last executing test programs: 7.511874184s ago: executing program 4 (id=1585): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000040)=0x1) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/192, 0xc0}], 0x1) read(r0, &(0x7f00000002c0)=""/95, 0x5f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000280)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 6.585575074s ago: executing program 4 (id=1602): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000020c0)=[{&(0x7f0000000400)="d800000019008111e00212ba0d8105040a600000ff0f040b067c55a1bc000900080006990300000015000500fe8081780d001500030001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}, {&(0x7f0000000580)="02ce071f03968ca500ad5f468477e84d41075d246ddad1d6543ec2672587fd70c510c4edcc50dd357a4dbf8f528b0ae9fed322c237b00b734ec4be78dab8697ff020fc1118f244fa75bfe48f74df5c67a53f769d9d4b29f5bd827c675efdd0e577f5f584d9d079b8a22a", 0x6a}, {&(0x7f00000010c0)="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", 0xec0}], 0x3}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x6, 0x400000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="340000001100210527bd5900fbdbdf04fc00"/33], 0x34}, 0x1, 0x0, 0x0, 0x4050}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(0x0, 0x200, 0x80100) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfe, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x8a1, 0x2, 0x2, 0x4, 0x7}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@gettaction={0xf0, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) 6.520619096s ago: executing program 4 (id=1603): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1a77df, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x401, 0x200, 0x0, 0x7, 0x8, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{0x0}, {&(0x7f0000000180)="892950e2405ee8629d9384a90f16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4", 0x68}, {0x0}], 0x3, &(0x7f0000001480)}, 0x0) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x13bb711e) socketpair(0x2, 0x3, 0xff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 5.536339648s ago: executing program 3 (id=1615): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@func={0x1, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}}, 0x0, 0x42, 0x0, 0x200000}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x6, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000effd001000000000400070007010000080700007500fcff0000000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) 5.536191738s ago: executing program 4 (id=1616): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) connect$inet(r3, &(0x7f0000000540)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0xfffffffffffffe7b, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) fsopen(0x0, 0x0) 4.455657494s ago: executing program 0 (id=1630): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x7, 0x2, 0x80000011, 0x26, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4) recvmmsg(r2, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002002, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xffc1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 3.938241341s ago: executing program 4 (id=1636): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/protocols\x00') prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c72, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0xfffffffd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) pread64(r0, &(0x7f0000000000)=""/153, 0x99, 0x19a55d1a) 3.552457853s ago: executing program 0 (id=1641): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1f, &(0x7f00000000c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x6c, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) ustat(0x6, &(0x7f00000022c0)) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002280), 0x68c01, 0x0) write$binfmt_format(r1, &(0x7f0000000000)='-1\x00', 0x3) write$selinux_user(r1, &(0x7f0000000780)={'system_u:object_r:klogd_exec_t:s0', 0x20, 'system_u\x00'}, 0x2b) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000300)={'veth1_vlan\x00', 0xa}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000080)={0x0, @in6={{0x2, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}}, 0x8, 0x806}, &(0x7f0000000040)=0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000007c0)=r1, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbee, {0x0, 0x0, 0x0, 0x0, 0xc15, 0x22002}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x8000) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000640), 0x4) 3.514440204s ago: executing program 0 (id=1643): getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x50, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x122) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) keyctl$session_to_parent(0x12) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) perf_event_open(0x0, 0x0, 0xffffffffffefffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) connect$inet(0xffffffffffffffff, 0x0, 0x0) 3.452137807s ago: executing program 0 (id=1645): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xb}, 0xc000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getaffinity(r0, 0x8, &(0x7f00000000c0)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r3, 0x20) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) 2.304451944s ago: executing program 3 (id=1652): sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000680)={0x0, 0x0, 0x10}, 0x0, &(0x7f0000000740), &(0x7f0000000800)="dc65302cf939f9fd03ec332857e26b8c") perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r2 = syz_create_resource$binfmt(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) write$binfmt_script(r3, &(0x7f0000000ec0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xfd) close(r3) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) 2.1244155s ago: executing program 0 (id=1653): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, 0x0, 0xa) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xfff, 0x100000001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x3, 0xffffffffffffbbfe, 0x0, 0x100, 0x0, 0xfffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 1.898063327s ago: executing program 0 (id=1664): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="000000000000000010010c8013000c800ca34880080000000000000008"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) rt_tgsigqueueinfo(0x0, 0x0, 0x1f, &(0x7f0000000080)={0x39, 0x598, 0x55ab797f}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 1.740251923s ago: executing program 1 (id=1657): unshare(0x6a040000) syz_usb_disconnect(0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$tipc(0x1e, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000280)={'security\x00', 0x6, "a3f88b58d83c"}, &(0x7f0000000080)=0x2e) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x124}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f00000006c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, &(0x7f0000000480)={0x2, {{0x2, 0x400, @broadcast}}, {{0x2, 0x0, @private}}}, 0x108) 1.645436366s ago: executing program 2 (id=1659): perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x4090, 0x9, 0x0, 0x4, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x14}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)="8900", 0x2}, {&(0x7f0000000640)="25b2b3", 0x3}], 0x2, 0x0, 0x0, 0x900}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x242, 0x2e0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) modify_ldt$write2(0x11, &(0x7f0000000240)={0x481, 0x20000000, 0x4000, 0x1}, 0x10) modify_ldt$read(0x0, &(0x7f0000002140)=""/4083, 0xff3) 1.552489899s ago: executing program 2 (id=1660): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) socket$packet(0x11, 0x3, 0x300) socket$inet6_mptcp(0xa, 0x1, 0x106) select(0x20000088, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x300}, &(0x7f0000000200)={0x0, 0x2710}) munlockall() mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x60}, 0x1, 0x0, 0x0, 0x44840}, 0x800) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 1.49017272s ago: executing program 3 (id=1661): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f8ffffff0000000000000000850000002c000000850000005000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x1, 0x4, 0x8}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001980)={{r1}, &(0x7f0000001900), &(0x7f0000001940)='%+9llu \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x190, 0x6c, 0x0, 0x0, 0x0, 0x2a8, 0x258, 0x258, 0x2a8, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [], 'veth0_vlan\x00', '\x00', {0xff}, {}, 0x11}, 0x0, 0x128, 0x190, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@inet=@multiport={{0x50}, {0x0, 0x18, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@ipv6={@private0, @empty, [0x0, 0x0, 0xff000000], [], 'pim6reg0\x00', 'erspan0\x00', {}, {}, 0x32}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x388) recvmmsg(r3, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000002d00), 0x0, &(0x7f0000003880)=""/7, 0x7}, 0xfffffff9}], 0x1, 0x0, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f00000003c0)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x0, 0x2}}, 0x10, &(0x7f0000000580)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x1000a8d0}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.429141463s ago: executing program 3 (id=1662): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0x1e, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200001, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x6, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffa, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x2, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x93, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0xfffe, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x10001, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x4c5e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x810000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x800, 0x6, 0x8, 0xc, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0xfffffffd, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x401, 0x1, 0x203, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x3fd, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x5, 0x200006, 0xd, 0x400, 0x0, 0x3, 0x5, 0x10000, 0x7, 0x4, 0x81, 0x0, 0x8, 0x0, 0x8, 0x5, 0xc0000, 0x8001, 0x5, 0x2000, 0x1, 0x8da5, 0x1, 0x4, 0x2, 0x6, 0x58, 0x7, 0x6f, 0x8, 0x0, 0x4, 0x9, 0x1000, 0x4, 0x9, 0x6, 0x80000001, 0x3, 0x1, 0xd4, 0x100, 0xa, 0xfff, 0x8, 0x9, 0x7, 0x7fffffff, 0xf4b3, 0x1, 0x0, 0x8, 0x8, 0x6, 0xd815, 0xfffffff9, 0x2, 0x401, 0x9, 0x36, 0xf, 0x74, 0xbbc, 0x9, 0x0, 0x6, 0x8, 0x5, 0x6, 0xb, 0x5, 0x5, 0x4e3, 0x200, 0xdc6b, 0x9, 0x8001, 0x2, 0x1000, 0x7fffffff, 0x46a3, 0x6, 0x2, 0x1dd50645, 0x401, 0x5, 0x101, 0xbf, 0x0, 0x9, 0x3, 0x65, 0xf436, 0x2, 0x30, 0xe, 0x2, 0x389c, 0x4, 0x3, 0x3ff, 0x4, 0x4, 0x6, 0xf3bb, 0x1ff, 0x8, 0xf, 0xb, 0x401, 0x4, 0x1000, 0x1, 0x8, 0x1, 0x7ff, 0x7fff, 0x8, 0xd, 0x3ff, 0x4, 0x1, 0xffff, 0x7fff, 0x2, 0x9, 0x1, 0xfff, 0x0, 0xfffffffe, 0x4, 0x0, 0x101, 0x78f0, 0xf, 0x7, 0x0, 0x3, 0xf1c7, 0x100, 0x3, 0x4, 0xfffffffe, 0x9, 0x3, 0x8, 0x6, 0xd, 0x3, 0x0, 0xd0, 0x200, 0x0, 0x3fd, 0x9, 0x6, 0x132f, 0xaba3, 0x1, 0x3, 0x9, 0x5, 0x6f788000, 0xc, 0x1ff, 0x40, 0x8, 0x3, 0x2, 0x1, 0x0, 0x71, 0xb13, 0x4, 0xbc5, 0x0, 0x7, 0xffff, 0x100, 0x7b58, 0x1, 0x807, 0x1ff, 0x403, 0x400, 0x80000000, 0x1040, 0x3, 0xfffffffa, 0x9a5, 0x8, 0x5, 0x1, 0x9, 0x3, 0x9, 0x7, 0x3, 0x1, 0x101, 0x2, 0x6, 0x5, 0x5, 0x8e, 0x0, 0xa, 0x9, 0x1000, 0x8, 0xd00f, 0x2, 0x1, 0x6, 0x2a, 0x7, 0x7ff, 0x24e, 0xbd, 0x2, 0x2800000, 0x807, 0x0, 0x401, 0x6, 0x2, 0x9, 0x0, 0x4, 0x1, 0x9, 0x1, 0xb18, 0x2, 0xfffffffe, 0x26e, 0x6, 0x5c, 0x8, 0x100, 0x3ff, 0x1, 0x0, 0xb, 0x10000, 0x8, 0x6, 0x2, 0x6, 0x7, 0x2, 0x7ff, 0x1, 0x4, 0x8001, 0x3]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000200)="2478546ca4fa3b0bfe4ddf30cc5a", 0xe, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r4, 0x1, 0xd8, 0x6, @multicast}, 0x14) sendto$packet(r5, &(0x7f0000000240)="b86828231c39fcabd0fc4216fd2c", 0xe, 0x1, &(0x7f0000000380)={0x11, 0x1, r4, 0x1, 0x4, 0x6, @broadcast}, 0x14) 1.374886504s ago: executing program 3 (id=1663): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f00000001c0)=[{0x6, 0x84, 0x7, 0x7ffc0001}]}) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5423) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x66099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x32, 0x1e, 0x7, 0x9, 0x81, 0x3, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000040)=@id, 0x10) recvmmsg(r1, &(0x7f00000023c0), 0x0, 0x10020, 0x0) shutdown(r1, 0x2) flistxattr(r1, &(0x7f0000000280)=""/146, 0x92) mlockall(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/2848], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffd78, 0x10, &(0x7f0000000000), 0x143}, 0x48) clock_settime(0x2, 0x0) 1.030096486s ago: executing program 2 (id=1665): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000040)=0x1) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/192, 0xc0}], 0x1) read(r0, &(0x7f00000002c0)=""/95, 0x5f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000280)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 921.380499ms ago: executing program 1 (id=1666): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x1}, 0x10}, 0x94) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x4108, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001980), 0x200) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x5452, &(0x7f0000000a00)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_RESIZE(r2, 0x50009403, &(0x7f00000000c0)={{r2}, {@val={r4}, @actul_num={@void, 0x800000010000, 0x6b}}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000640)={r4, 0x6, 0xbd4}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x121484b, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) 886.29312ms ago: executing program 2 (id=1667): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_socket_connect_nvme_tcp() sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x74, 0x24, 0xe0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x44, 0x2, {{0x1, 0x6, 0xa00, 0x3, 0x987, 0x200ff}, [@TCA_NETEM_LATENCY64={0xc}, @TCA_NETEM_JITTER64={0xc}, @TCA_NETEM_RATE64={0xc, 0x8, 0xe62077891e54f027}, @TCA_NETEM_LOSS={0x4}]}}}]}, 0x74}}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) mount$bpf(0x0, 0x0, 0x0, 0x320c8d4, 0x0) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x3, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="660a00000000000079106600000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) 837.923262ms ago: executing program 1 (id=1668): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x108) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) llistxattr(0x0, 0x0, 0x0) getpriority(0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x404c0c4) getdents64(r0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000240)={[{@dioread_lock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xe}}, {@abort}, {@user_xattr}, {@user_xattr}, {@grpjquota, 0x2e}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4c1, &(0x7f0000001940)="$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") 802.899873ms ago: executing program 2 (id=1669): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) socket$netlink(0x10, 0x3, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 732.336906ms ago: executing program 2 (id=1670): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./file2\x00', 0x99) fallocate(r0, 0x0, 0xbf5, 0x2000402) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) socket$netlink(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0x3, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x4000080) openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0) 732.047296ms ago: executing program 1 (id=1671): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3d, &(0x7f0000000000)='cgroup\x00\x8d\f\xf3\xcd\xc6X$\x01n-Hg\x144-.