:0000:875a:6505:9ff5:7b00 with DS=0x31 [ 76.369351][ T6039] ip6_tunnel: non-ECT from fe80:0000:0000:0000:875a:6505:9ff5:7b00 with DS=0x31 [ 76.378520][ T6039] ip6_tunnel: non-ECT from fe80:0000:0000:0000:875a:6505:9ff5:7b00 with DS=0x31 [ 76.387637][ T6039] ip6_tunnel: non-ECT from fe80:0000:0000:0000:875a:6505:9ff5:7b00 with DS=0x31 [ 76.396757][ T6039] ip6_tunnel: non-ECT from fe80:0000:0000:0000:875a:6505:9ff5:7b00 with DS=0x31 [ 76.405890][ T6039] ip6_tunnel: non-ECT from fe80:0000:0000:0000:875a:6505:9ff5:7b00 with DS=0x31 [ 76.415466][ T6039] ip6_tunnel: non-ECT from fe80:0000:0000:0000:875a:6505:9ff5:7b00 with DS=0x31 [ 76.424546][ T6039] ip6_tunnel: non-ECT from fe80:0000:0000:0000:875a:6505:9ff5:7b00 with DS=0x31 [ 76.433620][ T6039] ip6_tunnel: non-ECT from fe80:0000:0000:0000:875a:6505:9ff5:7b00 with DS=0x31 [ 76.789231][ T6041] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.805319][ T6041] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.948943][ T6041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.957415][ T6041] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.007544][ T6048] netlink: 24 bytes leftover after parsing attributes in process `syz.2.892'. [ 77.027784][ T28] audit: type=1400 audit(1772111589.693:894): avc: denied { accept } for pid=6049 comm="syz.3.903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 77.069968][ T6053] netlink: 'syz.4.893': attribute type 2 has an invalid length. [ 77.072778][ T28] audit: type=1400 audit(1772111589.693:895): avc: denied { read } for pid=6049 comm="syz.3.903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 77.084642][ T6053] netlink: 14 bytes leftover after parsing attributes in process `syz.4.893'. [ 77.171888][ T6061] netlink: 24 bytes leftover after parsing attributes in process `syz.3.897'. [ 77.889482][ T28] audit: type=1400 audit(1772111590.553:896): avc: denied { override_creds } for pid=6101 comm="syz.3.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 79.502952][ T6197] netlink: 'syz.3.930': attribute type 1 has an invalid length. [ 79.559108][ T6197] 8021q: adding VLAN 0 to HW filter on device bond2 [ 79.845009][ T6201] bond2: (slave veth5): Enslaving as an active interface with a down link [ 79.938373][ T6206] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 79.946501][ T6206] bond2: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 80.191252][ T6226] syzkaller0: entered promiscuous mode [ 80.217390][ T6226] syzkaller0: entered allmulticast mode [ 80.399590][ T6265] netlink: 24 bytes leftover after parsing attributes in process `syz.4.947'. [ 81.396324][ T28] audit: type=1400 audit(1772111594.063:897): avc: denied { cmd } for pid=6285 comm="syz.5.952" path="socket:[16166]" dev="sockfs" ino=16166 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 81.480896][ T6288] syzkaller0: entered promiscuous mode [ 81.502822][ T6288] syzkaller0: entered allmulticast mode [ 81.665785][ T28] audit: type=1400 audit(1772111594.333:898): avc: denied { accept } for pid=6293 comm="syz.5.956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 81.800116][ T28] audit: type=1400 audit(1772111594.463:899): avc: denied { name_bind } for pid=6300 comm="syz.5.960" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 81.888883][ T6307] random: crng reseeded on system resumption [ 81.895247][ T28] audit: type=1400 audit(1772111594.553:900): avc: denied { write } for pid=6306 comm="syz.4.963" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 81.959004][ T28] audit: type=1400 audit(1772111594.553:901): avc: denied { open } for pid=6306 comm="syz.4.963" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 82.008428][ T28] audit: type=1400 audit(1772111594.663:902): avc: denied { ioctl } for pid=6306 comm="syz.4.963" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 82.033642][ T6308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.961'. [ 82.550536][ T28] audit: type=1400 audit(1772111595.213:903): avc: denied { mounton } for pid=6319 comm="syz.4.965" path="/file0" dev="autofs" ino=16226 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 82.674194][ T6322] xt_l2tp: unknown flags: 10 [ 82.904279][ T6332] netlink: 24 bytes leftover after parsing attributes in process `syz.3.968'. [ 83.026762][ T6332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.968'. [ 83.209141][ T6362] netlink: 12 bytes leftover after parsing attributes in process `syz.3.972'. [ 83.273188][ T6372] netlink: 80 bytes leftover after parsing attributes in process `syz.4.973'. [ 83.361545][ T6381] netlink: 24 bytes leftover after parsing attributes in process `syz.2.985'. [ 83.560007][ T28] audit: type=1326 audit(1772111596.223:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6392 comm="syz.2.975" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f30dacdc799 code=0x0 [ 84.764518][ T28] audit: type=1400 audit(1772111597.433:905): avc: denied { watch watch_reads } for pid=6430 comm="syz.0.991" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 84.795176][ T28] audit: type=1400 audit(1772111597.433:906): avc: denied { execute_no_trans } for pid=6431 comm="syz.2.981" path="/215/file1" dev="tmpfs" ino=1148 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 85.301547][ T6475] syz_tun: entered promiscuous mode [ 85.321368][ T6475] net_ratelimit: 3319 callbacks suppressed [ 85.321385][ T6475] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 86.073995][ T6525] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1003'. [ 86.208252][ T6364] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 87.108261][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 87.108287][ T28] audit: type=1400 audit(1772111599.773:909): avc: denied { bind } for pid=6610 comm="syz.4.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 87.187271][ T6615] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1013'. [ 87.518515][ T28] audit: type=1400 audit(1772111600.183:910): avc: denied { getopt } for pid=6624 comm="syz.0.1020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 87.826479][ T6638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.837370][ T6638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.406943][ T28] audit: type=1400 audit(1772111601.073:911): avc: denied { mounton } for pid=6639 comm="syz.4.1026" path="/172/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 88.461214][ T6644] netlink: 'syz.2.1028': attribute type 12 has an invalid length. [ 88.462784][ T28] audit: type=1326 audit(1772111601.103:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6639 comm="syz.4.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c91ec799 code=0x7ffc0000 [ 88.486388][ T6644] loop2: detected capacity change from 0 to 256 [ 88.557358][ T28] audit: type=1326 audit(1772111601.103:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6639 comm="syz.4.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c91ec799 code=0x7ffc0000 [ 88.638109][ T28] audit: type=1326 audit(1772111601.113:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6639 comm="syz.4.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f96c91ec799 code=0x7ffc0000 [ 88.662084][ T28] audit: type=1326 audit(1772111601.113:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6639 comm="syz.4.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c91ec799 code=0x7ffc0000 [ 88.693862][ T28] audit: type=1326 audit(1772111601.113:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6639 comm="syz.4.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c91ec799 code=0x7ffc0000 [ 88.724253][ T28] audit: type=1326 audit(1772111601.113:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6639 comm="syz.4.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f96c91ec799 code=0x7ffc0000 [ 88.748978][ T6648] ref_ctr increment failed for inode: 0x4a2 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888104e4d7c0 [ 88.761423][ T28] audit: type=1326 audit(1772111601.113:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6639 comm="syz.4.