last executing test programs: 1.675820704s ago: executing program 1 (id=54): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={0x0}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x108808, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@huge_always}]}) chdir(0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) 811.481844ms ago: executing program 2 (id=56): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000480, &(0x7f0000000180), 0x1, 0x762, &(0x7f0000001180)="$eJzs3c9rHFUcAPDvbJKmTauJIGg9BQQNlG5Mja2Ch4oHESwU9GxdNttQs8mW7KY0IaAighdBxYOgl579UW/exB9X/S88SEvVtFjxIJHZzKbbZrfJpkmWup8PTPt9M7N5892Zee/tzrATQM8aTf/JRRyOiA+TiOFsfhIRA/WoP+Lk2no3V5aL6ZTE6uqrfyT1dW6sLBej6TWpg1nh0Yj48b2II7mN9VYXl2YK5XJpPiuP12bPj1cXl46emy1Ml6ZLc8cnJiePnXjmxPGdy/WvX5YOXf3opSe/PvnPu49c/uCnJE7GoWxZcx47ZTRGs/dkIH0Lb/PiTlfWZUm3N4BtSU/NvrWzPA7HcPTVIwDg/+ytiFgFAHpMov8HgB7T+B7gxspysTF19xuJvXXthYjYv5Z/4/rm2pL+7Jrd/vp10KEbyW1XRpKIGNmB+kcj4vNvX/8ynWKXrkMCtPL2d1mwof1PNtyz0KmntrDO6B1l7R/sne/T8c+zrcZ/ufXxT7QY/wy2OHe3Y/PzP3dlB6ppKx3/Pd90b9vNpvwzI31Z6YH6mG8gOXuuXErbtgcjYiwGBtPyxF3qGLv+7/V2y5rHf39+/OYXaf3p/7fWyF3pH7z9NVOFWuFecm527Z2Ix/pb5Z+s7/+kzfj39BbrePm59z9rtyzNP823MW3Mf3etXop4ouX+v3VHW3LX+xPH64fDeOOgaOGbXz8dald/8/5Pp7T+xmeBvZDu/6G75z+SNN+vWe28jp8vDf/Qbtnm+bc+/vclr9Xjfdm8i4VabX4iYl/yysb5x269tlFurJ/mP/Z4Pf8D2Sob2r9Wx3/6mfCNzRLPNqL/6u9fbT//3ZXmP9XR/u88uHxzpq9d/Vvb/5P1aCybs5X2b6sbeC/vHQAAAAAAAAAAAAAAAAAAAAAAAABsVS4iDkWSy6/HuVw+v/YM74djKFeuVGtHzlYW5qai/qzskRjINX7qcrjp91Anst/Db5SP3VF+OiIeiohPBg/Uy/lipTzV7eQBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIHOwzfP/U78NdnvrAIBds7/bGwAA7Dn9PwD0nk77f+MFALj/6c8BoPfo/wGg9+j/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2GWnT51Kp9W/V5aLaXnqwuLCTOXC0alSdSY/u1DMFyvz5/PTlcp0uZQvVmY3+3vlSuX8ZMwtXByvlaq18eri0pnZysJc7cy52cJ06UxpYE+yAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDOVBeXZgrlcmleIBAI1oNut0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA94f/AgAA///tuiN0") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, 0x0) 693.108064ms ago: executing program 3 (id=58): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x7) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "853bbc700bdccb44"}) 604.087311ms ago: executing program 1 (id=59): r0 = socket(0x200000100000011, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="77cfefba05a03e25ff2fb98486dd", 0xe, 0x0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="55100505090c"}, 0x14) 603.892621ms ago: executing program 3 (id=60): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000020000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x6}, {0x0, 0xffff}}}, 0x24}}, 0x0) 549.191736ms ago: executing program 1 (id=63): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000001c0)={r1, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000fc0)={r1, 0x1, 0x6, @multicast}, 0x10) 470.963462ms ago: executing program 1 (id=68): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0xb, 0x3, 0x0, 0x0, {}, [@NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_REV={0x8}]}, 0x24}}, 0x0) 412.000167ms ago: executing program 1 (id=70): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000380), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x58}}, 0x0) 411.871557ms ago: executing program 2 (id=71): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 384.145969ms ago: executing program 1 (id=74): syz_emit_ethernet(0x8b, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x81, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x6, 0xb, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000740)=""/87, 0x0) sendto$inet(r0, &(0x7f0000000480)="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", 0xfffffea5, 0xc000, 0x0, 0xfffffcef) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000e00)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x2) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local, {[@rr={0x7, 0x7, 0x0, [@dev]}]}}, @redirect={0x8, 0x0, 0x0, @loopback, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @multicast1}}}}}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x20000080000001) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x1c) 358.039921ms ago: executing program 4 (id=75): r0 = socket(0x11, 0x2, 0x0) r1 = eventfd(0x0) clock_gettime(0x0, &(0x7f0000000180)) ppoll(&(0x7f0000000100)=[{r1}, {r0, 0x8004}], 0x2, 0x0, 0x0, 0x0) 347.022532ms ago: executing program 3 (id=76): pipe(0x0) rmdir(&(0x7f00000001c0)='./file0\x00') 267.186809ms ago: executing program 0 (id=77): pipe(0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2001058, 0x0) rmdir(&(0x7f00000001c0)='./file0\x00') 267.052629ms ago: executing program 4 (id=78): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001200)=[{0x30, 0x0, 0xb, "6567a6a461e009da1ce8fbb258115b29a9e76bf415cf0dae34"}], 0x30}}], 0x1, 0x0) 266.955079ms ago: executing program 2 (id=79): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r0, &(0x7f0000000040)=""/24, 0x18) syz_open_procfs(0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0x40086607, 0x0) 266.824909ms ago: executing program 3 (id=80): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/udp\x00') sendfile(r0, r1, 0x0, 0x0) 266.759239ms ago: executing program 0 (id=81): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001200)=[{0x10, 0x0, 0xb}], 0x10}}], 0x1, 0x0) 266.722528ms ago: executing program 4 (id=82): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_clone(0x8184000, 