last executing test programs: 8.436331148s ago: executing program 4 (id=739): r0 = socket$igmp(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) openat(0xffffffffffffff9c, 0x0, 0x4040, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x4, 0x41, 0x2003206, @vifc_lcl_addr=@multicast2, @private=0xa010104}, 0x10) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f0000000040)) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e, 0x80800) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0x1a) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) 7.845732579s ago: executing program 4 (id=741): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x800000, 0x3fff8000}, 0x844, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe, 0x0, @perf_bp={0x0, 0x9}, 0x17008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x80008000, 0x0, 0x0, 0x0, 0x0, 0x0) 6.859506198s ago: executing program 4 (id=746): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000003080102000000074441980000000000050003"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 6.748272226s ago: executing program 4 (id=748): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000480)=[{{&(0x7f0000000800)={0x2, 0xce24, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(0xffffffffffffffff, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 5.786127073s ago: executing program 4 (id=749): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) r2 = open(&(0x7f0000000100)='./bus\x00', 0x24040, 0x10) truncate(&(0x7f0000000000)='./bus\x00', 0x9471) finit_module(r2, 0x0, 0x0) 5.69765634s ago: executing program 2 (id=750): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) ioctl$XFS_IOC_OPEN_BY_HANDLE(r0, 0xc038586b, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x2080, &(0x7f0000000140)={@align=0x5, {0x1, 0x4, 0x4, 0x6}}, 0x8000, 0x0, 0x0}) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000080)={0x2c, @rand_addr=0x64010100, 0x4e22, 0x2, 'rr\x00', 0x10, 0xe1, 0x56}, 0x2c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = timerfd_create(0x9, 0x800) timerfd_gettime(r3, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x6, 0x0) r4 = openat$cgroup_freezer_state(r1, &(0x7f0000000300), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f00000000c0)='FROZEN\x00', 0x7) sendfile(r4, r4, 0x0, 0x8000002) 5.434298388s ago: executing program 2 (id=752): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) ioperm(0x0, 0x7, 0x80006) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0xf) wait4(r1, 0x0, 0x2, 0x0) tkill(r1, 0x3) io_uring_register$IORING_REGISTER_PBUF_STATUS(0xffffffffffffffff, 0x1a, 0x0, 0x1) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x0, 0x0, 0xff, 0x1}, 0x20) getcwd(0x0, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) 5.164324557s ago: executing program 2 (id=753): signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0xf9a]}, 0x8, 0x80000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x8, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x2208880, &(0x7f0000000140)=ANY=[@ANYRES8], 0x41, 0x320, &(0x7f0000001240)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 5.124264s ago: executing program 1 (id=754): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=@deltaction={0x14, 0x18, 0x1, 0x70bd26, 0x25dfdc00, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x38, r2, 0x209, 0x0, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback={0xff00000000000000}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r4}]}, 0x38}}, 0x0) 4.876395227s ago: executing program 3 (id=755): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) close(0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0x2, 0x4a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0xd7, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000005c0), &(0x7f00000000c0), 0xc83, r2}, 0x38) 4.875856047s ago: executing program 1 (id=766): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=@deltaction={0x14, 0x18, 0x1, 0x70bd26, 0x25dfdc00, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x38, r2, 0x209, 0x0, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback={0xff00000000000000}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r4}]}, 0x38}}, 0x0) 4.823970401s ago: executing program 1 (id=756): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000300)=r5) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360"], 0xffdd) 4.629066144s ago: executing program 0 (id=757): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, 0x0, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="b70000001a000000bca30000000000002403000040feffff7b1af0ff0000000079a4f0ff000000001f030000000000002e030200000000002604fdffffff000e61491800000000001d430000000000007a0a00fe0000001f6114140000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f2440000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c9494963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c88629a6c921c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fbf05b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71ca3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b60f132a2bf8a858392f34072d99aee0ec70aa6d75096e608d97ac4b7bfa2e0ae3e59718e7a7691a98b1334e34553300000000000000000000000000000000062c7cf52e9624806a4833e1c0059e5a703ab9c2e9b38779270dc5e80af75d509b1a31fe6ed3f8c0172659256dc88de4e377c8a07e95ec5549ae47dc43b93a159a201be254048b9e0857ea3c736c761e686f9b3d0690f035617a12055b2cb3a03794d67b95e7f4fc6af323120c09d0503c8ce92e869e22bb2590299ad76d541f844d32f96184f74d433793bbd75ec15fb1497ce835445212421cb4e3ce08395c9055a2"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffe9, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r2 = semget$private(0x0, 0x207, 0x0) semtimedop(r2, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000500), 0x0, 0x100, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) 4.564239719s ago: executing program 1 (id=758): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x800000, 0x3fff8000}, 0x844, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe, 0x0, @perf_bp={0x0, 0x9}, 0x17008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x80008000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.781018444s ago: executing program 3 (id=760): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0xfffffffd) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0xfffffffd) capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000200)={0x200000, 0x200000, 0x20000000}) r2 = socket$inet(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r3, 0xfff) listen(r2, 0x1) r4 = socket$netlink(0x10, 0x3, 0x4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r5, 0x3) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r6, &(0x7f0000000140)="c2", 0x1, 0x4004012, &(0x7f00000000c0)={0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r4) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 3.690105571s ago: executing program 1 (id=761): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x4, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) 3.626653945s ago: executing program 0 (id=762): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000206010800000000000000000100000a11000300686173683a69702c6d61726b00000000050001000700000005000500020000000900020073797a300000000005"], 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x24004090) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) 3.611038916s ago: executing program 3 (id=763): socket$can_bcm(0x1d, 0x2, 0x2) close(0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x68180, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x3fffffffb}, 0xc0c8, 0x0, 0x0, 0x3, 0x9, 0x8001, 0x7fff}, 0x0, 0xff6fffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x3, 0x6}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, r0, 0x1) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @auto=[0x34, 0x6b, 0x30, 0x66, 0x31, 0x65, 0x39, 0x30, 0x30, 0x33, 0x62, 0x66, 0x61, 0x3a, 0x38, 0x62]}, &(0x7f0000000280)={0x0, "02802b06cb753e36a42414a4cb9f432da0932a47c390b0d7d234f0af8770c83068309db4f2270a7db01b6653a5c3eaba703f8dc853de176b3c6837c8d8841c93", 0x3d}, 0x48, 0xfffffffffffffffc) socket(0x10, 0x2, 0x0) request_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f00000001c0)='-&)(-.,\x00', r1) keyctl$restrict_keyring(0x3, 0x0, 0x0, 0x0) add_key$fscrypt_provisioning(0x0, &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) getdents64(r2, 0x0, 0x0) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="010000000800000001000100090000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x50) 3.302495478s ago: executing program 3 (id=764): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000180)='./file0\x00', r2, &(0x7f0000000100)='./file0/../file0\x00', 0x122) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000cc0)=ANY=[], 0x8, 0x2ef, &(0x7f00000007c0)="$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") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280), 0xff, 0x25e, &(0x7f0000000e80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x4d) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) 2.775345405s ago: executing program 1 (id=765): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', 0x2000410, &(0x7f0000000380)=ANY=[], 0x1, 0x2b4, &(0x7f00000000c0)="$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") creat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) r0 = fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1019}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) open(&(0x7f0000000140)='.\x00', 0x0, 0x112) 2.774168405s ago: executing program 2 (id=767): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000c0000004208000040"], 0x50) 2.620268406s ago: executing program 0 (id=768): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=@deltaction={0x14, 0x18, 0x1, 0x70bd26, 0x25dfdc00, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x38, r2, 0x209, 0x0, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback={0xff00000000000000}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r4}]}, 0x38}}, 0x0) 904.080236ms ago: executing program 2 (id=769): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) write$tun(r2, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x2) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, r5) setpgid(0x0, r5) fchdir(r4) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x7ab2e0918647f40d, 0x9) 903.939926ms ago: executing program 4 (id=770): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, 0x0) socket$nl_route(0x10, 0x3, 0x0) set_mempolicy(0x8006, 0x0, 0x5) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x7fffffff) ftruncate(r3, 0x2007ffb) sendfile(r3, r3, 0x0, 0x1000000201005) 901.857886ms ago: executing program 0 (id=779): syz_io_uring_setup(0x5c9d, &(0x7f0000000340)={0x0, 0xd214, 0x1, 0x0, 0x321}, 0x0, 0x0, 0x0) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r1, 0xa, 0x12) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r2, 0x8000}], 0x1, 0x0, 0x0, 0x0) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f00000003c0)={0x20002008}) tkill(r0, 0x13) 901.292276ms ago: executing program 3 (id=771): ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230000) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) mount$cgroup(0x0, 0x0, 0x0, 0x8000, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x1000}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000300)=0x1) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 799.393853ms ago: executing program 0 (id=772): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0xa, 0x3, 0xff) madvise(&(0x7f000061c000/0x1000)=nil, 0x1000, 0xa) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xfffffffffffffe5a, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x8885}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c000}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x400080, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000100800010001"], 0x1c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 717.543139ms ago: executing program 3 (id=773): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x800000, 0x3fff8000}, 0x844, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe, 0x0, @perf_bp={0x0, 0x9}, 0x17008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x80008000, 0x0, 0x0, 0x0, 0x0, 0x0) 615.041876ms ago: executing program 0 (id=774): syz_open_dev$loop(&(0x7f0000000240), 0x2, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = syz_open_pts(0xffffffffffffffff, 0x141601) write(r1, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, 0x0, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) socketpair(0x1, 0x100000005, 0x0, 0x0) 0s ago: executing program 2 (id=775): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x7151, 0x0) kernel console output (not intermixed with test programs): 45.390668][ T3917] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 45.415109][ T3919] loop4: detected capacity change from 0 to 512 [ 45.540816][ T3919] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.570468][ T3919] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.027481][ T3931] netlink: 'syz.0.87': attribute type 4 has an invalid length. [ 46.087022][ T3934] netlink: 'syz.0.87': attribute type 4 has an invalid length. [ 46.262285][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.280690][ T10] tipc: Node number set to 9611946 [ 46.405410][ T3944] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.580158][ T3963] netlink: 12 bytes leftover after parsing attributes in process `syz.4.99'. [ 46.722047][ T3958] netlink: 'syz.0.97': attribute type 13 has an invalid length. [ 46.764439][ T3970] netlink: 4 bytes leftover after parsing attributes in process `syz.4.102'. [ 46.777315][ T3958] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 46.855278][ T3958] loop0: detected capacity change from 0 to 512 [ 46.906984][ T3958] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.019897][ T3983] syzkaller0: entered promiscuous mode [ 47.048556][ T3983] syzkaller0: entered allmulticast mode [ 47.059209][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.232687][ T3968] loop1: detected capacity change from 0 to 4096 [ 47.304620][ T3993] netlink: 'syz.0.108': attribute type 1 has an invalid length. [ 47.354017][ T3993] bond1: entered promiscuous mode [ 47.385994][ T3993] bond1: entered allmulticast mode [ 47.401557][ T3993] 8021q: adding VLAN 0 to HW filter on device bond1 [ 47.444510][ T3993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.108'. [ 47.456268][ T3993] bond1 (unregistering): Released all slaves [ 47.471111][ T3997] tipc: Started in network mode [ 47.484015][ T3997] tipc: Node identity 4, cluster identity 4711 [ 47.490503][ T3997] tipc: Node number set to 4 [ 48.057344][ T4007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.065943][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 48.065958][ T28] audit: type=1400 audit(1775595134.980:217): avc: denied { read write } for pid=4006 comm="syz.2.113" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.095983][ T4007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.166758][ T28] audit: type=1400 audit(1775595134.980:218): avc: denied { open } for pid=4006 comm="syz.2.113" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.239608][ T28] audit: type=1400 audit(1775595134.980:219): avc: denied { ioctl } for pid=4006 comm="syz.2.113" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.416603][ T28] audit: type=1400 audit(1775595135.340:220): avc: denied { create } for pid=4011 comm="syz.1.