last executing test programs: 1m35.225733482s ago: executing program 4 (id=78): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) sendto$inet6(r0, &(0x7f0000000100)="10", 0x1, 0x8000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000340)=0x20000000, 0x4) poll(&(0x7f0000000300)=[{r0, 0x802c}], 0x1, 0x0) 1m35.119006699s ago: executing program 4 (id=80): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv4_newrule={0x34, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x7ff}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0xfffffffb}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8}]}, 0x34}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff0500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x31}, 0x20000888) 1m34.545988995s ago: executing program 4 (id=93): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a50000000060a010400000000000000000a0000010900010073797a310000000024000480200001800700010063740000140002800800014000000001080002400000000a0900020073797a320000000014000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa95aa86dd608a37f200142c00fe8000000000000000000000000000bbff0f"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m34.390435592s ago: executing program 4 (id=96): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="63727566742c636865636b3d72656c617865642c6e6f6a6f6c6965742c73686f776173736f632c757466382c6d61703d6e6f726d616c2c00a2f32d3f1db6b4adb7fa833988cd46b6391b3210f3a77418bba32206258337f1855e6e3a758d78f14b2bff5e8c222745b69e3fa7c243b3d51e93605cff7bd9dd93ab99cf4f8924925778c91b07b2f6bd5e8adcfb254286cf1b630d3a9bd5eaeaaca40991431eb332c701ec01f19ce0d0cb9e38791c784865665721e2ef3a9110a4b9b8c9d418c94a02a7994346f07a194eb5f4fe5b1305ac904f6fb6ebced200dd3951c4687a2a447af70179b8d0168ca56895f93138b0969ff568133ff347197db81ea9fad6744a4e2fd35768d1c6a1b235f4a4bb09011da445a1b794"], 0x1, 0x54d, &(0x7f0000000580)="$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") 1m34.272503146s ago: executing program 4 (id=97): syz_mount_image$msdos(&(0x7f00000006c0), &(0x7f0000000280)='./file0\x00', 0xc0, &(0x7f0000000080)=ANY=[@ANYBLOB="646f74732c6e66732c71756965742c6e6f646f74732c636865636b3d7374726963742c6e66733d7374616c655f72772c646f74732c6572726f72733d636f6e74696e7565008000000000000074732c00"], 0x1, 0x246, &(0x7f00000002c0)="$eJzs3TFu01AcBvB/2rQNZaAzYrDEwlQBN7BQkBCWkII8wISlwtIiJHcxTDkGZ+BIHKNTNyNqixS3MFRu3ca/nxT5Uz45eW/Jy/Be8uHR58ODL8ef6p/fYzZLYhqxjNOIvdiIzWhM2uvGWd6O85YBANw1i0WRDj0GejS5+FRZpsVWROxcaPIfNzMoAAAAAAAAAAAA+mb/PwCMj/3/668s02K3/f72N/v/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgOGc1vWD+j+PoccHAPTP+g8A42P9B4Dxsf4DwPi8fff+dZpl80WSzCJOllVe5c216V++yuZPkzN7q7tOqirfanM2f9b0Sbffbe9/fmm/HU8eN/3v7sWbrNPvxMF1Tx4AAAAAAAAAAAAAAAAAAABuif3kj875/s2m3/9X36Rzvw/QOb8/jYfTG5sGAAAAAAAAAAAAAAAAAAAA3GnHX78dFkdHH0thpOH+JdW9uMILzuI2TEfoKQz9yQQAAAAAAAAAAAAAAAAAAOOzOvQ79EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDir//+/vtB9z0lMhpksAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsNZ+BQAA///TbZE4") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0x46ee, 0x400, 0xffffdffe, 0x32e}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x22, &(0x7f00000000c0)=@un=@file={0x1, './file0\x00'}, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x3516, 0x67f, 0x64, 0x0, 0x0) setxattr$security_evm(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x2) 1m33.984870335s ago: executing program 4 (id=102): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x1, @private1, 0x5}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth0_macvtap\x00', 0x10) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) 1m33.971441281s ago: executing program 32 (id=102): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x1, @private1, 0x5}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth0_macvtap\x00', 0x10) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) 2.479819895s ago: executing program 3 (id=1573): unshare(0x22020600) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000400), 0x103040, 0x0) eventfd2(0x0, 0x80000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x706, 0x4) sendto$inet(r0, 0x0, 0x0, 0x4000004, &(0x7f0000001100)={0x2, 0x4e23, @empty}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x434, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0xf}, {0xa, 0x7}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3, 0xfffffff8, 0x4, 0x40, 0x2, 0x2, 0x5, 0x7fff, 0x4, 0x1, 0x6, 0x1c8, 0x7, 0x0, 0x5, 0x0, 0x8, 0x9, 0x9, 0x9, 0xf5, 0x200, 0x6, 0x5, 0x6, 0xfff, 0x9, 0x1, 0x80, 0x10000, 0x5, 0x6, 0xff, 0x4, 0x6, 0x9, 0xe6c1, 0x2, 0x64, 0x6, 0x5, 0x71, 0x1f146d7e, 0x80000001, 0x89, 0xe9, 0x80000001, 0x2, 0xff, 0x8, 0xffff8dc2, 0x400, 0x0, 0x3, 0xffff, 0x10001, 0x3ff, 0x0, 0x8, 0xa000000, 0x0, 0x5, 0x8, 0x3, 0x4, 0x401, 0x5, 0x8, 0x4ad1, 0x1, 0x25ae, 0x1, 0xfff, 0x6, 0xe, 0xffffffff, 0x7, 0x5, 0x401, 0xfff, 0x8, 0xf, 0x0, 0x4, 0x626cfd3b, 0x0, 0x60df8662, 0x2, 0x5, 0x4, 0xc6, 0x8, 0x7, 0xfffffffa, 0x9, 0x4, 0x1, 0x3, 0x0, 0x7, 0x2, 0xffff8000, 0xe13, 0x8, 0x7, 0xc, 0xfdc5, 0x7ff, 0x4, 0xfffffff0, 0x1, 0x7fff, 0x40, 0x1, 0x1f1f, 0x3, 0x665195e5, 0x5, 0x7, 0x5, 0x8, 0x7, 0x4, 0x0, 0x101, 0x400, 0x2, 0x6, 0xd, 0x9, 0x7, 0xc5, 0x99, 0x0, 0x2e9, 0x4, 0x2, 0x401, 0xfffffffe, 0xfffffffe, 0x80000000, 0x8, 0x8000, 0x6, 0x37, 0x4, 0x9, 0x2, 0x2, 0x3, 0x6, 0x1, 0x690c, 0x368d, 0x9, 0x2, 0xe, 0x8, 0x8, 0x5597, 0x3, 0x4, 0x7fff, 0x62, 0xfffeffff, 0x5, 0x0, 0x7fffffff, 0x9, 0x9, 0x2, 0x100, 0x6, 0x101, 0x5, 0x4, 0x3, 0x4, 0xfc8d, 0x8, 0x3ff, 0x3, 0xaeb3, 0x3, 0x5, 0x9, 0xfc, 0x8000, 0x1, 0x7, 0x20000, 0x4, 0x2, 0x9f85, 0x65, 0x85, 0x0, 0x2, 0x4, 0x3, 0x7, 0xd92, 0x40, 0xfff, 0xe1, 0x8, 0x10001, 0x5, 0x9, 0x7, 0x1000, 0x1d, 0x36ae765e, 0x7, 0x9, 0x200000, 0x3, 0x4, 0x5, 0x0, 0x89, 0x5, 0x80000000, 0x9c4, 0x1, 0x41632842, 0x6, 0x10, 0x2, 0x8001, 0x5, 0x100, 0x8, 0x9, 0xfe64, 0xd, 0x1c2, 0x2, 0x6, 0x2, 0x80000001, 0xd, 0x6, 0xfffffffc, 0x5, 0x3, 0x7f, 0x8001, 0x5, 0x3, 0x6, 0x8001, 0x10001, 0x5, 0xb, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2.424531773s ago: executing program 3 (id=1576): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah', 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) sendto$inet(r0, &(0x7f0000000180)="8995b3", 0x3, 0x4c041, 0x0, 0x0) 2.323482391s ago: executing program 3 (id=1578): setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) 2.237417912s ago: executing program 3 (id=1581): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x4e}, 0x0, 0x40000000}) r0 = syz_io_uring_setup(0x64d, &(0x7f00000006c0)={0x0, 0x11f8, 0x8, 0x0, 0x3b7}, &(0x7f0000000500)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000780)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r0}) io_uring_enter(r0, 0xd12, 0xd9bd, 0x9, 0x0, 0x0) 1.653267736s ago: executing program 3 (id=1588): socket$key(0xf, 0x3, 0x2) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0}, 0x94) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 1.646940395s ago: executing program 5 (id=1589): openat$dir(0xffffffffffffff9c, 0x0, 0x8880, 0x85) r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000001, 0x200000005c832, 0xffffffffffffffff, 0x0) keyctl$search(0xa, 0x0, &(0x7f0000000040)='blacklist\x00', 0x0, 0x0) 1.594212483s ago: executing program 5 (id=1590): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0}, 0x800, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xf7f8000000000001, 0xffffffffffffffff, 0xa) r0 = io_uring_setup(0x66a5, &(0x7f0000000100)={0x0, 0xbfb6, 0x1, 0xffffffbc, 0x333}) r1 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000)=r1, 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) socket$inet6_sctp(0xa, 0x4, 0x84) read$eventfd(r1, &(0x7f0000000040), 0x8) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20) 1.292523569s ago: executing program 5 (id=1593): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 1.257117121s ago: executing program 2 (id=1594): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 1.2087163s ago: executing program 2 (id=1595): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x4}}]}, 0x38}}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x200c40dc}, 0x20888) 1.145859637s ago: executing program 2 (id=1596): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x5) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b685b431c70ea948259c4c869b4fc8db714e4b94bdae214fa68a051d4dca7d2647bec1fc89398d2b9000f224891060017c4700de60beac671e8e8f00cb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c59005cff414ed55b0d18a9d446935fb332bb593ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4ac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a0000000000002248950b000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYRES8=r2], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, &(0x7f00000047c0), &(0x7f0000000040)=@udp=r1}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 1.099996677s ago: executing program 2 (id=1598): socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x10, 0xa0002f5}) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x3}]) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xffffffffffffffe0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.007787388s ago: executing program 2 (id=1599): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000600)='hybla', 0x5) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0x0, 0xc9100100, 0x0, 0x0) 582.293156ms ago: executing program 0 (id=1608): socket$kcm(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000042c0)="86", 0x1}, {&(0x7f00000002c0)="794ab6f05259d1b3bd29a47757ca01b92304ad7ac7dece9d204c4b1eea2feb32c12013dc3fdf2ae40958dc", 0x2b}, {&(0x7f0000000340)="d94469a91874fde3d54cf0261ed019a1743de9ea6aeb3a48c84fe243355bc50d49c475f6d7a83e162ee4ce52ba34872f5e0b62e54f0a669d25e869930f3f5858fc7ac5b45884996460645187518e98e83d588712c97a64a4806cdc8053118fbd297dd87bfb7675df60e9c6bb3ad691f5e2448ab0f83f31ebcbffcefdc4a23f8d01de480e6fccdb9923918a967f67c55799ecf0f6aaccbbeba00809f8977a0a5b", 0xa0}], 0x3}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f00000000c0), 0x4) close(r1) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) close(0x4) 565.544602ms ago: executing program 0 (id=1609): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@fallback=r1, 0x2, 0x0, 0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0]}, 0x40) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r1, r2, 0x1, 0x0, @void}, 0x10) close(r2) close(r3) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) 544.541807ms ago: executing program 0 (id=1610): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000002380)=""/4107, 0x0) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x6, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c00000009060108fffffc0000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 519.324772ms ago: executing program 1 (id=1611): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c000}, 0x20008800) 491.859756ms ago: executing program 1 (id=1612): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x2, {{0x42, 0x2}}}, 0x10) sendmsg$tipc(r0, &(0x7f00000000c0)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x2, {{0x42, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2004c0d0}, 0x4000044) 463.38888ms ago: executing program 1 (id=1613): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8010, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0x101}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) readv(r0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/133, 0x85}], 0x1) 358.649178ms ago: executing program 5 (id=1614): unshare(0x22020600) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x58, &(0x7f00000002c0)}, 0x10) 358.164097ms ago: executing program 3 (id=1615): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000100)=0x200, 0x4) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000640)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$inet(r2, &(0x7f0000002700)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="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", 0x242}], 0x1}}], 0x1, 0x4000001) syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r2) 334.978672ms ago: executing program 0 (id=1616): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xaf2, 0x0) shutdown(r0, 0x0) 285.470772ms ago: executing program 5 (id=1617): r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x359}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 285.293592ms ago: executing program 0 (id=1618): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000600)={r0}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r2}) 212.221726ms ago: executing program 5 (id=1619): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xb, 0x7}, 0x8591, 0xa88, 0x4, 0x5, 0x0, 0x40, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfefffffffffff, 0xffffffffffffffff, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r2, 0x0, 0x88000cc, 0x0) write$eventfd(r1, &(0x7f0000000240), 0xffffff14) 211.635596ms ago: executing program 0 (id=1629): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x200000000000000, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@loopback, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x800, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 145.192171ms ago: executing program 2 (id=1620): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x0, {0x0, 0x1, 0x4}, 0x2}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="00010100004000", 0x7}, {&(0x7f0000000300)="5411", 0x2}], 0x2}, 0x4004) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/17, 0x11}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) 116.990286ms ago: executing program 1 (id=1621): sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f00000028c0)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x422a, &(0x7f0000000600)=0x0) close(0xffffffffffffffff) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1}, 0xc) listen(r2, 0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r0, 0x0}]) 