0x0, 0x0, 0x0, 0x0, 0x0) 266.663219ms ago: executing program 2 (id=83): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockname$inet(r0, 0x0, 0x0) 218.764703ms ago: executing program 0 (id=84): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001200)=[{0x10}], 0x10}}], 0x1, 0x0) 218.544263ms ago: executing program 2 (id=85): r0 = creat(&(0x7f0000000640)='./file0\x00', 0x0) mount$cgroup(0x20000000, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)={[{@subsystem='devices'}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) setsockopt$inet_buf(r0, 0x0, 0x2f, &(0x7f0000000180)="9fedd8e7d86cb1bdb4b95b909b5ac44a689714914b21bf2c1d592ae0a81fb3a48e2114c8adc994134e73e26249cdf012c073b3d90d2d2b90a4bf2bebcdde9512d039adb55ef425b4cab4589b555a542245a0c9ba542eea3ecec30f8cc85838a3497381ac74bfc5e9f01abbace3b132a442c26ec4edee0260fc2f96aae36c0568c6caa92f0df6f9284fab76585536b21aa967961bc62c6b5762eb89c1dbdbbed7c291fef2", 0xa4) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000000)={'bridge0\x00', {0x2, 0x0, @initdev}}) creat(&(0x7f0000000640)='./file0\x00', 0x0) mount$cgroup(0x20000000, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)={[{@subsystem='devices'}]}) chdir(&(0x7f0000000000)='./file0\x00') rmdir(&(0x7f0000000140)='./file0\x00') renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) r2 = signalfd4(r0, &(0x7f00000002c0)={[0x3ff]}, 0x8, 0x80000) linkat(r2, &(0x7f0000000380)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0/file2\x00', 0x0) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r3, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000400)="08001efbb07d586e", 0x8}], 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="38000000000000000000000007000000440c57d0000005c82000000f940400000717b0e0000001ac1414aaac1414aa004799ee000000ac1e"], 0x38}, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r3, 0x1, 0x53, &(0x7f0000000040)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000080)=0x2c) 218.439653ms ago: executing program 3 (id=86): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) eventfd(0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000100)={'TPROXY\x00'}, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)={@local, @multicast2}, 0x0) inotify_init1(0x0) readv(0xffffffffffffffff, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) pipe(&(0x7f0000000280)) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') read$FUSE(r2, 0x0, 0x0) 218.368583ms ago: executing program 4 (id=87): ppoll(&(0x7f0000000100)=[{}], 0x1, &(0x7f00000001c0), 0x0, 0x0) 218.259482ms ago: executing program 0 (id=88): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x6b}, [@ldst={0x1, 0x0, 0x3}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x80) 218.094593ms ago: executing program 3 (id=89): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1810314, &(0x7f0000000540)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@data_err_ignore}, {@norecovery}, {@sysvgroups}, {@init_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xa}}, {@usrjquota}, {@resgid}, {@acl}]}, 0xff, 0x468, &(0x7f0000000c00)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x17, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edffffffffff362c76", @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) open(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) read$FUSE(r1, 0x0, 0x0) 172.085206ms ago: executing program 4 (id=90): syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x8000c2, &(0x7f0000000080)={[{@inode_readahead_blks}, {@nouser_xattr}]}, 0xfd, 0x5eb, &(0x7f00000009c0)="$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") 172.005386ms ago: executing program 0 (id=91): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000080)={0x5, 0x0, "b2d8f8e77ab2332d21644baf6c907902f9f25f7213c53e80ab517c412c400ec87403532622fe60e1c4d2be1b49d489a406c27759826b565edfddf3ba0231556e5f2a88065c0a960381094ba68dd5dcea98550919fecdafef292fd10b2985aca4426670e0ec35a8c9cb9aad285b776a4541e51908b33655fbb0c03dd0784308c26fed170bc32bfc57409a166228c30fecd7d40d26bbf2b764d350b150b22492789aad27573f2c37e0f5e36cee1027916b381ae45f64805d537d181a56388fba6be8c58aff329074f9ed83d1e6ea2a9e4ee26a66b620166cbb26853926a8be715dc8bd1ec8b6b75144fc6a4fd0b6663cb7006798412710e5deb41e1d03955498e0"}) 171.894376ms ago: executing program 2 (id=92): r0 = getpid() setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4b, 0x0, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 87.491883ms ago: executing program 0 (id=93): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) sendfile(r0, r1, 0x0, 0x8000002b) 0s ago: executing program 4 (id=94): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = getpid() r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x4b, &(0x7f0000000040), 0x4) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.161' (ED25519) to the list of known hosts. [ 20.401835][ T24] audit: type=1400 audit(1720996005.540:66): avc: denied { mounton } for pid=273 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.403081][ T273] cgroup: Unknown subsys name 'net' [ 20.405782][ T24] audit: type=1400 audit(1720996005.540:67): avc: denied { mount } for pid=273 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.410082][ T24] audit: type=1400 audit(1720996005.540:68): avc: denied { unmount } for pid=273 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.410241][ T273] cgroup: Unknown subsys name 