\xe2\x053\xe2\xf4\xbf[\xe9\xdddU\x91\x9d,\t\x8d\xc3@\x86,\x7f\xe2Z\xe8L\x80\xdbe~c\xbc\x9b\xcf\x9b\x1cH\x95\xf3', 0x0}, 0x30) r1 = syz_clone(0xae003400, 0x0, 0xffffff39, 0xfffffffffffffffd, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r2}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x8, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="048843ffbbe90183ebf50a900fe85759a3517b93a19c74dc6f6b87fede004c657537da8149cbfba201f81e217e5687b3b187c167f073da8880b6704dbe610b32a2d48e582696f0832143fb7e5c0b6b349c0c17406a00f2814b944cff4e6b3fbf7cd28eae8818601508b6f72fb5165dd489d095205111897c8e03f5538b71a8b37e3cdc490cb52186bc28339fdfd1da0a697155cd2c", @ANYRESDEC=r1, @ANYBLOB="d884ad8cad5f498fdf13d96d0f74126610342bedb7b02f2cdaf190ca45422b91469929e30191e59cee3e8880ac43472842293b5a5e8a45ec87555d53abd60a4664a14bc4c1b72989461109724ec0ee0a637b1fe1f4f36d3059b33d4bae9b", @ANYRESDEC=r3, @ANYRES32=r2, @ANYRESOCT, @ANYRES16=r3, @ANYRESOCT=r0, @ANYRESDEC=r3, @ANYRES8=r3], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0200000002"], 0x10) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x98}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x6f) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000000180)=0x8000, 0x12) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0200000002"], 0x10) 562.119721ms ago: executing program 1 (id=1672): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x3) close(0x4) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x4) 1.885379ms ago: executing program 4 (id=1673): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f8ffffff0000000000000000850000002c000000850000005000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x1, 0x4, 0x8}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001980)={{r1}, &(0x7f0000001900), &(0x7f0000001940)='%+9llu \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x190, 0x6c, 0x0, 0x0, 0x0, 0x2a8, 0x258, 0x258, 0x2a8, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [], 'veth0_vlan\x00', '\x00', {0xff}, {}, 0x11}, 0x0, 0x128, 0x190, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@inet=@multiport={{0x50}, {0x0, 0x18, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@ipv6={@private0, @empty, [0x0, 0x0, 0xff000000], [], 'pim6reg0\x00', 'erspan0\x00', {}, {}, 0x32}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x388) recvmmsg(r3, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000002d00), 0x0, &(0x7f0000003880)=""/7, 0x7}, 0xfffffff9}], 0x1, 0x0, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f00000003c0)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x0, 0x2}}, 0x10, &(0x7f0000000580)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x1000a8d0}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 490.159µs ago: executing program 1 (id=1683): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) syz_open_dev$hiddev(0x0, 0x3, 0x400) pwritev(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000100)="2df8b46d", 0x4}], 0x2, 0x4, 0xa) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) syz_emit_ethernet(0x2a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019c80)=""/102400, 0x19000) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700000001000000", 0x18) 0s ago: executing program 3 (id=1674): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x2, 0xb801b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x3, 0xf60e}, 0xa293, 0x800000, 0x5, 0x0, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) recvmsg(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000b40)=""/141, 0x8d}], 0x1}, 0x40000021) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) recvmmsg(r2, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000180)=""/15, 0xf}], 0x1}, 0x9}], 0x2, 0x10100, 0x0) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) kernel console output (not intermixed with test programs): key [ 87.066222][ T5157] macsec1: entered promiscuous mode [ 87.327523][ T5184] SELinux: policydb magic number 0xf97cb48c does not match expected magic number 0xf97cff8c [ 87.342612][ T5184] SELinux: failed to load policy [ 87.419903][ T5184] loop1: detected capacity change from 0 to 4096 [ 87.499505][ T5184] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.747336][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.125858][ T5200] loop0: detected capacity change from 0 to 128 [ 88.261940][ T5200] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 88.278936][ T5200] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.474556][ T5200] netlink: 100 bytes leftover after parsing attributes in process `syz.0.537'. [ 88.548799][ T3302] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 88.979573][ T5225] macsec0: entered promiscuous mode [ 89.026023][ T5225] macsec0: entered allmulticast mode [ 89.048887][ T5225] veth1_macvtap: entered allmulticast mode [ 89.334832][ T5229] loop0: detected capacity change from 0 to 1024 [ 89.391723][ T5229] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 89.451444][ T5229] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.545: Invalid block bitmap block 0 in block_group 0 [ 89.499082][ T5229] loop0: lost filesystem error report for type 5 error -117 [ 89.500442][ T5229] __quota_error: 257 callbacks suppressed [ 89.500552][ T5229] Quota error (device loop0): write_blk: dquota write failed [ 89.508188][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 89.508268][ C0] EXT4-fs (loop0): initial error at time 1780348447: ext4_read_block_bitmap_nowait:483 [ 89.508413][ C0] EXT4-fs (loop0): last error at time 1780348447: ext4_read_block_bitmap_nowait:483 [ 89.553691][ T5229] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 89.564352][ T5229] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.545: Failed to acquire dquot type 0 [ 89.577646][ T5229] loop0: lost filesystem error report for type 5 error -117 [ 89.580219][ T5229] EXT4-fs error (device loop0): ext4_free_blocks:6718: comm syz.0.545: Freeing blocks not in datazone - block = 0, count = 4096 [ 89.623917][ T5252] loop4: detected capacity change from 0 to 512 [ 89.648035][ T5252] EXT4-fs (loop4): 1 truncate cleaned up [ 89.672790][ T5252] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.686104][ T5229] loop0: lost filesystem error report for type 5 error -117 [ 89.691060][ T5229] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.545: Invalid inode bitmap blk 0 in block_group 0 [ 89.720249][ T12] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-7 [ 89.737687][ T5229] loop0: lost filesystem error report for type 5 error -117 [ 89.738106][ T12] EXT4-fs error (device loop0): ext4_release_dquot:7070: comm kworker/u8:0: Failed to release dquot type 0 [ 89.756944][ T5229] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 89.765950][ T5229] loop0: lost filesystem error report for type 5 error -117 [ 89.766760][ T12] loop0: lost filesystem error report for type 5 error -117 [ 89.774244][ T5229] EXT4-fs (loop0): 1 orphan inode deleted [ 89.791145][ T5229] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.830679][ T28] audit: type=1400 audit(1780348447.512:838): avc: denied { write } for pid=5248 comm="syz.4.552" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 89.852693][ T28] audit: type=1400 audit(1780348447.542:839): avc: denied { write } for pid=5248 comm="syz.4.552" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 89.892824][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.950687][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.992048][ T5261] netlink: 44 bytes leftover after parsing attributes in process `syz.0.556'. [ 90.024370][ T5264] netlink: 'syz.4.557': attribute type 1 has an invalid length. [ 90.039200][ T5264] bond2: entered promiscuous mode [ 90.044598][ T5264] 8021q: adding VLAN 0 to HW filter on device bond2 [ 90.064563][ T5261] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 90.097350][ T5264] 8021q: adding VLAN 0 to HW filter on device bond2 [ 90.111090][ T5264] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 90.121901][ T5264] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 90.145622][ T5264] bond2: (slave ip6gre1): making interface the new active one [ 90.158958][ T5264] ip6gre1: entered promiscuous mode [ 90.173756][ T5264] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 91.152909][ T5291] loop0: detected capacity change from 0 to 512 [ 91.189068][ T5291] EXT4-fs (loop0): 1 truncate cleaned up [ 91.224783][ T5291] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.382900][ T28] audit: type=1400 audit(1780348449.092:840): avc: denied { write } for pid=5289 comm="syz.0.566" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 91.432286][ T28] audit: type=1400 audit(1780348449.122:841): avc: denied { write } for pid=5289 comm="syz.0.566" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 91.494614][ T28] audit: type=1400 audit(1780348449.122:842): avc: denied { write } for pid=5289 comm="syz.0.566" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 91.528974][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.671234][ T5294] loop2: detected capacity change from 0 to 1024 [ 91.692923][ T5294] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 91.717489][ T5294] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.567: Invalid block bitmap block 0 in block_group 0 [ 91.731925][ T5294] loop2: lost filesystem error report for type 5 error -117 [ 91.732799][ T5294] Quota error (device loop2): write_blk: dquota write failed [ 91.740221][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 91.740267][ C0] EXT4-fs (loop2): initial error at time 1780348449: ext4_read_block_bitmap_nowait:483 [ 91.740386][ C0] EXT4-fs (loop2): last error at time 1780348449: ext4_read_block_bitmap_nowait:483 [ 91.774740][ T5294] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 91.785650][ T5294] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.567: Failed to acquire dquot type 0 [ 91.800581][ T5294] loop2: lost filesystem error report for type 5 error -117 [ 91.811139][ T5294] EXT4-fs error (device loop2): ext4_free_blocks:6718: comm syz.2.567: Freeing blocks not in datazone - block = 0, count = 4096 [ 91.833003][ T5294] loop2: lost filesystem error report for type 5 error -117 [ 91.837557][ T5294] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.567: Invalid inode bitmap blk 0 in block_group 0 [ 91.858609][ T5294] loop2: lost filesystem error report for type 5 error -117 [ 91.960725][ T30] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:1: Failed to release dquot type 0 [ 91.987244][ T5294] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 92.001993][ T5294] EXT4-fs (loop2): 1 orphan inode deleted [ 92.028985][ T5294] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.132872][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.597357][ T5316] IPVS: persistence engine module ip_vs_pe_€ not found [ 94.137683][ T5332] netlink: 12 bytes leftover after parsing attributes in process `syz.0.574'. [ 94.812198][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 94.812214][ T28] audit: type=1400 audit(1780348452.522:844): avc: denied { ioctl } for pid=5339 comm="syz.0.591" path="socket:[11437]" dev="sockfs" ino=11437 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 95.075580][ T5349] netlink: 20 bytes leftover after parsing attributes in process `syz.1.582'. [ 95.603753][ T5359] loop0: detected capacity change from 0 to 512 [ 95.610507][ T5359] EXT4-fs: dax option not supported [ 95.855355][ T28] audit: type=1400 audit(1780348453.552:845): avc: denied { append } for pid=5368 comm="syz.2.590" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 95.901987][ T28] audit: type=1400 audit(1780348453.592:846): avc: denied { mount } for pid=5368 comm="syz.2.590" name="/" dev="hugetlbfs" ino=11100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 95.995284][ T5373] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 96.316506][ T28] audit: type=1400 audit(1780348454.022:847): avc: denied { bind } for pid=5394 comm="syz.3.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 97.330130][ T5407] loop2: detected capacity change from 0 to 128 [ 97.390567][ T5407] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 97.416918][ T5407] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 97.461672][ T28] audit: type=1400 audit(1780348455.172:848): avc: denied { setopt } for pid=5406 comm="syz.2.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 98.296517][ T5421] IPv6: addrconf: prefix option has invalid lifetime [ 99.651779][ T28] audit: type=1400 audit(1780348457.362:849): avc: denied { connect } for pid=5443 comm="syz.3.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 99.653352][ T5445] macsec0: entered promiscuous mode [ 99.711036][ T5445] macsec0: entered allmulticast mode [ 99.726937][ T5445] veth1_macvtap: entered allmulticast mode [ 99.914963][ T5452] netlink: 28 bytes leftover after parsing attributes in process `syz.2.620'. [ 100.019844][ T5454] netlink: 12 bytes leftover after parsing attributes in process `syz.0.621'. [ 100.119779][ T5463] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5463 comm=syz.0.621 [ 100.401245][ T5463] veth3: entered allmulticast mode [ 100.408094][ T5463] bond3: (slave veth3): Enslaving as an active interface with an up link [ 100.429869][ T5466] tipc: Enabling of bearer rejected, failed to enable media [ 101.805051][ T5458] loop2: detected capacity change from 0 to 4096 [ 101.904231][ T5458] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.051689][ T28] audit: type=1400 audit(1780348459.752:850): avc: denied { accept } for pid=5496 comm="syz.3.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 102.121620][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.313288][ T28] audit: type=1400 audit(1780348460.022:851): avc: denied { create } for pid=5507 comm="syz.1.639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 102.365212][ T28] audit: type=1400 audit(1780348460.042:852): avc: denied { allowed } for pid=5504 comm="syz.2.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 102.425672][ T28] audit: type=1326 audit(1780348460.042:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5504 comm="syz.2.638" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f430b3cce59 code=0x7ffc0000 [ 102.459859][ T28] audit: type=1326 audit(1780348460.042:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5504 comm="syz.2.638" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f430b3cce59 code=0x7ffc0000 [ 102.485656][ T28] audit: type=1326 audit(1780348460.042:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5504 comm="syz.2.638" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f430b3cce59 code=0x7ffc0000 [ 102.536765][ T5520] loop1: detected capacity change from 0 to 512 [ 102.558046][ T28] audit: type=1326 audit(1780348460.042:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5504 comm="syz.2.638" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f430b3cce59 code=0x7ffc0000 [ 102.584890][ T28] audit: type=1400 audit(1780348460.042:857): avc: denied { write } for pid=5504 comm="syz.2.638" path="socket:[11263]" dev="sockfs" ino=11263 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 102.589614][ T5520] EXT4-fs: Ignoring removed bh option [ 102.639927][ T28] audit: type=1400 audit(1780348460.042:858): avc: denied { read } for pid=5504 comm="syz.2.638" path="socket:[11263]" dev="sockfs" ino=11263 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 102.663659][ T5520] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 102.673027][ T28] audit: type=1326 audit(1780348460.102:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5504 comm="syz.2.638" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f430b38d68e code=0x7ffc0000 [ 102.685927][ T5520] EXT4-fs (loop1): 1 truncate cleaned up [ 102.704589][ T5520] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.759917][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.876305][ T5528] loop1: detected capacity change from 0 to 1024 [ 102.917651][ T5528] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 103.024112][ T5528] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.644: Invalid block bitmap block 0 in block_group 0 [ 103.056768][ T5528] fserror_report: 2 callbacks suppressed [ 103.056838][ T5528] loop1: lost filesystem error report for type 5 error -117 [ 103.073294][ T5528] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.644: Failed to acquire dquot type 0 [ 103.080985][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 103.081042][ C1] EXT4-fs (loop1): initial error at time 1780348460: ext4_read_block_bitmap_nowait:483 [ 103.081110][ C1] EXT4-fs (loop1): last error at time 1780348460: ext4_read_block_bitmap_nowait:483 [ 103.126967][ T5528] loop1: lost filesystem error report for type 5 error -117 [ 103.128620][ T5528] EXT4-fs error (device loop1): ext4_free_blocks:6718: comm syz.1.644: Freeing blocks not in datazone - block = 0, count = 4096 [ 103.186675][ T5528] loop1: lost filesystem error report for type 5 error -117 [ 103.187720][ T5528] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.644: Invalid inode bitmap blk 0 in block_group 0 [ 103.215587][ T3877] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:13: Failed to release dquot type 0 [ 103.239476][ T3877] loop1: lost filesystem error report for type 5 error -117 [ 103.240688][ T5528] loop1: lost filesystem error report for type 5 error -117 [ 103.264554][ T5528] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 103.293715][ T5528] loop1: lost filesystem error report for type 5 error -117 [ 103.297812][ T5528] EXT4-fs (loop1): 1 orphan inode deleted [ 103.396863][ T5528] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.465499][ T5554] syzkaller0: entered promiscuous mode [ 103.477000][ T5554] syzkaller0: entered allmulticast mode [ 103.506161][ T5554] tipc: Enabled bearer , priority 0 [ 103.520009][ T5553] tipc: Resetting bearer [ 103.537331][ T5553] tipc: Disabling bearer [ 103.572438][ T3405] IPVS: starting estimator thread 0... [ 103.613354][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.743995][ T5559] IPVS: using max 2448 ests per chain, 122400 per kthread [ 103.774620][ T5568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.661'. [ 103.899965][ T5561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.661'. [ 103.983480][ T5570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.121468][ T5570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.508792][ T5530] loop0: detected capacity change from 0 to 4096 [ 104.546696][ T5530] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.584223][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.379107][ T5604] netlink: 36 bytes leftover after parsing attributes in process `syz.1.682'. [ 105.557603][ T5597] loop4: detected capacity change from 0 to 128 [ 105.912696][ T5597] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 105.982315][ T5597] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 105.996530][ T5597] ext2 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.034642][ T3305] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 106.056906][ T5617] syzkaller0: entered promiscuous mode [ 106.062546][ T5617] syzkaller0: entered allmulticast mode [ 106.083258][ T5619] loop4: detected capacity change from 0 to 128 [ 106.095542][ T5619] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 106.121268][ T5619] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 106.140885][ T5623] capability: warning: `syz.2.680' uses 32-bit capabilities (legacy support in use) [ 107.187241][ T5621] Set syz1 is full, maxelem 65536 reached [ 107.797658][ T5657] netlink: 12 bytes leftover after parsing attributes in process `syz.0.694'. [ 107.856110][ T5657] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 107.878526][ T3873] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 107.905155][ T3873] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 107.927420][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 107.927445][ T28] audit: type=1400 audit(1780348465.642:892): avc: denied { read } for pid=5661 comm="syz.1.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 107.953673][ T5657] bond4 (unregistering): (slave geneve2): Releasing backup interface [ 107.963591][ T5657] bond4 (unregistering): Released all slaves [ 107.982058][ T28] audit: type=1400 audit(1780348465.692:893): avc: denied { setopt } for pid=5661 comm="syz.1.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 108.012254][ T28] audit: type=1400 audit(1780348465.692:894): avc: denied { write } for pid=5661 comm="syz.1.696" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 108.036192][ T28] audit: type=1400 audit(1780348465.692:895): avc: denied { open } for pid=5661 comm="syz.1.696" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 108.037080][ T3873] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 108.061207][ T28] audit: type=1400 audit(1780348465.692:896): avc: denied { ioctl } for pid=5661 comm="syz.1.696" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 108.104306][ T3873] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 108.168015][ T28] audit: type=1400 audit(1780348465.882:897): avc: denied { create } for pid=5672 comm="syz.2.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 108.194419][ T5673] netlink: 24 bytes leftover after parsing attributes in process `syz.2.699'. [ 108.248432][ T28] audit: type=1400 audit(1780348465.962:898): avc: denied { ioctl } for pid=5672 comm="syz.2.699" path="socket:[12569]" dev="sockfs" ino=12569 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 108.683864][ T5684] loop2: detected capacity change from 0 to 512 [ 108.699760][ T5684] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 108.710268][ T5684] EXT4-fs (loop2): orphan cleanup on readonly fs [ 108.717358][ T5684] Quota error (device loop2): v2_read_file_info: Can't read info structure [ 108.726137][ T5684] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 108.740954][ T5684] EXT4-fs (loop2): Cannot turn on quotas: error -5 [ 108.748005][ T5684] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.703: bg 0: block 64: padding at end of block bitmap is not set [ 108.762486][ T5684] loop2: lost filesystem error report for type 5 error -117 [ 108.762650][ T5684] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 108.770016][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 108.770042][ C0] EXT4-fs (loop2): initial error at time 1780348466: ext4_validate_block_bitmap:441 [ 108.770066][ C0] EXT4-fs (loop2): last error at time 1780348466: ext4_validate_block_bitmap:441 [ 108.804535][ T5684] loop2: lost filesystem error report for type 5 error -117 [ 108.804907][ T5684] EXT4-fs (loop2): 1 truncate cleaned up [ 108.820417][ T5684] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 108.869954][ T5684] xt_connbytes: Forcing CT accounting to be enabled [ 108.903996][ T28] audit: type=1400 audit(1780348466.592:899): avc: denied { setopt } for pid=5688 comm="syz.3.705" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 108.936962][ T5692] 9p: Bad value for 'rfdno' [ 108.959252][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.199169][ T5704] netlink: 'syz.3.710': attribute type 1 has an invalid length. [ 109.231356][ T5704] 8021q: adding VLAN 0 to HW filter on device bond2 [ 109.259509][ T5704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.710'. [ 109.280238][ T5694] loop0: detected capacity change from 0 to 512 [ 109.369186][ T5694] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 109.382633][ T5694] System zones: 1-12 [ 109.489503][ T5707] loop1: detected capacity change from 0 to 512 [ 109.491428][ T5694] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.707: corrupted in-inode xattr: e_value size too large [ 109.520377][ T5694] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 109.526576][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 109.542959][ C1] EXT4-fs (loop0): initial error at time 1780348467: ext4_iget_extra_inode:5128: inode 15 [ 109.553257][ C1] EXT4-fs (loop0): last error at time 1780348467: ext4_iget_extra_inode:5128: inode 15 [ 109.571713][ T5694] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.707: couldn't read orphan inode 15 (err -117) [ 109.605776][ T5707] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.620602][ T5694] loop0: lost filesystem error report for type 5 error -117 [ 109.624258][ T5694] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.692522][ T28] audit: type=1400 audit(1780348467.392:900): avc: denied { setattr } for pid=5706 comm="syz.1.711" name="file1" dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 109.796840][ T5697] loop4: detected capacity change from 0 to 512 [ 109.802246][ T5719] loop2: detected capacity change from 0 to 1024 [ 109.834338][ T5719] EXT4-fs: inline encryption not supported [ 109.852904][ T5694] EXT4-fs warning (device loop0): dx_probe:801: inode #2: comm syz.0.707: Unrecognised inode hash code 4 [ 109.873291][ T5694] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.707: Corrupt directory, running e2fsck is recommended [ 109.886271][ T5697] EXT4-fs: Ignoring removed nomblk_io_submit option [ 109.903238][ T5719] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 109.914902][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.951761][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.982701][ T5719] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 2: comm syz.2.715: lblock 2 mapped to illegal pblock 2 (length 1) [ 110.008154][ T5719] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 110.012380][ T5719] EXT4-fs (loop2): Remounting filesystem read-only [ 110.022094][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 110.022152][ C0] EXT4-fs (loop2): initial error at time 1780348467: ext4_map_blocks:791: inode 3: block 2 [ 110.022336][ C0] EXT4-fs (loop2): last error at time 1780348467: ext4_map_blocks:791: inode 3: block 2 [ 110.063134][ T5719] EXT4-fs (loop2): 1 orphan inode deleted [ 110.069984][ T5719] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.087881][ T5697] EXT4-fs (loop4): too many log groups per flexible block group [ 110.091115][ T5697] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 110.093853][ T5697] EXT4-fs (loop4): mount failed [ 110.175417][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.544336][ T5747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.725'. [ 110.559461][ T5747] netlink: 12 bytes leftover after parsing attributes in process `syz.4.725'. [ 110.569192][ T5747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.725'. [ 110.668508][ T5750] netlink: 12 bytes leftover after parsing attributes in process `syz.3.723'. [ 110.839777][ T5760] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 110.843749][ T5758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.729'. [ 110.873787][ T5758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.729'. [ 110.993107][ T5765] loop2: detected capacity change from 0 to 4096 [ 111.011226][ T5765] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.095194][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.115469][ T5727] loop1: detected capacity change from 0 to 4096 [ 111.179482][ T5727] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.344294][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.110480][ T5807] loop4: detected capacity change from 0 to 4096 [ 112.229238][ T5807] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.557176][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.035234][ T5827] loop4: detected capacity change from 0 to 512 [ 113.058920][ T5827] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 113.067934][ T5827] System zones: 1-12 [ 113.073403][ T5827] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.752: corrupted in-inode xattr: e_value size too large [ 113.089873][ T5827] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 113.091396][ T5827] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.752: couldn't read orphan inode 15 (err -117) [ 113.100982][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 113.101031][ C0] EXT4-fs (loop4): initial error at time 1780348470: ext4_iget_extra_inode:5128: inode 15 [ 113.101156][ C0] EXT4-fs (loop4): last error at time 1780348470: ext4_iget_extra_inode:5128: inode 15 [ 113.166615][ T5827] loop4: lost filesystem error report for type 5 error -117 [ 113.181161][ T5827] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.258133][ T5847] : port 1(ip6gretap0) entered blocking state [ 113.269258][ T5847] : port 1(ip6gretap0) entered disabled state [ 113.279011][ T5847] ip6gretap0: entered allmulticast mode [ 113.285336][ T5847] ip6gretap0: entered promiscuous mode [ 113.303547][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 113.303564][ T28] audit: type=1400 audit(1780348471.012:915): avc: denied { write } for pid=5826 comm="syz.4.752" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 113.350411][ T5846] ip6gretap0: left allmulticast mode [ 113.360804][ T28] audit: type=1400 audit(1780348471.052:916): avc: denied { write } for pid=5826 comm="syz.4.752" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 113.370334][ T5846] ip6gretap0: left promiscuous mode [ 113.443330][ T5827] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.752: Unrecognised inode hash code 4 [ 113.454951][ T5827] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.752: Corrupt directory, running e2fsck is recommended [ 113.523394][ T28] audit: type=1400 audit(1780348471.122:917): avc: denied { write } for pid=5826 comm="syz.4.752" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 113.545443][ T28] audit: type=1400 audit(1780348471.132:918): avc: denied { write } for pid=5826 comm="syz.4.752" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 113.551256][ T5846] : port 1(ip6gretap0) entered disabled state [ 113.567133][ T28] audit: type=1400 audit(1780348471.152:919): avc: denied { write } for pid=5826 comm="syz.4.752" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 113.567165][ T28] audit: type=1400 audit(1780348471.152:920): avc: denied { write } for pid=5826 comm="syz.4.752" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 113.630190][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.654899][ T28] audit: type=1400 audit(1780348471.362:921): avc: denied { map } for pid=5854 comm="syz.4.762" path="socket:[12880]" dev="sockfs" ino=12880 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 114.869545][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.876735][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.018132][ T28] audit: type=1400 audit(1780348472.702:922): avc: denied { read } for pid=5883 comm="syz.2.772" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 115.109754][ T5879] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.142943][ T5879] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.175549][ T5879] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 115.207300][ T5879] team1: left promiscuous mode [ 115.214986][ T5879] team1: left allmulticast mode [ 115.235680][ T5879] team2: left promiscuous mode [ 115.248201][ T5879] team2: left allmulticast mode [ 115.262391][ T5879] bond2: left promiscuous mode [ 115.274055][ T5879] ip6gre1: left promiscuous mode [ 115.286997][ T3882] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.296519][ T3882] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.307799][ T3882] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.319542][ T3882] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.349506][ T5865] loop0: detected capacity change from 0 to 4096 [ 116.434760][ T5865] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.631868][ T5903] netlink: 'syz.2.778': attribute type 1 has an invalid length. [ 116.738181][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.750718][ T5900] : port 1(ip6gretap0) entered blocking state [ 116.764787][ T5900] : port 1(ip6gretap0) entered disabled state [ 116.771533][ T5900] ip6gretap0: entered allmulticast mode [ 116.777918][ T5900] ip6gretap0: entered promiscuous mode [ 116.796237][ T5901] ip6gretap0: left allmulticast mode [ 116.802213][ T5908] loop0: detected capacity change from 0 to 512 [ 116.802467][ T5901] ip6gretap0: left promiscuous mode [ 116.811001][ T5891] loop4: detected capacity change from 0 to 512 [ 116.815068][ T5901] : port 1(ip6gretap0) entered disabled state [ 116.823059][ T5910] netlink: 12 bytes leftover after parsing attributes in process `syz.2.781'. [ 116.930173][ T5891] EXT4-fs: Ignoring removed i_version option [ 116.996548][ T5891] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 117.464258][ T28] audit: type=1400 audit(1780348475.172:923): avc: denied { write } for pid=5916 comm="syz.3.783" path="socket:[12962]" dev="sockfs" ino=12962 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 118.264961][ T5941] Cannot find add_set index 0 as target [ 118.942044][ T28] audit: type=1326 audit(1780348476.652:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5944 comm="syz.1.792" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd01dface59 code=0x7ffc0000 [ 119.020102][ T28] audit: type=1326 audit(1780348476.652:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5944 comm="syz.1.792" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd01dface59 code=0x7ffc0000 [ 119.163661][ T28] audit: type=1326 audit(1780348476.652:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5944 comm="syz.1.792" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd01dface59 code=0x7ffc0000 [ 119.242133][ T28] audit: type=1326 audit(1780348476.652:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5944 comm="syz.1.792" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd01dface59 code=0x7ffc0000 [ 119.369944][ T28] audit: type=1326 audit(1780348476.652:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5944 comm="syz.1.792" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd01dface59 code=0x7ffc0000 [ 119.492397][ T28] audit: type=1326 audit(1780348476.652:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5944 