last executing test programs: 57.19416314s ago: executing program 4 (id=221): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYBLOB], 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x38, 0x39, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x05G'}]}, @typed={0x12, 0x2, 0x0, 0x0, @binary="5eddc49329c010370b651f8355fd"}]}, 0x38}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x18, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000005000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000007300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newsa={0xfffffffffffffda1, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in=@broadcast, 0xffff, 0x4000, 0x4e22, 0x8001, 0x0, 0x80}, {@in=@dev={0xac, 0x14, 0x14, 0xb}, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {0x323, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x3}, 0x70bd29, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'pcbc(fcrypt)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e1e, 0x0, @in6=@private2}}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e21}}]}, 0x170}}, 0x0) 57.108007923s ago: executing program 4 (id=222): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@nr_inodes}]}) creat(&(0x7f0000000080)='./bus\x00', 0x154) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') 56.789397973s ago: executing program 4 (id=223): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000180)=[{0x3, 0x10000025, {0x2, 0xff}, {0x2, 0xf0, 0x1}, 0xff, 0x1}, {0x0, 0x3, {}, {0x2, 0x1, 0x1}, 0x2, 0x1}, {0x1, 0x0, {0x1, 0xe, 0x3}, {0x1}, 0x1}, {0x1, 0x0, {0x1, 0x0, 0x2}, {0x0, 0x0, 0x2}, 0xfd, 0x2}], 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff1, 0xfff2}, {0xfff1, 0xffe0}, {0x2, 0xe}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x20000050) 56.325754579s ago: executing program 4 (id=226): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1210010, &(0x7f0000000340)=ANY=[@ANYBLOB="696f636861727365743d69736f383835392d372c757466383d312c696f636861727365743d63703835372c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c7379735f696d6d757461626c652c73686f72746e616d653d6c6f7765722c696f636861727365743d61736369692c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c757466383d312c71756965742c756e695f786c6174653d312c756e695f786c6174653d3100000000000000026d653d6d697865642c72736469722c756e695f786c6174653d302c757466383d302c00"], 0x1, 0x379, &(0x7f0000000880)="$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") r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0xc0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x830, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 55.680840412s ago: executing program 4 (id=230): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r1, @in6={{0xa, 0x4e24, 0x5, @empty, 0x2800}}, 0xfff, 0x0, 0x20000, 0x81, 0x50, 0xfffffffc, 0x4}, 0x9c) 55.131779241s ago: executing program 4 (id=236): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x6, 0x7, 0x4000004, 0x41, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) 55.057564463s ago: executing program 32 (id=236): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x6, 0x7, 0x4000004, 0x41, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) 32.647804585s ago: executing program 5 (id=570): unshare(0x6a040000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x14}, 0x0) socket$igmp(0x2, 0x3, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000240), 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@end, @timestamp={0x44, 0x8, 0x29, 0x0, 0x8, [0x200]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x60}, 0x48000) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f00000000c0)=ANY=[], &(0x7f0000001240)=0x28) 32.261111109s ago: executing program 5 (id=580): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@delchain={0x2c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0x7fffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 32.024928366s ago: executing program 5 (id=584): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2000c014, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x24, @loopback, 0x23}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 31.952869279s ago: executing program 5 (id=587): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) 31.952376819s ago: executing program 5 (id=588): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r1, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x2], 0x0, 0x0, 0x1, 0x1}}, 0x40) write$P9_RSTATu(r0, &(0x7f0000000900)={0x267, 0x7d, 0xa, {{0x0, 0x24e, 0x3, 0x5, {0x0, 0x9, 0x5}, 0x100000, 0x2, 0x76, 0x2, 0xac, '\xfc\xf98V\x94\xffz\xc1\x9f9\xd4v\vE\xad\x1c\xc8s\xaa\xeel\xc2\xcb\xa8\xb7e\x10\xef\xd5!\xc8lNI\xca\xb0a=5x\xee\xd2\xa6\x7f\x87\xabrM\xc8\x16\xa6d\xa4\x1e%\xb7\v\xb2E\xd80-o\xa8\xed\xf7Lm\x10\x8d\xb1\x96\x1b\xf0\xebZ@\xf8\x01\xf9\x9d#\xca\xec|q\x9d0\xcbb\x18w;]\xber~\r\xa7y}\xbc\x1eS\xcc7\xff\x0f\x16\xce\xc8\xe6\x92DA\x99T\x01\xb4/o\xc0:\x9azy\x9ar\xaaE+I\xd5\f_!~\xaa\xe1\x19X\xfdt\xb9[+\xee-\x1c\x15\xd9\x02\xa2\xedS\x80\xb5\x8aL\x00'/172, 0xac, '\x00\xf7\x88\a\xb0\x9b$\xe5P=\xcemR\xe3\xa2\aP*d],\xed\n\xbd\xa3V\x99\xf6\xf35\x15\a,;%h\xda 9\xfd\xb0\xe3\x1eOBO25\xd5\xffz90\xd9\xc0v\xb9\x02\'\xf3\x8f~\xc9\x19\x84;e\x83 \xb9\x17\x90\"\x19\xce\xcb!\\\x80\r\xb6\xad\x95\x9c\xb6\nL&,\xdc\v\xb3\xff%O;\x13\x10q\x02\xf5\x1a\xeb\x11\x87\xd7\xe5\x8ac_i\x99\xa8\xd5g\xbb\x99\xf8\xdde\xa8\xec_\x03\x90\xf7\x8d\x8c\xb4q~\xc8/ayVB|\x10\xf0\xa3)\x16\xe9X3\x7f\xa8\xb0W\x10:B\xc6g\x89\xd2\xbc\x02\xf8R\xca\x05\xc9\x15^\\E6\xa2T\x9a', 0x0, '', 0xc3, '=\xb1\x16\xe1\xf1u\xf5\xceB!M\x17\x92\x9b]\xc9\xc9\x8f\x12}X\xe8\xc5\xbb\xce\xaf\xddGY\x13\x01EK\xae>\xde\r\xe0\xc5\x98\xd3M\x15\xab\b\xfao\x93D]i#{\xb8\x9a\x0e\xde\xec\xb5\xb9\x93\xbc\xe7\x8eaZp\x9c\xb4\xdaK>\xa9zp\x89\x1bu\xa8\xe9\xa5;\xc2\xbb\x95\xa7\xf3\xd9t\xb8\xadK\x92\x85\xaas\xcc\xefKF\x86\xa8\xfd\xb7\xf2/\x1f\xc0i\xb2VQ\x84Q\xe0\xcc\xc0\x94\x19\x92 f\x95\xb1\xb5\xed\x8b\x0f\xb7I1h4\x1f\x9e{,R\f\xe2\x01\x9a\"\xdb\x96\x97\xa8\x9a\x03\x15\xb6\xd8j6\x9a\xc7\xb7.\xe2\x8a:K\x1bm\x96\x1b\xf0D\xf1\b\xfd\x8cX \xa5O\x12~(\x8cmM\x96\x10\vQ\x0e\xb5\xd28|A\n\b\x04'}, 0x4, 'GPL\x00', 0xee01}}, 0x267) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r1, 0x0) 31.608023151s ago: executing program 5 (id=594): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001400030500008000ffdbdf2502075bff", @ANYRES32=r4, @ANYBLOB="080002007f00000108000400ac1e0001140003"], 0x3c}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 31.587171552s ago: executing program 33 (id=594): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001400030500008000ffdbdf2502075bff", @ANYRES32=r4, @ANYBLOB="080002007f00000108000400ac1e0001140003"], 0x3c}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 1.104407472s ago: executing program 0 (id=1180): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040) 1.072274273s ago: executing program 0 (id=1183): r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) close_range(r0, r1, 0x0) 1.053846904s ago: executing program 0 (id=1184): openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) close(r0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e23, 0x2000, 0x8, 0x48001}}, 0x44) 1.018595295s ago: executing program 0 (id=1186): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) ftruncate(r1, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) mbind(&(0x7f000057f000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x3) mmap(&(0x7f00003c1000/0x4000)=nil, 0x4000, 0x100000c, 0x13, r1, 0xa49d3000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) 996.352436ms ago: executing program 0 (id=1187): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b7, &(0x7f0000006680)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r1, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x96, 0xfff8}, 0x0, 0x0, 0xd, 0x80004, 0x7, 0x0, 0xffffffffffffffff}) mknod$loop(&(0x7f0000002180)='./file0\x00', 0x800, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000001180)=0x1, 0x4) 932.005848ms ago: executing program 0 (id=1188): timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x2b) acct(&(0x7f0000000040)='./file0\x00') 798.977313ms ago: executing program 6 (id=1196): accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000100)) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f00009a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000fef000/0x4000)=nil) mremap(&(0x7f0000678000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000084c000/0x3000)=nil) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000841000/0x2000)=nil) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 748.651725ms ago: executing program 2 (id=1197): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, r2) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) 700.860946ms ago: executing program 2 (id=1198): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)={0x60, r4, 0x1, 0x0, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r2}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4044}, 0x40000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004850}, 0x4044014) 700.709626ms ago: executing program 2 (id=1199): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) socket$inet6(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000}, 0x28) socket$kcm(0x2d, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="020000"], 0x50) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 678.031817ms ago: executing program 2 (id=1200): rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000000380)=0x0) r2 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r2}, &(0x7f0000000380)=0x0) timer_settime(r3, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_settime(r1, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) r4 = gettid() tkill(r4, 0x16) 677.578757ms ago: executing program 2 (id=1201): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x3, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socket$nl_netfilter(0x10, 0x3, 0xc) 616.006719ms ago: executing program 2 (id=1202): pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x100, 0x0, {0x2, 0xa}, {0x1}, @const={0x0, {0xfbff, 0x8, 0x1, 0x81}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x4008080) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 563.68648ms ago: executing program 6 (id=1204): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x4000, 0x4) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x600000d, 0x12, r0, 0x180000000) 480.027104ms ago: executing program 6 (id=1206): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xd0}]}, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) socketpair(0x2a, 0x1, 0x8001, &(0x7f0000000040)) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x1, 0x0}, 0x200400c0) 472.498234ms ago: executing program 6 (id=1208): rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000000380)=0x0) timer_settime(r1, 0x1, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) r2 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{}, {0x0, 0x3938700}}, 0x0) r4 = gettid() tkill(r4, 0x16) 410.766466ms ago: executing program 6 (id=1211): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r0, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) socket$kcm(0x10, 0x2, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000180), 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 363.919508ms ago: executing program 3 (id=1212): mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1) r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x185d, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) vmsplice(r0, &(0x7f0000000380)=[{&(0x7f0000000000)="9b", 0x1}], 0x1, 0x7) 363.755848ms ago: executing program 3 (id=1213): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000340)='./file1\x00', 0x1000000, &(0x7f0000000f80)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0], 0x3, 0x274, &(0x7f0000000d00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1cb842, 0x0) io_setup(0x20fe, &(0x7f0000000540)=0x0) io_submit(r2, 0x601, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000b80)="ed", 0x1, 0x600}]) 304.94869ms ago: executing program 1 (id=1215): accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000100)) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f00009a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000fef000/0x4000)=nil) mremap(&(0x7f0000678000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000084c000/0x3000)=nil) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000841000/0x2000)=nil) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 267.082621ms ago: executing program 6 (id=1216): unshare(0x60000600) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xaa000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'pim6reg1\x00', {0x2, 0x4c24, @local}}) r2 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000080)={'lo\x00', {0x2, 0x4e23, @local}}) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000300ea1120000005000000", 0x29}], 0x1) 266.439181ms ago: executing program 1 (id=1217): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xc2dc}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r0}, &(0x7f0000000a00), &(0x7f00000003c0)}, 0x20) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 200.591273ms ago: executing program 3 (id=1218): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x30) 145.902145ms ago: executing program 1 (id=1219): socket$packet(0x11, 0x2, 0x300) socket(0x10, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x2, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x65, 0xfe, 0x0, 0x0, 0x0, 0x4, 0x400, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc09b, 0x0, @perf_bp={&(0x7f0000000200), 0x1}, 0xa216, 0x6, 0x1000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c40)=@newtfilter={0x84, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xb, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0x58, 0x2, [@TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x20000000, 0x0, 0x1, 0x7, {0x19, 0x2, 0x8000, 0x3, 0x7}, {0x5, 0x1, 0xedf3, 0xfffa, 0xa9, 0xffffff00}, 0x91, 0x10001, 0x2}}]}, @TCA_FW_INDEV={0x14, 0x3, 'veth1_to_hsr\x00'}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24041091}, 0x0) 145.742715ms ago: executing program 3 (id=1220): close(0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={r2, 0xe6f5, 0xa15b, 0x5}, &(0x7f0000000100)=0x10) 145.418255ms ago: executing program 1 (id=1221): r0 = fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='.