269.74µs ago: executing program 1 (id=1622): setresgid(0xee00, 0xee01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)='1', 0x1}], 0x1, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r2, r3}}}], 0x20, 0x40044}}], 0x1, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) write$binfmt_elf64(r1, &(0x7f0000000500)=ANY=[], 0x78) splice(r0, 0x0, r4, 0x0, 0x39000, 0x0) 0s ago: executing program 1 (id=1623): socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x40000) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x48}}, 0x0) kernel console output (not intermixed with test programs): [ 19.694607][ T28] audit: type=1400 audit(1772455340.434:62): avc: denied { search } for pid=3193 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.716709][ T28] audit: type=1400 audit(1772455340.434:63): avc: denied { search } for pid=3193 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.739722][ T28] audit: type=1400 audit(1772455340.434:64): avc: denied { search } for pid=3193 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.762967][ T28] audit: type=1400 audit(1772455340.434:65): avc: denied { search } for pid=3193 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.786132][ T28] audit: type=1400 audit(1772455340.434:66): avc: denied { read open } for pid=3194 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.187' (ED25519) to the list of known hosts. [ 24.936104][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 24.936120][ T28] audit: type=1400 audit(1772455345.674:70): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.966476][ T28] audit: type=1400 audit(1772455345.704:71): avc: denied { mount } for pid=3297 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.967132][ T3297] cgroup: Unknown subsys name 'net' [ 24.994292][ T28] audit: type=1400 audit(1772455345.734:72): avc: denied { unmount } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.092862][ T3297] cgroup: Unknown subsys name 'cpuset' [ 25.099204][ T3297] cgroup: Unknown subsys name 'rlimit' [ 25.229686][ T28] audit: type=1400 audit(1772455345.964:73): avc: denied { setattr } for pid=3297 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.257817][ T28] audit: type=1400 audit(1772455345.964:74): avc: denied { create } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.278312][ T28] audit: type=1400 audit(1772455345.964:75): avc: denied { write } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.299031][ T28] audit: type=1400 audit(1772455345.964:76): avc: denied { read } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.319380][ T28] audit: type=1400 audit(1772455345.964:77): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.327347][ T3302] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.344285][ T28] audit: type=1400 audit(1772455345.964:78): avc: denied { mount } for pid=3297 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.376191][ T28] audit: type=1400 audit(1772455345.964:79): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 25.410213][ T3297] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.451042][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 26.511618][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.519004][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.526307][ T3318] bridge_slave_0: entered allmulticast mode [ 26.532780][ T3318] bridge_slave_0: entered promiscuous mode [ 26.541529][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.548737][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.555890][ T3318] bridge_slave_1: entered allmulticast mode [ 26.562403][ T3318] bridge_slave_1: entered promiscuous mode [ 26.594271][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.606562][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.648411][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 26.662477][ T3318] team0: Port device team_slave_0 added [ 26.682416][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 26.694468][ T3318] team0: Port device team_slave_1 added [ 26.742058][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.749278][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.775281][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.786187][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 26.804530][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.811546][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.838073][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.877194][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.884336][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.891505][ T3315] bridge_slave_0: entered allmulticast mode [ 26.898005][ T3315] bridge_slave_0: entered promiscuous mode [ 26.904569][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.911686][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.918913][ T3312] bridge_slave_0: entered allmulticast mode [ 26.925478][ T3312] bridge_slave_0: entered promiscuous mode [ 26.941784][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.948915][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.956256][ T3315] bridge_slave_1: entered allmulticast mode [ 26.962887][ T3315] bridge_slave_1: entered promiscuous mode [ 26.969232][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.976650][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.983900][ T3312] bridge_slave_1: entered allmulticast mode [ 26.990286][ T3312] bridge_slave_1: entered promiscuous mode [ 27.026391][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 27.036452][ T3318] hsr_slave_0: entered promiscuous mode [ 27.042489][ T3318] hsr_slave_1: entered promiscuous mode [ 27.053080][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.060222][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.067542][ T3311] bridge_slave_0: entered allmulticast mode [ 27.073794][ T3311] bridge_slave_0: entered promiscuous mode [ 27.088789][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.097975][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.105156][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.112387][ T3311] bridge_slave_1: entered allmulticast mode [ 27.119437][ T3311] bridge_slave_1: entered promiscuous mode [ 27.126819][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.140741][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.151089][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.191715][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.210510][ T3312] team0: Port device team_slave_0 added [ 27.219630][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.234372][ T3315] team0: Port device team_slave_0 added [ 27.245356][ T3312] team0: Port device team_slave_1 added [ 27.263052][ T3315] team0: Port device team_slave_1 added [ 27.269281][ T3311] team0: Port device team_slave_0 added [ 27.296524][ T3311] team0: Port device team_slave_1 added [ 27.302404][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.309421][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.335625][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.357351][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.364476][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.371727][ T3320] bridge_slave_0: entered allmulticast mode [ 27.378418][ T3320] bridge_slave_0: entered promiscuous mode [ 27.385193][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.392218][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.418412][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.434855][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.441824][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.468195][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.483582][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.490643][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.497953][ T3320] bridge_slave_1: entered allmulticast mode [ 27.504579][ T3320] bridge_slave_1: entered promiscuous mode [ 27.524411][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.531435][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.557607][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.572186][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.579215][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.605159][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.621934][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.638578][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.645588][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.671815][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.687585][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.725701][ T3315] hsr_slave_0: entered promiscuous mode [ 27.731675][ T3315] hsr_slave_1: entered promiscuous mode [ 27.737595][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 27.743355][ T3315] Cannot create hsr debugfs directory [ 27.758827][ T3312] hsr_slave_0: entered promiscuous mode [ 27.765221][ T3312] hsr_slave_1: entered promiscuous mode [ 27.771035][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 27.776832][ T3312] Cannot create hsr debugfs directory [ 27.783154][ T3320] team0: Port device team_slave_0 added [ 27.800608][ T3311] hsr_slave_0: entered promiscuous mode [ 27.806728][ T3311] hsr_slave_1: entered promiscuous mode [ 27.812761][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 27.818577][ T3311] Cannot create hsr debugfs directory [ 27.829534][ T3320] team0: Port device team_slave_1 added [ 27.883354][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.890467][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.916889][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.930323][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.937494][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.963695][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.010153][ T3318] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.031864][ T3320] hsr_slave_0: entered promiscuous mode [ 28.037893][ T3320] hsr_slave_1: entered promiscuous mode [ 28.043822][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 28.049565][ T3320] Cannot create hsr debugfs directory [ 28.055042][ T3318] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.066099][ T3318] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.097198][ T3318] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.183766][ T3312] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.196788][ T3312] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.208103][ T3312] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.219237][ T3312] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.246843][ T3315] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.262967][ T3315] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.271860][ T3315] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.284879][ T3315] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.301004][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.319560][ T3311] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.335899][ T3311] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.350790][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.362760][ T3311] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.376959][ T3311] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.393860][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.400919][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.422838][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.429898][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.447717][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.455022][ T3320] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.464811][ T3320] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.484675][ T3320] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.499387][ T3320] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.514671][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.534298][ T408] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.541532][ T408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.563658][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.590094][ T408] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.597178][ T408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.617263][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.638024][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.645168][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.657649][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.669124][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.676410][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.700504][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.736305][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.760007][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.768109][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.785348][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.795981][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.803248][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.816431][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.823713][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.837248][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.852914][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.860078][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.869217][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.876588][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.907870][ T3318] veth0_vlan: entered promiscuous mode [ 28.935375][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.953361][ T3318] veth1_vlan: entered promiscuous mode [ 29.000332][ T3318] veth0_macvtap: entered promiscuous mode [ 29.026246][ T3318] veth1_macvtap: entered promiscuous mode [ 29.059189][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.075920][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.101766][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.118924][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.154918][ T408] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.178922][ T408] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.198199][ T408] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.207632][ T408] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.218168][ T3315] veth0_vlan: entered promiscuous mode [ 29.235962][ T3312] veth0_vlan: entered promiscuous mode [ 29.260232][ T3320] veth0_vlan: entered promiscuous mode [ 29.269310][ T3315] veth1_vlan: entered promiscuous mode [ 29.277833][ T3318] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.286545][ T3312] veth1_vlan: entered promiscuous mode [ 29.301594][ T3320] veth1_vlan: entered promiscuous mode [ 29.333981][ T3312] veth0_macvtap: entered promiscuous mode [ 29.350910][ T3312] veth1_macvtap: entered promiscuous mode [ 29.369821][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.401140][ T3320] veth0_macvtap: entered promiscuous mode [ 29.420333][ T3320] veth1_macvtap: entered promiscuous mode [ 29.437805][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.460947][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.469062][ T3315] veth0_macvtap: entered promiscuous mode [ 29.476822][ T3315] veth1_macvtap: entered promiscuous mode [ 29.486161][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.509519][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.523272][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.537762][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.553110][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.573780][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.582006][ T3311] veth0_vlan: entered promiscuous mode [ 29.591912][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.602775][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.621901][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.643519][ T3311] veth1_vlan: entered promiscuous mode [ 29.653683][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.664383][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.692620][ T3311] veth0_macvtap: entered promiscuous mode [ 29.700501][ T3311] veth1_macvtap: entered promiscuous mode [ 29.711542][ T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.722303][ T50] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.746788][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.757060][ T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.773020][ T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.798034][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.823428][ T50] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.856474][ T3499] process 'syz.0.9' launched './file1' with NULL argv: empty string added [ 29.865116][ T50] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.865230][ T50] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.901648][ T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.956061][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 29.956078][ T28] audit: type=1400 audit(1772455350.694:129): avc: denied { create } for pid=3504 comm="syz.0.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 30.058810][ T28] audit: type=1400 audit(1772455350.714:130): avc: denied { setopt } for pid=3504 comm="syz.0.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 30.082945][ T28] audit: type=1400 audit(1772455350.774:131): avc: denied { create } for pid=3509 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 30.105034][ T28] audit: type=1400 audit(1772455350.784:132): avc: denied { setopt } for pid=3509 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 30.130708][ T28] audit: type=1400 audit(1772455350.784:133): avc: denied { write } for pid=3509 comm="syz.4.5" path="socket:[4752]" dev="sockfs" ino=4752 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 30.160641][ T28] audit: type=1400 audit(1772455350.784:134): avc: denied { read } for pid=3509 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 30.181863][ T28] audit: type=1400 audit(1772455350.864:135): avc: denied { bind } for pid=3514 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 30.208240][ T28] audit: type=1400 audit(1772455350.864:136): avc: denied { name_bind } for pid=3514 comm="syz.0.16" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 30.231873][ T28] audit: type=1400 audit(1772455350.864:137): avc: denied { node_bind } for pid=3514 comm="syz.0.16" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 30.255659][ T28] audit: type=1400 audit(1772455350.864:138): avc: denied { write } for pid=3514 comm="syz.0.16" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 30.314888][ T3515] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.322184][ T3515] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.378848][ T3515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 30.391627][ T3515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 30.423511][ C0] hrtimer: interrupt took 37048 ns [ 30.436950][ T50] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.456477][ T50] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.483959][ T50] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.516810][ T50] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.047439][ T3574] loop1: detected capacity change from 0 to 764 [ 31.057020][ T3574] rock: directory entry would overflow storage [ 31.082197][ T3574] rock: sig=0x4654, size=5, remaining=4 [ 31.102791][ T3571] xt_limit: Overflow, try lower: 65536/2147483648 [ 31.231852][ T3584] netlink: 'syz.2.44': attribute type 4 has an invalid length. [ 31.298227][ T3584] netlink: 'syz.2.44': attribute type 4 has an invalid length. [ 31.436223][ T3609] netlink: 'syz.2.54': attribute type 6 has an invalid length. [ 31.639227][ T3625] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 31.779495][ T3635] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.786973][ T3635] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.889381][ T3635] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 31.911163][ T3635] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 31.980832][ T70] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.000475][ T70] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.079153][ T70] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.094789][ T70] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.334208][ T3661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.74'. [ 32.606602][ T3678] loop3: detected capacity change from 0 to 512 [ 32.631564][ T3678] ======================================================= [ 32.631564][ T3678] WARNING: The mand mount option has been deprecated and [ 32.631564][ T3678] and is ignored by this kernel. Remove the mand [ 32.631564][ T3678] option from the mount to silence this warning. [ 32.631564][ T3678] ======================================================= [ 32.684187][ T3678] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 32.745381][ T3678] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 32.787649][ T3678] EXT4-fs (loop3): 1 truncate cleaned up [ 32.805807][ T3678] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.944037][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.053863][ T3698] xt_hashlimit: size too large, truncated to 1048576 [ 33.344426][ T3715] syzkaller1: entered promiscuous mode [ 33.357255][ T3715] syzkaller1: entered allmulticast mode [ 33.505069][ T3726] loop4: detected capacity change from 0 to 164 [ 33.825090][ T309] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.875968][ T3740] loop1: detected capacity change from 0 to 128 [ 33.932768][ T309] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.944030][ T3740] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 34.019876][ T30] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 34.048382][ T309] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.082322][ T3748] netlink: 'syz.1.105': attribute type 1 has an invalid length. [ 34.113548][ T3748] gretap1: entered allmulticast mode [ 34.145582][ T309] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.419861][ T3741] chnl_net:caif_netlink_parms(): no params data found [ 34.433058][ T309] bridge_slave_1: left allmulticast mode [ 34.439181][ T309] bridge_slave_1: left promiscuous mode [ 34.445935][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.472363][ T309] bridge_slave_0: left allmulticast mode [ 34.478197][ T309] bridge_slave_0: left promiscuous mode [ 34.495373][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.634275][ T309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 34.644829][ T309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 34.655154][ T309] bond0 (unregistering): Released all slaves [ 34.700402][ T309] hsr_slave_0: left promiscuous mode [ 34.714681][ T309] hsr_slave_1: left promiscuous mode [ 34.723779][ T309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 34.731249][ T309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 34.744892][ T309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 34.752515][ T309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 34.767704][ T309] veth1_macvtap: left promiscuous mode [ 34.773490][ T309] veth0_macvtap: left promiscuous mode [ 34.779270][ T309] veth1_vlan: left promiscuous mode [ 34.784837][ T309] veth0_vlan: left promiscuous mode [ 34.875961][ T309] team0 (unregistering): Port device team_slave_1 removed [ 34.886593][ T309] team0 (unregistering): Port device team_slave_0 removed [ 34.954776][ T3741] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.961970][ T3741] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.969157][ T3741] bridge_slave_0: entered allmulticast mode [ 34.976810][ T3741] bridge_slave_0: entered promiscuous mode [ 34.985037][ T3741] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.992263][ T3741] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.999621][ T3741] bridge_slave_1: entered allmulticast mode [ 35.007133][ T3741] bridge_slave_1: entered promiscuous mode [ 35.026241][ T3741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.041552][ T28] kauditd_printk_skb: 86 callbacks suppressed [ 35.041571][ T28] audit: type=1400 audit(1772455355.774:225): avc: denied { listen } for pid=3787 comm="syz.2.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.055581][ T3741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.097856][ T3741] team0: Port device team_slave_0 added [ 35.104831][ T3741] team0: Port device team_slave_1 added [ 35.121003][ T3741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.121231][ T3791] loop2: detected capacity change from 0 to 1024 [ 35.129857][ T3741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.142247][ T28] audit: type=1400 audit(1772455355.814:226): avc: denied { accept } for pid=3787 comm="syz.2.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.160781][ T3741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.190995][ T3791] EXT4-fs: Ignoring removed nobh option [ 35.191804][ T3741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.200840][ T3791] EXT4-fs: Ignoring removed nobh option [ 35.203971][ T3741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.236330][ T3741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.239142][ T3791] EXT4-fs: Ignoring removed bh option [ 35.268915][ T3741] hsr_slave_0: entered promiscuous mode [ 35.275494][ T3741] hsr_slave_1: entered promiscuous mode [ 35.281541][ T3741] debugfs: 'hsr0' already exists in 'hsr' [ 35.288338][ T3741] Cannot create hsr debugfs directory [ 35.294494][ T3791] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 35.338890][ T28] audit: type=1400 audit(1772455356.074:227): avc: denied { bpf } for pid=3790 comm="syz.2.118" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 35.396054][ T28] audit: type=1400 audit(1772455356.074:228): avc: denied { perfmon } for pid=3790 comm="syz.2.118" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 35.429841][ T28] audit: type=1400 audit(1772455356.134:229): avc: denied { module_request } for pid=3741 comm="syz-executor" kmod="rtnl-link-virt_wifi" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 35.570951][ T3741] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 35.591437][ T3741] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 35.612836][ T3729] Bluetooth: hci0: command 0x1003 tx timeout [ 35.618928][ T3575] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 35.638124][ T3741] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 35.660470][ T3741] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 35.696681][ T3741] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.703826][ T3741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.711189][ T3741] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.718328][ T3741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.740138][ T3814] netlink: 'syz.1.121': attribute type 6 has an invalid length. [ 35.749223][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.766087][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.831681][ T3741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.855032][ T3741] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.885544][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.892658][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.909566][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.916761][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.980648][ T3741] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.087736][ T3741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.187590][ T28] audit: type=1400 audit(1772455356.924:230): avc: denied { sqpoll } for pid=3867 comm="syz.0.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 36.338877][ T28] audit: type=1400 audit(1772455357.074:231): avc: denied { read } for pid=3873 comm="syz.2.