comm="syz.1.792" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd01dface59 code=0x7ffc0000 [ 119.538422][ T28] audit: type=1326 audit(1780348476.652:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5944 comm="syz.1.792" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd01dface59 code=0x7ffc0000 [ 119.644237][ T28] audit: type=1326 audit(1780348476.652:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5944 comm="syz.1.792" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd01dface59 code=0x7ffc0000 [ 119.692490][ T28] audit: type=1326 audit(1780348476.652:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5944 comm="syz.1.792" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd01dface59 code=0x7ffc0000 [ 119.799212][ T28] audit: type=1326 audit(1780348476.652:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5944 comm="syz.1.792" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd01dface59 code=0x7ffc0000 [ 119.991616][ T5958] loop1: detected capacity change from 0 to 512 [ 120.255068][ T5970] syzkaller0: entered promiscuous mode [ 120.282756][ T5970] syzkaller0: entered allmulticast mode [ 120.338079][ T5971] netlink: 14 bytes leftover after parsing attributes in process `syz.2.801'. [ 120.416121][ T5955] loop0: detected capacity change from 0 to 512 [ 120.682792][ T5955] EXT4-fs: Ignoring removed i_version option [ 120.785457][ T5972] tipc: Enabled bearer , priority 0 [ 120.800722][ T5969] tipc: Resetting bearer [ 120.812029][ T5969] tipc: Disabling bearer [ 120.820541][ T5955] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 121.977977][ T6013] loop2: detected capacity change from 0 to 1024 [ 122.019187][ T6013] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.936786][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.093794][ T6042] netlink: 24 bytes leftover after parsing attributes in process `syz.0.823'. [ 123.109220][ T6042] vlan3: entered promiscuous mode [ 123.114386][ T6042] geneve1: entered promiscuous mode [ 123.122038][ T6042] vlan3: entered allmulticast mode [ 123.128782][ T6042] geneve1: entered allmulticast mode [ 123.243209][ T6048] loop2: detected capacity change from 0 to 512 [ 123.302074][ T6048] EXT4-fs: Ignoring removed i_version option [ 123.361524][ T6048] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 123.776929][ T6055] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 124.897057][ T6079] loop4: detected capacity change from 0 to 8192 [ 124.926812][ T6079] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 124.944049][ T6079] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 124.966739][ T6079] FAT-fs (loop4): Filesystem has been set read-only [ 125.017901][ T6079] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 125.026963][ T6079] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 125.035851][ T6079] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 125.053255][ T6079] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 125.072776][ T6079] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 125.081671][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 125.081718][ T28] audit: type=1400 audit(1780348482.752:961): avc: denied { read } for pid=6084 comm="syz.0.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 125.119037][ T6079] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 125.139552][ T6079] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 125.156617][ T6079] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 125.173728][ T6079] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 125.389875][ T6092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.839'. [ 125.440914][ T28] audit: type=1400 audit(1780348483.152:962): avc: denied { write } for pid=6091 comm="syz.1.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 125.483309][ T28] audit: type=1400 audit(1780348483.182:963): avc: denied { read } for pid=6091 comm="syz.1.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 125.545598][ T6097] syz.2.841 (6097): attempted to duplicate a private mapping with mremap. This is not supported. [ 126.494810][ T6114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.503373][ T6114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.714431][ T9] IPVS: starting estimator thread 0... [ 126.817140][ T6122] IPVS: using max 2736 ests per chain, 136800 per kthread [ 127.038730][ T28] audit: type=1400 audit(1780348484.752:964): avc: denied { read write } for pid=6127 comm="syz.4.853" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 127.066411][ T6128] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 127.084455][ T28] audit: type=1400 audit(1780348484.752:965): avc: denied { open } for pid=6127 comm="syz.4.853" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 127.660981][ T28] audit: type=1400 audit(1780348485.372:966): avc: denied { getopt } for pid=6143 comm="syz.4.860" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 127.803183][ T6157] syzkaller0: entered promiscuous mode [ 127.809442][ T6157] syzkaller0: entered allmulticast mode [ 127.817542][ T6150] bridge0: port 3(ip6gretap0) entered blocking state [ 127.827207][ T6150] bridge0: port 3(ip6gretap0) entered disabled state [ 127.834296][ T6150] ip6gretap0: entered allmulticast mode [ 127.840621][ T6150] ip6gretap0: entered promiscuous mode [ 127.868895][ T6150] ip6gretap0: left allmulticast mode [ 127.874340][ T6150] ip6gretap0: left promiscuous mode [ 127.880224][ T6150] bridge0: port 3(ip6gretap0) entered disabled state [ 127.885509][ T6154] loop0: detected capacity change from 0 to 1024 [ 127.908863][ T6154] EXT4-fs: Ignoring removed oldalloc option [ 127.915559][ T6154] EXT4-fs: Ignoring removed i_version option [ 127.971326][ T6154] EXT4-fs: Ignoring removed nomblk_io_submit option [ 127.972726][ T28] audit: type=1400 audit(1780348485.682:967): avc: denied { listen } for pid=6160 comm="syz.4.867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 128.002376][ T28] audit: type=1400 audit(1780348485.712:968): avc: denied { accept } for pid=6160 comm="syz.4.867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 128.035949][ T6154] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.128229][ T28] audit: type=1400 audit(1780348485.842:969): avc: denied { write } for pid=6153 comm="syz.0.864" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 128.233319][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.635947][ T6181] netlink: 'syz.3.872': attribute type 1 has an invalid length. [ 128.658880][ T6181] bond3: (slave bridge1): Enslaving as a backup interface with an up link [ 128.674524][ T6181] macvlan2: entered promiscuous mode [ 128.681848][ T6181] macvlan2: entered allmulticast mode [ 128.688983][ T6181] bond3: entered promiscuous mode [ 128.699521][ T6181] bridge1: entered promiscuous mode [ 128.706776][ T6181] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 128.717879][ T6181] bond3: left promiscuous mode [ 128.722727][ T6181] bridge1: left promiscuous mode [ 128.905670][ T28] audit: type=1400 audit(1780348486.612:970): avc: denied { bind } for pid=6192 comm="syz.2.877" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 129.022625][ T6200] loop4: detected capacity change from 0 to 256 [ 129.033909][ T6200] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 129.052326][ T6206] ipip0: entered promiscuous mode [ 129.061313][ T6204] loop0: detected capacity change from 0 to 8192 [ 130.152698][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 130.152716][ T28] audit: type=1400 audit(1780348487.812:976): avc: denied { cmd } for pid=6230 comm="syz.4.891" path="socket:[13898]" dev="sockfs" ino=13898 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 130.264969][ T28] audit: type=1400 audit(1780348487.972:977): avc: denied { ioctl } for pid=6239 comm="syz.4.895" path="socket:[13913]" dev="sockfs" ino=13913 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 130.354943][ T6240] Process accounting resumed [ 130.369356][ T28] audit: type=1326 audit(1780348488.062:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6241 comm="syz.3.896" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd35a5ce59 code=0x7ffc0000 [ 130.434618][ T28] audit: type=1326 audit(1780348488.062:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6241 comm="syz.3.896" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd35a5ce59 code=0x7ffc0000 [ 130.462972][ T28] audit: type=1326 audit(1780348488.062:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6241 comm="syz.3.896" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd35a5ce59 code=0x7ffc0000 [ 130.489780][ T28] audit: type=1326 audit(1780348488.062:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6241 comm="syz.3.896" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7fbd35a5ce59 code=0x7ffc0000 [ 130.515387][ T6247] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22741, delta: 1 [ 130.524497][ T6247] ref_ctr increment failed for inode: 0x444 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88811e9c1440 [ 130.536265][ T28] audit: type=1326 audit(1780348488.062:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6241 comm="syz.3.896" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd35a5ce59 code=0x7ffc0000 [ 130.538167][ T6246] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22741, delta: -1 [ 130.561891][ T28] audit: type=1326 audit(1780348488.062:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6241 comm="syz.3.896" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd35a5ce59 code=0x7ffc0000 [ 130.561930][ T28] audit: type=1326 audit(1780348488.062:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6241 comm="syz.3.896" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd35a5ce59 code=0x7ffc0000 [ 130.561957][ T28] audit: type=1326 audit(1780348488.062:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6241 comm="syz.3.896" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbd35a5ce59 code=0x7ffc0000 [ 130.647510][ T6246] ref_ctr decrement failed for inode: 0x444 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88811e9c1440 [ 130.659038][ T6246] uprobe: syz.3.898:6246 failed to unregister, leaking uprobe [ 130.801014][ T6259] loop4: detected capacity change from 0 to 512 [ 130.815148][ T6259] EXT4-fs: Ignoring removed orlov option [ 130.842972][ T6259] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.863855][ T6259] ext4 filesystem being mounted at /196/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 130.883591][ T6259] EXT4-fs warning (device loop4): ext4_empty_dir:3094: inode #12: comm syz.4.904: directory missing '.' [ 131.174133][ T6276] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.904: corrupted xattr block 33: invalid ea_ino [ 131.896217][ T6276] EXT4-fs (loop4): Remounting filesystem read-only [ 131.910026][ T6276] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 132.110833][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.217540][ T6298] netlink: 112 bytes leftover after parsing attributes in process `syz.2.916'. [ 132.388666][ T6307] xt_hashlimit: size too large, truncated to 1048576 [ 132.469676][ T6313] cgroup: none used incorrectly [ 133.193482][ T6322] loop1: detected capacity change from 0 to 1764 [ 133.218701][ T6322] iso9660: Unknown parameter 'ÿÿ' [ 133.253691][ T6327] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.326394][ T6327] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.357303][ T6336] Driver unsupported XDP return value 0 on prog (id 196) dev N/A, expect packet loss! [ 133.606025][ T6322] ip6gre1: entered allmulticast mode [ 133.647550][ T6327] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.721418][ T6327] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.745883][ T6343] netlink: 'syz.1.930': attribute type 1 has an invalid length. [ 133.758083][ T6343] netlink: 'syz.1.930': attribute type 2 has an invalid length. [ 133.771196][ T6343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.930'. [ 133.790608][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.791999][ T6341] loop4: detected capacity change from 0 to 512 [ 133.806321][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.815039][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.827042][ T6341] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 133.828312][ T3877] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.333013][ T6367] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.436053][ T6378] loop1: detected capacity change from 0 to 512 [ 134.491628][ T6378] ext4: Unknown parameter 'smackfsroot' [ 134.513259][ T6367] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.585961][ T6381] netlink: 'syz.1.944': attribute type 1 has an invalid length. [ 134.612634][ T6381] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.665238][ T6367] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.721870][ T6381] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 134.733752][ T6381] bond1: entered allmulticast mode [ 134.775861][ T6383] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 134.838358][ T6367] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.923662][ T3877] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.937727][ T3877] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.949624][ T3877] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.974924][ T3877] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.154996][ T6389] netlink: 1319 bytes leftover after parsing attributes in process `syz.0.946'. [ 135.314290][ T6395] netlink: 'syz.0.949': attribute type 1 has an invalid length. [ 135.360114][ T6395] netlink: 'syz.0.949': attribute type 2 has an invalid length. [ 135.377268][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 135.377284][ T28] audit: type=1400 audit(1780348493.082:1012): avc: denied { mounton } for pid=6394 comm="syz.0.949" path="/194/bus" dev="tmpfs" ino=1042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 135.476384][ T28] audit: type=1400 audit(1780348493.162:1013): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 136.919796][ T6426] loop4: detected capacity change from 0 to 512 [ 136.963163][ T6428] netlink: 4 bytes leftover after parsing attributes in process `syz.1.960'. [ 137.002594][ T6426] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.034120][ T6438] netlink: 'syz.0.963': attribute type 1 has an invalid length. [ 137.044467][ T6426] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.083581][ T6438] 8021q: adding VLAN 0 to HW filter on device bond4 [ 137.086263][ T6426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.140854][ T28] audit: type=1400 audit(1780348494.852:1014): avc: denied { create } for pid=6443 comm="syz.2.964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 137.146248][ T6426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.173204][ T6438] vlan4: entered allmulticast mode [ 137.186518][ T6438] bond4: entered allmulticast mode [ 137.239888][ T6446] bond4: (slave geneve3): making interface the new active one [ 137.247561][ T6446] geneve3: entered allmulticast mode [ 137.255234][ T6446] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 137.277228][ T6449] loop1: detected capacity change from 0 to 2048 [ 137.313580][ T6449] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.404465][ T3886] Bluetooth: hci0: Frame reassembly failed (-84) [ 137.637948][ T6456] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 137.809047][ T6468] loop0: detected capacity change from 0 to 512 [ 137.814030][ T6466] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.826407][ T6466] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 137.827677][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.842481][ T6468] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.972: inode has both inline data and extents flags [ 137.859972][ T6468] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 137.860143][ T6468] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.972: couldn't read orphan inode 15 (err -117) [ 137.876468][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 137.881745][ T6468] loop0: lost filesystem error report for type 5 error -117 [ 137.888111][ C0] EXT4-fs (loop0): initial error at time 1780348495: ext4_orphan_get:1397: inode 15 [ 137.888164][ C0] EXT4-fs (loop0): last error at time 1780348495: ext4_orphan_get:1397: inode 15 [ 137.917154][ T6468] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.950465][ T28] audit: type=1400 audit(1780348495.662:1015): avc: denied { write } for pid=6467 comm="syz.0.972" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 137.952577][ T6468] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 138.019080][ T6466] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.036108][ T6466] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 138.082891][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.105402][ T6475] loop0: detected capacity change from 0 to 512 [ 138.115807][ T6466] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.153809][ T6466] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 138.272419][ T6466] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.320041][ T6475] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 138.351673][ T6475] EXT4-fs (loop0): orphan cleanup on readonly fs [ 138.362016][ T6466] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 138.386623][ T6475] Quota error (device loop0): v2_read_file_info: Can't read info structure [ 138.406927][ T6475] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 138.488755][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 138.498646][ T6475] EXT4-fs (loop0): Cannot turn on quotas: error -5 [ 138.505317][ T12] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 138.526416][ T6475] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.975: bg 0: block 64: padding at end of block bitmap is not set [ 138.557319][ T3882] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 138.581884][ T6475] loop0: lost filesystem error report for type 5 error -117 [ 138.582166][ T6475] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 138.589526][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 138.589579][ C0] EXT4-fs (loop0): initial error at time 1780348496: ext4_validate_block_bitmap:441 [ 138.589607][ C0] EXT4-fs (loop0): last error at time 1780348496: ext4_validate_block_bitmap:441 [ 138.606597][ T3882] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 138.635516][ T6475] loop0: lost filesystem error report for type 5 error -117 [ 138.642928][ T6475] EXT4-fs (loop0): 1 truncate cleaned up [ 138.668009][ T6475] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 138.671068][ T3882] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 138.694687][ T3882] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 138.707975][ T3882] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 138.719227][ T3882] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 138.729987][ T6475] xt_connbytes: Forcing CT accounting to be enabled [ 138.815699][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.103342][ T6483] loop4: detected capacity change from 0 to 512 [ 139.406581][ T3590] Bluetooth: hci0: command 0x1003 tx timeout [ 139.412658][ T4585] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 139.427881][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.448030][ T6505] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 139.627695][ T6513] netlink: 'syz.2.1000': attribute type 1 has an invalid length. [ 139.652763][ T6513] 8021q: adding VLAN 0 to HW filter on device bond2 [ 139.672155][ T6513] vlan0: entered allmulticast mode [ 139.677421][ T6513] bond2: entered allmulticast mode [ 139.693095][ T6513] bond2: (slave geneve3): making interface the new active one [ 139.700712][ T6513] geneve3: entered allmulticast mode [ 139.708307][ T6513] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 139.745966][ T6517] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.909117][ T6517] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.958289][ T6517] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.030670][ T6517] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.105492][ T5018] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.141978][ T5018] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.167919][ T5018] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.182699][ T5018] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.389638][ T6536] loop0: detected capacity change from 0 to 512 [ 140.411446][ T6536] ext4: Unknown parameter 'smackfsroot' [ 140.686087][ T28] audit: type=1400 audit(1780348498.352:1016): avc: denied { create } for pid=6547 comm="syz.0.1004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 141.129612][ T6548] loop0: detected capacity change from 0 to 2048 [ 141.176046][ T28] audit: type=1400 audit(1780348498.352:1017): avc: denied { write } for pid=6547 comm="syz.0.1004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 141.197081][ T28] audit: type=1400 audit(1780348498.352:1018): avc: denied { block_suspend } for pid=6542 comm="syz.3.1001" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 141.218644][ T28] audit: type=1400 audit(1780348498.432:1019): avc: denied { read } for pid=6547 comm="syz.0.1004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 141.239547][ T28] audit: type=1400 audit(1780348498.502:1020): avc: denied { module_request } for pid=6547 comm="syz.0.1004" kmod="netdev-wlan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 141.261656][ T28] audit: type=1400 audit(1780348498.842:1021): avc: denied { read write } for pid=6547 comm="syz.0.1004" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 141.291451][ T28] audit: type=1400 audit(1780348498.842:1022): avc: denied { open } for pid=6547 comm="syz.0.1004" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 141.328711][ T28] audit: type=1400 audit(1780348498.842:1023): avc: denied { ioctl } for pid=6547 comm="syz.0.1004" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 141.356621][ T28] audit: type=1400 audit(1780348498.932:1024): avc: denied { sys_module } for pid=6547 comm="syz.0.1004" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 141.447435][ T28] audit: type=1400 audit(1780348499.162:1025): avc: denied { prog_load } for pid=6553 comm="syz.3.1005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 141.678850][ T6556] loop1: detected capacity change from 0 to 764 [ 142.032750][ T6566] 9p: Bad value for 'rfdno' [ 142.073380][ T6568] loop1: detected capacity change from 0 to 512 [ 142.118891][ T6568] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.148171][ T6568] ext4 filesystem being mounted at /170/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 143.061149][ T6535] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 143.296300][ T6585] loop4: detected capacity change from 0 to 1024 [ 143.309094][ T6585] EXT4-fs: inline encryption not supported [ 143.341431][ T6585] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 143.432134][ T6585] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 2: comm syz.4.1013: lblock 2 mapped to illegal pblock 2 (length 1) [ 143.478357][ T6585] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 143.481265][ T6585] EXT4-fs (loop4): Remounting filesystem read-only [ 143.490672][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 143.490840][ C0] EXT4-fs (loop4): initial error at time 1780348501: ext4_map_blocks:791: inode 3: block 2 [ 143.491154][ C0] EXT4-fs (loop4): last error at time 1780348501: ext4_map_blocks:791: inode 3: block 2 [ 143.608566][ T6585] EXT4-fs (loop4): 1 orphan inode deleted [ 143.660917][ T6585] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.698460][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.873467][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.168005][ T6603] netlink: get zone limit has 8 unknown bytes [ 144.263643][ T6577] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1011'. [ 146.276475][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 146.276493][ T28] audit: type=1400 audit(1780348503.982:1065): avc: denied { create } for pid=6616 comm="syz.0.1034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 146.321086][ T28] audit: type=1400 audit(1780348504.022:1066): avc: denied { sys_admin } for pid=6616 comm="syz.0.1034" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 146.350590][ T28] audit: type=1400 audit(1780348504.052:1067): avc: denied { create } for pid=6621 comm="syz.1.1025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 146.372637][ T28] audit: type=1400 audit(1780348504.052:1068): avc: denied { create } for pid=6625 comm="syz.3.1027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 146.421280][ T28] audit: type=1400 audit(1780348504.062:1069): avc: denied { write } for pid=6625 comm="syz.3.1027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 146.449133][ T6626] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.456332][ T6626] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.458867][ T28] audit: type=1400 audit(1780348504.132:1070): avc: denied { read write } for pid=6630 comm="syz.4.1028" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 146.475324][ T6632] netlink: 'syz.4.1028': attribute type 13 has an invalid length. [ 146.521667][ T6632] netlink: 'syz.4.1028': attribute type 17 has an invalid length. [ 146.552383][ T28] audit: type=1400 audit(1780348504.132:1071): avc: denied { open } for pid=6630 comm="syz.4.1028" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 146.591562][ T28] audit: type=1400 audit(1780348504.152:1072): avc: denied { getopt } for pid=6621 comm="syz.1.1025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 146.636613][ T28] audit: type=1400 audit(1780348504.342:1073): avc: denied { bind } for pid=6636 comm="syz.1.1030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 146.656760][ T28] audit: type=1400 audit(1780348504.342:1074): avc: denied { name_bind } for pid=6636 comm="syz.1.1030" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 146.702822][ T6626] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.721110][ T6626] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.841409][ T6632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.854633][ T6632] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.880116][ T6632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.953362][ T6632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.971161][ T6632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.985231][ T6632] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 147.008054][ T6632] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 147.022451][ T6632] veth1_macvtap: left promiscuous mode [ 147.030329][ T6632] veth0_macvtap: left promiscuous mode [ 147.038079][ T6632] veth0_macvtap: entered promiscuous mode [ 147.049394][ T6632] veth1_macvtap: entered promiscuous mode [ 147.059686][ T6632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 147.071615][ T6632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 147.090039][ T6632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 147.124295][ T6632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 147.149848][ T6632] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.178265][ T6632] 8021q: adding VLAN 0 to HW filter on device team1 [ 147.198689][ T6632] 8021q: adding VLAN 0 to HW filter on device team2 [ 147.222481][ T6632] 8021q: adding VLAN 0 to HW filter on device bond2 [ 147.291490][ T6639] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.298725][ T6639] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.403662][ T6639] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.477358][ T6639] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.646132][ T6639] gretap1: left allmulticast mode [ 147.702199][ T6639] ip6gre1: left allmulticast mode [ 147.726814][ T6639] bond1: left allmulticast mode [ 147.760383][ T3882] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.783629][ T3882] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.809983][ T3437] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.817109][ T3437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.826007][ T3437] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.826086][ T3437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.859414][ T6668] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1037'. [ 147.876529][ T3882] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.876660][ T3882] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.876753][ T3882] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.876842][ T3882] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.876874][ T3882] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.876944][ T3882] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.876982][ T3882] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.877399][ T3882] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.877710][ T3882] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.877748][ T3882] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.947243][ T6679] netlink: 'syz.1.1041': attribute type 1 has an invalid length. [ 147.952741][ T6679] 8021q: adding VLAN 0 to HW filter on device bond2 [ 148.006289][ T6683] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1038'. [ 148.224929][ T6679] bond2: (slave veth3): Enslaving as an active interface with a down link [ 148.265341][ T6687] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 148.316085][ T6687] bond2: (slave batadv1): making interface the new active one [ 148.329571][ T6687] batadv1: entered promiscuous mode [ 148.331292][ T6687] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 148.412630][ T6690] bond2 (unregistering): (slave veth3): Releasing active interface [ 148.460611][ T6690] bond2 (unregistering): (slave batadv1): Releasing active interface [ 148.501256][ T6690] bond2 (unregistering): Released all slaves [ 148.616155][ T6689] netlink: 'syz.3.1043': attribute type 1 has an invalid length. [ 148.830357][ T6701] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1046'. [ 148.874398][ T6701] 8021q: adding VLAN 0 to HW filter on device bond3 [ 148.917092][ T6701] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1046'. [ 148.943793][ T6708] syzkaller0: entered promiscuous mode [ 148.958659][ T6708] syzkaller0: entered allmulticast mode [ 148.975194][ T6701] bond3: entered promiscuous mode [ 148.980662][ T6701] bond3: entered allmulticast mode [ 149.117676][ T6715] netlink: 'syz.1.1061': attribute type 1 has an invalid length. [ 149.144105][ T6720] loop2: detected capacity change from 0 to 512 [ 149.159487][ T6720] msdos: Bad value for 'uid' [ 149.168704][ T6720] msdos: Bad value for 'uid' [ 149.200194][ T6722] loop0: detected capacity change from 0 to 1024 [ 149.243560][ T6722] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.271177][ T6722] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.374412][ T6735] netlink: 'syz.1.1058': attribute type 1 has an invalid length. [ 149.399897][ T6735] bond2: entered promiscuous mode [ 149.405103][ T6735] bond2: entered allmulticast mode [ 149.411504][ T6735] 8021q: adding VLAN 0 to HW filter on device bond2 [ 149.430069][ T6735] erspan1: entered allmulticast mode [ 149.446007][ T6735] bond2: (slave erspan1): making interface the new active one [ 149.461808][ T6735] erspan1: entered promiscuous mode [ 149.473385][ T6735] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 149.509606][ T6735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1058'. [ 149.560010][ T6735] bond2 (unregistering): (slave erspan1): Releasing active interface [ 149.583968][ T6735] erspan1: left promiscuous mode [ 149.604572][ T6735] bond2 (unregistering): Released all slaves [ 150.170593][ T6779] netlink: 'syz.2.1075': attribute type 1 has an invalid length. [ 150.203343][ T6779] 8021q: adding VLAN 0 to HW filter on device bond4 [ 150.250436][ T6779] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1075'. [ 150.341438][ T6784] syzkaller0: entered promiscuous mode [ 150.350867][ T6784] syzkaller0: entered allmulticast mode [ 150.554423][ T6791] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.561848][ T6791] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.585093][ T6793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1082'. [ 150.649610][ T6791] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.661645][ T6791] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.699074][ T6791] veth1_macvtap: left allmulticast mode [ 150.710507][ T6791] bond1: left promiscuous mode [ 150.729132][ T3886] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.737920][ T3886] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.749803][ T3886] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.775814][ T3886] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.283598][ T28] kauditd_printk_skb: 272 callbacks suppressed [ 151.283616][ T28] audit: type=1400 audit(1780348508.992:1347): avc: denied { create } for pid=6826 comm="syz.3.1095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 151.318028][ T28] audit: type=1400 audit(1780348508.992:1348): avc: denied { create } for pid=6826 comm="syz.3.1095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 151.354620][ T28] audit: type=1400 audit(1780348508.992:1349): avc: denied { create } for pid=6826 comm="syz.3.1095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 151.394875][ T28] audit: type=1400 audit(1780348508.992:1350): avc: denied { create } for pid=6826 comm="syz.3.1095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 151.423416][ T6832] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1514) ! [ 151.431831][ T28] audit: type=1400 audit(1780348508.992:1351): avc: denied { create } for pid=6826 comm="syz.3.1095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 151.452463][ T6832] syzkaller0: entered promiscuous mode [ 151.469401][ T28] audit: type=1400 audit(1780348509.062:1352): avc: denied { read write } for pid=3302 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 151.474144][ T6832] syzkaller0: entered allmulticast mode [ 151.518016][ T28] audit: type=1400 audit(1780348509.102:1353): avc: denied { allowed } for pid=6828 comm="syz.3.