\x00', 0x0, 0x140) fchown(r2, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x511001, 0x488) 127.954115ms ago: executing program 1 (id=1222): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x5, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000200)=0x800, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0xa, r2}, 0x10) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7fbaf3e5e5cfdd34, 0x11, r0, 0x180000000) 79.980568ms ago: executing program 3 (id=1223): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(r1, 0x3) accept4(r1, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000280)=0xfffff908, 0x4) 79.582618ms ago: executing program 1 (id=1224): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000010840)=[{{&(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x20}}], 0x1, 0x40000) r1 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@sndrcv={0x30, 0x84, 0x1, {0x7, 0x444, 0x40, 0x401, 0x2, 0xc355, 0x17c, 0x7fffffff}}], 0x30, 0x4040850}, 0x4040040) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000003700090025bd7000ff84000002"], 0x24}}, 0x0) io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(r1, &(0x7f0000000000), 0x10) io_submit(r3, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000000000029ffffff000000", 0x20000238}]) 0s ago: executing program 3 (id=1225): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x6, &(0x7f0000000300)=0x0) r2 = eventfd2(0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) kernel console output (not intermixed with test programs): n } for pid=3486 comm="syz.3.4" path="/0/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 31.972603][ T28] audit: type=1400 audit(1775126157.763:115): avc: denied { setopt } for pid=3496 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 32.047723][ T3516] Zero length message leads to an empty skb [ 32.087794][ T28] audit: type=1400 audit(1775126157.823:116): avc: denied { ioctl } for pid=3486 comm="syz.3.4" path="/0/file1/file1" dev="loop3" ino=15 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 32.143084][ T28] audit: type=1400 audit(1775126157.873:117): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 32.521826][ C0] hrtimer: interrupt took 36759 ns [ 33.698799][ T3556] loop1: detected capacity change from 0 to 1024 [ 33.731074][ T3556] EXT4-fs: Ignoring removed bh option [ 33.757775][ T3556] EXT4-fs (loop1): bad geometry: bigalloc file system with non-zero first_data_block [ 33.757775][ T3556] [ 33.829578][ T3561] loop4: detected capacity change from 0 to 512 [ 33.837348][ T3561] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 33.843926][ T3559] loop3: detected capacity change from 0 to 4096 [ 33.865865][ T3561] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.892710][ T3561] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 33.904071][ T3559] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.982985][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.610686][ T3561] syz.4.32 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 34.652028][ T3561] CPU: 1 UID: 0 PID: 3561 Comm: syz.4.32 Not tainted syzkaller #0 PREEMPT(full) [ 34.652058][ T3561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 34.652071][ T3561] Call Trace: [ 34.652079][ T3561] [ 34.652087][ T3561] __dump_stack+0x1d/0x30 [ 34.652171][ T3561] dump_stack_lvl+0x95/0xd0 [ 34.652194][ T3561] dump_stack+0x15/0x1b [ 34.652216][ T3561] dump_header+0x80/0x240 [ 34.652278][ T3561] oom_kill_process+0x295/0x350 [ 34.652304][ T3561] out_of_memory+0x97d/0xb80 [ 34.652331][ T3561] try_charge_memcg+0x62e/0xa10 [ 34.652409][ T3561] obj_cgroup_charge_pages+0x23/0xc0 [ 34.652441][ T3561] __memcg_kmem_charge_page+0x9e/0x170 [ 34.652538][ T3561] __alloc_frozen_pages_noprof+0x18a/0x360 [ 34.652574][ T3561] alloc_pages_mpol+0xb3/0x260 [ 34.652605][ T3561] alloc_pages_noprof+0x8f/0x140 [ 34.652658][ T3561] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 34.652697][ T3561] __kvmalloc_node_noprof+0x3d4/0x650 [ 34.652740][ T3561] ? ip_set_alloc+0x24/0x30 [ 34.652773][ T3561] ? ip_set_alloc+0x24/0x30 [ 34.652937][ T3561] ? __kmalloc_cache_noprof+0x18a/0x410 [ 34.653047][ T3561] ip_set_alloc+0x24/0x30 [ 34.653075][ T3561] hash_netiface_create+0x282/0x740 [ 34.653146][ T3561] ? __pfx_hash_netiface_create+0x10/0x10 [ 34.653246][ T3561] ip_set_create+0x3cf/0x970 [ 34.653275][ T3561] ? __nla_parse+0x40/0x60 [ 34.653358][ T3561] nfnetlink_rcv_msg+0x509/0x5d0 [ 34.653406][ T3561] netlink_rcv_skb+0x123/0x220 [ 34.653437][ T3561] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 34.653550][ T3561] nfnetlink_rcv+0x167/0x1720 [ 34.653578][ T3561] ? __kfree_skb+0x109/0x150 [ 34.653621][ T3561] ? nlmon_xmit+0x4f/0x60 [ 34.653658][ T3561] ? consume_skb+0x4b/0x160 [ 34.653691][ T3561] ? nlmon_xmit+0x4f/0x60 [ 34.653715][ T3561] ? dev_hard_start_xmit+0x3b9/0x3f0 [ 34.653824][ T3561] ? __dev_queue_xmit+0x136c/0x1f20 [ 34.653890][ T3561] ? __dev_queue_xmit+0x148/0x1f20 [ 34.653925][ T3561] ? ref_tracker_free+0x37d/0x3e0 [ 34.653958][ T3561] ? __netlink_deliver_tap+0x4dc/0x500 [ 34.654051][ T3561] netlink_unicast+0x5c0/0x690 [ 34.654136][ T3561] netlink_sendmsg+0x5c8/0x6f0 [ 34.654157][ T3561] ? __pfx_netlink_sendmsg+0x10/0x10 [ 34.654178][ T3561] ____sys_sendmsg+0x563/0x5b0 [ 34.654202][ T3561] ___sys_sendmsg+0x195/0x1e0 [ 34.654235][ T3561] __x64_sys_sendmsg+0xd4/0x160 [ 34.654292][ T3561] x64_sys_call+0x194c/0x3020 [ 34.654317][ T3561] do_syscall_64+0x12c/0x370 [ 34.654423][ T3561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.654446][ T3561] RIP: 0033:0x7fdebc1ec819 [ 34.654510][ T3561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.654529][ T3561] RSP: 002b:00007fdebac47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 34.654596][ T3561] RAX: ffffffffffffffda RBX: 00007fdebc465fa0 RCX: 00007fdebc1ec819 [ 34.654612][ T3561] RDX: 0000000000000880 RSI: 0000200000000040 RDI: 0000000000000005 [ 34.654625][ T3561] RBP: 00007fdebc282c91 R08: 0000000000000000 R09: 0000000000000000 [ 34.654637][ T3561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 34.654649][ T3561] R13: 00007fdebc466038 R14: 00007fdebc465fa0 R15: 00007fff739d0668 [ 34.654678][ T3561] [ 34.994413][ T3561] memory: usage 307200kB, limit 307200kB, failcnt 379 [ 35.013732][ T3561] memory+swap: usage 307640kB, limit 9007199254740988kB, failcnt 0 [ 35.026178][ T3561] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 35.045061][ T3567] syz.2.33 (3567) used greatest stack depth: 10184 bytes left [ 35.057653][ T3561] Memory cgroup stats for /syz4: [ 35.057842][ T3561] cache 20480 [ 35.070331][ T3561] rss 4096 [ 35.073398][ T3561] shmem 0 [ 35.077532][ T3561] mapped_file 0 [ 35.081081][ T3561] dirty 0 [ 35.086818][ T3561] writeback 0 [ 35.090505][ T3584] Illegal XDP return value 4294967262 on prog (id 7) dev syz_tun, expect packet loss! [ 35.102442][ T3561] workingset_refault_anon 76 [ 35.107505][ T3561] workingset_refault_file 143 [ 35.112271][ T3561] swap 450560 [ 35.154204][ T3561] swapcached 765952 [ 35.158463][ T3561] pgpgin 3367 [ 35.161793][ T3561] pgpgout 3361 [ 35.168768][ T3561] pgfault 4382 [ 35.177737][ T3561] pgmajfault 54 [ 35.186932][ T3561] inactive_anon 4096 [ 35.199140][ T3561] active_anon 0 [ 35.201306][ T3593] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.203624][ T3561] inactive_file 0 [ 35.203636][ T3561] active_file 20480 [ 35.223409][ T3561] unevictable 0 [ 35.228561][ T3561] hierarchical_memory_limit 314572800 [ 35.234784][ T3561] hierarchical_memsw_limit 9223372036854771712 [ 35.241066][ T3561] total_cache 20480 [ 35.246878][ T3561] total_rss 4096 [ 35.250548][ T3561] total_shmem 0 [ 35.254226][ T3561] total_mapped_file 0 [ 35.258482][ T3561] total_dirty 0 [ 35.262126][ T3561] total_writeback 0 [ 35.266311][ T3561] total_workingset_refault_anon 76 [ 35.271761][ T3561] total_workingset_refault_file 143 [ 35.277222][ T3561] total_swap 450560 [ 35.281038][ T3561] total_swapcached 765952 [ 35.285852][ T3561] total_pgpgin 3367 [ 35.289682][ T3561] total_pgpgout 3361 [ 35.293616][ T3561] total_pgfault 4382 [ 35.297626][ T3561] total_pgmajfault 54 [ 35.301652][ T3561] total_inactive_anon 4096 [ 35.306805][ T3561] total_active_anon 0 [ 35.311002][ T3561] total_inactive_file 0 [ 35.315288][ T3561] total_active_file 20480 [ 35.319681][ T3561] total_unevictable 0 [ 35.323899][ T3561] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.32,pid=3560,uid=0 [ 35.339220][ T3561] Memory cgroup out of memory: Killed process 3560 (syz.4.32) total-vm:96140kB, anon-rss:1232kB, file-rss:22404kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 35.359287][ T3560] syz.4.32 (3560) used greatest stack depth: 9960 bytes left [ 35.394241][ T3561] syz.4.32 (3561) used greatest stack depth: 5776 bytes left [ 35.453634][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.512754][ T3602] netlink: 12 bytes leftover after parsing attributes in process `syz.4.44'. [ 36.216032][ T3625] loop2: detected capacity change from 0 to 512 [ 36.421099][ T3625] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.615357][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 36.615376][ T28] audit: type=1400 audit(1775126162.673:162): avc: denied { write } for pid=3633 comm="syz.4.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 36.683897][ T28] audit: type=1400 audit(1775126162.713:163): avc: denied { ioctl } for pid=3635 comm="syz.0.59" path="socket:[5175]" dev="sockfs" ino=5175 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 36.739147][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.761373][ T28] audit: type=1400 audit(1775126162.723:164): avc: denied { bind } for pid=3635 comm="syz.0.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 36.811029][ T28] audit: type=1400 audit(1775126162.723:165): avc: denied { write } for pid=3635 comm="syz.0.59" path="socket:[5175]" dev="sockfs" ino=5175 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 36.816330][ T3640] loop0: detected capacity change from 0 to 512 [ 36.856372][ T3640] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 36.916888][ T28] audit: type=1400 audit(1775126162.763:166): avc: denied { mount } for pid=3637 comm="syz.4.60" name="/" dev="autofs" ino=5183 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 36.939638][ T3640] EXT4-fs (loop0): 1 truncate cleaned up [ 36.984781][ T3640] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.278015][ T3648] loop3: detected capacity change from 0 to 256 [ 37.422351][ T28] audit: type=1400 audit(1775126163.473:167): avc: denied { mount } for pid=3647 comm="syz.3.64" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 37.477128][ T28] audit: type=1400 audit(1775126163.533:168): avc: denied { unmount } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 37.715755][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.988797][ T28] audit: type=1326 audit(1775126164.043:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3668 comm="syz.4.73" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdebc1ec819 code=0x0 [ 38.052465][ T28] audit: type=1400 audit(1775126164.103:170): avc: denied { listen } for pid=3675 comm="syz.1.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.078260][ T28] audit: type=1400 audit(1775126164.123:171): avc: denied { accept } for pid=3675 comm="syz.1.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.836547][ T3695] loop4: detected capacity change from 0 to 4096 [ 38.852302][ T3695] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.898783][ T3699] netlink: 28 bytes leftover after parsing attributes in process `syz.3.84'. [ 38.921276][ T3695] SELinux: failed to load policy [ 38.979473][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.125474][ T3714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.90'. [ 39.194169][ T3716] netlink: 'syz.1.92': attribute type 4 has an invalid length. [ 39.253918][ T3721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.94'. [ 39.263757][ T3716] netlink: 'syz.1.92': attribute type 4 has an invalid length. [ 39.274703][ T3724] loop0: detected capacity change from 0 to 4096 [ 39.315106][ T3724] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.538181][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.851586][ T3764] loop2: detected capacity change from 0 to 4096 [ 40.951379][ T3764] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.197634][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.030701][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 42.030716][ T28] audit: type=1400 audit(1775126168.083:183): avc: denied { bind } for pid=3787 comm="syz.2.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 42.058017][ T3788] netlink: 'syz.2.114': attribute type 4 has an invalid length. [ 42.090425][ T3788] netlink: 'syz.2.114': attribute type 4 has an invalid length. [ 42.149018][ T28] audit: type=1326 audit(1775126168.203:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3794 comm="syz.2.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20a58ec819 code=0x7ffc0000 [ 42.200081][ T28] audit: type=1326 audit(1775126168.203:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3794 comm="syz.2.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20a58ec819 code=0x7ffc0000 [ 42.253525][ T3802] netlink: 24 bytes leftover after parsing attributes in process `syz.3.119'. [ 42.535960][ T28] audit: type=1326 audit(1775126168.203:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3794 comm="syz.2.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20a58ec819 code=0x7ffc0000 [ 42.559685][ T28] audit: type=1326 audit(1775126168.203:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3794 comm="syz.2.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f20a58ec819 code=0x7ffc0000 [ 42.662286][ T28] audit: type=1326 audit(1775126168.203:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3794 comm="syz.2.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20a58ec819 code=0x7ffc0000 [ 42.703023][ T28] audit: type=1326 audit(1775126168.203:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3794 comm="syz.2.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20a58ec819 code=0x7ffc0000 [ 42.727158][ T28] audit: type=1326 audit(1775126168.203:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3794 comm="syz.2.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20a58ec819 code=0x7ffc0000 [ 42.953900][ T28] audit: type=1326 audit(1775126168.203:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3794 comm="syz.2.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20a58ec819 code=0x7ffc0000 [ 43.058957][ T28] audit: type=1326 audit(1775126168.203:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3794 comm="syz.2.