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 48.475074][ T28] audit: type=1400 audit(1775595135.400:221): avc: denied { read } for pid=4011 comm="syz.1.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 48.778401][ T4010] syz.3.114 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 48.823561][ T4010] CPU: 0 UID: 0 PID: 4010 Comm: syz.3.114 Not tainted syzkaller #0 PREEMPT(full) [ 48.823591][ T4010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 48.823621][ T4010] Call Trace: [ 48.823629][ T4010] [ 48.823637][ T4010] __dump_stack+0x1d/0x30 [ 48.823673][ T4010] dump_stack_lvl+0x95/0xd0 [ 48.823702][ T4010] dump_stack+0x15/0x1b [ 48.823726][ T4010] dump_header+0x80/0x240 [ 48.823748][ T4010] oom_kill_process+0x295/0x350 [ 48.823793][ T4010] out_of_memory+0x97d/0xb80 [ 48.823819][ T4010] try_charge_memcg+0x62e/0xa10 [ 48.823894][ T4010] obj_cgroup_charge_pages+0x23/0xc0 [ 48.823922][ T4010] __memcg_kmem_charge_page+0x9e/0x170 [ 48.823949][ T4010] __alloc_frozen_pages_noprof+0x18a/0x360 [ 48.824000][ T4010] alloc_pages_mpol+0xb3/0x260 [ 48.824032][ T4010] alloc_pages_noprof+0x8f/0x140 [ 48.824132][ T4010] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 48.824325][ T4010] __kvmalloc_node_noprof+0x3d4/0x650 [ 48.824368][ T4010] ? ip_set_alloc+0x24/0x30 [ 48.824404][ T4010] ? ip_set_alloc+0x24/0x30 [ 48.824475][ T4010] ? __kmalloc_cache_noprof+0x18a/0x410 [ 48.824506][ T4010] ip_set_alloc+0x24/0x30 [ 48.824541][ T4010] hash_netiface_create+0x282/0x740 [ 48.824656][ T4010] ? __pfx_hash_netiface_create+0x10/0x10 [ 48.824723][ T4010] ip_set_create+0x3cf/0x970 [ 48.824747][ T4010] ? __nla_parse+0x40/0x60 [ 48.824781][ T4010] nfnetlink_rcv_msg+0x509/0x5d0 [ 48.824863][ T4010] netlink_rcv_skb+0x123/0x220 [ 48.824946][ T4010] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 48.825103][ T4010] nfnetlink_rcv+0x167/0x1720 [ 48.825139][ T4010] ? __kfree_skb+0x109/0x150 [ 48.825168][ T4010] ? nlmon_xmit+0x4f/0x60 [ 48.825243][ T4010] ? consume_skb+0x4b/0x160 [ 48.825274][ T4010] ? nlmon_xmit+0x4f/0x60 [ 48.825301][ T4010] ? dev_hard_start_xmit+0x3b9/0x3f0 [ 48.825393][ T4010] ? __dev_queue_xmit+0x136c/0x1f20 [ 48.825468][ T4010] ? __dev_queue_xmit+0x148/0x1f20 [ 48.825508][ T4010] ? ref_tracker_free+0x37d/0x3e0 [ 48.825545][ T4010] ? __netlink_deliver_tap+0x4dc/0x500 [ 48.825571][ T4010] netlink_unicast+0x5c0/0x690 [ 48.825612][ T4010] netlink_sendmsg+0x5c8/0x6f0 [ 48.825679][ T4010] ? __pfx_netlink_sendmsg+0x10/0x10 [ 48.825732][ T4010] ____sys_sendmsg+0x563/0x5b0 [ 48.825754][ T4010] ___sys_sendmsg+0x195/0x1e0 [ 48.825786][ T4010] __x64_sys_sendmsg+0xd4/0x160 [ 48.825813][ T4010] x64_sys_call+0x194c/0x3020 [ 48.825919][ T4010] do_syscall_64+0x12c/0x370 [ 48.825952][ T4010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.826027][ T4010] RIP: 0033:0x7fbfd8e0c819 [ 48.826047][ T4010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.826067][ T4010] RSP: 002b:00007fbfd7867028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 48.826094][ T4010] RAX: ffffffffffffffda RBX: 00007fbfd9085fa0 RCX: 00007fbfd8e0c819 [ 48.826118][ T4010] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 48.826134][ T4010] RBP: 00007fbfd8ea2c91 R08: 0000000000000000 R09: 0000000000000000 [ 48.826162][ T4010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 48.826174][ T4010] R13: 00007fbfd9086038 R14: 00007fbfd9085fa0 R15: 00007ffd24ce8a28 [ 48.826191][ T4010] [ 49.151123][ T4010] memory: usage 230744kB, limit 307200kB, failcnt 230 [ 49.181008][ T28] audit: type=1400 audit(1775595136.100:222): avc: denied { perfmon } for pid=4021 comm="syz.0.118" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 49.249955][ T4010] memory+swap: usage 49096kB, limit 9007199254740988kB, failcnt 0 [ 49.270897][ T28] audit: type=1400 audit(1775595136.100:223): avc: denied { bpf } for pid=4021 comm="syz.0.118" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 49.275101][ T4010] kmem: usage 2040kB, limit 9007199254740988kB, failcnt 0 [ 49.291851][ T28] audit: type=1400 audit(1775595136.160:224): avc: denied { create } for pid=4023 comm="syz.2.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.322765][ T4010] Memory cgroup stats for /syz3: [ 49.323014][ T4010] cache 524288 [ 49.332056][ T4010] rss 94208 [ 49.335355][ T4010] shmem 0 [ 49.338483][ T4010] mapped_file 65536 [ 49.342357][ T4010] dirty 0 [ 49.345777][ T4010] writeback 0 [ 49.349110][ T4010] workingset_refault_anon 51 [ 49.353786][ T4010] workingset_refault_file 384 [ 49.358942][ T4010] swap 81920 [ 49.362196][ T4010] swapcached 520192 [ 49.366205][ T4010] pgpgin 15120 [ 49.369642][ T4010] pgpgout 14964 [ 49.373113][ T4010] pgfault 16681 [ 49.376942][ T4010] pgmajfault 37 [ 49.380510][ T4010] inactive_anon 12288 [ 49.384506][ T4010] active_anon 102400 [ 49.390506][ T4010] inactive_file 0 [ 49.394197][ T4010] active_file 524288 [ 49.398565][ T4010] unevictable 0 [ 49.434977][ T4010] hierarchical_memory_limit 314572800 [ 49.451685][ T4010] hierarchical_memsw_limit 9223372036854771712 [ 49.464833][ T4010] total_cache 524288 [ 49.473279][ T4010] total_rss 94208 [ 49.482626][ T4010] total_shmem 0 [ 49.495506][ T4010] total_mapped_file 65536 [ 49.504323][ T4010] total_dirty 0 [ 49.512883][ T4010] total_writeback 0 [ 49.520132][ T4010] total_workingset_refault_anon 51 [ 49.531097][ T4010] total_workingset_refault_file 384 [ 49.541915][ T4010] total_swap 81920 [ 49.549099][ T4010] total_swapcached 520192 [ 49.595699][ T4010] total_pgpgin 15120 [ 49.599739][ T4010] total_pgpgout 14964 [ 49.637909][ T4010] total_pgfault 16681 [ 49.637926][ T4010] total_pgmajfault 37 [ 49.637934][ T4010] total_inactive_anon 12288 [ 49.637942][ T4010] total_active_anon 102400 [ 49.637968][ T4010] total_inactive_file 0 [ 49.638024][ T4010] total_active_file 524288 [ 49.638032][ T4010] total_unevictable 0 [ 49.638041][ T4010] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.114,pid=4009,uid=0 [ 49.638122][ T4010] Memory cgroup out of memory: Killed process 4009 (syz.3.114) total-vm:96140kB, anon-rss:1356kB, file-rss:22296kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 49.677836][ T4010] syz.3.114 (4010) used greatest stack depth: 7408 bytes left [ 49.684190][ T4038] syz.0.122 uses obsolete (PF_INET,SOCK_PACKET) [ 49.684339][ T28] audit: type=1400 audit(1775595136.590:225): avc: denied { create } for pid=4036 comm="syz.4.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 49.704960][ T28] audit: type=1400 audit(1775595136.620:226): avc: denied { write } for pid=4036 comm="syz.4.123" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 49.710483][ T4037] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 49.710483][ T4037] program syz.4.123 not setting count and/or reply_len properly [ 50.154111][ T4053] loop4: detected capacity change from 0 to 512 [ 50.220005][ T4053] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 50.267972][ T4053] EXT4-fs warning (device loop4): ext4_enable_quotas:7261: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 50.270648][ T4053] EXT4-fs (loop4): mount failed [ 51.521738][ T4067] netlink: 'syz.1.130': attribute type 13 has an invalid length. [ 51.631217][ T4067] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.638474][ T4067] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.737063][ T4071] 9p: Could not find request transport: fd [ 51.808150][ T4076] netlink: 'syz.4.133': attribute type 1 has an invalid length. [ 51.845336][ T4067] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.957021][ T4067] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.108835][ T4084] capability: warning: `syz.2.134' uses deprecated v2 capabilities in a way that may be insecure [ 52.476483][ T4076] bond1: entered promiscuous mode [ 52.506818][ T4076] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.581772][ T4080] vlan2: entered allmulticast mode [ 52.615386][ T4080] bond1: entered allmulticast mode [ 52.624900][ T3670] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.644869][ T3670] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.653321][ T3670] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.693401][ T4081] bond1: (slave bridge1): making interface the new active one [ 52.735462][ T4081] bridge1: entered promiscuous mode [ 52.740784][ T4081] bridge1: entered allmulticast mode [ 52.747653][ T4081] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 52.794875][ T3670] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.898147][ T4096] loop1: detected capacity change from 0 to 512 [ 52.929794][ T4096] EXT4-fs: Ignoring removed mblk_io_submit option [ 52.957455][ T4096] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 53.041519][ T4096] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.055955][ T4096] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 53.385460][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 53.385486][ T28] audit: type=1400 audit(1775595140.300:237): avc: denied { bind } for pid=4087 comm="syz.2.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 53.469607][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.776787][ T28] audit: type=1400 audit(1775595140.700:238): avc: denied { read } for pid=4120 comm="syz.2.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 54.159663][ T28] audit: type=1400 audit(1775595141.070:239): avc: denied { unmount } for pid=4129 comm="syz.3.149" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 54.293071][ T4133] syzkaller0: entered promiscuous mode [ 54.312041][ T4133] syzkaller0: entered allmulticast mode [ 54.352740][ T4133] tipc: Enabled bearer , priority 0 [ 54.378677][ T4132] tipc: Resetting bearer [ 54.411458][ T4132] tipc: Disabling bearer [ 54.484848][ T28] audit: type=1400 audit(1775595141.400:240): avc: denied { bind } for pid=4131 comm="syz.3.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 54.616117][ T4143] bridge_slave_0: left allmulticast mode [ 54.621950][ T4143] bridge_slave_0: left promiscuous mode [ 54.665905][ T4143] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.749070][ T4150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.155'. [ 54.757062][ T4151] netlink: 52 bytes leftover after parsing attributes in process `syz.0.154'. [ 54.808374][ T4148] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4148 comm=syz.0.154 [ 54.881543][ T4148] netlink: 52 bytes leftover after parsing attributes in process `syz.0.154'. [ 55.148883][ T4143] bridge_slave_1: left allmulticast mode [ 55.154666][ T4143] bridge_slave_1: left promiscuous mode [ 55.165596][ T4143] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.178349][ T4143] bond0: (slave bond_slave_1): Releasing backup interface [ 55.197846][ T4143] team0: Port device team_slave_0 removed [ 55.286906][ T4143] team0: Port device team_slave_1 removed [ 55.293598][ T4143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.301873][ T4143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.316710][ T4143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.327190][ T4143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.338066][ T4143] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 55.359601][ T4147] team0: Mode changed to "loadbalance" [ 55.944417][ T28] audit: type=1400 audit(1775595142.860:241): avc: denied { recv } for pid=4164 comm="syz.2.160" saddr=10.128.0.163 src=30036 daddr=10.128.1.82 dest=52734 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 56.006817][ T4172] syzkaller0: entered promiscuous mode [ 56.012570][ T4172] syzkaller0: entered allmulticast mode [ 56.180342][ T4174] xt_hashlimit: size too large, truncated to 1048576 [ 56.656113][ T28] audit: type=1400 audit(1775595143.530:242): avc: denied { egress } for pid=1032 comm="kworker/1:2" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::1:ff00:1b netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 56.684319][ T28] audit: type=1400 audit(1775595143.530:243): avc: denied { sendto } for pid=1032 comm="kworker/1:2" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::1:ff00:1b netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 57.118822][ T4192] loop0: detected capacity change from 0 to 1024 [ 57.238743][ T4192] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.299600][ T4189] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 57.304857][ T28] audit: type=1400 audit(1775595144.220:244): avc: denied { remove_name } for pid=4186 comm="syz.0.166" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.312672][ T4189] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.166: missing EA_INODE flag [ 57.347173][ T4189] EXT4-fs (loop0): Remounting filesystem read-only [ 57.357985][ T28] audit: type=1400 audit(1775595144.220:245): avc: denied { rename } for pid=4186 comm="syz.0.166" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 57.384862][ T28] audit: type=1400 audit(1775595144.220:246): avc: denied { add_name } for pid=4186 comm="syz.0.166" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.553371][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.893142][ T4185] netlink: 76 bytes leftover after parsing attributes in process `syz.3.165'. [ 57.973567][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.980836][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.993540][ T4195] bond_slave_0: left promiscuous mode [ 58.000097][ T4195] bond_slave_1: left promiscuous mode [ 58.049978][ T4195] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.067357][ T4195] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.115410][ T4213] syzkaller0: entered promiscuous mode [ 58.120921][ T4213] syzkaller0: entered allmulticast mode [ 58.142771][ T3672] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.154523][ T3672] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.208838][ T3672] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.221470][ T3672] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.230288][ T3687] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.334132][ T3687] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.343921][ T3687] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.353212][ T3687] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.519758][ T4266] loop2: detected capacity change from 0 to 1024 [ 58.556591][ T4266] EXT4-fs: Ignoring removed orlov option [ 58.627732][ T4266] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.814912][ T28] kauditd_printk_skb: 53 callbacks suppressed [ 58.814930][ T28] audit: type=1400 audit(1775595145.650:300): avc: denied { create } for pid=4261 comm="syz.2.178" name="cgroup.stat" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 58.815017][ T28] audit: type=1400 audit(1775595145.650:301): avc: denied { read append open } for pid=4261 comm="syz.2.178" path="/33/file1/cgroup.stat" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 59.402302][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.614390][ T28] audit: type=1400 audit(1775595146.470:302): avc: denied { accept } for pid=4278 comm="syz.2.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 60.585552][ T4297] loop0: detected capacity change from 0 to 1024 [ 60.600881][ T28] audit: type=1400 audit(1775595147.520:303): avc: denied { create } for pid=4294 comm="syz.4.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.632333][ T4297] EXT4-fs: Ignoring removed nobh option [ 60.675134][ T4297] EXT4-fs: Ignoring removed nomblk_io_submit option [ 60.700110][ T28] audit: type=1400 audit(1775595147.520:304): avc: denied { bind } for pid=4294 comm="syz.4.