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 151.563947][ T28] audit: type=1400 audit(1780348509.212:1354): avc: denied { create } for pid=6831 comm="syz.0.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 151.596944][ T28] audit: type=1400 audit(1780348509.212:1355): avc: denied { create } for pid=6831 comm="syz.0.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 151.720679][ T28] audit: type=1400 audit(1780348509.432:1356): avc: denied { read write } for pid=3297 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 151.861240][ T6838] syzkaller0: entered promiscuous mode [ 153.015154][ T6888] bridge0: port 3(ip6gretap0) entered blocking state [ 153.027643][ T6888] bridge0: port 3(ip6gretap0) entered disabled state [ 153.046008][ T6888] ip6gretap0: entered allmulticast mode [ 153.053922][ T6888] ip6gretap0: entered promiscuous mode [ 153.070612][ T6889] ip6gretap0: left allmulticast mode [ 153.081551][ T6889] ip6gretap0: left promiscuous mode [ 153.092008][ T6889] bridge0: port 3(ip6gretap0) entered disabled state [ 153.221570][ T6906] netlink: 'syz.3.1127': attribute type 13 has an invalid length. [ 153.229613][ T6906] netlink: 'syz.3.1127': attribute type 17 has an invalid length. [ 153.264191][ T6906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.272972][ T6906] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.283669][ T6906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.317472][ T6906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.326794][ T6906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.338645][ T6906] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 153.349664][ T6906] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 153.363468][ T6906] veth1_vlan: left promiscuous mode [ 153.369909][ T6906] veth0_vlan: left promiscuous mode [ 153.375713][ T6906] veth0_vlan: entered promiscuous mode [ 153.385312][ T6906] veth1_vlan: entered promiscuous mode [ 153.394765][ T6906] veth1_macvtap: left promiscuous mode [ 153.401531][ T6906] veth0_macvtap: left promiscuous mode [ 153.407957][ T6906] veth0_macvtap: entered promiscuous mode [ 153.418446][ T6906] veth1_macvtap: entered promiscuous mode [ 153.429732][ T6906] geneve2: left promiscuous mode [ 153.435631][ T6906] bond1: left promiscuous mode [ 153.440751][ T6906] ip6gre1: left promiscuous mode [ 153.446357][ T6906] 8021q: adding VLAN 0 to HW filter on device bond1 [ 153.456548][ T6906] 8021q: adding VLAN 0 to HW filter on device bond2 [ 153.466163][ T6906] 8021q: adding VLAN 0 to HW filter on device bond3 [ 153.477579][ T6906] 8021q: adding VLAN 0 to HW filter on device eth0 [ 153.486622][ T5018] bond3: (slave bridge1): link status up again after 0 ms [ 153.489901][ T6906] 8021q: adding VLAN 0 to HW filter on device eth1 [ 153.506151][ T6906] 8021q: adding VLAN 0 to HW filter on device eth2 [ 153.513001][ T12] bond3: (slave bridge1): link status up again after 0 ms [ 153.526129][ T6906] 8021q: adding VLAN 0 to HW filter on device eth3 [ 153.536959][ T5018] bond3: (slave bridge1): link status up again after 0 ms [ 153.540584][ T6906] veth0_to_team: entered promiscuous mode [ 153.557978][ T3877] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.565076][ T3877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.576752][ T5018] bond3: (slave bridge1): link status up again after 0 ms [ 153.591665][ T5018] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 153.603402][ T3877] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.610527][ T3877] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.618801][ T5018] bond3: (slave bridge1): link status up again after 0 ms [ 153.645749][ T6910] netlink: 'syz.4.1128': attribute type 1 has an invalid length. [ 153.653662][ T5018] bond3: (slave bridge1): link status up again after 0 ms [ 153.673187][ T3882] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.681643][ T3437] bond3: (slave bridge1): link status up again after 0 ms [ 153.687042][ T3882] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.711098][ T3877] bond3: (slave bridge1): link status up again after 0 ms [ 153.721101][ T6910] bond3: entered promiscuous mode [ 153.726389][ T6910] bond3: entered allmulticast mode [ 153.731859][ T6910] 8021q: adding VLAN 0 to HW filter on device bond3 [ 153.742649][ T6911] erspan1: entered allmulticast mode [ 153.748677][ T3877] bond3: (slave bridge1): link status up again after 0 ms [ 153.762501][ T6911] bond3: (slave erspan1): making interface the new active one [ 153.775661][ T6910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1128'. [ 153.785402][ T6911] erspan1: entered promiscuous mode [ 153.791980][ T6911] bond3: (slave erspan1): Enslaving as an active interface with an up link [ 153.801062][ T3882] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.810408][ T3882] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.825531][ T6910] bond3 (unregistering): (slave erspan1): Releasing active interface [ 153.837427][ T6910] erspan1: left promiscuous mode [ 153.849244][ T6910] bond3 (unregistering): Released all slaves [ 154.201931][ T6938] macsec0: left promiscuous mode [ 154.207975][ T6938] macsec0: left allmulticast mode [ 154.213075][ T6938] veth1_macvtap: left allmulticast mode [ 154.223949][ T6938] veth0_to_team: entered promiscuous mode [ 154.304881][ T6938] ipip0: left promiscuous mode [ 154.324857][ T6938] 8021q: adding VLAN 0 to HW filter on device eth0 [ 154.336558][ T6938] 8021q: adding VLAN 0 to HW filter on device eth1 [ 154.347540][ T6938] 8021q: adding VLAN 0 to HW filter on device eth2 [ 154.358886][ T6938] 8021q: adding VLAN 0 to HW filter on device eth3 [ 154.370525][ T6938] vlan0: left allmulticast mode [ 154.384431][ T6938] bond2: left allmulticast mode [ 154.389764][ T6938] geneve3: left allmulticast mode [ 154.398248][ T6938] bond3: left promiscuous mode [ 154.403141][ T6938] bond3: left allmulticast mode [ 154.409544][ T6938] 8021q: adding VLAN 0 to HW filter on device bond3 [ 154.510663][ T6950] netlink: 'syz.2.1144': attribute type 1 has an invalid length. [ 154.524490][ T6950] 8021q: adding VLAN 0 to HW filter on device bond5 [ 154.550695][ T6950] bond5: (slave veth5): Enslaving as an active interface with a down link [ 154.600730][ T6950] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 154.621183][ T6950] bond5: (slave batadv1): making interface the new active one [ 154.640357][ T6950] batadv1: entered promiscuous mode [ 154.652838][ T6950] bond5: (slave batadv1): Enslaving as an active interface with an up link [ 154.927365][ T6962] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1148'. [ 154.940064][ T6962] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1148'. [ 154.995375][ T6962] vlan5: entered promiscuous mode [ 155.000604][ T6962] bridge1: entered promiscuous mode [ 155.008450][ T6962] vlan5: entered allmulticast mode [ 155.017261][ T6962] bridge1: entered allmulticast mode [ 155.179461][ T6981] netlink: 'syz.0.1156': attribute type 1 has an invalid length. [ 155.237185][ T6981] 8021q: adding VLAN 0 to HW filter on device bond5 [ 155.281700][ T6984] bond5: (slave veth5): Enslaving as an active interface with a down link [ 155.295586][ T6986] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1157'. [ 155.311507][ T6981] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 155.338640][ T6981] bond5: (slave batadv1): making interface the new active one [ 155.348199][ T6981] batadv1: entered promiscuous mode [ 155.353643][ T6981] bond5: (slave batadv1): Enslaving as an active interface with an up link [ 155.371105][ T6986] 8021q: adding VLAN 0 to HW filter on device bond4 [ 155.381470][ T6993] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1157'. [ 155.427255][ T6986] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 155.471385][ T7003] syzkaller0: entered promiscuous mode [ 155.478066][ T7003] syzkaller0: entered allmulticast mode [ 155.592744][ T7026] syzkaller0: entered promiscuous mode [ 155.600093][ T7026] syzkaller0: entered allmulticast mode [ 155.636029][ T7033] syzkaller0: entered promiscuous mode [ 155.641805][ T7033] syzkaller0: entered allmulticast mode [ 155.699553][ T7039] syzkaller0: entered promiscuous mode [ 155.705278][ T7039] syzkaller0: entered allmulticast mode [ 155.835514][ T7050] syzkaller0: entered promiscuous mode [ 155.842194][ T7050] syzkaller0: entered allmulticast mode [ 156.101158][ T7063] ip6gre2: entered allmulticast mode [ 156.107871][ T7063] team0: Device ip6gre2 is of different type [ 156.270179][ T7081] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1210'. [ 156.289360][ T28] kauditd_printk_skb: 464 callbacks suppressed [ 156.289390][ T28] audit: type=1400 audit(1780348514.002:1821): avc: denied { create } for pid=7082 comm="syz.4.1200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 156.322352][ T7081] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.349368][ T28] audit: type=1400 audit(1780348514.002:1822): avc: denied { create } for pid=7082 comm="syz.4.1200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 156.350326][ T7081] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.404606][ T28] audit: type=1400 audit(1780348514.002:1823): avc: denied { create } for pid=7082 comm="syz.4.1200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 156.435460][ T7081] bond0 (unregistering): Released all slaves [ 156.459369][ T28] audit: type=1400 audit(1780348514.002:1824): avc: denied { create } for pid=7082 comm="syz.4.1200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 156.480037][ T28] audit: type=1400 audit(1780348514.002:1825): avc: denied { create } for pid=7082 comm="syz.4.1200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 156.501935][ T28] audit: type=1400 audit(1780348514.022:1826): avc: denied { read write } for pid=3305 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 156.546171][ T28] audit: type=1400 audit(1780348514.022:1827): avc: denied { open } for pid=7072 comm="syz.3.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 156.579533][ T28] audit: type=1400 audit(1780348514.022:1828): avc: denied { remount } for pid=7072 comm="syz.3.1197" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=0 [ 156.632012][ T28] audit: type=1400 audit(1780348514.022:1829): avc: denied { prog_load } for pid=7072 comm="syz.3.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 156.632300][ T7097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1205'. [ 156.695988][ T28] audit: type=1400 audit(1780348514.022:1830): avc: denied { create } for pid=7072 comm="syz.3.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 156.706801][ T7105] syzkaller0: entered promiscuous mode [ 156.741909][ T7105] syzkaller0: entered allmulticast mode [ 157.126823][ T7130] syzkaller0: entered promiscuous mode [ 157.139260][ T7130] syzkaller0: entered allmulticast mode [ 157.291418][ T7134] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1223'. [ 157.315488][ T7134] ip6erspan0: entered allmulticast mode [ 157.392536][ T7138] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 157.474358][ T7141] netlink: 'syz.1.1225': attribute type 12 has an invalid length. [ 157.493445][ T7141] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1225'. [ 157.629067][ T7152] syzkaller0: entered promiscuous mode [ 157.640523][ T7152] syzkaller0: entered allmulticast mode [ 157.938387][ T7175] syzkaller0: entered promiscuous mode [ 157.943979][ T7175] syzkaller0: entered allmulticast mode [ 157.975521][ T7177] netlink: 'syz.0.1240': attribute type 1 has an invalid length. [ 158.004543][ T7177] 8021q: adding VLAN 0 to HW filter on device bond6 [ 158.037464][ T7177] bond0: (slave bond6): making interface the new active one [ 158.060239][ T7177] bond0: (slave bond6): Enslaving as an active interface with an up link [ 158.092459][ T7184] bond0: (slave gretap1): Enslaving as a backup interface with an up link [ 158.105946][ T7177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.189672][ T7197] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1247'. [ 158.224853][ T7197] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7197 comm=syz.0.1247 [ 158.284707][ T7207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1253'. [ 158.404405][ T7212] syzkaller0: entered promiscuous mode [ 158.410050][ T7212] syzkaller0: entered allmulticast mode [ 158.554352][ T7225] netlink: 'syz.3.1261': attribute type 2 has an invalid length. [ 158.586546][ T5018] net_ratelimit: 45 callbacks suppressed [ 158.586644][ T5018] bond3: (slave bridge1): failed to get link speed/duplex [ 158.702342][ T7240] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7240 comm=syz.4.1269 [ 158.714854][ T3886] bond3: (slave bridge1): failed to get link speed/duplex [ 158.778401][ T7250] gretap0: entered promiscuous mode [ 158.788032][ T7250] 0ªî{X¹¦: renamed from gretap0 [ 158.795096][ T7250] 0ªî{X¹¦: left promiscuous mode [ 158.801977][ T7250] 0ªî{X¹¦: entered allmulticast mode [ 158.813500][ T7250] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 158.847304][ T3886] bond3: (slave bridge1): failed to get link speed/duplex [ 158.956857][ T3886] bond3: (slave bridge1): failed to get link speed/duplex [ 159.077259][ T5018] bond3: (slave bridge1): failed to get link speed/duplex [ 159.186531][ T3886] bond3: (slave bridge1): failed to get link speed/duplex [ 159.222572][ T7205] syz.0.1252 (7205) used greatest stack depth: 8512 bytes left [ 159.307855][ T3873] bond3: (slave bridge1): failed to get link speed/duplex [ 159.427097][ T3873] bond3: (slave bridge1): failed to get link speed/duplex [ 159.512336][ T7282] netlink: 'syz.0.1286': attribute type 8 has an invalid length. [ 159.530321][ T7282] sch_fq: defrate 0 ignored. [ 159.547054][ T3873] bond3: (slave bridge1): failed to get link speed/duplex [ 159.654812][ T7288] netlink: 'syz.0.1289': attribute type 1 has an invalid length. [ 159.681739][ T7288] bond7: entered promiscuous mode [ 159.694804][ T7288] bond7: entered allmulticast mode [ 159.708271][ T7288] 8021q: adding VLAN 0 to HW filter on device bond7 [ 159.773545][ T7288] bridge2: entered promiscuous mode [ 159.780610][ T7288] bridge2: entered allmulticast mode [ 159.787287][ T7288] bond7: (slave bridge2): Enslaving as a backup interface with an up link [ 159.803063][ T7288] bridge3: entered promiscuous mode [ 159.809588][ T7288] bridge3: entered allmulticast mode [ 159.815674][ T7288] bond7: (slave bridge3): Enslaving as a backup interface with a down link [ 159.852017][ T7288] bridge4: entered promiscuous mode [ 159.889458][ T7288] bridge4: entered allmulticast mode [ 159.902736][ T7288] bond7: (slave bridge4): Enslaving as a backup interface with a down link [ 160.128695][ T7309] syzkaller0: entered promiscuous mode [ 160.140745][ T7309] syzkaller0: entered allmulticast mode [ 160.570876][ T7325] __nla_validate_parse: 3 callbacks suppressed [ 160.570967][ T7325] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1304'. [ 160.972584][ T7300] Process accounting paused [ 161.009333][ T7298] syz.3.1293 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 161.032860][ T7342] syzkaller0: entered promiscuous mode [ 161.052382][ T7342] syzkaller0: entered allmulticast mode [ 161.110573][ T7298] CPU: 0 UID: 0 PID: 7298 Comm: syz.3.1293 Not tainted syzkaller #0 PREEMPT(lazy) [ 161.110666][ T7298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 161.110755][ T7298] Call Trace: [ 161.110762][ T7298] [ 161.110771][ T7298] __dump_stack+0x1d/0x30 [ 161.110800][ T7298] dump_stack_lvl+0x95/0xd0 [ 161.110875][ T7298] dump_stack+0x15/0x1b [ 161.110898][ T7298] dump_header+0x80/0x240 [ 161.110922][ T7298] oom_kill_process+0x295/0x350 [ 161.110956][ T7298] out_of_memory+0x97d/0xb80 [ 161.111000][ T7298] try_charge_memcg+0x62f/0xa10 [ 