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20a58ec819 code=0x7ffc0000 [ 43.396058][ T3827] loop2: detected capacity change from 0 to 4096 [ 43.569704][ T3827] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.852317][ T3845] netlink: 'syz.1.134': attribute type 4 has an invalid length. [ 43.865714][ T3845] netlink: 'syz.1.134': attribute type 4 has an invalid length. [ 44.116736][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.413291][ T3891] loop2: detected capacity change from 0 to 128 [ 44.433419][ T3890] loop4: detected capacity change from 0 to 4096 [ 44.465810][ T3890] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.731010][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.627089][ T3929] netlink: 64 bytes leftover after parsing attributes in process `syz.0.170'. [ 45.726677][ T3935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.173'. [ 45.765622][ T50] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.775527][ T3938] loop3: detected capacity change from 0 to 128 [ 45.782031][ T50] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.790907][ T3935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.173'. [ 45.813904][ T50] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.832862][ T50] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.893339][ T3940] netlink: 52 bytes leftover after parsing attributes in process `syz.2.175'. [ 45.927361][ T3943] syz.3.174: attempt to access beyond end of device [ 45.927361][ T3943] loop3: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 45.966810][ T3943] syz.3.174: attempt to access beyond end of device [ 45.966810][ T3943] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 46.001149][ T3943] syz.3.174: attempt to access beyond end of device [ 46.001149][ T3943] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 46.053831][ T3943] syz.3.174: attempt to access beyond end of device [ 46.053831][ T3943] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 46.076078][ T43] Bluetooth: hci0: sending frame failed (-49) [ 46.082410][ T3591] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 46.095088][ T3943] syz.3.174: attempt to access beyond end of device [ 46.095088][ T3943] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 46.130533][ T3943] syz.3.174: attempt to access beyond end of device [ 46.130533][ T3943] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 46.231741][ T50] kworker/u8:3: attempt to access beyond end of device [ 46.231741][ T50] loop3: rw=8388609, sector=174, nr_sectors = 1 limit=128 [ 46.260215][ T50] Buffer I/O error on dev loop3, logical block 174, lost async page write [ 46.887963][ T3979] loop1: detected capacity change from 0 to 128 [ 46.979183][ T3976] loop4: detected capacity change from 0 to 8192 [ 47.024635][ T3979] syz.1.191: attempt to access beyond end of device [ 47.024635][ T3979] loop1: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 47.043852][ T3986] ======================================================= [ 47.043852][ T3986] WARNING: The mand mount option has been deprecated and [ 47.043852][ T3986] and is ignored by this kernel. Remove the mand [ 47.043852][ T3986] option from the mount to silence this warning. [ 47.043852][ T3986] ======================================================= [ 47.080440][ T3979] syz.1.191: attempt to access beyond end of device [ 47.080440][ T3979] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 47.094068][ T3898] loop4: p1 < > p2 p4 < p5 > [ 47.102579][ T3979] syz.1.191: attempt to access beyond end of device [ 47.102579][ T3979] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 47.109923][ T3898] loop4: partition table partially beyond EOD, [ 47.125122][ T28] kauditd_printk_skb: 158 callbacks suppressed [ 47.125142][ T28] audit: type=1400 audit(1775126173.183:351): avc: denied { unmount } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 47.180677][ T3898] truncated [ 47.184179][ T3898] loop4: p1 start 134217728 is beyond EOD, truncated [ 47.191352][ T3898] loop4: p2 size 591360 extends beyond EOD, truncated [ 47.200123][ T3898] loop4: p5 size 591360 extends beyond EOD, truncated [ 47.223946][ T318] Buffer I/O error on dev loop1, logical block 174, lost async page write [ 47.262498][ T28] audit: type=1400 audit(1775126173.313:352): avc: denied { mount } for pid=3991 comm="syz.1.196" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 47.310600][ T3976] loop4: p1 < > p2 p4 < p5 > [ 47.315493][ T3976] loop4: partition table partially beyond EOD, truncated [ 47.334575][ T3976] loop4: p1 start 134217728 is beyond EOD, truncated [ 47.355410][ T28] audit: type=1400 audit(1775126173.313:353): avc: denied { search } for pid=3991 comm="syz.1.196" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 47.373816][ T3976] loop4: p2 size 591360 extends beyond EOD, truncated [ 47.403415][ T28] audit: type=1400 audit(1775126173.313:354): avc: denied { search } for pid=3991 comm="syz.1.196" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 47.427261][ T3976] loop4: p5 size 591360 extends beyond EOD, truncated [ 47.507610][ T28] audit: type=1400 audit(1775126173.313:355): avc: denied { read open } for pid=3991 comm="syz.1.196" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 47.614074][ T3899] udevd[3899]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 47.615536][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 47.635440][ T28] audit: type=1400 audit(1775126173.313:356): avc: denied { search } for pid=3991 comm="syz.1.196" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 47.636787][ T3898] udevd[3898]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 47.753225][ T4019] netlink: 24 bytes leftover after parsing attributes in process `syz.1.207'. [ 47.774841][ T4020] netlink: 'syz.0.206': attribute type 8 has an invalid length. [ 47.782662][ T4020] netlink: 'syz.0.206': attribute type 7 has an invalid length. [ 47.784359][ T28] audit: type=1400 audit(1775126173.313:357): avc: denied { search } for pid=3991 comm="syz.1.196" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 47.799045][ T4020] netlink: 194488 bytes leftover after parsing attributes in process `syz.0.206'. [ 47.861597][ T28] audit: type=1400 audit(1775126173.313:358): avc: denied { search } for pid=3991 comm="syz.1.196" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 47.965290][ T28] audit: type=1400 audit(1775126173.313:359): avc: denied { add_name } for pid=3991 comm="syz.1.196" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 48.003692][ T28] audit: type=1400 audit(1775126173.313:360): avc: denied { create } for pid=3991 comm="syz.1.196" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=file permissive=1 [ 48.090982][ T4033] loop0: detected capacity change from 0 to 512 [ 48.105420][ T4035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.213'. [ 48.129673][ T4033] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 48.143594][ T4035] netlink: 12 bytes leftover after parsing attributes in process `syz.1.213'. [ 48.194597][ T4037] netlink: 28 bytes leftover after parsing attributes in process `syz.4.214'. [ 48.248909][ T4033] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.273954][ T4037] netlink: 'syz.4.214': attribute type 7 has an invalid length. [ 48.281778][ T4037] netlink: 'syz.4.214': attribute type 8 has an invalid length. [ 48.289617][ T4037] netlink: 4 bytes leftover after parsing attributes in process `syz.4.214'. [ 48.300921][ T4033] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.331400][ T4049] syz.3.219 uses obsolete (PF_INET,SOCK_PACKET) [ 48.409698][ T4056] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 49.126766][ T4064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.223'. [ 49.275350][ T4069] loop4: detected capacity change from 0 to 256 [ 49.323238][ T4069] FAT-fs (loop4): Directory bread(block 64) failed [ 49.339058][ T4069] FAT-fs (loop4): Directory bread(block 65) failed [ 49.358268][ T4069] FAT-fs (loop4): Directory bread(block 66) failed [ 49.366229][ T4072] loop2: detected capacity change from 0 to 1024 [ 49.385429][ T4069] FAT-fs (loop4): Directory bread(block 67) failed [ 49.392059][ T4069] FAT-fs (loop4): Directory bread(block 68) failed [ 49.414931][ T4069] FAT-fs (loop4): Directory bread(block 69) failed [ 49.422842][ T4072] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.439487][ T4033] syz.0.210 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 49.468536][ T4069] FAT-fs (loop4): Directory bread(block 70) failed [ 49.523957][ T4069] FAT-fs (loop4): Directory bread(block 71) failed [ 49.600575][ T4069] FAT-fs (loop4): Directory bread(block 72) failed [ 49.617528][ T4069] FAT-fs (loop4): Directory bread(block 73) failed [ 49.625203][ T4033] CPU: 1 UID: 0 PID: 4033 Comm: syz.0.210 Not tainted syzkaller #0 PREEMPT(full) [ 49.625290][ T4033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 49.625302][ T4033] Call Trace: [ 49.625309][ T4033] [ 49.625318][ T4033] __dump_stack+0x1d/0x30 [ 49.625350][ T4033] dump_stack_lvl+0x95/0xd0 [ 49.625456][ T4033] dump_stack+0x15/0x1b [ 49.625477][ T4033] dump_header+0x80/0x240 [ 49.625499][ T4033] oom_kill_process+0x295/0x350 [ 49.625522][ T4033] out_of_memory+0x97d/0xb80 [ 49.625627][ T4033] try_charge_memcg+0x62e/0xa10 [ 49.625665][ T4033] obj_cgroup_charge_pages+0x23/0xc0 [ 49.625698][ T4033] __memcg_kmem_charge_page+0x9e/0x170 [ 49.625754][ T4033] __alloc_frozen_pages_noprof+0x18a/0x360 [ 49.625799][ T4033] alloc_pages_mpol+0xb3/0x260 [ 49.625837][ T4033] alloc_pages_noprof+0x8f/0x140 [ 49.625937][ T4033] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 49.625995][ T4033] __kvmalloc_node_noprof+0x3d4/0x650 [ 49.626022][ T4033] ? ip_set_alloc+0x24/0x30 [ 49.626093][ T4033] ? ip_set_alloc+0x24/0x30 [ 49.626121][ T4033] ? __kmalloc_cache_noprof+0x18a/0x410 [ 49.626149][ T4033] ip_set_alloc+0x24/0x30 [ 49.626184][ T4033] hash_netiface_create+0x282/0x740 [ 49.626279][ T4033] ? __pfx_hash_netiface_create+0x10/0x10 [ 49.626330][ T4033] ip_set_create+0x3cf/0x970 [ 49.626375][ T4033] ? __nla_parse+0x40/0x60 [ 49.626404][ T4033] nfnetlink_rcv_msg+0x509/0x5d0 [ 49.626482][ T4033] netlink_rcv_skb+0x123/0x220 [ 49.626529][ T4033] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 49.626610][ T4033] nfnetlink_rcv+0x167/0x1720 [ 49.626638][ T4033] ? __kfree_skb+0x109/0x150 [ 49.626668][ T4033] ? nlmon_xmit+0x4f/0x60 [ 49.626692][ T4033] ? consume_skb+0x4b/0x160 [ 49.626779][ T4033] ? nlmon_xmit+0x4f/0x60 [ 49.626800][ T4033] ? dev_hard_start_xmit+0x3b9/0x3f0 [ 49.626906][ T4033] ? __dev_queue_xmit+0x136c/0x1f20 [ 49.626947][ T4033] ? __dev_queue_xmit+0x148/0x1f20 [ 49.627004][ T4033] ? ref_tracker_free+0x37d/0x3e0 [ 49.627033][ T4033] ? __netlink_deliver_tap+0x4dc/0x500 [ 49.627062][ T4033] netlink_unicast+0x5c0/0x690 [ 49.627102][ T4033] netlink_sendmsg+0x5c8/0x6f0 [ 49.627143][ T4033] ? __pfx_netlink_sendmsg+0x10/0x10 [ 49.627162][ T4033] ____sys_sendmsg+0x563/0x5b0 [ 49.627214][ T4033] ___sys_sendmsg+0x195/0x1e0 [ 49.627252][ T4033] __x64_sys_sendmsg+0xd4/0x160 [ 49.627281][ T4033] x64_sys_call+0x194c/0x3020 [ 49.627396][ T4033] do_syscall_64+0x12c/0x370 [ 49.627424][ T4033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.627452][ T4033] RIP: 0033:0x7f50aa6cc819 [ 49.627496][ T4033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.627572][ T4033] RSP: 002b:00007f50a911f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 49.627597][ T4033] RAX: ffffffffffffffda RBX: 00007f50aa945fa0 RCX: 00007f50aa6cc819 [ 49.627615][ T4033] RDX: 0000000000000880 RSI: 0000200000000040 RDI: 0000000000000005 [ 49.627632][ T4033] RBP: 00007f50aa762c91 R08: 0000000000000000 R09: 0000000000000000 [ 49.627647][ T4033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 49.627710][ T4033] R13: 00007f50aa946038 R14: 00007f50aa945fa0 R15: 00007ffe4361b1f8 [ 49.627729][ T4033] [ 49.629533][ T4033] memory: usage 307200kB, limit 307200kB, failcnt 254 [ 49.747331][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.759085][ T4033] memory+swap: usage 307636kB, limit 9007199254740988kB, failcnt 0 [ 49.918623][ T3315] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 49.988849][ T4033] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 50.001187][ T4033] Memory cgroup stats for /syz0: [ 50.001381][ T4033] cache 8192 [ 50.013023][ T4033] rss 0 [ 50.016268][ T4033] shmem 0 [ 50.019323][ T4033] mapped_file 0 [ 50.022889][ T4033] dirty 0 [ 50.026477][ T4083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.231'. [ 50.036156][ T4033] writeback 0 [ 50.039472][ T4033] workingset_refault_anon 53 [ 50.044118][ T4033] workingset_refault_file 248 [ 50.048832][ T4033] swap 446464 [ 50.052234][ T4033] swapcached 2273280 [ 50.056321][ T4033] pgpgin 15826 [ 50.059728][ T4033] pgpgout 15820 [ 50.063193][ T4033] pgfault 19785 [ 50.066989][ T4033] pgmajfault 38 [ 50.070493][ T4033] inactive_anon 16384 [ 50.071489][ T50] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.074519][ T4033] active_anon 0 [ 50.074531][ T4033] inactive_file 0 [ 50.091282][ T50] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.093696][ T3315] FAT-fs (loop4): Filesystem has been set read-only [ 50.102114][ T4083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.231'. [ 50.106825][ T4033] active_file 8192 [ 50.117894][ T50] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.128084][ T4033] unevictable 0 [ 50.128097][ T4033] hierarchical_memory_limit 314572800 [ 50.128109][ T4033] hierarchical_memsw_limit 9223372036854771712 [ 50.134726][ T50] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.163760][ T4033] total_cache 8192 [ 50.174076][ T4033] total_rss 0 [ 50.177417][ T4033] total_shmem 0 [ 50.180899][ T4033] total_mapped_file 0 [ 50.186518][ T4033] total_dirty 0 [ 50.190002][ T4033] total_writeback 0 [ 50.195705][ T4033] total_workingset_refault_anon 53 [ 50.200927][ T4033] total_workingset_refault_file 248 [ 50.206467][ T4033] total_swap 446464 [ 50.210334][ T4033] total_swapcached 2273280 [ 50.215042][ T4033] total_pgpgin 15826 [ 50.219659][ T4033] total_pgpgout 15820 [ 50.224071][ T4033] total_pgfault 19785 [ 50.228268][ T4033] total_pgmajfault 38 [ 50.232465][ T4033] total_inactive_anon 16384 [ 50.245952][ T4033] total_active_anon 0 [ 50.250206][ T4033] total_inactive_file 0 [ 50.263137][ T4033] total_active_file 8192 [ 50.267547][ T4033] total_unevictable 0 [ 50.271627][ T4033] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.210,pid=4032,uid=0 [ 50.286892][ T4033] Memory cgroup out of memory: Killed process 4032 (syz.0.210) total-vm:96212kB, anon-rss:1228kB, file-rss:22340kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 50.345687][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.399919][ T4095] loop0: detected capacity change from 0 to 128 [ 50.421068][ T318] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.933717][ T4095] bio_check_eod: 6378 callbacks suppressed [ 50.933738][ T4095] syz.0.233: attempt to access beyond end of device [ 50.933738][ T4095] loop0: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 50.953909][ T4095] syz.0.233: attempt to access beyond end of device [ 50.953909][ T4095] loop0: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 50.971548][ T4095] syz.0.233: attempt to access beyond end of device [ 50.971548][ T4095] loop0: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 50.987718][ T4095] syz.0.233: attempt to access beyond end of device [ 50.987718][ T4095] loop0: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 51.001598][ T4095] syz.0.233: attempt to access beyond end of device [ 51.001598][ T4095] loop0: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 51.015628][ T4095] syz.0.233: attempt to access beyond end of device [ 51.015628][ T4095] loop0: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 51.030549][ T4095] syz.0.233: attempt to access beyond end of device [ 51.030549][ T4095] loop0: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 51.044703][ T4095] syz.0.233: attempt to access beyond end of device [ 51.044703][ T4095] loop0: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 51.058621][ T4095] syz.0.233: attempt to access beyond end of device [ 51.058621][ T4095] loop0: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 51.091300][ T318] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.092783][ T4095] syz.0.233: attempt to access beyond end of device [ 51.092783][ T4095] loop0: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 51.191606][ T318] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.301068][ T318] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.363162][ T4101] chnl_net:caif_netlink_parms(): no params data found [ 51.437017][ T4101] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.444668][ T4101] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.451988][ T4101] bridge_slave_0: entered allmulticast mode [ 51.459164][ T4101] bridge_slave_0: entered promiscuous mode [ 51.477662][ T4101] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.485231][ T4101] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.487202][ T4129] netlink: 'syz.0.244': attribute type 8 has an invalid length. [ 51.492573][ T4101] bridge_slave_1: entered allmulticast mode [ 51.506859][ T4101] bridge_slave_1: entered promiscuous mode [ 51.520582][ T4129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.244'. [ 51.557219][ T4133] tipc: Failed to remove unknown binding: 66,1,1/0:3840476736/3840476738 [ 51.566695][ T4133] tipc: Failed to remove unknown binding: 66,1,1/0:3840476736/3840476738 [ 51.575816][ T4135] netlink: 'syz.0.244': attribute type 8 has an invalid length. [ 51.590885][ T4129] bond0: entered promiscuous mode [ 51.596223][ T4129] bond_slave_0: entered promiscuous mode [ 51.602175][ T4129] bond_slave_1: entered promiscuous mode [ 51.609576][ T4129] gretap0: entered promiscuous mode [ 51.615969][ T4129] batadv0: entered promiscuous mode [ 51.621719][ T4129] hsr1: entered promiscuous mode [ 51.635661][ T318] bridge_slave_1: left