last executing test programs: 4.51361037s ago: executing program 2 (id=38): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') fchdir(r0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x200000, 0x200000, 0xa, 0x0, 0x8}) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r1 = syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r1, &(0x7f0000000240)='fd/3\x00') 4.284412674s ago: executing program 2 (id=40): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa10000000000002316afd3c67fc037b702000008000000b70300000000000085000000f1000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9f, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000010"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 3.951013848s ago: executing program 2 (id=43): socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x4, @remote}, 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1f}}}, @IFLA_LINK={0x8}, @IFLA_IFALIASn={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 3.398886274s ago: executing program 2 (id=48): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x5, 0x0, 0xdddd0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000778000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.018952293s ago: executing program 2 (id=50): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x1) sendto$inet6(r1, 0x0, 0x0, 0x20040014, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) 2.778902097s ago: executing program 2 (id=52): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xc2, &(0x7f0000000700)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x20, 0x0, {0x25, 0x4, 0x0, 0x2, 0x4000, 0x1, 0xffff, 0x0, 0x1, 0x7, @empty, @rand_addr=0x64010100, {[@cipso={0x86, 0x7d, 0xffffffffffffffff, [{0x0, 0xe, "08c82ce8da6ee06cb8dd9452"}, {0x5, 0x12, "02270e000038ebcb9f726a0dba822ce4"}, {0x2, 0x12, "01008548c8ee4a000000000000000000"}, {0x0, 0x9, "00de6c83d50800"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a8525dc91e5c6"}, {0x6, 0xa, "0000000000800000"}, {0x7, 0x11, "73bc23f9ffffffa30900a301c84600"}, {0x1, 0xa, "c8f46976e79ea788"}]}]}}}}}}}, 0x0) 1.96457958s ago: executing program 1 (id=57): r0 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@local, @in=@loopback, 0x0, 0x100, 0x4e23, 0x0, 0x2, 0x0, 0x0, 0x73}, {0x0, 0x0, 0x10000, 0x401, 0x63b40c8e, 0x2000000, 0x1, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x800000000003, 0x4, 0xffffffffffffff7f}, 0x1, 0x0, 0x1, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x32}, 0x0, 0x2b}, 0xa, @in=@remote, 0x3504, 0x4, 0x2, 0x0, 0xffffffff, 0x6, 0x4}}, 0xe8) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x20}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1af}}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d4, 0x32}, 0x0, @in=@empty, 0x3505, 0x0, 0x1}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_x_policy={0x2, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@private1, @in6=@private1}}, @sadb_lifetime={0x4, 0x4}]}, 0xc0}}, 0x0) 1.725675144s ago: executing program 1 (id=59): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000240)=""/115, 0x0, 0x80a0000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x1, 0x1, 0x0, &(0x7f0000000380)=""/100, 0x0, 0x1000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000480)=0x20000) 1.504833177s ago: executing program 4 (id=5): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000580)={{0x1, 0x7fd, 0xd, 0x8009}, 'syz0\x00', 0x40}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000600), 0xfffffffffffffffd, 0x2e44) dup3(r1, r0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 1.401269467s ago: executing program 0 (id=61): socket(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x10) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x8000002, 0x0, @mcast2}, 0x1b) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@random="492afaf4337b", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x18, 0x3a, 0xff, @local, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0xce, '\x00', @local}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[], 0x0) 1.400972087s ago: executing program 3 (id=4): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffff}, 0x50) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0xe3, @mcast2, 0x9}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1.27711806s ago: executing program 1 (id=62): execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x100) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000100), 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040)=0x1, 0x4) 1.27638314s ago: executing program 4 (id=5): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000580)={{0x1, 0x7fd, 0xd, 0x8009}, 'syz0\x00', 0x40}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000600), 0xfffffffffffffffd, 0x2e44) dup3(r1, r0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 1.158319282s ago: executing program 0 (id=63): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000040)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x18) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={[], [], 0x2f}) 1.157860602s ago: executing program 3 (id=4): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffff}, 0x50) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0xe3, @mcast2, 0x9}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1.033731795s ago: executing program 4 (id=5): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000580)={{0x1, 0x7fd, 0xd, 0x8009}, 'syz0\x00', 0x40}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000600), 0xfffffffffffffffd, 0x2e44) dup3(r1, r0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 918.897077ms ago: executing program 0 (id=64): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x181) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) fstat(r0, &(0x7f0000001980)) 918.465517ms ago: executing program 3 (id=4): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffff}, 0x50) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0xe3, @mcast2, 0x9}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 800.317329ms ago: executing program 1 (id=65): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x200002, 0x200003, 0x803, 0x4, 0x7}) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x280440e, &(0x7f0000000300), 0x1, 0xbdb, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000003680)='.