last executing test programs: 39.061315635s ago: executing program 4 (id=620): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc091, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) r4 = syz_io_uring_setup(0x117, &(0x7f0000000400)={0x0, 0x0, 0x10, 0x0, 0x3a2}, &(0x7f00000001c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000100000001"], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r4, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 38.027030256s ago: executing program 4 (id=633): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400004, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r2, 0x2000012, 0x100e, 0x2, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 37.304588122s ago: executing program 4 (id=637): socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0xff}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 36.596238927s ago: executing program 4 (id=641): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a55414, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 36.556841478s ago: executing program 4 (id=642): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x7}, r1, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) 36.500871761s ago: executing program 4 (id=643): sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x4040884) setresgid(0xee00, 0x0, 0x0) capset(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r1 = syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000040)='stat\x00') pread64(r2, &(0x7f0000000100)=""/31, 0x1f, 0x4) 36.500707352s ago: executing program 32 (id=643): sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x4040884) setresgid(0xee00, 0x0, 0x0) capset(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r1 = syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000040)='stat\x00') pread64(r2, &(0x7f0000000100)=""/31, 0x1f, 0x4) 2.174081293s ago: executing program 1 (id=1050): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@grpjquota}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$eJzs3MtvG0UYAPBv105LXyRU5dEHECiIikfSpKX0wAUEEgeQkOBQjiFJq1K3QU2QaFVBQKgcUSXuiCMSfwEnuCDghMQV7qhShXJp4WS09m5iO3aauE5c8O8nrTuzO9bM592xZ3a6CWBgjWYvScTuiPg9Iobr2eYCo/V/bi1dmf576cp0EtXqW38ltXI3l65MF0WL9+0qMuWI9LMkDrapd/7S5XNTlcrsxTw/vnD+/fH5S5efO3t+6szsmdkLkydPHj828cKJyed7EmcW180DH80d2v/aO9femD517d2fv02K+Fvi6JHRtQ4+Wa32uLr+2tOQTsp9bAgbUqp30xiq9f/hKMXKyRuOVz/ta+OATVWtVqsPdD68WAX+x5LodwuA/ih+6LP5b7Ft0dDjrnDjpfoEKIv7Vr7Vj5QjzcsMtcxve2k0Ik4t/vNVtsXm3IcAAGjyfTb+ebbd+C+NxvtC9+ZrKCMRcV9E7I2IExGxLyLuj6iVfTAiHtpg/a2LJKvHP+n1rgJbp2z892K+ttU8/itGfzFSynN7avEPJafPVmaP5p/JkRjanuUn1qjjh1d++6LTscbxX7Zl9Rdjwbwd18vbm98zM7UwdScxN7rxScSBcrv4k+WVgCQi9kfEgS7rOPv0N4c6Hbt9/GvowTpT9euIp+rnfzFa4i8ka69Pjt8Tldmj48VVsdovv159s1P9dxR/D2Tnf2fb6385/pGkcb12fuN1XP3j845zmm6v/23J2037PpxaWLg4EbEteb3e6JX9pYuTLeUmV8pn8R853L7/742VT+JgRGQX8cMR8UhEPJq3/bGIeDwiDq8R/08vP/Fe9/Fvriz+mQ2d/5XEtmjd0z5ROvfjd02Vjmwk/uz8H6+ljuR71vP9t552dXc1AwAAwH9PGhG7I0nHltNpOjZW/z/8+2JnWpmbX3jm9NwHF2bqzwiMxFBa3OkabrgfOpFP64v8ZEv+WH7f+MvSjlp+bHquMtPv4GHA7erQ/zN/lvrdOmDTdbeOlva8HcDW87wmDC79HwaX/g+Dq03/39GPdgBbr93v/8d9aAew9coNr/nfBAMGhPk/DC79HwaX/g8DaX5H3P4heQmJVYlI74pmSGxSot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL3xbwAAAP//1Xjmag==") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x2, @perf_bp={0x0}, 0x0, 0x40a, 0x800000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000200), &(0x7f0000000340)='%pB \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x25, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x43a, 0x0, 0x0, 0x0, 0x8}, [@btf_id={0x18, 0xe, 0x3, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @alu={0x4, 0x1, 0x4, 0x3, 0x2, 0xc, 0x16}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @jmp={0x5, 0x1, 0x8, 0x0, 0x1, 0xfffffffffffffee7, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f0000000100)=""/147, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x30020000}, 0x94) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) 2.088559627s ago: executing program 3 (id=1054): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x0, 0xffffffffffffffff, 0x7fffffff}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r2, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r3}, 0xc) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(r4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 2.053038609s ago: executing program 5 (id=1056): r0 = socket$kcm(0x21, 0x2, 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x8591, 0xa88, 0x4, 0x5, 0x0, 0x40, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) unshare(0x2040400) openat$cgroup_ro(r1, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) pwrite64(r1, 0x0, 0x0, 0xfecc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="880000000001010400000000141a00000200ffff0800074000000001240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e02010c000280050001000000000024000e800c00028005ee0100930000001400018008000100", @ANYBLOB="cca4aa74d894251f055ae8183b1466ba19be02d332663dbe50ec91253f7ae0989e9842fa1ae496d4ed6eaa97615809e313fe3549bb9fe71f18acb461d15a1cccd3474c0d"], 0x88}}, 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x3}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000000480)=[{0x18, 0x110, 0x1, '\x00'}, {0x10, 0x110, 0xa}, {0x90, 0x109, 0x4, "2a4f2dab6c34bb55091fdfb8d831b2480f58a8888f43c60b88ab591fc0d57f123ada9da65b85c1ba1ba83f7bad3554506771f04a3e2b53b18fd39c76d1291cc09b21011dc7c647116624727e89cbab98d2190896c32dd4fed994106fd931a38337980b67b3f5d3c487b96bcb3859e8b16dcbd6775101f21f251333cdfcce25"}, {0xb8, 0x10c, 0x8001, "07ddd1d8016d11d346483d4b538e081ea970460262821deeb598104b448122716ea29afd2768b2a2357752b005515e8901360ebcd228f68a0cb8f734fe7abc7f416ba3f4670adfb174f5c092306a1dfe1afa666a0924ecf0a0209cfd57c5f7d5c1cfe87f5f63a0f096fe538c4f5015ce3fb648e8b251d0d22d069c2e897d6309790e9d44b06ee1eba63832744d7833be513ad7637f2b28f95c8dcc7d591939a7d106ea6a7305d498"}], 0x170}, 0xfc40) 1.989907152s ago: executing program 2 (id=1058): bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x10, 0x572, 0x8000, 0x9, "ff000d00009a468e0cd912098d00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000200)={0xfffe, 0x81, 0x8, 0xb3, 0xb, "6c06002004dc17a8"}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x6) 1.883607407s ago: executing program 2 (id=1059): openat$tun(0xffffffffffffff9c, 0x0, 0x1c1342, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000080)={[{@bh}, {@inlinecrypt}, {@nombcache}]}, 0xff, 0x548, &(0x7f0000001300)="$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") unlinkat$binderfs_device(0xffffffffffffff9c, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000002680)='.\x00', 0xa0, &(0x7f00000008c0)=ANY=[], 0xc, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'bridge0\x00', &(0x7f0000002500)=@ethtool_dump={0x19, 0x7, 0x9}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd7}, 0x10311, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) 1.877804967s ago: executing program 3 (id=1060): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0}, 0x0, 0x3ffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = gettid() r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/152, 0x98}], 0x1) rt_sigqueueinfo(r2, 0x21, &(0x7f0000000180)={0x33, 0x40000020, 0xfffffffb}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.821992s ago: executing program 5 (id=1061): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x10) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(0xffffffffffffffff) socket(0x80000000000000a, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x4, 0x0, 0xfc, r3}, 0xc) 1.807591281s ago: executing program 0 (id=1062): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = open$dir(&(0x7f0000000100)='.\x00', 0x18100, 0x0) fcntl$notify(r1, 0x402, 0x80000023) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r2, 0x402, 0x40000008) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x21) close_range(r0, 0xffffffffffffffff, 0x0) 1.777858462s ago: executing program 3 (id=1063): unshare(0x2c020400) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x50) epoll_create(0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.772280173s ago: executing program 5 (id=1064): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) close(r2) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x3, &(0x7f0000000140)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x72, &(0x7f00000002c0)=""/209, 0x0, 0x21, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1c}, 0x94) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003980)={r4, 0x20, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000002b00)=""/171, 0xab}}, 0x10) 1.767223462s ago: executing program 2 (id=1065): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x492492492492775, 0x0) getsockopt$bt_hci(r0, 0x84, 0x82, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) 1.725078305s ago: executing program 2 (id=1066): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair(0x1e, 0x1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x800, 0x0, 0x0, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0xe000000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x22f, 0x10, 0x0, 0xff6a}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x300f000, 0xe, 0x88a8, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.724892965s ago: executing program 3 (id=1067): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000080), &(0x7f00000000c0)=0x8) 1.724430375s ago: executing program 0 (id=1068): open(0x0, 0x20000, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000001140), 0x8, 0x100) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) fsmount(0xffffffffffffffff, 0x0, 0x4) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sigaltstack(0x0, &(0x7f0000000740)={0x0}) 1.554184113s ago: executing program 3 (id=1069): mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x900}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.42602583s ago: executing program 0 (id=1070): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x7, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x2c, r1, 0x6a98047402e98331, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004110}, 0x8000) iopl(0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$unix(r2, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.357188503s ago: executing program 0 (id=1071): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x800, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, &(0x7f0000000240)="144024", 0x3, 0x2400c0c7, 0x1}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.317135755s ago: executing program 2 (id=1072): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_set$pid(0x2, 0x0, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r2, r2, 0x0, 0xe3aa6ea) 1.268863538s ago: executing program 5 (id=1073): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) r0 = syz_io_uring_setup(0x371d, &(0x7f0000000100)={0x0, 0xc9bd, 0x8, 0x3, 0x801ef}, &(0x7f0000000280)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) rt_sigtimedwait(&(0x7f0000000240)={[0xffffffffffffffff]}, 0x0, 0x0, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r0}) io_uring_enter(r0, 0x749d, 0x4, 0x0, 0x0, 0x0) 1.190211391s ago: executing program 0 (id=1074): socket$kcm(0xa, 0x5, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb8, 0xc0, 0x7d, 0x40, 0xc45, 0x8001, 0x900a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0xb9, 0x10001, 0x9, 0x1}, 0x50) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000040), &(0x7f0000000440)=""/183}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r0, &(0x7f0000000180), &(0x7f0000000680)=""/141}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r0, &(0x7f0000000040)}, 0x20) 1.169641032s ago: executing program 1 (id=1075): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8004, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x14, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xfffffeff}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 916.953285ms ago: executing program 1 (id=1076): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 832.019759ms ago: executing program 2 (id=1077): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r3, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 493.637015ms ago: executing program 0 (id=1078): r0 = msgget$private(0x0, 0x7ac) msgrcv(r0, 0x0, 0x0, 0x3, 0x2000) msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x0) msgsnd(r0, &(0x7f0000000240)={0x3}, 0x8, 0x8fa2496c381b7ad5) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) fcntl$setsig(r1, 0xa, 0x13) fcntl$setlease(r1, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 400.86973ms ago: executing program 5 (id=1079): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket(0x1d, 0x2, 0x6) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40) r1 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xca72, 0xc000, 0x0, 0x20002fb}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 247.853388ms ago: executing program 5 (id=1080): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, 0x0, 0x4002000) r2 = socket$inet(0x2, 0x3, 0x30) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10}}]}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, 0x0, &(0x7f0000000080)) 186.50028ms ago: executing program 1 (id=1081): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000340), &(0x7f00000005c0)='%-5lx \x00'}, 0x20) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 173.740931ms ago: executing program 1 (id=1082): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_create_resource$binfmt(&(0x7f00000001c0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x80) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4, 0x8], 0x0, 0x0, 0x12, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x8, 0x10012, r0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) 1.4085ms ago: executing program 3 (id=1083): munmap(&(0x7f0000aaf000/0x1000)=nil, 0x1000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 0s ago: executing program 1 (id=1093): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x200, 0x2f2}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x20040000}) io_uring_enter(r1, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 20.243243][ T28] audit: type=1400 audit(1773785533.361:62): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.265605][ T28] audit: type=1400 audit(1773785533.361:63): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.288606][ T28] audit: type=1400 audit(1773785533.361:64): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.311674][ T28] audit: type=1400 audit(1773785533.361:65): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.334825][ T28] audit: type=1400 audit(1773785533.371:66): avc: denied { read open } for pid=3193 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.21' (ED25519) to the list of known hosts. [ 25.972972][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 25.972988][ T28] audit: type=1400 audit(1773785539.091:70): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.004846][ T28] audit: type=1400 audit(1773785539.131:71): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.005718][ T3299] cgroup: Unknown subsys name 'net' [ 26.034841][ T28] audit: type=1400 audit(1773785539.161:72): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.165117][ T3299] cgroup: Unknown subsys name 'cpuset' [ 26.171399][ T3299] cgroup: Unknown subsys name 'rlimit' [ 26.280733][ T28] audit: type=1400 audit(1773785539.401:73): avc: denied { setattr } for pid=3299 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.304612][ T28] audit: type=1400 audit(1773785539.401:74): avc: denied { create } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.326020][ T28] audit: type=1400 audit(1773785539.401:75): avc: denied { write } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.331312][ T3301] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.346833][ T28] audit: type=1400 audit(1773785539.401:76): avc: denied { read } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.376567][ T28] audit: type=1400 audit(1773785539.411:77): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.387885][ T3299] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.401599][ T28] audit: type=1400 audit(1773785539.411:78): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 26.434205][ T28] audit: type=1400 audit(1773785539.431:79): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 27.592908][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 27.612892][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 27.636049][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 27.658846][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 27.736748][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.744024][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.751358][ T3310] bridge_slave_0: entered allmulticast mode [ 27.757801][ T3310] bridge_slave_0: entered promiscuous mode [ 27.768360][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.775632][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.782785][ T3310] bridge_slave_1: entered allmulticast mode [ 27.789305][ T3310] bridge_slave_1: entered promiscuous mode [ 27.815751][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 27.830855][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.838003][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.845432][ T3311] bridge_slave_0: entered allmulticast mode [ 27.852064][ T3311] bridge_slave_0: entered promiscuous mode [ 27.863161][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.870342][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.877477][ T3311] bridge_slave_1: entered allmulticast mode [ 27.884011][ T3311] bridge_slave_1: entered promiscuous mode [ 27.893151][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.900312][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.907529][ T3317] bridge_slave_0: entered allmulticast mode [ 27.913993][ T3317] bridge_slave_0: entered promiscuous mode [ 27.926122][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.940816][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.958432][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.965721][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.973005][ T3317] bridge_slave_1: entered allmulticast mode [ 27.979483][ T3317] bridge_slave_1: entered promiscuous mode [ 28.003542][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.019385][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.026502][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.033651][ T3315] bridge_slave_0: entered allmulticast mode [ 28.040221][ T3315] bridge_slave_0: entered promiscuous mode [ 28.050985][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.058076][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.065248][ T3315] bridge_slave_1: entered allmulticast mode [ 28.071824][ T3315] bridge_slave_1: entered promiscuous mode [ 28.079074][ T3310] team0: Port device team_slave_0 added [ 28.085456][ T3310] team0: Port device team_slave_1 added [ 28.092141][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.109326][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.123774][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.156766][ T3311] team0: Port device team_slave_0 added [ 28.167386][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.174426][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.200534][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.216753][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.226726][ T3311] team0: Port device team_slave_1 added [ 28.233069][ T3317] team0: Port device team_slave_0 added [ 28.239046][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.246202][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.273031][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.289111][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.303712][ T3317] team0: Port device team_slave_1 added [ 28.317427][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.324815][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.331989][ T3321] bridge_slave_0: entered allmulticast mode [ 28.338644][ T3321] bridge_slave_0: entered promiscuous mode [ 28.350104][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.357207][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.364347][ T3321] bridge_slave_1: entered allmulticast mode [ 28.371223][ T3321] bridge_slave_1: entered promiscuous mode [ 28.382417][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.389454][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.415536][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.445326][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.452537][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.478709][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.490480][ T3315] team0: Port device team_slave_0 added [ 28.501690][ T3315] team0: Port device team_slave_1 added [ 28.507946][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.514926][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.541505][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.553343][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.576401][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.583444][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.609881][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.621987][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.647895][ T3310] hsr_slave_0: entered promiscuous mode [ 28.653924][ T3310] hsr_slave_1: entered promiscuous mode [ 28.677334][ T3321] team0: Port device team_slave_0 added [ 28.688520][ T3311] hsr_slave_0: entered promiscuous mode [ 28.694696][ T3311] hsr_slave_1: entered promiscuous mode [ 28.700979][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 28.706998][ T3311] Cannot create hsr debugfs directory [ 28.718339][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.725467][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.751625][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.763967][ T3321] team0: Port device team_slave_1 added [ 28.778928][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.785937][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.812079][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.833571][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.840787][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.868192][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.880287][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.887812][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.914115][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.957639][ T3317] hsr_slave_0: entered promiscuous mode [ 28.964008][ T3317] hsr_slave_1: entered promiscuous mode [ 28.970185][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 28.976285][ T3317] Cannot create hsr debugfs directory [ 28.987846][ T3321] hsr_slave_0: entered promiscuous mode [ 28.993929][ T3321] hsr_slave_1: entered promiscuous mode [ 29.000127][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 29.006040][ T3321] Cannot create hsr debugfs directory [ 29.065367][ T3315] hsr_slave_0: entered promiscuous mode [ 29.071668][ T3315] hsr_slave_1: entered promiscuous mode [ 29.078053][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 29.083861][ T3315] Cannot create hsr debugfs directory [ 29.234891][ T3310] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.244188][ T3310] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.255999][ T3310] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.265030][ T3310] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.297818][ T3311] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.313110][ T3311] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.322375][ T3311] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.331835][ T3311] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.344254][ T3321] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.356718][ T3321] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.365891][ T3321] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.386794][ T3321] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.423259][ T3315] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.436715][ T3315] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.445681][ T3315] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.455413][ T3315] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.466613][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.503749][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.517507][ T3317] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.526641][ T3317] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.537270][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.544330][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.557714][ T3317] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.566988][ T3317] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.581994][ T882] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.589103][ T882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.616131][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.656691][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.669220][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.689273][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.699285][ T882] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.706402][ T882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.728574][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.735717][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.751481][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.762007][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.776935][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.784001][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.802471][ T3311] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.813465][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.840315][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.847635][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.858533][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.865793][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.890177][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.897356][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.924978][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.956443][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.968368][ T3315] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.979309][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.002060][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.012933][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.020143][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.033871][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.041061][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.055148][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.069988][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.138576][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.156467][ T3317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.198933][ T3310] veth0_vlan: entered promiscuous mode [ 30.235943][ T3310] veth1_vlan: entered promiscuous mode [ 30.262804][ T3311] veth0_vlan: entered promiscuous mode [ 30.307043][ T3310] veth0_macvtap: entered promiscuous mode [ 30.321230][ T3321] veth0_vlan: entered promiscuous mode [ 30.328834][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.342850][ T3315] veth0_vlan: entered promiscuous mode [ 30.349396][ T3311] veth1_vlan: entered promiscuous mode [ 30.358643][ T3321] veth1_vlan: entered promiscuous mode [ 30.373702][ T3310] veth1_macvtap: entered promiscuous mode [ 30.383820][ T3315] veth1_vlan: entered promiscuous mode [ 30.406783][ T3321] veth0_macvtap: entered promiscuous mode [ 30.415196][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.430676][ T3321] veth1_macvtap: entered promiscuous mode [ 30.438286][ T3311] veth0_macvtap: entered promiscuous mode [ 30.446945][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.454819][ T3315] veth0_macvtap: entered promiscuous mode [ 30.468998][ T3311] veth1_macvtap: entered promiscuous mode [ 30.477119][ T30] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.486070][ T30] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.497486][ T3315] veth1_macvtap: entered promiscuous mode [ 30.507809][ T30] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.517016][ T30] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.531855][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.540149][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.548844][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.567774][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.583726][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.596630][ T40] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.606198][ T40] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.616971][ T40] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.629180][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.641801][ T3310] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.658026][ T40] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.667461][ T40] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.686101][ T40] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.713287][ T40] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.727228][ T3479] loop0: detected capacity change from 0 to 1024 [ 30.734019][ T3479] ======================================================= [ 30.734019][ T3479] WARNING: The mand mount option has been deprecated and [ 30.734019][ T3479] and is ignored by this kernel. Remove the mand [ 30.734019][ T3479] option from the mount to silence this warning. [ 30.734019][ T3479] ======================================================= [ 30.775292][ T3479] EXT4-fs: inline encryption not supported [ 30.782656][ T40] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.792048][ T40] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.810805][ T40] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.816648][ T3479] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.821019][ T40] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.856093][ T40] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.879248][ T3317] veth0_vlan: entered promiscuous mode [ 30.895492][ T3317] veth1_vlan: entered promiscuous mode [ 30.918572][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.975937][ T3317] veth0_macvtap: entered promiscuous mode [ 30.977879][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 30.977895][ T28] audit: type=1400 audit(1773785544.101:112): avc: denied { map_create } for pid=3488 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 31.001822][ T3317] veth1_macvtap: entered promiscuous mode [ 31.028576][ T28] audit: type=1400 audit(1773785544.131:113): avc: denied { read } for pid=3488 comm="syz.0.6" path="socket:[4808]" dev="sockfs" ino=4808 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 31.062495][ T28] audit: type=1400 audit(1773785544.141:114): avc: denied { mount } for pid=3486 comm="syz.2.3" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 31.113153][ T28] audit: type=1400 audit(1773785544.171:115): avc: denied { create } for pid=3490 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 31.135867][ T28] audit: type=1400 audit(1773785544.171:116): avc: denied { create } for pid=3492 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 31.158652][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.176012][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.205339][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.228774][ T28] audit: type=1400 audit(1773785544.181:117): avc: denied { read write } for pid=3321 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.228773][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.228820][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.281498][ T3499] netlink: 'syz.2.8': attribute type 4 has an invalid length. [ 31.284657][ T28] audit: type=1400 audit(1773785544.181:118): avc: denied { open } for pid=3321 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.291449][ T3499] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8'. [ 31.364580][ T28] audit: type=1400 audit(1773785544.181:119): avc: denied { ioctl } for pid=3321 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.397147][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.415492][ T3499] .`: renamed from bond0 (while UP) [ 31.452935][ T28] audit: type=1400 audit(1773785544.211:120): avc: denied { write } for pid=3492 comm="syz.3.4" path="socket:[3925]" dev="sockfs" ino=3925 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 31.535339][ T3317] audit: audit_backlog=65 > audit_backlog_limit=64 [ 31.615374][ C0] hrtimer: interrupt took 39059 ns [ 31.629211][ T3512] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'. [ 31.842262][ T3499] syz.2.8 (3499) used greatest stack depth: 10264 bytes left [ 32.112064][ T3519] loop2: detected capacity change from 0 to 512 [ 32.163015][ T3526] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15'. [ 32.249532][ T3528] tipc: Failed to remove unknown binding: 66,1,1/0:627145405/627145407 [ 32.257892][ T3528] tipc: Failed to remove unknown binding: 66,1,1/0:627145405/627145407 [ 32.371656][ T3519] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 32.483168][ T3537] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.552020][ T3519] EXT4-fs error (device loop2): ext4_quota_enable:7188: comm syz.2.12: Bad quota inum: 2, type: 1 [ 32.610512][ T3519] EXT4-fs warning (device loop2): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 32.724774][ T3539] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 32.756889][ T3539] EXT4-fs error (device loop2): ext4_quota_enable:7188: comm syz.2.12: Bad quota inum: 2, type: 1 [ 32.794947][ T3539] EXT4-fs warning (device loop2): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 32.886585][ T3321] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 33.374009][ T3569] netlink: 'syz.2.30': attribute type 12 has an invalid length. [ 33.703262][ T3580] netlink: 12 bytes leftover after parsing attributes in process `syz.3.34'. [ 33.726684][ T3581] loop1: detected capacity change from 0 to 256 [ 33.754322][ T3581] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 33.796030][ T3581] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 33.851643][ T3580] nlmon0: entered promiscuous mode [ 34.074992][ T3589] syz.3.38 uses obsolete (PF_INET,SOCK_PACKET) [ 34.102220][ T3595] capability: warning: `syz.2.41' uses 32-bit capabilities (legacy support in use) [ 34.120615][ T3596] netlink: 28 bytes leftover after parsing attributes in process `syz.4.40'. [ 35.192960][ T3629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.54'. [ 35.249559][ T3629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.54'. [ 35.573364][ T3653] 8021q: adding VLAN 0 to HW filter on device bond1 [ 35.628793][ T3653] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 35.684596][ T30] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 35.834653][ T129] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 36.035893][ T28] kauditd_printk_skb: 147 callbacks suppressed [ 36.035910][ T28] audit: type=1400 audit(1773785805.162:266): avc: denied { ioctl } for pid=3676 comm="syz.3.72" path="socket:[5412]" dev="sockfs" ino=5412 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 36.109648][ T3683] netlink: 16 bytes leftover after parsing attributes in process `syz.0.74'. [ 36.144538][ T28] audit: type=1400 audit(1773785805.192:267): avc: denied { bind } for pid=3676 comm="syz.3.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 36.214002][ T28] audit: type=1400 audit(1773785805.242:268): avc: denied { getopt } for pid=3676 comm="syz.3.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 36.304879][ T28] audit: type=1400 audit(1773785805.332:269): avc: denied { name_bind } for pid=3686 comm="syz.0.76" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 36.354531][ T28] audit: type=1400 audit(1773785805.422:270): avc: denied { mount } for pid=3692 comm="syz.1.78" name="/" dev="autofs" ino=5431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 36.444006][ T3699] netlink: 'syz.3.80': attribute type 4 has an invalid length. [ 36.452804][ T28] audit: type=1400 audit(1773785805.562:271): avc: denied { ioctl } for pid=3698 comm="syz.3.80" path="socket:[5445]" dev="sockfs" ino=5445 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 36.490630][ T3699] netlink: 'syz.3.80': attribute type 4 has an invalid length. [ 36.518891][ T28] audit: type=1326 audit(1773785805.562:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3695 comm="syz.1.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeb7f9c799 code=0x7ffc0000 [ 36.594061][ T28] audit: type=1326 audit(1773785805.562:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3695 comm="syz.1.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeb7f9c799 code=0x7ffc0000 [ 36.625984][ T28] audit: type=1326 audit(1773785805.562:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3695 comm="syz.1.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7efeb7f9c799 code=0x7ffc0000 [ 36.677031][ T28] audit: type=1326 audit(1773785805.562:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3695 comm="syz.1.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeb7f9c799 code=0x7ffc0000 [ 36.734711][ T3707] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 37.177114][ T3730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.93'. [ 37.336893][ T3730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.93'. [ 37.787201][ T3775] loop4: detected capacity change from 0 to 512 [ 37.795900][ T3775] EXT4-fs: Ignoring removed bh option [ 37.801994][ T3775] EXT4-fs: Ignoring removed oldalloc option [ 37.824633][ T3775] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 37.864523][ T3775] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 37.883698][ T3781] netlink: 'syz.0.105': attribute type 3 has an invalid length. [ 37.925068][ T3775] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 37.934652][ T3748] syz.3.97 (3748) used greatest stack depth: 9336 bytes left [ 37.955477][ T3775] EXT4-fs (loop4): 1 truncate cleaned up [ 37.961554][ T3775] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.977244][ T3775] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.001700][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.109928][ T3795] syzkaller0: entered allmulticast mode [ 38.172265][ T3799] netlink: 12 bytes leftover after parsing attributes in process `syz.3.111'. [ 38.181859][ T3799] netlink: 12 bytes leftover after parsing attributes in process `syz.3.111'. [ 38.191470][ T3799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.111'. [ 38.202100][ T3799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.111'. [ 38.305422][ T3801] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.312729][ T3801] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.453816][ T3801] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.469268][ T3801] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.523910][ T57] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.537420][ T57] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.554533][ T57] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.583700][ T57] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.675595][ T3814] io-wq is not configured for unbound workers [ 38.712839][ T3821] netlink: 8 bytes leftover after parsing attributes in process `syz.0.120'. [ 38.733737][ T3821] netlink: 8 bytes leftover after parsing attributes in process `syz.0.120'. [ 38.870613][ T3838] loop3: detected capacity change from 0 to 128 [ 38.879414][ T3838] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 38.891864][ T3838] ext4 filesystem being mounted at /34/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 38.942067][ T3311] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 38.976972][ T3845] netlink: 12 bytes leftover after parsing attributes in process `syz.0.131'. [ 39.143947][ T3863] netlink: 28 bytes leftover after parsing attributes in process `syz.3.135'. [ 39.639897][ T3878] loop3: detected capacity change from 0 to 164 [ 39.653354][ T3878] Unable to read rock-ridge attributes [ 40.437573][ T3908] loop2: detected capacity change from 0 to 256 [ 40.985939][ T3919] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.993363][ T3919] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.126833][ T3919] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.161716][ T3919] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.228364][ T129] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.258231][ T129] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.284613][ T129] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.338785][ T129] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.453964][ T28] kauditd_printk_skb: 254 callbacks suppressed [ 41.453982][ T28] audit: type=1400 audit(1773785810.572:530): avc: denied { read } for pid=3949 comm="syz.0.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 41.629673][ T3955] 9pnet: p9_errstr2errno: server reported unknown error ÿÿÿÿÿÿÿÿÿ [ 41.717333][ T3960] netlink: 'syz.0.173': attribute type 1 has an invalid length. [ 41.725556][ T28] audit: type=1400 audit(1773785810.842:531): avc: denied { block_suspend } for pid=3963 comm="syz.2.175" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 41.753459][ T3960] 8021q: adding VLAN 0 to HW filter on device bond2 [ 41.782008][ T3960] 8021q: adding VLAN 0 to HW filter on device bond2 [ 41.799745][ T3960] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 41.811024][ T28] audit: type=1400 audit(1773785810.932:532): avc: denied { read } for pid=3961 comm="syz.1.174" lport=34148 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 41.812465][ T3960] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 41.987701][ T28] audit: type=1400 audit(1773785811.112:533): avc: denied { create } for pid=3969 comm="syz.4.177" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 42.031170][ T28] audit: type=1400 audit(1773785811.112:534): avc: denied { write } for pid=3969 comm="syz.4.177" name="file0" dev="tmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 42.064747][ T28] audit: type=1400 audit(1773785811.112:535): avc: denied { open } for pid=3969 comm="syz.4.177" path="/27/file0" dev="tmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 42.122109][ T28] audit: type=1400 audit(1773785811.112:536): avc: denied { ioctl } for pid=3969 comm="syz.4.177" path="/27/file0" dev="tmpfs" ino=164 ioctlcmd=0x1270 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 42.161472][ T28] audit: type=1400 audit(1773785811.162:537): avc: denied { unlink } for pid=3317 comm="syz-executor" name="file0" dev="tmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 42.236406][ T3979] __nla_validate_parse: 5 callbacks suppressed [ 42.236429][ T3979] netlink: 4 bytes leftover after parsing attributes in process `syz.4.181'. [ 42.284951][ T3983] loop3: detected capacity change from 0 to 1024 [ 42.298320][ T3983] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 42.321640][ T3983] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 42.343515][ T3983] EXT4-fs error (device loop3): ext4_get_journal_inode:5863: comm syz.3.184: inode #4294967295: comm syz.3.184: iget: illegal inode # [ 42.359687][ T3983] loop3: lost filesystem error report for type 5 error -117 [ 42.359828][ T3983] EXT4-fs (loop3): no journal found [ 42.367394][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 42.367422][ C0] EXT4-fs (loop3): initial error at time 1773785811: ext4_get_journal_inode:5863 [ 42.367456][ C0] EXT4-fs (loop3): last error at time 1773785811: ext4_get_journal_inode:5863 [ 42.399232][ T3983] EXT4-fs (loop3): can't get journal size [ 42.406932][ T3983] EXT4-fs (loop3): failed to initialize system zone (-22) [ 42.414615][ T3983] EXT4-fs (loop3): mount failed [ 42.635927][ T4014] all: renamed from bridge_slave_1 [ 42.744946][ T4020] netlink: 12 bytes leftover after parsing attributes in process `syz.0.199'. [ 42.825961][ T4025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.202'. [ 42.871070][ T4025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.202'. [ 42.964508][ T28] audit: type=1400 audit(1773785812.082:538): avc: denied { create } for pid=4030 comm="syz.4.