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c91ec799 code=0x7ffc0000 [ 88.787884][ T6654] loop5: detected capacity change from 0 to 512 [ 88.791942][ T6647] uprobe: syz.2.1030:6647 failed to unregister, leaking uprobe [ 88.819312][ T6654] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 88.837657][ T6654] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 88.847782][ T6654] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.1032: bad orphan inode 4 [ 88.862837][ T6654] loop5: lost filesystem error report for type 5 error -117 [ 88.864379][ T6654] EXT4-fs (loop5): 1 orphan inode deleted [ 88.877535][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 88.877552][ C0] EXT4-fs (loop5): initial error at time 1772111601: ext4_orphan_get:1417 [ 88.877587][ C0] EXT4-fs (loop5): last error at time 1772111601: ext4_orphan_get:1417 [ 88.897138][ T6660] loop4: detected capacity change from 0 to 128 [ 88.901459][ T6654] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.978243][ T6660] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 88.995752][ T6658] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 89.056067][ T6660] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.123299][ T3318] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 89.188589][ T6671] loop4: detected capacity change from 0 to 1024 [ 89.197394][ T6671] EXT4-fs: Ignoring removed orlov option [ 89.234081][ T6671] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.268350][ T5295] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.321792][ T6677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1038'. [ 89.399387][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.495187][ T6743] netlink: 'syz.4.1064': attribute type 4 has an invalid length. [ 91.828201][ T6755] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1067'. [ 92.047145][ T6766] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1071'. [ 92.143991][ T6779] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1072'. [ 92.153448][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 92.153463][ T28] audit: type=1400 audit(1772111604.823:933): avc: denied { listen } for pid=6776 comm="syz.4.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 92.189417][ T28] audit: type=1400 audit(1772111604.843:934): avc: denied { accept } for pid=6776 comm="syz.4.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 92.539045][ T28] audit: type=1400 audit(1772111605.203:935): avc: denied { ioctl } for pid=6789 comm="syz.4.1082" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=17286 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 92.631549][ T28] audit: type=1400 audit(1772111605.293:936): avc: denied { accept } for pid=6792 comm="syz.4.1083" lport=50612 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 92.730295][ T6801] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1087'. [ 93.072427][ T28] audit: type=1400 audit(1772111605.733:937): avc: denied { ioctl } for pid=6817 comm="syz.4.1094" path="socket:[17714]" dev="sockfs" ino=17714 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 93.133125][ T6829] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1093'. [ 93.172938][ T28] audit: type=1400 audit(1772111605.773:938): avc: denied { bind } for pid=6817 comm="syz.4.1094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 93.743264][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.095600][ T6851] loop2: detected capacity change from 0 to 512 [ 94.274303][ T6861] netlink: 'syz.2.1109': attribute type 1 has an invalid length. [ 94.313094][ T6861] 8021q: adding VLAN 0 to HW filter on device bond2 [ 94.369834][ T6861] bond2: (slave veth7): Enslaving as an active interface with a down link [ 95.143682][ T6878] loop4: detected capacity change from 0 to 256 [ 95.367203][ T6878] FAT-fs (loop4): Directory bread(block 64) failed [ 95.385513][ T6878] FAT-fs (loop4): Directory bread(block 65) failed [ 95.403308][ T6878] FAT-fs (loop4): Directory bread(block 66) failed [ 95.414167][ T6878] FAT-fs (loop4): Directory bread(block 67) failed [ 95.435473][ T6878] FAT-fs (loop4): Directory bread(block 68) failed [ 95.453602][ T6878] FAT-fs (loop4): Directory bread(block 69) failed [ 95.464866][ T6878] FAT-fs (loop4): Directory bread(block 70) failed [ 95.475634][ T6878] FAT-fs (loop4): Directory bread(block 71) failed [ 95.486699][ T6878] FAT-fs (loop4): Directory bread(block 72) failed [ 95.507443][ T6878] FAT-fs (loop4): Directory bread(block 73) failed [ 95.734136][ T6890] loop4: detected capacity change from 0 to 512 [ 95.752860][ T6890] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 95.822558][ T6890] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 95.841572][ T6890] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.1119: bad orphan inode 4 [ 95.871782][ T6890] loop4: lost filesystem error report for type 5 error -117 [ 95.872018][ T6890] EXT4-fs (loop4): 1 orphan inode deleted [ 95.879358][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 95.879375][ C0] EXT4-fs (loop4): initial error at time 1772111608: ext4_orphan_get:1417 [ 95.879413][ C0] EXT4-fs (loop4): last error at time 1772111608: ext4_orphan_get:1417 [ 95.998637][ T6903] netlink: 'syz.2.1124': attribute type 1 has an invalid length. [ 96.011083][ T6890] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.039817][ T6903] 8021q: adding VLAN 0 to HW filter on device bond3 [ 96.091845][ T6903] bond3: (slave veth9): Enslaving as an active interface with a down link [ 96.124964][ T6903] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 96.147418][ T6903] bond3: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 96.345161][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.349898][ T28] audit: type=1326 audit(1772111609.013:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6923 comm="syz.0.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95c87ec799 code=0x7ffc0000 [ 96.382586][ T28] audit: type=1326 audit(1772111609.043:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6923 comm="syz.0.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95c87ec799 code=0x7ffc0000 [ 96.409572][ T28] audit: type=1326 audit(1772111609.043:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6923 comm="syz.0.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f95c87ec799 code=0x7ffc0000 [ 96.434193][ T28] audit: type=1326 audit(1772111609.043:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6923 comm="syz.0.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95c87ec799 code=0x7ffc0000 [ 96.531130][ T6935] loop2: detected capacity change from 0 to 1024 [ 96.540937][ T6939] netlink: 'syz.4.1140': attribute type 4 has an invalid length. [ 96.542915][ T6935] EXT4-fs: Ignoring removed orlov option [ 96.564489][ T6935] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.587424][ T6939] netlink: 'syz.4.1140': attribute type 4 has an invalid length. [ 96.615454][ T6947] netlink: 'syz.5.1144': attribute type 1 has an invalid length. [ 96.648286][ T6947] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.687823][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.765945][ T6949] bond1: (slave veth3): Enslaving as an active interface with a down link [ 96.777805][ T6947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.786890][ T6947] bond1: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 97.136784][ T6982] netlink: 'syz.2.1159': attribute type 1 has an invalid length. [ 97.197372][ T6982] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 97.207789][ T6982] bond4: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 97.219682][ T6982] bond4: (slave ip6gre1): making interface the new active one [ 97.228859][ T6982] bond4: (slave ip6gre1): Enslaving as an active interface with an up link [ 97.264194][ T6982] bond4: option fail_over_mac: unable to set because the bond device has slaves [ 97.286427][ T6987] bridge1: entered promiscuous mode [ 97.304865][ T6987] bridge1: entered allmulticast mode [ 97.323837][ T6987] team0: Port device bridge1 added [ 97.350140][ T6988] bridge0: port 3(team0) entered blocking state [ 97.362791][ T6988] bridge0: port 3(team0) entered disabled state [ 97.369166][ T6988] team0: entered allmulticast mode [ 97.374520][ T6988] team_slave_0: entered allmulticast mode [ 97.380341][ T6988] team_slave_1: entered allmulticast mode [ 97.391466][ T6988] team0: entered promiscuous mode [ 97.396686][ T6988] team_slave_0: entered promiscuous mode [ 97.402706][ T6988] team_slave_1: entered promiscuous mode [ 97.408965][ T6988] bridge0: port 3(team0) entered blocking state [ 97.415442][ T6988] bridge0: port 3(team0) entered forwarding state [ 97.597773][ T6992] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1162'. [ 98.103918][ T7009] netlink: 'syz.0.1167': attribute type 1 has an invalid length. [ 98.138081][ T7009] 8021q: adding VLAN 0 to HW filter on device bond2 [ 98.210952][ T7009] bond2: (slave veth7): Enslaving as an active interface with a down link [ 98.353551][ T7009] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 98.360967][ T7009] bond2: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 98.383661][ T7017] loop4: detected capacity change from 0 to 512 [ 98.532368][ T7030] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.576561][ T7030] bridge_slave_1: left allmulticast mode [ 98.594274][ T7030] bridge_slave_1: left promiscuous mode [ 98.617161][ T7030] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.647723][ T7030] bridge_slave_1: entered promiscuous mode [ 99.878587][ T7058] loop4: detected capacity change from 0 to 8192 [ 100.113562][ T7074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1196'. [ 100.372437][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 100.372502][ T28] audit: type=1400 audit(1772111613.033:963): avc: denied { setopt } for pid=7082 comm="syz.0.1200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 100.480794][ T7094] loop5: detected capacity change from 0 to 512 [ 100.645326][ T28] audit: type=1400 audit(1772111613.303:964): avc: denied { wake_alarm } for pid=7096 comm="syz.0.1205" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 100.814555][ T28] audit: type=1400 audit(1772111613.463:965): avc: denied { bind } for pid=7102 comm="syz.4.1208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 100.814585][ T7104] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1207'. [ 100.994851][ T7115] netlink: 'syz.5.1214': attribute type 4 has an invalid length. [ 101.040838][ T7115] netlink: 'syz.5.1214': attribute type 4 has an invalid length. [ 101.111449][ T7126] netlink: 'syz.0.1217': attribute type 10 has an invalid length. [ 101.168700][ T28] audit: type=1400 audit(1772111613.833:966): avc: denied { connect } for pid=7127 comm="syz.4.1219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 101.220016][ T28] audit: type=1400 audit(1772111613.853:967): avc: denied { write } for pid=7127 comm="syz.4.1219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 101.273609][ T7135] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1221'. [ 101.480403][ T7148] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1227'. [ 101.612627][ T7159] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.643308][ T7159] bridge_slave_1: left allmulticast mode [ 101.649086][ T7159] bridge_slave_1: left promiscuous mode [ 101.655038][ T7159] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.954198][ T28] audit: type=1400 audit(1772111614.623:968): avc: denied { read write } for pid=7181 comm="syz.2.1241" name="rtc0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 101.997899][ T28] audit: type=1400 audit(1772111614.643:969): avc: denied { open } for pid=7181 comm="syz.2.1241" path="/dev/rtc0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 102.032463][ T7182] netlink: 1311 bytes leftover after parsing attributes in process `syz.2.1241'. [ 102.970019][ T7206] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1250'. [ 103.810398][ T7247] loop4: detected capacity change from 0 to 128 [ 103.900873][ T7252] loop2: detected capacity change from 0 to 512 [ 103.930593][ T7255] netlink: 'syz.4.1269': attribute type 4 has an invalid length. [ 103.957753][ T7252] ------------[ cut here ]------------ [ 103.963265][ T7252] EA inode 11 i_nlink=2 [ 103.963289][ T7252] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.2.1265/7252 [ 103.978265][ T7252] Modules linked in: [ 103.982198][ T7252] CPU: 1 UID: 0 PID: 7252 Comm: syz.2.1265 Not tainted syzkaller #0 PREEMPT(full) [ 103.991620][ T7252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 104.001716][ T7252] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 104.008568][ T7252] Code: b4 5f 99 ff 4c 8d 2d ad ee 5d 05 49 8d 7e 40 e8 34 f1 b5 ff 49 8b 6e 40 4c 89 e7 e8 68 ec b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 ff 39 dd 03 66 66 66 66 66 66 2e [ 104.028332][ T7252] RSP: 0018:ffffc900013a7778 EFLAGS: 00010246 [ 104.034527][ T7252] RAX: ffff8881016b3bf8 RBX: ffff888108712048 RCX: ffffffff81bff598 [ 104.042502][ T7252] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871de430 [ 104.050624][ T7252] RBP: 000000000000000b R08: 0001888108711ffb R09: 0000000000000000 [ 104.050979][ T7255] netlink: 'syz.4.1269': attribute type 4 has an invalid length. [ 104.058686][ T7252] R10: ffffc900013a76a8 R11: 0001c900013a76a8 R12: ffff888108711ff8 [ 104.058716][ T7252] R13: ffffffff871de430 R14: ffff888108711fb0 R15: 0000000000000001 [ 104.082606][ T7252] FS: 00007f30d972f6c0(0000) GS:ffff8882ae9dd000(0000) knlGS:0000000000000000 [ 104.091586][ T7252] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 104.098217][ T7252] CR2: 0000200000c11000 CR3: 0000000125ea6000 CR4: 00000000003506f0 [ 104.106231][ T7252] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 104.114302][ T7252] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 104.122316][ T7252] Call Trace: [ 104.125654][ T7252] [ 104.128679][ T7252] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 104.134620][ T7252] ? errseq_check+0x2c/0x50 [ 104.139302][ T7252] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 104.144856][ T7252] ? ext4_truncate+0x92b/0xb00 [ 104.149639][ T7252] ext4_evict_inode+0xa1f/0xd60 [ 104.154571][ T7252] ? __pfx_ext4_evict_inode+0x10/0x10 [ 104.160084][ T7252] evict+0x2af/0x510 [ 104.164071][ T7252] ? __dquot_initialize+0x146/0x7c0 [ 104.169292][ T7252] iput+0x41a/0x580 [ 104.173306][ T7252] ext4_process_orphan+0x1a9/0x1c0 [ 104.178463][ T7252] ext4_orphan_cleanup+0x6a8/0xa00 [ 104.183631][ T7252] ext4_fill_super+0x3408/0x37c0 [ 104.188760][ T7252] ? set_blocksize+0x14c/0x270 [ 104.193719][ T7252] ? setup_bdev_super+0x30e/0x370 [ 104.198887][ T7252] ? __pfx_ext4_fill_super+0x10/0x10 [ 104.204239][ T7252] get_tree_bdev_flags+0x291/0x300 [ 104.209392][ T7252] ? __pfx_ext4_fill_super+0x10/0x10 [ 104.214734][ T7252] get_tree_bdev+0x1f/0x30 [ 104.219165][ T7252] ext4_get_tree+0x1c/0x30 [ 104.223645][ T7252] vfs_get_tree+0x57/0x1d0 [ 104.228093][ T7252] do_new_mount+0x288/0x8d0 [ 104.232902][ T7252] path_mount+0x4d0/0xbc0 [ 104.237258][ T7252] __se_sys_mount+0x28c/0x2e0 [ 104.241962][ T7252] __x64_sys_mount+0x67/0x80 [ 104.246607][ T7252] x64_sys_call+0x2d61/0x3020 [ 104.251296][ T7252] do_syscall_64+0x12c/0x370 [ 104.255966][ T7252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.261925][ T7252] RIP: 0033:0x7f30dacdda0a [ 104.266468][ T7252] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.286541][ T7252] RSP: 002b:00007f30d972ee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 104.295177][ T7252] RAX: ffffffffffffffda RBX: 00007f30d972eee0 RCX: 00007f30dacdda0a [ 104.303279][ T7252] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f30d972eea0 [ 104.311262][ T7252] RBP: 00002000000009c0 R08: 00007f30d972eee0 R09: 0000000000800718 [ 104.319404][ T7252] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 104.327447][ T7252] R13: 00007f30d972eea0 R14: 000000000000048d R15: 0000200000000200 [ 104.335688][ T7252] [ 104.338735][ T7252] ---[ end trace 0000000000000000 ]--- [ 104.345169][ T7252] EXT4-fs (loop2): 1 orphan inode deleted [ 104.351532][ T7252] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.382364][ T7258] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.389615][ T7258] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.442477][ T7258] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.455263][ T28] audit: type=1400 audit(1772111617.123:970): avc: denied { shutdown } for pid=7267 comm="syz.3.1274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 104.473306][ T7258] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.518141][ T28] audit: type=1400 audit(1772111617.183:971): avc: denied { write } for pid=7273 comm="syz.3.1276" name="file0" dev="tmpfs" ino=1417 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 104.542984][ T28] audit: type=1400 audit(1772111617.203:972): avc: denied { ioctl } for pid=7273 comm="syz.3.1276" path="/270/file0" dev="tmpfs" ino=1417 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 104.586417][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.595929][ T50] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.606711][ T50] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.616350][ T50] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.656815][ T50] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.672880][ T7278] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1278'. [ 104.758931][ T7290] loop2: detected capacity change from 0 to 512 [ 104.781388][ T7290] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 104.790096][ T7290] System zones: 1-12 [ 104.794374][ T7290] EXT4-fs (loop2): orphan cleanup on readonly fs [ 104.801353][ T7290] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 33261: comm syz.2.1284: invalid block [ 104.816711][ T7290] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 104.821541][ T7290] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1284: invalid indirect mapped block 8 (level 2) [ 104.830794][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 104.830811][ C0] EXT4-fs (loop2): initial error at time 1772111617: ext4_get_branch:178: inode 11: block 33261 [ 104.830850][ C0] EXT4-fs (loop2): last error at time 1772111617: ext4_get_branch:178: inode 11: block 33261 [ 104.871374][ T7290] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 104.874411][ T7290] EXT4-fs (loop2): 1 truncate cleaned up [ 104.893226][ T7290] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 105.016564][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.102604][ T7314] loop4: detected capacity change from 0 to 1024 [ 105.119324][ T7314] EXT4-fs warning (device loop4): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 105.147012][ T7314] EXT4-fs (loop4): mount failed [ 105.191578][ T7314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1294'. [ 105.589466][ T7342] loop5: detected capacity change from 0 to 128 [ 105.606234][ T7342] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 105.619319][ T7342] ext4 filesystem being mounted at /118/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 105.637868][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 105.637882][ T28] audit: type=1400 audit(1772111618.303:979): avc: denied { setattr } for pid=7341 comm="syz.5.1314" path="/118/mnt/file1" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 105.835167][ T5295] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.966381][ T7361] loop5: detected capacity change from 0 to 512 [ 105.980086][ T7361] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 106.017420][ T7361] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.043522][ T7361] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.083861][ T7373] netlink: 'syz.0.1318': attribute type 1 has an invalid length. [ 106.092780][ T7373] netlink: 'syz.0.1318': attribute type 4 has an invalid length. [ 106.100506][ T7373] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1318'. [ 106.136301][ T7373] netlink: 'syz.0.1318': attribute type 1 has an invalid length. [ 106.146646][ T7373] netlink: 'syz.0.1318': attribute type 4 has an invalid length. [ 106.154599][ T7373] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1318'. [ 106.183166][ T5295] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.582197][ T28] audit: type=1400 audit(1772111619.243:980): avc: denied { read } for pid=7402 comm="syz.4.1329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 106.640355][ T7406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1329'. [ 106.766529][ T28] audit: type=1400 audit(1772111619.433:981): avc: denied { mounton } for pid=7416 comm="syz.2.1336" path="/file0" dev="ramfs" ino=19724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 106.805172][ T7419] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1337'. [ 106.880510][ T7426] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1340'. [ 107.059946][ T28] audit: type=1400 audit(1772111619.723:982): avc: denied { execute } for pid=7434 comm="syz.5.1344" dev="hugetlbfs" ino=19769 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 107.081726][ T28] audit: type=1400 audit(1772111619.753:983): avc: denied { execute_no_trans } for pid=7434 comm="syz.5.1344" path=2F6D656D66643A202864656C6574656429 dev="hugetlbfs" ino=19769 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 107.993032][ T28] audit: type=1326 audit(1772111620.653:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7456 comm="syz.5.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3814c799 code=0x7ffc0000 [ 108.035812][ T28] audit: type=1326 audit(1772111620.653:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7456 comm="syz.5.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3814c799 code=0x7ffc0000 [ 108.069274][ T28] audit: type=1326 audit(1772111620.663:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7456 comm="syz.5.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f4c3814c799 code=0x7ffc0000 [ 108.094716][ T28] audit: type=1326 audit(1772111620.663:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7456 comm="syz.5.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3814c799 code=0x7ffc0000 [ 108.127937][ T28] audit: type=1326 audit(1772111620.663:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7456 comm="syz.5.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3814c799 code=0x7ffc0000 [ 108.301784][ T7488] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1364'. [ 108.346056][ T7493] capability: warning: `syz.2.1375' uses 32-bit capabilities (legacy support in use) [ 108.462320][ T7500] netlink: 'syz.4.1368': attribute type 27 has an invalid length. [ 108.475284][ T7497] IPv4: Oversized IP packet from 172.20.20.24 [ 108.481519][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 108.487727][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 108.498371][ T7500] gretap1: left allmulticast mode [ 108.503919][ T7500] ipip0: left promiscuous mode [ 108.572947][ T7503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.592245][ T7503] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.598072][ T7502] loop5: detected capacity change from 0 to 512 [ 108.614748][ T7503] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 108.659509][ T7502] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.733164][ T7513] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1372'. [ 108.759554][ T7502] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.807244][ T7502] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 108.834823][ T7517] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1386'. [ 108.890558][ T5295] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.172482][ T7545] loop4: detected capacity change from 0 to 8192 [ 109.417692][ T7572] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.428984][ T7572] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 109.462978][ T7553] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1388'. [ 109.500902][ T7572] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.531155][ T7572] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 109.608089][ T7572] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.620451][ T7572] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 109.667362][ T7581] loop5: detected capacity change from 0 to 1024 [ 109.675813][ T7572] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.699204][ T7572] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 109.700902][ T7581] EXT4-fs (loop5): orphan cleanup on readonly fs [ 109.724706][ T7581] EXT4-fs (loop5): 1 truncate cleaned up [ 109.733188][ T7581] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 109.769013][ T5295] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.804463][ T1933] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 109.812967][ T1933] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 109.828790][ T50] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 109.837173][ T50] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 109.852333][ T50] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 109.861165][ T50] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 109.871855][ T50] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 109.880598][ T50] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 109.935414][ T7589] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.942552][ T7589] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.952844][ T7589] bridge0: entered allmulticast