\x00', 0x100, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(0xffffffffffffffff, 0x17, 0x0, 0x1) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086610, &(0x7f00000036c0)={@desc={0x1, 0x10000000, @desc2}}) 799.690509ms ago: executing program 4 (id=5): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000580)={{0x1, 0x7fd, 0xd, 0x8009}, 'syz0\x00', 0x40}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000600), 0xfffffffffffffffd, 0x2e44) dup3(r1, r0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 647.452284ms ago: executing program 0 (id=66): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0x4, 0x0, 0x3, 0x6, 0x5}, 0x20) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000003e00290200000000fcdbdb250a00000004"], 0x18}}, 0x8000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) 646.886304ms ago: executing program 3 (id=4): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffff}, 0x50) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0xe3, @mcast2, 0x9}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 531.290506ms ago: executing program 1 (id=67): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0xffffffff, 0x4, 0x109e8f, 0xffffffffffffffff, 0x1000000003ffffe, 0xd, 0x0, 0x2, 0x5, 0x1aec, 0x401, 0x6, 0x1, 0x20000001, 0xbffffffffffffffe], 0xd5d5c004, 0x21354}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 530.796606ms ago: executing program 4 (id=5): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000580)={{0x1, 0x7fd, 0xd, 0x8009}, 'syz0\x00', 0x40}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000600), 0xfffffffffffffffd, 0x2e44) dup3(r1, r0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 402.663709ms ago: executing program 0 (id=68): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, 0x0) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000140)={0xa, {0x10001, 0x3, 0xff}}, 0xa) 401.96924ms ago: executing program 3 (id=4): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffff}, 0x50) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0xe3, @mcast2, 0x9}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 206.595929ms ago: executing program 1 (id=69): syz_mount_image$ext4(&(0x7f0000000f00)='ext4\x00', &(0x7f0000000f40)='./bus\x00', 0x1208002, &(0x7f0000000f80)={[{@grpquota}, {@jqfmt_vfsold}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@acl}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f0000001000)="$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") syz_mount_image$vfat(&(0x7f0000001600), &(0x7f0000001640)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000001680)) chdir(&(0x7f00000016c0)='./bus\x00') ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(0xffffffffffffffff, 0xc008aec1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001700)='.\x00', 0x0, 0x83) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000240)=@v1={0x0, @aes128, 0x4, @auto="4b04897f05f9e881"}) 206.079039ms ago: executing program 4 (id=5): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000580)={{0x1, 0x7fd, 0xd, 0x8009}, 'syz0\x00', 0x40}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000600), 0xfffffffffffffffd, 0x2e44) dup3(r1, r0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 840.57µs ago: executing program 0 (id=70): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xf, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) getrandom(&(0x7f0000000c00)=""/4096, 0x1000, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x17fc) 0s ago: executing program 3 (id=4): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffff}, 0x50) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0xe3, @mcast2, 0x9}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) kernel console output (not intermixed with test programs): rocess permissive=1 [ 15.522667][ T28] audit: type=1400 audit(1792759181.178:63): avc: denied { siginh } for pid=224 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.45' (ED25519) to the list of known hosts. [ 23.155066][ T28] audit: type=1400 audit(1792759188.818:64): avc: denied { mounton } for pid=278 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.158655][ T278] cgroup: Unknown subsys name 'net' [ 23.177750][ T28] audit: type=1400 audit(1792759188.818:65): avc: denied { mount } for pid=278 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.205063][ T28] audit: type=1400 audit(1792759188.848:66): avc: denied { unmount } for pid=278 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.205600][ T278] cgroup: Unknown subsys name 'devices' [ 23.348557][ T278] cgroup: Unknown subsys name 'hugetlb' [ 23.354196][ T278] cgroup: Unknown subsys name 'rlimit' [ 23.459636][ T28] audit: type=1400 audit(1792759189.128:67): avc: denied { setattr } for pid=278 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.482861][ T28] audit: type=1400 audit(1792759189.128:68): avc: denied { mounton } for pid=278 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.507629][ T28] audit: type=1400 audit(1792759189.128:69): avc: denied { mount } for pid=278 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.537806][ T280] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.546797][ T28] audit: type=1400 audit(1792759189.218:70): avc: denied { relabelto } for pid=280 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.572238][ T28] audit: type=1400 audit(1792759189.218:71): avc: denied { write } for pid=280 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.599189][ T28] audit: type=1400 audit(1792759189.268:72): avc: denied { read } for pid=278 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.624791][ T28] audit: type=1400 audit(1792759189.268:73): avc: denied { open } for pid=278 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.624818][ T278] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.852039][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.859151][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.866878][ T288] device bridge_slave_0 entered promiscuous mode [ 24.880236][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.887311][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.894764][ T286] device bridge_slave_0 entered promiscuous mode [ 24.902898][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.910028][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.917504][ T286] device bridge_slave_1 entered promiscuous mode [ 24.927612][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.934665][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.942247][ T288] device bridge_slave_1 entered promiscuous mode [ 25.019863][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.026981][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.034452][ T287] device bridge_slave_0 entered promiscuous mode [ 25.044629][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.051738][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.059262][ T287] device bridge_slave_1 entered promiscuous mode [ 25.104560][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.111810][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.119303][ T290] device bridge_slave_0 entered promiscuous mode [ 25.132057][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.139177][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.146706][ T289] device bridge_slave_0 entered promiscuous mode [ 25.156692][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.163750][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.171357][ T290] device bridge_slave_1 entered promiscuous mode [ 25.186597][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.193736][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.201178][ T289] device bridge_slave_1 entered promiscuous mode [ 25.327784][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.334963][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.342288][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.349342][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.380967][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.388136][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.395403][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.402461][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.443945][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.451027][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.458325][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.465363][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.474173][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.481241][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.488543][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.495580][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.509127][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.516269][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.523585][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.530662][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.552625][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.559999][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.567570][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.574823][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.582193][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.589393][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.596958][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.604161][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.611425][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.618650][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.626830][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.634219][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.662997][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.671038][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.678758][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.687723][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.694747][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.702612][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.710822][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.717882][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.725639][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.733874][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.740909][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.761637][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.769469][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.777529][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.785441][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.793819][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.800904][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.822891][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.837735][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.846035][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.853110][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.860569][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.869093][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.877345][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.884367][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.891902][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.900128][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.908178][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.916189][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.929768][ T286] device veth0_vlan entered promiscuous mode [ 25.936659][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.944158][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.951785][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.960218][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.968734][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.975761][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.983258][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.991725][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.000023][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.007101][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.014510][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.022474][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.033659][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.041239][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.064411][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 26.072782][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.081553][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.088627][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.097145][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 26.105421][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.113657][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.120688][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.128152][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.136675][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.144610][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.152997][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.162016][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.170351][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.184209][ T290] device veth0_vlan entered promiscuous mode [ 26.195161][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.203534][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.211771][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.220782][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.228883][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.236856][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.244950][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.252609][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.262309][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.270723][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.279821][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.288289][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.308045][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.316645][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.324932][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.333398][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.341547][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.349661][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.357692][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.365675][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.373199][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.382774][ T286] device veth1_macvtap entered promiscuous mode [ 26.391905][ T288] device veth0_vlan entered promiscuous mode [ 26.399303][ T290] device veth1_macvtap entered promiscuous mode [ 26.414630][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.422540][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.431547][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.439971][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.448318][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.470937][ T288] device veth1_macvtap entered promiscuous mode [ 26.481457][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.490141][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.498612][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.506017][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.514524][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.522868][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.531316][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.539818][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.548168][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.556817][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.564972][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.573596][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.581381][ T287] device veth0_vlan entered promiscuous mode [ 26.601622][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.609838][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.617458][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.624942][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.633523][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.642367][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.650707][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.665347][ T286] request_module fs-gadgetfs succeeded, but still no fs? [ 26.674346][ T289] device veth0_vlan entered promiscuous mode [ 26.686885][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.698956][ T287] device veth1_macvtap entered promiscuous mode [ 26.711350][ T310] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.751281][ T289] device veth1_macvtap entered promiscuous mode [ 26.763998][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.772751][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.781249][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.798213][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.806609][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.815023][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.824255][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.837149][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.845391][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.876073][ T319] loop2: detected capacity change from 0 to 128 [ 26.889998][ T312] udevd[312]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 26.912104][ T321] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 26.922905][ T319] syz.2.6: attempt to access beyond end of device [ 26.922905][ T319] loop2: rw=2049, sector=145, nr_sectors = 79 limit=128 [ 26.942473][ T323] loop1: detected capacity change from 0 to 1024 [ 26.945865][ T318] syz.2.6: attempt to access beyond end of device [ 26.945865][ T318] loop2: rw=524288, sector=145, nr_sectors = 79 limit=128 [ 26.963623][ T323] ======================================================= [ 26.963623][ T323] WARNING: The mand mount option has been deprecated and [ 26.963623][ T323] and is ignored by this kernel. Remove the mand [ 26.963623][ T323] option from the mount to silence this warning. [ 26.963623][ T323] ======================================================= [ 26.966139][ T289] syz-executor (289) used greatest stack depth: 22344 bytes left [ 27.009184][ T323] EXT4-fs: Ignoring removed bh option [ 27.018246][ T319] syz.2.6: attempt to access beyond end of device [ 27.018246][ T319] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 27.025269][ T312] udevd[312]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 27.045288][ T312] udevd[312]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 27.047349][ T319] syz.2.6: attempt to access beyond end of device [ 27.047349][ T319] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 27.077318][ T319] syz.2.6: attempt to access beyond end of device [ 27.077318][ T319] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 27.083693][ T323] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 27.106496][ T319] syz.2.6: attempt to access beyond end of device [ 27.106496][ T319] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 27.119441][ T323] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.169470][ T323] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.8: bg 0: block 112: padding at end of block bitmap is not set [ 27.185938][ T327] kvm [324]: vcpu2, guest rIP: 0x913b Unhandled WRMSR(0x11e) = 0x0 [ 27.191888][ T323] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 51 with error 28 [ 27.225354][ T323] EXT4-fs (loop1): This should not happen!! Data will be lost [ 27.225354][ T323] [ 27.235080][ T323] EXT4-fs (loop1): Total free blocks count 0 [ 27.247068][ T312] udevd[312]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 27.256363][ T323] EXT4-fs (loop1): Free/Dirty block details [ 27.273012][ T323] EXT4-fs (loop1): free_blocks=0 [ 27.283038][ T323] EXT4-fs (loop1): dirty_blocks=64 [ 27.290125][ T312] udevd[312]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 27.293945][ T323] EXT4-fs (loop1): Block reservation details [ 27.320365][ T323] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 27.368673][ T286] EXT4-fs (loop1): unmounting filesystem. [ 27.414904][ T312] udevd[312]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 27.420195][ T342] loop1: detected capacity change from 0 to 256 [ 27.446075][ T342] exfat: Deprecated parameter 'utf8' [ 27.454094][ T342] exfat: Deprecated parameter 'namecase' [ 27.454948][ T312] udevd[312]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 27.460472][ T342] exfat: Deprecated parameter 'utf8' [ 27.487097][ T342] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 27.500144][ T312] udevd[312]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 27.584745][ T312] udevd[312]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 27.611026][ T351] udevd[351]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 27.767388][ T42] device bridge_slave_1 left promiscuous mode [ 27.773645][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.785061][ T42] device bridge_slave_0 left promiscuous mode [ 27.803928][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.817563][ T42] device veth1_macvtap left promiscuous mode [ 27.823639][ T42] device veth0_vlan left promiscuous mode [ 27.935362][ T380] ip_tables: iptables: counters copy to user failed while replacing table [ 28.204122][ T28] kauditd_printk_skb: 95 callbacks suppressed [ 28.204138][ T28] audit: type=1400 audit(1792759193.868:169): avc: denied { read } for pid=404 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 28.238581][ T28] audit: type=1400 audit(1792759193.868:170): avc: denied { open } for pid=404 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 28.501696][ T28] audit: type=1400 audit(1792759194.168:171): avc: denied { mount } for pid=412 comm="syz.1.35" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 28.527029][ T414] loop0: detected capacity change from 0 to 128 [ 28.535107][ T28] audit: type=1400 audit(1792759194.168:172): avc: denied { write } for pid=412 comm="syz.1.35" name="softnet_stat" dev="proc" ino=4026532300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 28.559413][ T28] audit: type=1400 audit(1792759194.168:173): avc: denied { read write } for pid=412 comm="syz.1.35" name="control" dev="devtmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 28.583605][ T28] audit: type=1400 audit(1792759194.168:174): avc: denied { open } for pid=412 comm="syz.1.35" path="/17/dev/mapper/control" dev="devtmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 28.608319][ T28] audit: type=1400 audit(1792759194.168:175): avc: denied { ioctl } for pid=412 comm="syz.1.35" path="/17/dev/mapper/control" dev="devtmpfs" ino=266 ioctlcmd=0xfd02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 28.634387][ T28] audit: type=1400 audit(1792759194.198:176): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 28.664259][ T28] audit: type=1400 audit(1792759194.278:177): avc: denied { mounton } for pid=411 comm="syz.0.34" path="/5/file0/file0" dev="loop0" ino=1048623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 28.687371][ T28] audit: type=1400 audit(1792759194.308:178): avc: denied { remount } for pid=411 comm="syz.0.34" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 28.793284][ T420] capability: warning: `syz.2.38' uses deprecated v2 capabilities in a way that may be insecure [ 29.022181][ T428] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 29.117303][ T42] device bridge_slave_1 left promiscuous mode [ 29.123519][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.137557][ T42] device bridge_slave_0 left promiscuous mode [ 29.143770][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.157565][ T42] device veth1_macvtap left promiscuous mode [ 29.167961][ T42] device veth0_vlan left promiscuous mode [ 29.358248][ T435] loop1: detected capacity change from 0 to 512 [ 29.368558][ T438] FAULT_INJECTION: forcing a failure. [ 29.368558][ T438] name failslab, interval 1, probability 0, space 0, times 1 [ 