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 42.996662][ T28] audit: type=1400 audit(1773785812.122:539): avc: denied { bind } for pid=4030 comm="syz.4.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 43.121886][ T4039] process 'syz.2.208' launched './file1' with NULL argv: empty string added [ 44.365337][ T4035] syz.0.206 (4035) used greatest stack depth: 7416 bytes left [ 44.485829][ T4079] netlink: 'syz.0.220': attribute type 1 has an invalid length. [ 44.553522][ T4082] netlink: 28 bytes leftover after parsing attributes in process `syz.3.222'. [ 44.582789][ T4079] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 44.594679][ T4079] bond3: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 44.619524][ T35] IPVS: starting estimator thread 0... [ 44.622412][ T4079] bond3: (slave vxcan3): making interface the new active one [ 44.672794][ T4079] bond3: (slave vxcan3): Enslaving as an active interface with an up link [ 44.714615][ T4087] IPVS: using max 2352 ests per chain, 117600 per kthread [ 44.761169][ T4091] bond3: (slave vxcan5): The slave device specified does not support setting the MAC address [ 44.774694][ T4091] bond3: (slave vxcan5): Enslaving as a backup interface with an up link [ 45.261654][ T4140] netlink: 236 bytes leftover after parsing attributes in process `syz.4.246'. [ 45.304688][ T4140] unsupported nla_type 217 [ 45.906746][ T4155] netlink: 2048 bytes leftover after parsing attributes in process `syz.3.252'. [ 45.935886][ T4155] netlink: 4 bytes leftover after parsing attributes in process `syz.3.252'. [ 46.197149][ T4159] loop2: detected capacity change from 0 to 512 [ 46.213499][ T4159] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2808: inode #11: comm syz.2.254: corrupted xattr block 95: invalid header [ 46.228546][ T4159] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 46.228795][ T4159] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.254: bg 0: block 7: invalid block bitmap [ 46.233950][ T4163] netlink: 24 bytes leftover after parsing attributes in process `syz.0.255'. [ 46.238237][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 46.238256][ C0] EXT4-fs (loop2): initial error at time 1773785815: ext4_expand_extra_isize_ea:2808: inode 11 [ 46.278558][ C0] EXT4-fs (loop2): last error at time 1773785815: ext4_expand_extra_isize_ea:2808: inode 11 [ 46.289982][ T4159] loop2: lost filesystem error report for type 5 error -117 [ 46.294622][ T4159] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 46.311262][ T4159] loop2: lost filesystem error report for type 5 error -117 [ 46.311657][ T4159] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2970: inode #11: comm syz.2.254: corrupted xattr block 95: invalid header [ 46.333008][ T4159] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 46.333288][ T4159] EXT4-fs warning (device loop2): ext4_evict_inode:275: xattr delete (err -117) [ 46.351787][ T4159] EXT4-fs (loop2): 1 orphan inode deleted [ 46.358241][ T4159] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.407715][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.531532][ T28] kauditd_printk_skb: 53 callbacks suppressed [ 46.531546][ T28] audit: type=1400 audit(1773785815.652:593): avc: denied { bind } for pid=4178 comm="syz.0.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 46.561012][ T4179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.262'. [ 46.593079][ T4184] tipc: Started in network mode [ 46.598223][ T4184] tipc: Node identity 82ee9d7f0238, cluster identity 4711 [ 46.612753][ T4184] tipc: Enabled bearer , priority 0 [ 46.660703][ T4184] syzkaller0: entered promiscuous mode [ 46.667830][ T4184] syzkaller0: entered allmulticast mode [ 46.679562][ T4184] tipc: Resetting bearer [ 46.733523][ T4183] tipc: Resetting bearer [ 46.761364][ T28] audit: type=1326 audit(1773785815.882:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4192 comm="syz.0.268" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f81c1696517 code=0x0 [ 46.808312][ T4183] tipc: Disabling bearer [ 46.833886][ T28] audit: type=1400 audit(1773785815.952:595): avc: denied { read write } for pid=4203 comm="syz.4.273" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 46.914047][ T28] audit: type=1400 audit(1773785815.952:596): avc: denied { open } for pid=4203 comm="syz.4.273" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 46.933966][ T4206] loop4: detected capacity change from 0 to 1024 [ 46.985571][ T4206] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.006993][ T28] audit: type=1400 audit(1773785816.132:597): avc: denied { map } for pid=4213 comm="syz.3.277" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 47.080187][ T4224] loop1: detected capacity change from 0 to 512 [ 47.099894][ T4206] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4222: comm syz.4.274: Allocating blocks 497-513 which overlap fs metadata [ 47.133630][ T4206] EXT4-fs (loop4): Remounting filesystem read-only [ 47.144782][ T28] audit: type=1400 audit(1773785816.262:598): avc: denied { setattr } for pid=4205 comm="syz.4.274" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 47.168956][ T4224] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.279: bg 0: block 5: invalid block bitmap [ 47.193201][ T4224] loop1: lost filesystem error report for type 5 error -117 [ 47.194494][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 47.208343][ C0] EXT4-fs (loop1): initial error at time 1773785816: ext4_validate_block_bitmap:432 [ 47.217776][ C0] EXT4-fs (loop1): last error at time 1773785816: ext4_validate_block_bitmap:432 [ 47.257316][ T4205] EXT4-fs (loop4): pa ffff888107efc9a0: logic 304, phys. 433, len 5 [ 47.278629][ T4224] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 47.289451][ T4224] loop1: lost filesystem error report for type 5 error -117 [ 47.290090][ T4224] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.279: invalid indirect mapped block 3 (level 2) [ 47.312522][ T4224] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 47.316607][ T4224] EXT4-fs (loop1): 1 orphan inode deleted [ 47.342871][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.352949][ T4224] EXT4-fs (loop1): 1 truncate cleaned up [ 47.395235][ T28] audit: type=1400 audit(1773785816.522:599): avc: denied { module_request } for pid=4234 comm="syz.2.283" kmod="net-pf-35-proto-68" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 47.487230][ T28] audit: type=1400 audit(1773785816.592:600): avc: denied { accept } for pid=4240 comm="syz.4.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 47.537401][ T4244] loop3: detected capacity change from 0 to 512 [ 47.544386][ T4244] EXT4-fs: Ignoring removed nobh option [ 47.570534][ T4224] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.587810][ T4239] bridge_slave_0: left allmulticast mode [ 47.594762][ T4244] EXT4-fs (loop3): orphan cleanup on readonly fs [ 47.599107][ T4239] bridge_slave_0: left promiscuous mode [ 47.607285][ T4239] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.608011][ T4244] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.284: EA inode hash validation failed [ 47.639141][ T4244] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 47.644539][ T28] audit: type=1400 audit(1773785816.762:601): avc: denied { read } for pid=4242 comm="syz.4.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.652946][ T4244] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.284: corrupted inode contents [ 47.684738][ T4244] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 47.686399][ T4239] bridge_slave_1: left allmulticast mode [ 47.694544][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 47.708004][ C0] EXT4-fs (loop3): initial error at time 1773785816: ext4_do_update_inode:5569: inode 15 [ 47.717872][ C0] EXT4-fs (loop3): last error at time 1773785816: ext4_do_update_inode:5569: inode 15 [ 47.734338][ T4239] bridge_slave_1: left promiscuous mode [ 47.742910][ T28] audit: type=1400 audit(1773785816.842:602): avc: denied { read write } for pid=3317 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 47.747147][ T4244] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #15: comm syz.3.284: mark_inode_dirty error [ 47.774766][ T4239] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.783907][ T4244] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 47.793450][ T4244] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.284: corrupted inode contents [ 47.814900][ T4244] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 47.817536][ T4244] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.284: mark_inode_dirty error [ 47.823278][ T4254] netlink: 12 bytes leftover after parsing attributes in process `syz.4.289'. [ 47.827400][ T4244] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 47.839667][ T4239] .`: (slave bond_slave_0): Releasing backup interface [ 47.848788][ T4244] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3002: inode #15: comm syz.3.284: mark inode dirty (error -117) [ 47.877409][ T4244] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 47.877606][ T4244] EXT4-fs warning (device loop3): ext4_evict_inode:275: xattr delete (err -117) [ 47.896093][ T4244] EXT4-fs (loop3): 1 orphan inode deleted [ 47.896471][ T4239] .`: (slave bond_slave_1): Releasing backup interface [ 47.902449][ T4244] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 47.926689][ T4239] team0: Port device team_slave_0 removed [ 47.936514][ T4239] team0: Port device team_slave_1 removed [ 47.947956][ T4239] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.955590][ T4239] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.956811][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.974153][ T4239] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.982298][ T4239] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.999784][ T4239] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 48.159029][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.248116][ T4268] mmap: syz.3.293 (4268) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 48.266623][ T4271] netlink: 24 bytes leftover after parsing attributes in process `syz.2.295'. [ 48.463555][ T4272] loop1: detected capacity change from 0 to 128 [ 48.656405][ T4292] netlink: 16 bytes leftover after parsing attributes in process `syz.3.303'. [ 48.726720][ T4296] IPv6: sit1: Disabled Multicast RS [ 49.072309][ T4302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.307'. [ 49.092648][ T4302] netlink: 12 bytes leftover after parsing attributes in process `syz.2.307'. [ 49.400459][ T4319] netlink: 12 bytes leftover after parsing attributes in process `syz.2.315'. [ 50.098999][ T4335] netlink: 12 bytes leftover after parsing attributes in process `syz.2.322'. [ 50.525469][ T4350] netlink: 4 bytes leftover after parsing attributes in process `syz.4.328'. [ 50.551103][ T4350] bridge_slave_1: left allmulticast mode [ 50.561174][ T4350] bridge_slave_1: left promiscuous mode [ 50.572845][ T4350] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.635208][ T4350] bridge_slave_0: left allmulticast mode [ 50.640878][ T4350] bridge_slave_0: left promiscuous mode [ 50.646907][ T4350] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.028753][ T4378] netlink: 40 bytes leftover after parsing attributes in process `syz.3.339'. [ 51.050248][ T4378] netlink: 32 bytes leftover after parsing attributes in process `syz.3.339'. [ 51.281410][ T4399] netlink: 'syz.3.348': attribute type 1 has an invalid length. [ 51.361733][ T4404] netlink: 'syz.1.351': attribute type 2 has an invalid length. [ 51.374729][ T4404] Zero length message leads to an empty skb [ 51.771634][ T28] kauditd_printk_skb: 123 callbacks suppressed [ 51.771650][ T28] audit: type=1400 audit(1773785820.892:726): avc: denied { connect } for pid=4434 comm="syz.4.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.776202][ T4432] 8021q: adding VLAN 0 to HW filter on device bond1 [ 51.862346][ T4432] macsec1: entered promiscuous mode [ 51.868091][ T4432] bond1: entered promiscuous mode [ 51.873751][ T28] audit: type=1400 audit(1773785820.992:727): avc: denied { create } for pid=4439 comm="syz.3.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 51.896587][ T4432] bond1: left promiscuous mode [ 51.965485][ T28] audit: type=1400 audit(1773785821.082:728): avc: denied { mount } for pid=4443 comm="syz.1.368" name="/" dev="autofs" ino=7674 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 52.066768][ T28] audit: type=1400 audit(1773785821.182:729): avc: denied { create } for pid=4454 comm="syz.4.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 52.096059][ T4446] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.144551][ T28] audit: type=1400 audit(1773785821.192:730): avc: denied { bind } for pid=4454 comm="syz.4.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 52.164443][ T28] audit: type=1400 audit(1773785821.212:731): avc: denied { setopt } for pid=4456 comm="syz.4.