last executing test programs: 3m1.618862431s ago: executing program 1 (id=967): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x300) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000100)={[{@debug}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r0, r0, 0x0, 0xe3aa6ea) 3m1.43931396s ago: executing program 1 (id=968): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d0020073f0000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r2], 0x44}}, 0x2000040) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008804}, 0x20040040) 3m0.976552384s ago: executing program 3 (id=970): socket$igmp(0x2, 0x3, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000580)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="82", 0x1}, {&(0x7f0000000540)="bd", 0x1}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 3m0.976080604s ago: executing program 1 (id=979): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x30, 0x0, &(0x7f0000000100)) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth1\x00', &(0x7f0000000180)=@ethtool_sset_info={0x4a, 0x7, 0x3}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x300000f, 0x11, r0, 0xcfa3e000) 3m0.952808135s ago: executing program 3 (id=971): mkdir(&(0x7f0000000ac0)='./file0\x00', 0x18b) mount$bpf(0x20000000f0ff, &(0x7f0000000440)='./file0/../file0\x00', &(0x7f0000000000), 0x440, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffd11}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffeb}, 0x94) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90024, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000080)='./file0/file0\x00', r0}, 0x18) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0/file0\x00'}, 0x18) 3m0.912151607s ago: executing program 3 (id=972): r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = syz_clone(0x20822180, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs$pagemap(r1, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) preadv(r2, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/9, 0x9}, {0x0}], 0x2, 0x7ff, 0x5) 3m0.751483576s ago: executing program 1 (id=975): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) chdir(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2a5b091, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f00000001c0)='./file0/file0\x00', 0x0) 3m0.688080339s ago: executing program 1 (id=976): r0 = memfd_create(&(0x7f0000000400)='-&>\t\x00\x00\x00{\xebq\x00\xbb\xc8S0\xf8\x9d\xbaSxXW\xc9%\xde\x93\xef\f\xff%\xfb\x87\x92\xb3/l\xfdH\x89t\xd6\xbe\f\xa3t\xa0\x8eqS\x8b\x16\\Tk\xe0h\xdb\xfcom\x04n\xef\xa3\xebzb^\xfcA\xe8\xa0\x96\xe9\xb1\x85\xbb=\xb15\xb4U5\xb3\x8a\x0e.\xa3\x9c\xa4\xeb\xe4\x8e83#,\x96\xa3l\xcd\x81\xf9|\xe4\xe6\xecZ\xd6\xa2{\x1e\xae\xb8m%\x17\xc0h\xe6\xd7\xcc\xf1Y\xd3\x9e\x12\xda&\x12\x15\xca\xbai\xaf\x11\xc0V\xec\">\xcf\xd4\xbcU\x88E0\x01p', 0x2) unshare(0x28000600) r1 = fsopen(&(0x7f00000001c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x8e) unshare(0x8000280) close_range(r0, 0xffffffffffffffff, 0x0) 3m0.524412158s ago: executing program 3 (id=980): timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 3m0.46937416s ago: executing program 3 (id=982): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x909046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 3m0.451908841s ago: executing program 3 (id=983): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 3m0.070563251s ago: executing program 1 (id=988): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r1, &(0x7f00000004c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000840)={r1, 0x0, &(0x7f00000006c0)=""/209}, 0x20) 3m0.008910344s ago: executing program 32 (id=988): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r1, &(0x7f00000004c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000840)={r1, 0x0, &(0x7f00000006c0)=""/209}, 0x20) 2m45.365841591s ago: executing program 33 (id=983): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1m6.79976346s ago: executing program 0 (id=2760): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000002c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000740)="b3", 0x1}], 0x1, &(0x7f0000000080)=ANY=[], 0xf0}}], 0x1, 0x24004c41) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 1m6.708030575s ago: executing program 0 (id=2764): socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x3, 0x401}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x400, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESDEC=r0]) 1m6.663895778s ago: executing program 0 (id=2765): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000000000000000000000000000007fffffff0001000000000071273fa79d93014b8e3381b6"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x402, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m5.618116862s ago: executing program 0 (id=2769): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) 1m5.554591345s ago: executing program 0 (id=2780): r0 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x6}]}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r3, @ANYBLOB="83150500000000002000128008000100736974001400028006000f000300000008000100", @ANYRES64=r2], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @remote}}}], 0x20}}], 0x1, 0x4880) 1m5.130802666s ago: executing program 0 (id=2777): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x24, 0x66, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m5.130517277s ago: executing program 34 (id=2777): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x24, 0x66, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.672372724s ago: executing program 6 (id=3657): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r3, r1, 0x25, 0x0, @val=@tcx={@void, @value=r3}}, 0x1c) syz_emit_ethernet(0x4f, &(0x7f0000000100)=ANY=[], 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 1.542044831s ago: executing program 6 (id=3660): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200840, &(0x7f0000000280)={[{@nobh}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}]}, 0x0, 0x4f7, &(0x7f0000000540)="$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") r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2712, &(0x7f0000019580)=""/102392, &(0x7f0000000000)=0x18ff8) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000980)={{{@in=@multicast1, @in6=@remote, 0x4e1f, 0x0, 0x0, 0x3, 0x2}, {0x10000, 0x200000004, 0x40000000007, 0x6811221d, 0x100000000, 0x4, 0x200000003, 0x9}, {0x5, 0xfffffffffffffffd, 0x7}, 0x1, 0x0, 0x1, 0x0, 0x6}, {{@in=@empty, 0x0, 0x6c}, 0xa, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3502, 0x1, 0x0, 0x0, 0x9, 0x3}}, 0xe8) syz_emit_ethernet(0x3e, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 1.305902463s ago: executing program 2 (id=3667): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.292161223s ago: executing program 6 (id=3668): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2022, 0x36, 0x100, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000700)=ANY=[@ANYBLOB="12e01b3989dd", @ANYRES32=r0], 0x1000f) 1.176419509s ago: executing program 2 (id=3671): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000940000007b00000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r1}, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0x8) 1.150471461s ago: executing program 7 (id=3672): perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x71, 0x5, 0x8, 0x8, 0x0, 0x1f, 0x1369a, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x1}, 0xb06, 0x3, 0x8, 0x1, 0x7f, 0x8800, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x8}, 0x4010, 0x0, 0x0, 0x0, 0x3, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x2600, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xa1302400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x20000004) 1.130337662s ago: executing program 5 (id=3673): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x8402, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8001, 0xf7f}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) unshare(0x28020480) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.026445777s ago: executing program 7 (id=3674): r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x89, 0x20000, {r4}}, 0x20) 1.026187607s ago: executing program 2 (id=3675): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x3, @local, 0x6}, 0x1c) listen(r0, 0x70000008) 958.037771ms ago: executing program 2 (id=3676): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0026}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r1, r3, 0x25, 0x4, @void}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) 907.607303ms ago: executing program 5 (id=3677): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'bond0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000000000001a0000002000018008000100", @ANYRES32=r5, @ANYBLOB="140002"], 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 869.364145ms ago: executing program 7 (id=3678): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc1}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 869.090236ms ago: executing program 2 (id=3679): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000002"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 840.693167ms ago: executing program 5 (id=3680): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1, 0x236, &(0x7f0000000000)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) dup(0xffffffffffffffff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mkdirat(r0, 0x0, 0xd8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) 808.566189ms ago: executing program 2 (id=3681): openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x20c2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$unix(0x1, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x803e0000, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) 762.376431ms ago: executing program 5 (id=3682): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c000000100003"], 0x4c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x20044890) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0x177}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x7, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff7}, 0x75) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1b) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 548.154672ms ago: executing program 5 (id=3684): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x100000001}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x5, 0xe, 0x0, &(0x7f0000000380)="2eb33d2ab87cded491710d000000", 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3c) 516.298653ms ago: executing program 7 (id=3686): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x550, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x8}, 0x106200, 0x10004, 0x2, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20040845}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48048}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 496.852744ms ago: executing program 4 (id=3687): mknod$loop(&(0x7f0000000100)='./file0\x00', 0x100000000000600d, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x1fc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup2(r0, r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_elf32(r3, &(0x7f0000000c80)=ANY=[], 0x78) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4000005, 0x10012, r3, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f00000004c0)={0x2, 0x1}) 375.441331ms ago: executing program 4 (id=3688): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x80f05c34c9b32e55, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) 335.272453ms ago: executing program 6 (id=3689): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r2], 0x68}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) 306.870724ms ago: executing program 4 (id=3690): r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x89, 0x20000, {r4}}, 0x20) 254.211397ms ago: executing program 7 (id=3691): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000080), &(0x7f0000000040)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000580)="d1", 0x1}], 0x1}}], 0x1, 0x10) sendto$inet6(r0, &(0x7f0000000200)="9000", 0xc3ff, 0x844, 0x0, 0x0) 214.259939ms ago: executing program 4 (id=3692): openat$full(0xffffffffffffff9c, 0x0, 0x4a2c40, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) 192.97583ms ago: executing program 7 (id=3693): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x7}) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) timer_settime(0x0, 0x1, &(0x7f0000000800)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_read_part_table(0x632, &(0x7f0000000000)="$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") 192.19326ms ago: executing program 5 (id=3694): openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) mlockall(0x1) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = pidfd_getfd(r0, r0, 0x0) setns(r1, 0x64000080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, 0x0, 0x0) 113.441844ms ago: executing program 4 (id=3695): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0x328000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, 0x0, 0x0) 112.937534ms ago: executing program 6 (id=3696): r0 = socket$packet(0x11, 0xa, 0x300) getsockname$packet(r0, 0x0, 0x0) r1 = socket(0x2, 0x80802, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4000004, &(0x7f0000000380)={0xa, 0x4e20, 0x5, @empty, 0x101}, 0x1c) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb1, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x4}, 0x8040, 0x6, 0x0, 0x7, 0xb, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, 0xec2bd, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0x800400000100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x10006, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xd, 0x4, 0x4, 0x2008, 0x5, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x800000, 0x4}, 0x50) 173.92µs ago: executing program 6 (id=3697): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc1}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 4 (id=3698): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) socket$inet6(0x10, 0x3, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x8800, 0x0, 0x20}, 0x18) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x2000c8a1, 0xc000, 0x0, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) kernel console output (not intermixed with test programs): ion, please check. [ 158.170573][ T9115] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.194413][ T28] audit: type=1400 audit(1777337134.288:1344): avc: denied { execute } for pid=9114 comm="syz.5.2084" path="/219/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 158.321537][ T6111] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.346967][ T1888] bridge_slave_1: left promiscuous mode [ 158.372545][ T1888] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.410513][ T1888] bridge_slave_0: left promiscuous mode [ 158.422009][ T1888] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.476167][ T9143] loop2: detected capacity change from 0 to 256 [ 158.552018][ T9152] netlink: 'syz.5.2096': attribute type 39 has an invalid length. [ 158.575432][ T1888] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.606644][ T1888] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.641537][ T1888] bond0 (unregistering): Released all slaves [ 158.663866][ T1888] bond1 (unregistering): (slave vcan1): Releasing backup interface [ 158.672517][ T1888] bond1 (unregistering): Released all slaves [ 158.690439][ T3023] 8021q: adding VLAN 0 to HW filter on device eth5 [ 158.716897][ T1888] hsr_slave_0: left promiscuous mode [ 158.723139][ T1888] hsr_slave_1: left promiscuous mode [ 158.729055][ T1888] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.763481][ T1888] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.828522][ T1888] team0 (unregistering): Port device team_slave_1 removed [ 158.845585][ T1888] team0 (unregistering): Port device team_slave_0 removed [ 158.901210][ T3373] tipc: Node number set to 2886997007 [ 159.094608][ T9180] bridge_slave_0: left allmulticast mode [ 159.106677][ T9180] bridge_slave_0: left promiscuous mode [ 159.114728][ T9180] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.136541][ T9180] bridge_slave_1: left allmulticast mode [ 159.161616][ T9180] bridge_slave_1: left promiscuous mode [ 159.183287][ T9180] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.212840][ T9180] bond0: (slave bond_slave_0): Releasing backup interface [ 159.257363][ T9180] bond0: (slave bond_slave_1): Releasing backup interface [ 159.301109][ T9180] team0: Port device team_slave_0 removed [ 159.322095][ T9180] team0: Port device team_slave_1 removed [ 159.336385][ T9180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.353057][ T9180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.370873][ T9180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.382280][ T9180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.400946][ T9180] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 159.600406][ T3023] 8021q: adding VLAN 0 to HW filter on device eth6 [ 159.941890][ T28] audit: type=1400 audit(1777337136.028:1345): avc: denied { read write } for pid=9223 comm="syz.5.2111" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 160.022413][ T3023] 8021q: adding VLAN 0 to HW filter on device eth7 [ 160.023605][ T28] audit: type=1400 audit(1777337136.028:1346): avc: denied { open } for pid=9223 comm="syz.5.2111" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 160.099638][ T9229] loop2: detected capacity change from 0 to 256 [ 160.106669][ T28] audit: type=1400 audit(1777337136.028:1347): avc: denied { ioctl } for pid=9223 comm="syz.5.2111" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 160.145415][ T9229] msdos: Unknown parameter 'dotª¶' [ 160.216633][ T28] audit: type=1400 audit(1777337136.128:1348): avc: denied { name_bind } for pid=9226 comm="syz.4.2112" src=204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 160.258948][ T3373] Process accounting resumed [ 160.294928][ T28] audit: type=1400 audit(1777337136.388:1349): avc: denied { create } for pid=9258 comm="syz.4.2122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 160.323383][ T28] audit: type=1400 audit(1777337136.398:1350): avc: denied { write } for pid=9256 comm="syz.2.2123" path="socket:[29212]" dev="sockfs" ino=29212 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 160.348774][ T28] audit: type=1400 audit(1777337136.408:1351): avc: denied { write } for pid=9258 comm="syz.4.2122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 160.482265][ T3023] 8021q: adding VLAN 0 to HW filter on device eth8 [ 160.510930][ T9284] xt_hashlimit: size too large, truncated to 1048576 [ 160.816383][ T9316] loop2: detected capacity change from 0 to 128 [ 160.864570][ T9316] EXT4-fs: Ignoring removed orlov option [ 160.886594][ T3287] udevd[3287]: incorrect ext4 checksum on /dev/loop2 [ 160.900432][ T9316] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 160.915569][ T3287] udevd[3287]: incorrect ext4 checksum on /dev/loop2 [ 160.959289][ T28] audit: type=1400 audit(1777337137.048:1352): avc: denied { write } for pid=9315 comm="syz.2.2133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 161.003905][ T28] audit: type=1400 audit(1777337137.088:1353): avc: denied { bind } for pid=9327 comm="syz.5.2137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 161.052750][ T28] audit: type=1400 audit(1777337137.088:1354): avc: denied { setopt } for pid=9327 comm="syz.5.2137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 161.666540][ T9424] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 161.742614][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 161.756664][ T28] audit: type=1400 audit(1777337137.848:1355): avc: denied { egress } for pid=310 comm="kworker/u8:5" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 161.818360][ T28] audit: type=1400 audit(1777337137.848:1356): avc: denied { sendto } for pid=310 comm="kworker/u8:5" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 161.876898][ T9432] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2149'. [ 161.929505][ T9443] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2155'. [ 161.955912][ T9443] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2155'. [ 162.433668][ T9468] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2164'. [ 162.452278][ T9468] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2164'. [ 162.490290][ T6186] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.500042][ T9468] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2164'. [ 162.516167][ T6186] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.527402][ T9468] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2164'. [ 162.537618][ T6186] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.554597][ T6186] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.674117][ T9473] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.702245][ T9473] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.725339][ T28] audit: type=1400 audit(1777337138.818:1357): avc: denied { write } for pid=9481 comm="syz.2.2168" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 162.764458][ T9473] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.786007][ T9473] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.837422][ T9473] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.858266][ T9473] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.941447][ T9473] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.958896][ T9473] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.019186][ T5899] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.028233][ T5899] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.032361][ T42] Bluetooth: hci0: command 0x1003 tx timeout [ 163.042755][ T5899] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.044576][ T3697] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 163.051052][ T5899] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.090667][ T5899] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.109835][ T5899] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.138353][ T5899] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.157664][ T5899] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.133622][ T28] audit: type=1400 audit(1777337140.228:1358): avc: denied { setopt } for pid=9569 comm="syz.5.2208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 164.341791][ T28] audit: type=1326 audit(1777337140.428:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9585 comm="syz.6.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f624f89cdd9 code=0x7ffc0000 [ 164.368934][ T28] audit: type=1326 audit(1777337140.428:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9585 comm="syz.6.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f624f89cdd9 code=0x7ffc0000 [ 164.394095][ T28] audit: type=1326 audit(1777337140.458:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9585 comm="syz.6.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f624f89cdd9 code=0x7ffc0000 [ 164.500947][ T9592] 8021q: adding VLAN 0 to HW filter on device bond1 [ 164.521015][ T9592] ip6erspan0: entered promiscuous mode [ 165.152584][ T9665] bridge_slave_0: left promiscuous mode [ 165.172500][ T9665] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.195231][ T9665] bridge_slave_1: left promiscuous mode [ 165.205283][ T9665] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.235728][ T9665] bond0: (slave bond_slave_0): Releasing backup interface [ 165.262008][ T9665] bond0: (slave bond_slave_1): Releasing backup interface [ 165.274255][ T9665] team0: Port device team_slave_0 removed [ 165.293902][ T9665] team0: Port device team_slave_1 removed [ 165.313303][ T9665] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.332936][ T9665] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.342449][ T9665] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 165.401431][ T9674] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 165.533277][ T9713] netlink: 'syz.2.2247': attribute type 5 has an invalid length. [ 165.957211][ T9763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2253'. [ 165.967723][ T9763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2253'. [ 165.990898][ T9763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2253'. [ 166.077732][ T9726] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 166.100878][ T9726] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 166.210037][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 166.210055][ T28] audit: type=1400 audit(1777337142.298:1369): avc: denied { read } for pid=9769 comm="syz.2.2256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 166.220899][ T9726] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 166.308045][ T9772] netlink: 'syz.2.2257': attribute type 4 has an invalid length. [ 166.344181][ T9772] netlink: 'syz.2.2257': attribute type 4 has an invalid length. [ 166.442783][ T9781] bridge0: left allmulticast mode [ 166.468597][ T9781] bridge0: port 1(vlan0) entered blocking state [ 166.486044][ T9781] bridge0: port 1(vlan0) entered disabled state [ 166.496109][ T9781] vlan0: entered allmulticast mode [ 166.870831][ T9797] loop5: detected capacity change from 0 to 512 [ 166.892737][ T9797] EXT4-fs: Ignoring removed nobh option [ 166.924550][ T9797] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #3: comm syz.5.2265: corrupted inode contents [ 166.960199][ T9797] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 166.960603][ T9797] EXT4-fs error (device loop5): ext4_dirty_inode:6587: inode #3: comm syz.5.2265: mark_inode_dirty error [ 166.969807][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 166.969831][ C0] EXT4-fs (loop5): initial error at time 1777337143: ext4_do_update_inode:5690: inode 3 [ 166.969879][ C0] EXT4-fs (loop5): last error at time 1777337143: ext4_do_update_inode:5690: inode 3 [ 167.007976][ T9797] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 167.008709][ T9797] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #3: comm syz.5.2265: corrupted inode contents [ 167.033068][ T9797] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 167.033276][ T9797] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #3: comm syz.5.2265: mark_inode_dirty error [ 167.073994][ T9797] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 167.074313][ T9797] Quota error (device loop5): write_blk: dquota write failed [ 167.091050][ T9797] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 167.101143][ T9797] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.2265: Failed to acquire dquot type 0 [ 167.112962][ T9797] loop5: lost filesystem error report for type 5 error -117 [ 167.113429][ T9797] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.2265: corrupted inode contents [ 167.133176][ T9797] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 167.133544][ T9797] EXT4-fs error (device loop5): ext4_dirty_inode:6587: inode #16: comm syz.5.2265: mark_inode_dirty error [ 167.155177][ T9797] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 167.155420][ T9797] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.2265: corrupted inode contents [ 167.176986][ T9797] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 167.177180][ T9797] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #16: comm syz.5.2265: mark_inode_dirty error [ 167.198790][ T9797] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 167.198991][ T9797] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.2265: corrupted inode contents [ 167.220309][ T9797] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 167.220558][ T9797] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 167.238931][ T9797] loop5: lost filesystem error report for type 5 error -117 [ 167.239140][ T9797] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.2265: corrupted inode contents [ 167.260299][ T9810] netlink: 51 bytes leftover after parsing attributes in process `syz.4.2269'. [ 167.264165][ T9797] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 167.269544][ T9797] EXT4-fs error (device loop5): ext4_truncate:4690: inode #16: comm syz.5.2265: mark_inode_dirty error [ 167.293974][ T9797] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 167.303853][ T9797] loop5: lost filesystem error report for type 5 error -117 [ 167.304287][ T9797] EXT4-fs (loop5): 1 truncate cleaned up [ 167.318276][ T9797] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.333865][ T9797] ext4 filesystem being mounted at /247/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.366303][ T9797] EXT4-fs warning (device loop5): ext4_es_cache_extent:1082: inode #3: comm syz.5.2265: ES cache extent failed: add [1,1,41,0x1] conflict with existing [1,-2,576460752303423487,0x18] [ 167.366303][ T9797] [ 167.401543][ T9797] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 167.413690][ T9797] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 167.424443][ T9797] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.2265: Failed to acquire dquot type 1 [ 167.465989][ T6111] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.479100][ T5899] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 167.498521][ T5899] EXT4-fs error (device loop5): ext4_release_dquot:7070: comm kworker/u8:14: Failed to release dquot type 1 [ 167.500716][ T28] audit: type=1400 audit(1777337143.588:1370): avc: denied { setopt } for pid=9817 comm="syz.0.2273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 167.510990][ T5899] loop5: lost filesystem error report for type 5 error -117 [ 167.677324][ T9830] loop5: detected capacity change from 0 to 1024 [ 167.708626][ T9830] EXT4-fs: inline encryption not supported [ 167.723803][ T9830] EXT4-fs (loop5): bad geometry: bigalloc file system with non-zero first_data_block [ 167.723803][ T9830] [ 167.773526][ T9836] loop2: detected capacity change from 0 to 164 [ 167.790608][ T9836] iso9660: Bad value for 'check' [ 167.835812][ T9830] loop5: detected capacity change from 0 to 4096 [ 167.858837][ T9830] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.968228][ T6111] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.653100][ T9856] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2288'. [ 168.662935][ T9856] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2288'. [ 168.677119][ T28] audit: type=1400 audit(1777337144.768:1371): avc: denied { mounton } for pid=9852 comm="syz.5.2287" path="/proc/595/cgroup" dev="proc" ino=30177 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 168.707178][ T9856] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2288'. [ 168.717150][ T5912] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.728444][ T9856] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2288'. [ 168.732953][ T5912] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.747697][ T5912] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.764621][ T5912] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.855973][ T9869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2292'. [ 168.870621][ T9869] netlink: 'syz.2.2292': attribute type 30 has an invalid length. [ 168.888205][ T9869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2292'. [ 169.923956][ T9909] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2309'. [ 170.340071][ T9940] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 170.706257][ T28] audit: type=1400 audit(1777337146.798:1372): avc: denied { getopt } for pid=9948 comm="syz.5.2328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 172.139640][ T28] audit: type=1400 audit(1777337148.228:1373): avc: denied { lock } for pid=10020 comm="syz.5.2346" path="socket:[30502]" dev="sockfs" ino=30502 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 172.189815][T10025] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2348'. [ 172.506172][T10049] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2353'. [ 173.309492][ T28] audit: type=1400 audit(1777337149.398:1374): avc: denied { setopt } for pid=10098 comm="syz.6.2366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 173.506944][T10114] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 173.545416][T10114] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 173.556810][T10114] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 173.588638][ T28] audit: type=1400 audit(1777337149.678:1375): avc: denied { watch watch_reads } for pid=10118 comm="syz.6.2374" path="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 173.751087][T10126] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.771362][T10126] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.834881][T10126] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.845040][T10126] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.914144][T10126] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.924376][T10126] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.998307][T10126] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.017525][T10126] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.099565][ T36] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.108318][ T36] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.132604][ T36] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.147363][ T36] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.176038][ T36] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.192498][ T36] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.210266][ T36] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.225524][ T36] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.292602][T10138] netlink: 'syz.2.2383': attribute type 5 has an invalid length. [ 174.300553][T10138] netlink: 45 bytes leftover after parsing attributes in process `syz.2.2383'. [ 174.320516][T10141] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2384'. [ 174.928987][ T368] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.940341][ T368] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.950684][ T368] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.965935][ T368] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.034834][ T28] audit: type=1400 audit(1777337151.128:1376): avc: denied { mount } for pid=10188 comm="syz.5.2404" name="/" dev="ramfs" ino=31918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 175.745616][T10202] netlink: 'syz.0.2418': attribute type 10 has an invalid length. [ 175.823067][ T3381] page_pool_release_retry() stalled pool shutdown: id 92, 1 inflight 60 sec [ 176.403301][T10235] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2420'. [ 176.498757][ T28] audit: type=1326 audit(1777337152.588:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10236 comm="syz.0.2421" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f52a2e36b57 code=0x0 [ 176.822751][T10247] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.834674][T10247] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.853688][T10247] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 177.027928][T10247] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.040306][T10247] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.053789][T10247] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 177.120847][T10247] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.132215][T10247] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.142780][T10247] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 177.252102][T10247] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.272783][T10247] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.283619][T10247] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 177.349143][ T5905] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.364388][ T28] audit: type=1400 audit(1777337153.458:1378): avc: denied { ioctl } for pid=10279 comm="syz.0.2439" path="socket:[32115]" dev="sockfs" ino=32115 ioctlcmd=0x6628 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 177.367055][ T5905] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 177.406561][ T5905] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 177.425312][ T368] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.433855][ T368] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 177.443293][ T368] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 177.452958][ T368] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.461928][ T368] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 177.470864][ T368] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 177.483431][ T368] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.512817][ T368] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 177.525629][T10291] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2441'. [ 177.531482][ T368] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 178.233160][ T28] audit: type=1326 audit(1777337154.328:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10322 comm="syz.4.2455" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff8cd84cdd9 code=0x0 [ 178.675047][T10331] netlink: 'syz.5.2458': attribute type 1 has an invalid length. [ 178.712941][T10331] bond4: entered promiscuous mode [ 178.722955][T10331] 8021q: adding VLAN 0 to HW filter on device bond4 [ 178.744569][T10331] 8021q: adding VLAN 0 to HW filter on device bond4 [ 178.764536][T10331] bond4: (slave vti0): The slave device specified does not support setting the MAC address [ 178.776656][T10331] bond4: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 178.801415][T10331] bond4: (slave vti0): making interface the new active one [ 178.814992][T10331] vti0: entered promiscuous mode [ 178.837653][ T28] audit: type=1326 audit(1777337154.928:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10334 comm="syz.0.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a2e3cdd9 code=0x7ffc0000 [ 178.866549][T10331] bond4: (slave vti0): Enslaving as an active interface with an up link [ 178.881764][ T28] audit: type=1326 audit(1777337154.928:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10334 comm="syz.0.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a2e3cdd9 code=0x7ffc0000 [ 178.910235][ T28] audit: type=1326 audit(1777337154.928:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10334 comm="syz.0.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a2e3cdd9 code=0x7ffc0000 [ 178.964440][ T28] audit: type=1326 audit(1777337154.928:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10334 comm="syz.0.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a2e3cdd9 code=0x7ffc0000 [ 178.993057][ T28] audit: type=1326 audit(1777337154.928:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10334 comm="syz.0.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f52a2e3cdd9 code=0x7ffc0000 [ 179.017128][ T28] audit: type=1326 audit(1777337154.928:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10334 comm="syz.0.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a2e3cdd9 code=0x7ffc0000 [ 179.042183][ T28] audit: type=1326 audit(1777337154.968:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10334 comm="syz.0.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f52a2dfd60e code=0x7ffc0000 [ 179.080130][ T28] audit: type=1326 audit(1777337154.968:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10334 comm="syz.0.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f52a2dfd60e code=0x7ffc0000 [ 179.296834][T10357] loop5: detected capacity change from 0 to 128 [ 179.314453][T10357] FAT-fs (loop5): bogus number of reserved sectors [ 179.333780][T10357] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 179.351630][T10357] FAT-fs (loop5): Can't find a valid FAT filesystem [ 179.582574][ T5168] page_pool_release_retry() stalled pool shutdown: id 96, 1 inflight 60 sec [ 179.632663][T10388] netlink: 'syz.5.2481': attribute type 27 has an invalid length. [ 179.643411][T10388] netlink: 'syz.5.2481': attribute type 3 has an invalid length. [ 179.651995][T10388] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2481'. [ 179.737543][T10393] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.2482'. [ 179.754671][T10393] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2482'. [ 180.175197][T10415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.185311][T10415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.527029][T10437] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.558873][T10441] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2503'. [ 180.572088][T10437] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.630439][T10437] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.683929][T10437] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.704340][T10452] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2508'. [ 180.714800][T10452] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2508'. [ 180.745946][ T36] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.775321][ T36] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.804912][ T5912] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.829331][ T5912] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.046780][T10469] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.071641][T10469] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.154983][T10469] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.170028][T10469] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.224811][T10469] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.234760][T10469] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.284470][T10469] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.304478][T10469] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.376802][ T5912] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.386546][ T5912] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.416257][ T5912] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.430876][ T5912] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.506487][ T5912] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.518965][ T5912] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.532407][ T5912] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.562706][ T5912] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.800790][T10486] netlink: 'syz.5.2521': attribute type 3 has an invalid length. [ 181.809168][T10486] netlink: 'syz.5.2521': attribute type 7 has an invalid length. [ 181.817329][T10486] netlink: 198320 bytes leftover after parsing attributes in process `syz.5.2521'. [ 182.107563][T10500] loop5: detected capacity change from 0 to 128 [ 182.184720][T10505] syz.5.2527: attempt to access beyond end of device [ 182.184720][T10505] loop5: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 182.209504][T10505] syz.5.2527: attempt to access beyond end of device [ 182.209504][T10505] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 182.236920][T10505] syz.5.2527: attempt to access beyond end of device [ 182.236920][T10505] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 182.283638][T10505] syz.5.2527: attempt to access beyond end of device [ 182.283638][T10505] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 182.315785][T10505] syz.5.2527: attempt to access beyond end of device [ 182.315785][T10505] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 182.365209][ T5912] kworker/u8:21: attempt to access beyond end of device [ 182.365209][ T5912] loop5: rw=1, sector=174, nr_sectors = 1 limit=128 [ 182.390922][ T5912] Buffer I/O error on dev loop5, logical block 174, lost async page write [ 182.424750][T10511] xt_hashlimit: size too large, truncated to 1048576 [ 183.271500][T10519] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2533'. [ 183.543341][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 183.543359][ T28] audit: type=1326 audit(1777337159.638:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10533 comm="syz.0.2540" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f52a2e3cdd9 code=0x0 [ 183.621113][ T28] audit: type=1400 audit(1777337159.688:1417): avc: denied { getopt } for pid=10535 comm="syz.4.2541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 183.822506][ T28] audit: type=1400 audit(1777337159.898:1418): avc: denied { ioctl } for pid=10544 comm="syz.4.2544" path="socket:[33914]" dev="sockfs" ino=33914 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 183.942522][T10565] netlink: 'syz.4.2551': attribute type 1 has an invalid length. [ 183.975992][T10565] 8021q: adding VLAN 0 to HW filter on device bond3 [ 183.997468][T10569] loop5: detected capacity change from 0 to 512 [ 184.055744][T10569] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 184.106106][T10569] ext4 filesystem being mounted at /320/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 184.258441][ T6111] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 184.336242][T10582] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2557'. [ 184.411568][T10582] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2557'. [ 184.518780][T10594] tipc: Failed to remove unknown binding: 66,1,1/2886997007:1222354791/1222354793 [ 185.217155][T10626] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2576'. [ 185.243569][T10626] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2576'. [ 185.405438][T10639] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2581'. [ 185.413898][ T28] audit: type=1400 audit(1777337161.498:1419): avc: denied { name_bind } for pid=10641 comm="syz.6.2583" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 185.480758][ T28] audit: type=1400 audit(1777337161.528:1420): avc: denied { name_connect } for pid=10641 comm="syz.6.2583" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 185.587447][T10479] kexec: Could not allocate control_code_buffer [ 185.720498][T10654] loop2: detected capacity change from 0 to 128 [ 185.735735][T10654] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 185.743643][T10654] FAT-fs (loop2): Filesystem has been set read-only [ 185.775530][ T28] audit: type=1400 audit(1777337161.868:1421): avc: denied { watch watch_reads } for pid=10653 comm="syz.2.2588" path="/526/bus/file1" dev="loop2" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 185.891182][T10660] netlink: 'syz.0.2591': attribute type 4 has an invalid length. [ 185.942549][T10661] netlink: 'syz.0.2591': attribute type 4 has an invalid length. [ 186.119690][T10670] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2593'. [ 