mode [ 109.964891][ T7589] bridge_slave_1: left allmulticast mode [ 109.977601][ T7589] bridge_slave_1: left promiscuous mode [ 109.990154][ T7589] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.998544][ T7589] bridge_slave_0: left allmulticast mode [ 110.004289][ T7589] bridge_slave_0: left promiscuous mode [ 110.010110][ T7589] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.839240][ T7621] __nla_validate_parse: 2 callbacks suppressed [ 110.839253][ T7621] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1413'. [ 110.859677][ T7621] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1413'. [ 110.962783][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 110.962857][ T28] audit: type=1400 audit(1772111623.623:991): avc: denied { ioctl } for pid=7630 comm="syz.4.1422" path="socket:[20704]" dev="sockfs" ino=20704 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 111.022990][ T28] audit: type=1400 audit(1772111623.623:992): avc: denied { bind } for pid=7630 comm="syz.4.1422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 111.815452][ T7667] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1434'. [ 111.825490][ T7667] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1434'. [ 111.973921][ T7667] loop5: detected capacity change from 0 to 1024 [ 112.049625][ T7667] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 112.082981][ T7667] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.153685][ T7681] loop2: detected capacity change from 0 to 512 [ 112.224148][ T7681] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.238444][ T7681] ext4 filesystem being mounted at /317/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.616170][ T5295] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 112.632914][ T7681] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 112.698007][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.736790][ T7693] loop5: detected capacity change from 0 to 1024 [ 112.759092][ T7693] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 112.783059][ T7693] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.896795][ T7699] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1446'. [ 112.979827][ T5295] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 113.214528][ T7710] loop4: detected capacity change from 0 to 2048 [ 113.279319][ T7710] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.305737][ T7710] ext4 filesystem being mounted at /267/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.390803][ T7727] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1458'. [ 113.840429][ T7752] loop2: detected capacity change from 0 to 512 [ 113.929049][ T4251] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:14: bg 0: block 345: padding at end of block bitmap is not set [ 113.954524][ T4251] EXT4-fs (loop4): Remounting filesystem read-only [ 114.003233][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.193890][ T28] audit: type=1400 audit(1772111626.853:993): avc: denied { connect } for pid=7758 comm="syz.5.1479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 114.237049][ T28] audit: type=1400 audit(1772111626.863:994): avc: denied { read } for pid=7758 comm="syz.5.1479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 114.366842][ T28] audit: type=1400 audit(1772111627.033:995): avc: denied { append } for pid=7771 comm="syz.5.1474" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 114.380738][ T7775] loop2: detected capacity change from 0 to 1024 [ 114.405221][ T7777] batadv_slave_1: entered promiscuous mode [ 114.411713][ T7777] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1476'. [ 114.433174][ T7777] batadv_slave_1 (unregistering): left promiscuous mode [ 114.440213][ T7777] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.453261][ T7775] EXT4-fs: Ignoring removed nobh option [ 114.505302][ T7775] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 114.517796][ T7775] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #11: comm syz.2.1473: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 114.537571][ T7775] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 114.537728][ T7775] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1473: couldn't read orphan inode 11 (err -117) [ 114.546940][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 114.546963][ C0] EXT4-fs (loop2): initial error at time 1772111627: ext4_ext_check_inode:521: inode 11 [ 114.547006][ C0] EXT4-fs (loop2): last error at time 1772111627: ext4_ext_check_inode:521: inode 11 [ 114.585435][ T7775] loop2: lost filesystem error report for type 5 error -117 [ 114.585999][ T7775] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.810313][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.884949][ T7787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1481'. [ 114.929760][ T7787] team0: entered promiscuous mode [ 114.934928][ T7787] team0: entered allmulticast mode [ 115.010106][ T7795] loop4: detected capacity change from 0 to 2048 [ 115.034591][ T7795] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.076310][ T28] audit: type=1400 audit(1772111627.743:996): avc: denied { create } for pid=7794 comm="syz.4.1484" name="control" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 115.099318][ T28] audit: type=1400 audit(1772111627.763:997): avc: denied { watch watch_reads } for pid=7794 comm="syz.4.1484" path="/275/file0/control" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 115.146695][ T7804] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1488'. [ 115.174258][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.334723][ T7821] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.367374][ T7821] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.531217][ T7847] loop4: detected capacity change from 0 to 1024 [ 116.543806][ T7847] EXT4-fs: Ignoring removed nobh option [ 116.557380][ T7847] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 116.569332][ T7847] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #11: comm syz.4.1507: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 116.588341][ T7847] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 116.588489][ T7847] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1507: couldn't read orphan inode 11 (err -117) [ 116.597701][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 116.597722][ C0] EXT4-fs (loop4): initial error at time 1772111629: ext4_ext_check_inode:521: inode 11 [ 116.597754][ C0] EXT4-fs (loop4): last error at time 1772111629: ext4_ext_check_inode:521: inode 11 [ 116.636327][ T7847] loop4: lost filesystem error report for type 5 error -117 [ 116.636852][ T7847] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.711591][ T7841] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1504'. [ 116.780652][ T4246] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 116.804046][ T4246] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 116.820758][ T28] audit: type=1400 audit(1772111629.473:998): avc: denied { bind } for pid=7855 comm="syz.3.1519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 116.841145][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.843086][ T4246] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 116.890249][ T4246] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 116.911467][ T2053] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 116.920155][ T2053] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 116.943163][ T2053] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 116.954815][ T28] audit: type=1400 audit(1772111629.623:999): avc: denied { open } for pid=7865 comm="syz.0.1513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 116.975700][ T2053] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 117.018545][ T28] audit: type=1400 audit(1772111629.643:1000): avc: denied { kernel } for pid=7865 comm="syz.0.1513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 117.075156][ T28] audit: type=1400 audit(1772111629.653:1001): avc: denied { write } for pid=7865 comm="syz.0.1513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 117.541058][ T7875] loop2: detected capacity change from 0 to 2048 [ 117.561251][ T28] audit: type=1400 audit(1772111630.223:1002): avc: denied { setopt } for pid=7873 comm="syz.0.1526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 117.620803][ T7875] loop2: p2 < > p4 [ 117.643428][ T7875] loop2: p4 size 262144 extends beyond EOD, truncated [ 117.676111][ T28] audit: type=1400 audit(1772111630.343:1003): avc: denied { write } for pid=7874 comm="syz.2.1516" name="loop2p2" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 117.769228][ T28] audit: type=1400 audit(1772111630.343:1004): avc: denied { open } for pid=7874 comm="syz.2.1516" path="/dev/loop2p2" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 117.856923][ T28] audit: type=1400 audit(1772111630.393:1005): avc: denied { read } for pid=7874 comm="syz.2.1516" name="loop2p4" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 118.143744][ T28] audit: type=1400 audit(1772111630.803:1006): avc: denied { name_bind 0x1000000 } for pid=7906 comm="syz.4.1531" path="socket:[23706]" dev="sockfs" ino=23706 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 118.324544][ T28] audit: type=1400 audit(1772111630.993:1007): avc: denied { tracepoint } for pid=7922 comm="syz.3.1538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 118.381374][ T7925] loop4: detected capacity change from 0 to 1024 [ 118.414686][ T7925] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 118.430303][ T7925] ext4 filesystem being mounted at /285/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.767347][ T7941] bridge0: port 3(team0) entered disabled state [ 118.773728][ T7941] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.781398][ T7941] bridge0: entered allmulticast mode [ 118.804011][ T7941] team0: left allmulticast mode [ 118.809082][ T7941] team_slave_0: left allmulticast mode [ 118.815088][ T7941] team_slave_1: left allmulticast mode [ 118.823318][ T7941] team0: left promiscuous mode [ 118.843188][ T7941] team_slave_0: left promiscuous mode [ 118.861464][ T7941] team_slave_1: left promiscuous mode [ 118.869603][ T7941] bridge0: port 3(team0) entered disabled state [ 118.890428][ T7941] bridge_slave_0: left allmulticast mode [ 118.906060][ T7941] bridge_slave_0: left promiscuous mode [ 118.917398][ T7941] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.007220][ T7956] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1551'. [ 119.056313][ T7956] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1551'. [ 119.332887][ T7970] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1557'. [ 119.354121][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 119.467423][ T7984] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1563'. [ 121.093630][ T3985] Process accounting resumed [ 121.493183][ T8106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1584'. [ 121.947131][ T8117] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.954350][ T8117] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.976171][ T8117] bridge0: entered allmulticast mode [ 122.002322][ T8120] bridge_slave_1: left allmulticast mode [ 122.008123][ T8120] bridge_slave_1: left promiscuous mode [ 122.014000][ T8120] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.022771][ T8120] bridge_slave_0: left allmulticast mode [ 122.028655][ T8120] bridge_slave_0: left promiscuous mode [ 122.035070][ T8120] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.133988][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 122.134001][ T28] audit: type=1400 audit(1772111634.803:1010): avc: denied { cpu } for pid=8124 comm="syz.3.1590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 122.138122][ T8127] uprobe: syz.3.1590:8127 failed to unregister, leaking uprobe [ 122.213594][ T8129] loop5: detected capacity change from 0 to 256 [ 122.227465][ T8129] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 122.271417][ T8134] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 122.308601][ T28] audit: type=1326 audit(1772111634.973:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8141 comm="syz.2.1596" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f30dacdc799 code=0x0 [ 122.353103][ T3985] Process accounting resumed [ 122.357860][ T3985] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779264) [ 122.366098][ T3985] FAT-fs (loop5): Filesystem has been set read-only [ 122.674274][ T8159] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1604'. [ 122.747281][ T8162] uprobe: syz.4.1605:8162 failed to unregister, leaking uprobe [ 122.954074][ T8179] netlink: 'syz.5.1613': attribute type 1 has an invalid length. [ 122.986019][ T8179] 8021q: adding VLAN 0 to HW filter on device bond2 [ 123.005006][ T8181] vlan2: entered allmulticast mode [ 123.010216][ T8181] macsec0: entered allmulticast mode [ 123.025815][ T8179] bond2: (slave geneve2): making interface the new active one [ 123.034950][ T8179] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 123.155088][ T28] audit: type=1400 audit(1772111635.793:1012): avc: denied { read } for pid=8192 comm="syz.3.1619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 123.285615][ T8200] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1622'. [ 123.489156][ T8220] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1630'. [ 123.719202][ T28] audit: type=1326 audit(1772111636.383:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8224 comm="syz.2.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30dacdc799 code=0x7fc00000 [ 123.745146][ T8233] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1636'. [ 124.246342][ T8251] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1642'. [ 124.277556][ T8251] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1642'. [ 124.450522][ T28] audit: type=1326 audit(1772111637.113:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8224 comm="syz.2.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f30dacdc799 code=0x7fc00000 [ 124.513820][ T8258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1645'. [ 124.643166][ T8266] netlink: 'syz.4.1649': attribute type 12 has an invalid length. [ 124.664015][ T8266] netlink: 'syz.4.1649': attribute type 29 has an invalid length. [ 124.684917][ T8266] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1649'. [ 124.703308][ T8266] netlink: 'syz.4.1649': attribute type 3 has an invalid length. [ 124.734768][ T28] audit: type=1400 audit(1772111637.403:1015): avc: denied { watch watch_reads } for pid=8271 comm="syz.3.1652" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 124.867074][ T8285] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1657'. [ 124.919024][ T8291] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.930087][ T8291] bridge0: entered allmulticast mode [ 124.949357][ T8291] bridge_slave_0: left allmulticast mode [ 124.988269][ T8291] bridge_slave_0: left promiscuous mode [ 125.102679][ T8291] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.156604][ T8298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1662'. [ 126.551077][ T8353] 8021q: adding VLAN 0 to HW filter on device bond4 [ 126.565104][ T8353] bond3: (slave bond4): Enslaving as an active interface with an up link [ 126.575875][ T8353] 8021q: adding VLAN 0 to HW filter on device bond3 [ 128.045374][ T8416] __nla_validate_parse: 7 callbacks suppressed [ 128.045391][ T8416] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1709'. [ 128.061738][ T8416] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1709'. [ 128.289181][ T8430] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1715'. [ 129.077291][ T8446] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1722'. [ 129.201981][ T8446] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1722'. [ 129.437937][ T8434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.520974][ T8434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.003764][ T8434] bond0: left promiscuous mode [ 130.008578][ T8434] bond_slave_0: left promiscuous mode [ 130.157925][ T8465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1729'. [ 131.181966][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.204803][ T8490] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1738'. [ 131.220110][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.221851][ T8490] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1738'. [ 131.242266][ T8492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1739'. [ 131.259845][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.277590][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.288943][ T12] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.302771][ T8492] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1739'. [ 131.312141][ T12] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.331899][ T12] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.341437][ T12] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.623397][ T8498] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.654059][ T8498] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.130844][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.157480][ T8535] loop4: detected capacity change from 0 to 2048 [ 133.164830][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 133.182867][ T58] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.199462][ T8535] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.210956][ T58] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 133.242297][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.248925][ T58] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.279439][ T58] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 133.307291][ T58] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.324401][ T58] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 133.368691][ T8550] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1758'. [ 133.390149][ T8553] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1760'. [ 133.440306][ T8533] loop2: detected capacity change from 0 to 2048 [ 133.511462][ T8533] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.568065][ T8533] ext4 filesystem being mounted at /379/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.753818][ T8590] tipc: Failed to obtain node identity [ 133.774676][ T8590] tipc: Enabling of bearer rejected, failed to enable media [ 134.050645][ T12] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 345: padding at end of block bitmap is not set [ 134.051478][ T28] audit: type=1326 audit(1772111646.713:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8593 comm="syz.4.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c91ec799 code=0x7fc00000 [ 134.117603][ T12] EXT4-fs (loop2): Remounting filesystem read-only [ 134.155025][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.473599][ T8615] syzkaller0: entered promiscuous mode [ 134.479097][ T8615] syzkaller0: entered allmulticast mode [ 135.329796][ T8645] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1795'. [ 135.414112][ T8651] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1795'. [ 135.483787][ T8654] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 135.504829][ T8656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1800'. [ 135.554514][ T8656] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1800'. [ 135.586452][ T8656] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1800'. [ 135.853170][ T28] audit: type=1400 audit(1772111648.523:1017): avc: denied { connect } for pid=8673 comm="syz.0.1807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 136.289428][ T28] audit: type=1326 audit(1772111648.953:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8593 comm="syz.4.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f96c91e6517 code=0x7fc00000 [ 136.395873][ T28] audit: type=1400 audit(1772111649.063:1019): avc: denied { setopt } for pid=8707 comm="syz.3.1821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 136.551192][ T8717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1824'. [ 136.582860][ T8717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1824'. [ 137.228583][ T8725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1828'. [ 137.252591][ T8729] loop4: detected capacity change from 0 to 512 [ 137.275882][ T8729] EXT4-fs: Ignoring removed nobh option [ 137.290340][ T8729] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 137.319528][ T8729] EXT4-fs (loop4): 1 truncate cleaned up [ 137.339772][ T8729] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.557672][ T28] audit: type=1400 audit(1772111650.223:1020): avc: denied { getopt } for pid=8759 comm="syz.2.1844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 138.270679][ T8786] netlink: 'syz.2.1857': attribute type 2 has an invalid length. [ 138.280143][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.282800][ T8786] netlink: 'syz.2.1857': attribute type 8 has an invalid length. [ 138.453056][ T8803] netlink: 'syz.2.1863': attribute type 10 has an invalid length. [ 138.466457][ T8803] geneve1: entered promiscuous mode [ 138.483887][ T8803] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 138.510564][ T274] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.545328][ T274] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.596231][ T274] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.633443][ T274] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.662793][ T8810] loop2: detected capacity change from 0 to 512 [ 138.679046][ T8810] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 138.708295][ T8810] EXT4-fs (loop2): 1 truncate cleaned up [ 138.737332][ T8810] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.764331][ T8818] __nla_validate_parse: 4 callbacks suppressed [ 138.764346][ T8818] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1867'. [ 138.904934][ T8821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1868'. [ 138.915737][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.056822][ T8832] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1873'. [ 139.073146][ T8832] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1873'. [ 139.094256][ T8834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1874'. [ 139.883990][ T8859] netlink: 'syz.4.1885': attribute type 2 has an invalid length. [ 139.891946][ T8859] netlink: 'syz.4.1885': attribute type 8 has an invalid length. [ 139.901728][ T8859] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1885'. [ 139.925459][ T8862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1884'. [ 139.999315][ T28] audit: type=1400 audit(1772111652.663:1021): avc: denied { module_load } for pid=8867 comm="syz.2.1888" path=2F6D656D66643A20C736BE918D183229219A25A2D238D606070EFCFE128F2613AE254054A3B03E5CECA9F951403641108C6E7C202864656C6574656429 dev="hugetlbfs" ino=25997 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=system permissive=1 [ 140.076072][ T8868] Invalid ELF header magic: != ELF [ 140.734085][ T8901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1900'. [ 141.052195][ T8916] netem: incorrect ge model size [ 141.057354][ T8916] netem: change failed [ 141.103145][ T8920] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1912'. [ 141.153661][ T8924] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1914'. [ 141.511090][ T28] audit: type=1400 audit(1772111654.173:1022): avc: denied { setopt } for pid=8942 comm="syz.0.1922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 141.632544][ T8949] loop2: detected capacity change from 0 to 512 [ 141.641798][ T8949] EXT4-fs: Ignoring removed nobh option [ 141.669089][ T8949] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 141.684811][ T8949] EXT4-fs (loop2): 1 truncate cleaned up [ 141.691682][ T8949] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.584873][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.720376][ T28] audit: type=1400 audit(1772111655.383:1023): avc: denied { append } for pid=8997 comm="syz.2.1946" name="mISDNtimer" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 143.879752][ T9039] netlink: 'syz.3.1963': attribute type 1 has an invalid length. [ 143.984183][ T9039] 8021q: adding VLAN 0 to HW filter on device bond3 [ 144.145876][ T9044] bond3: (slave ip6erspan0): making interface the new active one [ 144.201970][ T9044] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 144.401552][ T9058] netlink: 'syz.5.1968': attribute type 1 has an invalid length. [ 144.449732][ T9058] __nla_validate_parse: 4 callbacks suppressed [ 144.449762][ T9058] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1968'. [ 144.473121][ T9058] bond3: entered promiscuous mode [ 144.478296][ T9058] bond3: entered allmulticast mode [ 144.483841][ T9058] 8021q: adding VLAN 0 to HW filter on device bond3 [ 144.542667][ T9074] SELinux: Context system_u:object_r:udev_helper_exec_t:s0 is not valid (left unmapped). [ 144.563868][ T28] audit: type=1400 audit(1772111657.203:1024): avc: denied { relabelfrom } for pid=9072 