last executing test programs: 1m41.679959277s ago: executing program 4 (id=24): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd23, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x49811, 0x10831}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x4000000) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='coredump_filter\x00') write$cgroup_int(r1, &(0x7f0000000180)=0x11, 0x12) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x40881) 1m41.491784843s ago: executing program 4 (id=29): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ec0)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x70fd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r2, {0xc, 0xc}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x86, 0x1}, {0x5, 0x7}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) 1m41.242456361s ago: executing program 4 (id=35): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private0, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x32}, 0x1}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 1m41.195686122s ago: executing program 4 (id=37): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000000)='./file0/../file0/file0\x00', 0x0, 0x28f101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, 0x0) 1m41.178418013s ago: executing program 4 (id=39): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x1, 0xec02b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x477, 0x2800000, 0x9, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00') 1m40.435690376s ago: executing program 4 (id=76): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) 1m40.392986367s ago: executing program 32 (id=76): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) 1m22.766376157s ago: executing program 1 (id=490): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0x2d, &(0x7f00000004c0)=[{&(0x7f0000000080)="93", 0x1}], 0x1}, 0x4011) recvmsg$unix(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x10061) recvmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2122) sendmsg$inet(r1, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000003c40)=[{&(0x7f0000002a00)="98", 0x1}], 0x1}, 0x20000011) 1m21.762417138s ago: executing program 1 (id=513): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7000001000000008500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m21.7266644s ago: executing program 0 (id=504): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0xfffffffc, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x2000, 0x900}, [@IFLA_MASTER={0x8, 0x3, r2}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x40}, 0x1, 0xd, 0x0, 0x480c5}, 0x20000000) 1m21.213819535s ago: executing program 0 (id=508): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) sendmmsg$inet(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000001c0)="fc6f19", 0x3}], 0x1}}], 0x1, 0x40) 1m21.213421355s ago: executing program 1 (id=509): newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0xee01, r0, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) fsetxattr(r1, &(0x7f0000003480)=@random={'user.', '$#\xea@-@&\\^\x00'}, 0x0, 0x0, 0x0) flistxattr(r1, 0x0, 0x0) 1m21.184092187s ago: executing program 1 (id=511): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x4) 1m21.178402747s ago: executing program 0 (id=512): prctl$PR_SET_KEEPCAPS(0x8, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x0) request_key(&(0x7f0000000480)='user\x00', &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000540)='{\x00', 0xffffffffffffffff) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x1800, 0x0) preadv2(r0, &(0x7f0000000680)=[{&(0x7f0000000280)=""/134, 0x86}], 0x1, 0xfffffffd, 0x558, 0x12) 1m21.167711067s ago: executing program 1 (id=514): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001000010400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000c001040028001280090001007665746800000000180002801400010000000000", @ANYRES32=r2, @ANYBLOB="a00402000100000008000300", @ANYRES32=r2], 0x50}}, 0x24000840) 1m21.012819522s ago: executing program 0 (id=527): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000040)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}, {@jqfmt_vfsv1}]}, 0xc1, 0x7eb, &(0x7f0000001fc0)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4c000, 0x14c) preadv2(r0, &(0x7f0000000780)=[{&(0x7f0000000300)=""/209, 0x3a}], 0x1, 0x3f02, 0x22d48, 0x8) 1m20.801103368s ago: executing program 0 (id=520): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4800) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000000280)="$eJzs3c1vVFUbAPDnTj9oKXk7kDcqLqSJMZAoLS1gGuMCtoY0+BE3urDSgkiBhtZo0YSS4MbEuDHGxJUL8b9QIltWunLhxpUhIWpYmjjmztxbOu1Mv2jnEu7vlwxz7zlze86lfeace+acOwGU1lD6TyVif0TMJhGDyeJSXndkmUON193/+5Mz6SOJWu31P5NIsrT89Un2PJAd3BcRP/+UxL6u1eXOLVy9MDkzM30l2x+Zvzg7Mrdw9fD5i5Pnps9NXxp7cWz8+LHj46NHtnRe11qknbrx/oeDn0289d03/ySj3/82kcSJeCV74fLz2C5DMVT/P0lWZw2Mb3dhBenK/k5qtVotT0u6i60TG5f//noi4skYjK548MsbjE9fLbRywI6qJY33bqCMEvEPJZX3A/Jr+5XXwZVCeiVAJ9w72RgAWB3/3Y2xweirjw3svp/E8mGdJCK2NjLXbE9E3Lk9cePs7YkbsUPjcEBri9cj4qlW8Z/U478afVGtx3+lKf7TfsHp7DlNf22L5a8cKhb/0DmN+O9bM/6jTfy/kz5fa8Twu1ssv/pg873+pvjv3+opAQAAAAAAQGndOhkRL7T6/L+yNP8nWsz/GYiIE9tQ/tCK/dWf/1fubkMxQAv3Tka83HL+byWf/VvtWraEtRo9ydnzM9NHIuJ/EXEoenal+6NrlHH4831ft8sbyub/5Y+0/DvZXMCsHne7dzUfMzU5P/kQpwxk7l2PeLrl/N9kqf1PWrT/6TvD7AbL2PfczdPt8taPf2Cn1L6NONiy/X9w14pk7ftzjNT7AyN5r2C1Zz7+4od25W81/t1iAh5e2v7vXjv+q8ny+/XMbb6MowvdtXZ5W+3/9yZv1O8q1JulfTQ5P39lNKI3OdWVpjalj22+zvA4yuMhj5c0/g89u/b4X6v+f39ELK742clfzWuKc0/8O/B7u/ro/0Nx0vif2lT7v/mNsZvVH9uVv7H2/1i9rT+UpRj/g4av8jDtbU5vEY7drbI6XV8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBxUImJPJJXhpe1KZXg4YiAi/h+7KzOX5+afP3v5g0tTaV79+/8r+Tf9Djb2k/z7/6vL9sdW7B+NiL0R8WVXf31/+MzlmamiTx4AAAAAAAAAAAAAAAAAAAAeEQNt1v+n/ugqunbAjusuugJAYVrE/y9F1APoPO0/lJf4h/IS/1Be4h/KS/xDea0d/2+Pd6wiQMdp/6G8xD8AAAAAADxW9h649WsSEYsv9dcfqd4sr6fQmgE7rVJ0BYDCuMUPlJepP1BervGBZJ38vrYHrXfkWmbPPMTBAAAAAAAAAAAAAFA6B/db/w9lZf0/lJf1/1Be+fr/AwXXA+g81/hArLOSv+X6/3WPAgAAAAAAAAAAAAC209zC1QuTMzPTV2y8+WhUo5MbtVrtWvpX8KjUZ/s3kmyGekcKzafCd/5Mezdygvlav4395OLekwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGb/BQAA//8wviV5") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 1m20.719685861s ago: executing program 1 (id=521): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x4000}]}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f00000002c0)={'syzkaller0\x00'}) 1m20.688490052s ago: executing program 33 (id=521): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x4000}]}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f00000002c0)={'syzkaller0\x00'}) 1m20.351776293s ago: executing program 0 (id=525): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x4, 0xc, 0x6, 0x8, 0x20, 0x0, 0x7}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000140)={r1, 0xf371}, 0x8) 1m20.350710842s ago: executing program 34 (id=525): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x4, 0xc, 0x6, 0x8, 0x20, 0x0, 0x7}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000140)={r1, 0xf371}, 0x8) 1m19.967585985s ago: executing program 3 (id=530): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 1m16.415202175s ago: executing program 3 (id=550): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4}, 0xe) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280)={0xfbca, 0x1ff, 0x1, 0x4, 0x7, 0x0, 0xd}, 0xc) listen(r0, 0x2) 1m16.013432918s ago: executing program 3 (id=563): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2401, 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000000)={{0x2, 0x4e20, @empty}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x68, {0x2, 0x4e24, @loopback}, 'syzkaller0\x00'}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x8, 0x6, 0x2, 0xfffffffffffffffe, 0x7, 0xb, 0x651, 0xfffffffffffffff9, 0x8000009657, 0x7, 0x7fffffff, 0xffffffffffffffff, 0x0, 0xb, 0x80000000000000, 0x0, 0x1, 0x2, 0x94d6, 0x0, 0x40000003, 0xfffffffffffffffb, 0x0, 0xffffffffffff9d06, 0x3, 0x1}) 1m15.959025429s ago: executing program 3 (id=556): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x4) 1m15.824215364s ago: executing program 3 (id=572): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000036c0)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x1, @local, 0x6}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000540)='O', 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e22, 0x2, @private1, 0xfffffff8}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000001c0)='Q', 0x1}], 0x1}}], 0x2, 0x4040044) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa2ea}}, [0x0, 0x2, 0x100000001, 0xfffffffffffffff7, 0x3, 0x8, 0x0, 0x6, 0x7ff, 0x8, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0xfffffffffffff001, 0x1000]}, &(0x7f0000000180)=0x100) 1m14.605638322s ago: executing program 3 (id=578): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r3, @ANYRES64=r0], 0x44}}, 0x2000850) 1m14.572323873s ago: executing program 35 (id=578): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r3, @ANYRES64=r0], 0x44}}, 0x2000850) 1m11.328136964s ago: executing program 5 (id=615): r0 = socket$inet(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000440)={0x2, 0x6e24, @local}, 0x10) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000080)=0x9, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) 1m11.253783157s ago: executing program 5 (id=617): ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) chdir(0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000001100)=ANY=[@ANYBLOB="f001000000010104200000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200ac1e00010800074000000000080008400000000280000d8014000380060001004e240000060002004e240000140005000000000000000000000000000000000108000200e0000002140004000000000000000000000000000000000014000400fc00000000000000000000000000000114000400fe80000000000000000000000000002308000200ac1414bb08000100e00000022c00108008000340000000"], 0x1f0}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 1m11.13795956s ago: executing program 5 (id=619): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7000001000000008500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m10.979327665s ago: executing program 5 (id=620): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x21) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000040)='./bus\x00', 0x200) 1m10.939674347s ago: executing program 5 (id=621): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40801}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000030a0fdb00000000000000000a0060050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f757465000000080005400000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x4e01, 0x3, @empty, 0x10000004}, 0x1c) 1m10.690099884s ago: executing program 5 (id=623): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000000c0)=0xa, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000840)=0x4b63, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}, 0x75}], 0x1, 0x2120, 0x0) 1m10.653732305s ago: executing program 36 (id=623): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000000c0)=0xa, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000840)=0x4b63, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}, 0x75}], 0x1, 0x2120, 0x0) 3.175067951s ago: executing program 6 (id=2484): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000001c0)={r2}, &(0x7f0000000280)=0x8) 2.788411963s ago: executing program 6 (id=2475): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@remote, 0x0, 0x3c}, 0xa, @in=@local, 0x2, 0x4, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r2, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x88, 0x7, @mcast2}, 0x1c, 0x0}, 0x20008b88) 2.727309715s ago: executing program 6 (id=2490): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfffa) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000100)=0x8, 0x4) 2.712988275s ago: executing program 6 (id=2479): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r0 = shmget$private(0x0, 0x800000, 0x1, &(0x7f0000173000/0x800000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) shmctl$SHM_LOCK(r0, 0xb) 2.364705816s ago: executing program 8 (id=2480): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0xd, 0xc8c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x4, 0x1}, 0x101a1c, 0x8001, 0xffffffff, 0x0, 0x6b6, 0x0, 0x2000, 0x0, 0x2}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x6) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x77359400}, 0x10) 2.364601276s ago: executing program 9 (id=2481): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x3}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6", 0x1, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000fff000/0x1000)=nil, 0x3000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x253f4c600745cb57, 0x0, 0x0, 0xfffffffffffffef6}, &(0x7f0000000100)=0x35) 2.337372857s ago: executing program 8 (id=2482): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xbfb3) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)) r1 = syz_open_pts(r0, 0xc82) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 2.330555908s ago: executing program 9 (id=2485): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1ff, 0x80900) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x40004580, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$PTRACE_SETSIGMASK(0x420b, r1, 0x8, &(0x7f00000000c0)={[0x1]}) 2.227788851s ago: executing program 9 (id=2486): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x39, 0x10000000000003, 0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000980)={0x1c, &(0x7f00000003c0)={0x20, 0xe, 0x4, "1b1cbf5a"}, 0x0, 0x0}) 2.031069387s ago: executing program 8 (id=2487): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x400000000000247, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000ec0)=[{{0x0, 0x8c, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x3ec0) 1.810791484s ago: executing program 7 (id=2488): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r1) r2 = shmget$private(0x0, 0x800000, 0x1, &(0x7f0000173000/0x800000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmctl$SHM_UNLOCK(r2, 0xc) 1.751793326s ago: executing program 7 (id=2489): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 1.718293307s ago: executing program 9 (id=2491): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) syz_usb_connect$uac1(0x2, 0x0, 0x0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x27, &(0x7f0000000a80)=@string={0x27, 0x3, "39ddb63735ce0dd9fa273255e105dba29c0582e433a64e0edaba1fc4ce0e2ef1e92edfb86b"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x243d}}]}) syz_io_uring_setup(0x3084, &(0x7f00000002c0), &(0x7f0000ffc000), &(0x7f0000ffc000), &(0x7f0000000000)) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.548444601s ago: executing program 6 (id=2492): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000000c0)='./file0\x00', 0x10108c0, &(0x7f0000000140)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt,shortname=win95\x00\x00ni_xlate=0,showexec,shortname=winnt,shortname=win95,nonumtairodir,nonumtail=0,shortname=mixed,nfs=nostale_ro,utf8=0,\x00', @ANYRES32, @ANYRES64, @ANYRESHEX, @ANYRESHEX], 0x1, 0x26c, &(0x7f0000000340)="$eJzs3U9rU1kYB+A3bTpJC0OyGCgzDMwdZjOr0HaYfcrQgWECipKFriw2RWlqoYWCLtruit9Bv4Iu3QouxK1fQASpghvrqgshEm//JDWJjZpG7PNs+nLu++Ock17upYueXPl1eWlhZW1xd3cn8vlMZMtRjr1MFGMkRiO1FQDA92Sv0Yg3jdSw1wIAnA7vfwA4e3q9/zNbh2PnT39lAMCgfNHf/yMDWRIAMGAXL13+f7ZSmbuQJPmI5e316no1/Zlen12M61GPWkxFId5FNA6l9b//VeamkqaXxcgvb46k+c316mh7fjoKUeycn05SUW3mDvJjMbGffzYRtZiJQvzUOT/TMf9D/PlHy/ylKMTTq7ES9ViIZjbN5yJiYzpJ/jlXOZbPfegDAAAAAAAAAAAAAAAAAAAAAIBBKCWHiu3n36Tn95RK3a6n+dbzgcZ7nQ/U2Dx2vk42fskOd+8AAAAAAAAAAAAAAAAAAADwrVi7eWtpvl6vrfYqbjy592gnlwY+2dy7yOzP219qu2fP+Ml2caz48fcXdzpdykWu38/n84qxiGgdSfanfPjbACf9WsXjnWs//7U2+Xe3nsi2jtxubrWtp8uNlB3UB/66ENG1J9/3Ddla3D8oym8/6jm4lWqr48P+xU3eLc8/2Hj+6qSpHg+NxuggHkUAAAAAAAAAAAAAAAAAAHDmHf3T77BXAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADDc/T9//0WuWgbyXdt3hr2HgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4H0AAAD//7qXlSU=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) 1.509444043s ago: executing program 2 (id=2494): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x3, 0x81, 0xffffffff}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x3f) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x19) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) set_mempolicy(0x3, 0x0, 0xc) 1.419753026s ago: executing program 2 (id=2495): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x24111, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xf}, 0x106200, 0xfff, 0x20da, 0x9, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r0, &(0x7f0000000b00)=[{{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}], 