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 52.205152][ T28] audit: type=1400 audit(1773785821.212:732): avc: denied { bind } for pid=4456 comm="syz.4.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 52.230727][ T28] audit: type=1400 audit(1773785821.212:733): avc: denied { name_bind } for pid=4456 comm="syz.4.374" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 52.268331][ T28] audit: type=1400 audit(1773785821.212:734): avc: denied { node_bind } for pid=4456 comm="syz.4.374" saddr=::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 52.358956][ T28] audit: type=1400 audit(1773785821.222:735): avc: denied { write } for pid=4456 comm="syz.4.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 52.371600][ T4470] loop0: detected capacity change from 0 to 1024 [ 52.426487][ T4470] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.492571][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.524760][ T4446] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.661136][ T4446] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.785996][ T4446] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.899647][ T4506] loop1: detected capacity change from 0 to 512 [ 52.908844][ T47] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.930657][ T4506] EXT4-fs: Ignoring removed nomblk_io_submit option [ 52.946099][ T47] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.981614][ T4506] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.388: corrupted inode contents [ 53.001045][ T47] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.046061][ T4506] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 53.046306][ T4506] EXT4-fs (loop1): Remounting filesystem read-only [ 53.050214][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.055700][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 53.055726][ C1] EXT4-fs (loop1): initial error at time 1773785822: ext4_do_update_inode:5569: inode 15 [ 53.086889][ C1] EXT4-fs (loop1): last error at time 1773785822: ext4_do_update_inode:5569: inode 15 [ 53.097641][ T4506] EXT4-fs (loop1): 1 orphan inode deleted [ 53.104111][ T4506] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.343690][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.540780][ T4546] __nla_validate_parse: 4 callbacks suppressed [ 53.540823][ T4546] netlink: 16 bytes leftover after parsing attributes in process `syz.4.398'. [ 54.043523][ T4594] loop3: detected capacity change from 0 to 512 [ 54.077239][ T4594] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.191894][ T4575] syzkaller1: entered promiscuous mode [ 54.224654][ T4575] syzkaller1: entered allmulticast mode [ 54.506533][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.697491][ T4619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.424'. [ 54.707801][ T4619] netlink: 12 bytes leftover after parsing attributes in process `syz.1.424'. [ 55.008190][ T4640] xt_TPROXY: Can be used only with -p tcp or -p udp [ 55.019939][ T4640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.035998][ T4640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.342797][ T4650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.437'. [ 55.347726][ T4651] loop0: detected capacity change from 0 to 164 [ 55.361651][ T4650] netlink: 12 bytes leftover after parsing attributes in process `syz.1.437'. [ 55.391618][ T4651] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 55.416650][ T4651] netlink: 16 bytes leftover after parsing attributes in process `syz.0.436'. [ 55.509804][ T4662] netlink: 'syz.1.442': attribute type 1 has an invalid length. [ 55.528241][ T4662] 8021q: adding VLAN 0 to HW filter on device bond2 [ 55.588361][ T4662] bond2: (slave veth3): Enslaving as an active interface with a down link [ 55.630421][ T4669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.445'. [ 55.671939][ T4662] bond2: (slave dummy0): making interface the new active one [ 55.687561][ T4662] dummy0: entered promiscuous mode [ 55.693838][ T4662] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 55.718297][ T4673] ip6gre1: entered promiscuous mode [ 55.723552][ T4673] ip6gre1: entered allmulticast mode [ 55.763920][ T4662] bond2 (unregistering): (slave veth3): Releasing active interface [ 55.796658][ T4662] bond2 (unregistering): (slave dummy0): Releasing active interface [ 55.807298][ T4662] bond2 (unregistering): Released all slaves [ 56.508422][ T4705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.459'. [ 56.518136][ T4705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.459'. [ 56.704399][ T4703] ref_ctr_offset mismatch. inode: 0x1af offset: 0x0 ref_ctr_offset(old): 0x2000000000c0 ref_ctr_offset(new): 0x1000000008 [ 56.782165][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 56.782181][ T28] audit: type=1400 audit(1773785825.902:786): avc: denied { read } for pid=4711 comm="syz.2.463" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 56.819493][ T4715] netlink: 12 bytes leftover after parsing attributes in process `syz.1.464'. [ 56.971684][ T28] audit: type=1400 audit(1773785826.092:787): avc: denied { listen } for pid=4722 comm="syz.1.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 56.996528][ T28] audit: type=1400 audit(1773785826.092:788): avc: denied { accept } for pid=4722 comm="syz.1.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 57.094171][ T28] audit: type=1400 audit(1773785826.212:789): avc: denied { relabelfrom } for pid=4727 comm="syz.3.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 57.125376][ T28] audit: type=1400 audit(1773785826.212:790): avc: denied { relabelto } for pid=4727 comm="syz.3.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 57.708369][ T4738] netlink: 'syz.1.472': attribute type 1 has an invalid length. [ 57.897786][ T28] audit: type=1400 audit(1773785827.022:791): avc: denied { mount } for pid=4735 comm="syz.2.473" name="/" dev="mqueue" ino=2736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 57.921929][ T4745] loop1: detected capacity change from 0 to 512 [ 57.955992][ T4745] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 58.484764][ T28] audit: type=1400 audit(1773785827.602:792): avc: denied { create } for pid=4754 comm="syz.2.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 58.535801][ T28] audit: type=1400 audit(1773785827.662:793): avc: denied { connect } for pid=4754 comm="syz.2.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 58.549508][ T4759] loop4: detected capacity change from 0 to 1024 [ 58.598742][ T4759] EXT4-fs: Ignoring removed mblk_io_submit option [ 58.601509][ T4761] netlink: 'syz.1.482': attribute type 1 has an invalid length. [ 58.680435][ T4761] 8021q: adding VLAN 0 to HW filter on device bond3 [ 58.688154][ T4759] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.784948][ T4761] __nla_validate_parse: 3 callbacks suppressed [ 58.784976][ T4761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.482'. [ 58.811773][ T4769] EXT4-fs error (device loop4): mb_free_blocks:2047: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 58.854663][ T4761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.482'. [ 58.885117][ T4761] macsec1: entered promiscuous mode [ 58.910864][ T4761] bond3: entered promiscuous mode [ 58.939818][ T4761] macsec1: entered allmulticast mode [ 58.963588][ T4761] bond3: entered allmulticast mode [ 59.337837][ T28] audit: type=1400 audit(1773785828.462:794): avc: denied { block_suspend } for pid=4773 comm="syz.1.484" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 59.531917][ T28] audit: type=1400 audit(1773785828.652:795): avc: denied { setopt } for pid=4778 comm="syz.3.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 59.555891][ T4781] loop2: detected capacity change from 0 to 1024 [ 59.562734][ T4781] EXT4-fs: Ignoring removed bh option [ 59.615957][ T4781] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.631139][ T4781] netlink: 12 bytes leftover after parsing attributes in process `syz.2.487'. [ 59.660980][ T4785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.489'. [ 59.677793][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.692559][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.704738][ T4785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.489'. [ 59.726590][ T4789] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=4789 comm=syz.1.492 [ 59.845693][ T4803] veth1_to_bond: entered allmulticast mode [ 59.898066][ T4802] veth1_to_bond: left allmulticast mode [ 60.096923][ T4815] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 60.147920][ T4815] SELinux: failed to load policy [ 60.767796][ T4839] loop0: detected capacity change from 0 to 512 [ 60.798256][ T4839] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.822272][ T4839] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.959494][ T4846] loop1: detected capacity change from 0 to 128 [ 61.009764][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.042452][ T4846] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 61.118384][ T4857] netlink: 'syz.3.516': attribute type 22 has an invalid length. [ 61.143502][ T4860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.517'. [ 61.153235][ T4857] netlink: 4 bytes leftover after parsing attributes in process `syz.3.516'. [ 61.167809][ T4857] netlink: 'syz.3.516': attribute type 22 has an invalid length. [ 61.174056][ T129] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.205679][ T4857] netlink: 4 bytes leftover after parsing attributes in process `syz.3.516'. [ 61.213064][ T129] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.241135][ T129] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.262505][ T129] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.679999][ T4889] netlink: 'syz.0.527': attribute type 4 has an invalid length. [ 61.703838][ T4889] netlink: 152 bytes leftover after parsing attributes in process `syz.0.527'. [ 61.719057][ T4889] .`: renamed from bond0 (while UP) [ 61.802675][ T28] kauditd_printk_skb: 221 callbacks suppressed [ 61.802754][ T28] audit: type=1400 audit(1773785830.922:1017): avc: denied { mount } for pid=4893 comm="syz.1.541" name="/" dev="gadgetfs" ino=4728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 61.999052][ T4912] tipc: Failed to remove unknown binding: 66,1,1/0:1208800858/1208800860 [ 62.007869][ T4912] tipc: Failed to remove unknown binding: 66,1,1/0:1208800858/1208800860 [ 62.036686][ T28] audit: type=1400 audit(1773785831.162:1018): avc: denied { write } for pid=4913 comm="syz.2.536" path="socket:[10474]" dev="sockfs" ino=10474 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 62.126820][ T4905] cgroup: fork rejected by pids controller in /syz0 [ 62.272218][ T28] audit: type=1400 audit(1773785831.382:1019): avc: denied { read } for pid=5089 comm="syz.4.538" path="socket:[9874]" dev="sockfs" ino=9874 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 62.367163][ T28] audit: type=1400 audit(1773785831.382:1020): avc: denied { ioctl } for pid=5089 comm="syz.4.538" path="socket:[9874]" dev="sockfs" ino=9874 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 62.458809][ T28] audit: type=1400 audit(1773785831.562:1021): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 62.563586][ T28] audit: type=1400 audit(1773785831.682:1022): avc: denied { mounton } for pid=5514 comm="syz.1.543" path="/proc/241/task" dev="proc" ino=9890 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 62.589974][ T5515] capability: warning: `syz.1.543' uses deprecated v2 capabilities in a way that may be insecure [ 62.668098][ T28] audit: type=1400 audit(1773785831.742:1023): avc: denied { mount } for pid=5517 comm="syz.0.544" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 62.729936][ T28] audit: type=1400 audit(1773785831.762:1024): avc: denied { setopt } for pid=5521 comm="syz.3.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 62.783327][ T5526] bridge_slave_0: left allmulticast mode [ 62.794846][ T5526] bridge_slave_0: left promiscuous mode [ 62.802527][ T28] audit: type=1400 audit(1773785831.842:1025): avc: denied { bind } for pid=5521 comm="syz.3.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 62.861744][ T28] audit: type=1400 audit(1773785831.842:1026): avc: denied { map } for pid=5521 comm="syz.3.545" path="socket:[10499]" dev="sockfs" ino=10499 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 62.962244][ T5526] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.039063][ T5526] bridge_slave_1: left allmulticast mode [ 63.077756][ T5526] bridge_slave_1: left promiscuous mode [ 63.083641][ T5526] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.183761][ T5526] .`: (slave bond_slave_0): Releasing backup interface [ 63.234201][ T5545] netlink: 'syz.4.554': attribute type 2 has an invalid length. [ 63.260996][ T5526] .