comm="syz.5.1974" name="SCTPv6" dev="sockfs" ino=28227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 144.619711][ T28] audit: type=1400 audit(1772111657.233:1025): avc: denied { relabelto } for pid=9072 comm="syz.5.1974" name="SCTPv6" dev="sockfs" ino=28227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 trawcon="system_u:object_r:udev_helper_exec_t:s0" [ 145.355593][ T9103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1986'. [ 145.423144][ T9108] loop4: detected capacity change from 0 to 256 [ 145.508640][ T9112] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.1990'. [ 145.752398][ T9120] wireguard0: entered promiscuous mode [ 145.758404][ T9120] wireguard0: entered allmulticast mode [ 146.369370][ T9140] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2001'. [ 146.387928][ T9140] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2001'. [ 146.418899][ T9140] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2001'. [ 146.500097][ T9153] netlink: 'syz.5.2006': attribute type 1 has an invalid length. [ 146.520957][ T9153] 8021q: adding VLAN 0 to HW filter on device bond4 [ 146.539660][ T9153] bond4: (slave ip6erspan0): making interface the new active one [ 146.549026][ T9153] bond4: (slave ip6erspan0): Enslaving as an active interface with an up link [ 146.673177][ T9162] IPv6: NLM_F_CREATE should be specified when creating new route [ 146.756263][ T9164] netlink: 204 bytes leftover after parsing attributes in process `syz.5.2011'. [ 146.824258][ T9166] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2012'. [ 147.326573][ T9174] netlink: 'syz.4.2015': attribute type 1 has an invalid length. [ 147.577766][ T9189] netlink: 'syz.2.2018': attribute type 1 has an invalid length. [ 147.656793][ T9189] 8021q: adding VLAN 0 to HW filter on device bond5 [ 148.456565][ T9228] netlink: 'syz.4.2036': attribute type 1 has an invalid length. [ 148.497377][ T9228] 8021q: adding VLAN 0 to HW filter on device bond2 [ 148.675919][ T9228] bond2: (slave ip6erspan0): making interface the new active one [ 148.698667][ T9228] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 149.308314][ T9242] netlink: 'syz.4.2040': attribute type 1 has an invalid length. [ 149.339625][ T9242] bond3: entered promiscuous mode [ 149.352778][ T9242] bond3: entered allmulticast mode [ 149.368400][ T9242] 8021q: adding VLAN 0 to HW filter on device bond3 [ 149.387855][ T9242] macvlan2: entered promiscuous mode [ 149.394755][ T9250] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2053'. [ 149.404271][ T9242] macvlan2: entered allmulticast mode [ 149.431436][ T9242] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 150.783469][ T9254] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2045'. [ 151.079541][ T9294] netlink: 'syz.2.2059': attribute type 4 has an invalid length. [ 151.120273][ T9294] netlink: 'syz.2.2059': attribute type 4 has an invalid length. [ 151.169878][ T28] audit: type=1400 audit(1772111663.833:1026): avc: denied { append } for pid=9307 comm="syz.3.2061" name="rt_cache" dev="proc" ino=4026532775 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 151.217749][ T274] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.232120][ T274] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.254876][ T274] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.264888][ T274] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.781894][ T28] audit: type=1400 audit(1772111664.403:1027): avc: denied { read } for pid=9383 comm="syz.2.2066" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 151.804953][ T9384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2066'. [ 151.841747][ T28] audit: type=1400 audit(1772111664.403:1028): avc: denied { open } for pid=9383 comm="syz.2.2066" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 151.997205][ T9410] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2068'. [ 152.294709][ T9421] netlink: 'syz.5.2075': attribute type 4 has an invalid length. [ 152.323588][ T9421] netlink: 'syz.5.2075': attribute type 4 has an invalid length. [ 152.586577][ T9438] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2083'. [ 153.432470][ T9464] syz_tun: entered allmulticast mode [ 153.464505][ T9466] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2095'. [ 153.479974][ T9462] loop4: detected capacity change from 0 to 4096 [ 153.516281][ T58] ================================================================== [ 153.524391][ T58] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 153.531686][ T58] [ 153.534081][ T58] write to 0xffff88811b740c90 of 4 bytes by task 2053 on cpu 1: [ 153.541707][ T58] touch_atime+0x1d7/0x330 [ 153.546120][ T58] shmem_file_read_iter+0x477/0x540 [ 153.551313][ T58] lo_rw_aio+0x67d/0x730 [ 153.555545][ T58] loop_process_work+0x56c/0xac0 [ 153.560471][ T58] loop_workfn+0x31/0x40 [ 153.564703][ T58] process_scheduled_works+0x4de/0x9e0 [ 153.570156][ T58] worker_thread+0x581/0x770 [ 153.574873][ T58] kthread+0x22a/0x280 [ 153.578932][ T58] ret_from_fork+0x150/0x360 [ 153.583529][ T58] ret_from_fork_asm+0x1a/0x30 [ 153.588288][ T58] [ 153.590600][ T58] read to 0xffff88811b740c90 of 4 bytes by task 58 on cpu 0: [ 153.598041][ T58] atime_needs_update+0x25f/0x3e0 [ 153.603063][ T58] touch_atime+0x4a/0x330 [ 153.607382][ T58] shmem_file_read_iter+0x477/0x540 [ 153.612577][ T58] lo_rw_aio+0x67d/0x730 [ 153.616813][ T58] loop_process_work+0x56c/0xac0 [ 153.621740][ T58] loop_rootcg_workfn+0x22/0x30 [ 153.626585][ T58] process_scheduled_works+0x4de/0x9e0 [ 153.632067][ T58] worker_thread+0x581/0x770 [ 153.636652][ T58] kthread+0x22a/0x280 [ 153.640713][ T58] ret_from_fork+0x150/0x360 [ 153.645304][ T58] ret_from_fork_asm+0x1a/0x30 [ 153.650064][ T58] [ 153.652375][ T58] value changed: 0x0a57f7f3 -> 0x0af08e74 [ 153.658074][ T58] [ 153.660382][ T58] Reported by Kernel Concurrency Sanitizer on: [ 153.666542][ T58] CPU: 0 UID: 0 PID: 58 Comm: kworker/u8:4 Tainted: G W syzkaller #0 PREEMPT(full) [ 153.677387][ T58] Tainted: [W]=WARN [ 153.681174][ T58] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 153.691239][ T58] Workqueue: loop4 loop_rootcg_workfn [ 153.696607][ T58] ================================================================== [ 153.784215][ T9462] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.826671][ T3318] EXT4-fs error (device loop4): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 153.832882][ T28] audit: type=1400 audit(1772111666.493:1029): avc: denied { remove_name } for pid=3318 comm="syz-executor" name="lost+found" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 153.862513][ T3318] EXT4-fs error (device loop4): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 153.890388][ T28] audit: type=1400 audit(1772111666.493:1030): avc: denied { rmdir } for pid=3318 comm="syz-executor" name="lost+found" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 153.916476][ T28] audit: type=1400 audit(1772111666.493:1031): avc: denied { unlink } for pid=3318 comm="syz-executor" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 154.066309][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.169953][ T58] bridge_slave_1: left allmulticast mode [ 154.175993][ T58] bridge_slave_1: left promiscuous mode [ 154.182008][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.193328][ T58] bridge_slave_0: left allmulticast mode [ 154.199075][ T58] bridge_slave_0: left promiscuous mode [ 154.204953][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.221793][ T58] bond2 (unregistering): (slave ip6erspan0): Releasing active interface [ 154.251013][ T58] bond1 (unregistering): (slave gretap1): Releasing active interface [ 154.484596][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.494364][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.503561][ T58] bond0 (unregistering): Released all slaves [ 154.511409][ T58] bond1 (unregistering): Released all slaves [ 154.519782][ T58] bond2 (unregistering): Released all slaves [ 154.528302][ T58] bond3 (unregistering): Released all slaves [ 154.557982][ T58] hsr_slave_0: left promiscuous mode [ 154.576215][ T58] hsr_slave_1: left promiscuous mode [ 154.592869][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.687902][ T58] team0 (unregistering): Port device team_slave_1 removed [ 154.700979][ T58] team0 (unregistering): Port device team_slave_0 removed [ 154.935290][ T58] IPVS: stop unused estimator thread 0...