0x1}}], 0x1, 0x0) 946.832601ms ago: executing program 7 (id=2496): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0xd, 0xc8c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x4, 0x1}, 0x101a1c, 0x8001, 0xffffffff, 0x0, 0x6b6, 0x0, 0x2000, 0x0, 0x2}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x6) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x77359400}, 0x10) 946.443241ms ago: executing program 2 (id=2506): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x400000000000247, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000ec0)=[{{0x0, 0x8c, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x3ec0) 946.012141ms ago: executing program 8 (id=2507): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x3, 0x81, 0xffffffff}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x3f) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x19) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) set_mempolicy(0x3, 0x0, 0xc) 944.379891ms ago: executing program 9 (id=2508): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 910.213462ms ago: executing program 7 (id=2497): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x3}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6", 0x1, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000fff000/0x1000)=nil, 0x3000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x253f4c600745cb57, 0x0, 0x0, 0xfffffffffffffef6}, &(0x7f0000000100)=0x35) 910.139102ms ago: executing program 8 (id=2498): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1ff, 0x80900) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x40004580, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$PTRACE_SETSIGMASK(0x420b, r1, 0x8, &(0x7f00000000c0)={[0x1]}) 91.288107ms ago: executing program 9 (id=2499): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xbfb3) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)) r1 = syz_open_pts(r0, 0xc82) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 90.811367ms ago: executing program 6 (id=2512): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x400000000000247, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000ec0)=[{{0x0, 0x8c, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x3ec0) 90.597187ms ago: executing program 7 (id=2500): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x11, 0xa, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 90.521747ms ago: executing program 8 (id=2501): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x380000c, &(0x7f0000000340)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@data_journal}]}, 0x1, 0x437, &(0x7f0000000900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 89.218378ms ago: executing program 2 (id=2513): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1ff, 0x80900) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x40004580, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$PTRACE_SETSIGMASK(0x420b, r1, 0x8, &(0x7f00000000c0)={[0x1]}) 52.888048ms ago: executing program 7 (id=2502): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x39, 0x10000000000003, 0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000980)={0x1c, &(0x7f00000003c0)={0x20, 0xe, 0x4, "1b1cbf5a"}, 0x0, 0x0}) 36.515449ms ago: executing program 2 (id=2503): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r1) r2 = shmget$private(0x0, 0x800000, 0x1, &(0x7f0000173000/0x800000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmctl$SHM_UNLOCK(r2, 0xc) 0s ago: executing program 2 (id=2504): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r0 = shmget$private(0x0, 0x800000, 0x1, &(0x7f0000173000/0x800000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) shmctl$SHM_LOCK(r0, 0xb) kernel console output (not intermixed with test programs): 60.796199][ T5329] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.803327][ T5329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.829364][ T5329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.840150][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.848189][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.859425][ T5329] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.869007][ T2758] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.876096][ T2758] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.885953][ T2758] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.893016][ T2758] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.981932][ T5329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.069209][ T5329] veth0_vlan: entered promiscuous mode [ 61.077079][ T5329] veth1_vlan: entered promiscuous mode [ 61.090858][ T5329] veth0_macvtap: entered promiscuous mode [ 61.098806][ T5329] veth1_macvtap: entered promiscuous mode [ 61.109672][ T5329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.120437][ T5329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.130546][ T30] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.139658][ T30] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.151790][ T30] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.160554][ T30] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.257499][ T5382] loop6: detected capacity change from 0 to 2048 [ 61.266076][ T5387] loop5: detected capacity change from 0 to 1024 [ 61.299297][ T5382] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 61.311929][ T5387] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.327843][ T5391] loop8: detected capacity change from 0 to 1024 [ 61.335219][ T5391] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 61.342402][ T5387] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.361378][ T5387] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: comm syz.5.583: lblock 0 mapped to illegal pblock 0 (length 1) [ 61.364967][ T28] audit: type=1400 audit(1781535419.886:561): avc: denied { write } for pid=5381 comm="syz.6.593" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 61.396598][ T5387] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #15: comm syz.5.583: lblock 0 mapped to illegal pblock 0 (length 1) [ 61.416158][ T5391] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.416448][ T28] audit: type=1400 audit(1781535419.886:562): avc: denied { write } for pid=5386 comm="syz.5.583" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 61.430382][ T4947] EXT4-fs error (device loop6): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 11 [ 61.456267][ T28] audit: type=1400 audit(1781535419.986:563): avc: denied { remount } for pid=5390 comm="syz.8.585" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 61.482638][ T5387] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #15: comm syz.5.583: lblock 0 mapped to illegal pblock 0 (length 1) [ 61.493842][ T4947] EXT4-fs error (device loop6): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 11 [ 61.497444][ T5387] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #15: comm syz.5.583: lblock 0 mapped to illegal pblock 0 (length 1) [ 61.521589][ T5387] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #15: comm syz.5.583: lblock 0 mapped to illegal pblock 0 (length 1) [ 61.536011][ T5387] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #15: comm syz.5.583: lblock 0 mapped to illegal pblock 0 (length 1) [ 61.537413][ C1] vcan0: j1939_tp_rxtimer: 0xffff888105b76200: rx timeout, send abort [ 61.549976][ T5387] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #15: comm syz.5.583: lblock 0 mapped to illegal pblock 0 (length 1) [ 61.572608][ T5401] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #15: comm syz.5.583: lblock 0 mapped to illegal pblock 0 (length 1) [ 61.578702][ T5391] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 61.592313][ T5401] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #15: comm syz.5.583: lblock 0 mapped to illegal pblock 0 (length 1) [ 61.607708][ T5387] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #15: comm syz.5.583: lblock 0 mapped to illegal pblock 0 (length 1) [ 61.614438][ T5402] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 61.667776][ T5329] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.913658][ T4947] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 62.038854][ C1] vcan0: j1939_tp_rxtimer: 0xffff888105b77200: rx timeout, send abort [ 62.057342][ C1] vcan0: j1939_tp_rxtimer: 0xffff888105b76200: abort rx timeout. Force session deactivation [ 62.120153][ T310] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.136309][ T3689] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 62.184369][ T310] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.243770][ T310] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.337533][ T310] bridge_slave_1: left allmulticast mode [ 62.343573][ T310] bridge_slave_1: left promiscuous mode [ 62.349241][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.357193][ T310] bridge_slave_0: left allmulticast mode [ 62.364172][ T310] bridge_slave_0: left promiscuous mode [ 62.369904][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.466261][ T310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.476790][ T310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.486906][ T310] bond0 (unregistering): Released all slaves [ 62.547088][ C1] vcan0: j1939_tp_rxtimer: 0xffff888105b77200: abort rx timeout. Force session deactivation [ 62.562048][ T310] hsr_slave_0: left promiscuous mode [ 62.568043][ T310] hsr_slave_1: left promiscuous mode [ 62.575519][ T310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.588341][ T310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.603654][ T310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.612169][ T310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.637204][ T310] veth1_macvtap: left promiscuous mode [ 62.642936][ T310] veth0_macvtap: left promiscuous mode [ 62.648586][ T310] veth1_vlan: left promiscuous mode [ 62.653972][ T310] veth0_vlan: left promiscuous mode [ 62.953666][ T310] team0 (unregistering): Port device team_slave_1 removed [ 62.978929][ T310] team0 (unregistering): Port device team_slave_0 removed [ 63.062434][ T3022] 8021q: adding VLAN 0 to HW filter on device eth13 [ 63.147351][ T2758] Bluetooth: hci0: Frame reassembly failed (-84) [ 63.267339][ T5483] __nla_validate_parse: 3 callbacks suppressed [ 63.267384][ T5483] netlink: 9 bytes leftover after parsing attributes in process `syz.7.610'. [ 63.293009][ T5483] gretap0: entered promiscuous mode [ 63.386001][ T3022] 8021q: adding VLAN 0 to HW filter on device eth14 [ 63.496580][ T310] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.562624][ T5506] netlink: 216 bytes leftover after parsing attributes in process `syz.5.617'. [ 63.597185][ T5506] netlink: 32 bytes leftover after parsing attributes in process `syz.5.617'. [ 63.600108][ T5443] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.614743][ T5443] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.622037][ T5443] bridge_slave_0: entered allmulticast mode [ 63.630345][ T5443] bridge_slave_0: entered promiscuous mode [ 63.637752][ T5443] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.645023][ T5443] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.660348][ T5443] bridge_slave_1: entered allmulticast mode [ 63.671886][ T5443] bridge_slave_1: entered promiscuous mode [ 63.763292][ T310] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.784063][ T5443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.794185][ T3022] 8021q: adding VLAN 0 to HW filter on device eth15 [ 63.807188][ T5443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.850195][ T310] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.863931][ T5443] team0: Port device team_slave_0 added [ 63.870754][ T5443] team0: Port device team_slave_1 added [ 63.913565][ T310] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.925830][ T5443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.933156][ T5443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.959530][ T5443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.970600][ T5540] hsr0: entered allmulticast mode [ 63.975960][ T5540] hsr_slave_0: entered allmulticast mode [ 63.982053][ T5540] hsr_slave_1: entered allmulticast mode [ 63.986787][ T5551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.622'. [ 63.988153][ T5443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.003545][ T5443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.029776][ T5443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.043232][ T5551] hsr_slave_0: left promiscuous mode [ 64.048923][ T5551] hsr_slave_1: left promiscuous mode [ 64.057299][ T5551] hsr0 (unregistering): left allmulticast mode [ 64.065948][ T3022] 8021q: adding VLAN 0 to HW filter on device eth16 [ 64.124793][ T5443] hsr_slave_0: entered promiscuous mode [ 64.132918][ T5443] hsr_slave_1: entered promiscuous mode [ 64.148916][ T310] bridge_slave_1: left allmulticast mode [ 64.155111][ T310] bridge_slave_1: left promiscuous mode [ 64.160834][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.169876][ T310] bridge_slave_0: left allmulticast mode [ 64.175772][ T310] bridge_slave_0: left promiscuous mode [ 64.182077][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.274690][ T310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.284395][ T310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.294528][ T310] bond0 (unregistering): Released all slaves [ 64.337154][ T310] hsr_slave_0: left promiscuous mode [ 64.343638][ T310] hsr_slave_1: left promiscuous mode [ 64.350686][ T310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.359723][ T310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.367426][ T310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.375056][ T310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.400805][ T310] veth1_macvtap: left promiscuous mode [ 64.414180][ T310] veth0_macvtap: left promiscuous mode [ 64.427016][ T310] veth1_vlan: left promiscuous mode [ 64.443536][ T310] veth0_vlan: left promiscuous mode [ 64.545608][ T310] team0 (unregistering): Port device team_slave_1 removed [ 64.555314][ T310] team0 (unregistering): Port device team_slave_0 removed [ 64.589475][ T3022] 8021q: adding VLAN 0 to HW filter on device eth17 [ 64.776356][ T5557] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.783627][ T5557] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.790939][ T5557] bridge_slave_0: entered allmulticast mode [ 64.803160][ T5557] bridge_slave_0: entered promiscuous mode [ 64.810037][ T5557] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.819503][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 64.819515][ T28] audit: type=1400 audit(1781535423.346:580): avc: denied { write } for pid=5603 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.822099][ T5557] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.848878][ T28] audit: type=1400 audit(1781535423.386:581): avc: denied { write } for pid=5618 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.883079][ T5557] bridge_slave_1: entered allmulticast mode [ 64.891278][ T5557] bridge_slave_1: entered promiscuous mode [ 64.912878][ T3022] 8021q: adding VLAN 0 to HW filter on device eth18 [ 64.926704][ T5557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.950204][ T5557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.995626][ T5557] team0: Port device team_slave_0 added [ 65.002449][ T5557] team0: Port device team_slave_1 added [ 65.016929][ T5557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.024070][ T28] audit: type=1400 audit(1781535423.546:582): avc: denied { allowed } for pid=5620 comm="syz.2.