last executing test programs: 361.305803ms ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(&(0x7f0000000180)=@filename='./dev/sda1\x00', &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000200)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000240)='./mnt\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt\x00', 0x0, 0x21) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000000)=@v2={0x2, @aes128, 0x4, '\x00', @d}) 358.572713ms ago: executing program 3 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat(r0, &(0x7f0000000000)='./proc/thread-self/fail-nth\x00', 0x200803, 0x100) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000"], 0x0, 0x80}, 0x28) 340.761465ms ago: executing program 1 (id=2): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ac0)={0xffffffffffffffff, 0x0, 0xd, 0x0, &(0x7f0000000b40)='\x00'/13, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x126b, &(0x7f0000000100)={0x0, 0x72e0, 0x0, 0x40000, 0x3a8}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x20) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0) lseek(r1, 0x3, 0x3) write(r1, 0x0, 0x0) 307.484479ms ago: executing program 3 (id=6): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x438, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x368, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/net/xt_recent/syz0\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000a00)={0x2020}, 0x2020) 302.101329ms ago: executing program 0 (id=7): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x1c0002, 0x0) write$vga_arbiter(r0, &(0x7f0000000200)=@other={'unlock', ' ', 'io+mem'}, 0xe) 270.830263ms ago: executing program 1 (id=8): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r2, r0, 0x16, 0x0, @void}, 0x10) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x11, 0x64, &(0x7f0000000400)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x168, 0x300, 0x0, 0x268, 0x268, 0x398, 0x398, 0x398, 0x398, 0x398, 0x8000000, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x6, @empty, 0x100, 0x9, [0x2d, 0x12, 0x2, 0x17, 0x1b, 0x30, 0x1e, 0x3b, 0x2b, 0x31, 0x3c, 0x0, 0x36, 0x34, 0xb, 0x33], 0x1, 0x6, 0x338}}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x1a}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x43}, 0xffffff00, 0xff, 'ipvlan1\x00', 'xfrm0\x00', {}, {0xff}, 0x1, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x2, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 267.909813ms ago: executing program 0 (id=9): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001c40)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000001c0)=0x200000000) r1 = dup2(r0, r0) preadv(r1, &(0x7f00000018c0)=[{0x0}, {&(0x7f0000000280)=""/205, 0x48}], 0x2, 0xffff, 0x9) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000003c0)=0x2) 158.100024ms ago: executing program 1 (id=10): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000200)={0x11, 0x16, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x57, &(0x7f0000000140)={0x0, 0x18}}, 0x20000040) write(r0, &(0x7f0000000000)="01", 0x1) 123.824447ms ago: executing program 0 (id=11): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000240)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xef-\xa6m\xa1\xc4\xb5{\xf2\\\x8d[7k~\x04\x03~K\xfbP\x84=\xfa\x81\x8c\x1et\x10', 0x0) pwrite64(r0, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) lseek(r0, 0x0, 0x4) sendfile(r0, r0, 0x0, 0x7fa) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x4) write(r1, &(0x7f00000002c0)='0', 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040)) timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_io_uring_setup(0x141a, &(0x7f0000000140)={0x0, 0xfffffffe, 0x2, 0x2, 0x3af}, &(0x7f0000000200)=0x0, &(0x7f0000000300)=0x0, 0x0) syz_io_uring_modify_offsets$generic(r3, r4, 0x2c, 0x1000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x880cc2, 0x20) 122.587427ms ago: executing program 3 (id=12): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000440)='sysfs\x00', 0x800040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./file0\x00', 0x0) mount$bind(&(0x7f0000001240)='.\x00', &(0x7f0000001280)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(0x0, &(0x7f00000012c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000001300)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f0000001340)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r0, &(0x7f0000001380)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000013c0)='./file0\x00', 0x152) 112.882329ms ago: executing program 1 (id=13): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)={{0x80e3000, 0x3000, 0x8, 0xd, 0x1, 0x2, 0x4d, 0x5, 0x0, 0x2e, 0x19}, {0x5000, 0xfec30003, 0xf, 0x2, 0x3e, 0x9, 0x7f, 0x7, 0x1, 0x5, 0x3}, {0x1000, 0x4000, 0xd, 0x3, 0x1, 0x0, 0x3, 0x60, 0x0, 0xa7, 0x3}, {0x8000000, 0x10000, 0xa, 0x6, 0x4, 0x2, 0x1, 0xf8, 0x9, 0x9, 0xf}, {0x60000, 0x70000, 0xc, 0x2, 0x15, 0x6, 0xab, 0x7c, 0x1, 0x83, 0xf7, 0x3}, {0x1000, 0xdddd1000, 0x8, 0x49, 0xb1, 0x8, 0x7, 0x9, 0x9, 0x13, 0x8, 