186.152212][T10670] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2593'. [ 186.319183][T10684] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2596'. [ 186.343553][T10684] unsupported nlmsg_type 40 [ 186.880313][T10750] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2611'. [ 188.278971][ T28] audit: type=1400 audit(1777337164.368:1422): avc: denied { setopt } for pid=10802 comm="syz.0.2622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 188.412539][T10823] __nla_validate_parse: 1 callbacks suppressed [ 188.412576][T10823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2633'. [ 188.557110][T10839] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 189.244643][T10872] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.348112][T10872] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.396914][T10872] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.464318][T10872] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.527843][ T5890] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.546719][ T5890] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.579543][ T5890] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.609663][ T1618] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.658141][T10887] netlink: 372 bytes leftover after parsing attributes in process `syz.0.2657'. [ 190.090564][T10907] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2667'. [ 190.364990][T10922] loop2: detected capacity change from 0 to 512 [ 190.371934][T10922] journal_path: Non-blockdev passed as './file2' [ 190.393750][T10922] EXT4-fs: error: could not find journal device path [ 190.649611][T10935] netlink: 'syz.5.2678': attribute type 1 has an invalid length. [ 190.683631][T10935] 8021q: adding VLAN 0 to HW filter on device bond5 [ 190.691943][ T28] audit: type=1400 audit(1777337166.778:1423): avc: denied { remount } for pid=10937 comm="syz.0.2679" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 190.711915][T10935] bond5: (slave geneve2): making interface the new active one [ 190.729422][T10935] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 190.793327][T10943] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2680'. [ 190.802849][ T5890] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.843176][ T5890] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.851481][ T28] audit: type=1400 audit(1777337166.878:1424): avc: denied { write } for pid=10940 comm="syz.6.2681" name="file0" dev="tmpfs" ino=1680 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 190.895995][ T5890] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.912384][ T5890] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.927152][ T28] audit: type=1400 audit(1777337166.878:1425): avc: denied { open } for pid=10940 comm="syz.6.2681" path="/322/file0" dev="tmpfs" ino=1680 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 190.982913][ T28] audit: type=1400 audit(1777337166.878:1426): avc: denied { ioctl } for pid=10940 comm="syz.6.2681" path="/322/file0" dev="tmpfs" ino=1680 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 191.040383][ T28] audit: type=1400 audit(1777337166.988:1427): avc: denied { lock } for pid=10946 comm="syz.6.2683" path="socket:[33433]" dev="sockfs" ino=33433 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 191.091074][ T28] audit: type=1400 audit(1777337167.098:1428): avc: denied { view } for pid=10952 comm="syz.2.2686" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 192.330662][T10969] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 192.708751][T11009] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2708'. [ 192.776045][T11013] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 192.857843][ T28] audit: type=1400 audit(1777337168.948:1429): avc: denied { mounton } for pid=11020 comm="syz.2.2713" path="/550/file0" dev="tmpfs" ino=2861 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 192.936056][T10851] kexec: Could not allocate control_code_buffer [ 193.053091][T11041] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2722'. [ 193.242813][T11049] loop5: detected capacity change from 0 to 8192 [ 193.445911][T11060] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 193.516303][T11065] netlink: 'syz.0.2729': attribute type 6 has an invalid length. [ 193.982310][T11056] syz.5.2725 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 193.993467][T11056] CPU: 1 UID: 0 PID: 11056 Comm: syz.5.2725 Tainted: G W syzkaller #0 PREEMPT(full) [ 193.993566][T11056] Tainted: [W]=WARN [ 193.993574][T11056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 193.993612][T11056] Call Trace: [ 193.993620][T11056] [ 193.993629][T11056] __dump_stack+0x1d/0x30 [ 193.993665][T11056] dump_stack_lvl+0x95/0xd0 [ 193.993691][T11056] dump_stack+0x15/0x1b [ 193.993714][T11056] dump_header+0x80/0x240 [ 193.993740][T11056] oom_kill_process+0x295/0x350 [ 193.993777][T11056] out_of_memory+0x97d/0xb80 [ 193.993849][T11056] try_charge_memcg+0x62f/0xa10 [ 193.993892][T11056] charge_memcg+0x6d/0x120 [ 193.993922][T11056] __mem_cgroup_charge+0x28/0xb0 [ 193.993954][T11056] handle_mm_fault+0x105f/0x2e70 [ 193.994062][T11056] ? _raw_spin_lock+0x52/0xa0 [ 193.994174][T11056] __get_user_pages+0x1290/0x1f10 [ 193.994212][T11056] __mm_populate+0x242/0x390 [ 193.994285][T11056] __se_sys_mlockall+0x35f/0x3c0 [ 193.994323][T11056] __x64_sys_mlockall+0x1f/0x30 [ 193.994361][T11056] x64_sys_call+0xf90/0x3020 [ 193.994429][T11056] do_syscall_64+0x12c/0x3b0 [ 193.994510][T11056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.994535][T11056] RIP: 0033:0x7fd77e8ecdd9 [ 193.994554][T11056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.994575][T11056] RSP: 002b:00007fd77d326028 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 193.994667][T11056] RAX: ffffffffffffffda RBX: 00007fd77eb66090 RCX: 00007fd77e8ecdd9 [ 193.994684][T11056] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 193.994698][T11056] RBP: 00007fd77e982d69 R08: 0000000000000000 R09: 0000000000000000 [ 193.994713][T11056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.994727][T11056] R13: 00007fd77eb66128 R14: 00007fd77eb66090 R15: 00007fff212017d8 [ 193.994750][T11056] [ 193.994939][T11056] memory: usage 307200kB, limit 307200kB, failcnt 1153 [ 194.200099][T11056] memory+swap: usage 274968kB, limit 9007199254740988kB, failcnt 0 [ 194.208623][T11056] kmem: usage 190788kB, limit 9007199254740988kB, failcnt 0 [ 194.216112][T11056] Memory cgroup stats for /syz5: [ 194.216381][T11056] cache 52449280 [ 194.243590][T11056] rss 11866112 [ 194.262735][T11056] shmem 50855936 [ 194.271994][T11056] mapped_file 1572864 [ 194.290426][T11056] dirty 0 [ 194.309712][T11056] writeback 0 [ 194.339986][T11056] workingset_refault_anon 47 [ 194.361202][T11056] workingset_refault_file 713 [ 194.401864][T11056] swap 20688896 [ 194.435067][T11056] swapcached 20885504 [ 194.470470][T11056] pgpgin 115810 [ 194.502744][T11056] pgpgout 100108 [ 194.527733][T11056] pgfault 80257 [ 194.540060][T11068] kexec: Could not allocate control_code_buffer [ 194.558454][T11056] pgmajfault 37 [ 194.594511][T11056] inactive_anon 50696192 [ 194.608047][T11056] active_anon 176128 [ 194.626027][T11056] inactive_file 12288 [ 194.636175][T11056] active_file 8192 [ 194.645237][T11056] unevictable 13422592 [ 194.655470][T11056] hierarchical_memory_limit 314572800 [ 194.669738][T11056] hierarchical_memsw_limit 9223372036854771712 [ 194.686780][T11056] total_cache 52449280 [ 194.698880][T11056] total_rss 11866112 [ 194.716275][T11056] total_shmem 50855936 [ 194.729482][T11056] total_mapped_file 1572864 [ 194.740278][T11056] total_dirty 0 [ 194.752644][T11056] total_writeback 0 [ 194.764681][T11056] total_workingset_refault_anon 47 [ 194.776494][T11056] total_workingset_refault_file 713 [ 194.785667][T11056] total_swap 20688896 [ 194.802161][T11056] total_swapcached 20885504 [ 194.812749][T11056] total_pgpgin 115810 [ 194.819042][T11056] total_pgpgout 100108 [ 194.823530][T11056] total_pgfault 80257 [ 194.827549][T11056] total_pgmajfault 37 [ 194.832039][T11056] total_inactive_anon 50696192 [ 194.843827][T11056] total_active_anon 176128 [ 194.857345][T11056] total_inactive_file 12288 [ 194.869294][T11056] total_active_file 8192 [ 194.870078][ T28] audit: type=1400 audit(1777337170.958:1430): avc: denied { getopt } for pid=11082 comm="syz.0.2735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 194.878332][T11056] total_unevictable 13422592 [ 194.900799][T11056] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.2725,pid=11048,uid=0 [ 194.903167][T11086] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2737'. [ 194.915951][T11056] Memory cgroup out of memory: Killed process 11056 (syz.5.2725) total-vm:96348kB, anon-rss:12812kB, file-rss:64648kB, shmem-rss:0kB, UID:0 pgtables:228kB oom_score_adj:1000 [ 194.956073][T11094] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2740'. [ 195.004418][ T28] audit: type=1400 audit(1777337171.098:1431): avc: denied { relabelfrom } for pid=11095 comm="syz.2.2741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 195.029529][T11094] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2740'. [ 195.039018][T11094] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2740'. [ 195.048257][ T28] audit: type=1400 audit(1777337171.098:1432): avc: denied { relabelto } for pid=11095 comm="syz.2.2741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 197.070488][T11158] netlink: 'syz.6.2766': attribute type 27 has an invalid length. [ 197.112746][T11158] netlink: 'syz.6.2766': attribute type 3 has an invalid length. [ 197.139383][T11158] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2766'. [ 197.175594][ T28] audit: type=1400 audit(1777337173.268:1433): avc: denied { unmount } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 197.246211][T11166] netlink: 'syz.5.2771': attribute type 1 has an invalid length. [ 197.262527][T11166] netlink: 'syz.5.2771': attribute type 4 has an invalid length. [ 197.264501][ T6255] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.283385][T11166] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.2771'. [ 197.721112][ T1618] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.737142][ T1618] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.791494][T11185] netlink: 'syz.2.2781': attribute type 27 has an invalid length. [ 197.806132][ T1618] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.810523][T11185] netlink: 'syz.2.2781': attribute type 3 has an invalid length. [ 197.837691][ T1618] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.840049][T11185] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2781'. [ 197.944582][ T1618] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.955631][ T1618] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.015159][ T1618] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.036518][ T1618] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.694154][ T1618] bond0 (unregistering): Released all slaves [ 198.714952][ T1618] bond1 (unregistering): Released all slaves [ 198.745064][ T3023] 8021q: adding VLAN 0 to HW filter on device eth9 [ 198.789165][T11252] netlink: 'syz.4.2795': attribute type 27 has an invalid length. [ 198.797473][T11252] netlink: 'syz.4.2795': attribute type 3 has an invalid length. [ 198.808876][T11252] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2795'. [ 198.809156][ T1618] hsr_slave_0: left promiscuous mode [ 198.825348][ T1618] hsr_slave_1: left promiscuous mode [ 198.845337][ T1618] veth1_macvtap: left promiscuous mode [ 198.850939][ T1618] veth0_macvtap: left promiscuous mode [ 199.132735][T11272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2805'. [ 199.169655][T11272] netlink: 'syz.4.2805': attribute type 5 has an invalid length. [ 199.187604][T11272] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2805'. [ 199.346578][T11178] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.353721][T11178] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.360925][T11178] bridge_slave_0: entered allmulticast mode [ 199.367765][T11178] bridge_slave_0: entered promiscuous mode [ 199.377413][T11272] geneve3: entered promiscuous mode [ 199.383029][T11272] geneve3: entered allmulticast mode [ 199.393438][T11178] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.401090][T11178] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.409008][T11178] bridge_slave_1: entered allmulticast mode [ 199.415557][T11178] bridge_slave_1: entered promiscuous mode [ 199.426532][ T36] netdevsim netdevsim4 eth0: set [1, 2] type 2 family 0 port 256 - 0 [ 199.434851][ T36] netdevsim netdevsim4 eth1: set [1, 2] type 2 family 0 port 256 - 0 [ 199.450987][ T36] netdevsim netdevsim4 eth2: set [1, 2] type 2 family 0 port 256 - 0 [ 199.461846][T11178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.471324][ T5903] netdevsim netdevsim4 eth3: set [1, 2] type 2 family 0 port 256 - 0 [ 199.480690][T11178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.502807][T11178] team0: Port device team_slave_0 added [ 199.509838][T11178] team0: Port device team_slave_1 added [ 199.526377][T11178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.533616][T11178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.559890][T11178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.571951][T11178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.579267][T11178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.605308][T11178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.616800][ T3023] 8021q: adding VLAN 0 to HW filter on device eth10 [ 199.633753][ T1618] IPVS: stop unused estimator thread 0... [ 199.649917][T11178] hsr_slave_0: entered promiscuous mode [ 199.656031][T11178] hsr_slave_1: entered promiscuous mode [ 199.748236][T11178] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 199.764732][T11178] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 199.774555][T11178] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 199.783827][T11178] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 199.791652][T11178] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 199.800420][T11178] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 199.808375][ T3023] 8021q: adding VLAN 0 to HW filter on device eth11 [ 199.815621][T11178] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 199.825141][T11178] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 199.863282][T11178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.880361][T11178] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.890726][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.897839][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.923116][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.930243][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.947615][T11178] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 199.969010][ T3023] 8021q: adding VLAN 0 to HW filter on device eth12 [ 200.058562][T11178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.163072][T11178] veth0_vlan: entered promiscuous mode [ 200.170666][T11178] veth1_vlan: entered promiscuous mode [ 200.187296][T11178] veth0_macvtap: entered promiscuous mode [ 200.194763][T11178] veth1_macvtap: entered promiscuous mode [ 200.206211][T11178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.217179][T11178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.228982][ T1618] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.242525][ T1618] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.251363][ T1618] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.263941][ T1618] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.276581][ T28] audit: type=1400 audit(1777337176.368:1434): avc: denied { mount } for pid=11178 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 200.338973][T11360] netlink: 'syz.4.2818': attribute type 39 has an invalid length. [ 200.429441][T11358] random: crng reseeded on system resumption [ 200.435691][ T28] audit: type=1400 audit(1777337176.518:1435): avc: denied { write } for pid=11356 comm="syz.2.2816" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 200.460778][ T28] audit: type=1400 audit(1777337176.518:1436): avc: denied { open } for pid=11356 comm="syz.2.2816" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 200.605246][ T28] audit: type=1400 audit(1777337176.698:1437): avc: denied { create } for pid=11373 comm="syz.6.2808" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 200.653038][T11380] netlink: 'syz.7.2811': attribute type 30 has an invalid length. [ 200.672697][T11380] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2811'. [ 200.700656][T11380] netlink: 'syz.7.2811': attribute type 30 has an invalid length. [ 200.722019][T11380] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2811'. [ 200.925669][ T28] audit: type=1400 audit(1777337177.018:1438): avc: denied { create } for pid=11396 comm="syz.6.2822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 201.731770][ T28] audit: type=1400 audit(1777337177.818:1439): avc: denied { ioctl } for pid=11433 comm="syz.6.2836" path="socket:[36489]" dev="sockfs" ino=36489 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 202.388747][T11454] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2844'. [ 202.558960][ T28] audit: type=1400 audit(1777337178.648:1440): avc: denied { read } for pid=11457 comm="syz.6.2847" path="socket:[35532]" dev="sockfs" ino=35532 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 202.611284][T11461] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2848'. [ 203.133746][T11483] loop2: detected capacity change from 0 to 4096 [ 203.160074][T11483] EXT4-fs: inline encryption not supported [ 203.214399][T11483] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 203.290273][T11483] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8856c019, mo2=0003] [ 203.324148][T11499] random: crng reseeded on system resumption [ 203.355450][T11483] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.581151][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.913005][ T28] audit: type=1400 audit(1777337180.008:1441): avc: denied { map } for pid=11513 comm="syz.7.2867" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=36606 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 203.969979][ T28] audit: type=1400 audit(1777337180.038:1442): avc: denied { read write } for pid=11513 comm="syz.7.2867" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=36606 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 204.067432][T11520] loop7: detected capacity change from 0 to 256 [ 204.392892][T11533] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2875'. [ 204.412859][T11533] netlink: 'syz.7.2875': attribute type 29 has an invalid length. [ 204.428459][T11533] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2875'. [ 204.462361][T11533] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2875'. [ 204.492263][T11533] netlink: 'syz.7.2875': attribute type 29 has an invalid length. [ 204.498886][T11535] syz_tun: entered allmulticast mode [ 204.512785][T11533] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2875'. [ 204.515848][T11535] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 204.530377][T11535] mroute: pending queue full, dropping entries [ 204.568131][T11534] syz_tun: left allmulticast mode [ 204.692653][ T28] audit: type=1400 audit(1777337180.788:1443): avc: denied { bind } for pid=11542 comm="syz.7.2880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 204.718048][T11543] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2880'. [ 204.749942][T11545] ucma_write: process 1412 (syz.2.2881) changed security contexts after opening file descriptor, this is not allowed. [ 205.030477][T11562] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2888'. [ 205.042918][T11564] loop7: detected capacity change from 0 to 512 [ 205.064628][T11564] EXT4-fs: Ignoring removed nomblk_io_submit option [ 205.088125][T11564] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 205.098756][T11564] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8840c01d, mo2=0102] [ 205.108061][T11564] EXT4-fs (loop7): couldn't mount RDWR because of unsupported optional features (80) [ 205.118735][T11564] EXT4-fs (loop7): Skipping orphan cleanup due to unknown ROCOMPAT features [ 205.131561][T11564] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 205.147466][T11564] EXT4-fs warning (device loop7): dx_probe:861: inode #2: comm syz.7.2889: dx entry: limit 65535 != root limit 120 [ 205.159800][T11564] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.2889: Corrupt directory, running e2fsck is recommended [ 205.173736][T11564] EXT4-fs error (device loop7): ext4_readdir:265: inode #2: block 3: comm syz.7.2889: path /13/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 205.211329][T11178] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.141533][T11647] __nla_validate_parse: 1 callbacks suppressed [ 207.141589][T11647] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2919'. [ 207.180059][T11647] openvswitch: netlink: Flow key attr not present in new flow. [ 207.336995][T11653] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 207.369082][ T28] audit: type=1400 audit(1777337183.458:1444): avc: denied { mounton } for pid=11655 comm="syz.6.2922" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 207.449446][T11660] bridge0: port 3(syz_tun) entered blocking state [ 207.483567][T11660] bridge0: port 3(syz_tun) entered disabled state [ 207.509539][T11660] syz_tun: entered allmulticast mode [ 207.526077][T11660] syz_tun: entered promiscuous mode [ 207.546774][T11663] netlink: 'syz.7.2924': attribute type 10 has an invalid length. [ 207.564247][ T28] audit: type=1400 audit(1777337183.658:1445): avc: denied { append } for pid=11650 comm="syz.5.2920" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 207.570491][T11660] bridge0: port 3(syz_tun) entered blocking state [ 207.593835][T11660] bridge0: port 3(syz_tun) entered forwarding state [ 207.634276][T11663] bridge0: port 3(syz_tun) entered disabled state [ 207.640826][T11663] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.648275][T11663] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.694991][T11663] bridge0: port 3(syz_tun) entered blocking state [ 207.701584][T11663] bridge0: port 3(syz_tun) entered forwarding state [ 207.708357][T11663] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.715487][T11663] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.723096][T11663] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.730242][T11663] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.782102][T11663] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 208.013184][T11669] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 208.019858][T11669] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 208.056022][T11669] vhci_hcd vhci_hcd.0: Device attached [ 208.129214][T11675] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 208.159664][T11671] vhci_hcd: connection closed [ 208.159829][ T36] vhci_hcd vhci_hcd.5: stop threads [ 208.186026][ T36] vhci_hcd vhci_hcd.5: release socket [ 208.203699][ T36] vhci_hcd vhci_hcd.5: disconnect device [ 208.355989][ T28] audit: type=1400 audit(1777337184.448:1446): avc: denied { watch } for pid=11683 comm="syz.7.2932" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 208.855435][T11701] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2938'. [ 208.948585][T11701] bridge0: port 3(syz_tun) entered disabled state [ 208.967858][T11701] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.988286][T11701] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.181214][T11706] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2940'. [ 209.313267][T11710] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2952'. [ 209.372489][T11714] -1: renamed from syzkaller0 [ 209.502437][T11721] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2945'. [ 209.850727][T11751] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2957'. [ 209.882308][T11751] openvswitch: netlink: Flow key attr not present in new flow. [ 209.884660][T11755] dvmrp1: entered allmulticast mode [ 210.515592][T11806] netlink: 192 bytes leftover after parsing attributes in process `syz.4.2971'. [ 210.586236][T11814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2974'. [ 210.622559][T11814] openvswitch: netlink: Flow key attr not present in new flow. [ 210.790887][T11828] loop7: detected capacity change from 0 to 1024 [ 210.808396][T11828] EXT4-fs: inline encryption not supported [ 210.815261][T11828] EXT4-fs: Ignoring removed bh option [ 210.832780][T11828] EXT4-fs: Ignoring removed nobh option [ 210.847668][ T28] audit: type=1326 audit(1777337186.938:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11823 comm="syz.6.2978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f624f89cdd9 code=0x7fc00000 [ 210.875741][T11828] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.941670][T11178] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.591440][T11862] geneve1: entered promiscuous mode [ 211.614443][T11861] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2986'. [ 211.937853][ T28] audit: type=1400 audit(1777337188.028:1448): avc: denied { read } for pid=11885 comm="syz.7.2991" path="socket:[38119]" dev="sockfs" ino=38119 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 212.046385][ T28] audit: type=1326 audit(1777337188.138:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11823 comm="syz.6.2978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f624f896b57 code=0x7fc00000 [ 212.073650][ T28] audit: type=1326 audit(1777337188.138:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11823 comm="syz.6.2978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f624f83e159 code=0x7fc00000 [ 212.110689][T11896] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2995'. [ 212.127317][ T28] audit: type=1326 audit(1777337188.138:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11823 comm="syz.6.2978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f624f83e21d code=0x7fc00000 [ 212.154003][ T28] audit: type=1326 audit(1777337188.138:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11823 comm="syz.6.2978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f624f89cdd9 code=0x7fc00000 [ 212.386138][ T28] audit: type=1400 audit(1777337188.478:1453): avc: denied { listen } for pid=11907 comm="syz.5.2999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 212.407165][ T28] audit: type=1400 audit(1777337188.478:1454): avc: denied { accept } for pid=11907 comm="syz.5.2999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 212.446247][T11910] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3001'. [ 213.514573][T11956] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3019'. [ 214.127693][T11969] loop2: detected capacity change from 0 to 512 [ 214.156137][T11968] netlink: 'syz.7.3024': attribute type 1 has an invalid length. [ 214.174172][T11969] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.194952][T11969] ext4 filesystem being mounted at /616/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 214.197500][T11975] loop5: detected capacity change from 0 to 256 [ 214.231340][T11968] 8021q: adding VLAN 0 to HW filter on device bond1 [ 214.280680][T11975] FAT-fs (loop5): Directory bread(block 64) failed [ 214.298084][T11976] bond1: (slave veth1_to_team): Enslaving as a backup interface with an up link [ 214.315038][T11975] FAT-fs (loop5): Directory bread(block 65) failed [ 214.321678][T11975] FAT-fs (loop5): Directory bread(block 66) failed [ 214.329193][T11975] FAT-fs (loop5): Directory bread(block 67) failed [ 214.337838][T11975] FAT-fs (loop5): Directory bread(block 68) failed [ 214.344923][T11975] FAT-fs (loop5): Directory bread(block 69) failed [ 214.351664][T11975] FAT-fs (loop5): Directory bread(block 70) failed [ 214.365441][T11975] FAT-fs (loop5): Directory bread(block 71) failed [ 214.382783][T11975] FAT-fs (loop5): Directory bread(block 72) failed [ 214.395436][T11975] FAT-fs (loop5): Directory bread(block 73) failed [ 214.458030][ T28] audit: type=1400 audit(1777337190.548:1455): avc: denied { ioctl } for pid=11974 comm="syz.5.3026" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 214.549165][ T30] kworker/u8:1: attempt to access beyond end of device [ 214.549165][ T30] loop5: rw=1, sector=1224, nr_sectors = 32 limit=256 [ 214.576036][ T30] kworker/u8:1: attempt to access beyond end of device [ 214.576036][ T30] loop5: rw=1, sector=1288, nr_sectors = 32 limit=256 [ 214.604124][ T30] kworker/u8:1: attempt to access beyond end of device [ 214.604124][ T30] loop5: rw=1, sector=1352, nr_sectors = 32 limit=256 [ 214.632603][ T30] kworker/u8:1: attempt to access beyond end of device [ 214.632603][ T30] loop5: rw=1, sector=1416, nr_sectors = 32 limit=256 [ 214.664639][ T30] kworker/u8:1: attempt to access beyond end of device [ 214.664639][ T30] loop5: rw=1, sector=1480, nr_sectors = 32 limit=256 [ 214.696672][ T30] kworker/u8:1: attempt to access beyond end of device [ 214.696672][ T30] loop5: rw=1, sector=1544, nr_sectors = 32 limit=256 [ 214.728576][ T30] kworker/u8:1: attempt to access beyond end of device [ 214.728576][ T30] loop5: rw=1, sector=1608, nr_sectors = 32 limit=256 [ 214.759649][ T30] kworker/u8:1: attempt to access beyond end of device [ 214.759649][ T30] loop5: rw=1, sector=1672, nr_sectors = 32 limit=256 [ 214.791181][ T30] kworker/u8:1: attempt to access beyond end of device [ 214.791181][ T30] loop5: rw=1, sector=1736, nr_sectors = 32 limit=256 [ 214.828312][ T30] kworker/u8:1: attempt to access beyond end of device [ 214.828312][ T30] loop5: rw=1, sector=1832, nr_sectors = 32 limit=256 [ 215.043293][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.760071][T11985] kexec: Could not allocate control_code_buffer [ 215.826483][T11996] loop2: detected capacity change from 0 to 512 [ 215.857693][T11996] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 215.897153][T11996] EXT4-fs (loop2): 1 truncate cleaned up [ 215.914202][T11996] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.135381][T12016] netlink: 192 bytes leftover after parsing attributes in process `syz.5.3039'. [ 216.212358][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.131650][T12054] netlink: 192 bytes leftover after parsing attributes in process `syz.7.3052'. [ 217.429336][ T28] audit: type=1400 audit(1777337193.518:1456): avc: denied { write } for pid=12059 comm="syz.7.3055" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 218.700763][ T28] audit: type=1400 audit(1777337194.788:1457): avc: denied { read } for pid=12107 comm="syz.7.3077" path="socket:[38367]" dev="sockfs" ino=38367 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 218.736931][ T28] audit: type=1400 audit(1777337194.788:1458): avc: denied { write } for pid=12107 comm="syz.7.3077" path="socket:[38367]" dev="sockfs" ino=38367 