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 65.043201][ T5557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.069706][ T5557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.082000][ T5557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.088968][ T5557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.115051][ T5557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.144752][ T5557] hsr_slave_0: entered promiscuous mode [ 65.150639][ T5557] hsr_slave_1: entered promiscuous mode [ 65.156573][ T5557] debugfs: 'hsr0' already exists in 'hsr' [ 65.162329][ T5557] Cannot create hsr debugfs directory [ 65.171161][ T3803] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 65.216487][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 65.258406][ T5634] netlink: 'syz.2.635': attribute type 12 has an invalid length. [ 65.266320][ T5634] netlink: 'syz.2.635': attribute type 29 has an invalid length. [ 65.274156][ T5634] netlink: 148 bytes leftover after parsing attributes in process `syz.2.635'. [ 65.283338][ T5634] netlink: 59 bytes leftover after parsing attributes in process `syz.2.635'. [ 65.295551][ T5634] netlink: 'syz.2.635': attribute type 12 has an invalid length. [ 65.304051][ T5634] netlink: 'syz.2.635': attribute type 29 has an invalid length. [ 65.311902][ T5634] netlink: 148 bytes leftover after parsing attributes in process `syz.2.635'. [ 65.321150][ T5634] netlink: 59 bytes leftover after parsing attributes in process `syz.2.635'. [ 65.333510][ T310] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.346332][ T28] audit: type=1400 audit(1781535423.876:583): avc: denied { write } for pid=5635 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.399137][ T28] audit: type=1400 audit(1781535423.926:584): avc: denied { write } for pid=5648 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.430196][ T310] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.442790][ T5443] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 65.452823][ T5443] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.463796][ T5443] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 65.472882][ T5443] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.487932][ T5443] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 65.498119][ T5443] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.502168][ T28] audit: type=1400 audit(1781535424.026:585): avc: denied { write } for pid=5651 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.506593][ T5443] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 65.538044][ T5443] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.546395][ T5557] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 65.556192][ T5557] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.563876][ T28] audit: type=1400 audit(1781535424.086:586): avc: denied { write } for pid=5662 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.569486][ T5557] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 65.594858][ T5557] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.603082][ T5557] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 65.611634][ T5557] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.622374][ T310] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.633455][ T5557] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 65.642722][ T5557] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.678621][ T310] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.707511][ T5557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.722443][ T5557] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.731306][ T5443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.745935][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.753026][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.768789][ T2199] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.775873][ T2199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.789119][ T5443] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.808788][ T2758] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.815876][ T2758] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.825330][ T310] bridge_slave_1: left allmulticast mode [ 65.831372][ T310] bridge_slave_1: left promiscuous mode [ 65.837132][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.845008][ T310] bridge_slave_0: left allmulticast mode [ 65.850654][ T310] bridge_slave_0: left promiscuous mode [ 65.856430][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.973094][ T310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.983351][ T310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.992945][ T310] bond0 (unregistering): Released all slaves [ 66.005708][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.012773][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.027066][ T310] hsr_slave_0: left promiscuous mode [ 66.032993][ T310] hsr_slave_1: left promiscuous mode [ 66.038607][ T310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.046855][ T310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.054890][ T310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.063132][ T310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.081939][ T310] veth1_macvtap: left promiscuous mode [ 66.090546][ T310] veth0_macvtap: left promiscuous mode [ 66.098426][ T310] veth1_vlan: left promiscuous mode [ 66.107742][ T310] veth0_vlan: left promiscuous mode [ 66.140176][ T28] audit: type=1400 audit(1781535424.666:587): avc: denied { write } for pid=5677 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.196552][ T28] audit: type=1400 audit(1781535424.706:588): avc: denied { write } for pid=5693 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.242031][ T310] team0 (unregistering): Port device team_slave_1 removed [ 66.252280][ T310] team0 (unregistering): Port device team_slave_0 removed [ 66.294046][ T3022] 8021q: adding VLAN 0 to HW filter on device eth17 [ 66.528505][ T28] audit: type=1400 audit(1781535425.056:589): avc: denied { mounton } for pid=5734 comm="syz.8.640" path="/15/file0" dev="tmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 66.568060][ T5443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.595007][ T310] IPVS: stop unused estimator thread 0... [ 66.598773][ T5557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.614632][ T5752] netlink: 260 bytes leftover after parsing attributes in process `syz.8.643'. [ 66.653833][ T5752] netlink: 'syz.8.643': attribute type 1 has an invalid length. [ 66.670153][ T5763] loop2: detected capacity change from 0 to 128 [ 66.680019][ T5752] netlink: 68 bytes leftover after parsing attributes in process `syz.8.643'. [ 66.702661][ T5763] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 66.720156][ T5763] ext4 filesystem being mounted at /156/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 66.754097][ T3022] 8021q: adding VLAN 0 to HW filter on device eth18 [ 66.826937][ T3303] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 66.872734][ T5557] veth0_vlan: entered promiscuous mode [ 66.879538][ T5443] veth0_vlan: entered promiscuous mode [ 66.888656][ T5557] veth1_vlan: entered promiscuous mode [ 66.897023][ T5443] veth1_vlan: entered promiscuous mode [ 66.912519][ T5557] veth0_macvtap: entered promiscuous mode [ 66.921836][ T5557] veth1_macvtap: entered promiscuous mode [ 66.938216][ T5443] veth0_macvtap: entered promiscuous mode [ 66.945716][ T5443] veth1_macvtap: entered promiscuous mode [ 66.953455][ T5557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.966027][ T5557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.977777][ T5443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.986732][ T3022] 8021q: adding VLAN 0 to HW filter on device eth19 [ 66.996215][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.006228][ T5443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.017952][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.026710][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.036674][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.046331][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.058765][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.067724][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.079136][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.137866][ T5807] loop8: detected capacity change from 0 to 128 [ 67.172391][ T5807] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 67.186583][ T5814] loop6: detected capacity change from 0 to 1024 [ 67.196041][ T5807] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 67.198342][ T5814] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 67.252270][ T3803] Bluetooth: hci0: command 0x1003 tx timeout [ 67.258323][ T5472] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 67.272106][ T5814] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.296333][ T5824] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 67.305524][ T5329] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 67.367050][ T5814] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 67.387184][ T5814] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 67.412651][ T5443] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.440469][ T5836] gretap0: entered promiscuous mode [ 67.528855][ T3022] 8021q: adding VLAN 0 to HW filter on device eth20 [ 67.544486][ T5842] bridge1: entered promiscuous mode [ 67.549884][ T5842] bridge1: entered allmulticast mode [ 67.862031][ T5894] netlink: 'syz.9.672': attribute type 10 has an invalid length. [ 67.873543][ T5895] loop2: detected capacity change from 0 to 1024 [ 67.908087][ T5895] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 67.939899][ T5895] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.975648][ T5895] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 67.995238][ T5895] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 68.090328][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.148617][ T5916] gretap0: entered promiscuous mode [ 68.300274][ T5943] loop6: detected capacity change from 0 to 128 [ 68.317053][ T5943] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 68.355511][ T5943] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 68.381181][ T5941] loop9: detected capacity change from 0 to 2048 [ 68.396592][ T5941] EXT4-fs: Ignoring removed nobh option [ 68.414347][ T5941] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.430397][ T5941] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.473088][ T68] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 68.487458][ T5941] EXT4-fs (loop9): Online resizing not supported with bigalloc [ 68.545085][ T5976] __nla_validate_parse: 3 callbacks suppressed [ 68.545101][ T5976] netlink: 28 bytes leftover after parsing attributes in process `syz.7.691'. [ 68.563858][ T5557] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.753354][ T6000] netlink: 9 bytes leftover after parsing attributes in process `syz.8.693'. [ 68.767030][ T6000] gretap0: entered promiscuous mode [ 68.859160][ T6008] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 68.978214][ T6024] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 69.565140][ T6040] loop9: detected capacity change from 0 to 512 [ 69.602443][ T6037] netlink: 9 bytes leftover after parsing attributes in process `syz.8.713'. [ 69.620348][ T6040] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.649650][ T6040] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.709819][ T5557] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.762942][ T6068] hsr0: entered allmulticast mode [ 69.769775][ T6068] hsr_slave_0: entered allmulticast mode [ 69.776018][ T6068] hsr_slave_1: entered allmulticast mode [ 69.789900][ T6068] netlink: 4 bytes leftover after parsing attributes in process `syz.6.722'. [ 69.815285][ T6068] hsr_slave_0: left promiscuous mode [ 69.825624][ T28] kauditd_printk_skb: 47 callbacks suppressed [ 69.825639][ T28] audit: type=1400 audit(1781535428.356:637): avc: denied { write } for pid=6071 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.860434][ T6068] hsr_slave_1: left promiscuous mode [ 69.878257][ T6068] hsr0 (unregistering): left allmulticast mode [ 69.947588][ T49] Bluetooth: hci0: Frame reassembly failed (-84) [ 70.022744][ T6095] loop6: detected capacity change from 0 to 1024 [ 70.048613][ T6102] netlink: 'syz.8.731': attribute type 12 has an invalid length. [ 70.049425][ T6095] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.060621][ T6102] netlink: 'syz.8.731': attribute type 29 has an invalid length. [ 70.079326][ T6102] netlink: 148 bytes leftover after parsing attributes in process `syz.8.731'. [ 70.089429][ T6102] netlink: 59 bytes leftover after parsing attributes in process `syz.8.731'. [ 70.100980][ T28] audit: type=1400 audit(1781535428.606:638): avc: denied { write } for pid=6093 comm="syz.6.740" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 70.150998][ T5443] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.154949][ T6102] netlink: 'syz.8.731': attribute type 12 has an invalid length. [ 70.168146][ T6102] netlink: 'syz.8.731': attribute type 29 has an invalid length. [ 70.176133][ T6102] netlink: 148 bytes leftover after parsing attributes in process `syz.8.731'. [ 70.185553][ T6102] netlink: 59 bytes leftover after parsing attributes in process `syz.8.731'. [ 70.192727][ T28] audit: type=1400 audit(1781535428.716:639): avc: denied { read append } for pid=6103 comm="syz.2.734" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 70.236986][ T28] audit: type=1400 audit(1781535428.716:640): avc: denied { open } for pid=6103 comm="syz.2.734" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 70.281149][ T6113] netlink: 8 bytes leftover after parsing attributes in process `syz.8.737'. [ 70.295174][ T6113] netlink: 'syz.8.737': attribute type 30 has an invalid length. [ 70.313205][ T28] audit: type=1400 audit(1781535428.716:641): avc: denied { ioctl } for pid=6103 comm="syz.2.734" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 70.346236][ T6113] netlink: 'syz.8.737': attribute type 29 has an invalid length. [ 70.355352][ T6113] netlink: 4 bytes leftover after parsing attributes in process `syz.8.737'. [ 70.393668][ T28] audit: type=1400 audit(1781535428.926:642): avc: denied { write } for pid=6107 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.424482][ T28] audit: type=1400 audit(1781535428.956:643): avc: denied { write } for pid=6131 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.437110][ T6137] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 70.476094][ T28] audit: type=1400 audit(1781535428.986:644): avc: denied { execute } for pid=6134 comm="syz.6.752" path="/16/blkio.bfq.io_serviced_recursive" dev="tmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 70.516894][ T6145] netlink: 'syz.8.744': attribute type 10 has an invalid length. [ 70.653437][ T28] audit: type=1400 audit(1781535429.186:645): avc: denied { write } for pid=6143 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.680635][ T6163] macvlan2: entered promiscuous mode [ 70.686190][ T6163] bridge0: entered promiscuous mode [ 70.713759][ T28] audit: type=1400 audit(1781535429.206:646): avc: denied { create } for pid=6166 comm="syz.2.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 70.792062][ T6184] syzkaller1: entered promiscuous mode [ 70.797761][ T6184] syzkaller1: entered allmulticast mode [ 71.069809][ T6211] loop7: detected capacity change from 0 to 128 [ 71.080374][ T6211] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 71.108164][ T6211] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 71.140427][ T310] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 71.156173][ T6213] loop6: detected capacity change from 0 to 512 [ 71.169766][ T6213] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.771: inode has both inline data and extents flags [ 71.212749][ T6213] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 71.212935][ T6213] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.771: couldn't read orphan inode 15 (err -117) [ 71.222110][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 71.222127][ C0] EXT4-fs (loop6): initial error at time 1781535429: ext4_orphan_get:1399: inode 15 [ 71.222177][ C0] EXT4-fs (loop6): last error at time 1781535429: ext4_orphan_get:1399: inode 15 [ 71.259143][ T6213] loop6: lost filesystem error report for type 5 error -117 [ 71.259649][ T6213] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.285248][ T6213] EXT4-fs (loop6): shut down requested (2) [ 71.326429][ T5443] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.745377][ T6194] syz.2.762 (6194) used greatest stack depth: 9144 bytes left [ 71.820014][ T6236] loop7: detected capacity change from 0 to 1024 [ 71.842584][ T6236] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.883224][ T4967] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.972540][ T5472] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 71.978663][ T3803] Bluetooth: hci0: command 0x1003 tx timeout [ 72.020591][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 72.040848][ T6255] loop6: detected capacity change from 0 to 256 [ 72.424476][ T3373] IPVS: starting estimator thread 0... [ 72.456319][ T12] Bluetooth: hci1: Frame reassembly failed (-84) [ 72.470017][ T6281] xt_hashlimit: size too large, truncated to 1048576 [ 72.532472][ T6277] IPVS: using max 2256 ests per chain, 112800 per kthread [ 72.976175][ T6297] loop9: detected capacity change from 0 to 1024 [ 72.999166][ T6297] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 73.011744][ T6297] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (12687!