0x10}, {0xeeee8000, 0x1, 0x9, 0x5, 0x0, 0x4, 0x4, 0x3, 0x3, 0x84, 0x3, 0x76}, {0xffffffff, 0xeeef0000, 0xc, 0x5, 0xf, 0x7, 0x4, 0xe2, 0x2, 0x8, 0xf0, 0x7}, {0x0, 0x802f}, {0x1, 0xfffd}, 0xc0000025, 0x0, 0x0, 0x2024, 0x7, 0x0, 0x50000, [0x7, 0xb, 0x60, 0x4132]}) 15.968159ms ago: executing program 4 (id=5): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001b00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000002100)={0xe, 0x6, &(0x7f00000021c0)=ANY=[@ANYBLOB="b702000001000000b703000000000000b7040000000000008500000032000000b70000000100000095"], &(0x7f0000002200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002240)={@map=r2, r3, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000002280)={r2, &(0x7f00000022c0), &(0x7f0000002300)=@tcp=r0}, 0x20) sendto(r1, &(0x7f0000002340)="01", 0x1, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=3): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[], 0x1, 0x287, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x1c9042, 0x224) io_setup(0x20fe, &(0x7f0000000640)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x80342, 0x168) io_submit(r1, 0x3, &(0x7f0000000680)=[&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000700)='p', 0x8200, 0x600}]) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.160' (ED25519) to the list of known hosts. [ 21.168055][ T28] audit: type=1400 audit(1793432061.653:64): avc: denied { mounton } for pid=280 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.169158][ T280] cgroup: Unknown subsys name 'net' [ 21.190768][ T28] audit: type=1400 audit(1793432061.653:65): avc: denied { mount } for pid=280 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.218025][ T28] audit: type=1400 audit(1793432061.683:66): avc: denied { unmount } for pid=280 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.218166][ T280] cgroup: Unknown subsys name 'devices' [ 21.360586][ T280] cgroup: Unknown subsys name 'hugetlb' [ 21.366190][ T280] cgroup: Unknown subsys name 'rlimit' [ 21.468217][ T28] audit: type=1400 audit(1793432061.953:67): avc: denied { setattr } for pid=280 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.491416][ T28] audit: type=1400 audit(1793432061.953:68): avc: denied { mounton } for pid=280 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.516489][ T28] audit: type=1400 audit(1793432061.953:69): avc: denied { mount } for pid=280 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.523966][ T282] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 21.549332][ T28] audit: type=1400 audit(1793432062.043:70): avc: denied { relabelto } for pid=282 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.574844][ T28] audit: type=1400 audit(1793432062.043:71): avc: denied { write } for pid=282 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.629920][ T28] audit: type=1400 audit(1793432062.123:72): avc: denied { read } for pid=280 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.655601][ T28] audit: type=1400 audit(1793432062.123:73): avc: denied { open } for pid=280 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.655652][ T280] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.802593][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.809751][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.817159][ T288] device bridge_slave_0 entered promiscuous mode [ 22.824261][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.831604][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.839221][ T288] device bridge_slave_1 entered promiscuous mode [ 22.888625][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.896019][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.903678][ T289] device bridge_slave_0 entered promiscuous mode [ 22.928161][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.935289][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.942737][ T289] device bridge_slave_1 entered promiscuous mode [ 22.970377][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.977465][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.984894][ T290] device bridge_slave_0 entered promiscuous mode [ 22.995026][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.002230][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.009660][ T290] device bridge_slave_1 entered promiscuous mode [ 23.043859][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.051053][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.058347][ T292] device bridge_slave_0 entered promiscuous mode [ 23.065412][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.072595][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.080179][ T292] device bridge_slave_1 entered promiscuous mode [ 23.133813][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.141095][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.148562][ T291] device bridge_slave_0 entered promiscuous mode [ 23.158531][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.165691][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.173066][ T291] device