'devices' [ 20.529699][ T273] cgroup: Unknown subsys name 'hugetlb' [ 20.535165][ T273] cgroup: Unknown subsys name 'rlimit' [ 20.817972][ T24] audit: type=1400 audit(1720996005.960:69): avc: denied { setattr } for pid=273 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.840978][ T24] audit: type=1400 audit(1720996005.960:70): avc: denied { mounton } for pid=273 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 20.865842][ T24] audit: type=1400 audit(1720996005.960:71): avc: denied { mount } for pid=273 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 20.872114][ T276] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 20.897412][ T24] audit: type=1400 audit(1720996006.040:72): avc: denied { relabelto } for pid=276 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.922630][ T24] audit: type=1400 audit(1720996006.040:73): avc: denied { write } for pid=276 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.922983][ T273] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 20.948072][ T24] audit: type=1400 audit(1720996006.060:74): avc: denied { read } for pid=273 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.982056][ T24] audit: type=1400 audit(1720996006.060:75): avc: denied { open } for pid=273 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.277250][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.284680][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.292046][ T284] device bridge_slave_0 entered promiscuous mode [ 22.306707][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.313800][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.321004][ T284] device bridge_slave_1 entered promiscuous mode [ 22.360287][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.367136][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.374471][ T283] device bridge_slave_0 entered promiscuous mode [ 22.381316][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.388242][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.395362][ T283] device bridge_slave_1 entered promiscuous mode [ 22.444720][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.452046][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.459338][ T286] device bridge_slave_0 entered promiscuous mode [ 22.467265][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.474175][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.481448][ T286] device bridge_slave_1 entered promiscuous mode [ 22.499434][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.506274][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.513586][ T285] device bridge_slave_0 entered promiscuous mode [ 22.520215][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.527154][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.534570][ T287] device bridge_slave_0 entered promiscuous mode [ 22.541217][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.548213][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.555540][ T285] device bridge_slave_1 entered promiscuous mode [ 22.570956][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.577913][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.585015][ T287] device bridge_slave_1 entered promiscuous mode [ 22.692785][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.699799][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.706875][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.713692][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.744989][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.751995][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.759086][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.765865][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.784522][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.791521][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.798614][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.805410][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.813958][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.820822][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.828029][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.834867][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.861224][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.868087][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.875151][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.881993][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.900894][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.908480][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.915440][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.922686][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.929874][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.937185][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.944217][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.951236][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.958396][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.965442][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.972415][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.998312][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.005961][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.013416][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.020901][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.028989][