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 36.406922][ T3741] veth0_vlan: entered promiscuous mode [ 36.435202][ T3741] veth1_vlan: entered promiscuous mode [ 36.466526][ T3741] veth0_macvtap: entered promiscuous mode [ 36.485357][ T3741] veth1_macvtap: entered promiscuous mode [ 36.518935][ T3741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.540681][ T3741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.562126][ T50] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.583693][ T50] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.694408][ T50] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.712148][ T50] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.854681][ T28] audit: type=1400 audit(1772455357.594:232): avc: denied { create } for pid=3903 comm="syz.1.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 36.943939][ T28] audit: type=1400 audit(1772455357.594:233): avc: denied { create } for pid=3903 comm="syz.1.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 36.998706][ T28] audit: type=1400 audit(1772455357.614:234): avc: denied { connect } for pid=3903 comm="syz.1.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 37.033547][ T3912] program syz.5.131 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 37.093348][ T3913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.116050][ T3913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.253521][ T3917] netlink: 'syz.5.134': attribute type 6 has an invalid length. [ 37.282463][ T3917] netlink: 32 bytes leftover after parsing attributes in process `syz.5.134'. [ 37.323301][ T3917] Zero length message leads to an empty skb [ 37.410408][ T3925] syzkaller0: tun_chr_ioctl cmd 1074812118 [ 37.418854][ T3925] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 37.427316][ T3925] syzkaller0: tun_chr_ioctl cmd 1074025681 [ 37.446722][ T3929] netlink: 'syz.2.139': attribute type 5 has an invalid length. [ 39.023495][ T3984] Illegal XDP return value 4294967274 on prog (id 27) dev syz_tun, expect packet loss! [ 39.173711][ T3963] syz.0.151 (3963) used greatest stack depth: 10248 bytes left [ 39.366455][ T4012] loop5: detected capacity change from 0 to 256 [ 39.432824][ T4017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.175'. [ 39.442336][ T4017] netlink: 20 bytes leftover after parsing attributes in process `syz.1.175'. [ 39.584489][ T4037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.180'. [ 39.798815][ T4050] capability: warning: `syz.3.189' uses deprecated v2 capabilities in a way that may be insecure [ 40.139661][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 40.139739][ T28] audit: type=1400 audit(1772455360.874:260): avc: denied { listen } for pid=4057 comm="syz.0.192" laddr=::ffff:0.0.0.0 lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 40.382058][ T28] audit: type=1400 audit(1772455361.114:261): avc: denied { mount } for pid=4060 comm="syz.5.193" name="/" dev="ramfs" ino=7000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 40.439492][ T28] audit: type=1400 audit(1772455361.174:262): avc: denied { watch } for pid=4065 comm="syz.5.195" path="/19/file0" dev="tmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 40.524888][ T4074] netlink: 400 bytes leftover after parsing attributes in process `syz.5.199'. [ 40.562005][ T28] audit: type=1400 audit(1772455361.294:263): avc: denied { block_suspend } for pid=4077 comm="syz.5.201" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 40.617185][ T28] audit: type=1400 audit(1772455361.354:264): avc: denied { create } for pid=4079 comm="syz.1.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 40.637427][ T28] audit: type=1400 audit(1772455361.354:265): avc: denied { setopt } for pid=4079 comm="syz.1.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 40.658362][ T28] audit: type=1400 audit(1772455361.354:266): avc: denied { ioctl } for pid=4079 comm="syz.1.202" path="socket:[6141]" dev="sockfs" ino=6141 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 40.705041][ T28] audit: type=1400 audit(1772455361.354:267): avc: denied { bind } for pid=4079 comm="syz.1.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 40.762725][ T4086] loop5: detected capacity change from 0 to 128 [ 40.784946][ T4086] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 40.798263][ T4086] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 40.810383][ T28] audit: type=1400 audit(1772455361.544:268): avc: denied { mounton } for pid=4087 comm="syz.3.204" path="/proc/61/task" dev="proc" ino=7037 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 40.862750][ T3741] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 40.886620][ T4096] loop5: detected capacity change from 0 to 512 [ 40.925128][ T4096] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.941474][ T4096] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 40.955577][ T28] audit: type=1400 audit(1772455361.694:269): avc: denied { append } for pid=4095 comm="syz.5.206" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 41.024543][ T3741] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.033784][ T4100] syz_tun: entered allmulticast mode [ 41.039979][ T4083] loop1: detected capacity change from 0 to 1024 [ 41.113111][ T4083] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 41.139126][ T4083] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 41.256649][ T4083] JBD2: no valid journal superblock found [ 41.287779][ T4083] EXT4-fs (loop1): Could not load journal inode [ 41.310250][ T4099] syz_tun: left allmulticast mode [ 42.411781][ T4148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.419768][ T4148] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.433853][ T4148] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 42.690573][ T4170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.237'. [ 42.743814][ T4170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.237'. [ 43.330571][ T4187] netlink: 'syz.1.244': attribute type 3 has an invalid length. [ 43.331918][ T4188] loop0: detected capacity change from 0 to 2048 [ 43.374180][ T4187] netlink: 'syz.1.244': attribute type 1 has an invalid length. [ 43.403977][ T4188] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.416430][ T4187] netlink: 198116 bytes leftover after parsing attributes in process `syz.1.244'. [ 43.446924][ T4194] loop2: detected capacity change from 0 to 512 [ 43.481659][ T4194] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 43.551629][ T4194] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.564894][ T4194] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.638554][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.703895][ T12] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 43.719375][ T12] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 43.732303][ T12] EXT4-fs (loop0): This should not happen!! Data will be lost [ 43.732303][ T12] [ 43.742343][ T12] EXT4-fs (loop0): Total free blocks count 0 [ 43.749371][ T12] EXT4-fs (loop0): Free/Dirty block details [ 43.755581][ T12] EXT4-fs (loop0): free_blocks=2415919504 [ 43.761324][ T12] EXT4-fs (loop0): dirty_blocks=2080 [ 43.766969][ T12] EXT4-fs (loop0): Block reservation details [ 43.774641][ T12] EXT4-fs (loop0): i_reserved_data_blocks=130 [ 43.790208][ T12] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 24 with error 28 [ 43.979593][ T40] bridge_slave_1: left allmulticast mode [ 43.985599][ T40] bridge_slave_1: left promiscuous mode [ 43.991485][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.999527][ T40] bridge_slave_0: left allmulticast mode [ 44.005465][ T40] bridge_slave_0: left promiscuous mode [ 44.011265][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.085502][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 44.095472][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 44.104781][ T40] bond0 (unregistering): Released all slaves [ 44.151121][ T4211] chnl_net:caif_netlink_parms(): no params data found [ 44.166298][ T40] hsr_slave_0: left promiscuous mode [ 44.176201][ T40] hsr_slave_1: left promiscuous mode [ 44.182119][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.195089][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.253145][ T40] team0 (unregistering): Port device team_slave_1 removed [ 44.274432][ T40] team0 (unregistering): Port device team_slave_0 removed [ 44.378511][ T4211] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.381630][ T4248] netlink: 24 bytes leftover after parsing attributes in process `syz.5.256'. [ 44.385779][ T4211] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.401767][ T4211] bridge_slave_0: entered allmulticast mode [ 44.408373][ T4211] bridge_slave_0: entered promiscuous mode [ 44.415251][ T4211] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.422510][ T4211] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.429734][ T4211] bridge_slave_1: entered allmulticast mode [ 44.436416][ T4211] bridge_slave_1: entered promiscuous mode [ 44.459628][ T4211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.470347][ T4211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.493435][ T4211] team0: Port device team_slave_0 added [ 44.507142][ T4211] team0: Port device team_slave_1 added [ 44.539849][ T4211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.547168][ T4211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 44.574154][ T4211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.594974][ T4211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.611758][ T4211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 44.648056][ T4211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.702881][ T4211] hsr_slave_0: entered promiscuous mode [ 44.715773][ T4211] hsr_slave_1: entered promiscuous mode [ 45.122417][ T4211] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 45.175918][ T4211] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 45.202322][ T4211] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 45.220570][ T4211] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 45.298745][ T4211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.338192][ T4211] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.373099][ T309] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.380236][ T309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.411418][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.418619][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.482622][ T4211] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 45.512051][ T4211] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.718429][ T4211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.978095][ T4304] syz.0.264 (4304) used greatest stack depth: 10184 bytes left [ 46.001795][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 46.001873][ T28] audit: type=1400 audit(1772455366.734:293): avc: denied { read } for pid=4365 comm="syz.3.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 46.054200][ T4367] loop3: detected capacity change from 0 to 1024 [ 46.057750][ T4372] netlink: 4 bytes leftover after parsing attributes in process `syz.2.273'. [ 46.077313][ T4211] veth0_vlan: entered promiscuous mode [ 46.102164][ T4367] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 46.112658][ T4211] veth1_vlan: entered promiscuous mode [ 46.132235][ T4367] System zones: 0-1, 3-36 [ 46.141577][ T4367] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.270: bad orphan inode 134217728 [ 46.157074][ T4372] netlink: 12 bytes leftover after parsing attributes in process `syz.2.273'. [ 46.181420][ T4211] veth0_macvtap: entered promiscuous mode [ 46.202230][ T4367] loop3: lost filesystem error report for type 5 error -117 [ 46.206079][ T4367] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.210636][ T4211] veth1_macvtap: entered promiscuous mode [ 46.263099][ T4211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.301286][ T4211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.323291][ T40] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.369257][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.382302][ T4386] netlink: 'syz.2.276': attribute type 1 has an invalid length. [ 46.400749][ T28] audit: type=1400 audit(1772455367.124:294): avc: denied { write } for pid=4365 comm="syz.3.