allmulticast mode [ 51.645905][ T318] bridge_slave_1: left promiscuous mode [ 51.651725][ T318] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.660169][ T318] bridge_slave_0: left allmulticast mode [ 51.666150][ T318] bridge_slave_0: left promiscuous mode [ 51.671949][ T318] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.796316][ T318] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.806723][ T318] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 51.816677][ T318] bond0 (unregistering): Released all slaves [ 51.836094][ T4101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.847086][ T4101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.869868][ T4101] team0: Port device team_slave_0 added [ 51.878457][ T4101] team0: Port device team_slave_1 added [ 51.901748][ T318] hsr_slave_0: left promiscuous mode [ 51.911540][ T318] hsr_slave_1: left promiscuous mode [ 51.939344][ T318] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.960220][ T318] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.971814][ T318] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.986086][ T318] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.012570][ T318] veth1_macvtap: left promiscuous mode [ 52.027406][ T318] veth0_macvtap: left promiscuous mode [ 52.033416][ T4163] netlink: 'syz.2.254': attribute type 1 has an invalid length. [ 52.042663][ T318] veth1_vlan: left promiscuous mode [ 52.048825][ T318] veth0_vlan: left promiscuous mode [ 52.142474][ T318] team0 (unregistering): Port device team_slave_1 removed [ 52.166221][ T318] team0 (unregistering): Port device team_slave_0 removed [ 52.209317][ T4101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.218689][ T4101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.245303][ T4101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.264874][ T4163] bond1: entered promiscuous mode [ 52.271336][ T4163] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.291170][ T4169] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.298568][ T4169] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 52.309186][ T4169] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 52.321203][ T4169] bond1: (slave vti0): making interface the new active one [ 52.329044][ T4169] vti0: entered promiscuous mode [ 52.335983][ T4169] bond1: (slave vti0): Enslaving as an active interface with an up link [ 52.345258][ T4101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.352293][ T4101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.378541][ T4101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.422701][ T4101] hsr_slave_0: entered promiscuous mode [ 52.428900][ T4101] hsr_slave_1: entered promiscuous mode [ 52.435204][ T4101] debugfs: 'hsr0' already exists in 'hsr' [ 52.451000][ T4101] Cannot create hsr debugfs directory [ 52.482336][ T4182] loop3: detected capacity change from 0 to 512 [ 52.513757][ T4182] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 52.545435][ T4182] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.256: iget: bad i_size value: 38620345925642 [ 52.558651][ T4182] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 52.558807][ T4182] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.256: couldn't read orphan inode 15 (err -117) [ 52.568069][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 52.568101][ C1] EXT4-fs (loop3): initial error at time 1775126178: ext4_orphan_get:1397: inode 15 [ 52.568126][ C1] EXT4-fs (loop3): last error at time 1775126178: ext4_orphan_get:1397: inode 15 [ 52.605812][ T4182] loop3: lost filesystem error report for type 5 error -117 [ 52.606458][ T4182] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.610875][ T4191] loop1: detected capacity change from 0 to 2048 [ 52.634985][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 52.635003][ T28] audit: type=1400 audit(1775126178.673:377): avc: denied { append } for pid=4181 comm="syz.3.256" path="/51/bus/cpuset.effective_mems" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 52.681170][ T28] audit: type=1400 audit(1775126178.733:378): avc: denied { map } for pid=4181 comm="syz.3.256" path="/51/bus/cpuset.effective_mems" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 52.714734][ T4182] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.256: bg 0: block 5: invalid block bitmap [ 52.734534][ T4182] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 52.753791][ T4182] EXT4-fs (loop3): This should not happen!! Data will be lost [ 52.753791][ T4182] [ 52.774883][ T4191] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.789639][ T4182] EXT4-fs (loop3): Total free blocks count 0 [ 52.795792][ T4182] EXT4-fs (loop3): Free/Dirty block details [ 52.801897][ T4182] EXT4-fs (loop3): free_blocks=0 [ 52.807123][ T4182] EXT4-fs (loop3): dirty_blocks=2120 [ 52.812597][ T4182] EXT4-fs (loop3): Block reservation details [ 52.818655][ T4182] EXT4-fs (loop3): i_reserved_data_blocks=2120 [ 52.838021][ T30] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 68 with error 28 [ 52.903779][ T3307] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 52.959164][ T28] audit: type=1400 audit(1775126179.013:379): avc: denied { read } for pid=4188 comm="syz.1.257" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 53.024107][ T4101] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 53.043327][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.095540][ T4101] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 53.154531][ T4101] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 53.254907][ T4101] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 53.397543][ T4101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.430493][ T4101] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.447916][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.455292][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.481460][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.488636][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.646148][ T4101] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.732385][ T4101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.007516][ T4101] veth0_vlan: entered promiscuous mode [ 54.117752][ T4101] veth1_vlan: entered promiscuous mode [ 54.131062][ T4101] veth0_macvtap: entered promiscuous mode [ 54.138445][ T4101] veth1_macvtap: entered promiscuous mode [ 54.150087][ T4101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.158959][ T4101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.263420][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.327629][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.374821][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.388744][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.793696][ T28] audit: type=1400 audit(1775126180.843:380): avc: denied { connect } for pid=4298 comm="syz.5.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 55.121062][ T28] audit: type=1400 audit(1775126181.173:381): avc: denied { setopt } for pid=4313 comm="syz.3.276" lport=55855 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 55.251146][ T4320] loop3: detected capacity change from 0 to 512 [ 55.508702][ T4320] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 55.542792][ T4320] ------------[ cut here ]------------ [ 55.548410][ T4320] EA inode 11 i_nlink=2 [ 55.548426][ T4320] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.3.277/4320 [ 55.563210][ T4320] Modules linked in: [ 55.567143][ T4320] CPU: 1 UID: 0 PID: 4320 Comm: syz.3.277 Not tainted syzkaller #0 PREEMPT(full) [ 55.576398][ T4320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 55.586536][ T4320] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 55.593279][ T4320] Code: d4 35 99 ff 4c 8d 2d 3d a2 5d 05 49 8d 7e 40 e8 54 cd b5 ff 49 8b 6e 40 4c 89 e7 e8 88 c8 b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 bf c4 dd 03 66 66 66 66 66 66 2e [ 55.613231][ T4320] RSP: 0018:ffffc90000eab778 EFLAGS: 00010246 [ 55.619360][ T4320] RAX: ffff888101dd1b88 RBX: ffff88811a8b81a8 RCX: ffffffff81c02ad8 [ 55.627768][ T4320] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871dcd00 [ 55.635853][ T4320] RBP: 000000000000000b R08: 000188811a8b815b R09: 0000000000000000 [ 55.643875][ T4320] R10: ffffc90000eab6a8 R11: 0001c90000eab6a8 R12: ffff88811a8b8158 [ 55.651964][ T4320] R13: ffffffff871dcd00 R14: ffff88811a8b8110 R15: 0000000000000001 [ 55.659995][ T4320] FS: 00007f755ba1e6c0(0000) GS:ffff8882ae9d8000(0000) knlGS:0000000000000000 [ 55.669006][ T4320] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.675797][ T4320] CR2: 0000200000000500 CR3: 000000011b00c000 CR4: 00000000003506f0 [ 55.683914][ T4320] Call Trace: [ 55.687205][ T4320] [ 55.690197][ T4320] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 55.696338][ T4320] ? errseq_check+0x2c/0x50 [ 55.700879][ T4320] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 55.706555][ T4320] ? ext4_truncate+0x92b/0xb00 [ 55.711364][ T4320] ext4_evict_inode+0xac1/0xe40 [ 55.716306][ T4320] ? __pfx_ext4_evict_inode+0x10/0x10 [ 55.721735][ T4320] evict+0x2af/0x510 [ 55.725740][ T4320] ? __dquot_initialize+0x146/0x7c0 [ 55.731370][ T4320] iput+0x41a/0x580 [ 55.735675][ T4320] ext4_process_orphan+0x1a9/0x1c0 [ 55.740888][ T4320] ext4_orphan_cleanup+0x6a8/0xa00 [ 55.746211][ T4320] ext4_fill_super+0x3414/0x37c0 [ 55.751198][ T4320] ? set_blocksize+0x14c/0x270 [ 55.756197][ T4320] ? setup_bdev_super+0x30e/0x370 [ 55.761336][ T4320] ? __pfx_ext4_fill_super+0x10/0x10 [ 55.766863][ T4320] get_tree_bdev_flags+0x291/0x300 [ 55.772083][ T4320] ? __pfx_ext4_fill_super+0x10/0x10 [ 55.777542][ T4320] get_tree_bdev+0x1f/0x30 [ 55.782135][ T4320] ext4_get_tree+0x1c/0x30 [ 55.786786][ T4320] vfs_get_tree+0x57/0x1d0 [ 55.791308][ T4320] do_new_mount+0x288/0x8d0 [ 55.795922][ T4320] path_mount+0x4d0/0xbc0 [ 55.800273][ T4320] __se_sys_mount+0x28c/0x2e0 [ 55.805120][ T4320] __x64_sys_mount+0x67/0x80 [ 55.809805][ T4320] x64_sys_call+0x2d61/0x3020 [ 55.814647][ T4320] do_syscall_64+0x12c/0x370 [ 55.819268][ T4320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.825245][ T4320] RIP: 0033:0x7f755cfeda8a [ 55.829943][ T4320] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.849858][ T4320] RSP: 002b:00007f755ba1de58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 55.858612][ T4320] RAX: ffffffffffffffda RBX: 00007f755ba1dee0 RCX: 00007f755cfeda8a [ 55.866854][ T4320] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f755ba1dea0 [ 55.874964][ T4320] RBP: 00002000000009c0 R08: 00007f755ba1dee0 R09: 0000000000800718 [ 55.883133][ T4320] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 55.891245][ T4320] R13: 00007f755ba1dea0 R14: 000000000000048d R15: 0000200000000200 [ 55.899381][ T4320] [ 55.902413][ T4320] ---[ end trace 0000000000000000 ]--- [ 55.923924][ T4320] EXT4-fs (loop3): 1 orphan inode deleted [ 55.935732][ T4320] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.090121][ T4332] __nla_validate_parse: 2 callbacks suppressed [ 56.090165][ T4332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.282'. [ 56.114796][ T4332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.282'. [ 56.631094][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.651806][ T28] audit: type=1400 audit(1775126182.703:382): avc: denied { create } for pid=4341 comm="syz.0.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 56.764900][ T28] audit: type=1400 audit(1775126182.703:383): avc: denied { write } for pid=4341 comm="syz.0.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 56.838700][ T4353] netlink: 16 bytes leftover after parsing attributes in process `syz.5.291'. [ 56.893845][ T28] audit: type=1400 audit(1775126182.943:384): avc: denied { create } for pid=4358 comm="syz.2.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.976455][ T28] audit: type=1400 audit(1775126183.033:385): avc: denied { setopt } for pid=4361 comm="syz.0.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 57.008312][ T4365] netlink: 4 bytes leftover after parsing attributes in process `syz.5.295'. [ 57.043713][ T28] audit: type=1400 audit(1775126183.033:386): avc: denied { bind } for pid=4361 comm="syz.0.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 57.044723][ T4365] netlink: 4 bytes leftover after parsing attributes in process `syz.5.295'. [ 57.063244][ T30] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.097588][ T30] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.115987][ T30] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.131939][ T30] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.012649][ T4429] netlink: 12 bytes leftover after parsing attributes in process `syz.3.321'. [ 58.061312][ T4433] loop3: detected capacity change from 0 to 128 [ 58.071931][ T4433] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 58.097322][ T4433] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.176851][ T3307] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 58.208345][ T4437] loop3: detected capacity change from 0 to 2048 [ 58.231965][ T4437] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.242791][ T4439] loop0: detected capacity change from 0 to 4096 [ 58.256661][ T4437] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.270306][ T4439] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.323489][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.376789][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 58.376806][ T28] audit: type=1400 audit(1775126184.423:400): avc: denied { create } for pid=4447 comm="syz.2.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 58.424963][ T28] audit: type=1400 audit(1775126184.423:401): avc: denied { setopt } for pid=4447 comm="syz.2.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 58.448331][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.460751][ T28] audit: type=1400 audit(1775126184.433:402): avc: denied { bind } for pid=4447 comm="syz.2.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 58.602416][ T4459] netlink: 12 bytes leftover after parsing attributes in process `syz.5.333'. [ 58.799544][ T4471] loop1: detected capacity change from 0 to 2048 [ 58.829425][ T4471] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.855620][ T4471] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.918668][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.451284][ T28] audit: type=1400 audit(1775126185.503:403): avc: denied { mount } for pid=4492 comm="syz.0.345" name="/" dev="hugetlbfs" ino=15356 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 59.497117][ T28] audit: type=1400 audit(1775126185.503:404): avc: denied { watch } for pid=4492 comm="syz.0.345" path="/" dev="hugetlbfs" ino=15356 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 60.229949][ T28] audit: type=1400 audit(1775126186.283:405): avc: denied { wake_alarm } for pid=4501 comm="syz.1.348" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 60.637806][ T4526] loop2: detected capacity change from 0 to 512 [ 60.647564][ T4526] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 60.713694][ T4526] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.357: iget: bad i_size value: 38620345925642 [ 60.730480][ T4526] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 60.730786][ T4526] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.357: couldn't read orphan inode 15 (err -117) [ 60.740199][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 60.740231][ C0] EXT4-fs (loop2): initial error at time 1775126186: ext4_orphan_get:1397: inode 15 [ 60.740263][ C0] EXT4-fs (loop2): last error at time 1775126186: ext4_orphan_get:1397: inode 15 [ 60.779337][ T4526] loop2: lost filesystem error report for type 5 error -117 [ 60.810477][ T4526] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.958242][ T4526] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.357: bg 0: block 5: invalid block bitmap [ 60.971149][ T4526] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1652 with error 28 [ 60.984273][ T4526] EXT4-fs (loop2): This should not happen!! Data will be lost [ 60.984273][ T4526] [ 60.995278][ T4526] EXT4-fs (loop2): Total free blocks count 0 [ 61.001956][ T4526] EXT4-fs (loop2): Free/Dirty block details [ 61.008834][ T4526] EXT4-fs (loop2): free_blocks=0 [ 61.014068][ T4526] EXT4-fs (loop2): dirty_blocks=1652 [ 61.019851][ T4526] EXT4-fs (loop2): Block reservation details [ 61.027604][ T4526] EXT4-fs (loop2): i_reserved_data_blocks=1652 [ 61.083976][ T4541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.364'. [ 61.362030][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.646189][ T4562] syzkaller0: entered promiscuous mode [ 61.651708][ T4562] syzkaller0: entered allmulticast mode [ 61.748628][ T4570] netlink: 8 bytes leftover after parsing attributes in process `syz.5.377'. [ 61.843362][ T4583] netlink: 12 bytes leftover after parsing attributes in process `syz.5.381'. [ 61.857992][ T28] audit: type=1400 audit(1775126187.913:406): avc: denied { mount } for pid=4577 comm="syz.2.380" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 61.933903][ T28] audit: type=1400 audit(1775126187.983:407): avc: denied { ioctl } for pid=4588 comm="syz.0.384" path="socket:[16554]" dev="sockfs" ino=16554 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 62.086336][ T28] audit: type=1400 audit(1775126188.143:408): avc: denied { write } for pid=4604 comm="syz.2.