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.035810][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.043136][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.051736][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.058585][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.065692][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.073710][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.080566][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.087670][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.095580][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.102413][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.118434][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.126549][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.133500][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.141068][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.149509][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.156328][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.163557][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.198902][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.206677][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.215935][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.223910][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.230764][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.238426][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.246349][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.253234][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.260356][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.268295][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.275967][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.283963][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.291935][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.313276][ T286] device veth0_vlan entered promiscuous mode [ 23.328966][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.337036][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.346205][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.354966][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.363631][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.371398][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.379208][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.387222][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.395423][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.403161][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.411167][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.418935][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.426652][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.434666][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.442528][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.450560][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.458407][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.466456][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.474936][ T283] device veth0_vlan entered promiscuous mode [ 23.481427][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.488958][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.496417][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.503800][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.511126][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.518548][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.526821][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.535219][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.543355][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.550191][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.558142][ T284] device veth0_vlan entered promiscuous mode [ 23.565538][ T287] device veth0_vlan entered promiscuous mode [ 23.571863][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.579584][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.587515][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.594991][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.606668][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.614972][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.623092][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.629924][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.644207][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.652244][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.660307][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.669316][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.681343][ T284] device veth1_macvtap entered promiscuous mode [ 23.690466][ T286] device veth1_macvtap entered promiscuous mode [ 23.697644][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.705890][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.714196][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.722070][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.730065][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.738149][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.746029][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.754053][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.769557][ T287] device veth1_macvtap entered promiscuous mode [ 