last executing test programs: 25.586500703s ago: executing program 0 (id=346): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xffffffff}}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x2, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) 25.510132498s ago: executing program 0 (id=348): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002300)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b40)=@delchain={0x34, 0x2e, 0x1, 0x70bd2f, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffe9, 0xffff}, {0x0, 0x1a}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x44080) 25.421454623s ago: executing program 0 (id=349): socket$kcm(0x23, 0x5, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc0b0) syz_open_dev$usbfs(0x0, 0xb, 0x101301) 25.285667881s ago: executing program 0 (id=351): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@errors_remount}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0xa}}, {@journal_dev={'journal_dev', 0x3d, 0x4}}]}, 0x3, 0x43d, &(0x7f0000000580)="$eJzs3MtvG8UfAPDvrp3219cvAZVHH0CgICoeSZOW0gMXEEgcQEKCQzmGJK1C3QYlQaJVBIFDOaJK3BFHJP4CTnBBwAmJK9xRpQrl0sLJaO3d2nHsNDFOXPDnI607szvWzNe7Y8/sdBPAwBrNXpKI/RHxa0QM17NrC4zW/7m1ujz95+rydBLV6pt/JLVyN1eXp4uixfv2FZlyPXGkTb2Ll69cmKpUZhfy/PjSxffGFy9feXbu4tT52fOzlybPnDl1cuL505PP9STOLK6bhz+cP3ro1bevvT599to7P36dFPG3xNEjoxsdfKJa7XF1/XWgKZ2U+9gQtqSUd9OhWv8fjlI0Tt5wvPJJXxsHbKtqtVq9v/PhlSrwH5ZEv1sA9EfxQ5/Nf4tth4Yed4UbL9YnQFnct/KtfqQcaV5mqGV+20ujEXF25a8vsi225z4EAMAa32bjn2fajf/SaL4v9P98DWUkIu6JiHsj4nREHIyI+yJqZR+IiAe3WH/rIsn68U96vavANikb/72Qr21lWxqN+HMjpTx3oBb/UHJurjJ7Iv9MjsfQ7iw/sUEd3738y2edjjWP/7Ita0MxFmy20pSemVqa6jrgFjc+jjhcbsTfGP8mt1cCkog4FBGHu6xj7qmvjnY6ttn42+rBOlP1y4gn6+d/JVriLyQbr0+O/y8qsyfGi6tivZ9+vvpGp/r/Ufw9kJ3/vdH+/OdGkub12sWt13H1t087zmnuHH96vbx77Xuy639X8taafR9MLS0tTETsSl6rN7qxv7Qw2VJuslE+i//4sXbxp7XvuOKTOBIR2UX8UEQ8HBGP5G1/NCIei4hjG8T/w0uPv9t9/Nsri39mS+e/kdgVrXvaJ0oXvv9mTaUjW4k/O/+naqnj+Z7NfP9tpl3dXc0AAADw75NGxP5I0rHb6TQdG6v/H/6DsTetzC8uPX1u/v1LM/VnBEZiKC3udA033Q+dyKf1RX6yJX8yv2/8eWlPLT82PV+Z6XfwMOD2dej/md9L/W4dsO26W0dLe94OYOd5XhMGl/4Pg0v/h8HVpv/v6Uc7gJ3X7vf/oz60A9h55abX/G+CAQPC/B8Gl/4Pg0v/h4G0uCfu/JC8hMS6RKR3RTMktinR728mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA3vg7AAD//yMi44c=") r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf94b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x110) preadv2(r2, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1) 25.005820828s ago: executing program 0 (id=358): setfsgid(0xee00) r0 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000640)="b9ff0300600d690cffad14f086f8", 0x0, 0x100e08, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) syz_open_procfs(r0, &(0x7f0000000040)='fdinfo/3\x00') 24.017452077s ago: executing program 0 (id=379): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1b459d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x6025, 0x4005, 0xb, 0x0, 0x5, 0x7, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x0) 24.017278797s ago: executing program 32 (id=379): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1b459d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x6025, 0x4005, 0xb, 0x0, 0x5, 0x7, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x0) 3.427597135s ago: executing program 2 (id=762): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r1, @in6={{0xa, 0x4e24, 0x5, @empty, 0x2800}}, 0xf, 0x8000, 0x20000, 0x0, 0xcd, 0x0, 0x4}, 0x9c) 3.331536031s ago: executing program 2 (id=765): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x212200, 0x162) socket$nl_route(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_clone3(&(0x7f00000004c0)={0xe12d480, &(0x7f0000000480), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x8, 0x0) 3.16504689s ago: executing program 5 (id=774): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000880)='./file0\x00', 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) 3.092164165s ago: executing program 5 (id=778): mknod(&(0x7f0000000680)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000640)='./file0\x00', 0x149800, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000), 0x560c89bb) r4 = creat(&(0x7f0000000200)='./file0\x00', 0x20) splice(r2, 0x0, r4, 0x0, 0x8000, 0x0) 2.738893736s ago: executing program 2 (id=792): syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, 0x0) r0 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/59, 0xfdef}], 0x1}, 0x80) r1 = socket$kcm(0x1e, 0x4, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x4, 0x10000000}, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0x0, 0x1000000000, 0x0, 0xd}, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[], 0xfdef) 2.222525367s ago: executing program 5 (id=805): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000ac0)='\a', 0x1}], 0x1, &(0x7f0000000b80)=ANY=[], 0xd0}}], 0x1, 0x24044c41) close_range(r0, 0xffffffffffffffff, 0x0) 2.202680358s ago: executing program 5 (id=807): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x31000000, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x15\x00'}]}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) fstat(r0, 0x0) close(r0) 2.128141112s ago: executing program 5 (id=808): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 2.095644705s ago: executing program 5 (id=809): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x8000000000000000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) 1.879440358s ago: executing program 2 (id=811): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r0, &(0x7f0000000940), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) bind$vsock_stream(r1, &(0x7f0000000180)={0x28, 0x0, 0x2711}, 0x10) 1.468796962s ago: executing program 1 (id=817): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x25, 0xfffffffffffffffd, 0x70bd2a, 0x25dfdbfe, {0x15}}, 0x14}, 0x1, 0x0, 0x0, 0x4004019}, 0x240000c4) 1.008582469s ago: executing program 2 (id=819): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, 0x0, 0x0, 0x117c, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7af, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000c8e000/0x3000)=nil) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 763.804274ms ago: executing program 1 (id=822): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) r0 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r0, 0xc) 745.241575ms ago: executing program 3 (id=823): pipe(0x0) io_setup(0x3ff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40800) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)="fe0000", 0x3, 0xffffffffffffffff) 695.893358ms ago: executing program 1 (id=825): arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x1) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7a, 0x0, @perf_config_ext={0x8001, 0xf}, 0x0, 0x2e, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x68, 0x2, 0x6, 0x5, 0x0, 0x3000000, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6d23}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 694.717938ms ago: executing program 2 (id=826): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) r3 = openat$cgroup_freezer_state(r1, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f00000000c0)='THAWED\x00', 0x7) 650.688601ms ago: executing program 4 (id=827): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) sendto$packet(r0, &(0x7f0000000080)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @local}, 0x14) 602.699704ms ago: executing program 1 (id=828): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fcntl$setlease(r2, 0x400, 0x1) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 562.586446ms ago: executing program 3 (id=829): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write$binfmt_format(r0, &(0x7f0000000100)='0\x00', 0x2) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb3", 0x5) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(0x0, 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) 561.945626ms ago: executing program 4 (id=830): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x22, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x9, 0x7}, 0xec25, 0x4085, 0xb, 0x4, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0xcc001, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa, 0x0, 0x6}}}}]}, 0x44}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd25, 0x60000000, {0x60, 0x0, 0x0, r2, {0x0, 0x9}, {0x0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 535.427727ms ago: executing program 1 (id=831): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_io_uring_setup(0x6d98, &(0x7f0000000480)={0x0, 0x446, 0x80, 0x1, 0xe4}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd=r0, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r0, 0x22d0, 0x20, 0x0, 0x0, 0x0) 506.16218ms ago: executing program 4 (id=832): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x38, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_ACT={0x4}]}}]}, 0x38}}, 0x0) 455.173472ms ago: executing program 3 (id=833): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1}) r1 = io_uring_setup(0x1b7a, &(0x7f0000000040)={0x0, 0xa8bf, 0xc000, 0x7, 0x20002f7}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x80, 0x0, 0x4000, 0x20000000}}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0xeffd) 410.273515ms ago: executing program 4 (id=834): socket$phonet_pipe(0x23, 0x5, 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) close(0x3) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc780"], 0x120}}, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x400, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) 372.538167ms ago: executing program 3 (id=835): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = socket(0x28, 0x801, 0x0) close(0x3) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 365.854028ms ago: executing program 4 (id=836): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) r1 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='lo\x00', 0x10) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r2 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) 323.87676ms ago: executing program 3 (id=837): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffdffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 321.26085ms ago: executing program 1 (id=838): move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x58eb, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x8, 0xc4}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='+'], 0x50) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) 