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 46.427993][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.458988][ T4385] loop0: detected capacity change from 0 to 1024 [ 46.470048][ T4385] ext4: Bad value for 'mb_optimize_scan' [ 46.501706][ T4390] netlink: 12 bytes leftover after parsing attributes in process `syz.2.276'. [ 46.517542][ T4390] netlink: 12 bytes leftover after parsing attributes in process `syz.2.276'. [ 46.566654][ T4386] bond1: entered promiscuous mode [ 46.597447][ T4386] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.627895][ T70] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.645027][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.659877][ T4396] bond1: (slave bridge2): making interface the new active one [ 46.667669][ T4396] bridge2: entered promiscuous mode [ 46.674893][ T4396] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 46.711255][ T4404] loop3: detected capacity change from 0 to 256 [ 46.738280][ T4404] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 46.776992][ T4404] netlink: 12 bytes leftover after parsing attributes in process `syz.3.280'. [ 46.819688][ T408] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 46.893653][ T4418] loop5: detected capacity change from 0 to 1024 [ 46.905042][ T4418] EXT4-fs: Ignoring removed bh option [ 46.920456][ T4416] loop2: detected capacity change from 0 to 4096 [ 46.927306][ T4422] loop3: detected capacity change from 0 to 256 [ 46.929347][ T4418] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 46.951454][ T4418] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.962777][ T28] audit: type=1400 audit(1772455367.704:295): avc: denied { name_bind } for pid=4425 comm="syz.1.289" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 46.992874][ T4422] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 47.006627][ T4416] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.038986][ T28] audit: type=1400 audit(1772455367.774:296): avc: denied { read write } for pid=4415 comm="syz.2.285" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 47.061569][ T28] audit: type=1400 audit(1772455367.774:297): avc: denied { open } for pid=4415 comm="syz.2.285" path="/43/file0/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 47.098993][ T28] audit: type=1400 audit(1772455367.834:298): avc: denied { map } for pid=4417 comm="syz.5.287" path="/33/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 47.099584][ T4417] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: comm syz.5.287: lblock 0 mapped to illegal pblock 0 (length 1) [ 47.136481][ T4417] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: comm syz.5.287: lblock 0 mapped to illegal pblock 0 (length 1) [ 47.151675][ T4417] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: comm syz.5.287: lblock 0 mapped to illegal pblock 0 (length 1) [ 47.166381][ T4417] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: comm syz.5.287: lblock 0 mapped to illegal pblock 0 (length 1) [ 47.187276][ T4417] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: comm syz.5.287: lblock 0 mapped to illegal pblock 0 (length 1) [ 47.200978][ T4417] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: comm syz.5.287: lblock 0 mapped to illegal pblock 0 (length 1) [ 47.215972][ T4417] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: comm syz.5.287: lblock 0 mapped to illegal pblock 0 (length 1) [ 47.222952][ T3413] Process accounting resumed [ 47.234224][ T3413] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779264) [ 47.243616][ T4417] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: comm syz.5.287: lblock 0 mapped to illegal pblock 0 (length 1) [ 47.246386][ T3413] FAT-fs (loop3): Filesystem has been set read-only [ 47.282271][ T4417] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: comm syz.5.287: lblock 0 mapped to illegal pblock 0 (length 1) [ 47.300218][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.314839][ T4417] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: comm syz.5.287: lblock 0 mapped to illegal pblock 0 (length 1) [ 47.393096][ T3741] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 47.406714][ T28] audit: type=1400 audit(1772455368.144:299): avc: denied { create } for pid=4439 comm="syz.3.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.471770][ T28] audit: type=1400 audit(1772455368.174:300): avc: denied { override_creds } for pid=4437 comm="syz.2.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 47.520671][ T4447] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=4447 comm=syz.3.299 [ 47.576534][ T4452] loop2: detected capacity change from 0 to 4096 [ 47.584492][ T28] audit: type=1400 audit(1772455368.174:301): avc: denied { bind } for pid=4439 comm="syz.3.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.616364][ T4452] EXT4-fs (loop2): inodes count not valid: 32 vs 27 [ 47.708677][ T28] audit: type=1400 audit(1772455368.174:302): avc: denied { setopt } for pid=4439 comm="syz.3.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 48.266424][ T4532] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 48.268160][ T4528] mmap: syz.1.320 (4528) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 48.287535][ T4532] netlink: 'syz.2.321': attribute type 12 has an invalid length. [ 48.312206][ T4532] netlink: 'syz.2.321': attribute type 29 has an invalid length. [ 48.319965][ T4532] netlink: 148 bytes leftover after parsing attributes in process `syz.2.321'. [ 48.337673][ T4532] netlink: 'syz.2.321': attribute type 1 has an invalid length. [ 48.352278][ T4536] netlink: 28 bytes leftover after parsing attributes in process `syz.0.322'. [ 48.387258][ T4536] netlink: 32 bytes leftover after parsing attributes in process `syz.0.322'. [ 48.400304][ T4536] netlink: 28 bytes leftover after parsing attributes in process `syz.0.322'. [ 48.412872][ T4536] netlink: 32 bytes leftover after parsing attributes in process `syz.0.322'. [ 48.629333][ T4564] ipvlan2: entered promiscuous mode [ 48.641394][ T4564] ipvlan2: entered allmulticast mode [ 48.659423][ T4564] hsr0: entered allmulticast mode [ 48.672906][ T4564] hsr_slave_0: entered allmulticast mode [ 48.678735][ T4564] hsr_slave_1: entered allmulticast mode [ 48.690349][ T4564] team0: Device ipvlan2 failed to register rx_handler [ 49.547632][ T4585] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 49.633705][ T4599] loop2: detected capacity change from 0 to 2048 [ 49.687613][ T4599] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.742870][ T4616] syzkaller0: entered promiscuous mode [ 49.748463][ T4616] syzkaller0: entered allmulticast mode [ 49.790738][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.866793][ T4624] loop5: detected capacity change from 0 to 7 [ 50.180096][ T4645] loop0: detected capacity change from 0 to 128 [ 50.187381][ T4645] msdos: Unknown parameter 'dos1xfl%›4?Ö…y' [ 51.158959][ T4695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.208856][ T4695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.386096][ T4697] syz.3.377 (4697) used greatest stack depth: 9992 bytes left [ 51.500384][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 51.500403][ T28] audit: type=1400 audit(1772455372.234:331): avc: denied { map } for pid=4707 comm="syz.0.382" path="socket:[13782]" dev="sockfs" ino=13782 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.586115][ T4716] __nla_validate_parse: 4 callbacks suppressed [ 51.586132][ T4716] netlink: 28 bytes leftover after parsing attributes in process `syz.0.385'. [ 51.655383][ T4706] loop2: detected capacity change from 0 to 512 [ 51.701972][ T4706] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 51.728730][ T4706] EXT4-fs (loop2): 1 truncate cleaned up [ 51.748426][ T4721] tipc: Started in network mode [ 51.750960][ T4706] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.763608][ T4721] tipc: Node identity ac14140f, cluster identity 4711 [ 51.781509][ T4721] tipc: New replicast peer: 10.1.1.0 [ 51.797383][ T4721] tipc: Enabled bearer , priority 10 [ 51.806426][ T28] audit: type=1400 audit(1772455628.532:332): avc: denied { add_name } for pid=4705 comm="syz.2.381" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 51.813108][ T4721] tipc: New replicast peer: 100.1.1.2 [ 51.888884][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.941094][ T4741] netlink: 'syz.2.389': attribute type 1 has an invalid length. [ 51.999047][ T4747] syz.1.392 uses obsolete (PF_INET,SOCK_PACKET) [ 52.009674][ T4741] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 52.025968][ T4741] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 52.042026][ T4741] bond2: (slave ip6gre1): making interface the new active one [ 52.056300][ T4741] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 52.067244][ T4747] syzkaller1: entered promiscuous mode [ 52.073269][ T4747] syzkaller1: entered allmulticast mode [ 52.087414][ T4749] bond2: option fail_over_mac: unable to set because the bond device has slaves [ 52.837511][ T28] audit: type=1400 audit(1772455629.572:333): avc: denied { read } for pid=4773 comm="syz.5.403" path="socket:[12773]" dev="sockfs" ino=12773 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 52.913432][ T10] tipc: Node number set to 2886997007 [ 53.093009][ T4788] netlink: 20 bytes leftover after parsing attributes in process `syz.5.409'. [ 53.270893][ T28] audit: type=1400 audit(1772455630.002:334): avc: denied { create } for pid=4797 comm="syz.5.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 53.340864][ T28] audit: type=1400 audit(1772455630.032:335): avc: denied { getopt } for pid=4789 comm="syz.3.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 53.424403][ T4808] tipc: Failed to remove unknown binding: 66,1,1/0:4047661460/4047661462 [ 53.433103][ T4808] tipc: Failed to remove unknown binding: 66,1,1/0:4047661460/4047661462 [ 53.891117][ T4825] netlink: 12 bytes leftover after parsing attributes in process `syz.2.426'. [ 54.171892][ T28] audit: type=1400 audit(1772455630.902:336): avc: denied { bind } for pid=4829 comm="syz.0.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 54.219618][ T28] audit: type=1400 audit(1772455630.932:337): avc: denied { setopt } for pid=4829 comm="syz.0.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 54.388883][ T28] audit: type=1400 audit(1772455631.122:338): avc: denied { watch } for pid=4844 comm="syz.5.435" path="/" dev="ramfs" ino=13984 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 54.452882][ T28] audit: type=1400 audit(1772455631.182:339): avc: denied { read } for pid=4848 comm="syz.5.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 54.508850][ T4853] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 54.632166][ T28] audit: type=1400 audit(1772455631.362:340): avc: denied { setopt } for pid=4861 comm="syz.0.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 55.521810][ T4909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.463'. [ 56.161741][ T4945] loop0: detected capacity change from 0 to 256 [ 56.187525][ T4945] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 56.234344][ T4945] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 56.471833][ T4962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.486'. [ 56.505307][ T4962] netlink: 12 bytes leftover after parsing attributes in process `syz.0.486'. [ 56.533568][ T4962] geneve2: entered promiscuous mode [ 56.538862][ T4962] geneve2: entered allmulticast mode [ 56.553018][ T40] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.586501][ T40] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.609456][ T40] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.632147][ T40] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.672260][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 56.672277][ T28] audit: type=1400 audit(1772455633.412:371): avc: denied { mount } for pid=4973 comm="syz.0.491" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 56.850656][ T4981] loop0: detected capacity change from 0 to 1024 [ 56.893764][ T4981] EXT4-fs: Ignoring removed orlov option [ 56.901777][ T4981] EXT4-fs: Ignoring removed nobh option [ 56.947052][ T4981] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.225485][ T4992] team0 (unregistering): Port device team_slave_0 removed [ 57.253289][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.273930][ T4992] team0 (unregistering): Port device team_slave_1 removed [ 57.312215][ T4999] netlink: 24 bytes leftover after parsing attributes in process `syz.0.499'. [ 57.375019][ T3361] IPVS: starting estimator thread 0... [ 57.395835][ T28] audit: type=1400 audit(1772455634.122:372): avc: denied { map } for pid=5002 comm="syz.1.502" path="socket:[14307]" dev="sockfs" ino=14307 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 57.425920][ T28] audit: type=1400 audit(1772455634.122:373): avc: denied { read } for pid=5002 comm="syz.1.502" path="socket:[14307]" dev="sockfs" ino=14307 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 57.489757][ T5003] IPVS: using max 2640 ests per chain, 132000 per kthread [ 57.601838][ T28] audit: type=1400 audit(1772455634.192:374): avc: denied { allowed } for pid=5008 comm="syz.0.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 57.672099][ T28] audit: type=1400 audit(1772455634.322:375): avc: denied { setopt } for pid=5014 comm="syz.1.505" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 57.728394][ T28] audit: type=1400 audit(1772455634.372:376): avc: denied { mount } for pid=5018 comm="syz.5.508" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 57.799004][ T28] audit: type=1400 audit(1772455634.372:377): avc: denied { cmd } for pid=5020 comm="syz.1.509" path="socket:[14333]" dev="sockfs" ino=14333 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 57.992219][ T5039] netlink: 24 bytes leftover after parsing attributes in process `syz.2.518'. [ 58.523168][ T5069] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.530378][ T5069] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.702014][ T5069] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.745946][ T5069] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.856182][ T40] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.865262][ T40] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.887400][ T40] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.913620][ T40] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.952911][ T28] audit: type=1400 audit(1772455636.682:378): avc: denied { read write } for pid=5108 comm="syz.0.545" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 59.997378][ T28] audit: type=1400 audit(1772455636.682:379): avc: denied { open } for pid=5108 comm="syz.0.545" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 60.124047][ T5119] netlink: 4 bytes leftover after parsing attributes in process `syz.5.550'. [ 60.142184][ T5119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.165427][ T5119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.883406][ T28] audit: type=1400 audit(1772455637.622:380): avc: denied { bind } for pid=5137 comm="syz.0.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 62.108541][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 62.108559][ T28] audit: type=1400 audit(1772455638.842:397): avc: denied { cpu } for pid=5198 comm="syz.2.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 62.140266][ T5199] loop2: detected capacity change from 0 to 512 [ 62.166482][ T5199] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 62.210746][ T5199] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.233202][ T5199] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.295004][ T5208] netlink: 28 bytes leftover after parsing attributes in process `syz.3.587'. [ 62.295429][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.304228][ T5208] netlink: 'syz.3.587': attribute type 7 has an invalid length. [ 62.320843][ T5208] netlink: 'syz.3.587': attribute type 8 has an invalid length. [ 62.328696][ T5208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.587'. [ 62.375494][ T28] audit: type=1400 audit(1772455639.112:398): avc: denied { mounton } for pid=5213 comm="syz.5.590" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 62.442671][ T28] audit: type=1400 audit(1772455639.182:399): avc: denied { watch_reads } for pid=5218 comm="syz.0.593" path="/130/file0" dev="tmpfs" ino=692 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 62.479622][ T5220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.591'. [ 62.521472][ T5226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.595'. [ 62.643887][ T5235] netlink: 12 bytes leftover after parsing attributes in process `syz.0.598'. [ 62.706916][ T5239] gretap0: entered promiscuous mode [ 62.807123][ T5242] loop0: detected capacity change from 0 to 512 [ 62.817841][ T5242] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 62.829741][ T5240] netlink: 48 bytes leftover after parsing attributes in process `syz.1.609'. [ 62.854307][ T5242] EXT4-fs (loop0): 1 truncate cleaned up [ 62.871557][ T5242] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.906988][ T28] audit: type=1400 audit(1772455639.642:400): avc: denied { create } for pid=5241 comm="syz.0.600" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 63.060839][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.337711][ T28] audit: type=1400 audit(1772455640.072:401): avc: denied { getopt } for pid=5255 comm="syz.0.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 63.421800][ T28] audit: type=1400 audit(1772455640.152:402): avc: denied { accept } for pid=5259 comm="syz.1.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.428818][ T5261] tipc: Started in network mode [ 63.513745][ T5261] tipc: Node identity 4, cluster identity 4711 [ 63.519979][ T5261] tipc: Node number set to 4 [ 63.858251][ T28] audit: type=1400 audit(1772455640.592:403): avc: denied { read } for pid=5289 comm="syz.3.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.886439][ T5292] netlink: 48 bytes leftover after parsing attributes in process `syz.0.619'. [ 63.935534][ T5298] netlink: 'syz.2.622': attribute type 27 has an invalid length. [ 64.071393][ T5298] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.078635][ T5298] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.155617][ T5298] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.181458][ T5298] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.250323][ T5298] bond1: left promiscuous mode [ 64.263749][ T5298] bridge2: left promiscuous mode [ 64.288286][ T5302] gretap0: left promiscuous mode [ 64.334452][ T5302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.344239][ T5302] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 64.383343][ T50] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.393081][ T50] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.403271][ T50] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.435817][ T50] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.618201][ T28] audit: type=1400 audit(1772455641.352:404): avc: denied { name_connect } for pid=5310 comm="syz.0.626" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 64.659066][ T28] audit: type=1400 audit(1772455641.392:405): avc: denied { watch watch_reads } for pid=5308 comm="syz.1.636" path="/" dev="configfs" ino=1006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 64.685405][ T5313] netlink: 'syz.0.627': attribute type 1 has an invalid length. [ 64.736157][ T5313] gretap1: entered allmulticast mode [ 64.753297][ T5313] bond1: (slave gretap1): making interface the new active one [ 64.761454][ T5313] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 64.766198][ T28] audit: type=1400 audit(1772455641.502:406): avc: denied { read write } for pid=5321 comm="syz.1.640" name="rtc0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 64.824437][ T5322] netlink: 1311 bytes leftover after parsing attributes in process `syz.1.640'. [ 64.975071][ T5339] netlink: 24 bytes leftover after parsing attributes in process `syz.3.635'. [ 65.051712][ T5342] netlink: 48 bytes leftover after parsing attributes in process `syz.5.638'. [ 65.071746][ T70] Bluetooth: hci0: Frame reassembly failed (-84) [ 65.391638][ T5366] loop2: detected capacity change from 0 to 1024 [ 65.435688][ T5366] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 65.481898][ T5366] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.510260][ T5366] EXT4-fs error (device loop2): ext4_map_blocks:818: inode #15: comm syz.2.648: lblock 0 mapped to illegal pblock 0 (length 1) [ 65.532960][ T5366] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 65.560097][ T5366] EXT4-fs (loop2): This should not happen!! Data will be lost [ 65.560097][ T5366] [ 65.571451][ T5366] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #15: comm syz.2.648: lblock 0 mapped to illegal pblock 0 (length 1) [ 65.585194][ T5366] EXT4-fs error (device loop2): ext4_ext_remove_space:2954: inode #15: comm syz.2.648: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 65.611321][ T5366] EXT4-fs error (device loop2) in ext4_setattr:5983: Corrupt filesystem [ 65.660610][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 65.871152][ T5386] loop2: detected capacity change from 0 to 1024 [ 65.890788][ T5386] EXT4-fs: Ignoring removed orlov option [ 65.983211][ T5386] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.119162][ T5386] Trying to write to read-only block-device loop2 [ 66.189700][ T3320] EXT4-fs error (device loop2): mb_free_blocks:2047: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 66.253274][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.752706][ T5414] netlink: 48 bytes leftover after parsing attributes in process `syz.2.663'. [ 67.132620][ T3575] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 67.586697][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 67.586715][ T28] audit: type=1400 audit(1772455644.322:421): avc: denied { create } for pid=5446 comm="syz.5.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 68.087821][ T28] audit: type=1400 audit(1772455644.822:422): avc: denied { remount } for pid=5462 comm="syz.3.682" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 68.237152][ T28] audit: type=1400 audit(1772455644.972:423): avc: denied { ioctl } for pid=5474 comm="syz.5.686" path="socket:[16889]" dev="sockfs" ino=16889 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.313536][ T5483] team0: Device gtp0 is of different type [ 68.357620][ T5484] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.688'. [ 68.367045][ T5484] netlink: 24 bytes leftover after parsing attributes in process `syz.1.688'. [ 68.526095][ T28] audit: type=1400 audit(1772455645.262:424): avc: denied { mount } for pid=5491 comm="syz.5.692" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 68.563597][ T28] audit: type=1400 audit(1772455645.292:425): avc: denied { watch watch_reads } for pid=5491 comm="syz.5.692" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 69.169278][ T28] audit: type=1400 audit(1772455645.902:426): avc: denied { execute } for pid=5503 comm="syz.5.697" name="file1" dev="tmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 69.220831][ T28] audit: type=1400 audit(1772455645.902:427): avc: denied { execute_no_trans } for pid=5503 comm="syz.5.697" path="/133/file1" dev="tmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 69.403222][ T5510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.700'. [ 69.601642][ T28] audit: type=1400 audit(1772455646.332:428): avc: denied { firmware_load } for pid=5519 comm="syz.0.703" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 70.286152][ T5538] wireguard0: entered promiscuous mode [ 70.302463][ T5538] wireguard0: entered allmulticast mode [ 70.353545][ T28] audit: type=1400 audit(1772455647.092:429): avc: denied { write } for pid=5556 comm="syz.1.715" name="event2" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 70.381066][ T5521] syz.0.703 (5521) used greatest stack depth: 9912 bytes left [ 70.437231][ T28] audit: type=1326 audit(1772455647.172:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5558 comm="syz.5.714" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f87287ec799 code=0x0 [ 70.538622][ T5538] syz.3.710 (5538) used greatest stack depth: 9864 bytes left [ 71.053787][ T5578] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.722'. [ 71.080463][ T5578] netlink: 24 bytes leftover after parsing attributes in process `syz.3.722'. [ 71.916471][ T5608] netlink: 400 bytes leftover after parsing attributes in process `syz.2.731'. [ 71.967281][ T5620] loop2: detected capacity change from 0 to 128 [ 72.336824][ T5629] wireguard0: entered promiscuous mode [ 72.350608][ T5629] wireguard0: entered allmulticast mode [ 72.483501][ T5640] syz_tun: entered allmulticast mode [ 72.711922][ T5634] syz_tun: left allmulticast mode [ 73.077883][ T5686] lo: entered allmulticast mode [ 73.243620][ T5685] lo: left allmulticast mode [ 73.754835][ T5716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.763298][ T5716] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.773195][ T5716] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 73.810850][ T5716] 9p: Bad value for 'wfdno' [ 74.139782][ T5722] loop2: detected capacity change from 0 to 1024 [ 74.177738][ T5722] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 74.190726][ T5722] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 74.209593][ T5722] JBD2: no valid journal superblock found [ 74.215979][ T5722] EXT4-fs (loop2): Could not load journal inode [ 74.807773][ T5732] wireguard0: entered promiscuous mode [ 74.824862][ T5732] wireguard0: entered allmulticast mode [ 74.883596][ T5741] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 74.928749][ T5741] 9p: Bad value for 'wfdno' [ 75.023118][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 75.023133][ T28] audit: type=1326 audit(1772455651.762:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5761 comm="syz.1.791" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f127026c799 code=0x0 [ 75.177112][ T5777] netlink: 24 bytes leftover after parsing attributes in process `syz.3.797'. [ 75.349734][ T5765] loop0: detected capacity change from 0 to 1024 [ 75.397087][ T5765] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 75.410446][ T5765] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 75.427305][ T5765] JBD2: no valid journal superblock found [ 75.434539][ T5765] EXT4-fs (loop0): Could not load journal inode [ 75.642172][ T5787] af_packet: tpacket_rcv: packet too big, clamped from 18 to 4294967286. macoff=82 [ 75.739235][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.747853][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.758294][ T5793] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 75.861704][ T5797] wireguard0: entered promiscuous mode [ 75.869054][ T5797] wireguard0: entered allmulticast mode [ 76.090223][ T5807] netlink: 24 bytes leftover after parsing attributes in process `syz.1.809'. [ 76.955564][ T5821] loop1: detected capacity change from 0 to 1024 [ 77.023887][ T5821] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 77.049607][ T5821] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 77.129791][ T5821] JBD2: no valid journal superblock found [ 77.143309][ T5821] EXT4-fs (loop1): Could not load journal inode [ 77.241779][ T28] audit: type=1326 audit(1772455653.972:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5833 comm="syz.2.818" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f19f8fbc799 code=0x0 [ 77.312752][ T5839] loop1: detected capacity change from 0 to 2048 [ 77.344403][ T5839] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.662960][ T40] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 77.682905][ T40] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1212 with error 28 [ 77.703145][ T40] EXT4-fs (loop1): This should not happen!! Data will be lost [ 77.703145][ T40] [ 77.719880][ T40] EXT4-fs (loop1): Total free blocks count 0 [ 77.726193][ T40] EXT4-fs (loop1): Free/Dirty block details [ 77.733116][ T40] EXT4-fs (loop1): free_blocks=2415919504 [ 77.738921][ T40] EXT4-fs (loop1): dirty_blocks=1216 [ 77.744978][ T40] EXT4-fs (loop1): Block reservation details [ 77.757935][ T40] EXT4-fs (loop1): i_reserved_data_blocks=76 [ 77.775770][ T4211] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.101549][ T28] audit: type=1400 audit(1772455654.832:435): avc: denied { bind } for pid=5851 comm="syz.0.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 78.145645][ T28] audit: type=1400 audit(1772455654.832:436): avc: denied { kexec_image_load } for pid=5851 comm="syz.0.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 78.198837][ T5858] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 78.323618][ T28] audit: type=1400 audit(1772455655.052:437): avc: denied { connect } for pid=5865 comm="syz.3.830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 78.531591][ T28] audit: type=1400 audit(1772455655.262:438): avc: denied { connect } for pid=5882 comm="syz.2.838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 78.622294][ T28] audit: type=1400 audit(1772455655.292:439): avc: denied { read } for pid=5882 comm="syz.2.838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 78.652461][ T28] audit: type=1400 audit(1772455655.352:440): avc: denied { write } for pid=5882 comm="syz.2.838" path="socket:[20665]" dev="sockfs" ino=20665 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 79.464300][ T5919] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=5919 comm=syz.2.852 [ 79.672761][ T28] audit: type=1400 audit(1772455656.402:441): avc: denied { override_creds } for pid=5932 comm="syz.1.859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 79.715261][ T5936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.860'. [ 79.748058][ T5936] netlink: 12 bytes leftover after parsing attributes in process `syz.0.860'. [ 79.757187][ T5938] loop1: detected capacity change from 0 to 1024 [ 79.825888][ T5938] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 79.834233][ T5938] System zones: 0-1, 3-36 [ 79.847029][ T5938] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.861: bad orphan inode 134217728 [ 79.872148][ T5938] loop1: lost filesystem error report for type 5 error -117 [ 79.872887][ T5938] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.393730][ T4211] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.508517][ T5975] loop0: detected capacity change from 0 to 512 [ 80.515726][ T5975] EXT4-fs: old and new quota format mixing [ 80.521183][ T5979] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=5979 comm=syz.1.875 [ 80.686998][ T28] audit: type=1326 audit(1772455657.422:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5988 comm="syz.5.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87287ec799 code=0x7ffc0000 [ 80.712627][ T5998] netlink: 24 bytes leftover after parsing attributes in process `syz.2.886'. [ 80.731949][ T28] audit: type=1326 audit(1772455657.442:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5988 comm="syz.5.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87287ec799 code=0x7ffc0000 [ 80.770009][ T28] audit: type=1326 audit(1772455657.452:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5988 comm="syz.5.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f87287ec799 code=0x7ffc0000 [ 80.807174][ T6004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.898'. [ 80.838326][ T28] audit: type=1326 audit(1772455657.452:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5988 comm="syz.5.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87287ec799 code=0x7ffc0000 [ 80.872238][ T28] audit: type=1326 audit(1772455657.462:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5988 comm="syz.5.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87287ec799 code=0x7ffc0000 [ 80.884469][ T6004] netlink: 12 bytes leftover after parsing attributes in process `syz.1.898'. [ 80.941334][ T28] audit: type=1326 audit(1772455657.462:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5988 comm="syz.5.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f87287ec799 code=0x7ffc0000 [ 80.990401][ T28] audit: type=1326 audit(1772455657.462:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5988 comm="syz.5.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87287ec799 code=0x7ffc0000 [ 81.054564][ T28] audit: type=1326 audit(1772455657.462:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5988 comm="syz.5.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87287ec799 code=0x7ffc0000 [ 81.450996][ T6044] netlink: 4 bytes leftover after parsing attributes in process `syz.5.905'. [ 81.467751][ T6044] netlink: 12 bytes leftover after parsing attributes in process `syz.5.905'. [ 82.054921][ T6059] netlink: 24 bytes leftover after parsing attributes in process `syz.0.921'. [ 82.119261][ T6061] wireguard0: entered promiscuous mode [ 82.132375][ T6061] wireguard0: entered allmulticast mode [ 82.421605][ T6075] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 82.788614][ T6106] loop0: detected capacity change from 0 to 1024 [ 82.805695][ T6106] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 82.814157][ T6106] System zones: 0-1, 3-36 [ 82.829636][ T6106] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.929: bad orphan inode 134217728 [ 82.845329][ T6106] loop0: lost filesystem error report for type 5 error -117 [ 82.848679][ T6106] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.994695][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.477298][ T6119] netlink: 4 bytes leftover after parsing attributes in process `syz.3.930'. [ 83.487493][ T6119] netlink: 12 bytes leftover after parsing attributes in process `syz.3.930'. [ 83.548212][ T6128] netlink: 24 bytes leftover after parsing attributes in process `syz.3.932'. [ 83.569809][ T6131] loop1: detected capacity change from 0 to 128 [ 83.602791][ T6131] msdos: Unknown parameter 'dos1xfl%›4?Ö…y' [ 83.869101][ T6152] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 83.876981][ T6151] syzkaller1: entered promiscuous mode [ 83.882625][ T6151] syzkaller1: entered allmulticast mode [ 83.988088][ T6158] loop0: detected capacity change from 0 to 2048 [ 84.025459][ T6158] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.061729][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.168244][ T6181] tipc: Started in network mode [ 84.173387][ T6181] tipc: Node identity ac14140f, cluster identity 4711 [ 84.180452][ T6181] tipc: New replicast peer: 10.1.1.0 [ 84.186522][ T6181] tipc: Enabled bearer , priority 10 [ 84.194984][ T6181] tipc: New replicast peer: 100.1.1.2 [ 84.220603][ T6185] netlink: 28 bytes leftover after parsing attributes in process `syz.5.957'. [ 84.244051][ T6187] netlink: 'syz.5.958': attribute type 1 has an invalid length. [ 84.264065][ T6187] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 84.274471][ T6187] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 84.285898][ T6187] bond1: (slave ip6gre1): making interface the new active one [ 84.294072][ T6187] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 84.307047][ T6187] bond1: option fail_over_mac: unable to set because the bond device has slaves [ 85.302192][ T3413] tipc: Node number set to 2886997007 [ 85.484666][ T6255] tipc: Failed to remove unknown binding: 66,1,1/4:3812236332/3812236334 [ 85.507745][ T6255] tipc: Failed to remove unknown binding: 66,1,1/4:3812236332/3812236334 [ 85.606271][ T6267] tipc: Started in network mode [ 85.617284][ T6267] tipc: Node identity ac14140f, cluster identity 4711 [ 85.634503][ T6267] tipc: New replicast peer: 10.1.1.0 [ 85.647833][ T6267] tipc: Enabled bearer , priority 10 [ 85.666362][ T6267] tipc: New replicast peer: 100.1.1.2 [ 86.762188][ T3407] tipc: Node number set to 2886997007 [ 87.135902][ T6314] netlink: 'syz.0.1020': attribute type 1 has an invalid length. [ 87.184750][ T6314] bond2: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 87.208491][ T6314] bond2: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 87.233818][ T6314] bond2: (slave ip6gre2): making interface the new active one [ 87.258168][ T6314] bond2: (slave ip6gre2): Enslaving as an active interface with an up link [ 87.288768][ T6316] bond2: option fail_over_mac: unable to set because the bond device has slaves [ 87.564901][ T6303] syz.3.1006 (6303) used greatest stack depth: 9544 bytes left [ 88.369867][ T6328] wireguard0: entered promiscuous mode [ 88.388003][ T6328] wireguard0: entered allmulticast mode [ 91.342852][ T6408] wireguard0: entered promiscuous mode [ 91.349426][ T6408] wireguard0: entered allmulticast mode [ 91.674557][ T6431] wireguard0: entered promiscuous mode [ 91.702791][ T6431] wireguard0: entered allmulticast mode [ 92.196092][ T6449] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1050'. [ 93.030112][ T3407] IPVS: starting estimator thread 0... [ 93.037831][ T6495] team0 (unregistering): Port device team_slave_0 removed [ 93.069668][ T6495] team0 (unregistering): Port device team_slave_1 removed [ 93.132222][ T6498] IPVS: using max 2400 ests per chain, 120000 per kthread [ 93.513273][ T28] audit: type=1326 audit(1772455670.242:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6521 comm="syz.2.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f8fbc799 code=0x7ffc0000 [ 93.582228][ T28] audit: type=1326 audit(1772455670.242:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6521 comm="syz.2.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f19f8fbc799 code=0x7ffc0000 [ 93.615831][ T28] audit: type=1326 audit(1772455670.242:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6521 comm="syz.2.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f8fbc799 code=0x7ffc0000 [ 93.695626][ T28] audit: type=1326 audit(1772455670.242:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6523 comm="syz.2.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f19f8f7cfce code=0x7ffc0000 [ 93.785880][ T28] audit: type=1326 audit(1772455670.242:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6521 comm="syz.2.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f8fbc799 code=0x7ffc0000 [ 93.821844][ T6520] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.877576][ T28] audit: type=1326 audit(1772455670.242:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6521 comm="syz.2.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f19f8fbc799 code=0x7ffc0000 [ 93.953877][ T28] audit: type=1326 audit(1772455670.242:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6521 comm="syz.2.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f8fbc799 code=0x7ffc0000 [ 93.979887][ T28] audit: type=1326 audit(1772455670.242:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6521 comm="syz.2.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f8fbc799 code=0x7ffc0000 [ 94.005129][ T28] audit: type=1326 audit(1772455670.242:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6521 comm="syz.2.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f19f8fbc799 code=0x7ffc0000 [ 94.029289][ T28] audit: type=1326 audit(1772455670.242:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6521 comm="syz.2.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f8fbc799 code=0x7ffc0000 [ 94.149768][ T6520] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.273704][ T6520] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.396616][ T6520] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.550019][ T309] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.570941][ T309] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.605598][ T40] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.627110][ T40] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.685360][ T6589] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 95.009523][ T6606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1120'. [ 95.020541][ T6606] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1120'. [ 95.033931][ T6606] geneve2: entered promiscuous mode [ 95.039367][ T6606] geneve2: entered allmulticast mode [ 95.193496][ T6599] netlink: 'syz.5.1119': attribute type 6 has an invalid length. [ 95.440154][ T6642] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.447394][ T6642] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.615966][ T6642] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.720927][ T12] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.752884][ T12] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.772289][ T12] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.798586][ T12] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.459863][ T6721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1167'. [ 97.053904][ T6732] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1173'. [ 98.010049][ T6771] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 98.475284][ T6779] netlink: 'syz.3.1189': attribute type 1 has an invalid length. [ 98.486769][ T6781] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1191'. [ 98.544790][ T6779] gretap1: entered allmulticast mode [ 98.553854][ T6779] bond1: (slave gretap1): making interface the new active one [ 98.561898][ T6779] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 98.836173][ T6792] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1195'. [ 98.880350][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 98.880367][ T28] audit: type=1326 audit(1772455675.612:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6795 comm="syz.5.1200" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f87287ec799 code=0x0 [ 98.983021][ T6803] netlink: 'syz.3.1203': attribute type 27 has an invalid length. [ 99.031182][ T6803] gretap1: left allmulticast mode [ 99.065368][ T6813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.073703][ T6813] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.082922][ T6813] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 99.114522][ T6816] netlink: 1315 bytes leftover after parsing attributes in process `syz.2.1207'. [ 100.826562][ T6898] netlink: 'syz.0.1237': attribute type 6 has an invalid length. [ 100.834472][ T6898] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1237'. [ 100.900344][ T6905] netlink: 'syz.3.1239': attribute type 5 has an invalid length. [ 101.634867][ T6942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1253'. [ 101.670038][ T6942] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.016818][ T7010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1277'. [ 104.024646][ T7012] netlink: 'syz.1.1276': attribute type 4 has an invalid length. [ 104.063886][ T7012] netlink: 'syz.1.1276': attribute type 4 has an invalid length. [ 104.121624][ T7010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.296114][ T7048] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1294'. [ 105.312859][ T7048] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.438175][ T7055] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1296'. [ 105.457247][ T7055] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1296'. [ 105.469229][ T7055] geneve2: entered promiscuous mode [ 105.474756][ T7055] geneve2: entered allmulticast mode [ 105.483646][ T1373] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.492583][ T1373] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.505870][ T1373] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.536444][ T1373] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.008037][ T7087] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.650626][ T7087] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.797061][ T7087] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.096626][ T7087] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.164704][ T7097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1314'. [ 107.192220][ T7097] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1314'. [ 107.211985][ T1373] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.237714][ T7097] geneve2: entered promiscuous mode [ 107.252350][ T7097] geneve2: entered allmulticast mode [ 107.258489][ T40] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.270347][ T40] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.289883][ T40] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.310364][ T40] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.320536][ T40] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.395788][ T40] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.419191][ T40] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.046379][ T7154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1334'. [ 109.134174][ T7158] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1335'. [ 109.414703][ T7169] tipc: Started in network mode [ 109.419626][ T7169] tipc: Node identity 4, cluster identity 4711 [ 109.457541][ T7169] tipc: Node number set to 4 [ 109.526586][ T7173] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1342'. [ 109.537121][ T7173] netlink: 'syz.1.1342': attribute type 7 has an invalid length. [ 109.557459][ T7173] netlink: 'syz.1.1342': attribute type 8 has an invalid length. [ 109.572547][ T7173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1342'. [ 109.994011][ T7184] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.073576][ T7184] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.163976][ T7184] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.215343][ T7184] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.281207][ T1373] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.296001][ T1373] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.323363][ T1373] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.340096][ T1373] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.402124][ T7212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1355'. [ 111.834750][ T7229] netlink: 1311 bytes leftover after parsing attributes in process `syz.3.1364'. [ 112.796817][ T7255] netlink: 'syz.0.1381': attribute type 27 has an invalid length. [ 112.905250][ T7255] geneve2: left promiscuous mode [ 112.910459][ T7255] geneve2: left allmulticast mode [ 112.935153][ T7255] gretap1: left allmulticast mode [ 113.023651][ T7261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.047929][ T7261] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.075083][ T7261] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 113.136305][ T40] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.152126][ T40] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.263996][ T40] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.282166][ T40] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.799867][ T7348] team0: No ports can be present during mode change [ 115.146276][ T7384] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1421'. [ 115.840127][ T7409] netlink: 'syz.0.1431': attribute type 1 has an invalid length. [ 115.854553][ T7409] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1431'. [ 115.864143][ T7409] bond3: entered promiscuous mode [ 115.869337][ T7409] bond3: entered allmulticast mode [ 115.874677][ T7409] 8021q: adding VLAN 0 to HW filter on device bond3 [ 116.665699][ T28] audit: type=1400 audit(1772455693.402:480): avc: denied { name_bind } for pid=7464 comm="syz.1.1450" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 116.799696][ T28] audit: type=1400 audit(1772455693.532:481): avc: denied { mount } for pid=7473 comm="syz.5.1454" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 116.912740][ T40] tipc: Subscription rejected, illegal request [ 116.914763][ T28] audit: type=1326 audit(1772455693.652:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7481 comm="syz.0.1458" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc5f5c2c799 code=0x0 [ 116.955131][ T28] audit: type=1326 audit(1772455693.692:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7485 comm="syz.5.1459" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f87287ec799 code=0x0 [ 117.143726][ T7490] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1460'. [ 117.161462][ T7490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1460'. [ 117.845174][ T28] audit: type=1400 audit(1772455694.582:484): avc: denied { setopt } for pid=7519 comm="syz.5.1472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 117.873089][ T7520] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1472'. [ 117.901521][ T7520] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1472'. [ 118.091373][ T28] audit: type=1400 audit(1772455694.822:485): avc: denied { watch watch_reads } for pid=7531 comm="syz.5.1477" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 118.149184][ T7539] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1480'. [ 118.165928][ T7539] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 118.676762][ T7550] netlink: 'syz.3.1493': attribute type 1 has an invalid length. [ 118.716531][ T7551] team0: Device gtp0 is of different type [ 118.720248][ T7550] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1493'. [ 118.888740][ T28] audit: type=1400 audit(1772455695.622:486): avc: denied { getopt } for pid=7559 comm="syz.0.1487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 119.021661][ T7550] bond2: entered promiscuous mode [ 119.029965][ T7550] bond2: entered allmulticast mode [ 119.035629][ T7563] netlink: 'syz.0.1489': attribute type 16 has an invalid length. [ 119.043929][ T7563] netlink: 'syz.0.1489': attribute type 17 has an invalid length. [ 119.052606][ T7550] 8021q: adding VLAN 0 to HW filter on device bond2 [ 119.091298][ T7563] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 119.166528][ T7574] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1494'. [ 119.176792][ T7568] bond3: left promiscuous mode [ 119.185395][ T7568] bond3: left allmulticast mode [ 119.191001][ T7572] gretap0: entered promiscuous mode [ 119.196848][ T7575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1492'. [ 119.219683][ T7575] gretap0: left promiscuous mode [ 120.068887][ T7630] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=7630 comm=syz.0.1504 [ 120.482586][ T7693] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 120.579456][ T28] audit: type=1400 audit(1772455697.292:487): avc: denied { create } for pid=7700 comm="syz.2.1517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 120.640357][ T28] audit: type=1400 audit(1772455697.292:488): avc: denied { ioctl } for pid=7700 comm="syz.2.1517" path="socket:[36015]" dev="sockfs" ino=36015 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 120.787364][ T7707] vlan4: entered allmulticast mode [ 120.792661][ T7707] macsec0: entered allmulticast mode [ 121.022963][ T7717] tipc: Enabled bearer , priority 10 [ 121.550715][ T7728] __nla_validate_parse: 1 callbacks suppressed [ 121.550734][ T7728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1527'. [ 121.588680][ T7728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1527'. [ 121.688528][ T7735] netlink: 'syz.0.1530': attribute type 12 has an invalid length. [ 121.711613][ T7735] netlink: 'syz.0.1530': attribute type 29 has an invalid length. [ 121.724552][ T7735] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1530'. [ 121.742134][ T7735] netlink: 'syz.0.1530': attribute type 3 has an invalid length. [ 122.178358][ T28] audit: type=1400 audit(1772455698.902:489): avc: denied { setopt } for pid=7747 comm="syz.3.1535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 122.219020][ T28] audit: type=1400 audit(1772455698.952:490): avc: denied { execute } for pid=7749 comm="syz.3.1536" dev="hugetlbfs" ino=37184 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 122.264358][ T28] audit: type=1400 audit(1772455698.952:491): avc: denied { execute_no_trans } for pid=7749 comm="syz.3.1536" path=2F6D656D66643A202864656C6574656429 dev="hugetlbfs" ino=37184 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 123.039921][ T7769] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1544'. [ 124.447325][ T7811] netlink: 'syz.5.1560': attribute type 16 has an invalid length. [ 124.457131][ T28] audit: type=1400 audit(1772455701.192:492): avc: denied { mounton } for pid=7812 comm="syz.3.1562" path="/file1" dev="ramfs" ino=37295 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 124.465554][ T7811] netlink: 'syz.5.1560': attribute type 17 has an invalid length. [ 124.545976][ T7818] geneve2: left promiscuous mode [ 124.551015][ T7818] geneve2: left allmulticast mode [ 124.602670][ T50] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.614077][ T50] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.077612][ T7834] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1572'. [ 125.280818][ T7811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.293897][ T7811] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 125.327117][ T50] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.350584][ T50] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.408347][ T7842] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1575'. [ 125.508147][ T7850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1578'. [ 125.537542][ T7850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1578'. [ 125.562521][ T50] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.609437][ T50] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.618529][ T28] audit: type=1400 audit(1772455702.342:493): avc: denied { accept } for pid=7855 comm="syz.1.1580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 125.652124][ T50] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.660691][ T50] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.734265][ T7866] netlink: 'syz.1.1585': attribute type 27 has an invalid length. [ 125.795243][ T7866] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.802566][ T7866] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.941431][ T7866] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.954396][ T7866] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.006528][ T7866] geneve2: left promiscuous mode [ 126.011549][ T7866] geneve2: left allmulticast mode [ 126.096545][ T7867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.111111][ T7867] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.120867][ T7867] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 126.142692][ T7665] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.154329][ T7665] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.162766][ T7665] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.171171][ T7665] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.188001][ T7883] netlink: 'syz.2.1587': attribute type 16 has an invalid length. [ 126.197343][ T7883] netlink: 'syz.2.1587': attribute type 17 has an invalid length. [ 126.200659][ T7881] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1588'. [ 126.254616][ T7883] tipc: Resetting bearer [ 126.260284][ T7883] tipc: Resetting bearer [ 126.271094][ T7883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.285239][ T7883] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 126.471628][ T7890] tipc: Resetting bearer [ 127.832882][ T8082] ================================================================== [ 127.841187][ T8082] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 127.848304][ T8082] [ 127.850617][ T8082] read-write to 0xffff888237d2a8a4 of 4 bytes by task 7878 on cpu 1: [ 127.858668][ T8082] wq_worker_running+0x95/0x120 [ 127.863515][ T8082] synchronize_rcu_expedited+0x5f8/0x770 [ 127.869145][ T8082] synchronize_rcu+0x35/0x2e0 [ 127.873812][ T8082] xfrm_state_gc_task+0x98/0x650 [ 127.878738][ T8082] process_scheduled_works+0x4de/0x9e0 [ 127.884204][ T8082] worker_thread+0x581/0x770 [ 127.888787][ T8082] kthread+0x22a/0x280 [ 127.892850][ T8082] ret_from_fork+0x150/0x360 [ 127.897450][ T8082] ret_from_fork_asm+0x1a/0x30 [ 127.902342][ T8082] [ 127.904666][ T8082] read to 0xffff888237d2a8a4 of 4 bytes by task 8082 on cpu 0: [ 127.912213][ T8082] kick_pool+0x49/0x2d0 [ 127.916364][ T8082] __queue_work+0x896/0xaf0 [ 127.920859][ T8082] queue_work_on+0xa9/0x140 [ 127.925357][ T8082] xfrm_state_find+0x1cc4/0x3270 [ 127.930291][ T8082] xfrm_resolve_and_create_bundle+0x592/0x1f50 [ 127.936526][ T8082] xfrm_lookup_with_ifid+0x443/0x1590 [ 127.941894][ T8082] xfrm_lookup_route+0x3a/0x110 [ 127.946749][ T8082] ip_route_output_flow+0xdb/0x110 [ 127.951870][ T8082] udp_sendmsg+0x1383/0x1590 [ 127.956468][ T8082] inet_sendmsg+0xac/0xd0 [ 127.960800][ T8082] ____sys_sendmsg+0x53a/0x600 [ 127.965580][ T8082] ___sys_sendmsg+0x195/0x1e0 [ 127.970252][ T8082] __sys_sendmmsg+0x185/0x320 [ 127.974933][ T8082] __x64_sys_sendmmsg+0x57/0x70 [ 127.979866][ T8082] x64_sys_call+0x27aa/0x3020 [ 127.984536][ T8082] do_syscall_64+0x12c/0x370 [ 127.989110][ T8082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.994997][ T8082] [ 127.997305][ T8082] value changed: 0x00000000 -> 0x00000001 [ 128.003004][ T8082] [ 128.005314][ T8082] Reported by Kernel Concurrency Sanitizer on: [ 128.011455][ T8082] CPU: 0 UID: 0 PID: 8082 Comm: syz.0.1629 Not tainted syzkaller #0 PREEMPT(full) [ 128.020742][ T8082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 128.030782][ T8082] ==================================================================