161.111034][ T7298] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 161.111064][ T7298] __alloc_frozen_pages_noprof+0x18a/0x350 [ 161.111093][ T7298] alloc_pages_bulk_noprof+0x4d1/0x560 [ 161.111196][ T7298] ? policy_nodemask+0x417/0x5e0 [ 161.111220][ T7298] ? __alloc_frozen_pages_noprof+0x2a4/0x350 [ 161.111245][ T7298] alloc_pages_bulk_mempolicy_noprof+0x35b/0xeb0 [ 161.111343][ T7298] ? alloc_pages_mpol+0x217/0x260 [ 161.111432][ T7298] __vmalloc_node_range_noprof+0x891/0x11c0 [ 161.111464][ T7298] __kvmalloc_node_noprof+0x3d4/0x640 [ 161.111488][ T7298] ? futex_hash_allocate+0x190/0x9a0 [ 161.111519][ T7298] ? futex_hash_allocate+0x190/0x9a0 [ 161.111622][ T7298] futex_hash_allocate+0x190/0x9a0 [ 161.111653][ T7298] ? cap_task_prctl+0x13f/0x6b0 [ 161.111749][ T7298] futex_hash_prctl+0xd8/0xf0 [ 161.111779][ T7298] __se_sys_prctl+0x4f4/0x1400 [ 161.111807][ T7298] __x64_sys_prctl+0x67/0x80 [ 161.111900][ T7298] x64_sys_call+0x2533/0x3020 [ 161.111925][ T7298] do_syscall_64+0x12c/0x3b0 [ 161.111957][ T7298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.112013][ T7298] RIP: 0033:0x7fbd35a5ce59 [ 161.112079][ T7298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.112158][ T7298] RSP: 002b:00007fbd344b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 161.112179][ T7298] RAX: ffffffffffffffda RBX: 00007fbd35cd5fa0 RCX: 00007fbd35a5ce59 [ 161.112196][ T7298] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 161.112237][ T7298] RBP: 00007fbd35af2d6f R08: 0000000000000000 R09: 0000000000000000 [ 161.112250][ T7298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.112265][ T7298] R13: 00007fbd35cd6038 R14: 00007fbd35cd5fa0 R15: 00007fff22d42178 [ 161.112288][ T7298] [ 161.167729][ T7298] memory: usage 307200kB, limit 307200kB, failcnt 337 [ 161.399580][ T7298] memory+swap: usage 314476kB, limit 9007199254740988kB, failcnt 0 [ 161.410613][ T28] kauditd_printk_skb: 463 callbacks suppressed [ 161.410629][ T28] audit: type=1400 audit(1780348519.122:2294): avc: denied { read write } for pid=3305 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 161.447763][ T7298] kmem: usage 302800kB, limit 9007199254740988kB, failcnt 0 [ 161.465093][ T7348] netlink: 'syz.4.1313': attribute type 1 has an invalid length. [ 161.468668][ T7298] Memory cgroup stats for /syz3: [ 161.477585][ T7298] cache 0 [ 161.487322][ T28] audit: type=1400 audit(1780348519.192:2295): avc: denied { read write } for pid=3304 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 161.515998][ T7350] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1313'. [ 161.530947][ T7348] bond3: entered promiscuous mode [ 161.535500][ T7298] rss 4505600 [ 161.549473][ T7348] 8021q: adding VLAN 0 to HW filter on device bond3 [ 161.552213][ T7298] shmem 0 [ 161.593884][ T7298] mapped_file 0 [ 161.610579][ T7298] dirty 0 [ 161.620254][ T7348] bond3: (slave bridge2): making interface the new active one [ 161.631281][ T7298] writeback 0 [ 161.636059][ T28] audit: type=1400 audit(1780348519.232:2296): avc: denied { create } for pid=7347 comm="syz.4.1313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 161.661812][ T7298] workingset_refault_anon 1268 [ 161.668292][ T7348] bridge2: entered promiscuous mode [ 161.675090][ T7348] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 161.677112][ T7298] workingset_refault_file 816 [ 161.703856][ T7298] swap 7450624 [ 161.710308][ T28] audit: type=1400 audit(1780348519.242:2297): avc: denied { prog_load } for pid=7351 comm="syz.2.1314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 161.731151][ T7298] swapcached 16805888 [ 161.740989][ T7298] pgpgin 86037 [ 161.747696][ T7298] pgpgout 84937 [ 161.754271][ T7298] pgfault 117091 [ 161.762837][ T7298] pgmajfault 228 [ 161.770926][ T7298] inactive_anon 0 [ 161.774677][ T28] audit: type=1400 audit(1780348519.242:2298): avc: denied { prog_load } for pid=7351 comm="syz.2.1314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 161.799106][ T7298] active_anon 0 [ 161.805684][ T7298] inactive_file 0 [ 161.815343][ T7298] active_file 0 [ 161.822662][ T7298] unevictable 4505600 [ 161.840753][ T7298] hierarchical_memory_limit 314572800 [ 161.846220][ T28] audit: type=1400 audit(1780348519.252:2299): avc: denied { open } for pid=7351 comm="syz.2.1314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 161.850167][ T7360] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 161.870486][ T7298] hierarchical_memsw_limit 9223372036854771712 [ 161.889795][ T7298] total_cache 0 [ 161.896585][ T7298] total_rss 4505600 [ 161.903464][ T28] audit: type=1400 audit(1780348519.252:2300): avc: denied { map_create } for pid=7351 comm="syz.2.1314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 161.924807][ T7298] total_shmem 0 [ 161.933465][ T7298] total_mapped_file 0 [ 161.943551][ T7298] total_dirty 0 [ 161.949025][ T7298] total_writeback 0 [ 161.957923][ T7298] total_workingset_refault_anon 1268 [ 161.965909][ T28] audit: type=1400 audit(1780348519.262:2301): avc: denied { create } for pid=7351 comm="syz.2.1314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=0 [ 161.991566][ T7298] total_workingset_refault_file 816 [ 161.998389][ T7298] total_swap 7450624 [ 162.008413][ T7298] total_swapcached 16805888 [ 162.016126][ T7365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1319'. [ 162.016503][ T7298] total_pgpgin 86037 [ 162.032178][ T7367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1320'. [ 162.033337][ T28] audit: type=1400 audit(1780348519.312:2302): avc: denied { read write } for pid=3304 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 162.074502][ T7298] total_pgpgout 84937 [ 162.086559][ T7298] total_pgfault 117091 [ 162.090729][ T7298] total_pgmajfault 228 [ 162.099299][ T7298] total_inactive_anon 0 [ 162.107951][ T7298] total_active_anon 0 [ 162.116573][ T7298] total_inactive_file 0 [ 162.123598][ T28] audit: type=1400 audit(1780348519.462:2303): avc: denied { read write } for pid=3305 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 162.126395][ T7298] total_active_file 0 [ 162.179972][ T7298] total_unevictable 4505600 [ 162.186865][ T7371] syzkaller0: entered promiscuous mode [ 162.192400][ T7371] syzkaller0: entered allmulticast mode [ 162.197943][ T7298] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1293,pid=7297,uid=0 [ 162.224466][ T7298] Memory cgroup out of memory: Killed process 7297 (syz.3.1293) total-vm:96348kB, anon-rss:5628kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:0 [ 163.194386][ T7415] netlink: 'syz.0.1351': attribute type 2 has an invalid length. [ 163.251343][ T7423] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1343'. [ 163.283357][ T7423] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7423 comm=syz.0.1343 [ 163.528220][ T7442] netlink: 'syz.1.1352': attribute type 8 has an invalid length. [ 163.536750][ T7442] sch_fq: defrate 0 ignored. [ 163.680937][ T7446] netlink: 'syz.1.1354': attribute type 2 has an invalid length. [ 163.716547][ T5018] net_ratelimit: 30 callbacks suppressed [ 163.716568][ T5018] bond3: (slave bridge1): failed to get link speed/duplex [ 163.847164][ T5018] bond3: (slave bridge1): failed to get link speed/duplex [ 163.861070][ T7454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1358'. [ 163.873663][ T7454] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.902945][ T7460] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1361'. [ 163.919726][ T7454] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.942999][ T7460] bond2: entered promiscuous mode [ 163.948321][ T7460] bond2: entered allmulticast mode [ 163.958524][ T3873] bond3: (slave bridge1): failed to get link speed/duplex [ 164.077060][ T3873] bond3: (slave bridge1): failed to get link speed/duplex [ 164.187590][ T3873] bond3: (slave bridge1): failed to get link speed/duplex [ 164.290828][ T7470] netlink: 'syz.0.1365': attribute type 49 has an invalid length. [ 164.297679][ T3873] bond3: (slave bridge1): failed to get link speed/duplex [ 164.351997][ T7470] ip6gretap0: entered promiscuous mode [ 164.363610][ T7470] ip6gretap0: entered allmulticast mode [ 164.447396][ T3882] bond3: (slave bridge1): failed to get link speed/duplex [ 164.492444][ T7488] netlink: 'syz.0.1372': attribute type 1 has an invalid length. [ 164.541020][ T7488] bond8: entered promiscuous mode [ 164.560233][ T7488] 8021q: adding VLAN 0 to HW filter on device bond8 [ 164.610605][ T7496] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1372'. [ 164.722332][ T7488] bond8: (slave bridge5): making interface the new active one [ 164.734483][ T7488] bridge5: entered promiscuous mode [ 164.750724][ T7488] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 164.787234][ T3877] bond3: (slave bridge1): failed to get link speed/duplex [ 164.906496][ T3882] bond3: (slave bridge1): failed to get link speed/duplex [ 165.016573][ T3877] bond3: (slave bridge1): failed to get link speed/duplex [ 165.159807][ T7531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1389'. [ 165.856575][ T3882] batadv1: left promiscuous mode [ 166.055595][ T7544] netlink: 'syz.3.1395': attribute type 1 has an invalid length. [ 166.107487][ T7545] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1395'. [ 166.149149][ T7544] bond5: entered promiscuous mode [ 166.181217][ T7544] 8021q: adding VLAN 0 to HW filter on device bond5 [ 166.264539][ T7545] bond5: (slave bridge2): making interface the new active one [ 166.276495][ T7545] bridge2: entered promiscuous mode [ 166.299645][ T7545] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 166.338017][ T7554] syzkaller0: entered promiscuous mode [ 166.352710][ T7554] syzkaller0: entered allmulticast mode [ 166.417075][ T28] kauditd_printk_skb: 8015 callbacks suppressed [ 166.417165][ T28] audit: type=1400 audit(1780348524.122:10172): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 166.431497][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 166.453911][ T7559] audit: audit_backlog=65 > audit_backlog_limit=64 [ 166.463171][ T3297] audit: audit_backlog=65 > audit_backlog_limit=64 [ 166.478878][ T7559] audit: audit_lost=50 audit_rate_limit=0 audit_backlog_limit=64 [ 166.486703][ T3297] audit: audit_lost=51 audit_rate_limit=0 audit_backlog_limit=64 [ 166.488667][ T28] audit: type=1400 audit(1780348524.122:10173): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 166.506668][ T3297] audit: backlog limit exceeded [ 166.521706][ T3020] audit: audit_lost=52 audit_rate_limit=0 audit_backlog_limit=64 [ 166.529900][ T7559] audit: backlog limit exceeded [ 166.857787][ T7559] syzkaller0: entered promiscuous mode [ 166.864184][ T7559] syzkaller0: entered allmulticast mode [ 166.958366][ T3882] batadv1: left promiscuous mode [ 168.247697][ T7617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1423'. [ 168.308126][ T7622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1423'. [ 168.383378][ T7604] syz.1.1416 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 168.398004][ T7604] CPU: 0 UID: 0 PID: 7604 Comm: syz.1.1416 Not tainted syzkaller #0 PREEMPT(lazy) [ 168.398042][ T7604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 168.398053][ T7604] Call Trace: [ 168.398123][ T7604] [ 168.398131][ T7604] __dump_stack+0x1d/0x30 [ 168.398155][ T7604] dump_stack_lvl+0x95/0xd0 [ 168.398197][ T7604] dump_stack+0x15/0x1b [ 168.398262][ T7604] dump_header+0x80/0x240 [ 168.398321][ T7604] oom_kill_process+0x295/0x350 [ 168.398350][ T7604] out_of_memory+0x97d/0xb80 [ 168.398407][ T7604] try_charge_memcg+0x62f/0xa10 [ 168.398445][ T7604] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 168.398467][ T7604] __alloc_frozen_pages_noprof+0x18a/0x350 [ 168.398527][ T7604] alloc_pages_mpol+0xb3/0x260 [ 168.398549][ T7604] alloc_pages_noprof+0x8f/0x140 [ 168.398636][ T7604] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 168.398663][ T7604] __kvmalloc_node_noprof+0x3d4/0x640 [ 168.398818][ T7604] ? futex_hash_allocate+0x190/0x9a0 [ 168.398882][ T7604] ? futex_hash_allocate+0x190/0x9a0 [ 168.398909][ T7604] futex_hash_allocate+0x190/0x9a0 [ 168.398935][ T7604] ? __schedule+0x951/0xd40 [ 168.398952][ T7604] ? cap_task_prctl+0x13f/0x6b0 [ 168.399035][ T7604] futex_hash_prctl+0xd8/0xf0 [ 168.399060][ T7604] __se_sys_prctl+0x4f4/0x1400 [ 168.399133][ T7604] __x64_sys_prctl+0x67/0x80 [ 168.399210][ T7604] x64_sys_call+0x2533/0x3020 [ 168.399260][ T7604] do_syscall_64+0x12c/0x3b0 [ 168.399288][ T7604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.399308][ T7604] RIP: 0033:0x7fd01dface59 [ 168.399464][ T7604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.399481][ T7604] RSP: 002b:00007fd01c9ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 168.399523][ T7604] RAX: ffffffffffffffda RBX: 00007fd01e225fa0 RCX: 00007fd01dface59 [ 168.399536][ T7604] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 168.399586][ T7604] RBP: 00007fd01e042d6f R08: 0000000000000000 R09: 0000000000000000 [ 168.399597][ T7604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.399609][ T7604] R13: 00007fd01e226038 R14: 00007fd01e225fa0 R15: 00007ffe33cea0f8 [ 168.399625][ T7604] [ 168.399915][ T7604] memory: usage 307196kB, limit 307200kB, failcnt 595 [ 168.403726][ T7622] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1423'. [ 168.413101][ T7604] memory+swap: usage 307560kB, limit 9007199254740988kB, failcnt 0 [ 168.645092][ T7604] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 168.693368][ T7637] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 168.708105][ T7604] Memory cgroup stats for /syz1: [ 168.708531][ T7604] cache 0 [ 168.717902][ T7604] rss 0 [ 168.721994][ T7604] shmem 0 [ 168.728816][ T7604] mapped_file 0 [ 168.733448][ T7604] dirty 0 [ 168.737990][ T7604] writeback 0 [ 168.743240][ T7604] workingset_refault_anon 2096 [ 168.749472][ T7604] workingset_refault_file 1724 [ 168.755976][ T7604] swap 368640 [ 168.761503][ T7604] swapcached 15319040 [ 168.772285][ T7639] netlink: 'syz.0.1428': attribute type 12 has an invalid length. [ 168.781253][ T7639] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1428'. [ 168.793224][ T7604] pgpgin 119013 [ 168.797960][ T7604] pgpgout 119011 [ 168.807447][ T7604] pgfault 126599 [ 168.816576][ T3877] net_ratelimit: 25 callbacks suppressed [ 168.816593][ T3877] bond3: (slave bridge1): failed to get link speed/duplex [ 168.843356][ T7604] pgmajfault 317 [ 168.854322][ T7604] inactive_anon 0 [ 168.862743][ T7604] active_anon 8192 [ 168.867700][ T7604] inactive_file 0 [ 168.872232][ T7604] active_file 0 [ 168.876951][ T7604] unevictable 0 [ 168.881646][ T7604] hierarchical_memory_limit 314572800 [ 168.903036][ T7604] hierarchical_memsw_limit 9223372036854771712 [ 168.923049][ T7604] total_cache 0 [ 168.931193][ T7604] total_rss 0 [ 168.937286][ T3886] bond3: (slave bridge1): failed to get link speed/duplex [ 168.941916][ T7604] total_shmem 0 [ 168.960658][ T7604] total_mapped_file 0 [ 168.973188][ T7604] total_dirty 0 [ 168.983820][ T7604] total_writeback 0 [ 168.995647][ T7604] total_workingset_refault_anon 2096 [ 169.011931][ T7604] total_workingset_refault_file 1724 [ 169.031191][ T7604] total_swap 368640 [ 169.039776][ T7604] total_swapcached 15319040 [ 169.045728][ T7604] total_pgpgin 119527 [ 169.047439][ T3886] bond3: (slave bridge1): failed to get link speed/duplex [ 169.051120][ T7604] total_pgpgout 119525 [ 169.062516][ T7643] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 169.082898][ T7604] total_pgfault 127118 [ 169.095546][ T7604] total_pgmajfault 317 [ 169.107237][ T7604] total_inactive_anon 0 [ 169.129902][ T7604] total_active_anon 8192 [ 169.144569][ T7604] total_inactive_file 0 [ 169.158164][ T7604] total_active_file 0 [ 169.166643][ T3882] bond3: (slave bridge1): failed to get link speed/duplex [ 169.169922][ T7604] total_unevictable 0 [ 169.202614][ T7604] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1416,pid=7603,uid=0 [ 169.261674][ T7604] Memory cgroup out of memory: Killed process 7603 (syz.1.1416) total-vm:96216kB, anon-rss:1232kB, file-rss:22216kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 169.279126][ T3882] bond3: (slave bridge1): failed to get link speed/duplex [ 169.311440][ T7653] batadv1: entered promiscuous mode [ 169.326289][ T7653] batadv1: entered allmulticast mode [ 169.362026][ T7656] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1435'. [ 169.403207][ T3882] bond3: (slave bridge1): failed to get link speed/duplex [ 169.526494][ T3882] bond3: (slave bridge1): failed to get link speed/duplex [ 169.636595][ T3882] bond3: (slave bridge1): failed to get link speed/duplex [ 169.766551][ T3882] bond3: (slave bridge1): failed to get link speed/duplex [ 