`: (slave bond_slave_1): Releasing backup interface [ 63.389518][ T5526] team0: Port device team_slave_0 removed [ 63.437924][ T5526] team0: Port device team_slave_1 removed [ 63.498613][ T5526] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.534954][ T5526] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.546071][ T5555] loop7: detected capacity change from 0 to 16384 [ 63.577774][ T5526] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.607499][ T5526] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.638468][ T5561] loop2: detected capacity change from 0 to 2048 [ 63.657520][ T5561] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.685505][ T5526] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 63.822666][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.937053][ T5581] netlink: 11522 bytes leftover after parsing attributes in process `syz.4.568'. [ 64.266447][ T5596] netlink: 64 bytes leftover after parsing attributes in process `syz.0.576'. [ 64.337364][ T5606] syzkaller1: entered promiscuous mode [ 64.344867][ T5606] syzkaller1: entered allmulticast mode [ 64.491142][ T5619] netlink: 16 bytes leftover after parsing attributes in process `syz.4.584'. [ 64.608772][ T5626] netlink: 28 bytes leftover after parsing attributes in process `syz.1.587'. [ 64.862189][ T5623] loop0: detected capacity change from 0 to 512 [ 65.061180][ T5623] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 65.139586][ T5623] EXT4-fs error (device loop0): ext4_quota_enable:7188: comm syz.0.586: Bad quota inum: 2, type: 1 [ 65.179252][ T5623] EXT4-fs warning (device loop0): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 65.209017][ T5670] netlink: 12 bytes leftover after parsing attributes in process `syz.4.596'. [ 65.280020][ T5670] bond1: entered promiscuous mode [ 65.299236][ T5669] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 65.404814][ T5669] EXT4-fs error (device loop0): ext4_quota_enable:7188: comm syz.0.586: Bad quota inum: 2, type: 1 [ 65.444754][ T5669] EXT4-fs warning (device loop0): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 65.875085][ T3310] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 65.959011][ T5709] loop0: detected capacity change from 0 to 256 [ 65.975783][ T5709] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 66.003882][ T5709] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 66.593341][ T5716] loop3: detected capacity change from 0 to 2048 [ 66.782263][ T5716] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.855656][ T5716] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.894780][ T5727] macvtap1: entered promiscuous mode [ 67.024890][ T5727] team0: entered promiscuous mode [ 67.040196][ T5727] team_slave_0: entered promiscuous mode [ 67.054091][ T5727] team_slave_1: entered promiscuous mode [ 67.101913][ T5727] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 67.146625][ T5727] team0: Device macvtap1 is already an upper device of the team interface [ 67.201229][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.212102][ T5727] team0: left promiscuous mode [ 67.217133][ T5727] team_slave_0: left promiscuous mode [ 67.222750][ T5727] team_slave_1: left promiscuous mode [ 67.261191][ T5729] sch_tbf: peakrate 8 is lower than or equals to rate 2048 ! [ 67.487714][ T5733] loop3: detected capacity change from 0 to 512 [ 67.508055][ T5745] loop0: detected capacity change from 0 to 512 [ 67.538723][ T5745] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 67.579865][ T5733] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 67.593672][ T5745] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.621: iget: bogus i_mode (2) [ 67.618039][ T5733] EXT4-fs (loop3): 1 truncate cleaned up [ 67.624719][ T5745] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 67.625791][ T5745] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.621: couldn't read orphan inode 15 (err -117) [ 67.635129][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 67.635159][ C1] EXT4-fs (loop0): initial error at time 1773786092: ext4_orphan_get:1391: inode 15 [ 67.635189][ C1] EXT4-fs (loop0): last error at time 1773786092: ext4_orphan_get:1391: inode 15 [ 67.674228][ T5733] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.738327][ T5745] loop0: lost filesystem error report for type 5 error -117 [ 67.739020][ T5745] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.766632][ T5745] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 67.781492][ T5745] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #2: block 3: comm syz.0.621: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 67.802130][ T5745] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #2: block 3: comm syz.0.621: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 67.836405][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.882658][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.438934][ T5778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.630'. [ 68.448926][ T5778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.630'. [ 68.589995][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 68.590014][ T28] audit: type=1400 audit(1773786093.705:1062): avc: denied { write } for pid=5786 comm="syz.3.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 69.317640][ T5801] loop3: detected capacity change from 0 to 136 [ 69.377621][ T5801] ISOFS: Logical zone size(768) < hardware blocksize(1024) [ 69.922018][ T28] audit: type=1400 audit(1773786095.035:1063): avc: denied { unmount } for pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 70.070270][ T28] audit: type=1400 audit(1773786095.185:1064): avc: denied { mounton } for pid=5817 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 70.207729][ T28] audit: type=1400 audit(1773786095.325:1065): avc: denied { listen } for pid=5826 comm="syz.2.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.316290][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.326022][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 70.341318][ T40] bond0 (unregistering): Released all slaves [ 70.349179][ T40] bond1 (unregistering): Released all slaves [ 70.389311][ T40] hsr_slave_0: left promiscuous mode [ 70.399644][ T40] hsr_slave_1: left promiscuous mode [ 70.408616][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.417638][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.451190][ T40] team0 (unregistering): Port device team_slave_1 removed [ 70.468605][ T40] team0 (unregistering): Port device team_slave_0 removed [ 70.549046][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 70.583389][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.590508][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.598301][ T5817] bridge_slave_0: entered allmulticast mode [ 70.605124][ T5817] bridge_slave_0: entered promiscuous mode [ 70.611998][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.619242][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.626745][ T5817] bridge_slave_1: entered allmulticast mode [ 70.634215][ T5817] bridge_slave_1: entered promiscuous mode [ 70.655113][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.666188][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.690201][ T5817] team0: Port device team_slave_0 added [ 70.696833][ T5817] team0: Port device team_slave_1 added [ 70.714306][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.721471][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.748089][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.759350][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.766530][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.793139][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.816844][ T5848] loop3: detected capacity change from 0 to 1024 [ 70.822270][ T5817] hsr_slave_0: entered promiscuous mode [ 70.829487][ T5817] hsr_slave_1: entered promiscuous mode [ 70.831029][ T5848] EXT4-fs: Ignoring removed orlov option [ 70.835912][ T5817] debugfs: 'hsr0' already exists in 'hsr' [ 70.847674][ T5817] Cannot create hsr debugfs directory [ 70.855302][ T5848] EXT4-fs: Ignoring removed nobh option [ 70.887749][ T5848] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.903377][ T5754] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 70.925645][ T5817] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 70.941449][ T5817] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 70.978574][ T5817] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 70.992332][ T5817] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 71.106797][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.134184][ T28] audit: type=1400 audit(1773786096.245:1066): avc: denied { name_bind } for pid=5877 comm="syz.0.655" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 71.185060][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.198012][ T882] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.205185][ T882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.252653][ T882] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.261231][ T882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.358349][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.395773][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.795396][ T5817] veth0_vlan: entered promiscuous mode [ 71.803512][ T5817] veth1_vlan: entered promiscuous mode [ 71.841326][ T5817] veth0_macvtap: entered promiscuous mode [ 71.869846][ T5817] veth1_macvtap: entered promiscuous mode [ 71.916515][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.941295][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.973135][ T47] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.989114][ T47] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.013204][ T47] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.030131][ T28] audit: type=1400 audit(1773786097.145:1067): avc: denied { create } for pid=5956 comm="syz.1.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 72.069050][ T3406] IPVS: starting estimator thread 0... [ 72.079474][ T47] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.108117][ T28] audit: type=1400 audit(1773786097.215:1068): avc: denied { mounton } for pid=5817 comm="syz-executor" path="/root/syzkaller.7KYmxa/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 72.184631][ T5958] IPVS: using max 2496 ests per chain, 124800 per kthread [ 72.279452][ T28] audit: type=1400 audit(1773786097.225:1069): avc: denied { mounton } for pid=5817 comm="syz-executor" path="/root/syzkaller.7KYmxa/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 72.338123][ T28] audit: type=1400 audit(1773786097.225:1070): avc: denied { mounton } for pid=5817 comm="syz-executor" path="/root/syzkaller.7KYmxa/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=13321 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 72.407093][ T28] audit: type=1400 audit(1773786097.255:1071): avc: denied { mounton } for pid=5817 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 73.251415][ T5995] macvtap1: entered promiscuous mode [ 73.286332][ T5995] team0: entered promiscuous mode [ 73.292463][ T5995] team_slave_0: entered promiscuous mode [ 73.322097][ T5995] team_slave_1: entered promiscuous mode [ 73.344152][ T5995] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 73.372508][ T5995] team0: Device macvtap1 is already an upper device of the team interface [ 73.420222][ T5995] team0: left promiscuous mode [ 73.430727][ T5995] team_slave_0: left promiscuous mode [ 73.457135][ T5995] team_slave_1: left promiscuous mode [ 73.795518][ T3423] IPVS: starting estimator thread 0... [ 73.904672][ T6017] IPVS: using max 2496 ests per chain, 124800 per kthread [ 75.341937][ T6046] team_slave_0: entered promiscuous mode [ 75.347706][ T6046] team_slave_1: entered promiscuous mode [ 75.356492][ T6046] macvtap1: entered promiscuous mode [ 75.377488][ T28] kauditd_printk_skb: 3003 callbacks suppressed [ 75.377503][ T28] audit: type=1400 audit(1773786100.495:4075): avc: denied { write } for pid=6049 comm="syz.5.688" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 75.392667][ T6046] team0: entered promiscuous mode [ 75.449208][ T6046] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 75.467889][ T6046] team0: Device macvtap1 is already an upper device of the team interface [ 75.495729][ T6046] team0: left promiscuous mode [ 75.511387][ T6046] team_slave_0: left promiscuous mode [ 75.516937][ T6046] team_slave_1: left promiscuous mode [ 75.894316][ T6057] loop5: detected capacity change from 0 to 136 [ 75.910878][ T6057] ISOFS: Logical zone size(768) < hardware blocksize(1024) [ 76.032803][ T6074] netlink: 12 bytes leftover after parsing attributes in process `syz.3.699'. [ 76.064578][ T6074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.699'. [ 76.073688][ T6074] netlink: 12 bytes leftover after parsing attributes in process `syz.3.699'. [ 76.124766][ T6074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.699'. [ 77.101105][ T6091] macvtap1: entered promiscuous mode [ 77.108112][ T6091] team0: entered promiscuous mode [ 77.135885][ T6091] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 77.214174][ T6089] loop5: detected capacity change from 0 to 2048 [ 77.273882][ T6091] team0: Device macvtap1 is already an upper device of the team interface [ 77.301759][ T6091] team0: left promiscuous mode [ 77.382612][ T6089] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.398562][ T6089] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.660599][ T129] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:5: bg 0: block 345: padding at end of block bitmap is not set [ 77.680136][ T129] EXT4-fs (loop5): Remounting filesystem read-only [ 77.696843][ T5817] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.165718][ T6117] netlink: 12 bytes leftover after parsing attributes in process `syz.1.711'. [ 78.196820][ T6117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.711'. [ 78.224894][ T6117] netlink: 12 bytes leftover after parsing attributes in process `syz.1.711'. [ 78.224894][ T47] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.236378][ T6117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.711'. [ 78.261814][ T129] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.299092][ T129] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.328370][ T129] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.573404][ T6121] loop5: detected capacity change from 0 to 512 [ 78.603919][ T6121] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 78.670317][ T6121] EXT4-fs (loop5): 1 truncate cleaned up [ 78.692584][ T6121] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.947871][ T5817] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.523277][ T28] audit: type=1326 audit(1773786105.635:4076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6166 comm="syz.1.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeb7f9c799 code=0x7ffc0000 [ 80.551759][ T28] audit: type=1326 audit(1773786105.635:4077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6166 comm="syz.1.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeb7f9c799 code=0x7ffc0000 [ 80.658595][ T28] audit: type=1326 audit(1773786105.635:4078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6166 comm="syz.1.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeb7f9c799 code=0x7ffc0000 [ 80.701175][ T28] audit: type=1326 audit(1773786105.635:4080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6166 comm="syz.1.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7efeb7f9c799 code=0x7ffc0000 [ 80.784530][ T28] audit: type=1326 audit(1773786105.635:4079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6166 comm="syz.1.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeb7f9c799 code=0x7ffc0000 [ 80.844987][ T28] audit: type=1326 audit(1773786105.665:4081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6166 comm="syz.1.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeb7f9c799 code=0x7ffc0000 [ 80.904689][ T28] audit: type=1326 audit(1773786105.665:4082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6166 comm="syz.1.