29.381294][ T437] device batadv_slave_0 entered promiscuous mode [ 29.388349][ T437] netlink: 12 bytes leftover after parsing attributes in process `syz.2.43'. [ 29.399852][ T438] CPU: 1 PID: 438 Comm: syz.0.41 Not tainted syzkaller #0 [ 29.407066][ T438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 29.417157][ T438] Call Trace: [ 29.420460][ T438] [ 29.423409][ T438] __dump_stack+0x21/0x24 [ 29.427786][ T438] dump_stack_lvl+0x110/0x170 [ 29.432480][ T438] ? __cfi_dump_stack_lvl+0x8/0x8 [ 29.437560][ T438] dump_stack+0x15/0x24 [ 29.441745][ T438] should_fail_ex+0x3bf/0x510 [ 29.446450][ T438] __should_failslab+0xac/0xf0 [ 29.451366][ T438] should_failslab+0x9/0x20 [ 29.455892][ T438] __kmem_cache_alloc_node+0x3d/0x2d0 [ 29.461300][ T438] ? bpf_init_fs_context+0x4f/0xe0 [ 29.466475][ T438] ? bpf_init_fs_context+0x4f/0xe0 [ 29.471614][ T438] kmalloc_trace+0x29/0xb0 [ 29.476052][ T438] bpf_init_fs_context+0x4f/0xe0 [ 29.476424][ T437] netlink: 15 bytes leftover after parsing attributes in process `syz.2.43'. [ 29.481013][ T438] alloc_fs_context+0x653/0x7d0 [ 29.494664][ T438] fs_context_for_mount+0x22/0x30 [ 29.499738][ T438] __se_sys_fsopen+0xa3/0x2f0 [ 29.504446][ T438] __x64_sys_fsopen+0x5b/0x70 [ 29.509153][ T438] x64_sys_call+0x537/0x9a0 [ 29.513696][ T438] do_syscall_64+0x4c/0xa0 [ 29.518162][ T438] ? clear_bhb_loop+0x30/0x80 [ 29.522875][ T438] ? clear_bhb_loop+0x30/0x80 [ 29.527588][ T438] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 29.533514][ T438] RIP: 0033:0x7f90fd59f559 [ 29.537968][ T438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.557592][ T438] RSP: 002b:00007f90fe55b028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 29.566048][ T438] RAX: ffffffffffffffda RBX: 00007f90fd825fa0 RCX: 00007f90fd59f559 [ 29.574045][ T438] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000003c0 [ 29.578736][ T435] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.42: bg 0: block 5: invalid block bitmap [ 29.582037][ T438] RBP: 00007f90fd636b20 R08: 0000000000000000 R09: 0000000000000000 [ 29.582059][ T438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 29.594856][ T435] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 29.602117][ T438] R13: 00007f90fd826038 R14: 00007f90fd825fa0 R15: 00007ffdbf781b68 [ 29.602139][ T438] [ 29.631068][ T435] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.42: invalid indirect mapped block 3 (level 2) [ 29.644413][ T435] EXT4-fs (loop1): 1 orphan inode deleted [ 29.650208][ T435] EXT4-fs (loop1): 1 truncate cleaned up [ 29.655905][ T435] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 29.687806][ T286] EXT4-fs (loop1): unmounting filesystem. [ 29.753622][ T445] loop1: detected capacity change from 0 to 256 [ 29.772242][ T436] device batadv_slave_0 left promiscuous mode [ 29.779960][ T445] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 29.904716][ T451] syz.0.46 uses obsolete (PF_INET,SOCK_PACKET) [ 31.904476][ T518] ICMPv6: NA: 01:80:c2:00:00:03 advertised our address fe80::aa on syz_tun! [ 32.518015][ T537] loop1: detected capacity change from 0 to 4096 [ 32.525745][ T351] udevd[351]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 32.538542][ T537] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 32.555739][ T286] EXT4-fs (loop1): unmounting filesystem. [ 32.567451][ T351] udevd[351]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 32.581227][ T351] udevd[351]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 32.903647][ T297] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.936517][ T297] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 32.970710][ T553] udevd[553]: open /dev/null failed: No such file or directory [ 33.101090][ T558] loop1: detected capacity change from 0 to 1024 [ 33.111908][ T558] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 33.114262][ T351] udevd[351]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 33.126961][ T558] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 33.146191][ T558] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 33.154511][ T558] System zones: 0-1, 3-36 [ 33.159867][ T558] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 33.177050][ T558] fscrypt (loop1, inode 18): Direct key flag not allowed with different contents and filenames modes [ 33.195062][ T286] EXT4-fs (loop1): unmounting filesystem. [ 33.208398][ T351] udevd[351]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 33.221472][ T351] udevd[351]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory SYZFAIL: mount(dev) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=3 req=4 state=3 status=67 (errno 32: Broken pipe) [ 33.299439][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 33.299454][ T28] audit: type=1400 audit(1792759198.968:219): avc: denied { write } for pid=278 comm="syz-executor" path="pipe:[14941]" dev="pipefs" ino=14941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 33.457802][ T286] syz-executor (286) used greatest stack depth: 22016 bytes left [ 34.399015][ T42] device bridge_slave_1 left promiscuous mode [ 34.405153][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.412633][ T42] device bridge_slave_0 left promiscuous mode [ 34.418863][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.426988][ T42] device bridge_slave_1 left promiscuous mode [ 34.433097][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.440649][ T42] device bridge_slave_0 left promiscuous mode [ 34.446919][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.454857][ T42] device bridge_slave_1 left promiscuous mode [ 34.461095][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.468650][ T42] device bridge_slave_0 left promiscuous mode [ 34.474777][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.483252][ T42] device veth1_macvtap left promiscuous mode [ 34.489302][ T42] device veth0_vlan left promiscuous mode [ 34.495270][ T42] device veth1_macvtap left promiscuous mode [ 34.501380][ T42] device veth0_vlan left promiscuous mode [ 34.507373][ T42] device veth1_macvtap left promiscuous mode [ 34.513388][ T42] device veth0_vlan left promiscuous mode