169.888035][ T3882] bond3: (slave bridge1): failed to get link speed/duplex [ 171.030271][ T7720] netlink: 'syz.2.1460': attribute type 5 has an invalid length. [ 171.429628][ T28] kauditd_printk_skb: 16757 callbacks suppressed [ 171.429672][ T28] audit: type=1400 audit(1780348529.132:24725): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 171.477045][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 171.502740][ T3020] audit: audit_lost=788 audit_rate_limit=0 audit_backlog_limit=64 [ 171.511189][ T28] audit: type=1400 audit(1780348529.142:24726): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 171.535802][ T3020] audit: backlog limit exceeded [ 171.554253][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 171.563773][ T7718] audit: audit_backlog=65 > audit_backlog_limit=64 [ 171.573496][ T28] audit: type=1400 audit(1780348529.142:24727): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 171.584652][ T3020] audit: audit_lost=789 audit_rate_limit=0 audit_backlog_limit=64 [ 171.645663][ T28] audit: type=1400 audit(1780348529.142:24728): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 172.229103][ T7756] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1475'. [ 172.254642][ T7756] bond6: entered promiscuous mode [ 172.265415][ T7756] bond6: entered allmulticast mode [ 172.378330][ T7767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1490'. [ 172.409168][ T7766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1479'. [ 172.418848][ T7768] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1478'. [ 172.441138][ T7766] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.492485][ T7766] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.692910][ T7784] netlink: 'syz.0.1487': attribute type 13 has an invalid length. [ 173.144086][ T7788] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1488'. [ 173.876796][ T3873] net_ratelimit: 44 callbacks suppressed [ 173.876813][ T3873] bond7: (slave bridge2): failed to get link speed/duplex [ 173.907817][ T3873] bond3: (slave bridge1): failed to get link speed/duplex [ 173.929550][ T7821] syzkaller0: entered promiscuous mode [ 173.956505][ T7821] syzkaller0: entered allmulticast mode [ 174.016555][ T3873] bond7: (slave bridge2): failed to get link speed/duplex [ 174.036659][ T3873] bond3: (slave bridge1): failed to get link speed/duplex [ 174.196594][ T3882] bond3: (slave bridge1): failed to get link speed/duplex [ 174.207757][ T3877] bond7: (slave bridge2): failed to get link speed/duplex [ 174.308696][ T3882] bond3: (slave bridge1): failed to get link speed/duplex [ 174.316563][ T3882] bond7: (slave bridge2): failed to get link speed/duplex [ 174.417793][ T3877] bond3: (slave bridge1): failed to get link speed/duplex [ 174.427078][ T3877] bond7: (slave bridge2): failed to get link speed/duplex [ 175.056147][ T7854] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 176.429881][ T7889] syzkaller0: entered promiscuous mode [ 176.435654][ T7889] syzkaller0: entered allmulticast mode [ 176.441795][ T28] kauditd_printk_skb: 18675 callbacks suppressed [ 176.441812][ T28] audit: type=1400 audit(1780348534.142:42129): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 176.478995][ T28] audit: type=1400 audit(1780348534.142:42130): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 176.512419][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 176.525900][ T3020] audit: audit_lost=1215 audit_rate_limit=0 audit_backlog_limit=64 [ 176.556166][ T28] audit: type=1400 audit(1780348534.142:42131): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 176.571073][ T3020] audit: backlog limit exceeded [ 176.582084][ T3305] audit: audit_backlog=65 > audit_backlog_limit=64 [ 176.589760][ T7891] audit: audit_backlog=65 > audit_backlog_limit=64 [ 176.606223][ T3305] audit: audit_lost=1216 audit_rate_limit=0 audit_backlog_limit=64 [ 176.606542][ T7891] audit: audit_lost=1217 audit_rate_limit=0 audit_backlog_limit=64 [ 176.691882][ T7894] netlink: 'syz.4.1530': attribute type 1 has an invalid length. [ 176.765177][ T7894] bond4: (slave geneve2): making interface the new active one [ 176.801297][ T7894] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 176.831992][ T7898] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1530'. [ 176.870022][ T3886] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 176.879441][ T3886] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 176.904502][ T3886] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 176.931077][ T3886] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 178.305388][ T7924] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1539'. [ 178.362020][ T7924] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.400674][ T7924] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.434714][ T7931] netlink: 'syz.0.1544': attribute type 10 has an invalid length. [ 178.435054][ T7924] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 178.478953][ T7924] bond0 (unregistering): Released all slaves [ 178.537480][ T7931] team0: Port device dummy0 added [ 178.986493][ T3873] net_ratelimit: 73 callbacks suppressed [ 178.986511][ T3873] bond3: (slave bridge1): failed to get link speed/duplex [ 179.016542][ T3873] bond7: (slave bridge2): failed to get link speed/duplex [ 179.107574][ T3873] bond3: (slave bridge1): failed to get link speed/duplex [ 179.127618][ T3873] bond7: (slave bridge2): failed to get link speed/duplex [ 179.217043][ T3877] bond3: (slave bridge1): failed to get link speed/duplex [ 179.247492][ T3877] bond7: (slave bridge2): failed to get link speed/duplex [ 179.326655][ T3886] bond3: (slave bridge1): failed to get link speed/duplex [ 179.357039][ T3886] bond7: (slave bridge2): failed to get link speed/duplex [ 179.378374][ T7960] sit0: entered allmulticast mode [ 179.417592][ T7960] sit0: entered promiscuous mode [ 179.497709][ T3873] bond3: (slave bridge1): failed to get link speed/duplex [ 179.506585][ T3873] bond7: (slave bridge2): failed to get link speed/duplex [ 179.888356][ T7981] netlink: 'syz.4.1566': attribute type 1 has an invalid length. [ 179.940378][ T7981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.973807][ T7981] vlan0: entered promiscuous mode [ 179.985717][ T7981] bond0: entered promiscuous mode [ 179.997626][ T7981] vlan0: entered allmulticast mode [ 180.004496][ T7981] bond0: entered allmulticast mode [ 180.096901][ T7981] bond0: (slave bridge3): making interface the new active one [ 180.122184][ T7981] bridge3: entered promiscuous mode [ 180.128200][ T7981] bridge3: entered allmulticast mode [ 180.136219][ T7981] bond0: (slave bridge3): Enslaving as an active interface with an up link [ 181.446621][ T28] kauditd_printk_skb: 18235 callbacks suppressed [ 181.446656][ T28] audit: type=1400 audit(1780348539.162:59477): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 181.465827][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 181.489651][ T8023] audit: audit_backlog=65 > audit_backlog_limit=64 [ 181.496291][ T8023] audit: audit_lost=1514 audit_rate_limit=0 audit_backlog_limit=64 [ 181.503616][ T3020] audit: audit_lost=1515 audit_rate_limit=0 audit_backlog_limit=64 [ 181.507929][ T28] audit: type=1400 audit(1780348539.162:59478): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 181.536490][ T8023] audit: backlog limit exceeded [ 181.551799][ T8023] audit: audit_backlog=65 > audit_backlog_limit=64 [ 181.560086][ T3020] audit: backlog limit exceeded [ 181.565058][ T8023] audit: audit_lost=1516 audit_rate_limit=0 audit_backlog_limit=64 [ 181.864086][ T8037] netlink: 'syz.1.1587': attribute type 1 has an invalid length. [ 181.926979][ T8037] 8021q: adding VLAN 0 to HW filter on device bond3 [ 182.055054][ T8037] bond3: (slave ip6gretap2): making interface the new active one [ 182.078259][ T8037] bond3: (slave ip6gretap2): Enslaving as an active interface with an up link [ 183.061136][ T8082] sit0: entered allmulticast mode [ 183.111222][ T8082] sit0: entered promiscuous mode [ 183.989007][ T8115] netlink: 'syz.1.1620': attribute type 10 has an invalid length. [ 184.016538][ T3873] net_ratelimit: 76 callbacks suppressed [ 184.016557][ T3873] bond3: (slave bridge1): failed to get link speed/duplex [ 184.066537][ T3873] bond7: (slave bridge2): failed to get link speed/duplex [ 184.137592][ T3877] bond3: (slave bridge1): failed to get link speed/duplex [ 184.186569][ T3877] bond7: (slave bridge2): failed to get link speed/duplex [ 184.257821][ T3877] bond3: (slave bridge1): failed to get link speed/duplex [ 184.306926][ T3877] bond7: (slave bridge2): failed to get link speed/duplex [ 184.376497][ T3882] bond3: (slave bridge1): failed to get link speed/duplex [ 184.427144][ T3882] bond7: (slave bridge2): failed to get link speed/duplex [ 184.497336][ T3882] bond3: (slave bridge1): failed to get link speed/duplex [ 184.556539][ T3882] bond7: (slave bridge2): failed to get link speed/duplex [ 185.410382][ T8165] sit0: entered allmulticast mode [ 185.433145][ T8165] sit0: entered promiscuous mode [ 185.820848][ T8179] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1644'. [ 185.858088][ T8179] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.870274][ T8179] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.891738][ T8179] bond0 (unregistering): Released all slaves [ 186.457198][ T28] kauditd_printk_skb: 16004 callbacks suppressed [ 186.457216][ T28] audit: type=1400 audit(2000000002.550:75482): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 186.507551][ T28] audit: type=1400 audit(2000000002.550:75483): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 186.540324][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 186.544960][ T8195] audit: audit_backlog=65 > audit_backlog_limit=64 [ 186.558047][ T28] audit: type=1400 audit(2000000002.550:75484): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 186.565999][ T3020] audit: audit_lost=1517 audit_rate_limit=0 audit_backlog_limit=64 [ 186.588954][ T8195] audit: audit_lost=1518 audit_rate_limit=0 audit_backlog_limit=64 [ 186.608098][ T8195] audit: backlog limit exceeded [ 186.612994][ T28] audit: type=1400 audit(2000000002.550:75485): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 186.647944][ T3020] audit: backlog limit exceeded [ 188.407901][ T8235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1667'. [ 189.047496][ T3877] net_ratelimit: 78 callbacks suppressed [ 189.047516][ T3877] bond7: (slave bridge2): failed to get link speed/duplex [ 189.076530][ T3877] bond3: (slave bridge1): failed to get link speed/duplex [ 189.166535][ T3873] bond7: (slave bridge2): failed to get link speed/duplex [ 189.187016][ T3873] bond3: (slave bridge1): failed to get link speed/duplex [ 189.277118][ T3877] bond7: (slave bridge2): failed to get link speed/duplex [ 189.296505][ T3877] bond3: (slave bridge1): failed to get link speed/duplex [ 189.304764][ T8245] ================================================================== [ 189.312885][ T8245] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 189.320745][ T8245] [ 189.323080][ T8245] write to 0xffffea0004fcfa18 of 8 bytes by task 8241 on cpu 0: [ 189.330712][ T8245] __filemap_remove_folio+0x201/0x2e0 [ 189.336098][ T8245] filemap_remove_folio+0x6d/0x1d0 [ 189.341220][ T8245] truncate_inode_folio+0x42/0x50 [ 189.346250][ T8245] shmem_undo_range+0x26d/0xb10 [ 189.351110][ T8245] shmem_fallocate+0x881/0x920 [ 189.355887][ T8245] vfs_fallocate+0x3b6/0x400 [ 189.360493][ T8245] __x64_sys_fallocate+0x7a/0xd0 [ 189.365443][ T8245] x64_sys_call+0x298e/0x3020 [ 189.370130][ T8245] do_syscall_64+0x12c/0x3b0 [ 189.374748][ T8245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.380651][ T8245] [ 189.382977][ T8245] read to 0xffffea0004fcfa18 of 8 bytes by task 8245 on cpu 1: [ 189.390522][ T8245] folio_mapping+0xa1/0xe0 [ 189.394952][ T8245] evict_folios+0x297c/0x3370 [ 189.399641][ T8245] try_to_shrink_lruvec+0x858/0xc20 [ 189.404851][ T8245] shrink_lruvec+0x256/0x1bc0 [ 189.409533][ T8245] shrink_node+0x697/0x20a0 [ 189.414054][ T8245] do_try_to_free_pages+0x408/0xc90 [ 189.419266][ T8245] try_to_free_mem_cgroup_pages+0x201/0x420 [ 189.425217][ T8245] try_charge_memcg+0x373/0xa10 [ 189.430084][ T8245] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 189.435636][ T8245] __alloc_frozen_pages_noprof+0x18a/0x350 [ 189.441452][ T8245] alloc_pages_mpol+0xb3/0x260 [ 189.446227][ T8245] alloc_pages_noprof+0x8f/0x140 [ 189.451170][ T8245] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 189.457069][ T8245] __kvmalloc_node_noprof+0x3d4/0x640 [ 189.462450][ T8245] futex_hash_allocate+0x190/0x9a0 [ 189.467572][ T8245] futex_hash_prctl+0xd8/0xf0 [ 189.472264][ T8245] __se_sys_prctl+0x4f4/0x1400 [ 189.477052][ T8245] __x64_sys_prctl+0x67/0x80 [ 189.481647][ T8245] x64_sys_call+0x2533/0x3020 [ 189.486332][ T8245] do_syscall_64+0x12c/0x3b0 [ 189.490946][ T8245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.496845][ T8245] [ 189.499168][ T8245] value changed: 0xffff88811c4374f0 -> 0x0000000000000000 [ 189.506275][ T8245] [ 189.508597][ T8245] Reported by Kernel Concurrency Sanitizer on: [ 189.514746][ T8245] CPU: 1 UID: 0 PID: 8245 Comm: syz.2.1670 Not tainted syzkaller #0 PREEMPT(lazy) [ 189.524045][ T8245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 189.534109][ T8245] ================================================================== [ 189.544546][ T3877] bond3: (slave bridge1): failed to get link speed/duplex [ 189.552420][ T3877] bond7: (slave bridge2): failed to get link speed/duplex [ 189.656999][ T3873] bond3: (slave bridge1): failed to get link speed/duplex [ 189.667209][ T3873] bond7: (slave bridge2): failed to get link speed/duplex [ 191.468463][ T28] kauditd_printk_skb: 25259 callbacks suppressed [ 191.468553][ T28] audit: type=1400 audit(2000000007.560:100745): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 191.480933][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 191.496291][ T28] audit: type=1400 audit(2000000007.570:100746): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 191.496326][ T28] audit: type=1400 audit(2000000007.570:100747): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 191.496346][ T28] audit: type=1400 audit(2000000007.570:100748): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 191.503026][ T3020] audit: audit_lost=1519 audit_rate_limit=0 audit_backlog_limit=64 [ 191.525844][ T28] audit: type=1400 audit(2000000007.570:100749): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 191.545637][ T3020] audit: backlog limit exceeded [ 191.567860][ T28] audit: type=1400 audit(2000000007.570:100750): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 191.575255][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 194.166503][ T3877] net_ratelimit: 78 callbacks suppressed [ 194.166523][ T3877] bond7: (slave bridge2): failed to get link speed/duplex [ 194.207331][ T3877] bond3: (slave bridge1): failed to get link speed/duplex [ 194.286487][ T3877] bond7: (slave bridge2): failed to get link speed/duplex [ 194.326491][ T3882] bond3: (slave bridge1): failed to get link speed/duplex [ 194.396512][ T3877] bond7: (slave bridge2): failed to get link speed/duplex [ 194.436487][ T3877] bond3: (slave bridge1): failed to get link speed/duplex [ 194.506478][ T3882] bond7: (slave bridge2): failed to get link speed/duplex [ 194.546459][ T3882] bond3: (slave bridge1): failed to get link speed/duplex [ 194.616490][ T3877] bond7: (slave bridge2): failed to get link speed/duplex [ 194.656462][ T3877] bond3: (slave bridge1): failed to get link speed/duplex [ 196.477121][ T28] kauditd_printk_skb: 47445 callbacks suppressed [ 196.477139][ T28] audit: type=1400 audit(2000000012.580:148194): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 196.483579][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 196.483657][ T28] audit: type=1400 audit(2000000012.580:148195): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 196.504836][ T3020] audit: audit_lost=1521 audit_rate_limit=0 audit_backlog_limit=64 [ 196.511732][ T28] audit: type=1400 audit(2000000012.580:148196): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 196.532772][ T3020] audit: backlog limit exceeded [ 196.533027][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 196.533042][ T3020] audit: audit_lost=1522 audit_rate_limit=0 audit_backlog_limit=64 [ 196.533058][ T3020] audit: backlog limit exceeded [ 196.533118][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 199.217271][ T3882] net_ratelimit: 80 callbacks suppressed [ 199.217288][ T3882] bond7: (slave bridge2): failed to get link speed/duplex [ 199.236480][ T3882] bond3: (slave bridge1): failed to get link speed/duplex