=20869) [ 73.022512][ T6301] loop2: detected capacity change from 0 to 2048 [ 73.028958][ T6297] EXT4-fs (loop9): invalid journal inode [ 73.035270][ T6301] EXT4-fs: Ignoring removed nobh option [ 73.045280][ T6297] EXT4-fs (loop9): can't get journal size [ 73.056912][ T6297] EXT4-fs error (device loop9): ext4_protect_reserved_inode:182: inode #2: comm syz.9.804: blocks 3-3 from inode overlap system zone [ 73.070941][ T6297] loop9: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 73.073061][ T6297] EXT4-fs (loop9): failed to initialize system zone (-117) [ 73.090918][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 73.097366][ C1] EXT4-fs (loop9): initial error at time 1781535431: ext4_protect_reserved_inode:182: inode 2 [ 73.099595][ T6297] EXT4-fs (loop9): mount failed [ 73.107658][ C1] EXT4-fs (loop9): last error at time 1781535431: ext4_protect_reserved_inode:182: inode 2 [ 73.130286][ T6301] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.148275][ T6301] ext4 filesystem being mounted at /185/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.181714][ T6301] EXT4-fs (loop2): Online resizing not supported with bigalloc [ 73.214498][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.243240][ T6308] macvlan2: entered promiscuous mode [ 73.248632][ T6308] bridge0: entered promiscuous mode [ 73.303690][ T6314] tap0: tun_chr_ioctl cmd 1074025675 [ 73.309264][ T6314] tap0: persist enabled [ 73.314224][ T6314] tap0: tun_chr_ioctl cmd 1074025675 [ 73.319776][ T6314] tap0: persist disabled [ 73.497643][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 73.513378][ T3373] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 73.531315][ T6334] loop9: detected capacity change from 0 to 4096 [ 73.547637][ T6334] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 73.635415][ T6335] fido_id[6335]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 74.043667][ T6375] loop9: detected capacity change from 0 to 512 [ 74.050947][ T5472] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 74.051251][ T6282] Bluetooth: hci0: command 0x1003 tx timeout [ 74.066164][ T6375] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.080152][ T6375] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.464806][ T5557] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.528016][ T6397] bond1: ARP target 9.0.0.0 is already present [ 74.535515][ T3803] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 74.538647][ T6397] bond1: option arp_ip_target: invalid value (9) [ 74.541738][ T5472] Bluetooth: hci1: command 0x1003 tx timeout [ 74.558910][ T6397] bond1 (unregistering): Released all slaves [ 74.594085][ T6404] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 74.873782][ T6430] loop9: detected capacity change from 0 to 8192 [ 74.883005][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 74.883016][ T28] audit: type=1400 audit(1781535433.416:671): avc: denied { watch watch_reads } for pid=6429 comm="syz.9.856" path="/46/file2/file2" dev="loop9" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 75.102970][ T3373] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 75.110931][ T3373] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 75.137489][ T6449] loop7: detected capacity change from 0 to 4096 [ 75.147665][ T6449] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 75.382456][ T6461] macvlan2: entered promiscuous mode [ 75.390575][ T6461] bridge0: entered promiscuous mode [ 75.560436][ T6473] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 75.601563][ T6477] loop7: detected capacity change from 0 to 512 [ 75.641589][ T6477] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.662481][ T6477] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.684764][ T28] audit: type=1400 audit(1781535434.216:672): avc: denied { write } for pid=6476 comm="syz.7.877" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 75.793441][ T4967] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.903457][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 75.942264][ T6512] __nla_validate_parse: 2 callbacks suppressed [ 75.942279][ T6512] netlink: 8 bytes leftover after parsing attributes in process `syz.7.886'. [ 75.979389][ T28] audit: type=1400 audit(1781535434.506:673): avc: denied { write } for pid=6489 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.985995][ T6512] netlink: 'syz.7.886': attribute type 30 has an invalid length. [ 76.041427][ T6512] netlink: 'syz.7.886': attribute type 29 has an invalid length. [ 76.062392][ T28] audit: type=1400 audit(1781535434.566:674): avc: denied { write } for pid=6515 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.065170][ T6512] netlink: 4 bytes leftover after parsing attributes in process `syz.7.886'. [ 76.220178][ T28] audit: type=1400 audit(1781535434.746:675): avc: denied { write } for pid=6519 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.256773][ T28] audit: type=1400 audit(1781535434.746:676): avc: denied { write } for pid=6531 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.555273][ T6553] syzkaller1: entered promiscuous mode [ 76.575364][ T6553] syzkaller1: entered allmulticast mode [ 76.663095][ T6563] loop9: detected capacity change from 0 to 256 [ 76.755292][ T28] audit: type=1400 audit(1781535435.286:677): avc: denied { write } for pid=6556 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.825637][ T28] audit: type=1400 audit(1781535435.336:678): avc: denied { write } for pid=6577 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.879519][ T6585] xt_hashlimit: size too large, truncated to 1048576 [ 76.917451][ T6587] loop7: detected capacity change from 0 to 512 [ 76.956185][ T6587] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.907: inode has both inline data and extents flags [ 76.991080][ T6587] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 76.992455][ T6587] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.907: couldn't read orphan inode 15 (err -117) [ 77.001614][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 77.001633][ C1] EXT4-fs (loop7): initial error at time 1781535435: ext4_orphan_get:1399: inode 15 [ 77.001664][ C1] EXT4-fs (loop7): last error at time 1781535435: ext4_orphan_get:1399: inode 15 [ 77.039072][ T6587] loop7: lost filesystem error report for type 5 error -117 [ 77.040863][ T6587] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.066362][ T6587] EXT4-fs (loop7): shut down requested (2) [ 77.066760][ T28] audit: type=1400 audit(1781535435.596:679): avc: denied { write } for pid=6586 comm="syz.7.907" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.140866][ T4967] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.184787][ T28] audit: type=1400 audit(1781535435.716:680): avc: denied { write } for pid=6591 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.397914][ T6620] loop9: detected capacity change from 0 to 128 [ 77.419378][ T6620] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 77.433821][ T6620] System zones: 1-3, 19-19, 35-36 [ 77.447012][ T6620] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 77.482345][ T6620] ext4 filesystem being mounted at /64/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 77.565403][ T6620] EXT4-fs warning (device loop9): verify_group_input:137: Cannot add at group 1803188485 (only 1 groups) [ 77.627856][ T5557] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 77.658038][ T6631] IPv6: Can't replace route, no match found [ 77.701390][ T6636] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3) [ 77.707986][ T6636] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 77.717822][ T6636] vhci_hcd vhci_hcd.0: Device attached [ 77.728096][ T6636] vhci_hcd vhci_hcd.0: pdev(9) rhport(1) sockfd(5) [ 77.734626][ T6636] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 77.743023][ T6636] vhci_hcd vhci_hcd.0: Device attached [ 77.754631][ T6636] vhci_hcd vhci_hcd.0: pdev(9) rhport(2) sockfd(7) [ 77.761223][ T6636] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 77.775399][ T6636] vhci_hcd vhci_hcd.0: Device attached [ 77.784034][ T6636] vhci_hcd vhci_hcd.0: pdev(9) rhport(3) sockfd(9) [ 77.790560][ T6636] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 77.798792][ T6636] vhci_hcd vhci_hcd.0: Device attached [ 77.806517][ T6636] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 77.817671][ T6636] vhci_hcd vhci_hcd.0: pdev(9) rhport(5) sockfd(13) [ 77.824288][ T6636] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 77.832262][ T6636] vhci_hcd vhci_hcd.0: Device attached [ 77.841190][ T6642] vhci_hcd: connection closed [ 77.841367][ T6637] vhci_hcd: connection closed [ 77.842556][ T6647] vhci_hcd: connection closed [ 77.846222][ T6651] vhci_hcd: connection closed [ 77.850771][ T68] vhci_hcd vhci_hcd.9: stop threads [ 77.855467][ T6644] vhci_hcd: connection closed [ 77.872904][ T68] vhci_hcd vhci_hcd.9: release socket [ 77.885024][ T68] vhci_hcd vhci_hcd.9: disconnect device [ 77.902172][ T68] vhci_hcd vhci_hcd.9: stop threads [ 77.909638][ T68] vhci_hcd vhci_hcd.9: release socket [ 77.923179][ T68] vhci_hcd vhci_hcd.9: disconnect device [ 77.930348][ T68] vhci_hcd vhci_hcd.9: stop threads [ 77.935836][ T68] vhci_hcd vhci_hcd.9: release socket [ 77.941470][ T68] vhci_hcd vhci_hcd.9: disconnect device [ 77.954930][ T68] vhci_hcd vhci_hcd.9: stop threads [ 77.961061][ T9] usb 19-1: new low-speed USB device number 2 using vhci_hcd [ 77.969155][ T68] vhci_hcd vhci_hcd.9: release socket [ 77.969563][ T9] usb 19-1: enqueue for inactive port 0 [ 77.980292][ T68] vhci_hcd vhci_hcd.9: disconnect device [ 77.980382][ T3803] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 77.988127][ T68] vhci_hcd vhci_hcd.9: stop threads [ 77.999019][ T9] usb 19-1: enqueue for inactive port 0 [ 78.004739][ T9] usb 19-1: enqueue for inactive port 0 [ 78.012959][ T68] vhci_hcd vhci_hcd.9: release socket [ 78.019488][ T68] vhci_hcd vhci_hcd.9: disconnect device [ 78.081075][ T9] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 78.916012][ T6719] tap0: tun_chr_ioctl cmd 1074025675 [ 78.925886][ T6719] tap0: persist enabled [ 78.937784][ T6719] tap0: tun_chr_ioctl cmd 1074025675 [ 78.950999][ T6719] tap0: persist disabled [ 79.604469][ T6785] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 79.749818][ T6800] netlink: 8 bytes leftover after parsing attributes in process `syz.9.983'. [ 79.788534][ T6800] netlink: 4 bytes leftover after parsing attributes in process `syz.9.983'. [ 79.852454][ T6800] netlink: 8 bytes leftover after parsing attributes in process `syz.9.983'. [ 79.852470][ T12] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.881517][ T6800] netlink: 4 bytes leftover after parsing attributes in process `syz.9.983'. [ 79.891599][ T28] kauditd_printk_skb: 395 callbacks suppressed [ 79.891611][ T28] audit: type=1400 audit(1781535438.426:1076): avc: denied { search } for pid=6808 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 79.895913][ T12] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.943696][ T28] audit: type=1400 audit(1781535438.476:1077): avc: denied { search } for pid=6809 comm="chmod" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 79.975624][ T12] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.991285][ T28] audit: type=1400 audit(1781535438.526:1078): avc: denied { search } for pid=6810 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 80.025972][ T12] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.040559][ T28] audit: type=1400 audit(1781535438.556:1079): avc: denied { search } for pid=6803 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 80.118923][ T6813] audit: audit_backlog=65 > audit_backlog_limit=64 [ 80.129058][ T28] audit: type=1400 audit(1781535438.576:1080): avc: denied { read write } for pid=5557 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 80.154280][ T6813] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 80.176479][ T6813] audit: backlog limit exceeded [ 80.190128][ T6813] audit: audit_backlog=65 > audit_backlog_limit=64 [ 80.194893][ T28] audit: type=1400 audit(1781535438.636:1081): avc: denied { search } for pid=6812 comm="dhcpcd-run-hook" name="/" dev="devtmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=0 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 80.348629][ T6823] all: renamed from lo (while UP) [ 81.519771][ T6868] bond1: ARP target 9.0.0.0 is already present [ 81.559664][ T6868] bond1: option arp_ip_target: invalid value (9) [ 81.598406][ T6868] bond1 (unregistering): Released all slaves [ 81.959008][ T6902] netlink: 'syz.8.1022': attribute type 30 has an invalid length. [ 82.071915][ T6902] netlink: 'syz.8.1022': attribute type 30 has an invalid length. [ 82.411986][ T6939] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1040'. [ 82.449652][ T6939] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1040'. [ 82.495371][ T49] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.495392][ T6939] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1040'. [ 82.495410][ T6939] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1040'. [ 82.504129][ T49] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.582886][ T49] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.613884][ T49] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.088927][ T6971] netlink: 'syz.9.1054': attribute type 4 has an invalid length. [ 83.160868][ T6980] bond1: ARP target 9.0.0.0 is already present [ 83.170140][ T6980] bond1: option arp_ip_target: invalid value (9) [ 83.178102][ T6980] bond1 (unregistering): Released all slaves [ 83.257430][ T7002] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.264620][ T7002] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.273415][ T7002] bridge0: entered allmulticast mode [ 83.301158][ T7002] bridge_slave_1: left allmulticast mode [ 83.311318][ T7002] bridge_slave_1: left promiscuous mode [ 83.323197][ T7002] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.345613][ T7002] bridge_slave_0: left allmulticast mode [ 83.354593][ T7002] bridge_slave_0: left promiscuous mode [ 83.363389][ T7002] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.705144][ T7033] netlink: 92 bytes leftover after parsing attributes in process `syz.7.1084'. [ 83.931678][ T7061] macvlan2: entered promiscuous mode [ 84.161857][ T7102] netlink: 'syz.6.1126': attribute type 2 has an invalid length. [ 84.437940][ T7129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1128'. [ 84.556162][ T7145] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1135'. [ 84.607760][ T7154] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1140'. [ 84.928464][ T28] kauditd_printk_skb: 508 callbacks suppressed [ 84.928479][ T28] audit: type=1400 audit(1781535699.453:1561): avc: denied { read write } for pid=5329 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 84.963884][ T28] audit: type=1400 audit(1781535699.483:1562): avc: denied { read write } for pid=5329 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 84.988780][ T28] audit: type=1400 audit(1781535699.493:1563): avc: denied { prog_load } for pid=7183 comm="syz.8.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 85.009059][ T28] audit: type=1400 audit(1781535699.493:1564): avc: denied { map_create } for pid=7183 comm="syz.8.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 85.029528][ T28] audit: type=1400 audit(1781535699.493:1565): avc: denied { prog_load } for pid=7183 comm="syz.8.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 85.048832][ T28] audit: type=1400 audit(1781535699.493:1566): avc: denied { prog_load } for pid=7183 comm="syz.8.