bridge_slave_1 entered promiscuous mode [ 23.321184][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.328255][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.335589][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.342743][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.350960][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.357999][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.365315][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.372347][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.386950][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.394033][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.401353][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.408397][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.419309][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.426369][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.433673][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.440730][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.455607][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.462731][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.470031][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.477258][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.525239][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.532908][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.540579][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.548106][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.555414][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.562591][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.570055][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.577434][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.584920][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.592428][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.599700][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.629205][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.637323][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.645235][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.653603][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.660748][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.668962][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.677279][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.684328][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.691693][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.700040][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.707164][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.714596][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.722776][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.729901][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.739196][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.750642][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.758585][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.782744][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.792061][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.800429][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.807809][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.815562][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.823813][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.830877][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.838447][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.846509][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.854731][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.863073][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.870118][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.877690][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.898806][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.907357][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.915663][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.922709][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.930417][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.938465][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.946794][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.955020][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.962923][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.971056][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.982909][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.991203][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.013721][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.022259][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.030910][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.037956][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.045770][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.054677][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.063178][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.070259][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.077725][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.086293][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.094922][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.103090][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.111391][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.119108][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.127723][ T289] device veth0_vlan entered promiscuous mode [ 24.136460][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.144896][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.154877][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.163325][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.172928][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.181503][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.195850][ T291] device veth0_vlan entered promiscuous mode [ 24.203704][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.211991][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.219506][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.226975][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.237340][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.245779][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.263274][ T290] device veth0_vlan entered promiscuous mode [ 24.270764][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.279220][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.287254][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.296472][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.305542][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.313944][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.322219][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.329864][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.339081][ T289] device veth1_macvtap entered promiscuous mode [ 24.357548][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.366233][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.374589][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.383415][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.391668][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.399250][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.412268][ T291] device veth1_macvtap entered promiscuous mode [ 24.420114][ T292] device veth0_vlan entered promiscuous mode [ 24.427070][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.435539][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.444115][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.452855][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.462060][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.470732][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.482514][ T290] device veth1_macvtap entered promiscuous mode [ 24.500813][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.508936][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.516817][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.525474][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.534041][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.542952][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.551423][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.559958][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.568140][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.576550][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.585131][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.593802][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.601453][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.610026][ T288] device veth0_vlan entered promiscuous mode [ 24.635703][ T292] device veth1_macvtap entered promiscuous mode [ 24.644833][ T289] request_module fs-gadgetfs succeeded, but still no fs? [ 24.648643][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.660887][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.670407][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.678921][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.702339][ T288] device veth1_macvtap entered promiscuous mode [ 24.725234][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.734664][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.740875][ T315] fscrypt (sda1, inode 1262): Direct key flag not allowed with different contents and filenames modes [ 24.743856][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.768105][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.774823][ T317] syz.1.2 (317): drop_caches: 0 [ 24.777474][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.789965][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.798569][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.807155][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.817160][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.831658][ T319] netlink: 'syz.3.6': attribute type 16 has an invalid length. [ 24.839874][ T319] netlink: 'syz.3.6': attribute type 17 has an invalid length. [ 24.850936][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 24.858281][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 24.865830][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 24.884922][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.893689][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.903501][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 24.912298][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 24.922953][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 24.939218][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 24.947821][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 24.958760][ T335] ======================================================= [ 24.958760][ T335] WARNING: The mand mount option has been deprecated and [ 24.958760][ T335] and is ignored by this kernel. Remove the mand [ 24.958760][ T335] option from the mount to silence this warning. [ 24.958760][ T335] ======================================================= [ 24.965038][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 25.004164][ T337] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.010329][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 25.029293][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 25.077862][ T344] ================================================================== [ 25.085979][ T344] BUG: KASAN: use-after-free in sk_skb_adjust_room+0x34e/0x610 [ 25.093750][ T344] Read of size 8 at addr ffff88812070e348 by task syz.4.5/344 [ 25.101230][ T344] [ 25.103561][ T344] CPU: 1 PID: 344 Comm: syz.4.5 Not tainted syzkaller #0 [ 25.110586][ T344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 25.120654][ T344] Call Trace: [ 25.123957][ T344] [ 25.126891][ T344] __dump_stack+0x21/0x24 [ 25.131484][ T344] dump_stack_lvl+0x110/0x170 [ 25.136170][ T344] ? __cfi_dump_stack_lvl+0x8/0x8 [ 25.141203][ T344] ? pskb_expand_head+0x436/0x12b0 [ 25.146325][ T344] ? sk_skb_adjust_room+0x34e/0x610 [ 25.151651][ T344] print_address_description+0x71/0x200 [ 25.157217][ T344] print_report+0x4a/0x60 [ 25.161551][ T344] kasan_report+0x122/0x150 [ 25.166188][ T344] ? sk_skb_adjust_room+0x34e/0x610 [ 25.171395][ T344] __asan_report_load8_noabort+0x14/0x20 [ 25.177030][ T344] sk_skb_adjust_room+0x34e/0x610 [ 25.182146][ T344] bpf_prog_e15ab8bd9cea3c06+0x19/0x20 [ 25.187607][ T344] sk_psock_verdict_recv+0x6d8/0x7b0 [ 25.192915][ T344] unix_stream_read_skb+0x13d/0x300 [ 25.198115][ T344] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 25.204094][ T344] ? __cfi_sk_psock_verdict_recv+0x10/0x10 [ 25.209906][ T344] ? __cfi_unix_stream_read_skb+0x10/0x10 [ 25.215649][ T344] ? __kasan_check_write+0x14/0x20 [ 25.220913][ T344] ? _raw_spin_lock+0x94/0xf0 [ 25.225617][ T344] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 25.231435][ T344] sk_psock_verdict_data_ready+0xaf/0x1d0 [ 25.237161][ T344] unix_stream_sendmsg+0x631/0xa80 [ 25.242305][ T344] ? __cfi_unix_stream_sendmsg+0x10/0x10 [ 25.247941][ T344] ? security_socket_sendmsg+0x93/0xb0 [ 25.253581][ T344] __sys_sendto+0x4ac/0x660 [ 25.258101][ T344] ? __cfi___sys_sendto+0x10/0x10 [ 25.263226][ T344] ? __this_cpu_preempt_check+0x13/0x20 [ 25.268870][ T344] ? xfd_validate_state+0x70/0x150 [ 25.273986][ T344] ? __kasan_check_write+0x14/0x20 [ 25.279098][ T344] __x64_sys_sendto+0xe5/0x100 [ 25.284049][ T344] x64_sys_call+0x83/0x9a0 [ 25.288558][ T344] do_syscall_64+0x4c/0xa0 [ 25.292976][ T344] ? clear_bhb_loop+0x30/0x80 [ 25.297660][ T344] ? clear_bhb_loop+0x30/0x80 [ 25.302342][ T344] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 25.308331][ T344] RIP: 0033:0x7f3d8659f559 [ 25.313021][ T344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 25.332656][ T344] RSP: 002b:00007f3d87528028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 25.341084][ T344] RAX: ffffffffffffffda RBX: 00007f3d86825fa0 RCX: 00007f3d8659f559 [ 25.349151][ T344] RDX: 0000000000000001 RSI: 0000200000002340 RDI: 0000000000000005 [ 25.357256][ T344] RBP: 00007f3d86636b20 R08: 0000000000000000 R09: 0000000000000000 [ 25.365245][ T344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 25.373237][ T344] R13: 00007f3d86826038 R14: 00007f3d86825fa0 R15: 00007ffce7ccc158 [ 25.381243][ T344] [ 25.384263][ T344] [ 25.386587][ T344] Allocated by task 234: [ 25.390819][ T344] kasan_set_track+0x4b/0x70 [ 25.395502][ T344] kasan_save_alloc_info+0x1f/0x30 [ 25.400611][ T344] __kasan_slab_alloc+0x72/0x80 [ 25.405467][ T344] slab_post_alloc_hook+0x4f/0x2d0 [ 25.410579][ T344] kmem_cache_alloc+0x166/0x320 [ 25.415450][ T344] sk_prot_alloc+0x5f/0x320 [ 25.419957][ T344] sk_alloc+0x3b/0x460 [ 25.424025][ T344] unix_create1+0xb8/0x710 [ 25.428439][ T344] unix_stream_connect+0x1cd/0xda0 [ 25.433545][ T344] __sys_connect+0x3da/0x460 [ 25.438592][ T344] __x64_sys_connect+0x7a/0x90 [ 25.443371][ T344] x64_sys_call+0x88d/0x9a0 [ 25.447907][ T344] do_syscall_64+0x4c/0xa0 [ 25.452340][ T344] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 25.458260][ T344] [ 25.460593][ T344] Freed by task 234: [ 25.464479][ T344] kasan_set_track+0x4b/0x70 [ 25.469255][ T344] kasan_save_free_info+0x2b/0x40 [ 25.474310][ T344] ____kasan_slab_free+0x132/0x180 [ 25.479435][ T344] __kasan_slab_free+0x11/0x20 [ 25.484211][ T344] slab_free_freelist_hook+0xc2/0x190 [ 25.489638][ T344] kmem_cache_free+0x12d/0x300 [ 25.494405][ T344] __sk_destruct+0x4b4/0x5e0 [ 25.499085][ T344] __sk_free+0x30a/0x400 [ 25.503342][ T344] sk_free+0x54/0x90 [ 25.507257][ T344] unix_release_sock+0xb6d/0xe60 [ 25.512195][ T344] unix_stream_connect+0x65f/0xda0 [ 25.517310][ T344] __sys_connect+0x3da/0x460 [ 25.521901][ T344] __x64_sys_connect+0x7a/0x90 [ 25.526864][ T344] x64_sys_call+0x88d/0x9a0 [ 25.531387][ T344] do_syscall_64+0x4c/0xa0 [ 25.536001][ T344] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 25.542080][ T344] [ 25.544417][ T344] The buggy address belongs to the object at ffff88812070e300 [ 25.544417][ T344] which belongs to the cache UNIX-STREAM of size 1152 [ 25.558566][ T344] The buggy address is located 72 bytes inside of [ 25.558566][ T344] 1152-byte region [ffff88812070e300, ffff88812070e780) [ 25.572279][ T344] [ 25.574612][ T344] The buggy address belongs to the physical page: [ 25.581104][ T344] page:ffffea000481c300 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12070c [ 25.591359][ T344] head:ffffea000481c300 order:2 compound_mapcount:0 compound_pincount:0 [ 25.599719][ T344] flags: 0x4000000000010200(slab|head|zone=1) [ 25.605875][ T344] raw: 4000000000010200 0000000000000000 dead000000000122 ffff8881088b0f00 [ 25.614807][ T344] raw: 0000000000000000 00000000800c000c 00000001ffffffff 0000000000000000 [ 25.623554][ T344] page dumped because: kasan: bad access detected [ 25.629995][ T344] page_owner tracks the page as allocated [ 25.635792][ T344] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 234, tgid 234 (scp), ts 14594574781, free_ts 0 [ 25.655324][ T344] post_alloc_hook+0x1f5/0x210 [ 25.660098][ T344] prep_new_page+0x1c/0x110 [ 25.664603][ T344] get_page_from_freelist+0x2ca9/0x2d20 [ 25.670153][ T344] __alloc_pages+0x1fa/0x610 [ 25.674743][ T344] alloc_slab_page+0x6e/0xf0 [ 25.679330][ T344] new_slab+0x98/0x3e0 [ 25.683392][ T344] ___slab_alloc+0x70f/0xb70 [ 25.687986][ T344] __slab_alloc+0x5e/0xa0 [ 25.692314][ T344] kmem_cache_alloc+0x1a8/0x320 [ 25.697167][ T344] sk_prot_alloc+0x5f/0x320 [ 25.701670][ T344] sk_alloc+0x3b/0x460 [ 25.705740][ T344] unix_create1+0xb8/0x710 [ 25.710151][ T344] unix_create+0x149/0x200 [ 25.714578][ T344] __sock_create+0x39e/0x7c0 [ 25.719175][ T344] __sys_socket+0xcd/0x1a0 [ 25.723594][ T344] __x64_sys_socket+0x7a/0x90 [ 25.728269][ T344] page_owner free stack trace missing [ 25.733650][ T344] [ 25.735988][ T344] Memory state around the buggy address: [ 25.741714][ T344] ffff88812070e200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 25.749778][ T344] ffff88812070e280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 25.757942][ T344] >ffff88812070e300: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 25.765993][ T344] ^ [ 25.772408][ T344] ffff88812070e380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 25.780482][ T344] ffff88812070e400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 25.788551][ T344] ================================================================== [ 25.823529][ T346] loop2: detected capacity change from 0 to 256 [ 25.831121][ T344] Disabling lock debugging due to kernel taint [ 25.862158][ T346] FAT-fs (loop2): Directory bread(block 64) failed [ 25.880795][ T346] FAT-fs (loop2): Directory bread(block 65) failed [ 25.893621][ T346] FAT-fs (loop2): Directory bread(block 66) failed [ 25.900382][ T346] FAT-fs (loop2): Directory bread(block 67) failed [ 25.907209][ T346] FAT-fs (loop2): Directory bread(block 68) failed [ 25.914378][ T346] FAT-fs (loop2): Directory bread(block 69) failed [ 25.921466][ T346] FAT-fs (loop2): Directory bread(block 70) failed [ 25.936986][ T346] FAT-fs (loop2): Directory bread(block 71) failed [ 25.943761][ T346] FAT-fs (loop2): Directory bread(block 72) failed [ 25.952330][ T346] FAT-fs (loop2): Directory bread(block 73) failed [ 25.998538][ T346] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 26.007252][ T346] FAT-fs (loop2): Filesystem has been set read-only [ 26.017461][ T346] syz.2.3: attempt to access beyond end of device [ 26.017461][ T346] loop2: rw=2049, sector=1736, nr_sectors = 64 limit=256 [ 26.031893][ T346] syz.2.3: attempt to access beyond end of device [ 26.031893][ T346] loop2: rw=2049, sector=1864, nr_sectors = 4 limit=256 [ 26.459455][ T10] device bridge_slave_1 left promiscuous mode [ 26.465628][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.473399][ T10] device bridge_slave_0 left promiscuous mode [ 26.479632][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.487950][ T10] device veth1_macvtap left promiscuous mode [ 26.494395][ T10] device veth0_vlan left promiscuous mode