23.782562][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.790188][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.798261][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.806332][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.814489][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.822683][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.830736][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.838870][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.846843][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.855292][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.863440][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.874680][ T283] device veth1_macvtap entered promiscuous mode [ 23.883056][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.890566][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.899181][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.924766][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.933009][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.941342][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.949543][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.957574][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.965600][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.974272][ T284] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 23.999722][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.007431][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.021040][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.034558][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.043651][ T285] device veth0_vlan entered promiscuous mode [ 24.058581][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.074678][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.092351][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.105010][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.115140][ T285] device veth1_macvtap entered promiscuous mode [ 24.122577][ T321] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.145938][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.154049][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.162343][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.171135][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.179795][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.328039][ T321] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 24.349423][ T308] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 24.627894][ T305] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 24.637962][ T25] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 24.668196][ T5] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 24.737948][ T308] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 18 [ 24.749932][ T291] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 24.908050][ T5] usb 1-1: Using ep0 maxpacket: 32 [ 24.909191][ T308] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 24.921913][ T308] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.929846][ T308] usb 4-1: Product: syz [ 24.933811][ T308] usb 4-1: Manufacturer: syz [ 24.938330][ T308] usb 4-1: SerialNumber: syz [ 24.943303][ T308] usb 4-1: config 0 descriptor?? [ 24.968025][ T313] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 24.988003][ T305] usb 3-1: config index 0 descriptor too short (expected 146, got 18) [ 25.007930][ T291] usb 5-1: Using ep0 maxpacket: 32 [ 25.012912][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.023858][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.028099][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.033834][ T25] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 25.044427][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.053432][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.062908][ T5] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 25.075289][ T25] usb 2-1: config 0 descriptor?? [ 25.079711][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.093164][ T5] usb 1-1: config 0 descriptor?? [ 25.137938][ T291] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.138949][ T5] hub 1-1:0.0: USB hub found [ 25.152155][ T291] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.158682][ T305] usb 3-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 25.165252][ T291] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 25.172136][ T305] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.180836][ T291] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.188764][ T305] usb 3-1: Product: syz [ 25.200666][ T305] usb 3-1: Manufacturer: syz [ 25.205083][ T305] usb 3-1: SerialNumber: syz [ 25.215597][ T305] usb 3-1: config 0 descriptor?? [ 25.232333][ T308] usb 4-1: USB disconnect, device number 2 [ 25.242308][ T338] udevd[338]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 25.268692][ T291] hub 5-1:4.0: USB hub found [ 25.418056][ T5] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 25.458506][ T24] kauditd_printk_skb: 47 callbacks suppressed [ 25.458518][ T24] audit: type=1400 audit(1720996010.600:123): avc: denied { create } for pid=355 comm="syz.2.11" dev="anon_inodefs" ino=15067 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 25.487071][ T24] audit: type=1400 audit(1720996010.600:124): avc: denied { ioctl } for pid=355 comm="syz.2.11" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=15067 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 25.513390][ T24] audit: type=1400 audit(1720996010.650:125): avc: denied { read } for pid=355 comm="syz.2.11" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=15067 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 25.537668][ T5] usbhid 1-1:0.0: can't add hid device: -71 [ 25.543494][ T5] usbhid: probe of 1-1:0.0 failed with error -71 [ 25.559019][ T25] hid-multitouch 0003:1FD2:6007.0001: unknown main item tag 0x0 [ 25.566635][ T291] hub 5-1:4.0: config failed, hub has too many ports! (err -19) [ 25.575991][ T25] hid-multitouch 0003:1FD2:6007.0001: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 25.581407][ T5] usb 1-1: USB disconnect, device number 2 [ 25.747917][ T305] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 25.758232][ T305] asix: probe of 3-1:0.0 failed with error -71 [ 25.768331][ T305] usb 3-1: USB disconnect, device number 2 [ 25.790735][ T15] usb 2-1: USB disconnect, device number 2 [ 25.898573][ T378] request_module fs-nfsd succeeded, but still no fs? [ 25.913097][ T24] audit: type=1400 audit(1720996011.050:126): avc: denied { write } for pid=374 comm="syz.3.14" name="001" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 26.020144][ T25] usb 5-1: USB disconnect, device number 2 [ 26.099560][ T24] audit: type=1400 audit(1720996011.090:127): avc: denied { read } for pid=374 comm="syz.3.14" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 26.122160][ T24] audit: type=1400 audit(1720996011.090:128): avc: denied { open } for pid=374 comm="syz.3.14" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 26.145586][ T24] audit: type=1400 audit(1720996011.240:129): avc: denied { create } for pid=379 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.168407][ T24] audit: type=1400 audit(1720996011.240:130): avc: denied { write } for pid=379 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.347564][ T24] audit: type=1400 audit(1720996011.450:131): avc: denied { read } for pid=379 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.601378][ T24] audit: type=1400 audit(1720996011.700:132): avc: denied { mount } for pid=384 comm="syz.2.16" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 26.803276][ T395] Module has invalid ELF structures [ 27.098666][ T400] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 27.113286][ T400] overlayfs: filesystem on './file0' not supported as upperdir [ 27.217829][ T15] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 27.438290][ T408] ====================================================== [ 27.438290][ T408] WARNING: the mand mount option is being deprecated and [ 27.438290][ T408] will be removed in v5.15! [ 27.438290][ T408] ====================================================== [ 27.468905][ T5] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 27.577891][ T15] usb 4-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 27.606663][ T15] usb 4-1: config 1 interface 0 has no altsetting 0 [ 27.626802][ T411] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 27.662164][ T411] EXT4-fs error (device loop2): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 27.677093][ T411] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 27.687908][ T15] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a2, bcdDevice= 0.40 [ 27.689613][ T411] EXT4-fs (loop2): This should not happen!! Data will be lost [ 27.689613][ T411] [ 27.698277][ T15] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 27.709596][ T411] EXT4-fs (loop2): Total free blocks count 0 [ 27.715725][ T15] usb 4-1: SerialNumber: syz [ 27.726488][ T411] EXT4-fs (loop2): Free/Dirty block details [ 27.732285][ T5] usb 5-1: Using ep0 maxpacket: 8 [ 27.741509][ T411] EXT4-fs (loop2): free_blocks=2415919104 [ 27.747079][ T411] EXT4-fs (loop2): dirty_blocks=16 [ 27.765566][ T411] EXT4-fs (loop2): Block reservation details [ 27.777814][ T411] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 27.798489][ T415] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 27.811880][ T415] EXT4-fs (loop2): This should not happen!! Data will be lost [ 27.811880][ T415] [ 27.937876][ T5] usb 5-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 1023 [ 27.960443][ T5] usb 5-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 27.994921][ T5] usb 5-1: config 1 interface 0 has no altsetting 0 [ 28.007974][ T15] cdc_ether: probe of 4-1:1.0 failed with error -71 [ 28.027943][ T15] cdc_subset: probe of 4-1:1.0 failed with error -71 [ 28.041793][ T15] usb 4-1: USB disconnect, device number 3 [ 28.057850][ T305] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 28.157880][ T5] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 28.176953][ T5] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.195058][ T5] usb 5-1: Product: ꝶ护ꃅ樸郓 [ 28.209236][ T5] usb 5-1: Manufacturer: 閫ˇቾ貏爌萱苁洹꫗㢝ꏵ節땁랍혿⢥학ᶘ蚝䎴⵽䬽褧䶟㧖ꛥ꒐Ҋၫ宐㚋ꖐ뿜Ӳ栶弳๙빢鉷꜍㢎ꐜ뛜褧듅䟓쳤貫⋺㘧䊑䅡듸꡿ཿຜ韑 [ 28.257801][ T5] usb 5-1: SerialNumber: ࠇ [ 28.297909][ T391] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 28.417889][ T305] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.429368][ T305] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.439802][ T305] usb 2-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 28.449054][ T305] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.485209][ T305] usb 2-1: config 0 descriptor?? [ 28.639219][ T5] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 4 proto 1 vid 0x0525 pid 0xA4A8 [ 28.658905][ T5] usb 5-1: USB disconnect, device number 3 [ 28.666058][ T5] usblp0: removed [ 28.835478][ T460] netlink: 60 bytes leftover after parsing attributes in process `syz.3.33'. [ 28.872946][ T462] netlink: 'syz.3.34': attribute type 9 has an invalid length. [ 29.006260][ T417] udc-core: couldn't find an available UDC or it's busy [ 29.013408][ T417] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 29.049077][ T305] sony 0003:054C:0268.0002: unknown main item tag 0xd [ 29.056961][ T305] sony 0003:054C:0268.0002: item fetching failed at offset 4/5 [ 29.064663][ T305] sony 0003:054C:0268.0002: parse failed [ 29.070728][ T305] sony: probe of 0003:054C:0268.0002 failed with error -22 [ 29.420643][ T474] syz.3.37[474] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 29.420707][ T474] syz.3.37[474] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 29.423342][ T305] usb 2-1: USB disconnect, device number 3 [ 29.524097][ T479] overlayfs: './file1' not a directory [ 29.541868][ T438] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 29.585198][ T438] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 29.600367][ T438] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 29.608208][ T438] System zones: 1-12 [ 29.613414][ T438] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 29.626840][ T438] EXT4-fs (loop2): 1 truncate cleaned up [ 29.632879][ T438] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,debug_want_extra_isize=0x0000000000000068,debug,nombcache,quota,,errors=continue [ 29.941226][ T495] netlink: 20 bytes leftover after parsing attributes in process `syz.1.44'. [ 29.960371][ T495] netlink: 20 bytes leftover after parsing attributes in process `syz.1.44'. [ 29.978319][ T495] netlink: 3 bytes leftover after parsing attributes in process `syz.1.44'. [ 30.063295][ T507] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=507 comm=syz.1.48 [ 30.149674][ T519] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 30.165293][ T519] netlink: 172 bytes leftover after parsing attributes in process `syz.3.55'. [ 31.033963][ T24] kauditd_printk_skb: 41 callbacks suppressed [ 31.033975][ T24] audit: type=1400 audit(1720996016.170:174): avc: denied { view } for pid=518 comm="syz.3.55" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 31.127149][ T24] audit: type=1400 audit(1720996016.230:175): avc: denied { write } for pid=518 comm="syz.3.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 31.159514][ T24] audit: type=1400 audit(1720996016.230:176): avc: denied { ioctl } for pid=518 comm="syz.3.55" path="socket:[15328]" dev="sockfs" ino=15328 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 31.213505][ T24] audit: type=1400 audit(1720996016.350:177): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 31.247647][ T24] audit: type=1400 audit(1720996016.380:178): avc: denied { ioctl } for pid=539 comm="syz.1.59" path="socket:[14292]" dev="sockfs" ino=14292 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 31.300650][ T547] device batadv_slave_1 entered promiscuous mode [ 31.307904][ T528] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 31.314209][ T544] device batadv_slave_1 left promiscuous mode [ 31.324429][ T24] audit: type=1400 audit(1720996016.440:179): avc: denied { setopt } for pid=544 comm="syz.1.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 31.344529][ T24] audit: type=1400 audit(1720996016.450:180): avc: denied { create } for pid=545 comm="syz.4.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 31.382771][ T24] audit: type=1400 audit(1720996016.460:181): avc: denied { write } for pid=545 comm="syz.4.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 31.392729][ T540] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=540 comm=syz.3.60 [ 31.424304][ T24] audit: type=1400 audit(1720996016.560:182): avc: denied { ioctl } for pid=559 comm="syz.1.70" path="socket:[15370]" dev="sockfs" ino=15370 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.459074][ T24] audit: type=1400 audit(1720996016.590:183): avc: denied { write } for pid=563 comm="syz.4.73" name="udp" dev="proc" ino=4026532641 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 31.599588][ T590] cgroup: Unknown subsys name 'devices' [ 31.615310][ T590] cgroup: Unknown subsys name 'devices' [ 31.712005][ T601] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 31.712005][ T601] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 31.712005][ T601] [ 31.730351][ T601] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 31.739447][ T601] EXT4-fs error (device loop4): ext4_fill_super:4955: inode #2: comm syz.4.90: casefold flag without casefold feature [ 31.752444][ T601] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 31.761838][ T601] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002a01c, mo2=0006] [ 31.762630][ T600] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:163: inode #12: comm syz.3.89: inline data xattr refers to an external xattr inode [ 31.770072][ T601] System zones: 0-2, 18-18, 34-35 [ 31.789680][ T600] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.89: couldn't read orphan inode 12 (err -117) [ 31.801974][ T601] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,nouser_xattr,,errors=continue [ 31.815564][ T600] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,data_err=ignore,norecovery,sysvgroups,init_itable,debug_want_extra_isize=0x000000000000000a,usrjquota=,resgid=0x0000000000000000,acl,,errors=continue [ 31.845159][ T600] ------------[ cut here ]------------ [ 31.850519][ T600] kernel BUG at fs/ext4/inode.c:5246! [ 31.855694][ T600] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 31.861564][ T600] CPU: 0 PID: 600 Comm: syz.3.89 Not tainted 5.10.218-syzkaller-00638-g3feee789f446 #0 [ 31.871019][ T600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 31.880938][ T600] RIP: 0010:ext4_mark_iloc_dirty+0x3e51/0x3e60 [ 31.886907][ T600] Code: 6f ca ff e9 0f f1 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 21 f1 ff ff 48 89 df e8 49 70 ca ff e9 14 f1 ff ff e8 0f dc 8c ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 41 57 41 [ 31.906350][ T600] RSP: 0018:ffffc90001017760 EFLAGS: 00010283 [ 31.912331][ T600] RAX: ffffffff81ddce71 RBX: 0000000000000000 RCX: 0000000000040000 [ 31.920137][ T600] RDX: ffffc90002736000 RSI: 00000000000012c0 RDI: 00000000000012c1 [ 31.927948][ T600] RBP: ffffc90001017870 R08: ffffffff81ddaa8d R09: ffffed10244097c2 [ 31.935760][ T600] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 31.943572][ T600] R13: 00000000ffffffff R14: 0000000085000000 R15: ffff888114ce5000 [ 31.951474][ T600] FS: 00007f47bd8046c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 31.960237][ T600] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.966756][ T600] CR2: 0000000020002040 CR3: 000000010d6a6000 CR4: 00000000003506b0 [ 31.974557][ T600] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 31.982366][ T600] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 31.990176][ T600] Call Trace: [ 31.993308][ T600] ? __die_body+0x62/0xb0 [ 31.997473][ T600] ? die+0x88/0xb0 [ 32.001029][ T600] ? do_trap+0x1a4/0x310 [ 32.005107][ T600] ? ext4_mark_iloc_dirty+0x3e51/0x3e60 [ 32.010490][ T600] ? handle_invalid_op+0x95/0xc0 [ 32.015258][ T600] ? ext4_mark_iloc_dirty+0x3e51/0x3e60 [ 32.020642][ T600] ? exc_invalid_op+0x32/0x50 [ 32.025155][ T600] ? asm_exc_invalid_op+0x12/0x20 [ 32.030018][ T600] ? ext4_mark_iloc_dirty+0x1a6d/0x3e60 [ 32.035396][ T600] ? ext4_mark_iloc_dirty+0x3e51/0x3e60 [ 32.040953][ T600] ? ext4_mark_iloc_dirty+0x3e51/0x3e60 [ 32.046337][ T600] __ext4_mark_inode_dirty+0x4fc/0x7b0 [ 32.051629][ T600] ? sb_end_intwrite+0x110/0x110 [ 32.056400][ T600] ? current_time+0x1af/0x2f0 [ 32.060917][ T600] ? atime_needs_update+0x5a0/0x5a0 [ 32.065946][ T600] ? add_dirent_to_buf+0x423/0x780 [ 32.070898][ T600] add_dirent_to_buf+0x64c/0x780 [ 32.075669][ T600] ? ext4_dx_add_entry+0x1600/0x1600 [ 32.080790][ T600] ext4_add_entry+0x921/0x1280 [ 32.085390][ T600] ? ext4_inc_count+0x190/0x190 [ 32.090079][ T600] ? ext4_init_new_dir+0x763/0xa20 [ 32.095023][ T600] ? ext4_init_dot_dotdot+0x500/0x500 [ 32.100236][ T600] ext4_mkdir+0x4d2/0xba0 [ 32.104397][ T600] ? ext4_symlink+0xe40/0xe40 [ 32.108911][ T600] ? selinux_inode_mkdir+0x22/0x30 [ 32.113858][ T600] ? security_inode_mkdir+0xbc/0x100 [ 32.118979][ T600] vfs_mkdir+0x4cf/0x6c0 [ 32.123060][ T600] do_mkdirat+0x1a6/0x2c0 [ 32.127478][ T600] ? do_mknodat+0x450/0x450 [ 32.131803][ T600] ? fpu__clear_all+0x20/0x20 [ 32.136315][ T600] ? __kasan_check_read+0x11/0x20 [ 32.141177][ T600] __x64_sys_mkdirat+0x7b/0x90 [ 32.145867][ T600] do_syscall_64+0x34/0x70 [ 32.150117][ T600] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 32.155954][ T600] RIP: 0033:0x7f47be582bd9 [ 32.160216][ T600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 32.179649][ T600] RSP: 002b:00007f47bd804048 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 32.187905][ T600] RAX: ffffffffffffffda RBX: 00007f47be710f60 RCX: 00007f47be582bd9 [ 32.195701][ T600] RDX: 0000000000000000 RSI: 0000000020002040 RDI: ffffffffffffff9c [ 32.203513][ T600] RBP: 00007f47be5f1e60 R08: 0000000000000000 R09: 0000000000000000 [ 32.211324][ T600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 32.219138][ T600] R13: 000000000000000b R14: 00007f47be710f60 R15: 00007ffdc6266148 [ 32.226947][ T600] Modules linked in: [ 32.230942][ T600] ---[ end trace 829d7edb0adc9047 ]--- [ 32.236598][ T600] RIP: 0010:ext4_mark_iloc_dirty+0x3e51/0x3e60 [ 32.242637][ T600] Code: 6f ca ff e9 0f f1 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 21 f1 ff ff 48 89 df e8 49 70 ca ff e9 14 f1 ff ff e8 0f dc 8c ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 41 57 41 [ 32.262050][ T600] RSP: 0018:ffffc90001017760 EFLAGS: 00010283 [ 32.267945][ T600] RAX: ffffffff81ddce71 RBX: 0000000000000000 RCX: 0000000000040000 [ 32.275722][ T600] RDX: ffffc90002736000 RSI: 00000000000012c0 RDI: 00000000000012c1 [ 32.283673][ T600] RBP: ffffc90001017870 R08: ffffffff81ddaa8d R09: ffffed10244097c2 [ 32.291458][ T600] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 32.299269][ T600] R13: 00000000ffffffff R14: 0000000085000000 R15: ffff888114ce5000 [ 32.307143][ T600] FS: 00007f47bd8046c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 32.315948][ T600] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.322381][ T600] CR2: 0000000020002040 CR3: 000000010d6a6000 CR4: 00000000003506b0 [ 32.330263][ T600] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.338084][ T600] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.345846][ T600] Kernel panic - not syncing: Fatal exception [ 32.352054][ T600] Kernel Offset: disabled [ 32.356186][ T600] Rebooting in 86400 seconds..