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 85.068146][ T28] audit: type=1400 audit(1781535699.493:1567): avc: denied { read append } for pid=7184 comm="syz.2.1152" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=0 [ 85.092885][ T28] audit: type=1400 audit(1781535699.493:1568): avc: denied { write } for pid=7184 comm="syz.2.1152" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=0 [ 85.116893][ T28] audit: type=1400 audit(1781535699.493:1569): avc: denied { read write } for pid=5329 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 85.143360][ T28] audit: type=1400 audit(1781535699.523:1570): avc: denied { create } for pid=7187 comm="syz.8.1154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 85.287438][ T7224] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1173'. [ 85.296601][ T7224] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1173'. [ 86.712793][ T7329] tls_set_device_offload_rx: netdev not found [ 87.232783][ T7406] xt_policy: output policy not valid in PREROUTING and INPUT [ 88.454429][ T7555] IPv6: Can't replace route, no match found [ 89.201942][ T7564] IPv6: Can't replace route, no match found [ 89.566974][ T7593] IPv6: Can't replace route, no match found [ 89.744077][ T7611] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 89.750621][ T7611] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 89.778534][ T7611] vhci_hcd vhci_hcd.0: Device attached [ 89.799038][ T7611] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(5) [ 89.805649][ T7611] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 89.829710][ T7611] vhci_hcd vhci_hcd.0: Device attached [ 89.844604][ T7611] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(7) [ 89.851124][ T7611] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 89.877644][ T7611] vhci_hcd vhci_hcd.0: Device attached [ 89.890495][ T7611] vhci_hcd vhci_hcd.0: pdev(8) rhport(3) sockfd(9) [ 89.897031][ T7611] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 89.909488][ T7611] vhci_hcd vhci_hcd.0: Device attached [ 89.916078][ T7611] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 89.925165][ T7611] vhci_hcd vhci_hcd.0: pdev(8) rhport(5) sockfd(13) [ 89.931763][ T7611] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 89.977392][ T7611] vhci_hcd vhci_hcd.0: Device attached [ 89.983886][ T7629] vhci_hcd: connection closed [ 89.983984][ T7623] vhci_hcd: connection closed [ 89.985517][ T7616] vhci_hcd: connection closed [ 89.988725][ T49] vhci_hcd vhci_hcd.8: stop threads [ 90.011038][ T7612] vhci_hcd: connection closed [ 90.011208][ T7631] vhci_hcd: connection closed [ 90.031030][ T3429] usb 17-1: new low-speed USB device number 2 using vhci_hcd [ 90.053004][ T49] vhci_hcd vhci_hcd.8: release socket [ 90.053591][ T7613] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 90.058483][ T49] vhci_hcd vhci_hcd.8: disconnect device [ 90.079764][ T49] vhci_hcd vhci_hcd.8: stop threads [ 90.080829][ T28] kauditd_printk_skb: 477 callbacks suppressed [ 90.080849][ T28] audit: type=1400 audit(1781535704.603:2048): avc: denied { read write } for pid=4967 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 90.086023][ T49] vhci_hcd vhci_hcd.8: release socket [ 90.120527][ T28] audit: type=1400 audit(1781535704.653:2049): avc: denied { read write } for pid=5443 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 90.124794][ T49] vhci_hcd vhci_hcd.8: disconnect device [ 90.162238][ T49] vhci_hcd vhci_hcd.8: stop threads [ 90.167722][ T49] vhci_hcd vhci_hcd.8: release socket [ 90.173341][ T49] vhci_hcd vhci_hcd.8: disconnect device [ 90.179146][ T28] audit: type=1400 audit(1781535704.683:2050): avc: denied { read } for pid=7634 comm="syz.7.1359" dev="nsfs" ino=4026532370 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 90.200835][ T49] vhci_hcd vhci_hcd.8: stop threads [ 90.207711][ T49] vhci_hcd vhci_hcd.8: release socket [ 90.213839][ T49] vhci_hcd vhci_hcd.8: disconnect device [ 90.220875][ T28] audit: type=1400 audit(1781535704.683:2051): avc: denied { open } for pid=7634 comm="syz.7.1359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 90.240867][ T49] vhci_hcd vhci_hcd.8: stop threads [ 90.246148][ T49] vhci_hcd vhci_hcd.8: release socket [ 90.251732][ T49] vhci_hcd vhci_hcd.8: disconnect device [ 90.257429][ T28] audit: type=1400 audit(1781535704.683:2052): avc: denied { read write } for pid=7636 comm="syz.6.1358" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 90.285935][ T28] audit: type=1400 audit(1781535704.703:2053): avc: denied { read write } for pid=5443 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 90.312100][ T28] audit: type=1400 audit(1781535704.743:2054): avc: denied { read write } for pid=4967 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 90.336314][ T28] audit: type=1400 audit(1781535704.753:2055): avc: denied { read write } for pid=4967 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 90.397549][ T28] audit: type=1400 audit(1781535704.923:2056): avc: denied { read write } for pid=5557 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 90.560086][ T28] audit: type=1400 audit(1781535705.083:2057): avc: denied { read write } for pid=5329 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 90.726014][ T7667] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 90.732561][ T7667] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 90.743771][ T7667] vhci_hcd vhci_hcd.0: Device attached [ 90.766668][ T7667] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 90.773198][ T7667] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 90.795306][ T7667] vhci_hcd vhci_hcd.0: Device attached [ 90.803800][ T7667] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(7) [ 90.810366][ T7667] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 90.818266][ T7667] vhci_hcd vhci_hcd.0: Device attached [ 90.824970][ T7667] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(9) [ 90.831577][ T7667] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 90.839792][ T7667] vhci_hcd vhci_hcd.0: Device attached [ 90.846354][ T7667] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 90.855808][ T7667] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(13) [ 90.862413][ T7667] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 90.870272][ T7667] vhci_hcd vhci_hcd.0: Device attached [ 90.878267][ T7668] vhci_hcd: connection closed [ 90.878484][ T7673] vhci_hcd: connection closed [ 90.883635][ T68] vhci_hcd vhci_hcd.2: stop threads [ 90.893690][ T7677] vhci_hcd: connection closed [ 90.893819][ T7681] vhci_hcd: connection closed [ 90.898564][ T7679] vhci_hcd: connection closed [ 90.903677][ T68] vhci_hcd vhci_hcd.2: release socket [ 90.916448][ T68] vhci_hcd vhci_hcd.2: disconnect device [ 90.922463][ T68] vhci_hcd vhci_hcd.2: stop threads [ 90.927849][ T68] vhci_hcd vhci_hcd.2: release socket [ 90.933470][ T68] vhci_hcd vhci_hcd.2: disconnect device [ 90.939375][ T68] vhci_hcd vhci_hcd.2: stop threads [ 90.944837][ T68] vhci_hcd vhci_hcd.2: release socket [ 90.950369][ T68] vhci_hcd vhci_hcd.2: disconnect device [ 90.956447][ T68] vhci_hcd vhci_hcd.2: stop threads [ 90.962807][ T68] vhci_hcd vhci_hcd.2: release socket [ 90.968216][ T68] vhci_hcd vhci_hcd.2: disconnect device [ 90.974323][ T68] vhci_hcd vhci_hcd.2: stop threads [ 90.979554][ T68] vhci_hcd vhci_hcd.2: release socket [ 90.986919][ T68] vhci_hcd vhci_hcd.2: disconnect device [ 91.678031][ T7733] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 91.725766][ T7740] __nla_validate_parse: 4 callbacks suppressed [ 91.725781][ T7740] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1397'. [ 91.745033][ T7740] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1397'. [ 91.758622][ T2758] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.776914][ T2758] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.783041][ T7740] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1397'. [ 91.789167][ T2758] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.794867][ T7740] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1397'. [ 91.803838][ T2758] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.547891][ T7764] all: renamed from lo (while UP) [ 92.740144][ T7780] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1414'. [ 92.749182][ T7779] netlink: 'syz.9.1428': attribute type 30 has an invalid length. [ 92.758743][ T7780] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1414'. [ 92.778227][ T49] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.778258][ T7780] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1414'. [ 92.787199][ T49] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.797729][ T7780] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1414'. [ 92.807922][ T49] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.822363][ T49] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.822540][ T7779] netlink: 'syz.9.1428': attribute type 30 has an invalid length. [ 92.833392][ T7782] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 93.584980][ T7784] syz.2.1417 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 93.599148][ T7784] CPU: 0 UID: 0 PID: 7784 Comm: syz.2.1417 Not tainted syzkaller #0 PREEMPT(lazy) [ 93.599176][ T7784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 93.599190][ T7784] Call Trace: [ 93.599196][ T7784] [ 93.599203][ T7784] __dump_stack+0x1d/0x30 [ 93.599298][ T7784] dump_stack_lvl+0x95/0xd0 [ 93.599309][ T7784] dump_stack+0x15/0x1b [ 93.599390][ T7784] dump_header+0x80/0x240 [ 93.599405][ T7784] oom_kill_process+0x295/0x350 [ 93.599417][ T7784] out_of_memory+0x981/0xbc0 [ 93.599436][ T7784] try_charge_memcg+0x621/0xa00 [ 93.599478][ T7784] __memcg_kmem_charge_page+0x199/0x3a0 [ 93.599493][ T7784] __alloc_frozen_pages_noprof+0x18a/0x350 [ 93.599509][ T7784] alloc_pages_mpol+0xa9/0x1d0 [ 93.599526][ T7784] alloc_pages_noprof+0x8f/0x140 [ 93.599590][ T7784] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 93.599610][ T7784] __kvmalloc_node_noprof+0x3d4/0x640 [ 93.599688][ T7784] ? futex_hash_allocate+0x192/0x920 [ 93.599699][ T7784] ? futex_hash_allocate+0x192/0x920 [ 93.599711][ T7784] futex_hash_allocate+0x192/0x920 [ 93.599784][ T7784] ? cap_task_prctl+0x13f/0x6b0 [ 93.599801][ T7784] futex_hash_prctl+0xd8/0xf0 [ 93.599856][ T7784] __se_sys_prctl+0x4f4/0x13c0 [ 93.599903][ T7784] __x64_sys_prctl+0x67/0x80 [ 93.599917][ T7784] x64_sys_call+0x2533/0x3020 [ 93.599930][ T7784] do_syscall_64+0x136/0x3c0 [ 93.599949][ T7784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.600018][ T7784] RIP: 0033:0x7f5c9f96ce59 [ 93.600031][ T7784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.600041][ T7784] RSP: 002b:00007f5c9e3bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 93.600059][ T7784] RAX: ffffffffffffffda RBX: 00007f5c9fbe5fa0 RCX: 00007f5c9f96ce59 [ 93.600136][ T7784] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 93.600143][ T7784] RBP: 00007f5c9fa02d6f R08: 0000000000000000 R09: 0000000000000000 [ 93.600224][ T7784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.600231][ T7784] R13: 00007f5c9fbe6038 R14: 00007f5c9fbe5fa0 R15: 00007ffcd67ecc38 [ 93.600242][ T7784] [ 93.600258][ T7784] memory: usage 307200kB, limit 307200kB, failcnt 833 [ 93.825995][ T7784] memory+swap: usage 307588kB, limit 9007199254740988kB, failcnt 0 [ 93.833940][ T7784] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 93.841316][ T7784] Memory cgroup stats for /syz2: [ 93.841462][ T7784] cache 0 [ 93.849526][ T7784] rss 0 [ 93.852344][ T7784] shmem 0 [ 93.855269][ T7784] mapped_file 0 [ 93.858734][ T7784] dirty 0 [ 93.861765][ T7784] writeback 0 [ 93.865055][ T7784] workingset_refault_anon 132 [ 93.869792][ T7784] workingset_refault_file 1016 [ 93.874658][ T7784] swap 397312 [ 93.877968][ T7784] swapcached 954368 [ 93.881796][ T7784] pgpgin 59828 [ 93.885153][ T7784] pgpgout 59828 [ 93.888591][ T7784] pgfault 73618 [ 93.892069][ T7784] pgmajfault 69 [ 93.895514][ T7784] inactive_anon 0 [ 93.899119][ T7784] active_anon 0 [ 93.902608][ T7784] inactive_file 0 [ 93.906273][ T7784] active_file 0 [ 93.909706][ T7784] unevictable 0 [ 93.913160][ T7784] hierarchical_memory_limit 314572800 [ 93.918516][ T7784] hierarchical_memsw_limit 9223372036854771712 [ 93.924712][ T7784] total_cache 0 [ 93.928154][ T7784] total_rss 0 [ 93.931450][ T7784] total_shmem 0 [ 93.934916][ T7784] total_mapped_file 0 [ 93.938956][ T7784] total_dirty 0 [ 93.942420][ T7784] total_writeback 0 [ 93.946213][ T7784] total_workingset_refault_anon 132 [ 93.951500][ T7784] total_workingset_refault_file 1016 [ 93.956816][ T7784] total_swap 397312 [ 93.960772][ T7784] total_swapcached 954368 [ 93.965214][ T7784] total_pgpgin 59972 [ 93.969212][ T7784] total_pgpgout 59972 [ 93.973987][ T7811] all: renamed from lo (while UP) [ 93.979224][ T7784] total_pgfault 73759 [ 93.992171][ T7784] total_pgmajfault 69 [ 93.999729][ T7784] total_inactive_anon 0 [ 94.008290][ T7784] total_active_anon 0 [ 94.013173][ T7784] total_inactive_file 0 [ 94.017483][ T7784] total_active_file 0 [ 94.021838][ T7784] total_unevictable 0 [ 94.026060][ T7784] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1417,pid=7783,uid=0 [ 94.041907][ T7784] Memory cgroup out of memory: Killed process 7783 (syz.2.1417) total-vm:96348kB, anon-rss:1228kB, file-rss:22088kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 94.104896][ T7825] netlink: 'syz.7.1434': attribute type 30 has an invalid length. [ 94.182240][ T7825] netlink: 'syz.7.1434': attribute type 30 has an invalid length. [ 94.907336][ T7832] syz.9.1449 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 94.921601][ T7832] CPU: 1 UID: 0 PID: 7832 Comm: syz.9.1449 Not tainted syzkaller #0 PREEMPT(lazy) [ 94.921666][ T7832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 94.921679][ T7832] Call Trace: [ 94.921687][ T7832] [ 94.921695][ T7832] __dump_stack+0x1d/0x30 [ 94.921715][ T7832] dump_stack_lvl+0x95/0xd0 [ 94.921732][ T7832] dump_stack+0x15/0x1b [ 94.921808][ T7832] dump_header+0x80/0x240 [ 94.921827][ T7832] oom_kill_process+0x295/0x350 [ 94.921845][ T7832] out_of_memory+0x981/0xbc0 [ 94.921977][ T7832] try_charge_memcg+0x621/0xa00 [ 94.922033][ T7832] __memcg_kmem_charge_page+0x199/0x3a0 [ 94.922179][ T7832] __alloc_frozen_pages_noprof+0x18a/0x350 [ 94.922207][ T7832] alloc_pages_mpol+0xa9/0x1d0 [ 94.922225][ T7832] alloc_pages_noprof+0x8f/0x140 [ 94.922273][ T7832] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 94.922293][ T7832] __kvmalloc_node_noprof+0x3d4/0x640 [ 94.922307][ T7832] ? futex_hash_allocate+0x192/0x920 [ 94.922318][ T7832] ? futex_hash_allocate+0x192/0x920 [ 94.922330][ T7832] futex_hash_allocate+0x192/0x920 [ 94.922366][ T7832] ? cap_task_prctl+0x13f/0x6b0 [ 94.922382][ T7832] futex_hash_prctl+0xd8/0xf0 [ 94.922470][ T7832] __se_sys_prctl+0x4f4/0x13c0 [ 94.922486][ T7832] __x64_sys_prctl+0x67/0x80 [ 94.922499][ T7832] x64_sys_call+0x2533/0x3020 [ 94.922512][ T7832] do_syscall_64+0x136/0x3c0 [ 94.922551][ T7832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.922563][ T7832] RIP: 0033:0x7f3fd107ce59 [ 94.922574][ T7832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.922584][ T7832] RSP: 002b:00007f3fcfad7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 94.922596][ T7832] RAX: ffffffffffffffda RBX: 00007f3fd12f5fa0 RCX: 00007f3fd107ce59 [ 94.922613][ T7832] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 94.922620][ T7832] RBP: 00007f3fd1112d6f R08: 0000000000000000 R09: 0000000000000000 [ 94.922627][ T7832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.922634][ T7832] R13: 00007f3fd12f6038 R14: 00007f3fd12f5fa0 R15: 00007ffde142b7d8 [ 94.922644][ T7832] [ 94.922649][ T7832] memory: usage 307200kB, limit 307200kB, failcnt 750 [ 95.087589][ T28] kauditd_printk_skb: 181 callbacks suppressed [ 95.087603][ T28] audit: type=1400 audit(1781536221.618:2239): avc: denied { allowed } for pid=7871 comm="syz.7.1454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 95.129971][ T7832] memory+swap: usage 307408kB, limit 9007199254740988kB, failcnt 0 [ 95.144310][ T3429] usb 17-1: enqueue for inactive port 0 [ 95.145182][ T7832] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 95.160637][ T3429] usb 17-1: enqueue for inactive port 0 [ 95.170885][ T7832] Memory cgroup stats for /syz9: [ 95.197354][ T7832] cache 0 [ 95.205329][ T7832] rss 0 [ 95.208206][ T7832] shmem 0 [ 95.211259][ T7832] mapped_file 0 [ 95.214737][ T7832] dirty 0 [ 95.217704][ T7832] writeback 0 [ 95.221073][ T7832] workingset_refault_anon 224 [ 95.222058][ T28] audit: type=1400 audit(1781536221.628:2240): avc: denied { read write } for pid=5329 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 95.225759][ T7832] workingset_refault_file 0 [ 95.253341][ T28] audit: type=1400 audit(1781536221.638:2241): avc: denied { create } for pid=7875 comm="syz.8.1455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 95.254477][ T7832] swap 212992 [ 95.254485][ T7832] swapcached 1155072 [ 95.254491][ T7832] pgpgin 41191 [ 95.275779][ T3429] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 95.277286][ T7832] pgpgout 41191 [ 95.292376][ T28] audit: type=1400 audit(1781536221.648:2242): avc: denied { read write } for pid=5329 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 95.294431][ T7832] pgfault 47787 [ 95.294441][ T7832] pgmajfault 131 [ 95.294449][ T7832] inactive_anon 0 [ 95.318909][ T28] audit: type=1400 audit(1781536221.688:2243): avc: denied { read write } for pid=4967 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 95.322900][ T7832] active_anon 0 [ 95.325741][ T28] audit: type=1400 audit(1781536221.708:2244): avc: denied { read write } for pid=3303 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 95.329227][ T7832] inactive_file 0 [ 95.329236][ T7832] active_file 0 [ 95.329243][ T7832] unevictable 0 [ 95.329249][ T7832] hierarchical_memory_limit 314572800 [ 95.329257][ T7832] hierarchical_memsw_limit 9223372036854771712 [ 95.329270][ T7832] total_cache 0 [ 95.329276][ T7832] total_rss 0 [ 95.329282][ T7832] total_shmem 0 [ 95.329289][ T7832] total_mapped_file 0 [ 95.329295][ T7832] total_dirty 0 [ 95.329301][ T7832] total_writeback 0 [ 95.329308][ T7832] total_workingset_refault_anon 224 [ 95.356845][ T28] audit: type=1400 audit(1781536221.748:2245): avc: denied { read write } for pid=4967 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 95.357088][ T7832] total_workingset_refault_file 0 [ 95.381258][ T28] audit: type=1400 audit(1781536221.818:2246): avc: denied { read write } for pid=5443 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 95.384737][ T7832] total_swap 212992 [ 95.411768][ T28] audit: type=1400 audit(1781536221.938:2247): avc: denied { read write } for pid=5329 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 95.413538][ T7832] total_swapcached 1155072 [ 95.515549][ T7832] total_pgpgin 41341 [ 95.519428][ T7832] total_pgpgout 41341 [ 95.523455][ T7832] total_pgfault 47931 [ 95.527459][ T7832] total_pgmajfault 131 [ 95.531528][ T7832] total_inactive_anon 0 [ 95.535668][ T7832] total_active_anon 0 [ 95.539657][ T7832] total_inactive_file 0 [ 95.543811][ T7832] total_active_file 0 [ 95.547779][ T7832] total_unevictable 0 [ 95.551765][ T7832] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.1449,pid=7831,uid=0 [ 95.566480][ T7832] Memory cgroup out of memory: Killed process 7831 (syz.9.1449) total-vm:96348kB, anon-rss:1236kB, file-rss:22204kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 95.618120][ T28] audit: type=1400 audit(1781536222.148:2249): avc: denied { watch watch_reads } for pid=7885 comm="syz.8.1460" path="/191" dev="tmpfs" ino=989 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 96.535075][ T7914] syz.8.1472 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 96.549204][ T7914] CPU: 1 UID: 0 PID: 7914 Comm: syz.8.1472 Not tainted syzkaller #0 PREEMPT(lazy) [ 96.549221][ T7914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 96.549308][ T7914] Call Trace: [ 96.549314][ T7914] [ 96.549320][ T7914] __dump_stack+0x1d/0x30 [ 96.549335][ T7914] dump_stack_lvl+0x95/0xd0 [ 96.549406][ T7914] dump_stack+0x15/0x1b [ 96.549417][ T7914] dump_header+0x80/0x240 [ 96.549429][ T7914] oom_kill_process+0x295/0x350 [ 96.549441][ T7914] out_of_memory+0x981/0xbc0 [ 96.549460][ T7914] try_charge_memcg+0x621/0xa00 [ 96.549516][ T7914] __memcg_kmem_charge_page+0x199/0x3a0 [ 96.549531][ T7914] __alloc_frozen_pages_noprof+0x18a/0x350 [ 96.549601][ T7914] alloc_pages_mpol+0xa9/0x1d0 [ 96.549617][ T7914] alloc_pages_noprof+0x8f/0x140 [ 96.549670][ T7914] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 96.549690][ T7914] __kvmalloc_node_noprof+0x3d4/0x640 [ 96.549704][ T7914] ? futex_hash_allocate+0x192/0x920 [ 96.549796][ T7914] ? futex_hash_allocate+0x192/0x920 [ 96.549808][ T7914] futex_hash_allocate+0x192/0x920 [ 96.549819][ T7914] ? cap_task_prctl+0x13f/0x6b0 [ 96.549899][ T7914] futex_hash_prctl+0xd8/0xf0 [ 96.549909][ T7914] __se_sys_prctl+0x4f4/0x13c0 [ 96.549924][ T7914] __x64_sys_prctl+0x67/0x80 [ 96.549938][ T7914] x64_sys_call+0x2533/0x3020 [ 96.549963][ T7914] do_syscall_64+0x136/0x3c0 [ 96.549983][ T7914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.549995][ T7914] RIP: 0033:0x7ff2ff29ce59 [ 96.550005][ T7914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.550016][ T7914] RSP: 002b:00007ff2fdcf7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 96.550071][ T7914] RAX: ffffffffffffffda RBX: 00007ff2ff515fa0 RCX: 00007ff2ff29ce59 [ 96.550119][ T7914] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 96.550127][ T7914] RBP: 00007ff2ff332d6f R08: 0000000000000000 R09: 0000000000000000 [ 96.550135][ T7914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.550142][ T7914] R13: 00007ff2ff516038 R14: 00007ff2ff515fa0 R15: 00007ffca80950b8 [ 96.550153][ T7914] [ 96.550157][ T7914] memory: usage 307200kB, limit 307200kB, failcnt 606 [ 96.771687][ T7914] memory+swap: usage 307408kB, limit 9007199254740988kB, failcnt 0 [ 96.779666][ T7914] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 96.787008][ T7914] Memory cgroup stats for /syz8: [ 96.787216][ T7914] cache 0 [ 96.795205][ T7914] rss 0 [ 96.797950][ T7914] shmem 0 [ 96.800869][ T7914] mapped_file 0 [ 96.804372][ T7914] dirty 0 [ 96.807306][ T7914] writeback 0 [ 96.810564][ T7914] workingset_refault_anon 214 [ 96.815299][ T7914] workingset_refault_file 0 [ 96.819788][ T7914] swap 212992 [ 96.823103][ T7914] swapcached 1114112 [ 96.827018][ T7914] pgpgin 37716 [ 96.830370][ T7914] pgpgout 37716 [ 96.833864][ T7914] pgfault 41693 [ 96.837384][ T7914] pgmajfault 109 [ 96.841000][ T7914] inactive_anon 0 [ 96.844673][ T7914] active_anon 0 [ 96.848105][ T7914] inactive_file 0 [ 96.851803][ T7914] active_file 0 [ 96.855401][ T7914] unevictable 0 [ 96.858913][ T7914] hierarchical_memory_limit 314572800 [ 96.864286][ T7914] hierarchical_memsw_limit 9223372036854771712 [ 96.870523][ T7914] total_cache 0 [ 96.873985][ T7914] total_rss 0 [ 96.877257][ T7914] total_shmem 0 [ 96.880690][ T7914] total_mapped_file 0 [ 96.884673][ T7914] total_dirty 0 [ 96.888119][ T7914] total_writeback 0 [ 96.891929][ T7914] total_workingset_refault_anon 214 [ 96.897159][ T7914] total_workingset_refault_file 0 [ 96.902195][ T7914] total_swap 212992 [ 96.905991][ T7914] total_swapcached 1114112 [ 96.910377][ T7914] total_pgpgin 37716 [ 96.914344][ T7914] total_pgpgout 37716 [ 96.918310][ T7914] total_pgfault 41693 [ 96.922301][ T7914] total_pgmajfault 109 [ 96.926441][ T7914] total_inactive_anon 0 [ 96.930573][ T7914] total_active_anon 0 [ 96.935246][ T7914] total_inactive_file 0 [ 96.941994][ T7914] total_active_file 0 [ 96.945985][ T7914] total_unevictable 0 [ 96.949946][ T7914] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.1472,pid=7912,uid=0 [ 96.964565][ T7914] Memory cgroup out of memory: Killed process 7912 (syz.8.1472) total-vm:96348kB, anon-rss:1232kB, file-rss:22140kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 97.407122][ T7958] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1494'. [ 97.425827][ T7958] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1494'. [ 97.541703][ T7958] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1494'. [ 97.550764][ T7958] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1494'. [ 98.428502][ T8013] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1513'. [ 98.451083][ T8013] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1513'. [ 98.481964][ T8013] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1513'. [ 98.492317][ T8013] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1513'. [ 99.009659][ T8063] netlink: 'syz.8.1541': attribute type 4 has an invalid length. [ 99.076144][ T8071] netlink: 'syz.2.1556': attribute type 4 has an invalid length. [ 99.635105][ T8043] syz.9.1528 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 99.649224][ T8043] CPU: 1 UID: 0 PID: 8043 Comm: syz.9.1528 Not tainted syzkaller #0 PREEMPT(lazy) [ 99.649242][ T8043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 99.649250][ T8043] Call Trace: [ 99.649254][ T8043] [ 99.649261][ T8043] __dump_stack+0x1d/0x30 [ 99.649394][ T8043] dump_stack_lvl+0x95/0xd0 [ 99.649406][ T8043] dump_stack+0x15/0x1b [ 99.649416][ T8043] dump_header+0x80/0x240 [ 99.649501][ T8043] oom_kill_process+0x295/0x350 [ 99.649513][ T8043] out_of_memory+0x981/0xbc0 [ 99.649554][ T8043] try_charge_memcg+0x621/0xa00 [ 99.649587][ T8043] __memcg_kmem_charge_page+0x199/0x3a0 [ 99.649611][ T8043] __alloc_frozen_pages_noprof+0x18a/0x350 [ 99.649628][ T8043] alloc_pages_mpol+0xa9/0x1d0 [ 99.649648][ T8043] alloc_pages_noprof+0x8f/0x140 [ 99.649662][ T8043] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 99.649732][ T8043] __kvmalloc_node_noprof+0x3d4/0x640 [ 99.649746][ T8043] ? futex_hash_allocate+0x192/0x920 [ 99.649773][ T8043] ? futex_hash_allocate+0x192/0x920 [ 99.649785][ T8043] futex_hash_allocate+0x192/0x920 [ 99.649797][ T8043] ? cap_task_prctl+0x13f/0x6b0 [ 99.649892][ T8043] futex_hash_prctl+0xd8/0xf0 [ 99.649902][ T8043] __se_sys_prctl+0x4f4/0x13c0 [ 99.649917][ T8043] __x64_sys_prctl+0x67/0x80 [ 99.649931][ T8043] x64_sys_call+0x2533/0x3020 [ 99.649989][ T8043] do_syscall_64+0x136/0x3c0 [ 99.650018][ T8043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.650031][ T8043] RIP: 0033:0x7f3fd107ce59 [ 99.650042][ T8043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.650052][ T8043] RSP: 002b:00007f3fcfad7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 99.650090][ T8043] RAX: ffffffffffffffda RBX: 00007f3fd12f5fa0 RCX: 00007f3fd107ce59 [ 99.650105][ T8043] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 99.650113][ T8043] RBP: 00007f3fd1112d6f R08: 0000000000000000 R09: 0000000000000000 [ 99.650121][ T8043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.650128][ T8043] R13: 00007f3fd12f6038 R14: 00007f3fd12f5fa0 R15: 00007ffde142b7d8 [ 99.650139][ T8043] [ 99.650143][ T8043] memory: usage 307200kB, limit 307200kB, failcnt 1123 [ 99.872118][ T8043] memory+swap: usage 307408kB, limit 9007199254740988kB, failcnt 0 [ 99.880013][ T8043] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 99.887377][ T8043] Memory cgroup stats for /syz9: [ 99.887569][ T8043] cache 0 [ 99.895633][ T8043] rss 0 [ 99.898443][ T8043] shmem 0 [ 99.901613][ T8043] mapped_file 0 [ 99.905406][ T8043] dirty 0 [ 99.908353][ T8043] writeback 0 [ 99.911948][ T8043] workingset_refault_anon 324 [ 99.916758][ T8043] workingset_refault_file 0 [ 99.921486][ T8043] swap 212992 [ 99.924787][ T8043] swapcached 1712128 [ 99.928676][ T8043] pgpgin 44978 [ 99.932274][ T8043] pgpgout 44978 [ 99.935738][ T8043] pgfault 52776 [ 99.939182][ T8043] pgmajfault 202 [ 99.943126][ T8043] inactive_anon 0 [ 99.946843][ T8043] active_anon 0 [ 99.951864][ T8043] inactive_file 0 [ 99.956167][ T8043] active_file 0 [ 99.960016][ T8043] unevictable 0 [ 99.963963][ T8043] hierarchical_memory_limit 314572800 [ 99.970832][ T8043] hierarchical_memsw_limit 9223372036854771712 [ 99.977294][ T8043] total_cache 0 [ 99.982101][ T8043] total_rss 0 [ 99.985489][ T8043] total_shmem 0 [ 99.989103][ T8043] total_mapped_file 0 [ 99.993180][ T8043] total_dirty 0 [ 99.997004][ T8043] total_writeback 0 [ 100.000995][ T8043] total_workingset_refault_anon 324 [ 100.006411][ T8043] total_workingset_refault_file 0 [ 100.011976][ T8043] total_swap 212992 [ 100.017131][ T8043] total_swapcached 1712128 [ 100.032441][ T8043] total_pgpgin 45128 [ 100.036428][ T8043] total_pgpgout 45128 [ 100.040413][ T8043] total_pgfault 52920 [ 100.044901][ T8043] total_pgmajfault 202 [ 100.049052][ T8043] total_inactive_anon 0 [ 100.053559][ T8043] total_active_anon 0 [ 100.057542][ T8043] total_inactive_file 0 [ 100.062249][ T8043] total_active_file 0 [ 100.066464][ T8043] total_unevictable 0 [ 100.070456][ T8043] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.1528,pid=8040,uid=0 [ 100.086147][ T8043] Memory cgroup out of memory: Killed process 8040 (syz.9.1528) total-vm:96348kB, anon-rss:1236kB, file-rss:22136kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 100.109386][ T28] kauditd_printk_skb: 307 callbacks suppressed [ 100.109400][ T28] audit: type=1400 audit(1781536226.638:2556): avc: denied { open } for pid=8120 comm="syz.8.1569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 100.152546][ T28] audit: type=1400 audit(1781536226.638:2557): avc: denied { bpf } for pid=8121 comm="syz.7.1568" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 100.173190][ T28] audit: type=1400 audit(1781536226.638:2558): avc: denied { prog_load } for pid=8121 comm="syz.7.1568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 100.192429][ T28] audit: type=1400 audit(1781536226.638:2559): avc: denied { execmem } for pid=8121 comm="syz.7.1568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 100.211832][ T28] audit: type=1400 audit(1781536226.638:2560): avc: denied { prog_load } for pid=8121 comm="syz.7.1568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 100.231203][ T28] audit: type=1400 audit(1781536226.658:2561): avc: denied { read write } for pid=4967 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 100.255617][ T28] audit: type=1400 audit(1781536226.658:2562): avc: denied { prog_load } for pid=8124 comm="syz.2.1581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 100.274776][ T28] audit: type=1400 audit(1781536226.668:2563): avc: denied { read write } for pid=3303 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 100.299082][ T28] audit: type=1400 audit(1781536226.668:2564): avc: denied { prog_load } for pid=8120 comm="syz.8.1569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 100.318382][ T28] audit: type=1400 audit(1781536226.668:2565): avc: denied { prog_load } for pid=8120 comm="syz.8.1569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 101.234627][ T8144] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.242001][ T8144] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.249915][ T8144] bridge0: entered allmulticast mode [ 101.271409][ T8144] bridge_slave_1: left allmulticast mode [ 101.286205][ T8144] bridge_slave_1: left promiscuous mode [ 101.292456][ T8144] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.300230][ T8144] bridge_slave_0: left allmulticast mode [ 101.306098][ T8144] bridge_slave_0: left promiscuous mode [ 101.312589][ T8144] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.604747][ T8184] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.611988][ T8184] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.623158][ T8184] bridge0: entered allmulticast mode [ 101.639558][ T8184] bridge_slave_1: left allmulticast mode [ 101.645367][ T8184] bridge_slave_1: left promiscuous mode [ 101.651613][ T8184] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.659425][ T8184] bridge_slave_0: left allmulticast mode [ 101.665391][ T8184] bridge_slave_0: left promiscuous mode [ 101.671284][ T8184] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.121913][ T8216] netlink: 92 bytes leftover after parsing attributes in process `syz.9.1616'. [ 102.146938][ T8218] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.154274][ T8218] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.165187][ T8218] bridge0: entered allmulticast mode [ 102.187229][ T8218] bridge_slave_1: left allmulticast mode [ 102.193192][ T8218] bridge_slave_1: left promiscuous mode [ 102.198991][ T8218] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.206998][ T8218] bridge_slave_0: left allmulticast mode [ 102.212706][ T8218] bridge_slave_0: left promiscuous mode [ 102.218508][ T8218] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.428724][ T8246] netlink: 92 bytes leftover after parsing attributes in process `syz.8.1632'. [ 103.277817][ T8280] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1645'. [ 103.551774][ T8317] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1663'. [ 103.608524][ T8323] macvlan3: entered promiscuous mode [ 104.954182][ T8361] macvlan2: entered promiscuous mode [ 105.111294][ T28] kauditd_printk_skb: 362 callbacks suppressed [ 105.111311][ T28] audit: type=1400 audit(1781536231.648:2928): avc: denied { mounton } for pid=8383 comm="syz.8.1695" path="/233" dev="tmpfs" ino=1207 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 105.157341][ T28] audit: type=1400 audit(1781536231.668:2929): avc: denied { read write } for pid=4967 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 105.184298][ T28] audit: type=1400 audit(1781536231.678:2930): avc: denied { allowed } for pid=8385 comm="syz.7.1697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 105.204583][ T28] audit: type=1400 audit(1781536231.678:2931): avc: denied { map_create } for pid=8385 comm="syz.7.1697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 105.223974][ T28] audit: type=1400 audit(1781536231.678:2932): avc: denied { prog_load } for pid=8385 comm="syz.7.1697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 105.244053][ T28] audit: type=1400 audit(1781536231.678:2933): avc: denied { prog_load } for pid=8386 comm="syz.6.1698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 105.267357][ T28] audit: type=1400 audit(1781536231.688:2934): avc: denied { read write } for pid=5329 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 105.291955][ T28] audit: type=1400 audit(1781536231.698:2935): avc: denied { create } for pid=8386 comm="syz.6.1698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 