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeb7f9c799 code=0x7ffc0000 [ 80.948290][ T28] audit: type=1326 audit(1773786105.715:4083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6151 comm="syz.3.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873946c799 code=0x7ffc0000 [ 80.978325][ T28] audit: type=1326 audit(1773786105.715:4084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6151 comm="syz.3.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873946c799 code=0x7ffc0000 [ 81.013156][ T28] audit: type=1326 audit(1773786105.715:4085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6151 comm="syz.3.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873946c799 code=0x7ffc0000 [ 81.136258][ T6173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.734'. [ 81.230794][ T6169] loop5: detected capacity change from 0 to 512 [ 81.284952][ T6169] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 81.367039][ T6169] EXT4-fs (loop5): 1 truncate cleaned up [ 81.408015][ T6169] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.554148][ T5817] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.568849][ T6193] netlink: 'syz.3.740': attribute type 1 has an invalid length. [ 81.583731][ T6191] netlink: 64 bytes leftover after parsing attributes in process `syz.0.750'. [ 81.608075][ T6193] 8021q: adding VLAN 0 to HW filter on device bond1 [ 81.648605][ T6191] lo speed is unknown, defaulting to 1000 [ 81.681047][ T6197] bond1: (slave veth3): Enslaving as an active interface with a down link [ 81.706187][ T6191] lo speed is unknown, defaulting to 1000 [ 81.713027][ T6191] lo speed is unknown, defaulting to 1000 [ 81.751088][ T6191] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 81.759571][ T6191] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 81.775482][ T6193] bond1: (slave dummy0): making interface the new active one [ 81.795833][ T6193] dummy0: entered promiscuous mode [ 81.801495][ T6193] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 81.828880][ T6191] lo speed is unknown, defaulting to 1000 [ 81.841653][ T6197] bond1 (unregistering): (slave veth3): Releasing active interface [ 81.855075][ T6197] bond1 (unregistering): (slave dummy0): Releasing active interface [ 82.290492][ T6197] bond1 (unregistering): Released all slaves [ 82.304929][ T6191] lo speed is unknown, defaulting to 1000 [ 82.311181][ T6191] lo speed is unknown, defaulting to 1000 [ 82.335521][ T6191] lo speed is unknown, defaulting to 1000 [ 82.342184][ T6191] lo speed is unknown, defaulting to 1000 [ 82.378218][ T6204] ip6gre1: entered promiscuous mode [ 82.400881][ T6204] ip6gre1: entered allmulticast mode [ 82.477529][ T6214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.748'. [ 82.487967][ T6214] netlink: 12 bytes leftover after parsing attributes in process `syz.2.748'. [ 83.749540][ T6261] syzkaller0: entered promiscuous mode [ 83.766934][ T6261] syzkaller0: entered allmulticast mode [ 83.836528][ T6250] loop3: detected capacity change from 0 to 512 [ 83.914250][ T6250] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 83.965849][ T6250] EXT4-fs (loop3): 1 truncate cleaned up [ 83.977952][ T6250] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.395338][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.640142][ T6294] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.648377][ T6294] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.669824][ T6294] nlmon0: left promiscuous mode [ 84.742105][ T6294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.762524][ T6294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.855525][ T3406] kernel read not supported for file /mls (pid: 3406 comm: kworker/1:3) [ 84.872528][ T30] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.969664][ T30] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.995811][ T30] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.013231][ T30] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.035581][ T30] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.053264][ T6309] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 85.062189][ T30] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.082447][ T30] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.105884][ T30] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.777950][ T6350] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1500) ! [ 85.849730][ T6352] bond4: entered promiscuous mode [ 86.058397][ T28] kauditd_printk_skb: 85 callbacks suppressed [ 86.058414][ T28] audit: type=1326 audit(1773786111.175:4171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6364 comm="syz.0.786" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f81c169c799 code=0x0 [ 86.125392][ T28] audit: type=1400 audit(1773786111.235:4172): avc: denied { shutdown } for pid=6366 comm="syz.2.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 86.260568][ T6369] syzkaller0: entered promiscuous mode [ 86.267089][ T6369] syzkaller0: entered allmulticast mode [ 86.349632][ T6378] loop5: detected capacity change from 0 to 512 [ 86.379429][ T6378] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 86.391654][ T6378] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.790: iget: bad i_size value: 38620345925642 [ 86.406986][ T6378] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 86.408210][ T6378] EXT4-fs (loop5): Remounting filesystem read-only [ 86.417605][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 86.417628][ C1] EXT4-fs (loop5): initial error at time 1773786111: ext4_orphan_get:1391: inode 15 [ 86.417658][ C1] EXT4-fs (loop5): last error at time 1773786111: ext4_orphan_get:1391: inode 15 [ 86.451174][ T6378] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.469944][ T28] audit: type=1400 audit(1773786111.585:4173): avc: denied { mount } for pid=6377 comm="syz.5.790" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 86.471772][ T6383] netlink: 'syz.2.791': attribute type 10 has an invalid length. [ 86.514182][ T6383] .`: (slave bridge0): Enslaving as an active interface with an up link [ 86.542961][ T5817] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.632022][ T28] audit: type=1400 audit(1773786111.745:4174): avc: denied { write } for pid=6390 comm="syz.2.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 86.909278][ T6400] netlink: 24 bytes leftover after parsing attributes in process `syz.0.799'. [ 86.931745][ T6400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.799'. [ 87.394256][ T28] audit: type=1400 audit(1773786112.505:4175): avc: denied { bind } for pid=6410 comm="syz.3.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 87.425316][ T6411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.805'. [ 87.465936][ T6411] netlink: 12 bytes leftover after parsing attributes in process `syz.3.805'. [ 87.475974][ T6413] netlink: 'syz.3.805': attribute type 10 has an invalid length. [ 87.496475][ T28] audit: type=1400 audit(1773786112.615:4176): avc: denied { create } for pid=6405 comm="syz.2.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 87.926271][ T28] audit: type=1400 audit(1773786113.005:4177): avc: denied { read } for pid=6405 comm="syz.2.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 88.064374][ T6433] netlink: 24 bytes leftover after parsing attributes in process `syz.2.809'. [ 88.422524][ T28] audit: type=1400 audit(1773786113.535:4178): avc: denied { read write } for pid=6444 comm="syz.3.814" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 88.472015][ T28] audit: type=1400 audit(1773786113.535:4179): avc: denied { open } for pid=6444 comm="syz.3.814" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 88.768513][ T28] audit: type=1326 audit(1773786113.885:4180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6450 comm="syz.1.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeb7f9c799 code=0x7fc00000 [ 89.316767][ T6463] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.370127][ T6463] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.411427][ T6466] netlink: 164 bytes leftover after parsing attributes in process `syz.2.823'. [ 89.445086][ T6463] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.497280][ T6463] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.587020][ T30] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.601990][ T30] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.624593][ T30] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.645447][ T882] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.774354][ T6485] netlink: 'syz.5.831': attribute type 4 has an invalid length. [ 89.892441][ T6485] netlink: 'syz.5.831': attribute type 4 has an invalid length. [ 90.235799][ T6508] bond3: left allmulticast mode [ 90.251111][ T6508] bond3: left promiscuous mode [ 90.265883][ T6508] macsec1: left promiscuous mode [ 90.286838][ T6508] macsec1: left allmulticast mode [ 90.293445][ T6508] bond4: left promiscuous mode [ 90.315574][ T12] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.324901][ T12] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.334226][ T12] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.343808][ T12] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.464715][ T6521] lo speed is unknown, defaulting to 1000 [ 91.034069][ T6532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.848'. [ 91.096042][ T6532] vlan2: entered allmulticast mode [ 91.366891][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 91.366909][ T28] audit: type=1400 audit(1773786116.485:4190): avc: denied { getopt } for pid=6533 comm="syz.2.849" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 91.422530][ T6534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.849'. [ 91.489442][ T6548] loop5: detected capacity change from 0 to 512 [ 91.553643][ T6548] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.620474][ T6548] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.704590][ T28] audit: type=1400 audit(1773786116.815:4191): avc: denied { watch watch_reads } for pid=6561 comm="syz.0.856" path="/bus" dev="sysfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 91.809649][ T6568] lo speed is unknown, defaulting to 1000 [ 92.407498][ T5817] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.476700][ T28] audit: type=1400 audit(1773786117.595:4192): avc: denied { sqpoll } for pid=6587 comm="syz.0.867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 92.791925][ T28] audit: type=1400 audit(1773786117.905:4193): avc: denied { read write } for pid=6610 comm="syz.1.876" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 92.844129][ T28] audit: type=1400 audit(1773786117.905:4194): avc: denied { open } for pid=6610 comm="syz.1.876" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 92.897172][ T28] audit: type=1400 audit(1773786118.015:4195): avc: denied { ioctl } for pid=6613 comm="syz.2.877" path="socket:[20719]" dev="sockfs" ino=20719 ioctlcmd=0x891c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 93.001551][ T6615] SELinux: failed to load policy [ 93.136287][ T6625] bond0: entered promiscuous mode [ 93.151092][ T6625] macvlan2: entered promiscuous mode [ 93.168234][ T6625] macvlan2: entered allmulticast mode [ 93.175289][ T6625] bond0: (slave macvlan2): Opening slave failed [ 93.236944][ T6632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.884'. [ 93.431321][ T6642] ip6gre1: entered promiscuous mode [ 93.437162][ T6642] ip6gre1: entered allmulticast mode [ 93.445995][ T30] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 93.458070][ T6642] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 93.465907][ T30] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 93.473811][ T6642] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 93.481681][ T35] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 93.714096][ T6658] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:20001 [ 93.910743][ T6657] loop3: detected capacity change from 0 to 1024 [ 93.934943][ T6657] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 93.974788][ T3406] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 94.035302][ T3406] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 94.444885][ T6670] syz.5.899 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 94.459830][ T6670] CPU: 1 UID: 0 PID: 6670 Comm: syz.5.899 Not tainted syzkaller #0 PREEMPT(full) [ 94.459939][ T6670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 94.459958][ T6670] Call Trace: [ 94.459965][ T6670] [ 94.459974][ T6670] __dump_stack+0x1d/0x30 [ 94.460004][ T6670] dump_stack_lvl+0x95/0xd0 [ 94.460030][ T6670] dump_stack+0x15/0x1b [ 94.460103][ T6670] dump_header+0x80/0x240 [ 94.460126][ T6670] oom_kill_process+0x295/0x350 [ 94.460149][ T6670] out_of_memory+0x97d/0xb80 [ 94.460176][ T6670] try_charge_memcg+0x62e/0xa10 [ 94.460266][ T6670] obj_cgroup_charge_pages+0x23/0xc0 [ 94.460293][ T6670] __memcg_kmem_charge_page+0x9e/0x170 [ 94.460326][ T6670] __alloc_frozen_pages_noprof+0x18a/0x360 [ 94.460396][ T6670] alloc_pages_mpol+0xb3/0x260 [ 94.460432][ T6670] alloc_pages_noprof+0x8f/0x130 [ 94.460465][ T6670] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 94.460531][ T6670] __kvmalloc_node_noprof+0x3d4/0x650 [ 94.460590][ T6670] ? futex_hash_allocate+0x190/0x9d0 [ 94.460620][ T6670] ? futex_hash_allocate+0x190/0x9d0 [ 94.460710][ T6670] futex_hash_allocate+0x190/0x9d0 [ 94.460743][ T6670] ? cap_task_prctl+0x13f/0x6e0 [ 94.460771][ T6670] futex_hash_prctl+0xd8/0xf0 [ 94.460864][ T6670] __se_sys_prctl+0xa3d/0x13f0 [ 94.460897][ T6670] __x64_sys_prctl+0x67/0x80 [ 94.461035][ T6670] x64_sys_call+0x2533/0x3020 [ 94.461066][ T6670] do_syscall_64+0x12c/0x370 [ 94.461104][ T6670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.461129][ T6670] RIP: 0033:0x7f9a63f7c799 [ 94.461202][ T6670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.461221][ T6670] RSP: 002b:00007f9a629cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 94.461249][ T6670] RAX: ffffffffffffffda RBX: 00007f9a641f5fa0 RCX: 00007f9a63f7c799 [ 94.461265][ T6670] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 94.461280][ T6670] RBP: 00007f9a64012c99 R08: 0000000000000000 R09: 0000000000000000 [ 94.461295][ T6670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.461309][ T6670] R13: 00007f9a641f6038 R14: 00007f9a641f5fa0 