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 218.889469][T12122] gretap1: left promiscuous mode [ 218.896284][T12122] 8021q: adding VLAN 0 to HW filter on device bond2 [ 218.912287][T12122] 8021q: adding VLAN 0 to HW filter on device eth0 [ 218.921509][T12122] 8021q: adding VLAN 0 to HW filter on device eth1 [ 218.931558][T12122] 8021q: adding VLAN 0 to HW filter on device eth2 [ 218.941060][T12122] 8021q: adding VLAN 0 to HW filter on device eth3 [ 218.956449][T12122] geneve3: left promiscuous mode [ 218.961484][T12122] geneve3: left allmulticast mode [ 219.411797][T12155] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3097'. [ 219.428622][T12155] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3097'. [ 219.558912][T12163] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3102'. [ 221.234704][T12213] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3131'. [ 221.255368][T12215] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.267018][T12210] netlink: 131740 bytes leftover after parsing attributes in process `syz.4.3121'. [ 221.269888][T12215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.287375][T12220] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3131'. [ 221.288633][T12210] netlink: zone id is out of range [ 221.322016][T12210] netlink: zone id is out of range [ 221.325078][T12215] veth0_to_batadv: left promiscuous mode [ 221.335277][T12210] netlink: zone id is out of range [ 221.341642][T12215] veth0_to_batadv: left allmulticast mode [ 221.347655][T12210] netlink: zone id is out of range [ 221.347718][T12210] netlink: zone id is out of range [ 221.347752][T12210] netlink: zone id is out of range [ 221.347773][T12210] netlink: zone id is out of range [ 221.347814][T12210] netlink: zone id is out of range [ 221.347836][T12210] netlink: zone id is out of range [ 221.347871][T12210] netlink: zone id is out of range [ 221.396542][T12215] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 221.407636][T12215] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 221.421103][T12215] veth1_vlan: left promiscuous mode [ 221.429953][T12215] veth0_vlan: left promiscuous mode [ 221.436404][T12215] veth0_vlan: entered promiscuous mode [ 221.471196][T12215] veth1_vlan: entered promiscuous mode [ 221.489826][T12215] veth1_macvtap: left promiscuous mode [ 221.497450][T12215] veth0_macvtap: left promiscuous mode [ 221.506202][T12215] veth0_macvtap: entered promiscuous mode [ 221.514071][T12215] veth1_macvtap: entered promiscuous mode [ 221.525291][T12215] bond1: left promiscuous mode [ 221.530646][T12215] 8021q: adding VLAN 0 to HW filter on device bond1 [ 221.576616][T12243] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3134'. [ 221.585804][T12215] 8021q: adding VLAN 0 to HW filter on device bond3 [ 221.596017][T12243] netlink: 'syz.2.3134': attribute type 7 has an invalid length. [ 221.612965][T12215] 8021q: adding VLAN 0 to HW filter on device bond2 [ 221.614078][T12243] netlink: 'syz.2.3134': attribute type 8 has an invalid length. [ 221.623056][T12215] veth0_to_team: entered promiscuous mode [ 221.636499][T12215] erspan0: entered promiscuous mode [ 221.642416][T12215] erspan0: entered allmulticast mode [ 221.645538][T12243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3134'. [ 221.648278][T12215] macvtap1: left promiscuous mode [ 221.663052][T12215] macvtap1: left allmulticast mode [ 221.668356][T12215] erspan0: left allmulticast mode [ 221.686679][T12215] bond4: left promiscuous mode [ 221.695739][T12215] vti0: left promiscuous mode [ 221.711561][T12215] 8021q: adding VLAN 0 to HW filter on device eth0 [ 221.726860][T12215] 8021q: adding VLAN 0 to HW filter on device eth1 [ 221.745084][T12215] 8021q: adding VLAN 0 to HW filter on device eth2 [ 221.765762][T12215] 8021q: adding VLAN 0 to HW filter on device eth3 [ 222.027398][T12261] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3142'. [ 222.038615][ T5172] IPVS: starting estimator thread 0... [ 222.152932][T12263] IPVS: using max 2688 ests per chain, 134400 per kthread [ 222.293523][T12277] netlink: 'syz.6.3145': attribute type 7 has an invalid length. [ 222.316593][T12277] netlink: 'syz.6.3145': attribute type 8 has an invalid length. [ 222.688756][T12282] 8021q: adding VLAN 0 to HW filter on device eth0 [ 222.704426][T12282] 8021q: adding VLAN 0 to HW filter on device eth1 [ 222.718715][T12282] 8021q: adding VLAN 0 to HW filter on device eth2 [ 222.755319][T12282] 8021q: adding VLAN 0 to HW filter on device eth3 [ 222.811610][T12297] loop7: detected capacity change from 0 to 512 [ 222.836591][T12297] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 222.879063][T12297] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 222.928886][T12297] System zones: 0-1, 15-15, 18-18, 34-34 [ 222.952778][T12297] EXT4-fs (loop7): orphan cleanup on readonly fs [ 222.959629][T12297] Quota error (device loop7): v2_read_header: Failed header read: expected=8 got=0 [ 222.969269][T12297] EXT4-fs warning (device loop7): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 222.984398][T12297] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 222.992022][T12297] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.3155: bad orphan inode 16 [ 223.012360][T12297] loop7: lost filesystem error report for type 5 error -117 [ 223.017531][T12297] ext4_test_bit(bit=15, block=18) = 1 [ 223.025001][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 223.025036][ C0] EXT4-fs (loop7): initial error at time 1777337199: ext4_orphan_get:1423 [ 223.025078][ C0] EXT4-fs (loop7): last error at time 1777337199: ext4_orphan_get:1423 [ 223.072315][T12297] is_bad_inode(inode)=0 [ 223.076699][T12297] NEXT_ORPHAN(inode)=0 [ 223.080929][T12297] max_ino=32 [ 223.084730][T12297] i_nlink=2 [ 223.089470][T12297] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 223.139707][T12297] netlink: 131740 bytes leftover after parsing attributes in process `syz.7.3155'. [ 223.234441][T11178] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.653749][ T28] audit: type=1400 audit(1777337199.748:1459): avc: denied { write } for pid=12331 comm="syz.5.3171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 224.490179][T12342] netlink: 'syz.4.3175': attribute type 1 has an invalid length. [ 224.522921][T12342] 8021q: adding VLAN 0 to HW filter on device bond4 [ 224.611173][T12342] bond4: (slave veth5): Enslaving as an active interface with a down link [ 224.634428][T12345] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 224.646852][T12345] bond4: (slave batadv1): making interface the new active one [ 224.656455][T12345] batadv1: entered promiscuous mode [ 224.671598][T12345] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 224.703698][ T28] audit: type=1326 audit(1777337200.798:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12360 comm="syz.4.3184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8cd84cdd9 code=0x7ffc0000 [ 224.749232][ T28] audit: type=1326 audit(1777337200.798:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12360 comm="syz.4.3184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8cd84cdd9 code=0x7ffc0000 [ 224.775271][ T28] audit: type=1326 audit(1777337200.798:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12360 comm="syz.4.3184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8cd84cdd9 code=0x7ffc0000 [ 224.810220][ T28] audit: type=1326 audit(1777337200.798:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12360 comm="syz.4.3184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff8cd84cdd9 code=0x7ffc0000 [ 224.840092][ T28] audit: type=1326 audit(1777337200.818:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12360 comm="syz.4.3184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8cd84cdd9 code=0x7ffc0000 [ 224.875583][ T28] audit: type=1326 audit(1777337200.818:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12360 comm="syz.4.3184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8cd84cdd9 code=0x7ffc0000 [ 224.881047][T12374] loop5: detected capacity change from 0 to 1024 [ 224.900449][ T28] audit: type=1326 audit(1777337200.868:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12360 comm="syz.4.3184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8cd84cdd9 code=0x7ffc0000 [ 224.966652][ T28] audit: type=1326 audit(1777337200.868:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12360 comm="syz.4.3184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8cd84cdd9 code=0x7ffc0000 [ 224.969608][T12374] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.833204][ T6111] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.944719][T12413] netlink: 'syz.7.3203': attribute type 1 has an invalid length. [ 225.984895][T12413] bond2: entered promiscuous mode [ 225.995791][T12413] bond2: entered allmulticast mode [ 226.007090][T12413] 8021q: adding VLAN 0 to HW filter on device bond2 [ 226.030062][T12428] macvlan2: entered promiscuous mode [ 226.043057][T12428] macvlan2: entered allmulticast mode [ 226.053297][T12428] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 226.346873][T12436] loop7: detected capacity change from 0 to 1024 [ 226.377943][T12436] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.264683][T12459] loop5: detected capacity change from 0 to 512 [ 227.290797][T12459] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.3222: corrupted in-inode xattr: overlapping e_value [ 227.317995][T12459] fserror_report: 1 callbacks suppressed [ 227.318012][T12459] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 227.332184][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 227.347820][ C1] EXT4-fs (loop5): initial error at time 1777337203: ext4_iget_extra_inode:5128: inode 15 [ 227.357779][ C1] EXT4-fs (loop5): last error at time 1777337203: ext4_iget_extra_inode:5128: inode 15 [ 227.379954][T11178] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.418408][T12459] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.3222: couldn't read orphan inode 15 (err -117) [ 227.494160][T12459] loop5: lost filesystem error report for type 5 error -117 [ 227.494738][T12459] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.625956][ T6111] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.124525][T12495] loop7: detected capacity change from 0 to 4096 [ 228.155912][T12495] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.239774][T12495] __nla_validate_parse: 1 callbacks suppressed [ 228.239794][T12495] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3246'. [ 228.318787][T12495] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3246'. [ 228.401353][T11178] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.410286][T12511] netlink: 'syz.5.3242': attribute type 4 has an invalid length. [ 228.943060][ C0] net_ratelimit: 194 callbacks suppressed [ 228.943082][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 229.144995][T12537] xt_hashlimit: size too large, truncated to 1048576 [ 229.674223][ T28] kauditd_printk_skb: 201 callbacks suppressed [ 229.674241][ T28] audit: type=1400 audit(1777337205.768:1669): avc: denied { create } for pid=12551 comm="syz.2.3259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 229.729501][ T28] audit: type=1400 audit(1777337205.798:1670): avc: denied { ioctl } for pid=12551 comm="syz.2.3259" path="socket:[39340]" dev="sockfs" ino=39340 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 229.778833][ T3381] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 229.787967][ T28] audit: type=1400 audit(1777337205.818:1671): avc: denied { recv } for pid=12543 comm="syz.4.3256" saddr=10.128.0.163 src=30036 daddr=10.128.0.37 dest=56688 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 229.788893][T12557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.832481][ T3381] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 229.864301][T12557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.867461][ T28] audit: type=1400 audit(1777337205.818:1672): avc: denied { read write } for pid=3300 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 229.973676][ T28] audit: type=1400 audit(1777337205.818:1673): avc: denied { open } for pid=3300 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 230.032918][ T28] audit: type=1400 audit(1777337205.818:1674): avc: denied { ioctl } for pid=3300 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 230.090828][T12574] loop5: detected capacity change from 0 to 512 [ 230.106166][ T28] audit: type=1400 audit(1777337205.858:1675): avc: denied { read write } for pid=12556 comm="syz.2.3261" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 230.124852][T12576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.146785][T12574] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 230.165776][ T28] audit: type=1400 audit(1777337205.858:1676): avc: denied { open } for pid=12556 comm="syz.2.3261" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 230.166210][T12576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.208442][T12574] EXT4-fs (loop5): 1 truncate cleaned up [ 230.214799][T12574] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.235073][ T28] audit: type=1400 audit(1777337205.868:1677): avc: denied { read write } for pid=12556 comm="syz.2.3261" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 230.259815][ T28] audit: type=1400 audit(1777337205.868:1678): avc: denied { open } for pid=12556 comm="syz.2.3261" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 230.312860][ T6111] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.410144][T12546] kexec: Could not allocate control_code_buffer [ 230.455823][T12593] lo speed is unknown, defaulting to 1000 [ 230.470365][T12593] lo speed is unknown, defaulting to 1000 [ 230.477306][T12593] lo speed is unknown, defaulting to 1000 [ 230.524516][T12593] infiniband lyz2: set active [ 230.529307][ T35] lo speed is unknown, defaulting to 1000 [ 230.531602][T12593] infiniband lyz2: added lo [ 230.565477][T12593] RDS/IB: lyz2: added [ 230.575928][T12593] smc: adding ib device lyz2 with port count 1 [ 230.587064][T12593] smc: ib device lyz2 port 1 has no pnetid [ 230.599392][ T35] lo speed is unknown, defaulting to 1000 [ 230.605627][T12593] lo speed is unknown, defaulting to 1000 [ 230.671396][T12593] lo speed is unknown, defaulting to 1000 [ 230.716273][T12593] lo speed is unknown, defaulting to 1000 [ 230.758652][T12593] lo speed is unknown, defaulting to 1000 [ 230.876303][T12614] loop7: detected capacity change from 0 to 512 [ 230.970587][T12614] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 231.005846][T12614] EXT4-fs (loop7): 1 truncate cleaned up [ 231.013608][T12593] lo speed is unknown, defaulting to 1000 [ 231.043087][T12614] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.538038][T11178] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.632528][T12626] netlink: 'syz.5.3287': attribute type 1 has an invalid length. [ 231.655759][T12626] 8021q: adding VLAN 0 to HW filter on device bond6 [ 231.696374][T12626] bond6: (slave veth5): Enslaving as an active interface with a down link [ 231.710282][T12632] dvmrp1: entered allmulticast mode [ 231.758061][T12626] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 231.788905][T12626] bond6: (slave batadv1): making interface the new active one [ 231.811006][T12626] batadv1: entered promiscuous mode [ 231.816890][T12626] bond6: (slave batadv1): Enslaving as an active interface with an up link [ 231.833748][T12636] dvmrp1: left allmulticast mode [ 