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 62.137304][ T28] audit: type=1400 audit(1775126188.193:409): avc: denied { write } for pid=4608 comm="syz.3.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 62.310586][ T4615] loop5: detected capacity change from 0 to 128 [ 62.549124][ T4632] loop3: detected capacity change from 0 to 512 [ 62.567742][ T4632] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 62.603304][ T4632] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 62.621602][ T4632] EXT4-fs (loop3): 1 truncate cleaned up [ 62.638121][ T4632] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.639219][ T3383] IPVS: starting estimator thread 0... [ 62.724286][ T4639] SELinux: failed to load policy [ 62.754780][ T4644] lo speed is unknown, defaulting to 1000 [ 62.776519][ T4644] lo speed is unknown, defaulting to 1000 [ 62.784526][ T4640] IPVS: using max 2592 ests per chain, 129600 per kthread [ 62.790420][ T4644] lo speed is unknown, defaulting to 1000 [ 62.826383][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.916370][ T4644] infiniband syz0: set active [ 62.921118][ T3476] lo speed is unknown, defaulting to 1000 [ 62.927121][ T4644] infiniband syz0: added lo [ 62.943586][ T4644] RDS/IB: syz0: added [ 62.947726][ T4644] smc: adding ib device syz0 with port count 1 [ 62.953964][ T4644] smc: ib device syz0 port 1 has no pnetid [ 62.960180][ T3476] lo speed is unknown, defaulting to 1000 [ 62.971740][ T4644] lo speed is unknown, defaulting to 1000 [ 63.019041][ T4644] lo speed is unknown, defaulting to 1000 [ 63.050958][ T4644] lo speed is unknown, defaulting to 1000 [ 63.105091][ T4644] lo speed is unknown, defaulting to 1000 [ 63.151343][ T4644] lo speed is unknown, defaulting to 1000 [ 63.423488][ T4678] lo speed is unknown, defaulting to 1000 [ 63.443763][ T4683] loop2: detected capacity change from 0 to 512 [ 63.515315][ T4683] EXT4-fs (loop2): 1 orphan inode deleted [ 63.523562][ T4683] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.537150][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 63.537167][ T28] audit: type=1326 audit(1775126189.583:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4685 comm="syz.1.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe325f6c819 code=0x7ffc0000 [ 63.662557][ T28] audit: type=1326 audit(1775126189.583:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4685 comm="syz.1.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe325f6c819 code=0x7ffc0000 [ 63.713120][ T28] audit: type=1326 audit(1775126189.583:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4685 comm="syz.1.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe325f6c819 code=0x7ffc0000 [ 63.757176][ T4697] audit: audit_backlog=65 > audit_backlog_limit=64 [ 63.763856][ T4697] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 63.771515][ T4697] audit: backlog limit exceeded [ 63.792387][ T28] audit: type=1326 audit(1775126189.583:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4685 comm="syz.1.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe325f6c819 code=0x7ffc0000 [ 63.818521][ T28] audit: type=1326 audit(1775126189.643:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4685 comm="syz.1.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe325f6c819 code=0x7ffc0000 [ 63.825760][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.842431][ T28] audit: type=1326 audit(1775126189.643:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4685 comm="syz.1.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe325f6c582 code=0x7ffc0000 [ 63.874884][ T28] audit: type=1326 audit(1775126189.643:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4685 comm="syz.1.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fe325f6c617 code=0x7ffc0000 [ 64.103011][ T4711] lo speed is unknown, defaulting to 1000 [ 65.866018][ T4804] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.450'. [ 66.188825][ T4824] loop2: detected capacity change from 0 to 1024 [ 66.220255][ T4824] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 66.242192][ T4824] System zones: 0-1, 3-36 [ 66.264378][ T4824] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.455: bad orphan inode 134217728 [ 66.329874][ T4824] loop2: lost filesystem error report for type 5 error -117 [ 66.331708][ T4824] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.422606][ T4830] loop1: detected capacity change from 0 to 8192 [ 66.650737][ T3308] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 66.708441][ T3308] FAT-fs (loop1): Filesystem has been set read-only [ 66.932868][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.241686][ T4851] netlink: 'syz.5.467': attribute type 27 has an invalid length. [ 67.391285][ T4868] netlink: 4 bytes leftover after parsing attributes in process `syz.3.475'. [ 67.408210][ T4868] netlink: 12 bytes leftover after parsing attributes in process `syz.3.475'. [ 67.453855][ T4874] bridge0: port 3(erspan0) entered blocking state [ 67.467875][ T4874] bridge0: port 3(erspan0) entered disabled state [ 67.475095][ T4874] erspan0: entered allmulticast mode [ 67.481076][ T4874] erspan0: entered promiscuous mode [ 67.489372][ T4874] bridge0: port 3(erspan0) entered blocking state [ 67.496293][ T4874] bridge0: port 3(erspan0) entered forwarding state [ 67.512292][ T4884] netlink: 'syz.2.477': attribute type 10 has an invalid length. [ 67.546240][ T4882] syzkaller0: entered promiscuous mode [ 67.551949][ T4882] syzkaller0: entered allmulticast mode [ 67.558912][ T4884] bridge0: port 3(erspan0) entered disabled state [ 67.565544][ T4884] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.572763][ T4884] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.587730][ T4884] bridge0: port 3(erspan0) entered blocking state [ 67.594248][ T4884] bridge0: port 3(erspan0) entered forwarding state [ 67.601009][ T4884] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.608164][ T4884] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.615583][ T4884] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.622662][ T4884] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.636769][ T4884] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 67.741032][ T4897] openvswitch: netlink: EtherType 0 is less than min 600 [ 68.277856][ T4928] mmap: syz.1.499 (4928) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 68.627034][ T4949] loop3: detected capacity change from 0 to 1024 [ 68.655366][ T4949] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.672915][ T4946] lo speed is unknown, defaulting to 1000 [ 68.682258][ T4952] geneve2: entered promiscuous mode [ 68.693198][ T318] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 50835 - 0 [ 68.709946][ T28] kauditd_printk_skb: 429 callbacks suppressed [ 68.709993][ T28] audit: type=1400 audit(1775126194.763:852): avc: denied { add_name } for pid=4948 comm="syz.3.507" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 68.716500][ T318] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 50835 - 0 [ 68.763356][ T318] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 50835 - 0 [ 68.782445][ T318] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 50835 - 0 [ 68.831606][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.025635][ T28] audit: type=1400 audit(1775126195.083:853): avc: denied { read } for pid=4966 comm="syz.1.513" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 69.059978][ T28] audit: type=1400 audit(1775126195.103:854): avc: denied { open } for pid=4966 comm="syz.1.513" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 69.084938][ T4967] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.513' sets config #0 [ 69.097261][ T28] audit: type=1400 audit(1775126195.143:855): avc: denied { write } for pid=4966 comm="syz.1.513" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 69.167734][ T4970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.515'. [ 69.813794][ T28] audit: type=1400 audit(1775126195.833:856): avc: denied { setopt } for pid=4997 comm="syz.5.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 69.977479][ T5004] loop2: detected capacity change from 0 to 8192 [ 70.015140][ T5011] loop5: detected capacity change from 0 to 1024 [ 70.089011][ T5011] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 70.104949][ T5011] System zones: 0-1, 3-36 [ 70.158039][ T5011] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.529: bad orphan inode 134217728 [ 70.205317][ T5011] loop5: lost filesystem error report for type 5 error -117 [ 70.205955][ T5011] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.498143][ T3309] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 70.515501][ T3309] FAT-fs (loop2): Filesystem has been set read-only [ 70.697533][ T5019] lo speed is unknown, defaulting to 1000 [ 70.714272][ T4101] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.845264][ T5034] loop1: detected capacity change from 0 to 1024 [ 70.869576][ T5034] EXT4-fs: Ignoring removed bh option [ 70.933579][ T5034] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.553742][ T28] audit: type=1326 audit(1775126197.503:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5018 comm="syz.2.530" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f20a58ec819 code=0x0 [ 71.727802][ T5054] loop3: detected capacity change from 0 to 128 [ 71.762705][ T5058] loop0: detected capacity change from 0 to 1024 [ 71.772739][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.777813][ T5058] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 71.795155][ T5058] System zones: 0-1, 3-36 [ 71.813573][ T5058] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.545: bad orphan inode 134217728 [ 71.851553][ T5058] loop0: lost filesystem error report for type 5 error -117 [ 71.852772][ T5058] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.903950][ T5063] bio_check_eod: 3392 callbacks suppressed [ 71.903967][ T5063] syz.3.544: attempt to access beyond end of device [ 71.903967][ T5063] loop3: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 71.965017][ T5053] syz.3.544: attempt to access beyond end of device [ 71.965017][ T5053] loop3: rw=524288, sector=138, nr_sectors = 112 limit=128 [ 71.979469][ T5053] syz.3.544: attempt to access beyond end of device [ 71.979469][ T5053] loop3: rw=8388608, sector=138, nr_sectors = 8 limit=128 [ 71.993900][ T5053] syz.3.544: attempt to access beyond end of device [ 71.993900][ T5053] loop3: rw=8388608, sector=138, nr_sectors = 8 limit=128 [ 72.008151][ T5053] syz.3.544: attempt to access beyond end of device [ 72.008151][ T5053] loop3: rw=8388608, sector=138, nr_sectors = 8 limit=128 [ 72.022482][ T5053] syz.3.544: attempt to access beyond end of device [ 72.022482][ T5053] loop3: rw=8388608, sector=138, nr_sectors = 8 limit=128 [ 72.037347][ T5053] syz.3.544: attempt to access beyond end of device [ 72.037347][ T5053] loop3: rw=8388608, sector=138, nr_sectors = 8 limit=128 [ 72.071360][ T5053] syz.3.544: attempt to access beyond end of device [ 72.071360][ T5053] loop3: rw=8388608, sector=138, nr_sectors = 8 limit=128 [ 72.085733][ T5053] syz.3.544: attempt to access beyond end of device [ 72.085733][ T5053] loop3: rw=8388608, sector=138, nr_sectors = 8 limit=128 [ 72.100182][ T5053] syz.3.544: attempt to access beyond end of device [ 72.100182][ T5053] loop3: rw=8388608, sector=138, nr_sectors = 8 limit=128 [ 72.142357][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.159798][ T5079] loop1: detected capacity change from 0 to 1024 [ 72.167382][ T5079] EXT4-fs: Ignoring removed bh option [ 72.178631][ T5081] tipc: Failed to obtain node identity [ 72.192681][ T5081] tipc: Enabling of bearer rejected, failed to enable media [ 72.214139][ T5079] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.236363][ T28] audit: type=1400 audit(1775126198.293:858): avc: denied { append } for pid=5078 comm="syz.1.555" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 72.267727][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.305724][ T28] audit: type=1400 audit(1775126198.293:859): avc: denied { map } for pid=5078 comm="syz.1.555" path="/111/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 72.334293][ T5087] loop0: detected capacity change from 0 to 4096 [ 72.371727][ T5087] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.447570][ T28] audit: type=1400 audit(1775126198.493:860): avc: denied { setattr } for pid=5086 comm="syz.0.557" path="/120/file0/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 72.574365][ T28] audit: type=1400 audit(1775126198.633:861): avc: denied { allowed } for pid=5100 comm="syz.2.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 72.680838][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.771265][ T5107] bridge0: port 3(erspan0) entered disabled state [ 72.796547][ T5107] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.803718][ T5107] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.955414][ T5107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.965900][ T5107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.037471][ T70] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.057496][ T70] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.071514][ T5124] lo speed is unknown, defaulting to 1000 [ 73.086740][ T70] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.096751][ T70] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.270749][ T5145] netlink: 24 bytes leftover after parsing attributes in process `syz.3.577'. [ 73.326375][ T5150] netlink: 'syz.2.578': attribute type 3 has an invalid length. [ 73.343566][ T5154] netlink: 24 bytes leftover after parsing attributes in process `syz.5.580'. [ 73.363043][ T5150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.578'. [ 73.945400][ T36] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 73.959819][ T36] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.034360][ T36] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.056172][ T5187] netlink: 'syz.3.597': attribute type 21 has an invalid length. [ 74.065635][ T36] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.119882][ T36] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.136519][ T36] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.176975][ T36] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.193689][ T36] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.247619][ T5188] lo speed is unknown, defaulting to 1000 [ 74.378466][ T36] bridge_slave_1: left allmulticast mode [ 74.401791][ T36] bridge_slave_1: left promiscuous mode [ 74.409042][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.434893][ T36] bridge_slave_0: left allmulticast mode [ 74.454694][ T36] bridge_slave_0: left promiscuous mode [ 74.501245][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.520933][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 74.520951][ T28] audit: type=1400 audit(1775126200.573:868): avc: denied { accept } for pid=5224 comm="syz.0.606" lport=52919 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 74.650342][ T3396] IPVS: starting estimator thread 0... [ 74.763965][ T5239] IPVS: using max 2592 ests per chain, 129600 per kthread [ 74.866254][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.876982][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.887531][ T36] bond0 (unregistering): Released all slaves [ 74.905723][ T5247] syz_tun: entered allmulticast mode [ 74.949445][ T5244] syz_tun: left allmulticast mode [ 75.073798][ T36] hsr_slave_0: left promiscuous mode [ 75.101480][ T36] hsr_slave_1: left promiscuous mode [ 75.134211][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.141741][ T28] audit: type=1400 audit(1775126201.193:869): avc: denied { execute } for pid=5271 comm="syz.0.617" name="file0" dev="tmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 75.186733][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.194627][ T28] audit: type=1400 audit(1775126201.193:870): avc: denied { execute_no_trans } for pid=5271 comm="syz.0.617" path="/132/file0" dev="tmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 75.254332][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.262038][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.298702][ T36] veth1_macvtap: left promiscuous mode [ 75.325216][ T36] veth0_macvtap: left promiscuous mode [ 75.331014][ T36] veth1_vlan: left promiscuous mode [ 75.336851][ T36] veth0_vlan: left promiscuous mode [ 75.466362][ T36] team0 (unregistering): Port device team_slave_1 removed [ 75.478276][ T36] team0 (unregistering): Port device team_slave_0 removed [ 75.555244][ T5188] chnl_net:caif_netlink_parms(): no params data found [ 75.692337][ T5188] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.717920][ T5188] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.734905][ T5188] bridge_slave_0: entered allmulticast mode [ 75.752646][ T5188] bridge_slave_0: entered promiscuous mode [ 75.772498][ T5188] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.787520][ T5188] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.799267][ T5188] bridge_slave_1: entered allmulticast mode [ 75.806739][ T5188] bridge_slave_1: entered promiscuous mode [ 75.816665][ T36] IPVS: stop unused estimator thread 0... [ 75.840704][ T5282] syz.3.619 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 75.841034][ T5188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.854871][ T5282] CPU: 0 UID: 0 PID: 5282 Comm: syz.3.619 Tainted: G W syzkaller #0 PREEMPT(full) [ 75.854946][ T5282] Tainted: [W]=WARN [ 75.854953][ T5282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 75.854966][ T5282] Call Trace: [ 75.854973][ T5282] [ 75.854982][ T5282] __dump_stack+0x1d/0x30 [ 75.855012][ T5282] dump_stack_lvl+0x95/0xd0 [ 75.855036][ T5282] dump_stack+0x15/0x1b [ 75.855131][ T5282] dump_header+0x80/0x240 [ 75.855155][ T5282] oom_kill_process+0x295/0x350 [ 75.855218][ T5282] out_of_memory+0x97d/0xb80 [ 75.855242][ T5282] try_charge_memcg+0x62e/0xa10 [ 75.855282][ T5282] obj_cgroup_charge_pages+0x23/0xc0 [ 75.855311][ T5282] __memcg_kmem_charge_page+0x9e/0x170 [ 75.855345][ T5282] __alloc_frozen_pages_noprof+0x18a/0x360 [ 75.855377][ T5282] alloc_pages_mpol+0xb3/0x260 [ 75.855407][ T5282] alloc_pages_noprof+0x8f/0x140 [ 75.855486][ T5282] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 75.855524][ T5282] __kvmalloc_node_noprof+0x3d4/0x650 [ 75.855551][ T5282] ? futex_hash_allocate+0x190/0x9d0 [ 75.855668][ T5282] ? futex_hash_allocate+0x190/0x9d0 [ 75.855698][ T5282] futex_hash_allocate+0x190/0x9d0 [ 75.855728][ T5282] ? cap_task_prctl+0x13f/0x6e0 [ 75.855786][ T5282] futex_hash_prctl+0xd8/0xf0 [ 75.855814][ T5282] __se_sys_prctl+0xa3d/0x13f0 [ 75.855844][ T5282] __x64_sys_prctl+0x67/0x80 [ 75.855931][ T5282] x64_sys_call+0x2533/0x3020 [ 75.855958][ T5282] do_syscall_64+0x12c/0x370 [ 75.855987][ T5282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.856010][ T5282] RIP: 0033:0x7f755cfec819 [ 75.856053][ T5282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.856072][ T5282] RSP: 002b:00007f755ba1e028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 75.856095][ T5282] RAX: ffffffffffffffda RBX: 00007f755d266090 RCX: 00007f755cfec819 [ 75.856110][ T5282] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 75.856123][ T5282] RBP: 00007f755d082c91 R08: 0000000000000000 R09: 0000000000000000 [ 75.856209][ T5282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.856223][ T5282] R13: 00007f755d266128 R14: 00007f755d266090 R15: 00007ffc235e0848 [ 75.856297][ T5282] [ 75.856343][ T5282] memory: usage 307200kB, limit 307200kB, failcnt 160 [ 75.882009][ T5188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.903783][ T5282] memory+swap: usage 307204kB, limit 9007199254740988kB, failcnt 0 [ 75.920102][ T5188] team0: Port device team_slave_0 added [ 75.943699][ T5282] kmem: usage 270820kB, limit 9007199254740988kB, failcnt 0 [ 76.132744][ T5307] netlink: 24 bytes leftover after parsing attributes in process `syz.1.622'. [ 76.137469][ T5308] loop2: detected capacity change from 0 to 1024 [ 76.153736][ T5188] team0: Port device team_slave_1 added [ 76.189512][ T5282] Memory cgroup stats for /syz3: [ 76.189736][ T5282] cache 7864320 [ 76.199473][ T5308] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.215623][ T5282] rss 29343744 [ 76.225789][ T5282] shmem 0 [ 76.228761][ T5282] mapped_file 7864320 [ 76.232748][ T5282] dirty 8192 [ 76.236105][ T5282] writeback 0 [ 76.239594][ T5282] workingset_refault_anon 737 [ 76.244673][ T5282] workingset_refault_file 941 [ 76.249382][ T5282] swap 4096 [ 76.252517][ T5282] swapcached 4112384 [ 76.256526][ T5282] pgpgin 37194 [ 76.259997][ T5282] pgpgout 28099 [ 76.263462][ T5282] pgfault 52090 [ 76.268804][ T5188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.276701][ T5282] pgmajfault 128 [ 76.281451][ T5282] inactive_anon 45056 [ 76.293031][ T5282] active_anon 0 [ 76.296627][ T5282] inactive_file 4096 [ 76.303683][ T5282] active_file 0 [ 76.310562][ T5282] unevictable 37203968 [ 76.314743][ T5282] hierarchical_memory_limit 314572800 [ 76.320317][ T5282] hierarchical_memsw_limit 9223372036854771712 [ 76.323748][ T5188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.326721][ T5282] total_cache 7864320 [ 76.390532][ T5282] total_rss 29343744 [ 76.399701][ T5282] total_shmem 0 [ 76.403262][ T5282] total_mapped_file 7864320 [ 76.408667][ T5282] total_dirty 8192 [ 76.411155][ T5188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.412580][ T5282] total_writeback 0 [ 76.412618][ T5282] total_workingset_refault_anon 737 [ 76.412628][ T5282] total_workingset_refault_file 941 [ 76.412637][ T5282] total_swap 4096 [ 76.412646][ T5282] total_swapcached 4112384 [ 76.412656][ T5282] total_pgpgin 37194 [ 76.412665][ T5282] total_pgpgout 28099 [ 76.447580][ T5188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.466787][ T5282] total_pgfault 52090 [ 76.470869][ T5282] total_pgmajfault 128 [ 76.475221][ T5282] total_inactive_anon 45056 [ 76.479853][ T5282] total_active_anon 0 [ 76.506208][ T5282] total_inactive_file 4096 [ 76.510823][ T5282] total_active_file 0 [ 76.515309][ T5282] total_unevictable 37203968 [ 76.518905][ T5188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.519979][ T5282] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 76.548611][ T5188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.557172][ T5331] hub 8-0:1.0: USB hub found [ 76.566179][ T5282] ,cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.619,pid=5273,uid=0 [ 76.582850][ T5282] Memory cgroup out of memory: Killed process 5282 (syz.3.619) total-vm:94164kB, anon-rss:29856kB, file-rss:64236kB, shmem-rss:0kB, UID:0 pgtables:252kB oom_score_adj:1000 [ 76.582937][ T5331] hub 8-0:1.0: 8 ports detected [ 76.618121][ T5188] hsr_slave_0: entered promiscuous mode [ 76.624580][ T5188] hsr_slave_1: entered promiscuous mode [ 76.630682][ T5188] debugfs: 'hsr0' already exists in 'hsr' [ 76.636777][ T5188] Cannot create hsr debugfs directory [ 76.805376][ T5339] syzkaller0: entered promiscuous mode [ 76.826905][ T5339] syzkaller0: entered allmulticast mode [ 76.841173][ T5188] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 76.849133][ T5339] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 76.870887][ T5188] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 76.890948][ T5188] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 76.911115][ T5188] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 77.060287][ T5352] netlink: 12 bytes leftover after parsing attributes in process `syz.1.632'. [ 77.105710][ T5188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.149806][ T5188] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.167828][ T318] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.175065][ T318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.186203][ T28] audit: type=1326 audit(1775126203.243:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5357 comm="syz.1.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe325f6c819 code=0x7ffc0000 [ 77.220467][ T5188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 77.231763][ T5188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.242295][ T28] audit: type=1326 audit(1775126203.243:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5357 comm="syz.1.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe325f6c819 code=0x7ffc0000 [ 77.282614][ T318] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.289814][ T318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.293703][ T28] audit: type=1326 audit(1775126203.243:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5357 comm="syz.1.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe325f6c819 code=0x7ffc0000 [ 77.321671][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.331631][ T28] audit: type=1326 audit(1775126203.243:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5357 comm="syz.1.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe325f6c819 code=0x7ffc0000 [ 77.532318][ T5367] syzkaller0: entered promiscuous mode [ 77.561162][ T5367] syzkaller0: entered allmulticast mode [ 77.589113][ T5188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.630187][ T28] audit: type=1326 audit(1775126203.243:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5357 comm="syz.1.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7fe325f6c819 code=0x7ffc0000 [ 77.712969][ T28] audit: type=1326 audit(1775126203.243:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5357 comm="syz.1.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe325f6c819 code=0x7ffc0000 [ 77.770671][ T28] audit: type=1326 audit(1775126203.243:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5357 comm="syz.1.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fe325f6c819 code=0x7ffc0000 [ 78.049253][ T5188] veth0_vlan: entered promiscuous mode [ 78.057776][ T5188] veth1_vlan: entered promiscuous mode [ 78.075612][ T5188] veth0_macvtap: entered promiscuous mode [ 78.083475][ T5188] veth1_macvtap: entered promiscuous mode [ 78.096699][ T5188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.109711][ T5188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.122237][ T36] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.131254][ T36] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.143547][ T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.153376][ T36] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.211365][ T5399] io-wq is not configured for unbound workers [ 78.218710][ T5405] netlink: 'syz.6.595': attribute type 1 has an invalid length. [ 78.440467][ T5415] netlink: 24 bytes leftover after parsing attributes in process `syz.1.642'. [ 78.460575][ T5416] netlink: 16 bytes leftover after parsing attributes in process `syz.0.655'. [ 78.488648][ T5415] netlink: 16 bytes leftover after parsing attributes in process `syz.1.642'. [ 78.502842][ T5415] netlink: 12 bytes leftover after parsing attributes in process `syz.1.642'. [ 78.562274][ T5423] netlink: 'syz.0.645': attribute type 5 has an invalid length. [ 78.582394][ T5423] netlink: 1132 bytes leftover after parsing attributes in process `syz.0.645'. [ 78.601720][ T5423] netlink: 24 bytes leftover after parsing attributes in process `syz.0.645'. [ 79.039055][ T5447] SELinux: failed to load policy [ 79.131109][ T5456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.664'. [ 79.252942][ T5463] loop1: detected capacity change from 0 to 2048 [ 79.274345][ T5461] lo speed is unknown, defaulting to 1000 [ 79.312098][ T5463] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.363890][ T5475] loop6: detected capacity change from 0 to 128 [ 79.376299][ T5463] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.667: bg 0: block 234: padding at end of block bitmap is not set [ 79.390891][ T5475] EXT4-fs: Ignoring removed nobh option [ 79.391535][ T5463] EXT4-fs (loop1): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 3 with error 117 [ 79.409368][ T5463] EXT4-fs (loop1): This should not happen!! Data will be lost [ 79.409368][ T5463] [ 79.411822][ T5475] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 79.432620][ T5475] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 79.526885][ T3308] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #19: comm syz-executor: data will be lost [ 79.542886][ T5483] loop0: detected capacity change from 0 to 512 [ 79.552922][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.565979][ T5483] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 79.579177][ T5483] EXT4-fs (loop0): 1 truncate cleaned up [ 79.585666][ T5483] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.621867][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.646558][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 79.646574][ T28] audit: type=1400 audit(1775126205.703:887): avc: denied { read write } for pid=5488 comm="syz.1.675" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 79.690160][ T5188] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.692002][ T28] audit: type=1400 audit(1775126205.733:888): avc: denied { open } for pid=5488 comm="syz.1.675" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 79.841769][ T5495] netlink: 'syz.0.687': attribute type 4 has an invalid length. [ 79.866797][ T3476] lo speed is unknown, defaulting to 1000 [ 79.873144][ T5495] netlink: 'syz.0.687': attribute type 4 has an invalid length. [ 79.881121][ T3476] syz0: Port: 1 Link DOWN [ 79.889130][ T3383] lo speed is unknown, defaulting to 1000 [ 79.895018][ T3383] syz0: Port: 1 Link ACTIVE [ 79.896081][ T10] lo speed is unknown, defaulting to 1000 [ 80.082174][ T28] audit: type=1400 audit(1775126206.133:889): avc: denied { listen } for pid=5503 comm="syz.2.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 80.124073][ T28] audit: type=1400 audit(1775126206.133:890): avc: denied { accept } for pid=5503 comm="syz.2.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 80.410935][ T28] audit: type=1400 audit(1775126206.463:891): avc: denied { read write } for pid=5512 comm="syz.1.683" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 80.411519][ T5513] sg_write: data in/out 455644/242 bytes for SCSI command 0x0-- guessing data in; [ 80.411519][ T5513] program syz.1.683 not setting count and/or reply_len properly [ 80.435669][ T28] audit: type=1400 audit(1775126206.463:892): avc: denied { open } for pid=5512 comm="syz.1.683" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 80.534351][ T28] audit: type=1400 audit(1775126206.593:893): avc: denied { write } for pid=5514 comm="syz.1.684" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 80.589628][ T5517] loop1: detected capacity change from 0 to 512 [ 80.625695][ T5517] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.638490][ T5517] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.650653][ T28] audit: type=1400 audit(1775126206.703:894): avc: denied { create } for pid=5516 comm="syz.1.685" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 80.694639][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.049325][ T5534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.692'. [ 81.132366][ T28] audit: type=1326 audit(1775126207.183:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5535 comm="syz.0.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50aa6cc819 code=0x7ffc0000 [ 81.172156][ T28] audit: type=1326 audit(1775126207.183:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5535 comm="syz.0.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50aa6cc819 code=0x7ffc0000 [ 81.202115][ T5541] netlink: 12 bytes leftover after parsing attributes in process `syz.6.695'. [ 81.263700][ T5544] tipc: Started in network mode [ 81.269485][ T5544] tipc: Node identity 4, cluster identity 4711 [ 81.303993][ T5544] tipc: Node number set to 4 [ 81.392464][ T5558] netlink: 24 bytes leftover after parsing attributes in process `syz.0.703'. [ 81.442734][ T5561] netlink: 'syz.2.704': attribute type 10 has an invalid length. [ 81.485712][ T5561] bond0: option actor_port_prio: mode dependency failed, not supported in mode balance-rr(0) [ 82.774459][ T5640] usb usb4: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 82.782099][ T5640] vhci_hcd vhci_hcd.1: default hub control req: d10d v0006 i0007 l2 [ 83.228313][ T5658] loop0: detected capacity change from 0 to 128 [ 83.237051][ T5658] EXT4-fs: Ignoring removed nobh option [ 83.260558][ T5658] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 83.275117][ T5658] ext4 filesystem being mounted at /163/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 83.358400][ T3312] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 83.643955][ T5676] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 83.756917][ T5682] __nla_validate_parse: 4 callbacks suppressed [ 83.756997][ T5682] netlink: 24 bytes leftover after parsing attributes in process `syz.3.750'. [ 83.788212][ T5682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.750'. [ 83.861397][ T5688] netlink: 28 bytes leftover after parsing attributes in process `syz.0.752'. [ 84.340442][ T5713] netlink: 24 bytes leftover after parsing attributes in process `syz.6.762'. [ 84.709981][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 84.709996][ T28] audit: type=1400 audit(1775126210.763:913): avc: denied { watch watch_reads } for pid=5730 comm="syz.1.769" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 84.814524][ T5736] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5736 comm=syz.6.770 [ 85.244145][ T28] audit: type=1400 audit(1775126211.293:914): avc: denied { create } for pid=5790 comm="syz.0.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 85.327767][ T28] audit: type=1400 audit(1775126211.383:915): avc: denied { override_creds } for pid=5793 comm="syz.0.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 85.751178][ T5814] loop0: detected capacity change from 0 to 512 [ 85.791118][ T5814] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 85.871625][ T5814] EXT4-fs (loop0): 1 truncate cleaned up [ 85.895784][ T5814] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.938535][ T28] audit: type=1400 audit(1775126211.993:916): avc: denied { write } for pid=5812 comm="syz.0.787" laddr=172.20.20.170 lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 86.047712][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.077771][ T28] audit: type=1400 audit(1775126212.113:917): avc: denied { remount } for pid=5839 comm="syz.2.790" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 86.148843][ T5847] ip6gre1: entered promiscuous mode [ 86.154262][ T5847] ip6gre1: entered allmulticast mode [ 86.205244][ T28] audit: type=1400 audit(1775126212.263:918): avc: denied { connect } for pid=5853 comm="syz.0.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 86.245894][ T28] audit: type=1400 audit(1775126212.263:919): avc: denied { read } for pid=5853 comm="syz.0.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 86.317010][ T28] audit: type=1400 audit(1775126212.373:920): avc: denied { read write } for pid=5850 comm="syz.6.793" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 86.409643][ T5856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.425331][ T28] audit: type=1400 audit(1775126212.393:921): avc: denied { open } for pid=5850 comm="syz.6.793" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 86.456450][ T5856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.593676][ T28] audit: type=1400 audit(1775126212.463:922): avc: denied { ioctl } for pid=5850 comm="syz.6.793" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 87.472690][ T5959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.802'. [ 87.754081][ T5991] netlink: 24 bytes leftover after parsing attributes in process `syz.3.808'. [ 88.502777][ T35] IPVS: starting estimator thread 0... [ 88.593766][ T6039] IPVS: using max 2544 ests per chain, 127200 per kthread [ 89.288088][ T6077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.831'. [ 89.322845][ T3476] IPVS: starting estimator thread 0... [ 89.359177][ T6083] loop3: detected capacity change from 0 to 512 [ 89.377373][ T6083] EXT4-fs: Ignoring removed oldalloc option [ 89.401635][ T6083] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.833: invalid block [ 89.422123][ T6083] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 89.422401][ T6083] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.833: invalid indirect mapped block 4294967295 (level 1) [ 89.423735][ T6081] IPVS: using max 2400 ests per chain, 120000 per kthread [ 89.431650][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 89.459066][ C0] EXT4-fs (loop3): initial error at time 1775126215: ext4_get_branch:178: inode 11: block 4294967295 [ 89.469984][ C0] EXT4-fs (loop3): last error at time 1775126215: ext4_get_branch:178: inode 11: block 4294967295 [ 89.490749][ T6083] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 89.490931][ T6083] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.833: invalid indirect mapped block 4294967295 (level 1) [ 89.514414][ T6083] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 89.524362][ T6083] EXT4-fs (loop3): 2 truncates cleaned up [ 89.540270][ T6083] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.578229][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.736112][ T57] Bluetooth: hci0: Frame reassembly failed (-84) [ 89.756615][ T43] Bluetooth: hci1: sending frame failed (-49) [ 89.762961][ T3948] Bluetooth: hci1: Opcode 0x1003 failed: -49 [ 89.925571][ T6121] netlink: 24 bytes leftover after parsing attributes in process `syz.0.849'. [ 89.935217][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 89.935234][ T28] audit: type=1400 audit(1775126215.983:927): avc: denied { write } for pid=6119 comm="syz.6.850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 90.192253][ T6140] netlink: 168 bytes leftover after parsing attributes in process `syz.3.856'. [ 90.193664][ T28] audit: type=1400 audit(1775126216.243:928): avc: denied { setopt } for pid=6139 comm="syz.3.856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 90.246767][ T28] audit: type=1326 audit(1775126216.303:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6145 comm="syz.2.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20a58ec819 code=0x7ffc0000 [ 90.271811][ T28] audit: type=1326 audit(1775126216.323:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6145 comm="syz.2.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20a58ec819 code=0x7ffc0000 [ 90.278282][ T6151] loop3: detected capacity change from 0 to 512 [ 90.300234][ T28] audit: type=1326 audit(1775126216.353:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6145 comm="syz.2.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f20a58ec819 code=0x7ffc0000 [ 90.326119][ T28] audit: type=1326 audit(1775126216.353:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6145 comm="syz.2.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20a58ec819 code=0x7ffc0000 [ 90.349726][ T28] audit: type=1326 audit(1775126216.383:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6145 comm="syz.2.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f20a58ec819 code=0x7ffc0000 [ 90.374674][ T28] audit: type=1326 audit(1775126216.383:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6145 comm="syz.2.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20a58ec819 code=0x7ffc0000 [ 90.388566][ T6155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.398218][ T28] audit: type=1326 audit(1775126216.383:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6145 comm="syz.2.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f20a58ec819 code=0x7ffc0000 [ 90.408266][ T6155] batadv_slave_0: entered promiscuous mode [ 90.428851][ T28] audit: type=1404 audit(1775126216.383:936): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 90.652815][ T6171] netlink: 'syz.2.870': attribute type 27 has an invalid length. [ 90.665909][ T6171] bond1: left promiscuous mode [ 90.670759][ T6171] vti0: left promiscuous mode [ 90.691148][ T6171] bridge0: port 3(erspan0) entered blocking state [ 90.697754][ T6171] bridge0: port 3(erspan0) entered forwarding state [ 90.706002][ T6171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.713582][ T6171] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.722643][ T6171] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 91.783686][ T3591] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 91.888882][ T3476] Process accounting resumed [ 92.115557][ T6287] netlink: 4 bytes leftover after parsing attributes in process `syz.6.923'. [ 92.158948][ T6287] netlink: 12 bytes leftover after parsing attributes in process `syz.6.923'. [ 92.243434][ T6309] netlink: 24 bytes leftover after parsing attributes in process `syz.2.932'. [ 92.302911][ T6316] netlink: 24 bytes leftover after parsing attributes in process `syz.6.937'. [ 92.320438][ T6316] netlink: 12 bytes leftover after parsing attributes in process `syz.6.937'. [ 92.493273][ T6334] netlink: 12 bytes leftover after parsing attributes in process `syz.6.946'. [ 92.772120][ T6362] netlink: 'syz.3.960': attribute type 1 has an invalid length. [ 92.789865][ T6362] bond1: entered promiscuous mode [ 92.795269][ T6362] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.812354][ T6362] bond1: (slave bridge2): making interface the new active one [ 92.820131][ T6362] bridge2: entered promiscuous mode [ 92.827668][ T6362] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 93.213931][ T6389] netlink: 24 bytes leftover after parsing attributes in process `syz.3.971'. [ 93.669685][ T6409] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.676958][ T6409] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.762088][ T6409] batadv_slave_0: left promiscuous mode [ 93.780405][ T6409] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.841288][ T6409] bond1: left promiscuous mode [ 93.851568][ T6409] bridge2: left promiscuous mode [ 93.866484][ T30] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.881953][ T30] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.914939][ T30] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.941798][ T30] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.698040][ T6447] netlink: 'syz.2.996': attribute type 8 has an invalid length. [ 94.893497][ T6453] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 94.904726][ T3352] syzkaller0: tun_net_xmit 76 [ 94.924385][ T6453] syzkaller0: Linktype set failed because interface is up [ 95.012946][ T28] kauditd_printk_skb: 418 callbacks suppressed [ 95.012964][ T28] audit: type=1400 audit(1775126221.063:1355): avc: denied { read write } for pid=5188 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 95.045481][ T28] audit: type=1400 audit(1775126221.073:1356): avc: denied { read write } for pid=3309 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 95.070176][ T28] audit: type=1400 audit(1775126221.103:1357): avc: denied { map_create } for pid=6457 comm="syz.2.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 95.091200][ T28] audit: type=1400 audit(1775126221.103:1358): avc: denied { map_create } for pid=6457 comm="syz.2.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 95.111923][ T28] audit: type=1400 audit(1775126221.103:1359): avc: denied { prog_load } for pid=6457 comm="syz.2.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 95.140601][ T28] audit: type=1400 audit(1775126221.133:1360): avc: denied { read write } for pid=3309 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 95.171119][ T28] audit: type=1400 audit(1775126221.143:1361): avc: denied { mount } for pid=6460 comm="syz.6.1002" name="/" dev="ramfs" ino=22965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=0 [ 95.193925][ T28] audit: type=1400 audit(1775126221.143:1362): avc: denied { create } for pid=6459 comm="syz.2.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 95.226058][ T28] audit: type=1400 audit(1775126221.173:1363): avc: denied { read write } for pid=3308 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 95.250518][ T28] audit: type=1400 audit(1775126221.183:1364): avc: denied { create } for pid=6459 comm="syz.2.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 95.255504][ T6478] sch_fq: defrate 0 ignored. [ 95.345434][ T6490] __nla_validate_parse: 1 callbacks suppressed [ 95.345498][ T6490] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1015'. [ 95.382156][ T6492] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.1013'. [ 95.398580][ T6492] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1013'. [ 95.564800][ T6509] netlink: 'syz.6.1021': attribute type 27 has an invalid length. [ 95.643138][ T6509] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.650427][ T6509] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.739627][ T6509] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.763279][ T6509] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.849211][ T6514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.865406][ T6514] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.892530][ T6514] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 95.910127][ T318] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.931309][ T318] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.957427][ T318] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.975744][ T318] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.987942][ T6537] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1032'. [ 96.104805][ T6552] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1039'. [ 96.147630][ T6558] netlink: 'syz.1.1042': attribute type 4 has an invalid length. [ 96.169533][ T6558] netlink: 'syz.1.1042': attribute type 4 has an invalid length. [ 96.195542][ T6560] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1043'. [ 96.242021][ T6558] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.249300][ T6558] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.297633][ T6558] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.310260][ T6558] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.364666][ T57] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.390808][ T57] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.402013][ T57] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.412938][ T57] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.422213][ T57] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.431759][ T57] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.441647][ T57] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.450915][ T57] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.152375][ T6663] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1087'. [ 98.636459][ T6676] x_tables: unsorted underflow at hook 3 [ 98.645325][ T6678] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6678 comm=syz.0.1092 [ 98.672991][ T6680] netlink: 'syz.2.1094': attribute type 1 has an invalid length. [ 98.757686][ T6686] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 98.764290][ T6686] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 98.772813][ T6686] vhci_hcd vhci_hcd.0: Device attached [ 98.780900][ T6686] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 98.787496][ T6686] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 98.798457][ T6686] vhci_hcd vhci_hcd.0: Device attached [ 98.808791][ T6686] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(7) [ 98.815398][ T6686] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 98.824219][ T6686] vhci_hcd vhci_hcd.0: Device attached [ 98.835200][ T6686] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(9) [ 98.841764][ T6686] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 98.849984][ T6686] vhci_hcd vhci_hcd.0: Device attached [ 98.861701][ T6686] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(11) [ 98.868389][ T6686] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 98.881400][ T6686] vhci_hcd vhci_hcd.0: Device attached [ 98.891172][ T6686] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 98.901528][ T6686] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 98.911973][ T6686] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(17) [ 98.918631][ T6686] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 98.930296][ T6686] vhci_hcd vhci_hcd.0: Device attached [ 98.937931][ T6698] vhci_hcd: connection closed [ 98.938193][ T30] vhci_hcd vhci_hcd.2: stop threads [ 98.948590][ T30] vhci_hcd vhci_hcd.2: release socket [ 98.954287][ T30] vhci_hcd vhci_hcd.2: disconnect device [ 98.961148][ T6696] vhci_hcd: connection closed [ 98.961499][ T6694] vhci_hcd: connection closed [ 98.966588][ T6692] vhci_hcd: connection closed [ 98.971531][ T6690] vhci_hcd: connection closed [ 98.976391][ T6687] vhci_hcd: connection closed [ 98.981347][ T30] vhci_hcd vhci_hcd.2: stop threads [ 98.992503][ T30] vhci_hcd vhci_hcd.2: release socket [ 98.998945][ T30] vhci_hcd vhci_hcd.2: disconnect device [ 99.004888][ T30] vhci_hcd vhci_hcd.2: stop threads [ 99.010828][ T30] vhci_hcd vhci_hcd.2: release socket [ 99.025349][ T3476] usb 5-1: new low-speed USB device number 2 using vhci_hcd [ 99.038891][ T6688] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 99.046574][ T30] vhci_hcd vhci_hcd.2: disconnect device [ 99.050245][ T6701] netlink: 'syz.6.1096': attribute type 5 has an invalid length. [ 99.054217][ T30] vhci_hcd vhci_hcd.2: stop threads [ 99.067259][ T30] vhci_hcd vhci_hcd.2: release socket [ 99.072966][ T30] vhci_hcd vhci_hcd.2: disconnect device [ 99.079324][ T30] vhci_hcd vhci_hcd.2: stop threads [ 99.084990][ T30] vhci_hcd vhci_hcd.2: release socket [ 99.090916][ T30] vhci_hcd vhci_hcd.2: disconnect device [ 99.097414][ T30] vhci_hcd vhci_hcd.2: stop threads [ 99.103438][ T30] vhci_hcd vhci_hcd.2: release socket [ 99.109517][ T30] vhci_hcd vhci_hcd.2: disconnect device [ 99.460678][ T6713] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1101'. [ 99.491155][ T6713] bridge_slave_0: left allmulticast mode [ 99.496874][ T6713] bridge_slave_0: left promiscuous mode [ 99.520483][ T6713] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.528609][ T6713] bridge_slave_1: left allmulticast mode [ 99.548558][ T6713] bridge_slave_1: left promiscuous mode [ 99.554550][ T6713] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.574816][ T6713] bond0: (slave bond_slave_0): Releasing backup interface [ 99.583609][ T6713] bond0: (slave bond_slave_1): Releasing backup interface [ 99.592021][ T6713] team0: Port device team_slave_0 removed [ 99.598956][ T6713] team0: Port device team_slave_1 removed [ 99.605765][ T6713] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.614402][ T6713] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.622173][ T6713] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 99.685249][ T6719] 8021q: VLANs not supported on gre0 [ 99.717148][ T6725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1106'. [ 99.727376][ T6725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1106'. [ 100.161120][ T28] kauditd_printk_skb: 277 callbacks suppressed [ 100.161139][ T28] audit: type=1400 audit(1775126226.120:1642): avc: denied { append } for pid=6737 comm="syz.6.1113" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=0 [ 100.241434][ T28] audit: type=1400 audit(1775126226.198:1643): avc: denied { read write } for pid=5188 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 100.373430][ T28] audit: type=1400 audit(1775126226.324:1644): avc: denied { read write } for pid=3309 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 100.578590][ T28] audit: type=1400 audit(1775126226.470:1645): avc: denied { block_suspend } for pid=6744 comm="syz.2.1115" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 100.627586][ T28] audit: type=1400 audit(1775126226.548:1646): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 100.721238][ T28] audit: type=1400 audit(1775126226.607:1647): avc: denied { read write } for pid=6749 comm="syz.0.1116" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 100.822658][ T28] audit: type=1400 audit(1775126226.607:1648): avc: denied { execmem } for pid=6749 comm="syz.0.1116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 100.866104][ T28] audit: type=1400 audit(1775126226.714:1649): avc: denied { read write } for pid=5188 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 100.901135][ T28] audit: type=1400 audit(1775126226.782:1650): avc: denied { read write } for pid=5188 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 100.946735][ T28] audit: type=1400 audit(1775126226.792:1651): avc: denied { create } for pid=6749 comm="syz.0.1116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 101.504505][ T6778] -1: renamed from syzkaller0 [ 102.801400][ T6807] netlink: 'syz.3.1138': attribute type 27 has an invalid length. [ 102.826663][ T6809] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1136'. [ 102.873911][ T6807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.885702][ T6807] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.905910][ T6807] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 103.011591][ T6812] lo speed is unknown, defaulting to 1000 [ 103.258230][ T6834] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1148'. [ 103.377574][ T6840] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1150'. [ 103.917447][ T6878] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 103.924036][ T6878] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 103.932381][ T6878] vhci_hcd vhci_hcd.0: Device attached [ 103.940747][ T6878] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 103.947395][ T6878] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 103.969125][ T6878] vhci_hcd vhci_hcd.0: Device attached [ 103.983352][ T6878] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(7) [ 103.989981][ T6878] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 104.013260][ T6878] vhci_hcd vhci_hcd.0: Device attached [ 104.027251][ T6878] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(9) [ 104.033881][ T6878] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 104.042235][ T6878] vhci_hcd vhci_hcd.0: Device attached [ 104.051196][ T6878] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(11) [ 104.057960][ T6878] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 104.065644][ T6878] vhci_hcd vhci_hcd.0: Device attached [ 104.072902][ T6878] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 104.081905][ T6878] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 104.091743][ T6878] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(17) [ 104.098371][ T6878] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 104.106654][ T6878] vhci_hcd vhci_hcd.0: Device attached [ 104.113065][ T6889] vhci_hcd: connection closed [ 104.113233][ T6887] vhci_hcd: connection closed [ 104.113464][ T30] vhci_hcd vhci_hcd.1: stop threads [ 104.128118][ T6885] vhci_hcd: connection closed [ 104.128463][ T6883] vhci_hcd: connection closed [ 104.128549][ T6881] vhci_hcd: connection closed [ 104.133483][ T6879] vhci_hcd: connection closed [ 104.143424][ T30] vhci_hcd vhci_hcd.1: release socket [ 104.154052][ T30] vhci_hcd vhci_hcd.1: disconnect device [ 104.160063][ T30] vhci_hcd vhci_hcd.1: stop threads [ 104.166175][ T30] vhci_hcd vhci_hcd.1: release socket [ 104.171663][ T30] vhci_hcd vhci_hcd.1: disconnect device [ 104.177687][ T30] vhci_hcd vhci_hcd.1: stop threads [ 104.183070][ T30] vhci_hcd vhci_hcd.1: release socket [ 104.188717][ T30] vhci_hcd vhci_hcd.1: disconnect device [ 104.203562][ T30] vhci_hcd vhci_hcd.1: stop threads [ 104.208994][ T30] vhci_hcd vhci_hcd.1: release socket [ 104.209363][ T3352] usb 3-1: new low-speed USB device number 2 using vhci_hcd [ 104.222877][ T3476] usb 5-1: enqueue for inactive port 0 [ 104.229146][ T3476] usb 5-1: enqueue for inactive port 0 [ 104.239804][ T30] vhci_hcd vhci_hcd.1: disconnect device [ 104.270411][ T30] vhci_hcd vhci_hcd.1: stop threads [ 104.280618][ T30] vhci_hcd vhci_hcd.1: release socket [ 104.287687][ T30] vhci_hcd vhci_hcd.1: disconnect device [ 104.293999][ T30] vhci_hcd vhci_hcd.1: stop threads [ 104.299432][ T30] vhci_hcd vhci_hcd.1: release socket [ 104.305192][ T30] vhci_hcd vhci_hcd.1: disconnect device [ 104.314078][ T3476] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 104.418569][ T6908] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1174'. [ 104.536814][ T6930] netlink: 'syz.3.1185': attribute type 1 has an invalid length. [ 104.557622][ T6930] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 104.568086][ T6930] bond2: (slave vxcan1): Setting fail_over_mac to active for active-backup mode [ 104.579016][ T6930] bond2: (slave vxcan1): making interface the new active one [ 104.586887][ T6930] bond2: (slave vxcan1): Enslaving as an active interface with an up link [ 104.602276][ T6930] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 104.613747][ T6930] bond2: (slave vxcan3): Enslaving as a backup interface with an up link [ 104.984770][ T6973] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.1202'. [ 105.000175][ T6973] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1202'. [ 105.286764][ T28] kauditd_printk_skb: 265 callbacks suppressed [ 105.286798][ T28] audit: type=1400 audit(1775126231.134:1917): avc: denied { read write } for pid=5188 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 105.318888][ T28] audit: type=1400 audit(1775126231.163:1918): avc: denied { read write } for pid=3308 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 105.325896][ T7004] lo speed is unknown, defaulting to 1000 [ 105.361623][ T28] audit: type=1400 audit(1775126231.203:1919): avc: denied { read write } for pid=3307 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 105.389065][ T28] audit: type=1400 audit(1775126231.232:1920): avc: denied { create } for pid=7006 comm="syz.3.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=0 [ 105.436814][ T28] audit: type=1400 audit(1775126231.232:1921): avc: denied { prog_load } for pid=7005 comm="syz.1.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 105.459915][ T28] audit: type=1400 audit(1775126231.252:1922): avc: denied { map_create } for pid=7005 comm="syz.1.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 105.625783][ T6944] ================================================================== [ 105.633917][ T6944] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 105.640894][ T6944] [ 105.643242][ T6944] read-write to 0xffff88810393412c of 4 bytes by task 6941 on cpu 1: [ 105.651388][ T6944] fifo_open+0x86/0x5d0 [ 105.655580][ T6944] do_dentry_open+0x4ca/0xa90 [ 105.660294][ T6944] vfs_open+0x37/0x1e0 [ 105.664409][ T6944] path_openat+0x1b70/0x2050 [ 105.669026][ T6944] do_file_open+0x16c/0x290 [ 105.673570][ T6944] do_sys_openat2+0x94/0x130 [ 105.678257][ T6944] __x64_sys_creat+0x65/0x90 [ 105.680599][ T28] audit: type=1400 audit(1775126231.252:1923): avc: denied { prog_load } for pid=7005 comm="syz.1.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 105.682882][ T6944] x64_sys_call+0x2ea0/0x3020 [ 105.705054][ T28] audit: type=1400 audit(1775126231.252:1924): avc: denied { create } for pid=7005 comm="syz.1.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 105.706577][ T6944] do_syscall_64+0x12c/0x370 [ 105.706610][ T6944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.706631][ T6944] [ 105.706637][ T6944] read to 0xffff88810393412c of 4 bytes by task 6944 on cpu 0: [ 105.706654][ T6944] wait_for_partner+0xd5/0x1e0 [ 105.746565][ T28] audit: type=1400 audit(1775126231.252:1925): avc: denied { prog_load } for pid=7005 comm="syz.1.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 105.747820][ T6944] fifo_open+0x4b1/0x5d0 [ 105.747850][ T6944] do_dentry_open+0x4ca/0xa90 [ 105.760010][ T28] audit: type=1400 audit(1775126231.252:1926): avc: denied { prog_load } for pid=7005 comm="syz.1.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 105.772000][ T6944] vfs_open+0x37/0x1e0 [ 105.772034][ T6944] path_openat+0x1b70/0x2050 [ 105.772053][ T6944] do_file_open+0x16c/0x290 [ 105.772085][ T6944] file_open_name+0xfa/0x120 [ 105.772113][ T6944] __se_sys_acct+0x8c/0x500 [ 105.772145][ T6944] __x64_sys_acct+0x1f/0x30 [ 105.772177][ T6944] x64_sys_call+0x2e7f/0x3020 [ 105.772209][ T6944] do_syscall_64+0x12c/0x370 [ 105.772236][ T6944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.772258][ T6944] [ 105.772264][ T6944] value changed: 0x00000001 -> 0x00000002 [ 105.772278][ T6944] [ 105.772282][ T6944] Reported by Kernel Concurrency Sanitizer on: [ 105.772300][ T6944] CPU: 0 UID: 0 PID: 6944 Comm: syz.0.1188 Tainted: G W syzkaller #0 PREEMPT(full) [ 105.772334][ T6944] Tainted: [W]=WARN [ 105.772350][ T6944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 105.772365][ T6944] ================================================================== [ 109.341561][ T3352] usb 3-1: enqueue for inactive port 0 [ 109.347137][ T3352] usb 3-1: enqueue for inactive port 0 [ 109.423128][ T3352] vhci_hcd vhci_hcd.1: vhci_device speed not set