R15: 00007fff55387508 [ 94.461331][ T6670] [ 94.461463][ T6670] memory: usage 307200kB, limit 307200kB, failcnt 128 [ 94.714500][ T6670] memory+swap: usage 260400kB, limit 9007199254740988kB, failcnt 0 [ 94.732560][ T6670] kmem: usage 238880kB, limit 9007199254740988kB, failcnt 0 [ 94.762847][ T6670] Memory cgroup stats for /syz5: [ 94.763124][ T6670] cache 0 [ 94.796153][ T6670] rss 188416 [ 94.799720][ T6670] shmem 0 [ 94.802840][ T6670] mapped_file 0 [ 94.815816][ T6670] dirty 0 [ 94.824515][ T6670] writeback 0 [ 94.827994][ T6670] workingset_refault_anon 2376 [ 94.843210][ T6670] workingset_refault_file 0 [ 94.848113][ T6670] swap 0 [ 94.850979][ T6670] swapcached 5414912 [ 94.880022][ T6670] pgpgin 15680 [ 94.883549][ T6670] pgpgout 15634 [ 94.888270][ T6697] netlink: 228 bytes leftover after parsing attributes in process `syz.2.912'. [ 94.914766][ T6670] pgfault 28827 [ 94.918265][ T6670] pgmajfault 317 [ 94.921821][ T6670] inactive_anon 188416 [ 94.925976][ T6697] netlink: 228 bytes leftover after parsing attributes in process `syz.2.912'. [ 94.948401][ T6670] active_anon 0 [ 94.951919][ T6670] inactive_file 0 [ 94.965084][ T6670] active_file 0 [ 94.968712][ T6670] unevictable 0 [ 94.972170][ T6670] hierarchical_memory_limit 314572800 [ 94.977663][ T6670] hierarchical_memsw_limit 9223372036854771712 [ 94.983954][ T6670] total_cache 0 [ 94.987662][ T6670] total_rss 188416 [ 94.991449][ T6670] total_shmem 0 [ 94.995277][ T6670] total_mapped_file 0 [ 94.999342][ T6670] total_dirty 0 [ 95.003076][ T6670] total_writeback 0 [ 95.007093][ T6670] total_workingset_refault_anon 2376 [ 95.012461][ T6670] total_workingset_refault_file 0 [ 95.017729][ T6670] total_swap 0 [ 95.021102][ T6670] total_swapcached 5414912 [ 95.025551][ T6670] total_pgpgin 15680 [ 95.029516][ T6670] total_pgpgout 15634 [ 95.033494][ T6670] total_pgfault 28827 [ 95.037516][ T6670] total_pgmajfault 317 [ 95.041873][ T6670] total_inactive_anon 188416 [ 95.046852][ T6670] total_active_anon 0 [ 95.051160][ T6670] total_inactive_file 0 [ 95.055388][ T6670] total_active_file 0 [ 95.059527][ T6670] total_unevictable 0 [ 95.063507][ T6670] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.899,pid=6668,uid=0 [ 95.078456][ T6670] Memory cgroup out of memory: Killed process 6670 (syz.5.899) total-vm:96212kB, anon-rss:1408kB, file-rss:22240kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 95.297985][ T28] audit: type=1400 audit(1773786120.415:4196): avc: denied { setopt } for pid=6710 comm="syz.1.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 95.340406][ T28] audit: type=1400 audit(1773786120.415:4197): avc: denied { listen } for pid=6710 comm="syz.1.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 96.400320][ T6749] netlink: 'syz.0.933': attribute type 1 has an invalid length. [ 96.587196][ T28] audit: type=1400 audit(1773786121.685:4198): avc: denied { kexec_image_load } for pid=6757 comm="syz.1.937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 97.010695][ T6765] netlink: 4 bytes leftover after parsing attributes in process `syz.0.938'. [ 97.030992][ T6765] 8021q: adding VLAN 0 to HW filter on device team1 [ 97.404578][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 97.704675][ T6809] netlink: 1472 bytes leftover after parsing attributes in process `syz.0.956'. [ 97.730422][ T6809] netlink: 1472 bytes leftover after parsing attributes in process `syz.0.956'. [ 97.764518][ T28] audit: type=1400 audit(1773786122.875:4199): avc: denied { read } for pid=6812 comm="syz.1.958" path="socket:[20032]" dev="sockfs" ino=20032 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 97.963267][ T6832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.966'. [ 98.178672][ T6848] netlink: 12 bytes leftover after parsing attributes in process `syz.3.972'. [ 98.332519][ T6867] hsr0: entered promiscuous mode [ 98.348662][ T6867] netlink: 4 bytes leftover after parsing attributes in process `syz.5.981'. [ 98.487640][ T28] audit: type=1400 audit(1773786123.605:4200): avc: denied { write } for pid=6876 comm="syz.3.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 98.887528][ T6897] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.992'. [ 98.974521][ T28] audit: type=1326 audit(1773786124.085:4201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6902 comm="syz.3.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873946c799 code=0x7ffc0000 [ 99.050347][ T28] audit: type=1326 audit(1773786124.115:4202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6902 comm="syz.3.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873946c799 code=0x7ffc0000 [ 99.112725][ T28] audit: type=1326 audit(1773786124.125:4203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6902 comm="syz.3.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f873946c799 code=0x7ffc0000 [ 99.173417][ T6914] loop5: detected capacity change from 0 to 512 [ 99.182966][ T28] audit: type=1326 audit(1773786124.125:4204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6902 comm="syz.3.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873946c799 code=0x7ffc0000 [ 99.246015][ T6914] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 99.263270][ T28] audit: type=1326 audit(1773786124.125:4205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6902 comm="syz.3.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873946c799 code=0x7ffc0000 [ 99.288191][ T6914] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 99.289465][ T28] audit: type=1326 audit(1773786124.135:4206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6902 comm="syz.3.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f873946c799 code=0x7ffc0000 [ 99.324818][ T28] audit: type=1326 audit(1773786124.135:4207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6902 comm="syz.3.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873946c799 code=0x7ffc0000 [ 99.335220][ T6914] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.1000: Corrupt directory, running e2fsck is recommended [ 99.373555][ T6920] netlink: 'syz.0.1001': attribute type 33 has an invalid length. [ 99.400377][ T6920] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1001'. [ 99.432131][ T6920] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1001'. [ 99.444402][ T6922] tipc: Failed to remove unknown binding: 66,1,1/0:2317940745/2317940747 [ 99.450668][ T6914] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 99.452992][ T6922] tipc: Failed to remove unknown binding: 66,1,1/0:2317940745/2317940747 [ 99.476562][ T6914] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #15: comm syz.5.1000: corrupted in-inode xattr: e_name out of bounds [ 99.508333][ T6914] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 99.508653][ T6914] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1000: couldn't read orphan inode 15 (err -117) [ 99.518045][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 99.518072][ C1] EXT4-fs (loop5): initial error at time 1773786124: ext4_iget_extra_inode:5025: inode 15 [ 99.518102][ C1] EXT4-fs (loop5): last error at time 1773786124: ext4_iget_extra_inode:5025: inode 15 [ 99.557117][ T6914] loop5: lost filesystem error report for type 5 error -117 [ 99.557739][ T6914] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.623876][ T6914] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 99.635662][ T6914] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 99.647912][ T6914] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.1000: Corrupt directory, running e2fsck is recommended [ 99.663620][ T6914] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 99.688348][ T6914] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 99.707117][ T6914] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.1000: Corrupt directory, running e2fsck is recommended [ 99.739554][ T6934] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 99.762994][ T6934] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 99.788765][ T6934] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.1000: Corrupt directory, running e2fsck is recommended [ 99.844561][ T6914] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 99.887554][ T5817] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.220806][ T6987] netlink: 'syz.3.1028': attribute type 4 has an invalid length. [ 102.317406][ T7000] netlink: 'syz.3.1028': attribute type 4 has an invalid length. [ 102.474896][ T30] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.523369][ T30] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.575779][ T30] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.593230][ T30] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.608967][ T7017] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1031'. [ 102.655188][ T7019] loop5: detected capacity change from 0 to 256 [ 102.726459][ T7023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1034'. [ 102.738143][ T7023] .`: (slave bridge0): Releasing backup interface [ 103.303782][ T7035] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1048'. [ 103.327909][ T7035] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 104.070943][ T7042] netlink: 'syz.0.1051': attribute type 1 has an invalid length. [ 104.079033][ T7042] netlink: 'syz.0.1051': attribute type 4 has an invalid length. [ 104.087940][ T7042] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1051'. [ 104.342660][ T28] kauditd_printk_skb: 2378 callbacks suppressed [ 104.342675][ T28] audit: type=1400 audit(1773786129.455:6586): avc: denied { associate } for pid=7066 comm="syz.3.1049" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 104.446088][ T28] audit: type=1400 audit(1773786129.565:6587): avc: denied { listen } for pid=7072 comm="syz.0.1053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 104.539477][ T28] audit: type=1400 audit(1773786129.565:6588): avc: denied { read } for pid=7072 comm="syz.0.1053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 104.582203][ T7080] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1056'. [ 104.685462][ T7093] syz_tun: entered allmulticast mode [ 104.788734][ T28] audit: type=1326 audit(1773786129.905:6589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7105 comm="syz.0.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c169c799 code=0x7ffc0000 [ 104.838749][ T28] audit: type=1326 audit(1773786129.905:6590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7105 comm="syz.0.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c169c799 code=0x7ffc0000 [ 104.896034][ T28] audit: type=1326 audit(1773786129.905:6591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7105 comm="syz.0.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c169c799 code=0x7ffc0000 [ 104.974554][ T28] audit: type=1326 audit(1773786129.905:6592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7105 comm="syz.0.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c169c799 code=0x7ffc0000 [ 105.073840][ T28] audit: type=1326 audit(1773786129.905:6593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7105 comm="syz.0.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f81c169c799 code=0x7ffc0000 [ 105.112425][ T28] audit: type=1326 audit(1773786129.905:6594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7105 comm="syz.0.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c169c799 code=0x7ffc0000 [ 105.140469][ T28] audit: type=1326 audit(1773786129.905:6595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7105 comm="syz.0.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c169c799 code=0x7ffc0000 [ 105.324559][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 105.348986][ T7123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.358009][ T7123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.295733][ T7141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.326041][ T7141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.573903][ T7147] loop3: detected capacity change from 0 to 1024 [ 106.588729][ T7147] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 106.599181][ T7147] System zones: 0-1, 3-36 [ 106.612676][ T7147] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.1083: bad orphan inode 134217728 [ 106.624799][ T7147] loop3: lost filesystem error report for type 5 error -117 [ 106.628445][ T7147] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.846073][ T7147] ================================================================== [ 106.854376][ T7147] BUG: KCSAN: data-race in filemap_read / filemap_read [ 106.861336][ T7147] [ 106.863658][ T7147] write to 0xffff88810db506a8 of 8 bytes by task 7152 on cpu 1: [ 106.871572][ T7147] filemap_read+0x98d/0xa10 [ 106.876347][ T7147] generic_file_read_iter+0x79/0x330 [ 106.881739][ T7147] ext4_file_read_iter+0x1cc/0x290 [ 106.886938][ T7147] copy_splice_read+0x471/0x6c0 [ 106.891783][ T7147] splice_direct_to_actor+0x28f/0x670 [ 106.897149][ T7147] do_splice_direct+0x119/0x1a0 [ 106.902185][ T7147] do_sendfile+0x382/0x650 [ 106.906592][ T7147] __x64_sys_sendfile64+0x105/0x150 [ 106.911925][ T7147] x64_sys_call+0x2dc4/0x3020 [ 106.916604][ T7147] do_syscall_64+0x12c/0x370 [ 106.921274][ T7147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.927159][ T7147] [ 106.929566][ T7147] read to 0xffff88810db506a8 of 8 bytes by task 7147 on cpu 0: [ 106.937225][ T7147] filemap_read+0x6f/0xa10 [ 106.941723][ T7147] generic_file_read_iter+0x79/0x330 [ 106.947005][ T7147] ext4_file_read_iter+0x1cc/0x290 [ 106.952199][ T7147] copy_splice_read+0x471/0x6c0 [ 106.957076][ T7147] splice_direct_to_actor+0x28f/0x670 [ 106.962490][ T7147] do_splice_direct+0x119/0x1a0 [ 106.967444][ T7147] do_sendfile+0x382/0x650 [ 106.972031][ T7147] __x64_sys_sendfile64+0x105/0x150 [ 106.977225][ T7147] x64_sys_call+0x2dc4/0x3020 [ 106.981899][ T7147] do_syscall_64+0x12c/0x370 [ 106.986571][ T7147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.992541][ T7147] [ 106.994875][ T7147] value changed: 0x00000000000001a9 -> 0x00000000000001aa [ 107.001970][ T7147] [ 107.004279][ T7147] Reported by Kernel Concurrency Sanitizer on: [ 107.010410][ T7147] CPU: 0 UID: 0 PID: 7147 Comm: syz.3.1083 Not tainted syzkaller #0 PREEMPT(full) [ 107.019854][ T7147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 107.029981][ T7147] ================================================================== [ 107.193970][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.