316.577141ms ago: executing program 4 (id=839): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000080)=0x5, 0x1f) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xa1}], 0x2, 0x0, 0x0) 0s ago: executing program 3 (id=840): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x53a1bd79, 0x7, 0x9, 0x86, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000004000000000000000000001800000004000040000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) kernel console output (not intermixed with test programs): [ 23.334800][ T29] audit: type=1400 audit(1769775212.986:62): avc: denied { search } for pid=3193 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.356807][ T29] audit: type=1400 audit(1769775212.986:63): avc: denied { search } for pid=3193 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=478 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.382120][ T29] audit: type=1400 audit(1769775212.986:64): avc: denied { search } for pid=3193 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.405043][ T29] audit: type=1400 audit(1769775212.986:65): avc: denied { search } for pid=3193 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.428482][ T29] audit: type=1400 audit(1769775212.986:66): avc: denied { read open } for pid=3194 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.41' (ED25519) to the list of known hosts. [ 28.676348][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 28.676366][ T29] audit: type=1400 audit(1769775218.326:70): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.705443][ T29] audit: type=1400 audit(1769775218.356:71): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.707781][ T3298] cgroup: Unknown subsys name 'net' [ 28.733198][ T29] audit: type=1400 audit(1769775218.386:72): avc: denied { unmount } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.931399][ T3298] cgroup: Unknown subsys name 'cpuset' [ 28.937637][ T3298] cgroup: Unknown subsys name 'rlimit' [ 29.109542][ T29] audit: type=1400 audit(1769775218.756:73): avc: denied { setattr } for pid=3298 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.132918][ T29] audit: type=1400 audit(1769775218.766:74): avc: denied { create } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.153446][ T29] audit: type=1400 audit(1769775218.766:75): avc: denied { write } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.173822][ T29] audit: type=1400 audit(1769775218.766:76): avc: denied { read } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.194121][ T29] audit: type=1400 audit(1769775218.776:77): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 29.215089][ T29] audit: type=1400 audit(1769775218.796:78): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 29.240004][ T29] audit: type=1400 audit(1769775218.796:79): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 29.261231][ T3303] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 29.321555][ T3298] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.531542][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 30.572716][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 30.622180][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 30.659869][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.667035][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.674291][ T3317] bridge_slave_0: entered allmulticast mode [ 30.680983][ T3317] bridge_slave_0: entered promiscuous mode [ 30.711356][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.718535][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.725927][ T3317] bridge_slave_1: entered allmulticast mode [ 30.732454][ T3317] bridge_slave_1: entered promiscuous mode [ 30.770007][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.779285][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 30.788526][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 30.807250][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.814373][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.821645][ T3312] bridge_slave_0: entered allmulticast mode [ 30.828035][ T3312] bridge_slave_0: entered promiscuous mode [ 30.835973][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.860121][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.867279][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.874532][ T3312] bridge_slave_1: entered allmulticast mode [ 30.881253][ T3312] bridge_slave_1: entered promiscuous mode [ 30.905853][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.912960][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.920197][ T3319] bridge_slave_0: entered allmulticast mode [ 30.926861][ T3319] bridge_slave_0: entered promiscuous mode [ 30.938518][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.945816][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.952981][ T3319] bridge_slave_1: entered allmulticast mode [ 30.959662][ T3319] bridge_slave_1: entered promiscuous mode [ 30.976180][ T3317] team0: Port device team_slave_0 added [ 31.000263][ T3317] team0: Port device team_slave_1 added [ 31.007014][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.017273][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.037066][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.052336][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.078796][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.085864][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.111819][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.136913][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.144052][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.151332][ T3315] bridge_slave_0: entered allmulticast mode [ 31.158063][ T3315] bridge_slave_0: entered promiscuous mode [ 31.170328][ T3319] team0: Port device team_slave_0 added [ 31.176239][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.183431][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.209399][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.221169][ T3312] team0: Port device team_slave_0 added [ 31.235482][ T3312] team0: Port device team_slave_1 added [ 31.241361][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.248501][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.255898][ T3315] bridge_slave_1: entered allmulticast mode [ 31.262364][ T3315] bridge_slave_1: entered promiscuous mode [ 31.269548][ T3319] team0: Port device team_slave_1 added [ 31.276902][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.284004][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.291201][ T3311] bridge_slave_0: entered allmulticast mode [ 31.297722][ T3311] bridge_slave_0: entered promiscuous mode [ 31.309099][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.316390][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.323575][ T3311] bridge_slave_1: entered allmulticast mode [ 31.330207][ T3311] bridge_slave_1: entered promiscuous mode [ 31.360883][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.367885][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.393833][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.419497][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.426546][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.452523][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.467730][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.474753][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.501032][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.512871][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.524393][ T3317] hsr_slave_0: entered promiscuous mode [ 31.530446][ T3317] hsr_slave_1: entered promiscuous mode [ 31.536935][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.544038][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.570003][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.582475][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.599144][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.615942][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.667355][ T3315] team0: Port device team_slave_0 added [ 31.680030][ T3319] hsr_slave_0: entered promiscuous mode [ 31.686118][ T3319] hsr_slave_1: entered promiscuous mode [ 31.692034][ T3319] debugfs: 'hsr0' already exists in 'hsr' [ 31.697759][ T3319] Cannot create hsr debugfs directory [ 31.705611][ T3312] hsr_slave_0: entered promiscuous mode [ 31.711936][ T3312] hsr_slave_1: entered promiscuous mode [ 31.717934][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 31.723723][ T3312] Cannot create hsr debugfs directory [ 31.730207][ T3315] team0: Port device team_slave_1 added [ 31.741506][ T3311] team0: Port device team_slave_0 added [ 31.767552][ T3311] team0: Port device team_slave_1 added [ 31.802413][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.809468][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.835520][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.849431][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.856452][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.882439][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.900604][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.907594][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.933537][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.969322][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.976356][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.002300][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.044501][ T3315] hsr_slave_0: entered promiscuous mode [ 32.050848][ T3315] hsr_slave_1: entered promiscuous mode [ 32.056704][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 32.062496][ T3315] Cannot create hsr debugfs directory [ 32.114841][ T3311] hsr_slave_0: entered promiscuous mode [ 32.121365][ T3311] hsr_slave_1: entered promiscuous mode [ 32.127214][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 32.133038][ T3311] Cannot create hsr debugfs directory [ 32.216443][ T3317] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.231115][ T3317] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.252869][ T3317] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.271746][ T3317] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.306282][ T3319] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.315531][ T3319] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.325041][ T3319] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.336996][ T3319] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.366600][ T3312] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.376427][ T3312] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.389932][ T3312] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.411599][ T3312] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.437147][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.451158][ T3315] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.459766][ T3315] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.469527][ T3315] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.484871][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.492459][ T3315] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.523950][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.534647][ T3331] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.541834][ T3331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.558209][ T3331] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.565419][ T3331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.575814][ T3311] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.585501][ T3311] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.596615][ T3311] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.605227][ T3311] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.624492][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.656160][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.663340][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.673854][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.681102][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.717957][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.764775][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.789559][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.797545][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.809665][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.822535][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.829645][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.857738][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.866270][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.873389][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.882200][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.889300][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.902570][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.923280][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.930434][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.943864][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.950992][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.978579][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.985834][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.015121][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.156897][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.195642][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.206994][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.234155][ T3317] veth0_vlan: entered promiscuous mode [ 33.253219][ T3317] veth1_vlan: entered promiscuous mode [ 33.286754][ T3317] veth0_macvtap: entered promiscuous mode [ 33.314146][ T3317] veth1_macvtap: entered promiscuous mode [ 33.330064][ T3312] veth0_vlan: entered promiscuous mode [ 33.344912][ T3319] veth0_vlan: entered promiscuous mode [ 33.359543][ T3312] veth1_vlan: entered promiscuous mode [ 33.378440][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.388362][ T3319] veth1_vlan: entered promiscuous mode [ 33.409350][ T3312] veth0_macvtap: entered promiscuous mode [ 33.422677][ T3319] veth0_macvtap: entered promiscuous mode [ 33.440322][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.453571][ T3319] veth1_macvtap: entered promiscuous mode [ 33.462791][ T3312] veth1_macvtap: entered promiscuous mode [ 33.474168][ T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.490108][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.501119][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.509578][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.523035][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.532037][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.552001][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.562586][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.571973][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.581178][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.591623][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.603960][ T3311] veth0_vlan: entered promiscuous mode [ 33.616832][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.624759][ T3315] veth0_vlan: entered promiscuous mode [ 33.638145][ T980] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.648149][ T3311] veth1_vlan: entered promiscuous mode [ 33.662038][ T3315] veth1_vlan: entered promiscuous mode [ 33.664052][ T3317] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.682918][ T980] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.698885][ T980] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.716922][ T3311] veth0_macvtap: entered promiscuous mode [ 33.723328][ T980] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.746054][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 33.746074][ T29] audit: type=1400 audit(1769775223.386:99): avc: denied { read write } for pid=3317 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 33.776479][ T29] audit: type=1400 audit(1769775223.386:100): avc: denied { open } for pid=3317 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 33.800817][ T29] audit: type=1400 audit(1769775223.386:101): avc: denied { ioctl } for pid=3317 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 33.821942][ T3311] veth1_macvtap: entered promiscuous mode [ 33.859519][ T3315] veth0_macvtap: entered promiscuous mode [ 33.874578][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.908349][ T3315] veth1_macvtap: entered promiscuous mode [ 33.923240][ T29] audit: type=1400 audit(1769775223.566:102): avc: denied { map_create } for pid=3486 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 33.942239][ T29] audit: type=1400 audit(1769775223.566:103): avc: denied { bpf } for pid=3486 comm="syz.4.5" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 33.949815][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.962600][ T29] audit: type=1400 audit(1769775223.566:104): avc: denied { map_read map_write } for pid=3486 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 34.005446][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.045579][ T980] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.057596][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.090990][ T980] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.099851][ T980] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.111245][ T29] audit: type=1400 audit(1769775223.636:105): avc: denied { prog_load } for pid=3486 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 34.130454][ T29] audit: type=1400 audit(1769775223.636:106): avc: denied { perfmon } for pid=3486 comm="syz.4.5" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 34.151022][ T29] audit: type=1400 audit(1769775223.646:107): avc: denied { create } for pid=3486 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 34.170713][ T29] audit: type=1400 audit(1769775223.646:108): avc: denied { prog_run } for pid=3486 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 34.198126][ T980] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.217233][ T980] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.255064][ T980] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.280158][ T980] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.341031][ T980] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.352796][ T3500] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 34.361466][ C1] hrtimer: interrupt took 67227 ns [ 34.385567][ T3503] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.420524][ T3506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 34.447877][ T3506] Zero length message leads to an empty skb [ 35.095698][ T3554] loop0: detected capacity change from 0 to 128 [ 35.185462][ T3554] syz.0.28: attempt to access beyond end of device [ 35.185462][ T3554] loop0: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 35.199115][ T3554] syz.0.28: attempt to access beyond end of device [ 35.199115][ T3554] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 35.212977][ T3554] syz.0.28: attempt to access beyond end of device [ 35.212977][ T3554] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 35.229768][ T3554] syz.0.28: attempt to access beyond end of device [ 35.229768][ T3554] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 35.247172][ T3554] syz.0.28: attempt to access beyond end of device [ 35.247172][ T3554] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 35.261286][ T3554] syz.0.28: attempt to access beyond end of device [ 35.261286][ T3554] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 35.276892][ T3554] syz.0.28: attempt to access beyond end of device [ 35.276892][ T3554] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 35.299683][ T3554] syz.0.28: attempt to access beyond end of device [ 35.299683][ T3554] loop0: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 35.376462][ T3560] bond1: option miimon: invalid value (18446744073709551607) [ 35.384006][ T3560] bond1: option miimon: allowed values 0 - 2147483647 [ 35.414628][ T3560] bond1 (unregistering): Released all slaves [ 35.494351][ T3562] bridge_slave_0: left allmulticast mode [ 35.500182][ T3562] bridge_slave_0: left promiscuous mode [ 35.505996][ T3562] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.521839][ T3562] bridge_slave_1: left allmulticast mode [ 35.527608][ T3562] bridge_slave_1: left promiscuous mode [ 35.533349][ T3562] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.552746][ T3562] bond0: (slave bond_slave_0): Releasing backup interface [ 35.563627][ T3562] bond0: (slave bond_slave_1): Releasing backup interface [ 35.584822][ T3562] team0: Port device team_slave_0 removed [ 35.593959][ T3562] team0: Port device team_slave_1 removed [ 35.601412][ T3562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.608867][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 