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 60.736986][ T4297] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.797613][ T28] audit: type=1400 audit(1775595147.720:305): avc: denied { bind } for pid=4296 comm="syz.0.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.844861][ T28] audit: type=1400 audit(1775595147.720:306): avc: denied { setopt } for pid=4296 comm="syz.0.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.864361][ T28] audit: type=1400 audit(1775595147.720:307): avc: denied { write } for pid=4296 comm="syz.0.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.053502][ T4306] loop4: detected capacity change from 0 to 8192 [ 61.345531][ T4312] netlink: 12 bytes leftover after parsing attributes in process `syz.1.191'. [ 61.644047][ T4316] netlink: 'syz.1.193': attribute type 10 has an invalid length. [ 61.655267][ T4316] bond0: (slave dummy0): Releasing backup interface [ 61.663732][ T4316] team0: Port device dummy0 added [ 61.757385][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.846974][ T28] audit: type=1400 audit(1775595148.770:308): avc: denied { connect } for pid=4322 comm="syz.0.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.907813][ T28] audit: type=1400 audit(1775595148.770:309): avc: denied { shutdown } for pid=4322 comm="syz.0.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 62.017220][ T4301] syz.4.189 (4301) used greatest stack depth: 7000 bytes left [ 62.133716][ T4318] syz.3.194 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 62.231314][ T4330] loop4: detected capacity change from 0 to 512 [ 62.424697][ T4330] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #12: comm syz.4.197: missing EA_INODE flag [ 62.436500][ T4330] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 62.440175][ T4330] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.197: error while reading EA inode 12 err=-117 [ 62.449391][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 62.449429][ C0] EXT4-fs (loop4): initial error at time 1775595149: ext4_xattr_inode_iget:441: inode 12 [ 62.449470][ C0] EXT4-fs (loop4): last error at time 1775595149: ext4_xattr_inode_iget:441: inode 12 [ 62.487909][ T4330] loop4: lost filesystem error report for type 5 error -117 [ 62.488142][ T4330] EXT4-fs (loop4): 1 orphan inode deleted [ 62.502499][ T4330] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.615252][ T4318] CPU: 0 UID: 0 PID: 4318 Comm: syz.3.194 Not tainted syzkaller #0 PREEMPT(full) [ 62.615316][ T4318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 62.615330][ T4318] Call Trace: [ 62.615338][ T4318] [ 62.615348][ T4318] __dump_stack+0x1d/0x30 [ 62.615390][ T4318] dump_stack_lvl+0x95/0xd0 [ 62.615416][ T4318] dump_stack+0x15/0x1b [ 62.615517][ T4318] dump_header+0x80/0x240 [ 62.615539][ T4318] oom_kill_process+0x295/0x350 [ 62.615579][ T4318] out_of_memory+0x97d/0xb80 [ 62.615604][ T4318] try_charge_memcg+0x62e/0xa10 [ 62.615701][ T4318] obj_cgroup_charge_pages+0x23/0xc0 [ 62.615734][ T4318] __memcg_kmem_charge_page+0x9e/0x170 [ 62.615843][ T4318] __alloc_frozen_pages_noprof+0x18a/0x360 [ 62.615881][ T4318] alloc_pages_bulk_noprof+0x4aa/0x530 [ 62.615948][ T4318] ? policy_nodemask+0x417/0x5e0 [ 62.615981][ T4318] ? __alloc_frozen_pages_noprof+0x2a4/0x360 [ 62.616016][ T4318] alloc_pages_bulk_mempolicy_noprof+0x35b/0xeb0 [ 62.616056][ T4318] ? alloc_pages_mpol+0x217/0x260 [ 62.616086][ T4318] __vmalloc_node_range_noprof+0x87c/0x12b0 [ 62.616128][ T4318] __kvmalloc_node_noprof+0x3d4/0x650 [ 62.616154][ T4318] ? futex_hash_allocate+0x190/0x9d0 [ 62.616182][ T4318] ? futex_hash_allocate+0x190/0x9d0 [ 62.616218][ T4318] futex_hash_allocate+0x190/0x9d0 [ 62.616325][ T4318] ? cap_task_prctl+0x13f/0x6e0 [ 62.616349][ T4318] futex_hash_prctl+0xd8/0xf0 [ 62.616385][ T4318] __se_sys_prctl+0xa3d/0x13f0 [ 62.616476][ T4318] __x64_sys_prctl+0x67/0x80 [ 62.616508][ T4318] x64_sys_call+0x2533/0x3020 [ 62.616550][ T4318] do_syscall_64+0x12c/0x370 [ 62.616578][ T4318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.616599][ T4318] RIP: 0033:0x7fbfd8e0c819 [ 62.616615][ T4318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.616632][ T4318] RSP: 002b:00007fbfd7867028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 62.616700][ T4318] RAX: ffffffffffffffda RBX: 00007fbfd9085fa0 RCX: 00007fbfd8e0c819 [ 62.616715][ T4318] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 62.616738][ T4318] RBP: 00007fbfd8ea2c91 R08: 0000000000000000 R09: 0000000000000000 [ 62.616752][ T4318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.616765][ T4318] R13: 00007fbfd9086038 R14: 00007fbfd9085fa0 R15: 00007ffd24ce8a28 [ 62.616787][ T4318] [ 62.874844][ T4318] memory: usage 307192kB, limit 307200kB, failcnt 286 [ 62.963599][ T4318] memory+swap: usage 307252kB, limit 9007199254740988kB, failcnt 0 [ 63.010785][ T4318] kmem: usage 286144kB, limit 9007199254740988kB, failcnt 0 [ 63.042424][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.056692][ T4318] Memory cgroup stats for /syz3: [ 63.057198][ T4318] cache 1048576 [ 63.124219][ T4318] rss 98304 [ 63.148928][ T4318] shmem 0 [ 63.151910][ T4318] mapped_file 81920 [ 63.164874][ T3393] IPVS: starting estimator thread 0... [ 63.173514][ T4334] loop4: detected capacity change from 0 to 512 [ 63.210461][ T4334] EXT4-fs (loop4): 1 truncate cleaned up [ 63.216290][ T4318] dirty 12288 [ 63.219342][ T4334] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.219676][ T4318] writeback 0 [ 63.219687][ T4318] workingset_refault_anon 781 [ 63.276654][ T4337] IPVS: using max 2160 ests per chain, 108000 per kthread [ 63.288209][ T4318] workingset_refault_file 795 [ 63.293003][ T4318] swap 86016 [ 63.300514][ T4318] swapcached 3538944 [ 63.301176][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.304581][ T4318] pgpgin 25566 [ 63.304593][ T4318] pgpgout 25283 [ 63.320591][ T4318] pgfault 28853 [ 63.324267][ T4318] pgmajfault 158 [ 63.328467][ T4318] inactive_anon 0 [ 63.332147][ T4318] active_anon 110592 [ 63.336218][ T4318] inactive_file 0 [ 63.339948][ T4318] active_file 1048576 [ 63.343934][ T4318] unevictable 0 [ 63.464851][ T4318] hierarchical_memory_limit 314572800 [ 63.470417][ T4318] hierarchical_memsw_limit 9223372036854771712 [ 63.494830][ T4318] total_cache 1048576 [ 63.498864][ T4318] total_rss 98304 [ 63.502599][ T4318] total_shmem 0 [ 63.524840][ T4318] total_mapped_file 81920 [ 63.537112][ T4318] total_dirty 12288 [ 63.546267][ T4318] total_writeback 0 [ 63.550285][ T4318] total_workingset_refault_anon 781 [ 63.561718][ T4318] total_workingset_refault_file 795 [ 63.586495][ T4318] total_swap 86016 [ 63.590619][ T4318] total_swapcached 3538944 [ 63.598311][ T4318] total_pgpgin 25566 [ 63.602293][ T4318] total_pgpgout 25283 [ 63.607771][ T4318] total_pgfault 28853 [ 63.611935][ T4318] total_pgmajfault 158 [ 63.694884][ T4318] total_inactive_anon 0 [ 63.722179][ T4318] total_active_anon 110592 [ 63.726876][ T4318] total_inactive_file 0 [ 63.731227][ T4318] total_active_file 1048576 [ 63.736013][ T4318] total_unevictable 0 [ 63.740036][ T4318] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.194,pid=4317,uid=0 [ 63.755311][ T4318] Memory cgroup out of memory: Killed process 4318 (syz.3.194) total-vm:96140kB, anon-rss:1340kB, file-rss:22324kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:0 [ 63.870064][ T4356] loop4: detected capacity change from 0 to 512 [ 63.982101][ T4359] capability: warning: `syz.3.206' uses 32-bit capabilities (legacy support in use) [ 64.179703][ T4356] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.220469][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 64.774883][ T28] audit: type=1400 audit(1775595151.120:312): avc: denied { write } for pid=4350 comm="syz.4.205" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 65.188191][ T4361] syz.0.207 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 65.199177][ T4361] CPU: 1 UID: 0 PID: 4361 Comm: syz.0.207 Not tainted syzkaller #0 PREEMPT(full) [ 65.199249][ T4361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 65.199261][ T4361] Call Trace: [ 65.199268][ T4361] [ 65.199277][ T4361] __dump_stack+0x1d/0x30 [ 65.199309][ T4361] dump_stack_lvl+0x95/0xd0 [ 65.199385][ T4361] dump_stack+0x15/0x1b [ 65.199415][ T4361] dump_header+0x80/0x240 [ 65.199443][ T4361] oom_kill_process+0x295/0x350 [ 65.199515][ T4361] out_of_memory+0x97d/0xb80 [ 65.199538][ T4361] try_charge_memcg+0x62e/0xa10 [ 65.199579][ T4361] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 65.199616][ T4361] __swap_cache_prepare_and_add+0x67/0x460 [ 65.199654][ T4361] ? alloc_pages_mpol+0x217/0x260 [ 65.199682][ T4361] swap_cache_alloc_folio+0xa2/0x120 [ 65.199715][ T4361] swap_cluster_readahead+0x26e/0x3d0 [ 65.199825][ T4361] swapin_readahead+0xde/0x840 [ 65.199855][ T4361] ? _raw_spin_unlock+0x9/0x30 [ 65.199881][ T4361] ? swap_put_entries_cluster+0x385/0x3a0 [ 65.199971][ T4361] ? swap_put_entries_cluster+0x161/0x3a0 [ 65.200007][ T4361] ? __rcu_read_unlock+0x4e/0x70 [ 65.200028][ T4361] ? swap_cache_get_folio+0x26f/0x280 [ 65.200136][ T4361] do_swap_page+0x2fe/0x21e0 [ 65.200178][ T4361] ? css_rstat_updated+0xbb/0x280 [ 65.200202][ T4361] ? __rcu_read_lock+0x36/0x50 [ 65.200222][ T4361] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 65.200325][ T4361] handle_mm_fault+0xb46/0x3020 [ 65.200435][ T4361] ? vma_start_read+0x1c7/0x2c0 [ 65.200463][ T4361] do_user_addr_fault+0x62f/0x1050 [ 65.200528][ T4361] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 65.200556][ T4361] ? trace_page_fault_user+0x1f/0xe0 [ 65.200600][ T4361] exc_page_fault+0x62/0xa0 [ 65.200687][ T4361] asm_exc_page_fault+0x26/0x30 [ 65.200707][ T4361] RIP: 0033:0x7f37534f9b00 [ 65.200725][ T4361] Code: c1 ea 12 48 8d 1c 16 48 8d b4 24 00 01 00 00 4c 8d 74 1d 00 48 89 d8 49 89 f7 eb 50 66 0f 1f 44 00 00 4c 89 e6 bf 01 00 00 00 ab ba 12 00 85 c0 0f 85 cb 09 00 00 48 b8 db 34 b6 d7 82 de 1b [ 65.200767][ T4361] RSP: 002b:00007ffe3b140a30 EFLAGS: 00010246 [ 65.200832][ T4361] RAX: 0000000000000000 RBX: 000000000000fb3a RCX: ffffffffffffffe8 [ 65.200848][ T4361] RDX: 0000000000000000 RSI: 00007ffe3b140b50 RDI: 0000000000000001 [ 65.200860][ T4361] RBP: 0000000000000032 R08: 7fffffffffffffff R09: 0000000000000000 [ 65.200923][ T4361] R10: 00007ffe3b140b30 R11: 0000000000000246 R12: 00007ffe3b140b50 [ 65.200936][ T4361] R13: 00007f37538a618c R14: 000000000000fb6c R15: 00007ffe3b140b30 [ 65.200981][ T4361] [ 65.201001][ T4361] memory: usage 307200kB, limit 307200kB, failcnt 3376 [ 65.541696][ T4361] memory+swap: usage 309028kB, limit 9007199254740988kB, failcnt 0 [ 65.549876][ T4361] kmem: usage 307124kB, limit 9007199254740988kB, failcnt 0 [ 65.557272][ T4361] Memory cgroup stats for /syz0: [ 65.557929][ T4361] cache 0 [ 65.565959][ T4361] rss 0 [ 65.568758][ T4361] shmem 0 [ 65.571718][ T4361] mapped_file 0 [ 65.575359][ T4361] dirty 0 [ 65.578328][ T4361] writeback 0 [ 65.581651][ T4361] workingset_refault_anon 86 [ 65.586529][ T4361] workingset_refault_file 733 [ 65.591347][ T4361] swap 1871872 [ 65.594756][ T4361] swapcached 2547712 [ 65.598712][ T4361] pgpgin 38608 [ 65.602103][ T4361] pgpgout 38607 [ 65.606080][ T4361] pgfault 43328 [ 65.609811][ T4361] pgmajfault 87 [ 65.613372][ T4361] inactive_anon 0 [ 65.617229][ T4361] active_anon 4096 [ 65.621230][ T4361] inactive_file 0 [ 65.625013][ T4361] active_file 0 [ 65.628509][ T4361] unevictable 0 [ 65.631995][ T4361] hierarchical_memory_limit 314572800 [ 65.637438][ T4361] hierarchical_memsw_limit 9223372036854771712 [ 65.643665][ T4361] total_cache 0 [ 65.647181][ T4361] total_rss 0 [ 65.650566][ T4361] total_shmem 0 [ 65.654180][ T4361] total_mapped_file 0 [ 65.658284][ T4361] total_dirty 0 [ 65.661965][ T4361] total_writeback 0 [ 65.665853][ T4361] total_workingset_refault_anon 86 [ 65.671038][ T4361] total_workingset_refault_file 733 [ 65.676292][ T4361] total_swap 1871872 [ 65.680282][ T4361] total_swapcached 2547712 [ 65.684814][ T4361] total_pgpgin 38608 [ 65.688775][ T4361] total_pgpgout 38607 [ 65.692780][ T4361] total_pgfault 43328 [ 65.696811][ T4361] total_pgmajfault 87 [ 65.700839][ T4361] total_inactive_anon 0 [ 65.705128][ T4361] total_active_anon 4096 [ 65.709437][ T4361] total_inactive_file 0 [ 65.713619][ T4361] total_active_file 0 [ 65.717663][ T4361] total_unevictable 0 [ 65.721660][ T4361] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.207,pid=4361,uid=0 [ 65.736497][ T4361] Memory cgroup out of memory: Killed process 4361 (syz.0.207) total-vm:96344kB, anon-rss:1232kB, file-rss:22168kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 65.759979][ T4360] netlink: 'syz.2.208': attribute type 8 has an invalid length. [ 65.791826][ T4360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.208'. [ 66.058912][ T28] audit: type=1400 audit(1775595151.120:313): avc: denied { open } for pid=4350 comm="syz.4.205" path="/52/file0/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 66.085251][ T4368] netlink: 'syz.3.209': attribute type 27 has an invalid length. [ 66.137106][ T28] audit: type=1400 audit(1775595151.370:314): avc: denied { ioctl } for pid=4350 comm="syz.4.205" path="/52/file0/file1" dev="loop4" ino=15 ioctlcmd=0x662a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 67.053463][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.069357][ T4360] bond0: entered promiscuous mode [ 67.075141][ T4360] bond_slave_0: entered promiscuous mode [ 67.080992][ T4360] bond_slave_1: entered promiscuous mode [ 67.102611][ T4360] bond0: left promiscuous mode [ 67.144844][ T4360] bond_slave_0: left promiscuous mode [ 67.166875][ T4360] bond_slave_1: left promiscuous mode [ 67.260240][ T4388] netlink: 'syz.2.216': attribute type 1 has an invalid length. [ 67.288496][ T28] audit: type=1400 audit(1775595154.210:315): avc: denied { listen } for pid=4389 comm="syz.0.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 67.338188][ T4394] veth3: entered promiscuous mode [ 67.362175][ T4394] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 67.590222][ T28] audit: type=1400 audit(1775595154.480:316): avc: denied { create } for pid=4399 comm="syz.0.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 67.625056][ T28] audit: type=1400 audit(1775595154.480:317): avc: denied { read } for pid=4399 comm="syz.0.218" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 67.693508][ T28] audit: type=1400 audit(1775595154.480:318): avc: denied { open } for pid=4399 comm="syz.0.218" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 67.811663][ T4408] process 'syz.3.219' launched '/dev/fd/4' with NULL argv: empty string added [ 68.683052][ T28] audit: type=1400 audit(1775595154.480:319): avc: denied { ioctl } for pid=4399 comm="syz.0.218" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 69.186159][ T28] audit: type=1400 audit(1775595154.740:320): avc: denied { execute_no_trans } for pid=4400 comm="syz.3.219" path=2F6D656D66643A5B0BDB58AE5B1AADD16D64C8854858A9250C1A2CE29CB4D7BCF1B386E22F4F70D0A2821E623B28B5E16AC80CE58917EE7C4A903D35EDCFD3AED20711A9A55EFFF595D271258ADA05202864656C6574656429 dev="tmpfs" ino=1074 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 69.260516][ T4416] syzkaller0: entered promiscuous mode [ 69.276380][ T4416] syzkaller0: entered allmulticast mode [ 69.328658][ T4419] x_tables: duplicate entry at hook 2 [ 69.344268][ T28] audit: type=1400 audit(1775595155.010:321): avc: denied { create } for pid=4406 comm="syz.0.