105.311942][ T28] audit: type=1400 audit(1781536231.718:2936): avc: denied { read write } for pid=4967 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 105.358273][ T28] audit: type=1400 audit(1781536231.728:2937): avc: denied { mount } for pid=8393 comm="syz.2.1702" name="/" dev="configfs" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=0 [ 105.607208][ T8427] netlink: 'syz.2.1727': attribute type 2 has an invalid length. [ 106.065711][ T8472] netlink: 'syz.9.1735': attribute type 2 has an invalid length. [ 106.380403][ T8498] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1760'. [ 106.901940][ T8531] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1765'. [ 107.289956][ T8563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1781'. [ 107.839123][ T8597] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1796'. [ 107.867651][ T8604] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1798'. [ 108.180738][ T8632] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1810'. [ 108.213559][ T8638] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1813'. [ 108.369797][ T8662] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1827'. [ 110.126024][ T28] kauditd_printk_skb: 539 callbacks suppressed [ 110.126038][ T28] audit: type=1400 audit(1781536236.658:3477): avc: denied { read write } for pid=3303 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 110.731785][ T28] audit: type=1400 audit(1781536237.268:3478): avc: denied { read write } for pid=5329 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 110.759391][ T28] audit: type=1400 audit(1781536237.288:3479): avc: denied { map_create } for pid=8779 comm="syz.8.1881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 110.791590][ T28] audit: type=1400 audit(1781536237.318:3480): avc: denied { name_bind } for pid=8781 comm="syz.6.1893" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=0 [ 110.820268][ T28] audit: type=1400 audit(1781536237.318:3481): avc: denied { read write } for pid=5329 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 110.851482][ T28] audit: type=1400 audit(1781536237.318:3482): avc: denied { read write } for pid=4967 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 110.876927][ T28] audit: type=1400 audit(1781536237.348:3483): avc: denied { allowed } for pid=8784 comm="syz.7.1882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 110.889010][ T8787] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1896'. [ 110.898017][ T28] audit: type=1400 audit(1781536237.348:3484): avc: denied { prog_load } for pid=8784 comm="syz.7.1882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 110.909727][ T8787] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1896'. [ 110.935556][ T28] audit: type=1400 audit(1781536237.348:3485): avc: denied { open } for pid=8783 comm="syz.2.1894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 110.958409][ T28] audit: type=1400 audit(1781536237.348:3486): avc: denied { open } for pid=8783 comm="syz.2.1894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 111.025980][ T8808] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1905'. [ 111.035314][ T8808] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1905'. [ 112.855691][ T8922] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.1959'. [ 113.698343][ T8963] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1963'. [ 113.707898][ T8963] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1963'. [ 113.784197][ T8971] netlink: 16178 bytes leftover after parsing attributes in process `syz.9.1969'. [ 114.728862][ T9028] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1990'. [ 114.745465][ T9028] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1990'. [ 115.379818][ T28] kauditd_printk_skb: 321 callbacks suppressed [ 115.379834][ T28] audit: type=1400 audit(1781536241.908:3808): avc: denied { read write } for pid=5329 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 115.423211][ T28] audit: type=1400 audit(1781536241.948:3809): avc: denied { create } for pid=9037 comm="syz.2.2003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=0 [ 115.450749][ T28] audit: type=1400 audit(1781536241.948:3810): avc: denied { block_suspend } for pid=9039 comm="syz.7.2004" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 115.473072][ T28] audit: type=1400 audit(1781536241.958:3811): avc: denied { read write } for pid=4967 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 115.497573][ T28] audit: type=1400 audit(1781536241.968:3812): avc: denied { read write } for pid=9038 comm="syz.8.2000" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 115.522814][ T28] audit: type=1400 audit(1781536241.968:3813): avc: denied { execute } for pid=9038 comm="syz.8.2000" path="/299/file1" dev="tmpfs" ino=1551 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 115.546348][ T28] audit: type=1400 audit(1781536241.978:3814): avc: denied { read write } for pid=5329 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 115.582559][ T28] audit: type=1400 audit(1781536241.978:3815): avc: denied { read write } for pid=3303 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 115.607245][ T28] audit: type=1400 audit(1781536241.978:3816): avc: denied { read } for pid=9040 comm="syz.6.2001" dev="nsfs" ino=4026532513 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 115.628873][ T28] audit: type=1400 audit(1781536241.978:3817): avc: denied { prog_load } for pid=9040 comm="syz.6.2001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 116.305133][ T9067] netlink: 2044 bytes leftover after parsing attributes in process `syz.6.2014'. [ 116.429375][ T9101] tls_set_device_offload_rx: netdev not found [ 116.513762][ T9115] netlink: 2044 bytes leftover after parsing attributes in process `syz.7.2034'. [ 116.951620][ T9148] tls_set_device_offload_rx: netdev not found [ 117.029962][ T9157] netlink: 2044 bytes leftover after parsing attributes in process `syz.8.2048'. [ 117.481228][ T9201] netlink: 2044 bytes leftover after parsing attributes in process `syz.2.2068'. [ 119.485275][ T9365] xt_policy: output policy not valid in PREROUTING and INPUT [ 120.139694][ T9399] xt_policy: output policy not valid in PREROUTING and INPUT [ 120.685613][ T28] kauditd_printk_skb: 470 callbacks suppressed [ 120.685627][ T28] audit: type=1400 audit(1781536247.218:4288): avc: denied { read write } for pid=5329 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 120.997971][ T28] audit: type=1400 audit(1781536247.528:4289): avc: denied { read write } for pid=5557 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 121.028810][ T28] audit: type=1400 audit(1781536247.558:4290): avc: denied { map_create } for pid=9433 comm="syz.9.2184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 121.059154][ T28] audit: type=1400 audit(1781536247.578:4291): avc: denied { prog_load } for pid=9433 comm="syz.9.2184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 121.079317][ T28] audit: type=1400 audit(1781536247.578:4292): avc: denied { create } for pid=9433 comm="syz.9.2184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 121.100578][ T28] audit: type=1400 audit(1781536247.578:4293): avc: denied { prog_load } for pid=9433 comm="syz.9.2184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 121.120474][ T28] audit: type=1400 audit(1781536247.578:4294): avc: denied { create } for pid=9433 comm="syz.9.2184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 121.144679][ T28] audit: type=1400 audit(1781536247.588:4295): avc: denied { create } for pid=9436 comm="syz.6.2194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 121.164543][ T28] audit: type=1400 audit(1781536247.588:4296): avc: denied { read write } for pid=5557 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 121.189370][ T28] audit: type=1400 audit(1781536247.598:4297): avc: denied { create } for pid=9435 comm="syz.7.2195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=0 [ 124.708527][ T9675] syz.7.2296 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 124.722657][ T9675] CPU: 0 UID: 0 PID: 9675 Comm: syz.7.2296 Not tainted syzkaller #0 PREEMPT(lazy) [ 124.722675][ T9675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 124.722683][ T9675] Call Trace: [ 124.722687][ T9675] [ 124.722722][ T9675] __dump_stack+0x1d/0x30 [ 124.722739][ T9675] dump_stack_lvl+0x95/0xd0 [ 124.722750][ T9675] dump_stack+0x15/0x1b [ 124.722761][ T9675] dump_header+0x80/0x240 [ 124.722832][ T9675] oom_kill_process+0x295/0x350 [ 124.722845][ T9675] out_of_memory+0x981/0xbc0 [ 124.722937][ T9675] try_charge_memcg+0x621/0xa00 [ 124.722974][ T9675] __memcg_kmem_charge_page+0x199/0x3a0 [ 124.723059][ T9675] __alloc_frozen_pages_noprof+0x18a/0x350 [ 124.723076][ T9675] alloc_pages_mpol+0xa9/0x1d0 [ 124.723092][ T9675] alloc_pages_noprof+0x8f/0x140 [ 124.723150][ T9675] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 124.723203][ T9675] __kvmalloc_node_noprof+0x3d4/0x640 [ 124.723288][ T9675] ? futex_hash_allocate+0x192/0x920 [ 124.723300][ T9675] ? hrtimer_start_range_ns+0x108/0x120 [ 124.723315][ T9675] ? futex_hash_allocate+0x192/0x920 [ 124.723327][ T9675] futex_hash_allocate+0x192/0x920 [ 124.723339][ T9675] ? cap_task_prctl+0x13f/0x6b0 [ 124.723433][ T9675] futex_hash_prctl+0xd8/0xf0 [ 124.723444][ T9675] __se_sys_prctl+0x4f4/0x13c0 [ 124.723459][ T9675] __x64_sys_prctl+0x67/0x80 [ 124.723491][ T9675] x64_sys_call+0x2533/0x3020 [ 124.723505][ T9675] do_syscall_64+0x136/0x3c0 [ 124.723549][ T9675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.723561][ T9675] RIP: 0033:0x7f2f7a19ce59 [ 124.723572][ T9675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.723582][ T9675] RSP: 002b:00007f2f78bf7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 124.723594][ T9675] RAX: ffffffffffffffda RBX: 00007f2f7a415fa0 RCX: 00007f2f7a19ce59 [ 124.723682][ T9675] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 124.723690][ T9675] RBP: 00007f2f7a232d6f R08: 0000000000000000 R09: 0000000000000000 [ 124.723697][ T9675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.723705][ T9675] R13: 00007f2f7a416038 R14: 00007f2f7a415fa0 R15: 00007fff380b9168 [ 124.723715][ T9675] [ 124.723720][ T9675] memory: usage 307200kB, limit 307200kB, failcnt 1043 [ 124.952937][ T9675] memory+swap: usage 307744kB, limit 9007199254740988kB, failcnt 0 [ 124.960849][ T9675] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 124.968196][ T9675] Memory cgroup stats for /syz7: [ 124.968406][ T9675] cache 0 [ 124.976326][ T9675] rss 0 [ 124.979190][ T9675] shmem 0 [ 124.982132][ T9675] mapped_file 0 [ 124.985580][ T9675] dirty 0 [ 124.988503][ T9675] writeback 0 [ 124.991824][ T9675] workingset_refault_anon 210 [ 124.996540][ T9675] workingset_refault_file 0 [ 125.001048][ T9675] swap 557056 [ 125.004321][ T9675] swapcached 1441792 [ 125.008287][ T9675] pgpgin 58629 [ 125.011693][ T9675] pgpgout 58629 [ 125.018223][ T9675] pgfault 80612 [ 125.021746][ T9675] pgmajfault 141 [ 125.025315][ T9675] inactive_anon 0 [ 125.028932][ T9675] active_anon 0 [ 125.032416][ T9675] inactive_file 0 [ 125.036067][ T9675] active_file 0 [ 125.039560][ T9675] unevictable 0 [ 125.043056][ T9675] hierarchical_memory_limit 314572800 [ 125.048412][ T9675] hierarchical_memsw_limit 9223372036854771712 [ 125.054586][ T9675] total_cache 0 [ 125.058055][ T9675] total_rss 0 [ 125.061397][ T9675] total_shmem 0 [ 125.064865][ T9675] total_mapped_file 0 [ 125.068838][ T9675] total_dirty 0 [ 125.072316][ T9675] total_writeback 0 [ 125.076157][ T9675] total_workingset_refault_anon 210 [ 125.081443][ T9675] total_workingset_refault_file 0 [ 125.086465][ T9675] total_swap 557056 [ 125.090339][ T9675] total_swapcached 1441792 [ 125.095041][ T9675] total_pgpgin 58629 [ 125.098968][ T9675] total_pgpgout 58629 [ 125.102968][ T9675] total_pgfault 80612 [ 125.106944][ T9675] total_pgmajfault 141 [ 125.111147][ T9675] total_inactive_anon 0 [ 125.115322][ T9675] total_active_anon 0 [ 125.119328][ T9675] total_inactive_file 0 [ 125.123483][ T9675] total_active_file 0 [ 125.127458][ T9675] total_unevictable 0 [ 125.131545][ T9675] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.2296,pid=9674,uid=0 [ 125.146144][ T9675] Memory cgroup out of memory: Killed process 9674 (syz.7.2296) total-vm:94164kB, anon-rss:1232kB, file-rss:22224kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 125.585453][ T9774] netlink: 'syz.9.2337': attribute type 4 has an invalid length. [ 125.602357][ T9774] netlink: 'syz.9.2337': attribute type 4 has an invalid length. [ 125.693309][ T28] kauditd_printk_skb: 398 callbacks suppressed [ 125.693324][ T28] audit: type=1400 audit(1781536252.228:4696): avc: denied { read write } for pid=5329 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 125.743846][ T28] audit: type=1400 audit(1781536252.258:4697): avc: denied { read write } for pid=5557 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 125.837008][ T9790] netlink: 27 bytes leftover after parsing attributes in process `syz.9.2347'. [ 125.852361][ T28] audit: type=1400 audit(1781536252.268:4698): avc: denied { name_bind } for pid=9780 comm="syz.8.2342" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 125.898211][ T28] audit: type=1400 audit(1781536252.278:4699): avc: denied { read write } for pid=4967 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 125.982178][ T28] audit: type=1400 audit(1781536252.308:4700): avc: denied { read write } for pid=5329 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 126.030602][ T28] audit: type=1400 audit(1781536252.308:4701): avc: denied { read write } for pid=5557 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 126.073474][ T28] audit: type=1400 audit(1781536252.328:4702): avc: denied { mounton } for pid=9758 comm="syz.2.2332" path="/proc/992/task" dev="proc" ino=27294 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=0 [ 126.101156][ T28] audit: type=1400 audit(1781536252.358:4703): avc: denied { read write } for pid=5557 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 126.127204][ T28] audit: type=1400 audit(1781536252.368:4704): avc: denied { open } for pid=9789 comm="syz.9.2347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 126.146807][ T28] audit: type=1400 audit(1781536252.388:4705): avc: denied { read write } for pid=4967 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 126.200534][ T9808] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2351'. [ 126.210599][ T9808] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2351'. [ 126.306877][ T9824] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2360'. [ 127.078243][ T9864] netlink: 27 bytes leftover after parsing attributes in process `syz.6.2376'. [ 127.444004][ T9898] netlink: 27 bytes leftover after parsing attributes in process `syz.8.2392'. [ 128.904363][ T9827] syz.9.2362 (9827) used greatest stack depth: 8064 bytes left [ 129.074975][ T9986] 8021q: VLANs not supported on lo [ 129.096614][ T9986] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2435'. [ 129.857762][ T9996] 8021q: VLANs not supported on lo [ 129.870289][ T9996] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2448'. [ 130.525709][ T9991] syz.8.2446 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 130.541773][ T9991] CPU: 0 UID: 0 PID: 9991 Comm: syz.8.2446 Not tainted syzkaller #0 PREEMPT(lazy) [ 130.541799][ T9991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 130.541836][ T9991] Call Trace: [ 130.541845][ T9991] [ 130.541854][ T9991] __dump_stack+0x1d/0x30 [ 130.541877][ T9991] dump_stack_lvl+0x95/0xd0 [ 130.541897][ T9991] dump_stack+0x15/0x1b [ 130.541916][ T9991] dump_header+0x80/0x240 [ 130.542013][ T9991] oom_kill_process+0x295/0x350 [ 130.542055][ T9991] out_of_memory+0x981/0xbc0 [ 130.542109][ T9991] try_charge_memcg+0x621/0xa00 [ 130.542133][ T9991] ? submit_bio_noacct_nocheck+0x54f/0x620 [ 130.542160][ T9991] charge_memcg+0x6d/0x120 [ 130.542188][ T9991] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 130.542219][ T9991] __swap_cache_prepare_and_add+0x69/0x490 [ 130.542251][ T9991] ? alloc_pages_mpol+0xd9/0x1d0 [ 130.542316][ T9991] swap_cache_alloc_folio+0xa2/0x120 [ 130.542373][ T9991] swap_cluster_readahead+0x25f/0x3c0 [ 130.542398][ T9991] swapin_readahead+0xde/0x840 [ 130.542499][ T9991] ? _raw_spin_unlock+0x9/0x30 [ 130.542517][ T9991] ? swap_put_entries_cluster+0x44a/0x470 [ 130.542609][ T9991] ? __rcu_read_unlock+0x4e/0x70 [ 130.542633][ T9991] ? swap_cache_get_folio+0x1e0/0x1f0 [ 130.542681][ T9991] do_swap_page+0x34d/0x2150 [ 130.542706][ T9991] ? __css_rstat_updated+0xbb/0x280 [ 130.542727][ T9991] ? __rcu_read_lock+0x36/0x50 [ 130.542791][ T9991] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 130.542818][ T9991] handle_mm_fault+0xb3c/0x2da0 [ 130.542900][ T9991] do_user_addr_fault+0x634/0x1060 [ 130.542928][ T9991] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 130.542949][ T9991] ? trace_page_fault_user+0x1f/0xa0 [ 130.542975][ T9991] exc_page_fault+0x62/0xa0 [ 130.543022][ T9991] asm_exc_page_fault+0x26/0x30 [ 130.543044][ T9991] RIP: 0033:0x7ff2ff16a80c [ 130.543060][ T9991] Code: 8a 31 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 81 c3 f0 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 130.543078][ T9991] RSP: 002b:00007ffca8095220 EFLAGS: 00010202 [ 130.543135][ T9991] RAX: 0000000000000000 RBX: 00007ff2ff517080 RCX: 0000555573a6b808 [ 130.543147][ T9991] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 130.543159][ T9991] RBP: 00007ff2ff517da0 R08: 0000000000000000 R09: 0000000000000000 [ 130.543173][ T9991] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000001fe5a [ 130.543187][ T9991] R13: 00007ff2ff51609c R14: 000000000001fb83 R15: 00007ff2ff516090 [ 130.543287][ T9991] [ 130.543329][ T9991] memory: usage 307200kB, limit 307200kB, failcnt 845 [ 130.728903][ T28] kauditd_printk_skb: 221 callbacks suppressed [ 130.728918][ T28] audit: type=1400 audit(1781536257.258:4927): avc: denied { read write } for pid=3303 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 130.750879][ T9991] memory+swap: usage 307376kB, limit 9007199254740988kB, failcnt 0 [ 130.835559][ T28] audit: type=1400 audit(1781536257.368:4928): avc: denied { map_create } for pid=10028 comm="syz.2.2450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 130.843804][ T9991] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 130.855739][ T28] audit: type=1400 audit(1781536257.388:4929): avc: denied { prog_load } for pid=10028 comm="syz.2.2450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 130.875165][ T9991] Memory cgroup stats for [ 130.892472][ T28] audit: type=1400 audit(1781536257.418:4930): avc: denied { map_create } for pid=10028 comm="syz.2.2450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 130.918643][ T28] audit: type=1400 audit(1781536257.418:4931): avc: denied { prog_load } for pid=10028 comm="syz.2.2450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 130.922303][ T9991] /syz8: [ 130.944324][ T9991] cache 0 [ 130.951155][ T28] audit: type=1400 audit(1781536257.428:4932): avc: denied { read write } for pid=3303 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 130.957943][ T9991] rss 4096 [ 130.988842][ T9991] shmem 0 [ 130.994036][ T9991] mapped_file 0 [ 131.004028][ T28] audit: type=1400 audit(1781536257.508:4933): avc: denied { open } for pid=10030 comm="syz.2.2451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 131.005692][ T9991] dirty 0 [ 131.051918][ T9991] writeback 0 [ 131.063238][ T9991] workingset_refault_anon 243 [ 131.064450][ T28] audit: type=1400 audit(1781536257.518:4934): avc: denied { execmem } for pid=10030 comm="syz.2.2451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 131.080688][ T9991] workingset_refault_file 0 [ 131.097382][ T28] audit: type=1400 audit(1781536257.528:4935): avc: denied { read write } for pid=3303 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 131.121629][ T28] audit: type=1400 audit(1781536257.578:4936): avc: denied { read write } for pid=3303 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 131.145873][ T9991] swap 180224 [ 131.149174][ T9991] swapcached 1363968 [ 131.158010][T10037] 8021q: VLANs not supported on lo [ 131.165243][T10037] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2455'. [ 131.182782][ T9991] pgpgin 65256 [ 131.187219][ T9991] pgpgout 65253 [ 131.190699][ T9991] pgfault 83225 [ 131.197257][ T9991] pgmajfault 134 [ 131.209263][ T9991] inactive_anon 8192 [ 131.213232][ T9991] active_anon 4096 [ 131.218670][ T9991] inactive_file 0 [ 131.225605][ T9991] active_file 0 [ 131.234499][ T9991] unevictable 0 [ 131.255639][ T9991] hierarchical_memory_limit 314572800 [ 131.263886][ T9991] hierarchical_memsw_limit 9223372036854771712 [ 131.280105][ T9991] total_cache 0 [ 131.283773][ T9991] total_rss 4096 [ 131.287463][ T9991] total_shmem 0 [ 131.291276][ T9991] total_mapped_file 0 [ 131.295316][ T9991] total_dirty 0 [ 131.298806][ T9991] total_writeback 0 [ 131.304203][ T9991] total_workingset_refault_anon 243 [ 131.309911][ T9991] total_workingset_refault_file 0 [ 131.315410][ T9991] total_swap 180224 [ 131.319840][ T9991] total_swapcached 1363968 [ 131.324421][ T9991] total_pgpgin 65256 [ 131.328427][ T9991] total_pgpgout 65253 [ 131.332976][ T9991] total_pgfault 83225 [ 131.337107][ T9991] total_pgmajfault 134 [ 131.341209][ T9991] total_inactive_anon 8192 [ 131.345641][ T9991] total_active_anon 4096 [ 131.349892][ T9991] total_inactive_file 0 [ 131.354120][ T9991] total_active_file 0 [ 131.358157][ T9991] total_unevictable 0 [ 131.364362][ T9991] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.2446,pid=9991,uid=0 [ 131.382600][ T9991] Memory cgroup out of memory: Killed process 9991 (syz.8.2446) total-vm:96212kB, anon-rss:1232kB, file-rss:22236kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 131.540395][T10073] 8021q: VLANs not supported on lo [ 131.546094][T10073] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2472'. [ 132.778082][T10093] syz.6.2479 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 132.795244][T10093] CPU: 1 UID: 0 PID: 10093 Comm: syz.6.2479 Not tainted syzkaller #0 PREEMPT(lazy) [ 132.795300][T10093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 132.795311][T10093] Call Trace: [ 132.795318][T10093] [ 132.795338][T10093] __dump_stack+0x1d/0x30 [ 132.795369][T10093] dump_stack_lvl+0x95/0xd0 [ 132.795388][T10093] dump_stack+0x15/0x1b [ 132.795408][T10093] dump_header+0x80/0x240 [ 132.795482][T10093] oom_kill_process+0x295/0x350 [ 132.795577][T10093] out_of_memory+0x981/0xbc0 [ 132.795608][T10093] try_charge_memcg+0x621/0xa00 [ 132.795706][T10093] __memcg_kmem_charge_page+0x199/0x3a0 [ 132.795795][T10093] __alloc_frozen_pages_noprof+0x18a/0x350 [ 132.795840][T10093] alloc_pages_mpol+0xa9/0x1d0 [ 132.795925][T10093] alloc_pages_noprof+0x8f/0x140 [ 132.795949][T10093] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 132.795978][T10093] __kvmalloc_node_noprof+0x3d4/0x640 [ 132.796064][T10093] ? futex_hash_allocate+0x192/0x920 [ 132.796083][T10093] ? hrtimer_start_range_ns+0x108/0x120 [ 132.796111][T10093] ? futex_hash_allocate+0x192/0x920 [ 132.796154][T10093] futex_hash_allocate+0x192/0x920 [ 132.796172][T10093] ? cap_task_prctl+0x13f/0x6b0 [ 132.796204][T10093] futex_hash_prctl+0xd8/0xf0 [ 132.796225][T10093] __se_sys_prctl+0x4f4/0x13c0 [ 132.796252][T10093] __x64_sys_prctl+0x67/0x80 [ 132.796312][T10093] x64_sys_call+0x2533/0x3020 [ 132.796337][T10093] do_syscall_64+0x136/0x3c0 [ 132.796373][T10093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.796412][T10093] RIP: 0033:0x7f20ebe5ce59 [ 132.796430][T10093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.796510][T10093] RSP: 002b:00007f20ea8b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 132.796528][T10093] RAX: ffffffffffffffda RBX: 00007f20ec0d5fa0 RCX: 00007f20ebe5ce59 [ 132.796540][T10093] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 132.796580][T10093] RBP: 00007f20ebef2d6f R08: 0000000000000000 R09: 0000000000000000 [ 132.796591][T10093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.796602][T10093] R13: 00007f20ec0d6038 R14: 00007f20ec0d5fa0 R15: 00007ffdc67fe3c8 [ 132.796624][T10093] [ 132.796682][T10093] memory: usage 307200kB, limit 307200kB, failcnt 1368 [ 133.024543][T10093] memory+swap: usage 307560kB, limit 9007199254740988kB, failcnt 0 [ 133.032603][T10093] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 133.039929][T10093] Memory cgroup stats for /syz6: [ 133.040239][T10093] cache 0 [ 133.048144][T10093] rss 0 [ 133.050969][T10093] shmem 0 [ 133.053895][T10093] mapped_file 0 [ 133.057326][T10093] dirty 0 [ 133.060302][T10093] writeback 0 [ 133.063622][T10093] workingset_refault_anon 261 [ 133.068332][T10093] workingset_refault_file 0 [ 133.072858][T10093] swap 368640 [ 133.076131][T10093] swapcached 1515520 [ 133.080021][T10093] pgpgin 77428 [ 133.083433][T10093] pgpgout 77428 [ 133.086938][T10093] pgfault 79438 [ 133.090408][T10093] pgmajfault 143 [ 133.094120][T10093] inactive_anon 0 [ 133.097787][T10093] active_anon 0 [ 133.101271][T10093] inactive_file 0 [ 133.104898][T10093] active_file 0 [ 133.108351][T10093] unevictable 0 [ 133.111833][T10093] hierarchical_memory_limit 314572800 [ 133.117192][T10093] hierarchical_memsw_limit 9223372036854771712 [ 133.123356][T10093] total_cache 0 [ 133.126854][T10093] total_rss 0 [ 133.130114][T10093] total_shmem 0 [ 133.133602][T10093] total_mapped_file 0 [ 133.137623][T10093] total_dirty 0 [ 133.141325][T10093] total_writeback 0 [ 133.145128][T10093] total_workingset_refault_anon 261 [ 133.150297][T10093] total_workingset_refault_file 0 [ 133.155341][T10093] total_swap 368640 [ 133.159177][T10093] total_swapcached 1515520 [ 133.163627][T10093] total_pgpgin 77428 [ 133.167535][T10093] total_pgpgout 77428 [ 133.171660][T10093] total_pgfault 79438 [ 133.175702][T10093] total_pgmajfault 143 [ 133.179814][T10093] total_inactive_anon 0 [ 133.183974][T10093] total_active_anon 0 [ 133.187948][T10093] total_inactive_file 0 [ 133.192134][T10093] total_active_file 0 [ 133.196143][T10093] total_unevictable 0 [ 133.200134][T10093] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.2479,pid=10092,uid=0 [ 133.214881][T10093] Memory cgroup out of memory: Killed process 10092 (syz.6.2479) total-vm:96212kB, anon-rss:1232kB, file-rss:22236kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 135.493281][T10159] ================================================================== [ 135.501399][T10159] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 135.510004][T10159] [ 135.512314][T10159] write to 0xffff888105bb2be0 of 8 bytes by task 10147 on cpu 1: [ 135.520021][T10159] shmem_file_splice_read+0x401/0x590 [ 135.525398][T10159] splice_direct_to_actor+0x261/0x680 [ 135.530765][T10159] do_splice_direct+0x119/0x1a0 [ 135.535603][T10159] do_sendfile+0x37d/0x640 [ 135.540009][T10159] __x64_sys_sendfile64+0x105/0x150 [ 135.545195][T10159] x64_sys_call+0x2dc4/0x3020 [ 135.549862][T10159] do_syscall_64+0x136/0x3c0 [ 135.554450][T10159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.560334][T10159] [ 135.562646][T10159] write to 0xffff888105bb2be0 of 8 bytes by task 10159 on cpu 0: [ 135.570346][T10159] shmem_file_splice_read+0x401/0x590 [ 135.575708][T10159] splice_direct_to_actor+0x261/0x680 [ 135.581067][T10159] do_splice_direct+0x119/0x1a0 [ 135.585905][T10159] do_sendfile+0x37d/0x640 [ 135.590308][T10159] __x64_sys_sendfile64+0x105/0x150 [ 135.595493][T10159] x64_sys_call+0x2dc4/0x3020 [ 135.600160][T10159] do_syscall_64+0x136/0x3c0 [ 135.604742][T10159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.610622][T10159] [ 135.612927][T10159] value changed: 0x000000000000aceb -> 0x000000000000acf3 [ 135.620017][T10159] [ 135.622323][T10159] Reported by Kernel Concurrency Sanitizer on: [ 135.628457][T10159] CPU: 0 UID: 0 PID: 10159 Comm: syz.8.2501 Not tainted syzkaller #0 PREEMPT(lazy) [ 135.637818][T10159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 135.647880][T10159] ================================================================== [ 135.690176][T10164] syz.2.2504 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 135.712379][T10164] CPU: 0 UID: 0 PID: 10164 Comm: syz.2.2504 Not tainted syzkaller #0 PREEMPT(lazy) [ 135.712414][T10164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 135.712426][T10164] Call Trace: [ 135.712460][T10164] [ 135.712468][T10164] __dump_stack+0x1d/0x30 [ 135.712531][T10164] dump_stack_lvl+0x95/0xd0 [ 135.712550][T10164] dump_stack+0x15/0x1b [ 135.712568][T10164] dump_header+0x80/0x240 [ 135.712588][T10164] oom_kill_process+0x295/0x350 [ 135.712661][T10164] out_of_memory+0x981/0xbc0 [ 135.712690][T10164] try_charge_memcg+0x621/0xa00 [ 135.712785][T10164] ? submit_bio_noacct_nocheck+0x54f/0x620 [ 135.712814][T10164] charge_memcg+0x6d/0x120 [ 135.712920][T10164] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 135.712948][T10164] __swap_cache_prepare_and_add+0x69/0x490 [ 135.712975][T10164] ? alloc_pages_mpol+0xd9/0x1d0 [ 135.713079][T10164] swap_cache_alloc_folio+0xa2/0x120 [ 135.713103][T10164] swap_cluster_readahead+0x25f/0x3c0 [ 135.713131][T10164] swapin_readahead+0xde/0x840 [ 135.713200][T10164] ? _raw_spin_unlock+0x9/0x30 [ 135.713219][T10164] ? swap_put_entries_cluster+0x44a/0x470 [ 135.713321][T10164] ? __rcu_read_unlock+0x4e/0x70 [ 135.713418][T10164] ? swap_cache_get_folio+0x1e0/0x1f0 [ 135.713442][T10164] do_swap_page+0x34d/0x2150 [ 135.713523][T10164] ? __css_rstat_updated+0xbb/0x280 [ 135.713548][T10164] ? __rcu_read_lock+0x36/0x50 [ 135.713623][T10164] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 135.713647][T10164] handle_mm_fault+0xb3c/0x2da0 [ 135.713681][T10164] do_user_addr_fault+0x634/0x1060 [ 135.713713][T10164] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 135.713738][T10164] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 135.713764][T10164] ? trace_page_fault_user+0x1f/0xa0 [ 135.713806][T10164] exc_page_fault+0x62/0xa0 [ 135.713878][T10164] asm_exc_page_fault+0x26/0x30 [ 135.713976][T10164] RIP: 0033:0x7f5c9f83a80c [ 135.713994][T10164] Code: 8a 31 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 81 c3 f0 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 135.714012][T10164] RSP: 002b:00007ffcd67ecda0 EFLAGS: 00010202 [ 135.714030][T10164] RAX: 0000000000000000 RBX: 00007f5c9fbe5fa0 RCX: 0000555593c2d808 [ 135.714045][T10164] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 135.714069][T10164] RBP: 00007f5c9fbe7da0 R08: 0000000000000000 R09: 0000000000000000 [ 135.714084][T10164] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000211bd [ 135.714098][T10164] R13: 00007f5c9fbe609c R14: 0000000000020ee9 R15: 00007f5c9fbe6090 [ 135.714191][T10164] [ 135.714214][T10164] memory: usage 307200kB, limit 307200kB, failcnt 1208 [ 135.819641][ T28] kauditd_printk_skb: 108 callbacks suppressed [ 135.819736][ T28] audit: type=1400 audit(1781536262.348:5045): avc: denied { read write } for pid=5329 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 135.833474][T10164] memory+swap: usage 307896kB, limit 9007199254740988kB, failcnt 0 [ 136.010032][T10164] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 136.017539][T10164] Memory cgroup stats for /syz2: [ 136.017756][T10164] cache 0 [ 136.025747][T10164] rss 0 [ 136.028489][T10164] shmem 0 [ 136.031470][T10164] mapped_file 0 [ 136.035033][T10164] dirty 0 [ 136.037950][T10164] writeback 0 [ 136.041288][T10164] workingset_refault_anon 210 [ 136.045973][T10164] workingset_refault_file 2215 [ 136.050708][T10164] swap 712704 [ 136.053992][T10164] swapcached 1781760 [ 136.057871][T10164] pgpgin 80019 [ 136.061259][T10164] pgpgout 80016 [ 136.064700][T10164] pgfault 103773 [ 136.068247][T10164] pgmajfault 148 [ 136.071789][T10164] inactive_anon 12288 [ 136.075852][T10164] active_anon 0 [ 136.079286][T10164] inactive_file 0 [ 136.082918][T10164] active_file 0 [ 136.086400][T10164] unevictable 0 [ 136.089833][T10164] hierarchical_memory_limit 314572800 [ 136.095289][T10164] hierarchical_memsw_limit 9223372036854771712 [ 136.101447][T10164] total_cache 0 [ 136.104882][T10164] total_rss 0 [ 136.108139][T10164] total_shmem 0 [ 136.111608][T10164] total_mapped_file 0 [ 136.115652][T10164] total_dirty 0 [ 136.119092][T10164] total_writeback 0 [ 136.122990][T10164] total_workingset_refault_anon 210 [ 136.128247][T10164] total_workingset_refault_file 2215 [ 136.133579][T10164] total_swap 712704 [ 136.137407][T10164] total_swapcached 1781760 [ 136.141831][T10164] total_pgpgin 80163 [ 136.145712][T10164] total_pgpgout 80160 [ 136.149670][T10164] total_pgfault 103914 [ 136.153814][T10164] total_pgmajfault 148 [ 136.157911][T10164] total_inactive_anon 12288 [ 136.162466][T10164] total_active_anon 0 [ 136.166439][T10164] total_inactive_file 0 [ 136.170567][T10164] total_active_file 0 [ 136.174544][T10164] total_unevictable 0 [ 136.178563][T10164] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2504,pid=10164,uid=0 [ 136.193222][T10164] Memory cgroup out of memory: Killed process 10164 (syz.2.2504) total-vm:96212kB, anon-rss:1228kB, file-rss:22232kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 136.237759][ T28] audit: type=1400 audit(1781536262.768:5046): avc: denied { read write } for pid=3303 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0