35.628611][ T3570] loop1: detected capacity change from 0 to 1024 [ 35.639393][ T3562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.646887][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 35.668188][ T3562] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 35.735241][ T3570] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.33: bad orphan inode 134217728 [ 35.746734][ T3570] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.268854][ T3588] loop4: detected capacity change from 0 to 128 [ 36.290962][ T3590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.40'. [ 36.320243][ T3588] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 36.349798][ T3588] ext4 filesystem being mounted at /7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 36.383039][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.452032][ T3319] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 36.554920][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.556202][ T3604] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.591141][ T36] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 36.693613][ T3618] loop4: detected capacity change from 0 to 128 [ 36.743357][ T3617] sctp: [Deprecated]: syz.1.50 (pid 3617) Use of int in max_burst socket option deprecated. [ 36.743357][ T3617] Use struct sctp_assoc_value instead [ 36.769698][ T3614] io-wq is not configured for unbound workers [ 36.796049][ T3622] loop1: detected capacity change from 0 to 1024 [ 36.827865][ T3624] syz.4.52: attempt to access beyond end of device [ 36.827865][ T3624] loop4: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 36.864446][ T3624] syz.4.52: attempt to access beyond end of device [ 36.864446][ T3624] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 36.887922][ T3622] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.928818][ T3622] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.54: missing EA_INODE flag [ 36.954344][ T3622] EXT4-fs (loop1): Remounting filesystem read-only [ 36.977994][ T3622] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 37.098637][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.516769][ T3657] loop3: detected capacity change from 0 to 1024 [ 37.552170][ T3657] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.592254][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.739181][ T3674] loop3: detected capacity change from 0 to 1024 [ 37.762165][ T3678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.70'. [ 37.785618][ T3674] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.69: bad orphan inode 134217728 [ 37.785814][ T3678] vlan2: entered promiscuous mode [ 37.803708][ T3678] dummy0: entered promiscuous mode [ 37.818058][ T3674] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.884705][ T3686] loop4: detected capacity change from 0 to 1024 [ 37.891790][ T3686] ======================================================= [ 37.891790][ T3686] WARNING: The mand mount option has been deprecated and [ 37.891790][ T3686] and is ignored by this kernel. Remove the mand [ 37.891790][ T3686] option from the mount to silence this warning. [ 37.891790][ T3686] ======================================================= [ 37.931350][ T3686] EXT4-fs: Ignoring removed oldalloc option [ 37.937358][ T3686] EXT4-fs: Ignoring removed bh option [ 37.992487][ T3686] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.090879][ T3695] Illegal XDP return value 4294967294 on prog (id 24) dev N/A, expect packet loss! [ 38.179045][ T3700] capability: warning: `syz.0.78' uses 32-bit capabilities (legacy support in use) [ 38.218962][ T3700] tmpfs: Turning off swap in unprivileged tmpfs mounts unsupported [ 38.478506][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.542687][ T3712] loop0: detected capacity change from 0 to 1024 [ 38.582722][ T3712] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 38.588561][ T3718] netlink: 24 bytes leftover after parsing attributes in process `syz.3.87'. [ 38.730670][ T3712] System zones: 0-1, 3-36 [ 38.772471][ T3712] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.84: bad orphan inode 134217728 [ 38.817418][ T3712] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.019986][ T29] kauditd_printk_skb: 182 callbacks suppressed [ 39.020005][ T29] audit: type=1400 audit(1769775228.666:291): avc: denied { setopt } for pid=3730 comm="syz.3.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 39.081613][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.117850][ T29] audit: type=1400 audit(1769775228.766:292): avc: denied { create } for pid=3736 comm="syz.4.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 39.157564][ T3735] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.190851][ T29] audit: type=1400 audit(1769775228.786:293): avc: denied { create } for pid=3736 comm="syz.4.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 39.210172][ T29] audit: type=1400 audit(1769775228.796:294): avc: denied { read } for pid=3736 comm="syz.4.95" path="socket:[6187]" dev="sockfs" ino=6187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 39.237472][ T3735] bridge_slave_1: left allmulticast mode [ 39.243216][ T3735] bridge_slave_1: left promiscuous mode [ 39.249109][ T3735] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.287889][ T29] audit: type=1400 audit(1769775228.936:295): avc: denied { create } for pid=3739 comm="syz.1.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 39.310231][ T29] audit: type=1400 audit(1769775228.956:296): avc: denied { create } for pid=3739 comm="syz.1.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 39.336819][ T29] audit: type=1400 audit(1769775228.986:297): avc: denied { write } for pid=3739 comm="syz.1.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 39.356735][ T29] audit: type=1400 audit(1769775228.986:298): avc: denied { nlmsg_write } for pid=3739 comm="syz.1.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 39.405248][ T29] audit: type=1400 audit(1769775229.036:299): avc: denied { write } for pid=3739 comm="syz.1.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 39.429793][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.541821][ T3753] netlink: 4 bytes leftover after parsing attributes in process `syz.4.99'. [ 39.733960][ T29] audit: type=1400 audit(1769775229.376:300): avc: denied { remount } for pid=3755 comm="syz.3.109" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 40.034582][ T3774] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 40.084148][ T3774] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 40.171211][ T3777] 9p: Bad value for 'wfdno' [ 42.316610][ T3870] hub 8-0:1.0: USB hub found [ 42.335224][ T3870] hub 8-0:1.0: 8 ports detected [ 42.473092][ T3872] loop3: detected capacity change from 0 to 1024 [ 42.531024][ T3872] EXT4-fs: Ignoring removed oldalloc option [ 42.537060][ T3872] EXT4-fs: Ignoring removed bh option [ 42.585225][ T3872] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.415182][ T3891] loop4: detected capacity change from 0 to 1024 [ 43.466194][ T3891] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.127: bad orphan inode 134217728 [ 43.533322][ T3891] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.771664][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.873724][ T3903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.131'. [ 43.932432][ T3905] netlink: 12 bytes leftover after parsing attributes in process `syz.1.131'. [ 44.024423][ T3908] loop1: detected capacity change from 0 to 512 [ 44.041873][ T3908] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 44.086906][ T3908] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 44.133936][ T3908] EXT4-fs (loop1): Remounting filesystem read-only [ 44.147283][ T3908] __quota_error: 11 callbacks suppressed [ 44.147298][ T3908] Quota error (device loop1): write_blk: dquota write failed [ 44.160554][ T3908] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 44.183658][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.229092][ T3908] Quota error (device loop1): write_blk: dquota write failed [ 44.242182][ T3914] netlink: 16 bytes leftover after parsing attributes in process `syz.4.134'. [ 44.260780][ T3908] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 44.290665][ T3908] EXT4-fs (loop1): 1 truncate cleaned up [ 44.296770][ T3908] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.319447][ T29] audit: type=1326 audit(1769775233.966:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3916 comm="syz.4.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe420f2aeb9 code=0x7ffc0000 [ 44.342764][ T29] audit: type=1326 audit(1769775233.966:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3916 comm="syz.4.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe420f2aeb9 code=0x7ffc0000 [ 44.366054][ T29] audit: type=1326 audit(1769775233.966:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3916 comm="syz.4.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe420f2aeb9 code=0x7ffc0000 [ 44.389339][ T29] audit: type=1326 audit(1769775233.966:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3916 comm="syz.4.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe420f2aeb9 code=0x7ffc0000 [ 44.412588][ T29] audit: type=1326 audit(1769775233.966:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3916 comm="syz.4.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe420f2aeb9 code=0x7ffc0000 [ 44.435880][ T29] audit: type=1326 audit(1769775233.966:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3916 comm="syz.4.