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 69.405680][ T28] audit: type=1400 audit(1775595156.170:322): avc: denied { write } for pid=4413 comm="syz.0.222" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 69.471029][ T28] audit: type=1400 audit(1775595156.170:323): avc: denied { open } for pid=4413 comm="syz.0.222" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 69.506443][ T28] audit: type=1400 audit(1775595156.180:324): avc: denied { ioctl } for pid=4413 comm="syz.0.222" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 69.535126][ T28] audit: type=1400 audit(1775595156.180:325): avc: denied { ioctl } for pid=4415 comm="syz.2.224" path="socket:[9874]" dev="sockfs" ino=9874 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 69.711242][ T28] audit: type=1400 audit(1775595156.630:326): avc: denied { create } for pid=4424 comm="syz.4.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 69.735585][ T4425] netlink: 12 bytes leftover after parsing attributes in process `syz.4.228'. [ 69.772624][ T28] audit: type=1400 audit(1775595156.660:327): avc: denied { write } for pid=4424 comm="syz.4.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 69.815390][ T4425] veth3: entered allmulticast mode [ 69.827451][ T4425] bond2: (slave veth3): Enslaving as an active interface with an up link [ 69.839329][ T28] audit: type=1400 audit(1775595156.670:328): avc: denied { create } for pid=4422 comm="syz.2.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 69.877451][ T4432] loop2: detected capacity change from 0 to 136 [ 69.909078][ T4431] bond2 (unregistering): (slave veth3): Releasing backup interface [ 69.919643][ T28] audit: type=1400 audit(1775595156.690:329): avc: denied { read } for pid=4422 comm="syz.2.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 69.957933][ T4431] bond2 (unregistering): Released all slaves [ 69.959923][ T28] audit: type=1400 audit(1775595156.880:330): avc: denied { mount } for pid=4433 comm="syz.0.230" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 70.117015][ T4443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.233'. [ 70.148196][ T4443] bond0: entered promiscuous mode [ 70.153301][ T4443] bond_slave_0: entered promiscuous mode [ 70.167164][ T4432] Attempt to read inode for relocated directory [ 70.173644][ T4443] bond_slave_1: entered promiscuous mode [ 70.185500][ T4443] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 70.222518][ T4443] bond0: left promiscuous mode [ 70.247328][ T4443] bond_slave_0: left promiscuous mode [ 70.253110][ T4443] bond_slave_1: left promiscuous mode [ 70.299129][ T4447] 8021q: adding VLAN 0 to HW filter on device bond1 [ 70.376997][ T4447] bond1: (slave ip6gretap1): making interface the new active one [ 70.424411][ T4447] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 70.493369][ T4459] netlink: 4 bytes leftover after parsing attributes in process `syz.4.237'. [ 71.114021][ T4476] loop4: detected capacity change from 0 to 128 [ 71.755772][ T4479] netlink: 'syz.4.243': attribute type 1 has an invalid length. [ 71.793880][ T4479] 8021q: adding VLAN 0 to HW filter on device bond2 [ 71.813404][ T4479] vlan3: entered promiscuous mode [ 71.819292][ T4479] bond2: entered promiscuous mode [ 71.824508][ T4479] vlan3: entered allmulticast mode [ 71.829800][ T4479] bond2: entered allmulticast mode [ 71.846308][ T4479] bond2: (slave bridge2): making interface the new active one [ 71.853810][ T4479] bridge2: entered promiscuous mode [ 71.859170][ T4479] bridge2: entered allmulticast mode [ 71.865035][ T4479] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 71.962176][ T4488] lo: Caught tx_queue_len zero misconfig [ 71.968081][ T4488] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 71.982033][ T4488] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 72.156171][ T4496] tipc: Enabling of bearer rejected, failed to enable media [ 72.248738][ T4501] syzkaller0: entered promiscuous mode [ 72.254684][ T4501] syzkaller0: entered allmulticast mode [ 74.349095][ T4543] loop1: detected capacity change from 0 to 512 [ 74.371446][ T4543] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.403637][ T4543] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.497956][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 74.497977][ T28] audit: type=1400 audit(1775595161.410:350): avc: denied { mounton } for pid=4542 comm="syz.1.264" path="/49/bus" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 75.017874][ T4562] netlink: 24 bytes leftover after parsing attributes in process `syz.2.267'. [ 75.190616][ T4567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.267'. [ 75.272779][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.279769][ T4555] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.292552][ T4555] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.508148][ T4555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.527200][ T4555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.740561][ T4555] tipc: Resetting bearer [ 76.021932][ T4577] netlink: 'syz.1.269': attribute type 21 has an invalid length. [ 76.085265][ T4577] netlink: 164 bytes leftover after parsing attributes in process `syz.1.269'. [ 76.187508][ T4556] netlink: 76 bytes leftover after parsing attributes in process `syz.4.266'. [ 76.326871][ T2200] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.390848][ T2200] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.435955][ T2200] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.475375][ T2200] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.572512][ T28] audit: type=1400 audit(1775595164.450:351): avc: denied { watch watch_reads } for pid=4596 comm="syz.0.274" path="/59" dev="tmpfs" ino=318 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 78.565737][ T4609] netlink: 'syz.0.289': attribute type 1 has an invalid length. [ 78.641400][ T4609] bond1: entered promiscuous mode [ 78.656586][ T4609] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.744631][ T4613] vlan2: entered allmulticast mode [ 78.772835][ T4613] bond1: entered allmulticast mode [ 79.053849][ T4609] bond1: (slave bridge1): making interface the new active one [ 79.102348][ T4609] bridge1: entered promiscuous mode [ 79.137731][ T4609] bridge1: entered allmulticast mode [ 79.187998][ T4609] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 79.485586][ T4618] netlink: 12 bytes leftover after parsing attributes in process `syz.3.279'. [ 79.523710][ T28] audit: type=1400 audit(1775595166.440:352): avc: denied { create } for pid=4620 comm="syz.4.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 79.577444][ T28] audit: type=1400 audit(1775595166.470:353): avc: denied { accept } for pid=4620 comm="syz.4.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 79.636431][ T4618] veth3: entered allmulticast mode [ 79.653572][ T4618] bond2: (slave veth3): Enslaving as an active interface with an up link [ 79.677391][ T4624] loop2: detected capacity change from 0 to 512 [ 79.778240][ T4624] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.798627][ T4618] bond2 (unregistering): (slave veth3): Releasing backup interface [ 79.835474][ T4618] bond2 (unregistering): Released all slaves [ 79.867099][ T4624] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 80.301849][ T4621] syz.4.280 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 80.334881][ T4621] CPU: 1 UID: 0 PID: 4621 Comm: syz.4.280 Not tainted syzkaller #0 PREEMPT(full) [ 80.334909][ T4621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 80.334923][ T4621] Call Trace: [ 80.334932][ T4621] [ 80.334977][ T4621] __dump_stack+0x1d/0x30 [ 80.335010][ T4621] dump_stack_lvl+0x95/0xd0 [ 80.335035][ T4621] dump_stack+0x15/0x1b [ 80.335056][ T4621] dump_header+0x80/0x240 [ 80.335145][ T4621] oom_kill_process+0x295/0x350 [ 80.335249][ T4621] out_of_memory+0x97d/0xb80 [ 80.335276][ T4621] try_charge_memcg+0x62e/0xa10 [ 80.335315][ T4621] obj_cgroup_charge_pages+0x23/0xc0 [ 80.335422][ T4621] __memcg_kmem_charge_page+0x9e/0x170 [ 80.335457][ T4621] __alloc_frozen_pages_noprof+0x18a/0x360 [ 80.335494][ T4621] alloc_pages_mpol+0xb3/0x260 [ 80.335532][ T4621] alloc_pages_noprof+0x8f/0x140 [ 80.335560][ T4621] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 80.335602][ T4621] __kvmalloc_node_noprof+0x3d4/0x650 [ 80.335660][ T4621] ? futex_hash_allocate+0x190/0x9d0 [ 80.335686][ T4621] ? futex_hash_allocate+0x190/0x9d0 [ 80.335720][ T4621] futex_hash_allocate+0x190/0x9d0 [ 80.335802][ T4621] ? cap_task_prctl+0x13f/0x6e0 [ 80.335828][ T4621] futex_hash_prctl+0xd8/0xf0 [ 80.335875][ T4621] __se_sys_prctl+0xa3d/0x13f0 [ 80.335973][ T4621] __x64_sys_prctl+0x67/0x80 [ 80.335998][ T4621] x64_sys_call+0x2533/0x3020 [ 80.336059][ T4621] do_syscall_64+0x12c/0x370 [ 80.336117][ T4621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.336138][ T4621] RIP: 0033:0x7fc35c8cc819 [ 80.336155][ T4621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.336176][ T4621] RSP: 002b:00007fc35b31f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 80.336245][ T4621] RAX: ffffffffffffffda RBX: 00007fc35cb45fa0 RCX: 00007fc35c8cc819 [ 80.336261][ T4621] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 80.336277][ T4621] RBP: 00007fc35c962c91 R08: 0000000000000000 R09: 0000000000000000 [ 80.336292][ T4621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.336308][ T4621] R13: 00007fc35cb46038 R14: 00007fc35cb45fa0 R15: 00007ffd1460cb28 [ 80.336371][ T4621] [ 80.336378][ T4621] memory: usage 307200kB, limit 307200kB, failcnt 1512 [ 80.551863][ T4638] tipc: Enabling of bearer rejected, failed to enable media [ 80.575457][ T4621] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 80.583433][ T4621] kmem: usage 306784kB, limit 9007199254740988kB, failcnt 0 [ 80.591914][ T4621] Memory cgroup stats for /syz4: [ 80.592195][ T4621] cache 16384 [ 80.602090][ T4621] rss 372736 [ 80.602489][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.605513][ T4621] shmem 12288 [ 80.618420][ T4621] mapped_file 16384 [ 80.622465][ T4621] dirty 4096 [ 80.626446][ T4621] writeback 0 [ 80.629801][ T4621] workingset_refault_anon 556 [ 80.634502][ T4621] workingset_refault_file 718 [ 80.640001][ T4621] swap 0 [ 80.643259][ T4621] swapcached 20639744 [ 80.647664][ T4621] pgpgin 35643 [ 80.651763][ T4621] pgpgout 35547 [ 80.655976][ T4621] pgfault 41713 [ 80.659509][ T4621] pgmajfault 111 [ 80.663523][ T4621] inactive_anon 385024 [ 80.667958][ T4621] active_anon 0 [ 80.671695][ T4621] inactive_file 0 [ 80.677162][ T4621] active_file 8192 [ 80.680909][ T4621] unevictable 0 [ 80.684387][ T4621] hierarchical_memory_limit 314572800 [ 80.690242][ T4621] hierarchical_memsw_limit 9223372036854771712 [ 80.699537][ T4621] total_cache 16384 [ 80.703634][ T4621] total_rss 372736 [ 80.715582][ T4621] total_shmem 12288 [ 80.725497][ T4621] total_mapped_file 16384 [ 80.738596][ T4621] total_dirty 4096 [ 80.740087][ T28] audit: type=1400 audit(1775595167.620:354): avc: denied { read } for pid=4641 comm="syz.2.288" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 80.744951][ T4621] total_writeback 0 [ 80.787214][ T4621] total_workingset_refault_anon 556 [ 80.796881][ T4621] total_workingset_refault_file 718 [ 80.800218][ T28] audit: type=1400 audit(1775595167.620:355): avc: denied { ioctl } for pid=4641 comm="syz.2.288" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 80.806571][ T4621] total_swap 0 [ 80.838261][ T4656] loop1: detected capacity change from 0 to 8192 [ 80.851552][ T4621] total_swapcached 20639744 [ 80.861639][ T4621] total_pgpgin 35643 [ 80.867559][ T4656] syz.1.290: attempt to access beyond end of device [ 80.867559][ T4656] loop1: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 80.881900][ T4656] Buffer I/O error on dev loop1, logical block 57847, async page read [ 80.894699][ T4621] total_pgpgout 35547 [ 80.895164][ T4656] syz.1.290: attempt to access beyond end of device [ 80.895164][ T4656] loop1: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 80.899836][ T4621] total_pgfault 41713 [ 80.917607][ T4621] total_pgmajfault 111 [ 80.921799][ T4621] total_inactive_anon 385024 [ 80.926642][ T4621] total_active_anon 0 [ 80.930807][ T4621] total_inactive_file 0 [ 80.931590][ T4656] Buffer I/O error on dev loop1, logical block 57847, async page read [ 80.943669][ T4621] total_active_file 8192 [ 80.948221][ T4621] total_unevictable 0 [ 80.961127][ T4621] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.280,pid=4620,uid=0 [ 80.965256][ T4656] syz.1.290: attempt to access beyond end of device [ 80.965256][ T4656] loop1: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 80.980611][ T4621] Memory cgroup out of memory: Killed process 4621 (syz.4.280) total-vm:96212kB, anon-rss:1408kB, file-rss:22324kB, shmem-rss:12kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 81.004861][ T4656] Buffer I/O error on dev loop1, logical block 57847, async page read [ 81.024471][ T4656] syz.1.290: attempt to access beyond end of device [ 81.024471][ T4656] loop1: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 81.039211][ T4656] Buffer I/O error on dev loop1, logical block 57847, async page read [ 81.047663][ T4656] syz.1.290: attempt to access beyond end of device [ 81.047663][ T4656] loop1: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 81.061963][ T4656] Buffer I/O error on dev loop1, logical block 57847, async page read [ 81.070741][ T4654] syz.1.290: attempt to access beyond end of device [ 81.070741][ T4654] loop1: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 81.085618][ T4654] Buffer I/O error on dev loop1, logical block 57847, async page read [ 81.100553][ T4654] syz.1.290: attempt to access beyond end of device [ 81.100553][ T4654] loop1: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 81.114997][ T4654] Buffer I/O error on dev loop1, logical block 57847, async page read [ 81.123405][ T4656] syz.1.290: attempt to access beyond end of device [ 81.123405][ T4656] loop1: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 81.138302][ T4656] Buffer I/O error on dev loop1, logical block 57847, async page read [ 81.146946][ T4654] syz.1.290: attempt to access beyond end of device [ 81.146946][ T4654] loop1: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 81.161313][ T4654] Buffer I/O error on dev loop1, logical block 57847, async page read [ 81.182389][ T4654] syz.1.290: attempt to access beyond end of device [ 81.182389][ T4654] loop1: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 81.196796][ T4654] Buffer I/O error on dev loop1, logical block 57847, async page read [ 82.143643][ T4686] loop2: detected capacity change from 0 to 512 [ 82.526134][ T4686] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 83.987254][ T28] audit: type=1107 audit(1775595170.900:356): pid=4709 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 85.094196][ T4720] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.158336][ T4720] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.202085][ T28] audit: type=1400 audit(1775595172.120:357): avc: denied { read } for pid=3041 comm="dhcpcd" name="n26" dev="tmpfs" ino=2007 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 85.236952][ T4720] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.289242][ T4720] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.343964][ T28] audit: type=1400 audit(1775595172.150:358): avc: denied { open } for pid=3041 comm="dhcpcd" path="/run/udev/data/n26" dev="tmpfs" ino=2007 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 85.406734][ T2200] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.432874][ T2200] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.496179][ T2200] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.689315][ T2200] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.699276][ T28] audit: type=1400 audit(1775595172.150:359): avc: denied { getattr } for pid=3041 comm="dhcpcd" path="/run/udev/data/n26" dev="tmpfs" ino=2007 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 87.234878][ T28] audit: type=1400 audit(1775595174.140:360): avc: denied { create } for pid=4725 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 87.370565][ T28] audit: type=1400 audit(1775595174.140:361): avc: denied { write } for pid=4725 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.sl0.link" dev="tmpfs" ino=2022 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 87.518747][ T28] audit: type=1400 audit(1775595174.140:362): avc: denied { append } for pid=4725 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" dev="tmpfs" ino=2022 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 87.669945][ T28] audit: type=1400 audit(1775595174.200:363): avc: denied { write } for pid=4749 comm="syz.2.311" name="ipv6_route" dev="proc" ino=4026532712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 87.815979][ T28] audit: type=1400 audit(1775595174.200:364): avc: denied { unlink } for pid=4755 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=2022 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 88.215468][ T28] audit: type=1400 audit(1775595175.140:365): avc: denied { create } for pid=4743 comm="syz.0.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.254310][ T4744] pim6reg: entered allmulticast mode [ 88.310455][ T4744] pim6reg: left allmulticast mode [ 88.323654][ T28] audit: type=1400 audit(1775595175.160:366): avc: denied { setopt } for pid=4743 comm="syz.0.310" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 89.981331][ T4843] netlink: 'syz.3.323': attribute type 39 has an invalid length. [ 90.139918][ T4847] netlink: 76 bytes leftover after parsing attributes in process `syz.1.322'. [ 90.189478][ T4846] syzkaller0: entered promiscuous mode [ 90.205544][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 90.205561][ T28] audit: type=1326 audit(1775595177.130:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4836 comm="syz.0.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f375362c819 code=0x7ffc0000 [ 90.237441][ T28] audit: type=1326 audit(1775595177.130:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4836 comm="syz.0.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f375362c819 code=0x7ffc0000 [ 90.301454][ T4860] syzkaller0: entered promiscuous mode [ 90.312336][ T4860] syzkaller0: entered allmulticast mode [ 90.320045][ T28] audit: type=1326 audit(1775595177.130:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4836 comm="syz.0.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f375362c819 code=0x7ffc0000 [ 90.344197][ T28] audit: type=1326 audit(1775595177.190:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4836 comm="syz.0.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f375362c819 code=0x7ffc0000 [ 90.370452][ T28] audit: type=1326 audit(1775595177.190:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4836 comm="syz.0.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f375362c582 code=0x7ffc0000 [ 90.414971][ T28] audit: type=1326 audit(1775595177.190:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4836 comm="syz.0.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f375362c617 code=0x7ffc0000 [ 90.440130][ T28] audit: type=1326 audit(1775595177.190:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4836 comm="syz.0.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f37535e9511 code=0x7ffc0000 [ 90.484431][ T28] audit: type=1326 audit(1775595177.190:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4836 comm="syz.0.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f375362d609 code=0x7ffc0000 [ 90.508471][ T28] audit: type=1326 audit(1775595177.190:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4836 comm="syz.0.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f37535e957b code=0x7ffc0000 [ 90.532846][ T28] audit: type=1326 audit(1775595177.190:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4836 comm="syz.0.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f375362c819 code=0x7ffc0000 [ 91.995725][ T4885] loop1: detected capacity change from 0 to 512 [ 92.991353][ T4885] EXT4-fs warning (device loop1): ext4_enable_quotas:7261: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 93.010572][ T4885] EXT4-fs (loop1): mount failed [ 94.275354][ T4914] loop1: detected capacity change from 0 to 512 [ 94.300475][ T4917] netlink: 20 bytes leftover after parsing attributes in process `syz.3.340'. [ 94.320710][ T4914] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.401227][ T4920] netlink: 4 bytes leftover after parsing attributes in process `syz.0.342'. [ 94.876012][ T4916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.342'. [ 95.066042][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.559108][ T28] kauditd_printk_skb: 91 callbacks suppressed [ 95.559127][ T28] audit: type=1400 audit(1775595182.480:512): avc: denied { write } for pid=4935 comm="syz.0.346" path="socket:[10551]" dev="sockfs" ino=10551 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 95.589894][ T28] audit: type=1400 audit(1775595182.520:513): avc: denied { mounton } for pid=4926 comm="syz.3.344" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 95.921399][ T4946] netlink: 'syz.3.349': attribute type 1 has an invalid length. [ 95.949452][ T4946] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 95.960500][ T4946] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 96.034716][ T4948] bond2: (slave gretap1): making interface the new active one [ 96.047405][ T4948] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 96.093761][ T4941] loop4: detected capacity change from 0 to 1024 [ 96.098495][ T4946] macvlan2: entered promiscuous mode [ 96.105777][ T4946] macvlan2: entered allmulticast mode [ 96.111610][ T4946] bond2: entered promiscuous mode [ 96.116821][ T4946] gretap1: entered promiscuous mode [ 96.119384][ T28] audit: type=1400 audit(1775595183.030:514): avc: denied { ioctl } for pid=4949 comm="syz.0.350" path="socket:[10565]" dev="sockfs" ino=10565 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 96.122564][ T4946] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 96.158073][ T4946] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 96.170171][ T4946] bond2: left promiscuous mode [ 96.175293][ T4941] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 96.175543][ T4946] gretap1: left promiscuous mode [ 96.194480][ T4941] System zones: 0-1, 3-36 [ 96.202407][ T4941] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.347: bad orphan inode 134217728 [ 96.213424][ T4941] loop4: lost filesystem error report for type 5 error -117 [ 96.214333][ T4941] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.234561][ T28] audit: type=1400 audit(1775595183.140:515): avc: denied { connect } for pid=4954 comm="syz.2.351" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 96.268512][ T28] audit: type=1400 audit(1775595183.140:516): avc: denied { write } for pid=4954 comm="syz.2.351" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 96.289210][ T28] audit: type=1400 audit(1775595183.150:517): avc: denied { sqpoll } for pid=4955 comm="syz.0.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 96.325421][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.389726][ T4973] syzkaller0: entered promiscuous mode [ 96.411085][ T4974] tipc: Enabled bearer , priority 0 [ 96.420702][ T4974] syzkaller0: entered promiscuous mode [ 96.427031][ T4957] netlink: 3036 bytes leftover after parsing attributes in process `syz.2.351'. [ 96.442314][ T28] audit: type=1400 audit(1775595183.340:518): avc: denied { getopt } for pid=4954 comm="syz.2.351" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 96.469026][ T4974] syzkaller0: entered allmulticast mode [ 96.495580][ T4974] tipc: Resetting bearer [ 96.502860][ T4972] tipc: Resetting bearer [ 96.519110][ T4972] tipc: Disabling bearer [ 96.564570][ T4988] netlink: 'syz.3.360': attribute type 12 has an invalid length. [ 96.618225][ T4993] loop4: detected capacity change from 0 to 512 [ 96.625217][ T4993] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 96.895613][ T28] audit: type=1400 audit(1775595183.820:519): avc: denied { create } for pid=5004 comm="syz.4.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 97.025555][ T5011] syzkaller0: entered promiscuous mode [ 97.031475][ T5011] syzkaller0: entered allmulticast mode [ 97.231031][ T5014] netlink: 24 bytes leftover after parsing attributes in process `syz.3.368'. [ 97.565238][ T5018] wg0: Caught tx_queue_len zero misconfig [ 98.027700][ T5031] tipc: Started in network mode [ 98.048362][ T5031] tipc: Node identity eed6e6456f37, cluster identity 4711 [ 98.175192][ T5031] tipc: Enabled bearer , priority 0 [ 98.206133][ T5031] syzkaller0: entered promiscuous mode [ 98.816430][ T5034] loop4: detected capacity change from 0 to 256 [ 98.908148][ T5034] FAT-fs (loop4): Directory bread(block 64) failed [ 98.914888][ T5034] FAT-fs (loop4): Directory bread(block 65) failed [ 98.921622][ T5034] FAT-fs (loop4): Directory bread(block 66) failed [ 98.928484][ T5034] FAT-fs (loop4): Directory bread(block 67) failed [ 98.935180][ T5034] FAT-fs (loop4): Directory bread(block 68) failed [ 98.941849][ T5034] FAT-fs (loop4): Directory bread(block 69) failed [ 98.948616][ T5034] FAT-fs (loop4): Directory bread(block 70) failed [ 98.955297][ T5034] FAT-fs (loop4): Directory bread(block 71) failed [ 98.961977][ T5034] FAT-fs (loop4): Directory bread(block 72) failed [ 98.968687][ T5034] FAT-fs (loop4): Directory bread(block 73) failed [ 98.995997][ T5031] syzkaller0: entered allmulticast mode [ 99.087730][ T5034] netlink: 28 bytes leftover after parsing attributes in process `syz.4.374'. [ 99.096885][ T5034] netlink: 2 bytes leftover after parsing attributes in process `syz.4.374'. [ 99.106332][ T5034] netlink: 28 bytes leftover after parsing attributes in process `syz.4.374'. [ 99.115629][ T5034] netlink: 28 bytes leftover after parsing attributes in process `syz.4.374'. [ 99.124522][ T5034] netlink: 2 bytes leftover after parsing attributes in process `syz.4.374'. [ 99.134120][ T5034] netlink: 28 bytes leftover after parsing attributes in process `syz.4.374'. [ 99.143355][ T5034] netlink: 28 bytes leftover after parsing attributes in process `syz.4.374'. [ 99.152377][ T5034] netlink: 2 bytes leftover after parsing attributes in process `syz.4.374'. [ 99.218492][ T5038] tipc: Resetting bearer [ 99.261075][ T5030] tipc: Resetting bearer [ 99.288253][ T5030] tipc: Disabling bearer [ 99.732066][ T5047] loop1: detected capacity change from 0 to 8192 [ 99.762909][ T5047] bio_check_eod: 9623 callbacks suppressed [ 99.762927][ T5047] syz.1.378: attempt to access beyond end of device [ 99.762927][ T5047] loop1: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 99.857565][ T5047] buffer_io_error: 9623 callbacks suppressed [ 99.857582][ T5047] Buffer I/O error on dev loop1, logical block 57847, async page read [ 99.919648][ T5051] syz.1.378: attempt to access beyond end of device [ 99.919648][ T5051] loop1: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 99.977475][ T5051] Buffer I/O error on dev loop1, logical block 57847, async page read [ 100.015116][ T5047] syz.1.378: attempt to access beyond end of device [ 100.015116][ T5047] loop1: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 100.080196][ T5047] Buffer I/O error on dev loop1, logical block 57847, async page read [ 100.114243][ T5051] syz.1.378: attempt to access beyond end of device [ 100.114243][ T5051] loop1: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 100.274341][ T5051] Buffer I/O error on dev loop1, logical block 57847, async page read [ 100.285101][ T5054] syz.1.378: attempt to access beyond end of device [ 100.285101][ T5054] loop1: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 100.319835][ T5063] loop2: detected capacity change from 0 to 512 [ 100.332097][ T5054] Buffer I/O error on dev loop1, logical block 57847, async page read [ 100.340637][ T5050] syz.1.378: attempt to access beyond end of device [ 100.340637][ T5050] loop1: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 100.356369][ T5050] Buffer I/O error on dev loop1, logical block 57847, async page read [ 100.365267][ T5054] syz.1.378: attempt to access beyond end of device [ 100.365267][ T5054] loop1: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 100.401763][ T5054] Buffer I/O error on dev loop1, logical block 57847, async page read [ 100.574001][ T5063] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.382: bg 0: block 248: padding at end of block bitmap is not set [ 100.601694][ T5051] syz.1.378: attempt to access beyond end of device [ 100.601694][ T5051] loop1: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 100.651039][ T5063] loop2: lost filesystem error report for type 5 error -117 [ 100.651690][ T5063] Quota error (device loop2): write_blk: dquota write failed [ 100.659064][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 100.659089][ C0] EXT4-fs (loop2): last error at time 1775595187: ext4_validate_block_bitmap:441 [ 100.747251][ T5051] Buffer I/O error on dev loop1, logical block 57847, async page read [ 100.914116][ T5063] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 101.193415][ T5063] EXT4-fs error (device loop2): ext4_acquire_dquot:7026: comm syz.2.382: Failed to acquire dquot type 1 [ 101.215127][ T5063] loop2: lost filesystem error report for type 5 error -28 [ 101.226854][ T5063] EXT4-fs (loop2): 1 truncate cleaned up [ 101.265423][ T5063] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.294919][ T5063] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.331068][ T28] audit: type=1400 audit(1775595188.250:520): avc: denied { shutdown } for pid=5060 comm="syz.2.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 101.566706][ T5063] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 101.577745][ T28] audit: type=1400 audit(1775595188.490:521): avc: denied { remove_name } for pid=5060 comm="syz.2.382" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 101.604891][ T5063] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 101.605109][ T5087] __nla_validate_parse: 22 callbacks suppressed [ 101.605123][ T5087] netlink: 16 bytes leftover after parsing attributes in process `syz.1.387'. [ 101.622739][ T5063] EXT4-fs error (device loop2): ext4_acquire_dquot:7026: comm syz.2.382: Failed to acquire dquot type 1 [ 101.680041][ T5092] netlink: 60 bytes leftover after parsing attributes in process `syz.3.388'. [ 101.868507][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.877852][ T3684] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5 [ 101.893650][ T3684] EXT4-fs error (device loop2): ext4_release_dquot:7062: comm kworker/u8:18: Failed to release dquot type 1 [ 101.927263][ T3684] loop2: lost filesystem error report for type 5 error -117 [ 102.137364][ T5104] loop4: detected capacity change from 0 to 2048 [ 102.152029][ T28] audit: type=1400 audit(1775595188.980:522): avc: denied { read } for pid=5099 comm="syz.2.391" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 102.515824][ T5104] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.536685][ T5109] syzkaller0: entered promiscuous mode [ 102.542286][ T5109] syzkaller0: entered allmulticast mode [ 102.594916][ T5104] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.613815][ T5104] netlink: 32 bytes leftover after parsing attributes in process `syz.4.392'. [ 102.622900][ T5104] tipc: Invalid UDP bearer configuration [ 102.622914][ T5104] tipc: Enabling of bearer rejected, failed to enable media [ 102.688179][ T5104] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.392: bg 0: block 345: padding at end of block bitmap is not set [ 102.690824][ T28] audit: type=1400 audit(1775595189.610:523): avc: denied { read } for pid=5103 comm="syz.4.392" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 102.794982][ T5104] EXT4-fs (loop4): Remounting filesystem read-only [ 102.816456][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.840574][ T5116] loop2: detected capacity change from 0 to 512 [ 102.859522][ T5116] EXT4-fs: Ignoring removed mblk_io_submit option [ 103.198888][ T5116] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 103.346917][ T5116] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.373740][ T5116] ext4 filesystem being mounted at /65/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.509719][ T5130] netlink: 20 bytes leftover after parsing attributes in process `syz.1.400'. [ 103.879324][ T5135] loop4: detected capacity change from 0 to 512 [ 103.942145][ T5135] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.402: bg 0: block 248: padding at end of block bitmap is not set [ 104.012336][ T5135] loop4: lost filesystem error report for type 5 error -117 [ 104.013432][ T5135] Quota error (device loop4): write_blk: dquota write failed [ 104.020838][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 104.020860][ C1] EXT4-fs (loop4): last error at time 1775595190: ext4_validate_block_bitmap:441 [ 104.044434][ T5135] EXT4-fs error (device loop4): ext4_acquire_dquot:7026: comm syz.4.402: Failed to acquire dquot type 1 [ 104.056385][ T5135] loop4: lost filesystem error report for type 5 error -28 [ 104.057139][ T5135] EXT4-fs (loop4): 1 truncate cleaned up [ 104.070727][ T5135] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.083651][ T5135] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.165973][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.325012][ T5135] EXT4-fs error (device loop4): ext4_acquire_dquot:7026: comm syz.4.402: Failed to acquire dquot type 1 [ 104.343237][ T5142] syzkaller0: entered promiscuous mode [ 104.348836][ T5142] syzkaller0: entered allmulticast mode [ 104.375245][ T5145] netlink: 'syz.1.405': attribute type 1 has an invalid length. [ 104.388714][ T5145] bond1: entered promiscuous mode [ 104.395220][ T5145] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.426968][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.602179][ T5145] netlink: 28 bytes leftover after parsing attributes in process `syz.1.405'. [ 104.611977][ T5145] bond1: entered allmulticast mode [ 104.637352][ T5145] bond1: (slave bridge1): making interface the new active one [ 104.645269][ T5145] bridge1: entered promiscuous mode [ 104.650865][ T5145] bridge1: entered allmulticast mode [ 104.662304][ T5145] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 104.911613][ T3684] EXT4-fs error (device loop4): ext4_release_dquot:7062: comm kworker/u8:18: Failed to release dquot type 1 [ 104.923625][ T3684] loop4: lost filesystem error report for type 5 error -117 [ 107.934086][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 107.934104][ T28] audit: type=1400 audit(1775595194.850:524): avc: denied { read } for pid=5179 comm="syz.0.413" lport=36161 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 108.163899][ T28] audit: type=1400 audit(1775595194.950:525): avc: denied { read } for pid=5179 comm="syz.0.413" path="socket:[12098]" dev="sockfs" ino=12098 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 108.244889][ T28] audit: type=1326 audit(1775595195.050:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5185 comm="syz.3.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfd8e0c819 code=0x7ffc0000 [ 108.274817][ T28] audit: type=1326 audit(1775595195.050:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5185 comm="syz.3.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfd8e0c819 code=0x7ffc0000 [ 108.309379][ T28] audit: type=1326 audit(1775595195.050:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5185 comm="syz.3.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfd8e0c819 code=0x7ffc0000 [ 108.337391][ T28] audit: type=1326 audit(1775595195.060:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5185 comm="syz.3.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbfd8e0c819 code=0x7ffc0000 [ 108.365026][ T5188] loop1: detected capacity change from 0 to 2048 [ 108.371478][ T28] audit: type=1326 audit(1775595195.060:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5185 comm="syz.3.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfd8e0c819 code=0x7ffc0000 [ 108.382735][ T5188] EXT4-fs: Ignoring removed i_version option [ 108.408864][ T28] audit: type=1326 audit(1775595195.060:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5185 comm="syz.3.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfd8e0c819 code=0x7ffc0000 [ 108.446111][ T28] audit: type=1326 audit(1775595195.060:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5185 comm="syz.3.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfd8e0c819 code=0x7ffc0000 [ 108.479655][ T28] audit: type=1326 audit(1775595195.060:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5185 comm="syz.3.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfd8e0c819 code=0x7ffc0000 [ 108.545257][ T5188] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.584220][ T5188] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.639528][ T5196] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5196 comm=syz.4.417 [ 108.683298][ T5194] loop2: detected capacity change from 0 to 512 [ 108.708247][ T5194] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 108.746270][ T5188] netlink: zone id is out of range [ 108.773101][ T5194] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 108.774514][ T5188] netlink: zone id is out of range [ 108.793109][ T5194] infiniband syz!: RDMA CMA: cma_listen_on_dev, error -98 [ 108.796998][ T5188] netlink: zone id is out of range [ 108.840492][ T5188] netlink: zone id is out of range [ 108.849064][ T5188] netlink: zone id is out of range [ 108.855190][ T5188] netlink: zone id is out of range [ 108.861005][ T5188] netlink: zone id is out of range [ 108.870573][ T5188] netlink: zone id is out of range [ 108.877177][ T5188] netlink: zone id is out of range [ 108.883217][ T5188] netlink: zone id is out of range [ 108.905215][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.970002][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.141683][ T5212] loop2: detected capacity change from 0 to 128 [ 109.306376][ T5226] netlink: 8 bytes leftover after parsing attributes in process `syz.4.427'. [ 109.317586][ T5226] netlink: 8 bytes leftover after parsing attributes in process `syz.4.427'. [ 109.326917][ T5226] netlink: 8 bytes leftover after parsing attributes in process `syz.4.427'. [ 109.336438][ T5226] netlink: 8 bytes leftover after parsing attributes in process `syz.4.427'. [ 109.345589][ T5226] netlink: 8 bytes leftover after parsing attributes in process `syz.4.427'. [ 110.019281][ T5248] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 110.067428][ T5241] netlink: 3036 bytes leftover after parsing attributes in process `syz.0.434'. [ 111.125919][ T5273] IPv6: NLM_F_CREATE should be specified when creating new route [ 111.398310][ T5282] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_vlan, syncid = 2, id = 0 [ 111.451427][ T5283] netlink: 28 bytes leftover after parsing attributes in process `syz.2.446'. [ 111.957669][ T5290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.448'. [ 112.103668][ T5290] bond3: option lacp_active: invalid value (5) [ 112.180567][ T5290] bond3 (unregistering): Released all slaves [ 112.608563][ T5298] loop4: detected capacity change from 0 to 1024 [ 112.625515][ T5298] EXT4-fs: Ignoring removed mblk_io_submit option [ 112.656344][ T5298] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 112.676470][ T5298] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.772416][ T5302] syzkaller0: entered promiscuous mode [ 112.784812][ T5302] syzkaller0: entered allmulticast mode [ 113.456339][ T5307] netlink: 20 bytes leftover after parsing attributes in process `syz.1.452'. [ 113.504934][ T28] kauditd_printk_skb: 240 callbacks suppressed [ 113.504960][ T28] audit: type=1400 audit(1775595200.070:774): avc: denied { map } for pid=5297 comm="syz.4.450" path="/101/file0/cgroup.controllers" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 113.692239][ T5313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.789756][ T5313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.834676][ T28] audit: type=1400 audit(1775595200.750:775): avc: denied { write } for pid=5314 comm="syz.3.455" path="socket:[11125]" dev="sockfs" ino=11125 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 113.887653][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.944214][ T5317] net_ratelimit: 120 callbacks suppressed [ 113.944246][ T5317] netlink: zone id is out of range [ 113.960528][ T5317] netlink: zone id is out of range [ 113.967266][ T5317] netlink: zone id is out of range [ 113.973392][ T5317] netlink: zone id is out of range [ 113.993936][ T5317] netlink: zone id is out of range [ 114.057605][ T5317] netlink: zone id is out of range [ 114.065114][ T5317] netlink: zone id is out of range [ 114.071020][ T28] audit: type=1400 audit(1775595200.990:776): avc: denied { setopt } for pid=5324 comm="syz.4.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 114.090948][ T5317] netlink: zone id is out of range [ 114.093794][ T28] audit: type=1400 audit(1775595200.990:777): avc: denied { listen } for pid=5324 comm="syz.4.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 114.098806][ T5317] netlink: zone id is out of range [ 114.180530][ T5317] netlink: zone id is out of range [ 114.265935][ T28] audit: type=1400 audit(1775595200.990:778): avc: denied { accept } for pid=5324 comm="syz.4.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 117.914070][ T5341] loop2: detected capacity change from 0 to 128 [ 118.092219][ T5357] IPv6: NLM_F_CREATE should be specified when creating new route [ 119.107353][ T5360] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_vlan, syncid = 2, id = 0 [ 119.844338][ T5376] netlink: 20 bytes leftover after parsing attributes in process `syz.1.469'. [ 119.914020][ T28] audit: type=1400 audit(1775595206.830:779): avc: denied { getopt } for pid=5381 comm="syz.0.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 119.937128][ T5383] veth1_to_bond: entered allmulticast mode [ 120.298346][ T5381] veth1_to_bond: left allmulticast mode [ 120.691429][ T5396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.476'. [ 120.701233][ T5396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.476'. [ 120.710332][ T5396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.476'. [ 120.719558][ T5396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.476'. [ 121.130591][ T5402] netlink: 'syz.3.479': attribute type 1 has an invalid length. [ 121.153411][ T5403] IPv6: NLM_F_CREATE should be specified when creating new route [ 121.221395][ T5402] bond3: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 121.235186][ T5402] netlink: 4 bytes leftover after parsing attributes in process `syz.3.479'. [ 121.245623][ T5402] bond3 (unregistering): (slave ip6gretap2): Releasing backup interface [ 121.263755][ T5402] bond3 (unregistering): Released all slaves [ 121.321456][ T5411] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_vlan, syncid = 2, id = 0 [ 121.459317][ T28] audit: type=1400 audit(1775595208.380:780): avc: denied { setopt } for pid=5412 comm="syz.0.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 121.481308][ T5413] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 121.507586][ T5415] loop1: detected capacity change from 0 to 128 [ 121.645343][ T28] audit: type=1326 audit(1775595208.510:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5414 comm="syz.1.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b303ac819 code=0x7ffc0000 [ 121.834826][ T28] audit: type=1326 audit(1775595208.510:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5414 comm="syz.1.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b303ac819 code=0x7ffc0000 [ 121.861360][ T28] audit: type=1326 audit(1775595208.510:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5414 comm="syz.1.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f1b303ac819 code=0x7ffc0000 [ 121.887042][ T28] audit: type=1326 audit(1775595208.540:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5414 comm="syz.1.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b303ac819 code=0x7ffc0000 [ 121.920366][ T28] audit: type=1326 audit(1775595208.540:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5414 comm="syz.1.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b303ac819 code=0x7ffc0000 [ 121.949210][ T28] audit: type=1326 audit(1775595208.540:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5414 comm="syz.1.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1b303ac819 code=0x7ffc0000 [ 121.973036][ T28] audit: type=1326 audit(1775595208.550:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5414 comm="syz.1.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b303ac819 code=0x7ffc0000 [ 122.054805][ T28] audit: type=1326 audit(1775595208.550:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5414 comm="syz.1.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b303ac819 code=0x7ffc0000 [ 122.116950][ T5430] netlink: 1010 bytes leftover after parsing attributes in process `syz.4.488'. [ 122.126198][ T5430] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 122.238200][ T5445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.489'. [ 122.252282][ T5445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.489'. [ 122.266290][ T5443] loop4: detected capacity change from 0 to 256 [ 122.304263][ T5443] FAT-fs (loop4): Directory bread(block 64) failed [ 122.327567][ T5447] netlink: 12 bytes leftover after parsing attributes in process `syz.0.486'. [ 122.340820][ T5443] FAT-fs (loop4): Directory bread(block 65) failed [ 122.359306][ T5443] FAT-fs (loop4): Directory bread(block 66) failed [ 122.366270][ T5443] FAT-fs (loop4): Directory bread(block 67) failed [ 122.373080][ T5443] FAT-fs (loop4): Directory bread(block 68) failed [ 122.380058][ T5443] FAT-fs (loop4): Directory bread(block 69) failed [ 122.398060][ T5443] FAT-fs (loop4): Directory bread(block 70) failed [ 122.405164][ T5443] FAT-fs (loop4): Directory bread(block 71) failed [ 122.412214][ T5443] FAT-fs (loop4): Directory bread(block 72) failed [ 122.447492][ T5443] FAT-fs (loop4): Directory bread(block 73) failed [ 122.569372][ T5443] syzkaller0: entered allmulticast mode [ 122.617581][ T5443] syzkaller0: entered promiscuous mode [ 122.647125][ T5443] syzkaller0 (unregistering): left promiscuous mode [ 122.673518][ T5443] syzkaller0 (unregistering): left allmulticast mode [ 122.854969][ T5453] syzkaller0: entered promiscuous mode [ 122.876007][ T5457] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_vlan, syncid = 2, id = 0 [ 123.536972][ T5464] veth1_to_bond: entered allmulticast mode [ 123.853585][ T5462] veth1_to_bond: left allmulticast mode [ 123.922407][ T5487] netlink: 'syz.2.502': attribute type 4 has an invalid length. [ 123.966033][ T5482] loop4: detected capacity change from 0 to 128 [ 124.446654][ T5513] loop2: detected capacity change from 0 to 256 [ 124.510140][ T5513] FAT-fs (loop2): Directory bread(block 64) failed [ 124.516930][ T5513] FAT-fs (loop2): Directory bread(block 65) failed [ 124.523677][ T5513] FAT-fs (loop2): Directory bread(block 66) failed [ 124.530403][ T5513] FAT-fs (loop2): Directory bread(block 67) failed [ 124.537126][ T5513] FAT-fs (loop2): Directory bread(block 68) failed [ 124.543752][ T5513] FAT-fs (loop2): Directory bread(block 69) failed [ 124.550441][ T5513] FAT-fs (loop2): Directory bread(block 70) failed [ 124.557075][ T5513] FAT-fs (loop2): Directory bread(block 71) failed [ 124.563771][ T5513] FAT-fs (loop2): Directory bread(block 72) failed [ 124.570517][ T5513] FAT-fs (loop2): Directory bread(block 73) failed [ 124.731559][ T5512] loop1: detected capacity change from 0 to 128 [ 125.921608][ T3664] kworker/u8:10: attempt to access beyond end of device [ 125.921608][ T3664] loop1: rw=1, sector=153, nr_sectors = 8 limit=128 [ 125.964318][ T3664] kworker/u8:10: attempt to access beyond end of device [ 125.964318][ T3664] loop1: rw=1, sector=169, nr_sectors = 8 limit=128 [ 126.035036][ T3664] kworker/u8:10: attempt to access beyond end of device [ 126.035036][ T3664] loop1: rw=1, sector=185, nr_sectors = 8 limit=128 [ 126.073820][ T3664] kworker/u8:10: attempt to access beyond end of device [ 126.073820][ T3664] loop1: rw=1, sector=201, nr_sectors = 8 limit=128 [ 126.088175][ T3664] kworker/u8:10: attempt to access beyond end of device [ 126.088175][ T3664] loop1: rw=1, sector=217, nr_sectors = 8 limit=128 [ 126.102592][ T3664] kworker/u8:10: attempt to access beyond end of device [ 126.102592][ T3664] loop1: rw=1, sector=233, nr_sectors = 8 limit=128 [ 126.116085][ T3664] kworker/u8:10: attempt to access beyond end of device [ 126.116085][ T3664] loop1: rw=1, sector=249, nr_sectors = 8 limit=128 [ 126.129725][ T3664] kworker/u8:10: attempt to access beyond end of device [ 126.129725][ T3664] loop1: rw=1, sector=265, nr_sectors = 8 limit=128 [ 126.143274][ T3664] kworker/u8:10: attempt to access beyond end of device [ 126.143274][ T3664] loop1: rw=1, sector=281, nr_sectors = 8 limit=128 [ 126.161752][ T3664] kworker/u8:10: attempt to access beyond end of device [ 126.161752][ T3664] loop1: rw=1, sector=297, nr_sectors = 8 limit=128 [ 126.218437][ T5529] veth1_to_bond: entered allmulticast mode [ 126.390299][ T5528] veth1_to_bond: left allmulticast mode [ 126.513280][ T5534] loop1: detected capacity change from 0 to 256 [ 126.585039][ T5534] FAT-fs (loop1): Directory bread(block 64) failed [ 126.591988][ T5534] FAT-fs (loop1): Directory bread(block 65) failed [ 126.614216][ T5534] FAT-fs (loop1): Directory bread(block 66) failed [ 126.648014][ T5534] FAT-fs (loop1): Directory bread(block 67) failed [ 126.685049][ T5534] FAT-fs (loop1): Directory bread(block 68) failed [ 126.692183][ T5534] FAT-fs (loop1): Directory bread(block 69) failed [ 126.699210][ T5534] FAT-fs (loop1): Directory bread(block 70) failed [ 126.706683][ T5534] FAT-fs (loop1): Directory bread(block 71) failed [ 126.713609][ T5534] FAT-fs (loop1): Directory bread(block 72) failed [ 126.720374][ T5534] FAT-fs (loop1): Directory bread(block 73) failed [ 126.855147][ T28] kauditd_printk_skb: 242 callbacks suppressed [ 126.855164][ T28] audit: type=1400 audit(1775603405.771:1031): avc: denied { write } for pid=5533 comm="syz.1.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 126.935960][ T28] audit: type=1400 audit(1775603405.851:1032): avc: denied { read } for pid=5538 comm="syz.0.522" lport=47407 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 127.037836][ T28] audit: type=1400 audit(1775603405.911:1033): avc: denied { setopt } for pid=5538 comm="syz.0.522" lport=47407 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 127.183586][ T28] audit: type=1400 audit(1775603406.101:1034): avc: denied { write } for pid=5557 comm="syz.2.527" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 127.231701][ T28] audit: type=1400 audit(1775603406.101:1035): avc: denied { ioctl } for pid=5557 comm="syz.2.527" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 127.265376][ T28] audit: type=1400 audit(1775603406.101:1036): avc: denied { bind } for pid=5557 comm="syz.2.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 127.292408][ T5565] tipc: Cannot configure node identity twice [ 127.557644][ T5591] loop4: detected capacity change from 0 to 512 [ 127.591183][ T5587] syzkaller0: tun_net_xmit 28 [ 127.607273][ T5591] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 127.615410][ T5591] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 127.636204][ T5591] EXT4-fs (loop4): 1 truncate cleaned up [ 127.645329][ T5591] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.807477][ T5596] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 127.822432][ T28] audit: type=1400 audit(1775603406.731:1037): avc: denied { create } for pid=5590 comm="syz.4.535" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 127.889961][ T5597] xt_CT: You must specify a L4 protocol and not use inversions on it [ 127.965458][ T5598] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=46724 sclass=netlink_xfrm_socket pid=5598 comm=syz.4.535 [ 127.987988][ T28] audit: type=1400 audit(1775603406.911:1038): avc: denied { write } for pid=5590 comm="syz.4.535" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 128.206131][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.353940][ T5606] __nla_validate_parse: 30 callbacks suppressed [ 128.353979][ T5606] netlink: 16 bytes leftover after parsing attributes in process `syz.4.538'. [ 128.651882][ T28] audit: type=1400 audit(1775603407.571:1039): avc: denied { read } for pid=5621 comm="syz.0.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 129.166680][ T28] audit: type=1400 audit(1775603408.091:1040): avc: denied { mount } for pid=5626 comm="syz.3.544" name="/" dev="rpc_pipefs" ino=13082 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 129.392328][ T5633] netlink: 28 bytes leftover after parsing attributes in process `syz.3.545'. [ 132.306219][ T5692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.560'. [ 132.316491][ T5692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.560'. [ 132.326396][ T5692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.560'. [ 132.336280][ T5692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.560'. [ 133.156831][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 133.156854][ T28] audit: type=1400 audit(1775603412.071:1071): avc: denied { module_load } for pid=5696 comm="syz.3.563" path="/112/bus" dev="tmpfs" ino=603 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 133.195933][ T5707] Invalid ELF header magic: != ELF [ 133.248823][ T5710] loop1: detected capacity change from 0 to 128 [ 133.305707][ T5710] vfat: Unknown parameter 'ÿ' [ 133.508333][ T5712] netlink: 'syz.2.567': attribute type 39 has an invalid length. [ 133.736283][ T5714] program syz.4.568 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 133.771701][ T28] audit: type=1400 audit(1775603412.671:1072): avc: denied { bind } for pid=5713 comm="syz.4.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 133.870645][ T28] audit: type=1400 audit(1775603412.671:1073): avc: denied { node_bind } for pid=5713 comm="syz.4.568" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 133.928708][ T28] audit: type=1400 audit(1775603412.671:1074): avc: denied { write } for pid=5713 comm="syz.4.568" lport=63558 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 136.231740][ T5749] loop1: detected capacity change from 0 to 512 [ 136.239251][ T5749] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 136.254215][ T5749] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 136.262255][ T5749] System zones: 1-12 [ 136.333940][ T5749] EXT4-fs (loop1): 1 truncate cleaned up [ 136.340551][ T5749] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.982642][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.351664][ T5801] bond_slave_0: entered promiscuous mode [ 138.357486][ T5801] bond_slave_1: entered promiscuous mode [ 138.363508][ T5801] vlan3: entered promiscuous mode [ 138.368801][ T5801] bond0: entered promiscuous mode [ 139.924229][ T5810] netlink: 20 bytes leftover after parsing attributes in process `syz.1.593'. [ 140.076913][ T28] audit: type=1400 audit(1775603418.861:1075): avc: denied { mount } for pid=5809 comm="syz.1.593" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 140.118005][ T28] audit: type=1400 audit(1775603418.861:1076): avc: denied { remount } for pid=5809 comm="syz.1.593" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 140.266702][ T28] audit: type=1400 audit(1775603418.861:1077): avc: denied { unmount } for pid=5809 comm="syz.1.593" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 140.451753][ T28] audit: type=1400 audit(1775603419.371:1078): avc: denied { setattr } for pid=5812 comm="syz.0.594" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 140.477775][ T5825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.600'. [ 140.543526][ T5794] net_ratelimit: 120 callbacks suppressed [ 140.543548][ T5794] Set syz1 is full, maxelem 65536 reached [ 140.636884][ T28] audit: type=1400 audit(1775603419.561:1079): avc: denied { map } for pid=5827 comm="syz.1.601" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 140.663111][ T28] audit: type=1400 audit(1775603419.561:1080): avc: denied { execute } for pid=5827 comm="syz.1.601" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 140.717496][ T28] audit: type=1400 audit(1775603419.641:1081): avc: denied { write } for pid=5821 comm="syz.3.599" name="file0" dev="tmpfs" ino=619 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 140.758952][ T28] audit: type=1400 audit(1775603419.671:1082): avc: denied { open } for pid=5821 comm="syz.3.599" path="/115/file0" dev="tmpfs" ino=619 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 140.785996][ T28] audit: type=1400 audit(1775603419.671:1083): avc: denied { ioctl } for pid=5821 comm="syz.3.599" path="/115/file0" dev="tmpfs" ino=619 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 141.702900][ T5841] loop4: detected capacity change from 0 to 4096 [ 141.770255][ T5841] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.154441][ T28] audit: type=1400 audit(1775603422.041:1084): avc: denied { setopt } for pid=5847 comm="syz.1.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 144.307345][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.405439][ T5881] tipc: Failed to remove unknown binding: 66,0,0/0:3049313652/3049313654 [ 145.406005][ T5881] tipc: Failed to remove unknown binding: 66,0,0/0:3049313652/3049313653 [ 145.751120][ T28] audit: type=1326 audit(1775603424.671:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5886 comm="syz.0.619" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f375362c819 code=0x0 [ 147.185399][ T5926] netlink: 20 bytes leftover after parsing attributes in process `syz.1.628'. [ 147.946434][ T5943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.956160][ T5936] loop4: detected capacity change from 0 to 512 [ 147.979223][ T5943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.027982][ T5936] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿ' [ 148.057967][ T28] audit: type=1400 audit(1775603426.971:1086): avc: denied { create } for pid=5951 comm="syz.1.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 148.105255][ T28] audit: type=1400 audit(1775603426.971:1087): avc: denied { read } for pid=5951 comm="syz.1.638" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 148.144795][ T28] audit: type=1400 audit(1775603426.971:1088): avc: denied { open } for pid=5951 comm="syz.1.638" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 148.592896][ T5969] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 148.606118][ T5972] netlink: 14 bytes leftover after parsing attributes in process `syz.4.641'. [ 148.656324][ T5972] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.751560][ T5972] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.840913][ T5972] bond0 (unregistering): Released all slaves [ 148.948731][ T5978] netlink: 20 bytes leftover after parsing attributes in process `syz.2.643'. [ 148.988973][ T5973] Set syz1 is full, maxelem 65536 reached [ 151.990709][ T6007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.649'. [ 152.000352][ T6007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.649'. [ 152.009423][ T6007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.649'. [ 152.018492][ T6007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.649'. [ 152.027569][ T6007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.649'. [ 152.937476][ T6017] netlink: 20 bytes leftover after parsing attributes in process `syz.0.651'. [ 153.237938][ T6017] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.245239][ T6017] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.366108][ T6017] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.377053][ T6017] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.437132][ T3683] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.544896][ T3683] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.553598][ T3683] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.562317][ T3683] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.638874][ T28] audit: type=1400 audit(1775603432.551:1089): avc: denied { ioctl } for pid=6021 comm="syz.4.654" path="socket:[14798]" dev="sockfs" ino=14798 ioctlcmd=0x8901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 153.705547][ T6034] tipc: New replicast peer: 255.255.255.255 [ 153.711909][ T6034] tipc: Enabled bearer , priority 10 [ 154.266422][ T6048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.658'. [ 155.616571][ T6068] tipc: Failed to remove unknown binding: 66,0,0/4:3440526738/3440526740 [ 155.659516][ T6068] tipc: Failed to remove unknown binding: 66,0,0/4:3440526738/3440526739 [ 157.608398][ T6089] loop2: detected capacity change from 0 to 512 [ 157.665292][ T28] audit: type=1400 audit(1775603436.581:1090): avc: denied { mounton } for pid=6085 comm="syz.2.671" path="/file1" dev="ramfs" ino=14267 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 157.756108][ T6106] netlink: 16 bytes leftover after parsing attributes in process `syz.4.675'. [ 157.855337][ T6089] EXT4-fs (loop2): orphan cleanup on readonly fs [ 157.997656][ T6089] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.671: invalid indirect mapped block 256 (level 2) [ 158.117367][ T6101] syzkaller0: entered promiscuous mode [ 158.123701][ T6089] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 