231.921801][T12642] netlink: 'syz.5.3293': attribute type 16 has an invalid length. [ 231.949127][T12642] netlink: 'syz.5.3293': attribute type 17 has an invalid length. [ 232.848341][T12658] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3300'. [ 232.942377][T12663] loop2: detected capacity change from 0 to 1024 [ 232.964727][T12666] netlink: 204 bytes leftover after parsing attributes in process `syz.4.3305'. [ 232.989206][T12669] netlink: 'syz.7.3302': attribute type 1 has an invalid length. [ 232.997774][T12663] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.998315][T12666] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3305'. [ 233.058727][T12669] 8021q: adding VLAN 0 to HW filter on device bond3 [ 233.111454][T12679] bond3: (slave veth7): Enslaving as an active interface with a down link [ 233.207860][T12669] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 233.217398][T12685] ref_ctr_offset mismatch. inode: 0x917 offset: 0x0 ref_ctr_offset(old): 0x200000000000 ref_ctr_offset(new): 0x0 [ 233.229819][T12669] bond3: (slave batadv1): making interface the new active one [ 233.252558][T12669] batadv1: entered promiscuous mode [ 233.270937][T12669] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 233.897870][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.694287][T12731] netlink: 'syz.2.3325': attribute type 1 has an invalid length. [ 234.824324][T12731] 8021q: adding VLAN 0 to HW filter on device bond5 [ 234.840518][ T28] kauditd_printk_skb: 73 callbacks suppressed [ 234.840535][ T28] audit: type=1400 audit(1777337210.928:1752): avc: denied { mounton } for pid=12737 comm="syz.7.3328" path="/proc/305/task" dev="proc" ino=39616 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 234.891962][T12738] loop7: detected capacity change from 0 to 128 [ 234.955493][T12735] bond5: (slave veth11): Enslaving as an active interface with a down link [ 235.013982][ T28] audit: type=1400 audit(1777337211.098:1753): avc: denied { mount } for pid=12740 comm="syz.4.3329" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 235.019232][T12736] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 235.069242][T12736] bond5: (slave batadv1): making interface the new active one [ 235.096950][T12736] batadv1: entered promiscuous mode [ 235.109462][T12736] bond5: (slave batadv1): Enslaving as an active interface with an up link [ 235.193328][ T28] audit: type=1400 audit(1777337211.268:1754): avc: denied { map } for pid=12751 comm="syz.6.3334" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=40270 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 235.255026][ T28] audit: type=1400 audit(1777337211.268:1755): avc: denied { read write } for pid=12751 comm="syz.6.3334" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=40270 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 235.322533][ T28] audit: type=1400 audit(1777337211.418:1756): avc: denied { create } for pid=12758 comm="syz.2.3338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 235.408447][ T28] audit: type=1400 audit(1777337211.448:1757): avc: denied { ioctl } for pid=12758 comm="syz.2.3338" path="socket:[40280]" dev="sockfs" ino=40280 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 235.537581][T12767] loop5: detected capacity change from 0 to 512 [ 235.561010][T12767] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 235.592093][ T28] audit: type=1400 audit(1777337211.678:1758): avc: denied { mount } for pid=12753 comm="syz.5.3336" name="/" dev="loop5" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 235.862850][ T28] audit: type=1400 audit(1777337211.958:1759): avc: denied { unmount } for pid=6111 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 236.005859][ T28] audit: type=1400 audit(1777337212.098:1760): avc: denied { bind } for pid=12775 comm="syz.5.3343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 236.101664][ T3381] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 236.111505][ T3381] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 236.203493][ T1618] batadv1: left promiscuous mode [ 236.332757][ T28] audit: type=1400 audit(1777337212.418:1761): avc: denied { write } for pid=12783 comm="syz.5.3345" name="hidraw0" dev="devtmpfs" ino=913 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 236.982699][T12811] usb usb8: usbfs: process 12811 (syz.7.3355) did not claim interface 0 before use [ 237.159498][T12788] loop2: detected capacity change from 0 to 512 [ 237.270786][T12788] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 237.441992][T12788] EXT4-fs (loop2): 1 truncate cleaned up [ 237.605178][T12788] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.896071][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.149416][T12835] netlink: 'syz.5.3363': attribute type 1 has an invalid length. [ 238.161862][ T3381] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 238.182730][ T3381] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 238.771204][T12842] loop5: detected capacity change from 0 to 512 [ 239.270830][T12842] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.393577][T12879] xt_hashlimit: max too large, truncated to 1048576 [ 239.467679][T12842] ext4 filesystem being mounted at /463/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.543210][T12886] netlink: 'syz.2.3382': attribute type 4 has an invalid length. [ 239.589701][T12886] netlink: 'syz.2.3382': attribute type 4 has an invalid length. [ 239.676638][ T368] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.685979][ T5903] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.701673][ T5903] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.732203][ T5903] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.849664][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 239.849682][ T28] audit: type=1400 audit(1777337215.938:1810): avc: denied { add_name } for pid=12841 comm="syz.5.3364" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 239.912968][ T28] audit: type=1400 audit(1777337215.968:1811): avc: denied { create } for pid=12841 comm="syz.5.3364" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 240.283110][ T28] audit: type=1400 audit(1777337216.378:1812): avc: denied { remove_name } for pid=12841 comm="syz.5.3364" name="bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 240.306831][ T28] audit: type=1400 audit(1777337216.378:1813): avc: denied { rename } for pid=12841 comm="syz.5.3364" name="bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 240.329280][T12842] EXT4-fs warning (device loop5): ext4_empty_dir:3104: inode #12: comm syz.5.3364: directory missing '..' [ 240.349141][ T28] audit: type=1400 audit(1777337216.378:1814): avc: denied { rmdir } for pid=12841 comm="syz.5.3364" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 240.372812][ T28] audit: type=1400 audit(1777337216.438:1815): avc: denied { unmount } for pid=6111 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 240.373977][ T6111] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.424990][ T28] audit: type=1400 audit(1777337216.518:1816): avc: denied { create } for pid=12908 comm="syz.6.3391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 240.476876][ T28] audit: type=1400 audit(1777337216.548:1817): avc: denied { map } for pid=12908 comm="syz.6.3391" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=40453 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 240.527511][T12918] xt_hashlimit: max too large, truncated to 1048576 [ 240.538799][ T28] audit: type=1400 audit(1777337216.548:1818): avc: denied { read write } for pid=12908 comm="syz.6.3391" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=40453 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 240.588837][ T28] audit: type=1400 audit(1777337216.558:1819): avc: denied { connect } for pid=12908 comm="syz.6.3391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 240.726987][T12927] rdma_rxe: rxe_newlink: failed to add lo [ 241.030732][T12946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3403'. [ 241.096609][T12950] xt_hashlimit: max too large, truncated to 1048576 [ 241.266891][T12964] dvmrp1: entered allmulticast mode [ 241.381620][T12967] dvmrp1: left allmulticast mode [ 241.424874][T12970] lo speed is unknown, defaulting to 1000 [ 241.617291][T12978] lo speed is unknown, defaulting to 1000 [ 241.865574][T12992] netlink: 6 bytes leftover after parsing attributes in process `syz.6.3422'. [ 241.908203][T12992] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check. [ 243.132348][ T5903] batadv1: left promiscuous mode [ 244.349069][ T49] batadv1: left promiscuous mode [ 245.068574][ T28] kauditd_printk_skb: 61 callbacks suppressed [ 245.068595][ T28] audit: type=1400 audit(1777337221.158:1881): avc: denied { create } for pid=13061 comm="syz.2.3450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 245.146273][ T28] audit: type=1400 audit(1777337221.188:1882): avc: denied { ioctl } for pid=13061 comm="syz.2.3450" path="socket:[40648]" dev="sockfs" ino=40648 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 245.194856][T13070] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3453'. [ 245.203909][ T28] audit: type=1400 audit(1777337221.188:1883): avc: denied { bind } for pid=13061 comm="syz.2.3450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 245.242259][ T28] audit: type=1400 audit(1777337221.188:1884): avc: denied { write } for pid=13061 comm="syz.2.3450" path="socket:[40648]" dev="sockfs" ino=40648 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 245.254368][T13070] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3453'. [ 245.266767][ T28] audit: type=1400 audit(1777337221.288:1885): avc: denied { ioctl } for pid=13069 comm="syz.7.3453" path="socket:[41157]" dev="sockfs" ino=41157 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 245.337400][ T28] audit: type=1400 audit(1777337221.408:1886): avc: denied { write } for pid=13073 comm="syz.2.3454" lport=49819 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 245.403598][ T28] audit: type=1400 audit(1777337221.408:1887): avc: denied { setopt } for pid=13073 comm="syz.2.3454" lport=49819 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 245.482074][T13082] IPv6: Can't replace route, no match found [ 245.482500][ T28] audit: type=1400 audit(1777337221.528:1888): avc: denied { bind } for pid=13077 comm="syz.2.3457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 245.513760][ T28] audit: type=1400 audit(1777337221.528:1889): avc: denied { name_bind } for pid=13077 comm="syz.2.3457" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 245.537825][ T28] audit: type=1400 audit(1777337221.528:1890): avc: denied { node_bind } for pid=13077 comm="syz.2.3457" saddr=172.20.20.38 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 247.716156][T13151] syzkaller1: entered promiscuous mode [ 247.738824][T13151] syzkaller1: entered allmulticast mode [ 247.893654][T13169] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3494'. [ 248.036969][T13180] loop5: detected capacity change from 0 to 2048 [ 248.084577][T13180] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.097705][T13180] ext4 filesystem being mounted at /481/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.121873][ T6111] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.847070][T13200] loop7: detected capacity change from 0 to 128 [ 249.188251][T13219] netlink: 'syz.7.3512': attribute type 4 has an invalid length. [ 249.209911][T13219] netlink: 'syz.7.3512': attribute type 4 has an invalid length. [ 249.268630][T13223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3513'. [ 249.290004][T13223] netlink: 'syz.4.3513': attribute type 30 has an invalid length. [ 249.337652][T13219] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.340519][T13225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3513'. [ 249.358115][T13219] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.385129][T13225] netlink: 'syz.4.3513': attribute type 30 has an invalid length. [ 249.506252][ T49] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.517922][ T49] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.545201][ T49] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.558491][ T49] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.876617][T13259] netlink: 'syz.5.3527': attribute type 4 has an invalid length. [ 249.885022][T13259] netlink: 'syz.5.3527': attribute type 4 has an invalid length. [ 250.144814][ T1618] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.161787][ T1618] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.185372][ T1618] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.204596][ T1618] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.308465][ T28] kauditd_printk_skb: 76 callbacks suppressed [ 250.308484][ T28] audit: type=1400 audit(1777337226.398:1967): avc: denied { mounton } for pid=13269 comm="syz.5.3531" path="/proc/1167/task" dev="proc" ino=43063 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 250.358754][ T28] audit: type=1400 audit(1777337226.428:1968): avc: denied { mount } for pid=13269 comm="syz.5.3531" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 250.750449][ T28] audit: type=1400 audit(1777337226.838:1969): avc: denied { create } for pid=13280 comm="syz.5.3535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 250.812132][ T28] audit: type=1400 audit(1777337226.858:1970): avc: denied { ioctl } for pid=13280 comm="syz.5.3535" path="socket:[43068]" dev="sockfs" ino=43068 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 251.536475][ T28] audit: type=1400 audit(1777337227.628:1971): avc: denied { create } for pid=13299 comm="syz.4.3541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 251.566407][ T28] audit: type=1400 audit(1777337227.628:1972): avc: denied { write } for pid=13299 comm="syz.4.3541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 251.592222][T13302] netlink: 'syz.4.3542': attribute type 4 has an invalid length. [ 251.640422][T13302] netlink: 'syz.4.3542': attribute type 4 has an invalid length. [ 251.760223][ T28] audit: type=1400 audit(1777337227.848:1973): avc: denied { cpu } for pid=13307 comm="syz.6.3544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 252.017445][T13302] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 252.143094][ T1618] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.163361][ T1618] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 252.183572][ T1618] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 252.213540][ T1618] netdevsim netdevsim4 eth0: unset [1, 2] type 2 family 0 port 256 - 0 [ 252.234217][ T1618] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.261574][ T1618] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 252.289252][ T1618] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 252.308541][ T28] audit: type=1326 audit(1777337228.398:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13316 comm="syz.5.3549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77e8ecdd9 code=0x7ffc0000 [ 252.312065][ T1618] netdevsim netdevsim4 eth1: unset [1, 2] type 2 family 0 port 256 - 0 [ 252.340785][ T28] audit: type=1326 audit(1777337228.398:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13316 comm="syz.5.3549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77e8ecdd9 code=0x7ffc0000 [ 252.397330][ T28] audit: type=1326 audit(1777337228.398:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13316 