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe420f2aeb9 code=0x7ffc0000 [ 44.474094][ T3908] syz.1.132 (3908) used greatest stack depth: 9152 bytes left [ 44.519605][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.561224][ T3920] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 44.614150][ T3922] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 44.721978][ T3936] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.142'. [ 44.731115][ T3936] netlink: 24 bytes leftover after parsing attributes in process `syz.1.142'. [ 44.791934][ T3929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.141'. [ 44.800870][ T3929] netlink: 28 bytes leftover after parsing attributes in process `syz.2.141'. [ 44.833049][ T3929] geneve0: entered promiscuous mode [ 44.838403][ T3929] geneve0: entered allmulticast mode [ 45.238617][ T3954] loop2: detected capacity change from 0 to 512 [ 45.247674][ T3954] journal_path: Non-blockdev passed as './bus' [ 45.253901][ T3954] EXT4-fs: error: could not find journal device path [ 45.511790][ T3968] loop4: detected capacity change from 0 to 512 [ 45.518886][ T3968] EXT4-fs: Ignoring removed bh option [ 45.576254][ T3968] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 45.635090][ T3968] EXT4-fs (loop4): 1 truncate cleaned up [ 45.681492][ T3968] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.703212][ T3978] loop1: detected capacity change from 0 to 128 [ 45.770924][ T3382] Process accounting resumed [ 45.775597][ T3382] FAT-fs (loop1): error, corrupted file size (i_pos 548, 512) [ 45.783145][ T3382] FAT-fs (loop1): Filesystem has been set read-only [ 45.795994][ T3968] netlink: 32 bytes leftover after parsing attributes in process `syz.4.155'. [ 45.895910][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.970289][ T3991] netlink: 24 bytes leftover after parsing attributes in process `syz.2.163'. [ 45.994557][ T3993] gretap1: entered promiscuous mode [ 46.192572][ T4008] loop2: detected capacity change from 0 to 1024 [ 46.250063][ T4008] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.172: bad orphan inode 134217728 [ 46.285664][ T4008] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.784350][ T4033] capability: warning: `syz.0.181' uses deprecated v2 capabilities in a way that may be insecure [ 47.094655][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.140749][ T4043] netlink: 12 bytes leftover after parsing attributes in process `syz.3.186'. [ 47.156931][ T4043] netlink: 92 bytes leftover after parsing attributes in process `syz.3.186'. [ 47.274716][ T4052] loop3: detected capacity change from 0 to 512 [ 47.284094][ T4052] EXT4-fs: Ignoring removed orlov option [ 47.289932][ T4052] EXT4-fs: Ignoring removed mblk_io_submit option [ 47.314903][ T4051] 9pnet: p9_errstr2errno: server reported unknown error ÿÿÿÿÛß% [ 47.335805][ T4052] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.190: corrupted in-inode xattr: e_value size too large [ 47.392419][ T4052] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.190: couldn't read orphan inode 15 (err -117) [ 47.563687][ T4052] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.714254][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.753217][ T4065] netlink: 12 bytes leftover after parsing attributes in process `syz.1.195'. [ 47.835252][ T4074] netlink: 12 bytes leftover after parsing attributes in process `syz.0.199'. [ 48.866892][ T4152] syz.1.230 uses obsolete (PF_INET,SOCK_PACKET) [ 48.968831][ T4162] loop0: detected capacity change from 0 to 512 [ 48.989512][ T4162] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 49.007129][ T4162] EXT4-fs (loop0): orphan cleanup on readonly fs [ 49.016099][ T4162] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.234: Allocating blocks 41-42 which overlap fs metadata [ 49.030323][ T4162] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.234: Allocating blocks 41-42 which overlap fs metadata [ 49.044451][ T4162] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.234: Failed to acquire dquot type 1 [ 49.056255][ T4162] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 49.071655][ T4162] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.234: corrupted inode contents [ 49.084171][ T4162] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #12: comm syz.0.234: mark_inode_dirty error [ 49.095922][ T4162] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.234: corrupted inode contents [ 49.108086][ T4162] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.234: mark_inode_dirty error [ 49.120457][ T4162] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.234: corrupted inode contents [ 49.134568][ T4162] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 49.143686][ T4162] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.234: corrupted inode contents [ 49.155863][ T4162] EXT4-fs error (device loop0): ext4_truncate:4635: inode #12: comm syz.0.234: mark_inode_dirty error [ 49.167956][ T4162] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 49.178765][ T4162] EXT4-fs (loop0): 1 truncate cleaned up [ 49.185192][ T4162] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 49.210044][ T29] kauditd_printk_skb: 174 callbacks suppressed [ 49.210061][ T29] audit: type=1400 audit(1769775238.856:488): avc: denied { ioctl } for pid=4160 comm="syz.0.234" path="/dev/virtual_nci" dev="devtmpfs" ino=132 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 49.281827][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.297936][ T29] audit: type=1400 audit(1769775238.946:489): avc: denied { ioctl } for pid=4177 comm="syz.4.239" path="socket:[6807]" dev="sockfs" ino=6807 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 49.359307][ T4184] loop0: detected capacity change from 0 to 512 [ 49.390668][ T4184] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 49.405793][ T4184] EXT4-fs (loop0): 1 truncate cleaned up [ 49.413888][ T4184] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.451556][ T4189] loop4: detected capacity change from 0 to 512 [ 49.459941][ T4189] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 49.473640][ T4184] EXT4-fs error (device loop0): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.0.238: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 49.498501][ T4184] EXT4-fs error (device loop0): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.0.238: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 49.523550][ T4189] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.536568][ T4189] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.566043][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.634326][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.696331][ T4202] loop4: detected capacity change from 0 to 512 [ 49.730097][ T4205] gre1: entered promiscuous mode [ 49.735198][ T4205] gre1: entered allmulticast mode [ 49.752036][ T4202] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.782749][ T4202] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.827219][ T29] audit: type=1400 audit(1769775239.476:490): avc: denied { append } for pid=4201 comm="syz.4.247" path="/53/file1/memory.events" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 49.902502][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.921596][ T4223] ref_ctr_offset mismatch. inode: 0x101 offset: 0x0 ref_ctr_offset(old): 0x100 ref_ctr_offset(new): 0x0 [ 49.964749][ T29] audit: type=1400 audit(1769775239.616:491): avc: denied { accept } for pid=4229 comm="syz.2.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 49.984915][ T29] audit: type=1400 audit(1769775239.616:492): avc: denied { write } for pid=4229 comm="syz.2.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.014951][ T29] audit: type=1400 audit(1769775239.666:493): avc: denied { read } for pid=4229 comm="syz.2.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.076399][ T29] audit: type=1400 audit(1769775239.726:494): avc: denied { watch watch_reads } for pid=4234 comm="syz.4.256" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 50.118825][ T4238] loop4: detected capacity change from 0 to 512 [ 50.125941][ T4238] EXT4-fs: Ignoring removed mblk_io_submit option [ 50.133185][ T4238] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 50.160989][ T4238] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 50.518232][ T4248] sg_write: process 99 (syz.0.260) changed security contexts after opening file descriptor, this is not allowed. [ 50.520658][ T29] audit: type=1400 audit(1769775240.166:495): avc: denied { append } for pid=4247 comm="syz.0.260" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 50.553925][ T29] audit: type=1400 audit(1769775240.166:496): avc: denied { open } for pid=4247 comm="syz.0.260" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 50.608142][ T29] audit: type=1326 audit(1769775240.256:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4249 comm="syz.4.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe420f2aeb9 code=0x7ffc0000 [ 50.653024][ T4258] __nla_validate_parse: 3 callbacks suppressed [ 50.653072][ T4258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.265'. [ 51.075905][ T4297] netlink: 12 bytes leftover after parsing attributes in process `syz.1.277'. [ 51.495252][ T4328] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.517111][ T4330] netlink: 'syz.3.288': attribute type 6 has an invalid length. [ 51.528610][ T4331] loop0: detected capacity change from 0 to 512 [ 51.545935][ T4331] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.290: inode has both inline data and extents flags [ 51.560113][ T4331] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.290: couldn't read orphan inode 15 (err -117) [ 51.574909][ T4331] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 51.617094][ T4328] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.646081][ T4333] EXT4-fs (loop0): shut down requested (2) [ 51.695265][ T4328] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.767976][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 51.789766][ T4328] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.934802][ T3813] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.960882][ T3813] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.969173][ T3813] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.996510][ T3813] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.041076][ T4352] netlink: 'syz.2.297': attribute type 4 has an invalid length. [ 52.104477][ T4355] xt_hashlimit: size too large, truncated to 1048576 [ 52.719948][ T4424] netlink: 188 bytes leftover after parsing attributes in process `syz.1.320'. [ 52.729012][ T4424] netlink: 188 bytes leftover after parsing attributes in process `syz.1.320'. [ 52.873320][ T4440] netlink: 14544 bytes leftover after parsing attributes in process `syz.1.325'. [ 53.438933][ T4467] loop0: detected capacity change from 0 to 512 [ 53.464099][ T4470] netlink: 132 bytes leftover after parsing attributes in process `syz.3.337'. [ 53.495760][ T4467] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.511033][ T4467] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.566832][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.733011][ T4494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.346'. [ 53.744593][ T4494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.346'. [ 53.796031][ T4498] netlink: 24 bytes leftover after parsing attributes in process `syz.0.348'. [ 54.031111][ T4506] loop0: detected capacity change from 0 to 512 [ 54.037962][ T4506] EXT4-fs: Ignoring removed nobh option [ 54.087470][ T4506] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 54.100619][ T4506] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 54.139416][ T4506] EXT4-fs (loop0): 1 truncate cleaned up [ 54.145905][ T4506] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.235443][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 54.235457][ T29] audit: type=1326 audit(1769775243.886:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4509 comm="syz.4.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fe420f2aeb9 code=0x7ffc0000 [ 54.285119][ T3315] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 11: block 54:freeing already freed block (bit 53); block bitmap corrupt. [ 54.318826][ T3315] EXT4-fs (loop0): Remounting filesystem read-only [ 54.450674][ T29] audit: type=1400 audit(1769775244.096:560): avc: denied { write } for pid=4530 comm="syz.4.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 54.470310][ T29] audit: type=1400 audit(1769775244.096:561): avc: denied { setopt } for pid=4530 comm="syz.4.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 54.532533][ T29] audit: type=1400 audit(1769775244.146:562): avc: denied { allowed } for pid=4529 comm="syz.1.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 54.828157][ T29] audit: type=1400 audit(1769775244.476:563): avc: denied { write } for pid=4544 comm="syz.3.368" path="socket:[8314]" dev="sockfs" ino=8314 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 54.893567][ T4549] netlink: 'syz.3.370': attribute type 1 has an invalid length. [ 54.918513][ T4338] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.929802][ T4549] 8021q: adding VLAN 0 to HW filter on device bond1 [ 54.953554][ T4549] bond1: (slave veth3): Enslaving as an active interface with a down link [ 55.017742][ T4549] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 55.037079][ T4549] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 55.134689][ T37] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.183888][ T37] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.244841][ T37] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.282682][ T29] audit: type=1400 audit(1769775244.936:564): avc: denied { map } for pid=4568 comm="syz.3.378" path="socket:[8365]" dev="sockfs" ino=8365 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 55.329969][ T29] audit: type=1400 audit(1769775244.936:565): avc: denied { read } for pid=4568 comm="syz.3.378" path="socket:[8365]" dev="sockfs" ino=8365 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 55.366396][ T37] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.473783][ T29] audit: type=1400 audit(1769775245.126:566): avc: denied { read } for pid=3040 comm="dhcpcd" name="n26" dev="tmpfs" ino=2166 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 55.495470][ T29] audit: type=1400 audit(1769775245.126:567): avc: denied { open } for pid=3040 comm="dhcpcd" path="/run/udev/data/n26" dev="tmpfs" ino=2166 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 55.518409][ T29] audit: type=1400 audit(1769775245.126:568): avc: denied { getattr } for pid=3040 comm="dhcpcd" path="/run/udev/data/n26" dev="tmpfs" ino=2166 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 55.763282][ T37] bond0 (unregistering): Released all slaves [ 55.846602][ T4601] netlink: 24 bytes leftover after parsing attributes in process `syz.3.385'. [ 55.866889][ T37] hsr_slave_0: left promiscuous mode [ 55.879041][ T37] hsr_slave_1: left promiscuous mode [ 55.908449][ T37] veth1_macvtap: left promiscuous mode [ 55.922466][ T37] veth0_macvtap: left promiscuous mode [ 55.933466][ T37] veth1_vlan: left promiscuous mode [ 55.945276][ T37] veth0_vlan: left promiscuous mode [ 56.046965][ T4609] process 'syz.2.387' launched '/dev/fd/3' with NULL argv: empty string added [ 56.255902][ T4613] loop3: detected capacity change from 0 to 1024 [ 56.293293][ T4613] EXT4-fs: Ignoring removed nobh option [ 56.318013][ T4622] ip6tnl1: entered promiscuous mode [ 56.367094][ T4613] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.390770][ T4571] chnl_net:caif_netlink_parms(): no params data found [ 56.510290][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.530750][ T4571] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.537874][ T4571] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.567165][ T4571] bridge_slave_0: entered allmulticast mode [ 56.574177][ T4571] bridge_slave_0: entered promiscuous mode [ 56.581964][ T4571] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.589076][ T4571] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.596540][ T4571] bridge_slave_1: entered allmulticast mode [ 56.666874][ T4571] bridge_slave_1: entered promiscuous mode [ 56.725765][ T4571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.776285][ T4571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.849709][ T4571] team0: Port device team_slave_0 added [ 56.869909][ T4571] team0: Port device team_slave_1 added [ 56.923144][ T4650] SELinux: failed to load policy [ 56.937360][ T4571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.944545][ T4571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.970517][ T4571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.046472][ T4571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.053623][ T4571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.079625][ T4571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.122026][ T4688] netlink: 24 bytes leftover after parsing attributes in process `syz.4.406'. [ 57.212879][ T4571] hsr_slave_0: entered promiscuous mode [ 57.229567][ T4571] hsr_slave_1: entered promiscuous mode [ 57.235478][ T4571] debugfs: 'hsr0' already exists in 'hsr' [ 57.241312][ T4571] Cannot create hsr debugfs directory [ 57.664558][ T4571] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 57.704845][ T4571] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 57.737790][ T4571] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 57.764725][ T4571] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 57.900707][ T4571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.925064][ T4571] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.944094][ T3826] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.951239][ T3826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.994818][ T3826] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.001937][ T3826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.196662][ T4571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.488805][ T4571] veth0_vlan: entered promiscuous mode [ 58.504761][ T4571] veth1_vlan: entered promiscuous mode [ 58.534953][ T4571] veth0_macvtap: entered promiscuous mode [ 58.545304][ T4571] veth1_macvtap: entered promiscuous mode [ 58.566182][ T4571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.595805][ T4571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.628185][ T37] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.660959][ T37] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.712376][ T37] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.757455][ T37] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.831628][ T4794] netlink: 16 bytes leftover after parsing attributes in process `syz.5.428'. [ 59.036349][ T4804] loop4: detected capacity change from 0 to 128 [ 59.058020][ T4808] SET target dimension over the limit! [ 59.087808][ T4804] FAT-fs (loop4): bogus number of directory entries (390) [ 59.095248][ T4804] FAT-fs (loop4): Can't find a valid FAT filesystem [ 59.207832][ T4822] loop3: detected capacity change from 0 to 512 [ 59.258602][ T4822] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 59.307246][ T4822] EXT4-fs (loop3): 1 truncate cleaned up [ 59.330912][ T4822] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.455011][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 59.455026][ T29] audit: type=1400 audit(1769775249.106:647): avc: denied { map } for pid=4821 comm="syz.3.441" path="/101/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/memory.stat" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 59.547273][ T29] audit: type=1400 audit(1769775249.196:648): avc: denied { ioctl } for pid=4844 comm="syz.4.448" path="socket:[8891]" dev="sockfs" ino=8891 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 59.706176][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.891627][ T29] audit: type=1400 audit(1769775249.546:649): avc: denied { create } for pid=4857 comm="syz.1.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 59.922391][ T4858] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 60.399365][ T29] audit: type=1326 audit(1769775250.046:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4875 comm="syz.5.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02bfb3aeb9 code=0x7ffc0000 [ 60.422770][ T29] audit: type=1326 audit(1769775250.046:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4875 comm="syz.5.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02bfb3aeb9 code=0x7ffc0000 [ 60.450237][ T4874] veth4: entered promiscuous mode [ 60.455420][ T4874] veth4: entered allmulticast mode [ 60.461267][ T29] audit: type=1326 audit(1769775250.046:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4875 comm="syz.5.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f02bfb3aeb9 code=0x7ffc0000 [ 60.484566][ T29] audit: type=1326 audit(1769775250.046:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4875 comm="syz.5.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02bfb3aeb9 code=0x7ffc0000 [ 60.507840][ T29] audit: type=1326 audit(1769775250.046:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4875 comm="syz.5.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02bfb3aeb9 code=0x7ffc0000 [ 60.531381][ T29] audit: type=1326 audit(1769775250.056:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4875 comm="syz.5.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f02bfb3aeb9 code=0x7ffc0000 [ 60.554667][ T29] audit: type=1326 audit(1769775250.056:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4875 comm="syz.5.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02bfb3aeb9 code=0x7ffc0000 [ 60.862891][ T4897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.469'. [ 60.891751][ T4897] vlan2: entered promiscuous mode [ 60.904785][ T4897] dummy0: entered promiscuous mode [ 61.413525][ T4916] netlink: 24 bytes leftover after parsing attributes in process `syz.1.475'. [ 61.551821][ T4923] loop2: detected capacity change from 0 to 512 [ 61.574919][ T4923] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.588759][ T4923] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.660696][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.696230][ T4958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.489'. [ 62.802141][ T4964] loop2: detected capacity change from 0 to 128 [ 62.834521][ T4964] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 62.955436][ T4972] netlink: 'syz.4.495': attribute type 4 has an invalid length. [ 63.002535][ T4972] netlink: 'syz.4.495': attribute type 4 has an invalid length. [ 63.064797][ T4972] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.248592][ T4972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.284796][ T4972] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.454589][ T3415] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.463901][ T3415] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.489389][ T3415] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.520227][ T3415] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.965286][ T5007] mmap: syz.3.506 (5007) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 64.354428][ T5019] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 64.479128][ T5022] netlink: 'syz.2.513': attribute type 1 has an invalid length. [ 64.514764][ T5022] 8021q: adding VLAN 0 to HW filter on device bond1 [ 64.656096][ T5025] bond1: (slave veth5): Enslaving as an active interface with a down link [ 64.722942][ T5028] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 64.792423][ T5028] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 64.849666][ T5039] kernel profiling enabled (shift: 8) [ 64.959381][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 64.959398][ T29] audit: type=1400 audit(1769775254.606:674): avc: denied { execute_no_trans } for pid=5047 comm="syz.4.522" path="/107/file1" dev="tmpfs" ino=587 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 65.065863][ T29] audit: type=1400 audit(1769775254.706:675): avc: denied { create } for pid=5052 comm="syz.4.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 65.083182][ T5059] loop2: detected capacity change from 0 to 512 [ 65.097766][ T5062] tipc: Started in network mode [ 65.101054][ T29] audit: type=1400 audit(1769775254.746:676): avc: denied { mounton } for pid=5053 comm="syz.5.524" path="/29/file0" dev="tmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 65.103203][ T5062] tipc: Node identity ac14140f, cluster identity 4711 [ 65.133220][ T5062] tipc: New replicast peer: 255.255.255.255 [ 65.139551][ T5062] tipc: Enabled bearer , priority 10 [ 65.151078][ T5059] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 65.167157][ T29] audit: type=1400 audit(1769775254.786:677): avc: denied { setopt } for pid=5052 comm="syz.4.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 65.230986][ T5059] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.245324][ T5059] ext4 filesystem being mounted at /101/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.277440][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.346310][ T29] audit: type=1400 audit(1769775254.996:678): avc: denied { bind } for pid=5080 comm="syz.1.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 65.442223][ T29] audit: type=1400 audit(1769775255.086:679): avc: denied { write } for pid=5083 comm="syz.5.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 65.480221][ T5086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.536'. [ 65.574318][ T5093] netlink: 86172 bytes leftover after parsing attributes in process `syz.1.538'. [ 65.600633][ T29] audit: type=1400 audit(1769775255.246:680): avc: denied { read } for pid=5097 comm="syz.4.541" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 65.622585][ T5095] netlink: 'syz.5.539': attribute type 10 has an invalid length. [ 65.652945][ T5100] netlink: 24 bytes leftover after parsing attributes in process `syz.3.542'. [ 65.680969][ T5093] netlink: zone id is out of range [ 65.686169][ T5093] netlink: zone id is out of range [ 65.705253][ T5093] netlink: zone id is out of range [ 65.770826][ T5093] netlink: zone id is out of range [ 65.771375][ T5100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.542'. [ 65.776071][ T5093] netlink: zone id is out of range [ 65.832733][ T5093] netlink: zone id is out of range [ 65.838035][ T5093] netlink: zone id is out of range [ 65.843276][ T5093] netlink: zone id is out of range [ 65.848405][ T5093] netlink: zone id is out of range [ 66.250834][ T5136] loop4: detected capacity change from 0 to 512 [ 66.253593][ T1038] tipc: Node number set to 2886997007 [ 66.258513][ T5136] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 66.278754][ T5136] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.557: bg 0: block 384: padding at end of block bitmap is not set [ 66.294012][ T5136] EXT4-fs (loop4): Remounting filesystem read-only [ 66.301119][ T5136] EXT4-fs (loop4): 1 truncate cleaned up [ 66.307696][ T5136] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.352592][ T29] audit: type=1400 audit(1769775256.006:681): avc: denied { setopt } for pid=5141 comm="syz.3.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 66.390367][ T5146] netlink: 'syz.3.560': attribute type 1 has an invalid length. [ 66.398262][ T5146] netlink: 'syz.3.560': attribute type 2 has an invalid length. [ 66.406260][ T5146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.560'. [ 66.488884][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.516080][ T29] audit: type=1400 audit(1769775256.166:682): avc: denied { getopt } for pid=5149 comm="syz.5.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 66.592911][ T29] audit: type=1400 audit(1769775256.246:683): avc: denied { write } for pid=5154 comm="syz.4.563" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 66.702427][ T5165] netlink: 104 bytes leftover after parsing attributes in process `syz.5.568'. [ 66.731470][ T5165] netlink: 104 bytes leftover after parsing attributes in process `syz.5.568'. [ 67.392481][ T5187] netlink: 'syz.4.578': attribute type 1 has an invalid length. [ 67.400212][ T5187] netlink: 'syz.4.578': attribute type 2 has an invalid length. [ 67.970128][ T5225] netlink: 24 bytes leftover after parsing attributes in process `syz.5.594'. [ 68.010003][ T5228] netlink: 'syz.2.595': attribute type 4 has an invalid length. [ 68.032246][ T5228] netlink: 'syz.2.595': attribute type 4 has an invalid length. [ 68.095826][ T5228] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.103079][ T5228] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.189861][ T5228] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.203564][ T5228] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.312007][ T5231] netlink: 100 bytes leftover after parsing attributes in process `syz.5.594'. [ 68.336094][ T31] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.352891][ T31] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.381387][ T31] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.437952][ T31] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.713011][ T5283] netlink: 12 bytes leftover after parsing attributes in process `syz.3.607'. [ 68.742215][ T5291] netlink: 12 bytes leftover after parsing attributes in process `syz.4.610'. [ 69.001290][ T5325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.623'. [ 69.017931][ T5327] netlink: 24 bytes leftover after parsing attributes in process `syz.3.622'. [ 69.089829][ T5327] netlink: 16 bytes leftover after parsing attributes in process `syz.3.622'. [ 69.152541][ T5337] unsupported nlmsg_type 40 [ 69.235007][ T5346] netlink: 'syz.1.628': attribute type 1 has an invalid length. [ 69.270751][ T5346] bond1: entered promiscuous mode [ 69.276044][ T5346] 8021q: adding VLAN 0 to HW filter on device bond1 [ 69.301887][ T5346] bond1: (slave bridge2): making interface the new active one [ 69.309481][ T5346] bridge2: entered promiscuous mode [ 69.379876][ T5346] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 69.698345][ T5383] ip6tnl2: entered promiscuous mode [ 70.185100][ T5420] loop4: detected capacity change from 0 to 1024 [ 70.194758][ T5417] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.202090][ T5417] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.297779][ T5420] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 70.328326][ T5417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.338525][ T5417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.360154][ T5420] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.386793][ T5417] vlan2: left promiscuous mode [ 70.391774][ T5417] dummy0: left promiscuous mode [ 70.397819][ T5417] bond1: left promiscuous mode [ 70.402819][ T5417] bridge2: left promiscuous mode [ 70.410686][ T5421] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 70.426162][ T31] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.441343][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 70.441360][ T29] audit: type=1400 audit(1769775260.096:732): avc: denied { read write } for pid=5419 comm="syz.4.649" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 70.470045][ T29] audit: type=1400 audit(1769775260.096:733): avc: denied { open } for pid=5419 comm="syz.4.649" path="/133/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 70.480242][ T31] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.493829][ T29] audit: type=1400 audit(1769775260.106:734): avc: denied { map } for pid=5419 comm="syz.4.649" path="/133/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 70.524304][ T29] audit: type=1400 audit(1769775260.106:735): avc: denied { execute } for pid=5419 comm="syz.4.649" path="/133/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 70.562088][ T5420] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.649: bg 0: block 112: padding at end of block bitmap is not set [ 70.601543][ T3826] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.623700][ T5434] hsr_slave_0: left promiscuous mode [ 70.629625][ T5434] hsr_slave_1: left promiscuous mode [ 70.650663][ T5420] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 117 [ 70.663223][ T5420] EXT4-fs (loop4): This should not happen!! Data will be lost [ 70.663223][ T5420] [ 70.744492][ T3826] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.758043][ T3415] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: comm kworker/u8:7: lblock 0 mapped to illegal pblock 0 (length 1) [ 70.775826][ T3415] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 70.788221][ T3415] EXT4-fs (loop4): This should not happen!! Data will be lost [ 70.788221][ T3415] [ 70.819596][ T5442] loop5: detected capacity change from 0 to 512 [ 70.827444][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 70.867017][ T5442] EXT4-fs: Invalid want_extra_isize 64870 [ 70.915400][ T29] audit: type=1400 audit(1769775260.566:736): avc: denied { bind } for pid=5447 comm="syz.3.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 71.385180][ T5467] syzkaller0: entered allmulticast mode [ 71.412149][ T29] audit: type=1400 audit(1769775261.066:737): avc: denied { relabelfrom } for pid=5471 comm="syz.5.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 71.431987][ T29] audit: type=1400 audit(1769775261.066:738): avc: denied { relabelto } for pid=5471 comm="syz.5.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 71.456772][ T5473] syzkaller0: entered promiscuous mode [ 71.505054][ T5467] syzkaller0 (unregistering): left allmulticast mode [ 71.511903][ T5467] syzkaller0 (unregistering): left promiscuous mode [ 71.854389][ T29] audit: type=1400 audit(1769775261.506:739): avc: denied { read } for pid=5485 comm="syz.3.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 71.983442][ T29] audit: type=1326 audit(1769775261.636:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5492 comm="syz.3.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07aadaeb9 code=0x7ffc0000 [ 72.019701][ T5493] __nla_validate_parse: 5 callbacks suppressed [ 72.019721][ T5493] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.679'. [ 72.120623][ T5493] net_ratelimit: 56 callbacks suppressed [ 72.120641][ T5493] netlink: zone id is out of range [ 72.131559][ T5493] netlink: zone id is out of range [ 72.132083][ T29] audit: type=1326 audit(1769775261.666:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5492 comm="syz.3.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb07aadaeb9 code=0x7ffc0000 [ 72.170696][ T5493] netlink: zone id is out of range [ 72.244166][ T5493] netlink: set zone limit has 8 unknown bytes [ 72.292084][ T5506] loop5: detected capacity change from 0 to 256 [ 72.361852][ T5513] loop3: detected capacity change from 0 to 128 [ 72.471980][ T5513] bio_check_eod: 101 callbacks suppressed [ 72.472018][ T5513] syz.3.688: attempt to access beyond end of device [ 72.472018][ T5513] loop3: rw=0, sector=121, nr_sectors = 120 limit=128 [ 72.552066][ T3826] kworker/u8:12: attempt to access beyond end of device [ 72.552066][ T3826] loop3: rw=1, sector=241, nr_sectors = 800 limit=128 [ 72.627871][ T5520] syzkaller0: entered promiscuous mode [ 72.633477][ T5520] syzkaller0: entered allmulticast mode [ 73.468348][ T5514] Set syz1 is full, maxelem 65536 reached [ 73.729012][ T5558] netlink: 24 bytes leftover after parsing attributes in process `syz.4.703'. [ 74.292148][ T5590] netlink: 8 bytes leftover after parsing attributes in process `syz.5.717'. [ 74.354154][ T5594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.719'. [ 74.403825][ T5594] netlink: 12 bytes leftover after parsing attributes in process `syz.2.719'. [ 74.473436][ T5597] netlink: 168 bytes leftover after parsing attributes in process `syz.2.720'. [ 74.532178][ T5599] netlink: 24 bytes leftover after parsing attributes in process `syz.4.721'. [ 74.577409][ T5607] netlink: 24 bytes leftover after parsing attributes in process `syz.5.725'. [ 74.755670][ T5629] dvmrp0: entered allmulticast mode [ 74.903918][ T5638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.739'. [ 75.050610][ T5644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.741'. [ 75.073105][ T5645] veth4: left promiscuous mode [ 75.077996][ T5645] veth4: left allmulticast mode [ 75.540229][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 75.540248][ T29] audit: type=1400 audit(1769775265.186:757): avc: denied { getopt } for pid=5679 comm="syz.5.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 75.598958][ T29] audit: type=1326 audit(1769775265.246:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5684 comm="syz.3.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07aadaeb9 code=0x7ffc0000 [ 75.622509][ T29] audit: type=1326 audit(1769775265.246:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5684 comm="syz.3.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07aadaeb9 code=0x7ffc0000 [ 75.648898][ T5687] netlink: 'syz.5.759': attribute type 1 has an invalid length. [ 75.658845][ T29] audit: type=1326 audit(1769775265.296:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5684 comm="syz.3.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb07aadaeb9 code=0x7ffc0000 [ 75.674803][ T5687] bond1: entered promiscuous mode [ 75.682315][ T29] audit: type=1326 audit(1769775265.296:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5684 comm="syz.3.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07aadaeb9 code=0x7ffc0000 [ 75.687816][ T5687] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.710671][ T29] audit: type=1326 audit(1769775265.296:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5684 comm="syz.3.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07aadaeb9 code=0x7ffc0000 [ 75.740412][ T29] audit: type=1326 audit(1769775265.296:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5684 comm="syz.3.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb07aadaeb9 code=0x7ffc0000 [ 75.763615][ T29] audit: type=1326 audit(1769775265.296:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5684 comm="syz.3.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07aadaeb9 code=0x7ffc0000 [ 75.786955][ T29] audit: type=1326 audit(1769775265.296:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5684 comm="syz.3.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07aadaeb9 code=0x7ffc0000 [ 75.810241][ T29] audit: type=1326 audit(1769775265.296:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5684 comm="syz.3.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb07aadaeb9 code=0x7ffc0000 [ 75.812363][ T5687] bond1: (slave bridge1): making interface the new active one [ 75.841153][ T5687] bridge1: entered promiscuous mode [ 75.879232][ T5687] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 76.092836][ T5713] netlink: 'syz.1.768': attribute type 1 has an invalid length. [ 76.563706][ T5761] netlink: 'syz.3.788': attribute type 25 has an invalid length. [ 76.571644][ T5761] netlink: 'syz.3.788': attribute type 28 has an invalid length. [ 76.664590][ T5775] dvmrp0: entered allmulticast mode [ 77.127119][ T5808] netlink: 'syz.5.808': attribute type 1 has an invalid length. [ 77.134968][ T5808] netlink: 'syz.5.808': attribute type 4 has an invalid length. [ 77.142718][ T5808] __nla_validate_parse: 8 callbacks suppressed [ 77.142732][ T5808] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.808'. [ 77.160476][ T5808] netlink: 'syz.5.808': attribute type 1 has an invalid length. [ 77.168249][ T5808] netlink: 'syz.5.808': attribute type 4 has an invalid length. [ 77.176009][ T5808] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.808'. [ 77.237439][ T5813] tipc: Started in network mode [ 77.242498][ T5813] tipc: Node identity 4, cluster identity 4711 [ 77.248691][ T5813] tipc: Node number set to 4 [ 77.660315][ T5823] loop3: detected capacity change from 0 to 1024 [ 77.682211][ T5823] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.902483][ T5823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.010834][ T5823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.151273][ T5836] loop4: detected capacity change from 0 to 1024 [ 78.174282][ T5836] EXT4-fs: Ignoring removed nomblk_io_submit option [ 78.212863][ T5836] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.290917][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.568953][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.609837][ T5853] Set syz1 is full, maxelem 65536 reached [ 78.659867][ T5858] netlink: 12 bytes leftover after parsing attributes in process `syz.4.827'. [ 78.805107][ T5869] netlink: 12 bytes leftover after parsing attributes in process `syz.4.832'. [ 79.332524][ T5814] ================================================================== [ 79.340724][ T5814] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 79.347706][ T5814] [ 79.350062][ T5814] read-write to 0xffff888103dedf6c of 4 bytes by task 5811 on cpu 0: [ 79.358169][ T5814] fifo_open+0x86/0x5d0 [ 79.362362][ T5814] do_dentry_open+0x54b/0xa60 [ 79.367079][ T5814] vfs_open+0x37/0x1e0 [ 79.371192][ T5814] path_openat+0x1de9/0x23c0 [ 79.375833][ T5814] do_filp_open+0x15d/0x280 [ 79.380387][ T5814] do_sys_openat2+0xa6/0x150 [ 79.385035][ T5814] __x64_sys_openat+0xf2/0x120 [ 79.389848][ T5814] x64_sys_call+0x2b07/0x3000 [ 79.394568][ T5814] do_syscall_64+0xc0/0x2a0 [ 79.399143][ T5814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.405080][ T5814] [ 79.407420][ T5814] read to 0xffff888103dedf6c of 4 bytes by task 5814 on cpu 1: [ 79.414984][ T5814] wait_for_partner+0xd5/0x1e0 [ 79.419775][ T5814] fifo_open+0x4b1/0x5d0 [ 79.424045][ T5814] do_dentry_open+0x54b/0xa60 [ 79.428757][ T5814] vfs_open+0x37/0x1e0 [ 79.432871][ T5814] path_openat+0x1de9/0x23c0 [ 79.437496][ T5814] do_filp_open+0x15d/0x280 [ 79.442044][ T5814] do_sys_openat2+0xa6/0x150 [ 79.446690][ T5814] __x64_sys_openat+0xf2/0x120 [ 79.451499][ T5814] x64_sys_call+0x2b07/0x3000 [ 79.456221][ T5814] do_syscall_64+0xc0/0x2a0 [ 79.460771][ T5814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.466691][ T5814] [ 79.469035][ T5814] value changed: 0x00000001 -> 0x00000002 [ 79.474772][ T5814] [ 79.477117][ T5814] Reported by Kernel Concurrency Sanitizer on: [ 79.483314][ T5814] CPU: 1 UID: 0 PID: 5814 Comm: syz.5.809 Not tainted syzkaller #0 PREEMPT(voluntary) [ 79.493065][ T5814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 79.503159][ T5814] ==================================================================