158.124980][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 158.141609][ C1] EXT4-fs (loop2): initial error at time 1775603437: ext4_free_branches:1023: inode 11 [ 158.152541][ C1] EXT4-fs (loop2): last error at time 1775603437: ext4_free_branches:1023: inode 11 [ 158.195749][ T6101] syzkaller0: entered allmulticast mode [ 158.233801][ T6089] EXT4-fs (loop2): 2 truncates cleaned up [ 158.330334][ T6089] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 158.553044][ T6123] syzkaller0: entered promiscuous mode [ 158.557036][ T6089] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.559136][ T6123] syzkaller0: entered allmulticast mode [ 159.121015][ T6128] netlink: 44 bytes leftover after parsing attributes in process `syz.4.681'. [ 159.172499][ T6128] loop4: detected capacity change from 0 to 128 [ 160.524519][ T6148] loop4: detected capacity change from 0 to 256 [ 160.576130][ T6148] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 161.103612][ T6158] loop2: detected capacity change from 0 to 512 [ 161.191475][ T6158] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 161.208560][ T6158] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 161.249099][ T6158] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 161.261749][ T6158] System zones: 0-2, 18-18, 34-35 [ 161.374225][ T6158] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.431385][ T6158] netlink: 'syz.2.691': attribute type 12 has an invalid length. [ 161.542690][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.009254][ T6177] loop2: detected capacity change from 0 to 1024 [ 162.090941][ T6177] EXT4-fs: Ignoring removed bh option [ 162.178136][ T6177] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.193453][ T6177] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.230518][ T28] audit: type=1400 audit(1775603441.151:1091): avc: denied { read write } for pid=6175 comm="syz.2.696" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 162.273446][ T28] audit: type=1400 audit(1775603441.151:1092): avc: denied { open } for pid=6175 comm="syz.2.696" path="/120/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 162.819145][ T3672] EXT4-fs error (device loop2): ext4_map_blocks:828: inode #15: comm kworker/u8:14: lblock 0 mapped to illegal pblock 0 (length 6) [ 162.879724][ T3672] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 162.926633][ T3672] EXT4-fs (loop2): This should not happen!! Data will be lost [ 162.926633][ T3672] [ 162.961694][ T3683] EXT4-fs error (device loop2): ext4_map_blocks:828: inode #15: block 8: comm kworker/u8:17: lblock 8 mapped to illegal pblock 8 (length 8) [ 162.997571][ T3683] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 163.020780][ T3683] EXT4-fs (loop2): This should not happen!! Data will be lost [ 163.020780][ T3683] [ 163.035764][ T3315] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 163.061601][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 163.537925][ T28] audit: type=1400 audit(1775603442.131:1093): avc: denied { write } for pid=6198 comm="syz.2.701" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 165.879650][ T28] audit: type=1400 audit(1775603444.801:1094): avc: denied { allowed } for pid=6234 comm="syz.4.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 165.953231][ T28] audit: type=1400 audit(1775603444.801:1095): avc: denied { create } for pid=6234 comm="syz.4.710" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 166.053886][ T28] audit: type=1400 audit(1775603444.851:1096): avc: denied { recv } for pid=3311 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.1.82 dest=52734 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 166.118586][ T6245] netlink: 24 bytes leftover after parsing attributes in process `syz.4.712'. [ 166.197141][ T28] audit: type=1400 audit(1775603444.851:1097): avc: denied { read write } for pid=3311 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 166.278498][ T6248] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6248 comm=syz.4.712 [ 166.304778][ T28] audit: type=1400 audit(1775603444.851:1098): avc: denied { open } for pid=3311 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 166.375858][ T6248] netlink: 'syz.4.712': attribute type 1 has an invalid length. [ 166.415213][ T6248] netlink: 5 bytes leftover after parsing attributes in process `syz.4.712'. [ 166.434975][ T28] audit: type=1400 audit(1775603444.851:1099): avc: denied { ioctl } for pid=3311 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 166.533714][ T28] audit: type=1400 audit(1775603444.871:1100): avc: denied { prog_load } for pid=6236 comm="syz.1.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 166.602892][ T6237] loop1: detected capacity change from 0 to 512 [ 166.834120][ T6237] EXT4-fs (loop1): orphan cleanup on readonly fs [ 166.881782][ T6237] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.711: invalid indirect mapped block 256 (level 2) [ 166.903232][ T6237] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 166.914734][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 166.930399][ C0] EXT4-fs (loop1): initial error at time 1775603445: ext4_free_branches:1023: inode 11 [ 166.940104][ C0] EXT4-fs (loop1): last error at time 1775603445: ext4_free_branches:1023: inode 11 [ 166.953616][ T6237] EXT4-fs (loop1): 2 truncates cleaned up [ 167.001282][ T6237] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 167.084502][ T6237] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.268860][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 167.268878][ T28] audit: type=1400 audit(1775603446.191:1129): avc: denied { create } for pid=6282 comm="syz.1.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 167.311240][ T28] audit: type=1400 audit(1775603446.191:1130): avc: denied { create } for pid=6282 comm="syz.1.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 167.385119][ T28] audit: type=1400 audit(1775603446.191:1131): avc: denied { create } for pid=6282 comm="syz.1.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 167.537274][ T28] audit: type=1400 audit(1775603446.191:1132): avc: denied { write } for pid=6282 comm="syz.1.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 167.602950][ T28] audit: type=1400 audit(1775603446.231:1133): avc: denied { unlink } for pid=3315 comm="syz-executor" name="file0" dev="tmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 167.625863][ T28] audit: type=1400 audit(1775603446.261:1134): avc: denied { module_request } for pid=6284 comm="syz.0.719" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 167.648928][ T28] audit: type=1400 audit(1775603446.301:1135): avc: denied { sys_module } for pid=6284 comm="syz.0.719" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 167.677116][ T28] audit: type=1400 audit(1775603446.301:1136): avc: denied { map_create } for pid=6285 comm="syz.2.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 167.861160][ T28] audit: type=1400 audit(1775603446.361:1137): avc: denied { read } for pid=6298 comm="syz.1.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 168.363358][ T28] audit: type=1400 audit(1775603447.281:1138): avc: denied { create } for pid=6311 comm="syz.2.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 168.478643][ T6316] loop4: detected capacity change from 0 to 128 [ 168.568519][ T6319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.726'. [ 169.618096][ T6334] loop2: detected capacity change from 0 to 8192 [ 171.438913][ T6353] rtc_cmos 00:00: Alarms can be up to one day in the future [ 172.033423][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 172.047033][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 172.075363][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 172.095284][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 172.118170][ T10] rtc rtc0: __rtc_set_alarm: err=-22 [ 172.428423][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 172.428440][ T28] audit: type=1400 audit(1775603451.351:1179): avc: denied { read } for pid=6367 comm="syz.4.739" dev="nsfs" ino=4026532393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 172.538198][ T28] audit: type=1400 audit(1775603451.381:1180): avc: denied { open } for pid=6367 comm="syz.4.739" path="net:[4026532393]" dev="nsfs" ino=4026532393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 172.548540][ T6369] loop2: detected capacity change from 0 to 8192 [ 172.598065][ T6370] pimreg: entered allmulticast mode [ 172.624889][ T28] audit: type=1400 audit(1775603451.521:1181): avc: denied { setopt } for pid=6367 comm="syz.4.739" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 172.675104][ T28] audit: type=1400 audit(1775603451.541:1182): avc: denied { ioctl } for pid=6367 comm="syz.4.739" path="socket:[15671]" dev="sockfs" ino=15671 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 172.725525][ T6369] loop2: p1 < > p2 p4 < p5 > [ 172.730250][ T6369] loop2: partition table partially beyond EOD, truncated [ 172.748142][ T6369] loop2: p1 start 134217728 is beyond EOD, truncated [ 172.764826][ T6369] loop2: p2 size 591360 extends beyond EOD, truncated [ 172.816165][ T6369] loop2: p5 size 591360 extends beyond EOD, truncated [ 174.350916][ T6390] loop2: detected capacity change from 0 to 512 [ 174.400946][ T6390] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿ' [ 174.919534][ T6404] loop1: detected capacity change from 0 to 512 [ 174.954339][ T6404] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 175.035366][ T6404] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.747: bg 0: block 288: padding at end of block bitmap is not set [ 175.063666][ T6404] loop1: lost filesystem error report for type 5 error -117 [ 175.064411][ T6404] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 175.072093][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 175.072133][ C1] EXT4-fs (loop1): initial error at time 1775603453: ext4_validate_block_bitmap:441 [ 175.072273][ C1] EXT4-fs (loop1): last error at time 1775603453: ext4_validate_block_bitmap:441 [ 175.085908][ T28] audit: type=1400 audit(1775603454.011:1183): avc: denied { ioctl } for pid=6414 comm="syz.2.750" path="socket:[15720]" dev="sockfs" ino=15720 ioctlcmd=0x586b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 175.088826][ T6404] loop1: lost filesystem error report for type 5 error -117 [ 175.098632][ T6415] IPVS: set_ctl: invalid protocol: 44 100.1.1.0:20002 [ 175.149130][ T6404] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.747: attempt to clear invalid blocks 1024 len 1 [ 175.157802][ T28] audit: type=1400 audit(1775603454.071:1184): avc: denied { wake_alarm } for pid=6414 comm="syz.2.750" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 175.174935][ T6404] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 175.190818][ T6404] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.747: invalid indirect mapped block 1819239214 (level 0) [ 175.196045][ T6415] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 175.201041][ T6404] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 175.226422][ T6404] EXT4-fs (loop1): 1 truncate cleaned up [ 175.252402][ T6404] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.270374][ T6417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.751'. [ 175.281264][ T28] audit: type=1400 audit(1775603454.191:1185): avc: denied { bind } for pid=6416 comm="syz.0.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 175.309881][ T6418] Invalid ELF header magic: != ELF [ 175.348676][ T28] audit: type=1400 audit(1775603454.191:1186): avc: denied { name_bind } for pid=6416 comm="syz.0.751" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 175.401062][ T28] audit: type=1400 audit(1775603454.191:1187): avc: denied { node_bind } for pid=6416 comm="syz.0.751" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 175.475835][ T28] audit: type=1400 audit(1775603454.211:1188): avc: denied { connect } for pid=6416 comm="syz.0.751" lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 175.559477][ T6425] loop2: detected capacity change from 0 to 128 [ 175.576687][ T6425] vfat: Unknown parameter 'ÿ' [ 175.626437][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.003708][ T6436] syzkaller0: entered promiscuous mode [ 176.009347][ T6436] syzkaller0: entered allmulticast mode [ 177.077512][ T6447] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6447 comm=syz.3.760 [ 177.166181][ T6454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.761'. [ 177.200978][ T6454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.761'. [ 177.214037][ T6455] netlink: 20 bytes leftover after parsing attributes in process `syz.0.762'. [ 177.966543][ T6460] loop1: detected capacity change from 0 to 256 [ 179.878837][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 179.878853][ T28] audit: type=1400 audit(1775603458.801:1200): avc: denied { setopt } for pid=6473 comm="syz.3.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 179.967301][ T6480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.772'. [ 180.926225][ T3320] ================================================================== [ 180.934363][ T3320] BUG: KCSAN: data-race in generic_fillattr / inode_add_bytes [ 180.941869][ T3320] [ 180.944290][ T3320] read-write to 0xffff88811b5e23e8 of 8 bytes by task 6491 on cpu 0: [ 180.952376][ T3320] inode_add_bytes+0x47/0xe0 [ 180.957011][ T3320] __dquot_alloc_space+0x180/0x8a0 [ 180.962165][ T3320] shmem_inode_acct_blocks+0x125/0x230 [ 180.967661][ T3320] shmem_get_folio_gfp+0x5b2/0xd60 [ 180.972790][ T3320] shmem_write_begin+0xfc/0x1f0 [ 180.977656][ T3320] generic_perform_write+0x183/0x490 [ 180.982958][ T3320] shmem_file_write_iter+0xc5/0xf0 [ 180.988085][ T3320] __kernel_write_iter+0x319/0x590 [ 180.993211][ T3320] dump_user_range+0xa7d/0xdb0 [ 180.998073][ T3320] elf_core_dump+0x21a2/0x2330 [ 181.002944][ T3320] coredump_write+0xacc/0xdd0 [ 181.007807][ T3320] vfs_coredump+0x26c7/0x3130 [ 181.012502][ T3320] get_signal+0xd80/0xf60 [ 181.016852][ T3320] arch_do_signal_or_restart+0x96/0x450 [ 181.022418][ T3320] irqentry_exit+0xf7/0x520 [ 181.026940][ T3320] asm_exc_page_fault+0x26/0x30 [ 181.031804][ T3320] [ 181.034136][ T3320] read to 0xffff88811b5e23e8 of 8 bytes by task 3320 on cpu 1: [ 181.041687][ T3320] generic_fillattr+0x27d/0x340 [ 181.046560][ T3320] shmem_getattr+0x181/0x200 [ 181.051168][ T3320] vfs_getattr_nosec+0x146/0x1e0 [ 181.056147][ T3320] vfs_getattr+0x48/0x60 [ 181.060408][ T3320] vfs_statx_path+0x28/0x140 [ 181.065100][ T3320] vfs_statx+0xc4/0x170 [ 181.069266][ T3320] vfs_fstatat+0x118/0x170 [ 181.073778][ T3320] __se_sys_newfstatat+0x55/0x3e0 [ 181.078902][ T3320] __x64_sys_newfstatat+0x55/0x70 [ 181.084034][ T3320] x64_sys_call+0x2c64/0x3020 [ 181.088798][ T3320] do_syscall_64+0x12c/0x370 [ 181.093509][ T3320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.099509][ T3320] [ 181.101852][ T3320] value changed: 0x0000000000017ff0 -> 0x0000000000018008 [ 181.109195][ T3320] [ 181.111533][ T3320] Reported by Kernel Concurrency Sanitizer on: [ 181.117779][ T3320] CPU: 1 UID: 0 PID: 3320 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 181.127302][ T3320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 181.137367][ T3320] ================================================================== [ 181.487246][ T28] audit: type=1400 audit(1775603460.411:1201): avc: denied { create } for pid=6494 comm="syz.3.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1