comm="syz.5.3549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77e8ecdd9 code=0x7ffc0000 [ 252.406637][ T1618] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.444864][ T1618] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 252.463642][ T1618] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 252.482849][ T1618] netdevsim netdevsim4 eth2: unset [1, 2] type 2 family 0 port 256 - 0 [ 252.492353][ T1618] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.509294][ T1618] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 252.540148][ T1618] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 252.575577][ T1618] netdevsim netdevsim4 eth3: unset [1, 2] type 2 family 0 port 256 - 0 [ 252.651728][T13330] lo speed is unknown, defaulting to 1000 [ 253.139514][T13335] loop7: detected capacity change from 0 to 32768 [ 253.731555][T13344] loop2: detected capacity change from 0 to 512 [ 254.080198][T13335] loop7: p1 p3 < > [ 254.222385][T13344] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.321060][T13344] ext4 filesystem being mounted at /706/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.337681][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 254.338501][ T3278] udevd[3278]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 254.397658][T13355] loop5: detected capacity change from 0 to 1024 [ 254.416755][T13355] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 254.441406][T13355] System zones: 0-1, 3-36 [ 254.462207][T13355] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.3562: bad orphan inode 134217728 [ 254.488859][T13355] loop5: lost filesystem error report for type 5 error -117 [ 254.493210][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 254.509908][ C1] EXT4-fs (loop5): initial error at time 1777337230: ext4_orphan_get:1423 [ 254.512912][T13355] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.519760][ C1] EXT4-fs (loop5): last error at time 1777337230: ext4_orphan_get:1423 [ 254.843002][ T6111] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.895448][T13368] netlink: 'syz.6.3565': attribute type 4 has an invalid length. [ 254.951528][T13373] netlink: 'syz.6.3565': attribute type 4 has an invalid length. [ 255.094940][T13381] EXT4-fs warning (device loop2): ext4_empty_dir:3104: inode #12: comm syz.2.3559: directory missing '..' [ 255.137019][T13377] loop7: detected capacity change from 0 to 4096 [ 255.201361][T13377] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.322973][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.357812][T13386] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3574'. [ 255.379620][T11178] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.418490][T13392] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3574'. [ 255.485815][T13397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3577'. [ 255.493814][T13395] loop7: detected capacity change from 0 to 1024 [ 255.508213][T13395] __quota_error: 96 callbacks suppressed [ 255.508269][T13395] Quota error (device loop7): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 255.527035][T13395] EXT4-fs warning (device loop7): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 255.532389][T13375] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.541768][T13395] EXT4-fs (loop7): mount failed [ 255.549204][T13375] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.606743][T13395] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3575'. [ 255.652016][T13375] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.848946][ T5172] lo speed is unknown, defaulting to 1000 [ 255.863618][ T36] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.876567][ T36] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.895469][ T36] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.917552][ T36] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.940183][ T36] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.952403][ T5169] lo speed is unknown, defaulting to 1000 [ 255.973123][ T36] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.998168][ T5172] lo speed is unknown, defaulting to 1000 [ 256.006220][ T36] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.026142][ T36] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.067792][ T28] audit: type=1400 audit(1777337232.158:2073): avc: denied { mount } for pid=13414 comm="syz.4.3582" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 256.106554][ T28] audit: type=1400 audit(1777337232.178:2074): avc: denied { search } for pid=13414 comm="syz.4.3582" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 256.145659][ T28] audit: type=1400 audit(1777337232.178:2075): avc: denied { search } for pid=13414 comm="syz.4.3582" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 256.181758][ T28] audit: type=1400 audit(1777337232.178:2076): avc: denied { read open } for pid=13414 comm="syz.4.3582" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 256.206837][ T28] audit: type=1400 audit(1777337232.178:2077): avc: denied { search } for pid=13414 comm="syz.4.3582" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 256.238674][T13420] loop2: detected capacity change from 0 to 512 [ 256.255542][T13420] EXT4-fs: Ignoring removed nobh option [ 256.266225][ T28] audit: type=1400 audit(1777337232.178:2078): avc: denied { search } for pid=13414 comm="syz.4.3582" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 256.309969][ T28] audit: type=1400 audit(1777337232.178:2079): avc: denied { search } for pid=13414 comm="syz.4.3582" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 256.317938][T13420] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.335731][ T28] audit: type=1400 audit(1777337232.178:2080): avc: denied { add_name } for pid=13414 comm="syz.4.3582" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 256.376596][ T28] audit: type=1400 audit(1777337232.178:2081): avc: denied { create } for pid=13414 comm="syz.4.3582" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=file permissive=1 [ 256.397594][T13420] ext4 filesystem being mounted at /710/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.447254][T13427] loop5: detected capacity change from 0 to 4096 [ 256.468950][T13427] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.496504][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.524139][T13431] lo speed is unknown, defaulting to 1000 [ 256.632838][ T6111] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.699320][T13440] netlink: 'syz.7.3593': attribute type 4 has an invalid length. [ 256.725718][T13440] netlink: 'syz.7.3593': attribute type 4 has an invalid length. [ 257.145215][T13450] loop5: detected capacity change from 0 to 32768 [ 257.202677][T13450] loop5: p1 p3 < > [ 257.281560][T13468] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3603'. [ 257.314031][T13468] netlink: 'syz.5.3603': attribute type 30 has an invalid length. [ 257.343373][ T368] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.351411][T13468] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3603'. [ 257.367606][T13471] loop2: detected capacity change from 0 to 4096 [ 257.367763][ T368] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.389061][T13468] netlink: 'syz.5.3603': attribute type 30 has an invalid length. [ 257.403695][ T3278] udevd[3278]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 257.416046][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 257.437734][T13471] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.506517][ T368] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.560809][ T368] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.611536][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.963167][T13511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3620'. [ 257.991900][T13511] netlink: 'syz.2.3620': attribute type 30 has an invalid length. [ 258.019694][T13513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3620'. [ 258.049869][T13513] netlink: 'syz.2.3620': attribute type 30 has an invalid length. [ 258.365542][ T36] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.393126][T13515] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3621'. [ 258.402942][ T36] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.438488][ T36] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.488133][ T36] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.940581][T13528] lo speed is unknown, defaulting to 1000 [ 259.402678][T13535] loop2: detected capacity change from 0 to 8192 [ 259.481324][T13547] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3631'. [ 260.692090][T13599] __nla_validate_parse: 2 callbacks suppressed [ 260.699765][T13599] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3651'. [ 260.722952][T13599] netlink: 'syz.6.3651': attribute type 30 has an invalid length. [ 260.758386][T13600] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3651'. [ 260.804318][T13600] netlink: 'syz.6.3651': attribute type 30 has an invalid length. [ 260.819400][ T49] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.830285][ T49] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.845320][ T49] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.871912][ T49] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.987318][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 260.987338][ T28] audit: type=1400 audit(1777337237.078:2094): avc: denied { watch } for pid=13612 comm="syz.6.3655" path="/528" dev="tmpfs" ino=2734 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 261.055503][ T28] audit: type=1400 audit(1777337237.118:2095): avc: denied { watch_reads } for pid=13612 comm="syz.6.3655" path="/528/file0" dev="tmpfs" ino=2739 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 261.144271][T13618] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3658'. [ 261.399287][ T28] audit: type=1400 audit(1777337237.488:2096): avc: denied { connect } for pid=13629 comm="syz.7.3664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 261.541442][ T28] audit: type=1400 audit(1777337237.628:2097): avc: denied { create } for pid=13639 comm="syz.7.3669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 261.601802][ T28] audit: type=1400 audit(1777337237.658:2098): avc: denied { connect } for pid=13639 comm="syz.7.3669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 261.677987][ T28] audit: type=1400 audit(1777337237.658:2099): avc: denied { write } for pid=13639 comm="syz.7.3669" path="socket:[44327]" dev="sockfs" ino=44327 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 261.753886][ T28] audit: type=1400 audit(1777337237.688:2100): avc: denied { getopt } for pid=13641 comm="syz.5.3670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 261.951901][T13666] loop5: detected capacity change from 0 to 512 [ 262.144635][T13670] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3682'. [ 262.283149][ T28] audit: type=1400 audit(1777337238.368:2101): avc: denied { create } for pid=13678 comm="syz.4.3687" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 262.320315][ T28] audit: type=1400 audit(1777337238.408:2102): avc: denied { write } for pid=13678 comm="syz.4.3687" name="file0" dev="tmpfs" ino=3615 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 262.360788][ T28] audit: type=1400 audit(1777337238.408:2103): avc: denied { open } for pid=13678 comm="syz.4.3687" path="/698/file0" dev="tmpfs" ino=3615 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 262.411005][T13685] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3688'. [ 262.498080][T13687] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3689'. [ 262.550647][T13687] team0: Port device team_slave_0 removed [ 262.706624][T13704] loop7: detected capacity change from 0 to 2048 [ 262.784005][T13704] loop7: p1 p3 p4 [ 262.792002][T13704] loop7: p1 size 67110656 extends beyond EOD, truncated [ 262.814816][T13708] ================================================================== [ 262.822960][T13708] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 262.829174][T13704] loop7: p3 size 134217728 extends beyond EOD, [ 262.830566][T13708] [ 262.830576][T13708] read-write to 0xffff888119d4f900 of 8 bytes by interrupt on cpu 1: [ 262.830597][T13708] __xa_clear_mark+0xf5/0x1e0 [ 262.830621][T13708] __folio_end_writeback+0xf4/0x360 [ 262.855457][T13704] truncated [ 262.857229][T13708] folio_end_writeback_no_dropbehind+0x6d/0x1d0 [ 262.866710][T13708] folio_end_writeback+0x1c/0x70 [ 262.871695][T13708] ext4_finish_bio+0x450/0x760 [ 262.876839][T13708] ext4_end_bio+0x27b/0x380 [ 262.876881][T13704] loop7: p4 size 4278190080 extends beyond EOD, [ 262.881452][T13708] bio_endio+0x35b/0x3f0 [ 262.881476][T13708] blk_update_request+0x338/0x710 [ 262.897123][T13708] scsi_end_request+0x53/0x4c0 [ 262.901929][T13708] scsi_io_completion+0x7f/0x1d0 [ 262.907002][T13708] scsi_finish_command+0x1c7/0x1e0 [ 262.912138][T13708] scsi_complete+0x155/0x4f0 [ 262.916768][T13708] blk_done_softirq+0x77/0xb0 [ 262.921478][T13708] handle_softirqs+0xb9/0x280 [ 262.926180][T13708] __irq_exit_rcu+0x42/0xd0 [ 262.927179][T13704] truncated [ 262.930703][T13708] common_interrupt+0x83/0x90 [ 262.930733][T13708] asm_common_interrupt+0x26/0x40 [ 262.943917][T13708] preempt_schedule_irq+0x28/0x50 [ 262.948975][T13708] raw_irqentry_exit_cond_resched+0x4b/0x60 [ 262.954882][T13708] irqentry_exit_to_kernel_mode_preempt+0x2b/0x40 [ 262.961421][T13708] irqentry_exit+0x7d/0x5b0 [ 262.966034][T13708] sysvec_apic_timer_interrupt+0x44/0x80 [ 262.971681][T13708] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 262.977759][T13708] __sanitizer_cov_trace_switch+0x0/0x130 [ 262.983495][T13708] shmem_get_folio_gfp+0xd28/0xd60 [ 262.988612][T13708] shmem_write_begin+0xfc/0x1f0 [ 262.993468][T13708] generic_perform_write+0x183/0x490 [ 262.998846][T13708] shmem_file_write_iter+0xc5/0xf0 [ 263.003974][T13708] __kernel_write_iter+0x319/0x590 [ 263.009191][T13708] dump_user_range+0xa73/0xd00 [ 263.013964][T13708] elf_core_dump+0x21a2/0x2330 [ 263.018843][T13708] coredump_write+0xacc/0xdd0 [ 263.023616][T13708] vfs_coredump+0x26dd/0x31e0 [ 263.028315][T13708] get_signal+0xd5c/0xf20 [ 263.032663][T13708] arch_do_signal_or_restart+0x96/0x450 [ 263.038416][T13708] irqentry_exit+0x140/0x5b0 [ 263.043066][T13708] asm_exc_page_fault+0x26/0x30 [ 263.047938][T13708] [ 263.050275][T13708] read to 0xffff888119d4f900 of 8 bytes by task 13708 on cpu 0: [ 263.057927][T13708] xas_find_marked+0x213/0x620 [ 263.062710][T13708] filemap_get_folios_tag+0xfa/0x430 [ 263.068127][T13708] filemap_fdatawait_keep_errors+0x6c/0x190 [ 263.074393][T13708] sync_inodes_sb+0x424/0x4d0 [ 263.079170][T13708] sync_inodes_one_sb+0x3d/0x50 [ 263.084189][T13708] __iterate_supers+0x110/0x1f0 [ 263.089140][T13708] iterate_supers+0x1f/0x30 [ 263.093654][T13708] __ia32_sys_sync+0x5c/0xb0 [ 263.098258][T13708] x64_sys_call+0x2f3a/0x3020 [ 263.103030][T13708] do_syscall_64+0x12c/0x3b0 [ 263.107718][T13708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.113629][T13708] [ 263.115974][T13708] value changed: 0xffffa00000000000 -> 0xf800000000000000 [ 263.123174][T13708] [ 263.125504][T13708] Reported by Kernel Concurrency Sanitizer on: [ 263.131749][T13708] CPU: 0 UID: 0 PID: 13708 Comm: syz.6.3697 Tainted: G W syzkaller #0 PREEMPT(full) [ 263.142698][T13708] Tainted: [W]=WARN [ 263.146502][T13708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 263.156598][T13708] ================================================================== [ 263.366308][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory