last executing test programs: 26.416134998s ago: executing program 0 (id=22): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) shutdown(r1, 0x1) 25.970993639s ago: executing program 0 (id=36): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x3fffffffffffff, 0x200000000000000}, 0xfffffffe}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0xfffffffe, 0x400000, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffffb, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}, [@mark={0xc, 0x15, {0x35075a, 0x10}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x5}, @in6=@dev={0xfe, 0x80, '\x00', 0x3e}, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2e}}, [@migrate={0x50, 0x11, [{@in=@loopback=0xa010101, @in=@loopback, @in6=@rand_addr=' \x01\x00', @in=@rand_addr=0x64010102, 0x3c, 0x4, 0x0, 0x0, 0xa, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x6a8dd86ef567f079}, 0x4020800) 25.92471951s ago: executing program 0 (id=40): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000a0000000000000a07000000080000000000000b0400000009000000010000130c0000000740"], 0x0, 0x4a, 0x0, 0x1, 0x800, 0x10000}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041800"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 25.762284004s ago: executing program 0 (id=44): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x121c040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000280)='./file0/../file0\x00') pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 25.672350946s ago: executing program 0 (id=45): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000019340)={0x0, 0x0, &(0x7f0000019300)={&(0x7f0000019240)={0x14, 0x0, 0x20, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048000) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x9f280, 0x0, 0x399}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x1}, 0x400ee00) io_uring_enter(r0, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x0) 24.863844176s ago: executing program 0 (id=52): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x5}, &(0x7f00000001c0)=0x8) 24.863708446s ago: executing program 32 (id=52): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x5}, &(0x7f00000001c0)=0x8) 2.201353487s ago: executing program 1 (id=440): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r1, 0x0, 0xf3a, 0x0) tee(r0, r4, 0xf3a, 0x4) write$binfmt_elf64(r2, &(0x7f0000000380)=ANY=[], 0x18c6) 2.041260721s ago: executing program 1 (id=444): r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 1.763819038s ago: executing program 4 (id=447): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000700)=@updpolicy={0x108, 0x19, 0x100, 0x70bd2b, 0x25dfdbfd, {{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}, @in=@multicast1, 0x4e20, 0x0, 0x4e21, 0x400, 0xa, 0x0, 0x8242879ed79f5900, 0x29}, {0x2, 0x2, 0x7, 0xffffffff, 0x7, 0x8, 0xa8, 0x1ff}, {0x7, 0x3, 0xba74, 0x4}, 0xfffffffe, 0x6e6bbf, 0x1, 0x0, 0x3, 0x2}, [@proto={0x5, 0x19, 0x3c}, @replay_esn_val={0x2c, 0x17, {0x4, 0x70bd25, 0x70bd2d, 0x70bd27, 0x70bd2c, 0xa, [0x1, 0x1, 0xffffffff, 0xc7]}}, @proto={0x5, 0x19, 0x6c}, @lastused={0xc, 0xf, 0x2}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0x108}, 0x1, 0x0, 0x0, 0x880}, 0x40000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x100, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 1.476653735s ago: executing program 5 (id=450): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f0000000500), &(0x7f0000000240)=r0}, 0x20) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000040)={0x0, 0xea60}, 0x10) read(r0, &(0x7f0000000080)=""/5, 0x5) close(0x3) 1.396750747s ago: executing program 4 (id=452): r0 = epoll_create1(0x80000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r1, &(0x7f0000000300)=""/186, 0xba) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.291417509s ago: executing program 4 (id=455): unshare(0x2c020400) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) 1.2775532s ago: executing program 5 (id=456): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.173920172s ago: executing program 4 (id=457): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@nouid32}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpid}], [], 0x2c}, 0x84, 0x4f0, &(0x7f0000001e00)="$eJzs3M1vFOUfAPDvTOkLUGjhR37Ki1JFYyPa0oLKwYMaTbhoTPSAx1oqQQoYWhMhRIoxeDT+BerRxMSTF71ooka9qPGqd2NCDBdQE7Nmdmfa3XZ3u91CK+znk0z7PDPPvHyfmWd2Zp/ZCaBjDWV/koj+iPglIgYq2doCQ5V/169emPzz6oXJJEqlF/5IyuWuXb0wWRQt5tucZ4bTiPTtJHbXWe/MufMnJ6anp87m+dHZU6+Nzpw7//CJUxPHp45PnR4/fPjQwbHHHh1/pKU4Li4zPYvr2q43z+zZeeSl956dLMXL332cbW9/Pr06jorBltbbzFAMRSm3MLan/Pf+VS/9v2VLRPTm6WTDOm8MLeuKiGx3dZfb/0B0xcLOG4hn3prPfLVOGwjcNNln07YlY7vy/+n85xdwO0q0cehQxSd+dv9bDGt5/bHerjyZ/Z0qx389H354rlI3aXYvO1i5Y+9qMP//64zrW0iWBpZZf39EHJ376/1siLrfQzSRtFwSAGDeF9n1z0P1rv/SmmubrXkfymBE7I+I7RHxv4jYEel8mTsi4s4Vrn9oUX7p9c9PG1e4yBXJrv8ez/u2iqEypYgrmc9tKcffnbxyYnrqQF4nw9Hdm+XHmqzjy6d/frfRtKGq679syNZfXAvm2/H7ht7aeY5NzE6sIuQaVy5FEhvqxZ/M9wRkNbAzIna1sfyszk48+NGeLL1189Lpy8ffxA3oZyp9GPFAZf/PxaL4C0llTY36J0f7YnrqwGhxVCz1/Y+Xn6/Od1ela+Lvay2mvnaDrePKpYhNdY//PP6iGRT9tTN5/uv+ltdx+dd3Gt7TLN3/SRydqy6RH/8bF6otO/57khfL6Z583BsTs7NnxyI+z0fUjB9fWFqRL8pn8Q/vq42/cl+cZue4fz7I59sdEdlBfFdE3B0Re/Ntvyci7o2IfU3i//ap+15tXkNtHv83QBb/sWb7P2Iwqe6vbyPRdfKbzxqtv7Xz36FyajgfU33+62mw3FY3cLX1BwAAALeCtNwHnaQjVc9vF3bEpnT6zMzs/qF4/fSxSl/1YHSnxTddA1Xfh47l3w0X+fFF+YMRsa38pNHGcn5k8sz0lnWKGajYXNX+K+eCNB0ZqUz7rdFDL8DtY0X9aNUPnX3y6Y3fGGBN+b0mdC7tHzqX9g+dS/uHzlWv/V+MuL4OmwKssXY//xc/MADccko176cEOor7f+hc2j90pKU/ic9ft5KdE9r/yf/09iOreWPAzU+UBtqfPRpPmlv5ArtaK1y8/aLlJbdWOIkowkmbxFUnEenCmL/zt0mWx3RXyvS0vqlrn0iXLfPEcrXRvaJ3YvTVqY29eaI3IlpdzsU1q9XiDJF4yyQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBL+zcAAP//Flvq9A==") mkdir(&(0x7f00000002c0)='./file0\x00', 0xe0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) open(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0xed) rmdir(&(0x7f0000000280)='./file0/file0\x00') rmdir(&(0x7f0000000000)='./file0\x00') 1.062304404s ago: executing program 5 (id=459): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) dup2(r3, r2) write$cgroup_devices(r3, 0x0, 0x8) write(r0, 0x0, 0x0) 989.743627ms ago: executing program 1 (id=461): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r1, 0x9801, 0x802}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x29}}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x4c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r1, 0x1040, 0x4611a}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x7f85a}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x4c}}, 0x4040000) 927.632388ms ago: executing program 1 (id=462): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) socket$inet6(0xa, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3fffc}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000480)=ANY=[@ANYBLOB="6e6174000000295a00000000000000000000000067045b8c000000000000000004000000000000000000000000000000000000000000000700000000000000000000000000000000000000287ee7aa74cd0bdecc8b3ff3dbc700"/113], 0x68) 814.264851ms ago: executing program 2 (id=463): r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x4, 0x6, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000240)='.\x00', 0x60000526) r2 = open(&(0x7f0000000140)='./bus\x00', 0x149cc2, 0x1c0) fsetxattr(r2, &(0x7f0000001040)=@known='security.selinux\x00', &(0x7f00000001c0)='\xbc\x1aO\x06Pc\xd5\xc7\x99\xbb\x9e\xc5\xe8?\x89s\x81\xde\fU\xe2\xb2\xc9\b\xec^t\xfa\x16\x94\x14Q`w\xea\x18\x9d\x15&\f\xf2\x98m\n\xa4\xf9\xa1\f\xd7%\xd3Z\xca\xf3\xae\xc7@L\x14\x1a0\xf5N\xef\xb5r\x91\rL\xb21X\x8b\x0f)\xd9\x92i\x01\x86\x15j\xcf\x02\xc9\x92\x01%\xd8\x91\x10\xd9f\xcb\xed\xee\x7fYjw\xf5\xd4L\xdd\x8d\x98\xbb\xe38\xf4\xc7\xdd\x1b\xb1\xe1\vb\x16V:\xb1v\xd3i\x0f\xfd\t\x00\xd4K\x15J\x97GD)\xadF.\xb9\xfa\x84\xa2DI(\xcd\x8d\x12\xbe\\\xee\xdc\x96\x9c\x17\xd9\x10\x9f\xc4\x9aX\xcb\x00\x00', 0xa5, 0x0) copy_file_range(r0, &(0x7f00000001c0)=0x4, r0, 0x0, 0x8, 0x0) 678.027544ms ago: executing program 5 (id=465): syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xfffffdfc}]) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x2000000, 0x0, 0x4008000}, 0x4000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)}, 0x0) 648.117085ms ago: executing program 2 (id=466): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xaf8, 0xc000, 0x1, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 561.523537ms ago: executing program 2 (id=468): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) write$UHID_INPUT(r1, &(0x7f0000001040)={0x9, {"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", 0x1000}}, 0x1006) 561.410307ms ago: executing program 3 (id=469): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) 560.327057ms ago: executing program 4 (id=470): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x1008}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x300450c3}, 0x4004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 477.271719ms ago: executing program 2 (id=471): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @local, 'ip6gre0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'veth0_virt_wifi\x00'}}, 0x1e) 434.27945ms ago: executing program 3 (id=481): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002440)=@newtfilter={0x38, 0x2c, 0xf25, 0x70bd29, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {}, {0x16, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_POLICE={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 406.573651ms ago: executing program 2 (id=472): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r2, r1, 0x25, 0x0, @val=@perf_event={0x17}}, 0x18) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @random="b84fbdff8a20", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, @local, {[], {{0x2, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4f}}}}}}}, 0x0) 345.573592ms ago: executing program 3 (id=473): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x6}}, 0x20) 305.847863ms ago: executing program 4 (id=474): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1cb842, 0x0) io_setup(0x20fe, &(0x7f0000000540)=0x0) io_submit(r2, 0x3, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000200)='p', 0x8200, 0x600}]) 302.741303ms ago: executing program 2 (id=475): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000180)={0x8, &(0x7f0000000200)=[{0x2008, 0x5, 0x5, 0xffffc15b}, {0x3, 0x3, 0x9, 0x6}, {0x3, 0x8, 0x63, 0xffffff39}, {0x2004, 0xe1, 0x1, 0x8}, {0x3, 0xf, 0x10, 0x4}, {0x1, 0x2, 0x81}, {0xb, 0x3, 0x40, 0x7}, {0x200, 0x1, 0x2c, 0x5}]}) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) 294.303993ms ago: executing program 5 (id=476): r0 = syz_clone(0x0, 0x0, 0x39, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000400)='stat\x00') pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) 251.868264ms ago: executing program 3 (id=477): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x40022, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x7, @perf_config_ext={0x2}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0xa0, 0x21, r2, 0xee00}, {@in6=@private1, 0x4d6, 0x32}, @in=@private=0xa010100, {0x0, 0xe839, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x6, 0x0, 0xfffffffffffffffe}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x70}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r2, 0x2}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8040880}, 0x2014) 157.495956ms ago: executing program 1 (id=478): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000280)="80ef4f41a607fe", 0x7}], 0x1) 82.537318ms ago: executing program 3 (id=479): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000140)=0x4, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e1f, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) 63.391279ms ago: executing program 5 (id=480): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x184) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r1, 0x0) write(r0, &(0x7f00000002c0)='8q', 0x2) 62.487339ms ago: executing program 1 (id=482): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x400, 0x0, 0x0, 0x3, 0x5, 0x43, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) 0s ago: executing program 3 (id=483): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fcntl$getflags(r1, 0x401) kernel console output (not intermixed with test programs): [ 22.250364][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 22.250383][ T28] audit: type=1400 audit(1785597577.858:124): avc: denied { write } for pid=3262 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 22.281652][ T28] audit: type=1400 audit(1785597577.868:125): avc: denied { write } for pid=3273 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.99' (ED25519) to the list of known hosts. [ 27.734971][ T28] audit: type=1400 audit(1785597583.338:126): avc: denied { mounton } for pid=3283 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.759645][ T28] audit: type=1400 audit(1785597583.368:127): avc: denied { mount } for pid=3283 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.760325][ T3283] cgroup: Unknown subsys name 'net' [ 27.788470][ T28] audit: type=1400 audit(1785597583.388:128): avc: denied { unmount } for pid=3283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.919707][ T3283] cgroup: Unknown subsys name 'cpuset' [ 27.926632][ T3283] cgroup: Unknown subsys name 'rlimit' [ 28.055741][ T28] audit: type=1400 audit(1785597583.658:129): avc: denied { setattr } for pid=3283 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.080759][ T28] audit: type=1400 audit(1785597583.658:130): avc: denied { create } for pid=3283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.104286][ T28] audit: type=1400 audit(1785597583.658:131): avc: denied { write } for pid=3283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.126839][ T28] audit: type=1400 audit(1785597583.658:132): avc: denied { read } for pid=3283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 28.127432][ T3285] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.150186][ T28] audit: type=1400 audit(1785597583.658:133): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 28.182618][ T28] audit: type=1400 audit(1785597583.658:134): avc: denied { mounton } for pid=3283 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.207015][ T3283] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.212310][ T28] audit: type=1400 audit(1785597583.658:135): avc: denied { mount } for pid=3283 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 29.589145][ T3295] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.596460][ T3295] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.604189][ T3295] bridge_slave_0: entered allmulticast mode [ 29.610916][ T3295] bridge_slave_0: entered promiscuous mode [ 29.633374][ T3295] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.641517][ T3295] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.649214][ T3295] bridge_slave_1: entered allmulticast mode [ 29.656456][ T3295] bridge_slave_1: entered promiscuous mode [ 29.698004][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.705945][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.713621][ T3302] bridge_slave_0: entered allmulticast mode [ 29.720153][ T3302] bridge_slave_0: entered promiscuous mode [ 29.731632][ T3295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.749636][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.757015][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.764866][ T3302] bridge_slave_1: entered allmulticast mode [ 29.771529][ T3302] bridge_slave_1: entered promiscuous mode [ 29.783903][ T3295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.793642][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.801149][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.808463][ T3298] bridge_slave_0: entered allmulticast mode [ 29.815270][ T3298] bridge_slave_0: entered promiscuous mode [ 29.837554][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.844892][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.852539][ T3298] bridge_slave_1: entered allmulticast mode [ 29.859409][ T3298] bridge_slave_1: entered promiscuous mode [ 29.882763][ T3295] team0: Port device team_slave_0 added [ 29.897779][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.911143][ T3295] team0: Port device team_slave_1 added [ 29.921142][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.928575][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.936590][ T3301] bridge_slave_0: entered allmulticast mode [ 29.943118][ T3301] bridge_slave_0: entered promiscuous mode [ 29.951350][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.970572][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.979993][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.987195][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.994673][ T3301] bridge_slave_1: entered allmulticast mode [ 30.001182][ T3301] bridge_slave_1: entered promiscuous mode [ 30.020608][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.043235][ T3294] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.050739][ T3294] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.058373][ T3294] bridge_slave_0: entered allmulticast mode [ 30.065374][ T3294] bridge_slave_0: entered promiscuous mode [ 30.072030][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.079026][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.105786][ T3295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.126210][ T3302] team0: Port device team_slave_0 added [ 30.132164][ T3294] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.139596][ T3294] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.147216][ T3294] bridge_slave_1: entered allmulticast mode [ 30.153943][ T3294] bridge_slave_1: entered promiscuous mode [ 30.161372][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.168490][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.196533][ T3295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.208595][ T3298] team0: Port device team_slave_0 added [ 30.216065][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.225994][ T3302] team0: Port device team_slave_1 added [ 30.251386][ T3298] team0: Port device team_slave_1 added [ 30.262430][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.276962][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.284105][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.310832][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.322776][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.329951][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.356628][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.369122][ T3294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.387382][ T3301] team0: Port device team_slave_0 added [ 30.396098][ T3301] team0: Port device team_slave_1 added [ 30.402976][ T3294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.413024][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.420129][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.447575][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.473930][ T3295] hsr_slave_0: entered promiscuous mode [ 30.480096][ T3295] hsr_slave_1: entered promiscuous mode [ 30.494309][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.501394][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.528360][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.562457][ T3302] hsr_slave_0: entered promiscuous mode [ 30.568698][ T3302] hsr_slave_1: entered promiscuous mode [ 30.574724][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 30.580631][ T3302] Cannot create hsr debugfs directory [ 30.592536][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.599595][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.625974][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.639942][ T3294] team0: Port device team_slave_0 added [ 30.664907][ T3298] hsr_slave_0: entered promiscuous mode [ 30.671069][ T3298] hsr_slave_1: entered promiscuous mode [ 30.676954][ T3298] debugfs: 'hsr0' already exists in 'hsr' [ 30.683063][ T3298] Cannot create hsr debugfs directory [ 30.689344][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.696520][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.723481][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.735026][ T3294] team0: Port device team_slave_1 added [ 30.750260][ T3294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.757717][ T3294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.783824][ T3294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.809958][ T3294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.817519][ T3294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.844535][ T3294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.907620][ T3301] hsr_slave_0: entered promiscuous mode [ 30.913995][ T3301] hsr_slave_1: entered promiscuous mode [ 30.920166][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 30.926063][ T3301] Cannot create hsr debugfs directory [ 30.948652][ T3294] hsr_slave_0: entered promiscuous mode [ 30.955166][ T3294] hsr_slave_1: entered promiscuous mode [ 30.961696][ T3294] debugfs: 'hsr0' already exists in 'hsr' [ 30.967547][ T3294] Cannot create hsr debugfs directory [ 31.093144][ T3295] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.102122][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.120477][ T3295] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.129335][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.144291][ T3295] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.153859][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.166503][ T3295] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.175708][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.196887][ T3302] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.205583][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.219399][ T3302] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.228133][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.236642][ T3302] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.245806][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.259955][ T3302] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.268435][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.287504][ T3298] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.296385][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.304808][ T3298] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.313734][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.321589][ T3298] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.330644][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.340183][ T3298] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.350379][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.386565][ T3294] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.395129][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.403076][ T3294] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.412509][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.421273][ T3294] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.430825][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.449607][ T3294] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.460362][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.487614][ T3301] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.496299][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.504380][ T3301] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.512807][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.521345][ T3301] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.530707][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.548660][ T3301] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.557870][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.582935][ T3295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.605886][ T3295] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.624343][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.631587][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.643297][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.651026][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.666760][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.698813][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.717570][ T3294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.726672][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.734047][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.744570][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.753394][ T399] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.760763][ T399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.787121][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.796422][ T3294] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.807731][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.824140][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.831445][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.842492][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.849877][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.863121][ T399] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.870982][ T399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.885373][ T399] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.892892][ T399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.905794][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.934178][ T399] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.942215][ T399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.955932][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.963286][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.984163][ T3294] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.056089][ T3295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.220752][ T3295] veth0_vlan: entered promiscuous mode [ 32.236427][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.245081][ T3295] veth1_vlan: entered promiscuous mode [ 32.287795][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.302170][ T3294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.310522][ T3295] veth0_macvtap: entered promiscuous mode [ 32.322856][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.333886][ T3295] veth1_macvtap: entered promiscuous mode [ 32.364158][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.384319][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.410327][ T399] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.421559][ T399] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.441970][ T3302] veth0_vlan: entered promiscuous mode [ 32.469039][ T68] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.483752][ T68] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.504239][ T3302] veth1_vlan: entered promiscuous mode [ 32.523490][ T3298] veth0_vlan: entered promiscuous mode [ 32.533158][ T3295] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.538860][ T3302] veth0_macvtap: entered promiscuous mode [ 32.568250][ T3302] veth1_macvtap: entered promiscuous mode [ 32.579029][ T3298] veth1_vlan: entered promiscuous mode [ 32.596971][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.615489][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.659673][ T3298] veth0_macvtap: entered promiscuous mode [ 32.672770][ T3294] veth0_vlan: entered promiscuous mode [ 32.681816][ T3298] veth1_macvtap: entered promiscuous mode [ 32.694548][ T3301] veth0_vlan: entered promiscuous mode [ 32.710042][ T3294] veth1_vlan: entered promiscuous mode [ 32.718040][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.727814][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.746347][ T3301] veth1_vlan: entered promiscuous mode [ 32.790572][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.805924][ T3294] veth0_macvtap: entered promiscuous mode [ 32.821009][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.838765][ T3294] veth1_macvtap: entered promiscuous mode [ 32.849561][ T3301] veth0_macvtap: entered promiscuous mode [ 32.860517][ T3508] loop0: detected capacity change from 0 to 512 [ 32.874034][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 32.874052][ T28] audit: type=1400 audit(1785597588.478:166): avc: denied { append } for pid=3509 comm="syz.2.3" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 32.889213][ T30] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.929256][ T3301] veth1_macvtap: entered promiscuous mode [ 32.930824][ T28] audit: type=1400 audit(1785597588.528:167): avc: denied { read write } for pid=3512 comm="syz.1.2" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 32.941987][ T3294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.968873][ T3294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.973109][ T3508] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.7: iget: bad i_size value: 38620345925642 [ 32.977805][ T28] audit: type=1400 audit(1785597588.528:168): avc: denied { open } for pid=3512 comm="syz.1.2" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 33.013596][ T28] audit: type=1400 audit(1785597588.568:169): avc: denied { ioctl } for pid=3512 comm="syz.1.2" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 33.039410][ T28] audit: type=1400 audit(1785597588.598:170): avc: denied { create } for pid=3513 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 33.059349][ T28] audit: type=1400 audit(1785597588.598:171): avc: denied { bind } for pid=3513 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 33.060092][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.080608][ T28] audit: type=1400 audit(1785597588.598:172): avc: denied { name_bind } for pid=3513 comm="syz.2.8" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 33.089002][ T3508] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 33.132997][ T28] audit: type=1400 audit(1785597588.598:173): avc: denied { node_bind } for pid=3513 comm="syz.2.8" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 33.133704][ T3508] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.7: couldn't read orphan inode 15 (err -117) [ 33.155412][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 33.155435][ C1] EXT4-fs (loop0): initial error at time 1785597588: ext4_orphan_get:1399: inode 15 [ 33.155467][ C1] EXT4-fs (loop0): last error at time 1785597588: ext4_orphan_get:1399: inode 15 [ 33.167866][ T28] audit: type=1400 audit(1785597588.598:174): avc: denied { write } for pid=3513 comm="syz.2.8" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 33.167896][ T28] audit: type=1400 audit(1785597588.598:175): avc: denied { connect } for pid=3513 comm="syz.2.8" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 33.176755][ T3508] loop0: lost filesystem error report for type 5 error -117 [ 33.242234][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.254689][ T3508] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.261742][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.289585][ T399] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.309183][ T30] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.319228][ T30] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.347171][ T3506] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.7: bg 0: block 5: invalid block bitmap [ 33.405612][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.419770][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.441990][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.579197][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.588705][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.810559][ T399] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.823855][ T399] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.879345][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.902610][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.940458][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.153005][ T3565] netlink: 20 bytes leftover after parsing attributes in process `syz.3.21'. [ 34.217458][ T3568] xt_hashlimit: size too large, truncated to 1048576 [ 34.349711][ T3585] loop3: detected capacity change from 0 to 1024 [ 34.361447][ T3585] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 34.375094][ T3586] Illegal XDP return value 4294967282 on prog (id 5) dev syz_tun, expect packet loss! [ 34.382087][ T3585] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 34.400765][ T3585] JBD2: no valid journal superblock found [ 34.411815][ T3585] EXT4-fs (loop3): Could not load journal inode [ 34.796469][ T3620] loop3: detected capacity change from 0 to 512 [ 34.811708][ T3620] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.43: iget: bad i_size value: 38620345925642 [ 34.824816][ T3622] ======================================================= [ 34.824816][ T3622] WARNING: The mand mount option has been deprecated and [ 34.824816][ T3622] and is ignored by this kernel. Remove the mand [ 34.824816][ T3622] option from the mount to silence this warning. [ 34.824816][ T3622] ======================================================= [ 34.828255][ T3620] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 34.864778][ T3620] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.43: couldn't read orphan inode 15 (err -117) [ 34.874260][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 34.874284][ C1] EXT4-fs (loop3): initial error at time 1785597590: ext4_orphan_get:1399: inode 15 [ 34.874337][ C1] EXT4-fs (loop3): last error at time 1785597590: ext4_orphan_get:1399: inode 15 [ 34.913596][ T3620] loop3: lost filesystem error report for type 5 error -117 [ 34.914390][ T3620] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.051533][ T3620] EXT4-fs (loop3): shut down requested (1) [ 35.076485][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.639722][ T3295] syz-executor (3295) used greatest stack depth: 10936 bytes left [ 35.645594][ T3639] loop2: detected capacity change from 0 to 256 [ 35.659548][ T3639] msdos: Bad value for 'time_offset' [ 35.669791][ T399] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.743845][ T399] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.771835][ T399] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.846126][ T3658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.57'. [ 35.857838][ T399] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.935055][ T3643] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.948560][ T3666] process 'syz.3.58' launched './file0' with NULL argv: empty string added [ 35.949078][ T3643] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.966436][ T3643] bridge_slave_0: entered allmulticast mode [ 36.003979][ T3643] bridge_slave_0: entered promiscuous mode [ 36.021529][ T3643] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.031092][ T3643] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.042705][ T3643] bridge_slave_1: entered allmulticast mode [ 36.057969][ T3643] bridge_slave_1: entered promiscuous mode [ 36.163687][ T3643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.185821][ T3643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.202858][ T399] bridge_slave_1: left allmulticast mode [ 36.209192][ T399] bridge_slave_1: left promiscuous mode [ 36.215422][ T399] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.223756][ T399] bridge_slave_0: left allmulticast mode [ 36.229837][ T399] bridge_slave_0: left promiscuous mode [ 36.236216][ T399] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.312707][ T399] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 36.323529][ T399] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 36.334265][ T399] bond0 (unregistering): Released all slaves [ 36.363419][ T3643] team0: Port device team_slave_0 added [ 36.372036][ T3643] team0: Port device team_slave_1 added [ 36.397426][ T399] hsr_slave_0: left promiscuous mode [ 36.403294][ T399] hsr_slave_1: left promiscuous mode [ 36.409410][ T399] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.417437][ T399] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 36.425768][ T399] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.433768][ T399] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 36.444632][ T399] veth1_macvtap: left promiscuous mode [ 36.450651][ T399] veth0_macvtap: left promiscuous mode [ 36.456476][ T399] veth1_vlan: left promiscuous mode [ 36.462864][ T399] veth0_vlan: left promiscuous mode [ 36.537477][ T399] team0 (unregistering): Port device team_slave_1 removed [ 36.547575][ T399] team0 (unregistering): Port device team_slave_0 removed [ 36.590656][ T3643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.597874][ T3643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.629489][ T3643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.642333][ T3643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.649704][ T3643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.677014][ T3643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.710945][ T3643] hsr_slave_0: entered promiscuous mode [ 36.717661][ T3643] hsr_slave_1: entered promiscuous mode [ 36.986577][ T3704] loop3: detected capacity change from 0 to 512 [ 37.010866][ T3704] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.024344][ T3704] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.341682][ T3587] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 37.352709][ T3643] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 37.378819][ T3643] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 37.382829][ T3382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 37.397276][ T3643] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 37.409457][ T3382] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 37.426674][ T3643] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 37.440023][ T3643] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 37.458627][ T3643] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 37.472553][ T3643] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 37.505697][ T3643] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 37.519057][ T3722] team_slave_0: entered promiscuous mode [ 37.585890][ T3719] team_slave_0: left promiscuous mode [ 37.608055][ T3643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.620952][ T3019] 8021q: adding VLAN 0 to HW filter on device eth1 [ 37.647458][ T3643] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.687024][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.694179][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.704017][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.711493][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.774851][ T3643] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.873129][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.882811][ T28] kauditd_printk_skb: 114 callbacks suppressed [ 37.882828][ T28] audit: type=1400 audit(1785597593.478:290): avc: denied { write } for pid=3741 comm="syz.2.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 37.927168][ T28] audit: type=1400 audit(1785597593.528:291): avc: denied { create } for pid=3750 comm="syz.3.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 38.002540][ T28] audit: type=1400 audit(1785597593.548:292): avc: denied { write } for pid=3750 comm="syz.3.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 38.060016][ T28] audit: type=1400 audit(1785597593.558:293): avc: denied { connect } for pid=3750 comm="syz.3.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 38.123106][ T28] audit: type=1400 audit(1785597593.558:294): avc: denied { write } for pid=3750 comm="syz.3.78" name="icmp6" dev="proc" ino=4026532904 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 38.152284][ T28] audit: type=1400 audit(1785597593.758:295): avc: denied { create } for pid=3775 comm="syz.2.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 38.203534][ T3643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.224306][ T28] audit: type=1400 audit(1785597593.758:296): avc: denied { ioctl } for pid=3775 comm="syz.2.83" path="socket:[6337]" dev="sockfs" ino=6337 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 38.321241][ T28] audit: type=1400 audit(1785597593.758:297): avc: denied { connect } for pid=3775 comm="syz.2.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 38.368385][ T3019] 8021q: adding VLAN 0 to HW filter on device eth2 [ 38.402721][ T28] audit: type=1400 audit(1785597593.758:298): avc: denied { write } for pid=3775 comm="syz.2.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 38.422475][ T28] audit: type=1400 audit(1785597593.878:299): avc: denied { write } for pid=3754 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.739343][ T3643] veth0_vlan: entered promiscuous mode [ 38.749720][ T3643] veth1_vlan: entered promiscuous mode [ 38.767860][ T3643] veth0_macvtap: entered promiscuous mode [ 38.777960][ T3643] veth1_macvtap: entered promiscuous mode [ 38.789705][ T3643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.827157][ T3643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.837563][ T3019] 8021q: adding VLAN 0 to HW filter on device eth3 [ 38.869317][ T68] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.882352][ T68] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.921628][ T68] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.937923][ T68] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.168595][ T3019] 8021q: adding VLAN 0 to HW filter on device eth4 [ 39.202337][ T3869] SELinux: invalid class [ 39.228844][ T3869] SELinux: failed to load policy [ 39.582935][ T3909] loop1: detected capacity change from 0 to 512 [ 39.590134][ T3909] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.604180][ T3909] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 39.615371][ T3909] EXT4-fs (loop1): 1 truncate cleaned up [ 39.622133][ T3909] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.669942][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.732337][ T3922] loop4: detected capacity change from 0 to 256 [ 39.883749][ T3930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.122'. [ 39.909279][ T3930] netlink: 24 bytes leftover after parsing attributes in process `syz.4.122'. [ 39.931304][ T3930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.122'. [ 39.961549][ T3930] netlink: 24 bytes leftover after parsing attributes in process `syz.4.122'. [ 39.980635][ T68] Bluetooth: hci0: Frame reassembly failed (-84) [ 39.987427][ T3930] Zero length message leads to an empty skb [ 40.380189][ T3958] mmap: syz.4.134 (3958) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 40.732908][ T3967] netdevsim netdevsim2 netdevsim3: IPsec offload requires 128 bit authentication [ 40.972677][ T3988] loop4: detected capacity change from 0 to 8192 [ 42.049061][ T3934] Bluetooth: hci0: command 0x1003 tx timeout [ 42.055598][ T3618] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 42.290328][ T4053] loop5: detected capacity change from 0 to 512 [ 42.310823][ T4053] EXT4-fs: Ignoring removed nobh option [ 42.321558][ T4053] EXT4-fs: Ignoring removed orlov option [ 42.336959][ T4053] EXT4-fs error (device loop5): __ext4_iget:5533: inode #11: block 1: comm syz.5.171: invalid block [ 42.356213][ T4053] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 42.356531][ T4053] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.171: couldn't read orphan inode 11 (err -117) [ 42.365783][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 42.365803][ C0] EXT4-fs (loop5): initial error at time 1785597597: __ext4_iget:5533: inode 11: block 1 [ 42.365833][ C0] EXT4-fs (loop5): last error at time 1785597597: __ext4_iget:5533: inode 11: block 1 [ 42.405264][ T4053] loop5: lost filesystem error report for type 5 error -117 [ 42.405831][ T4053] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.462348][ T4053] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.462400][ T4067] loop1: detected capacity change from 0 to 2048 [ 42.509790][ T4067] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.549768][ T4067] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 42.569326][ T4067] EXT4-fs (loop1): Remounting filesystem read-only [ 42.586002][ T4067] syz.1.177 (4067) used greatest stack depth: 9440 bytes left [ 42.674585][ T3396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 42.684391][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.771207][ T126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 42.826919][ T4090] loop3: detected capacity change from 0 to 512 [ 42.863762][ T4090] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 42.882583][ T4090] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.185: bg 0: block 4: invalid block bitmap [ 42.898004][ T4089] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.898126][ T4089] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.902927][ T4090] loop3: lost filesystem error report for type 5 error -117 [ 42.903108][ T4090] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 42.903195][ T4090] loop3: lost filesystem error report for type 5 error -117 [ 42.903424][ T4090] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.185: invalid indirect mapped block 1 (level 1) [ 42.903456][ T4090] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 42.903679][ T4090] EXT4-fs (loop3): 1 truncate cleaned up [ 42.904090][ T4090] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.908806][ T28] kauditd_printk_skb: 70 callbacks suppressed [ 42.908910][ T28] audit: type=1400 audit(1785597598.508:370): avc: denied { read write } for pid=4086 comm="syz.3.185" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 42.908937][ T28] audit: type=1400 audit(1785597598.508:371): avc: denied { open } for pid=4086 comm="syz.3.185" path="/36/file0/file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 42.958704][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.019297][ T4113] netlink: 9 bytes leftover after parsing attributes in process `syz.3.188'. [ 43.029561][ T4089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.034932][ T4089] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.107459][ T4122] netlink: 5 bytes leftover after parsing attributes in process `syz.3.188'. [ 43.123219][ T4113] gretap0: entered promiscuous mode [ 43.125584][ T4122] 0{X: renamed from gretap0 [ 43.127099][ T4122] 0{X: left promiscuous mode [ 43.127121][ T4122] 0{X: entered allmulticast mode [ 43.128616][ T4122] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 43.129052][ T135] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.157129][ T68] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.157245][ T68] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.157281][ T68] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.289115][ T28] audit: type=1400 audit(1785597598.868:372): avc: denied { bind } for pid=4134 comm="syz.3.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.289171][ T28] audit: type=1400 audit(1785597598.868:373): avc: denied { read } for pid=4134 comm="syz.3.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.500451][ T4159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.193'. [ 43.738291][ T28] audit: type=1326 audit(1785597599.338:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4188 comm="syz.2.195" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f465844e019 code=0x7ffc0000 [ 43.738412][ T28] audit: type=1326 audit(1785597599.338:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4188 comm="syz.2.195" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f465844e019 code=0x7ffc0000 [ 43.738763][ T28] audit: type=1326 audit(1785597599.338:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4188 comm="syz.2.195" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f465844ce87 code=0x7ffc0000 [ 43.739432][ T28] audit: type=1326 audit(1785597599.348:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4188 comm="syz.2.195" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f465844e019 code=0x7ffc0000 [ 43.739844][ T28] audit: type=1326 audit(1785597599.348:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4188 comm="syz.2.195" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f465844e019 code=0x7ffc0000 [ 43.739978][ T28] audit: type=1326 audit(1785597599.348:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4188 comm="syz.2.195" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f465844e019 code=0x7ffc0000 [ 43.894592][ T4219] loop2: detected capacity change from 0 to 512 [ 43.973296][ T4221] netlink: 20 bytes leftover after parsing attributes in process `syz.4.198'. [ 44.002018][ T4219] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 44.040438][ T4221] netlink: 144 bytes leftover after parsing attributes in process `syz.4.198'. [ 44.084932][ T4219] EXT4-fs (loop2): 1 truncate cleaned up [ 44.111025][ T4219] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.152842][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.306436][ T4234] netlink: 'syz.4.202': attribute type 12 has an invalid length. [ 44.314785][ T4234] netlink: 'syz.4.202': attribute type 29 has an invalid length. [ 44.322722][ T4234] netlink: 148 bytes leftover after parsing attributes in process `syz.4.202'. [ 44.341902][ T4234] netlink: 'syz.4.202': attribute type 3 has an invalid length. [ 44.356049][ T4234] netlink: 'syz.4.202': attribute type 2 has an invalid length. [ 45.039619][ T4277] ip6erspan0: entered allmulticast mode [ 45.075396][ T4277] __nla_validate_parse: 2 callbacks suppressed [ 45.075411][ T4277] netlink: 16 bytes leftover after parsing attributes in process `syz.4.219'. [ 45.132615][ T4277] netlink: 16 bytes leftover after parsing attributes in process `syz.4.219'. [ 45.164128][ T4277] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Hello request ret = -22) [ 45.184258][ T4277] iwpm_hello_cb: Unable to parse nlmsg [ 45.257344][ T4298] loop4: detected capacity change from 0 to 512 [ 45.303502][ T4298] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.346702][ T4298] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.413231][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.534513][ T4321] loop2: detected capacity change from 0 to 4096 [ 45.537419][ T4329] loop3: detected capacity change from 0 to 256 [ 45.578536][ T4321] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.582232][ T4329] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 45.667581][ T4321] EXT4-fs (loop2): Online defrag not supported with bigalloc [ 45.689726][ T4321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.794134][ T4354] 8021q: VLANs not supported on sit0 [ 45.895272][ T4362] syz.4.242 uses obsolete (PF_INET,SOCK_PACKET) [ 46.726022][ T4396] loop1: detected capacity change from 0 to 2048 [ 46.747426][ T4396] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-00ff07000000 r/w without journal. Quota mode: none. [ 46.783983][ T4396] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.888128][ T4409] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.257: bg 0: block 345: padding at end of block bitmap is not set [ 46.933095][ T4409] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 842 with error 117 [ 46.958354][ T4409] EXT4-fs (loop1): This should not happen!! Data will be lost [ 46.958354][ T4409] [ 47.047141][ T4416] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd12 [ 47.145993][ T4208] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 15 with error 28 [ 47.158832][ T4208] EXT4-fs (loop1): This should not happen!! Data will be lost [ 47.158832][ T4208] [ 47.174173][ T4208] EXT4-fs (loop1): Total free blocks count 0 [ 47.197073][ T4208] EXT4-fs (loop1): Free/Dirty block details [ 47.208134][ T4208] EXT4-fs (loop1): free_blocks=0 [ 47.213480][ T4208] EXT4-fs (loop1): dirty_blocks=32 [ 47.218748][ T4208] EXT4-fs (loop1): Block reservation details [ 47.225695][ T3298] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 47.343901][ T4432] netlink: 'syz.3.270': attribute type 6 has an invalid length. [ 47.422627][ T4437] sch_tbf: burst 959 is lower than device syzkaller0 mtu (1500) ! [ 47.442333][ T3374] IPVS: starting estimator thread 0... [ 47.529190][ T4440] IPVS: using max 2496 ests per chain, 124800 per kthread [ 47.566779][ T4449] netlink: 'syz.3.277': attribute type 21 has an invalid length. [ 47.599620][ T4449] netlink: 132 bytes leftover after parsing attributes in process `syz.3.277'. [ 47.657439][ T4456] loop4: detected capacity change from 0 to 512 [ 47.690541][ T4456] EXT4-fs: Ignoring removed orlov option [ 47.698046][ T4456] EXT4-fs: Ignoring removed mblk_io_submit option [ 47.728164][ T4456] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.280: corrupted in-inode xattr: e_value size too large [ 47.761403][ T4456] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 47.762293][ T4456] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.280: couldn't read orphan inode 15 (err -117) [ 47.771496][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 47.771526][ C0] EXT4-fs (loop4): initial error at time 1785597603: ext4_iget_extra_inode:5180: inode 15 [ 47.771557][ C0] EXT4-fs (loop4): last error at time 1785597603: ext4_iget_extra_inode:5180: inode 15 [ 47.811055][ T4456] loop4: lost filesystem error report for type 5 error -117 [ 47.812961][ T4456] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.870926][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.132986][ T28] kauditd_printk_skb: 59 callbacks suppressed [ 48.133002][ T28] audit: type=1400 audit(1785597603.738:439): avc: denied { read write } for pid=4495 comm="syz.3.289" dev="sockfs" ino=7614 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 48.203181][ T28] audit: type=1400 audit(1785597603.798:440): avc: denied { append } for pid=4495 comm="syz.3.289" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.464730][ T28] audit: type=1400 audit(1785597604.068:441): avc: denied { mount } for pid=4522 comm="syz.3.291" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 48.531017][ T28] audit: type=1400 audit(1785597604.068:442): avc: denied { search } for pid=4522 comm="syz.3.291" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 48.649025][ T28] audit: type=1400 audit(1785597604.068:443): avc: denied { write } for pid=4522 comm="syz.3.291" name="uprobe_events" dev="tracefs" ino=39 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 48.712694][ T28] audit: type=1400 audit(1785597604.068:444): avc: denied { open } for pid=4522 comm="syz.3.291" path="/72/tracing/uprobe_events" dev="tracefs" ino=39 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 48.787540][ T28] audit: type=1400 audit(1785597604.068:445): avc: denied { search } for pid=4522 comm="syz.3.291" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 48.839755][ T28] audit: type=1400 audit(1785597604.068:446): avc: denied { read } for pid=4522 comm="syz.3.291" name="uprobe_events" dev="tracefs" ino=39 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 48.883121][ T28] audit: type=1400 audit(1785597604.098:447): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 48.927373][ T28] audit: type=1400 audit(1785597604.508:448): avc: denied { mounton } for pid=4570 comm="syz.5.294" path="/proc/82/cgroup" dev="proc" ino=7638 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 50.328795][ T4631] loop2: detected capacity change from 0 to 512 [ 50.357994][ T4631] EXT4-fs (loop2): 1 truncate cleaned up [ 50.385085][ T4631] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.444459][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.666033][ T4681] loop3: detected capacity change from 0 to 764 [ 50.917973][ T4697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.329'. [ 51.699498][ T4754] netlink: 8 bytes leftover after parsing attributes in process `syz.5.347'. [ 51.910607][ T4772] netlink: 4 bytes leftover after parsing attributes in process `syz.2.355'. [ 51.927863][ T4772] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.950509][ T4772] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.054946][ T4782] loop3: detected capacity change from 0 to 512 [ 52.065175][ T4782] EXT4-fs: dax option not supported [ 52.083815][ T4782] SELinux: failed to load policy [ 52.628370][ T4772] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.636553][ T4772] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.808814][ T4206] Bluetooth: hci0: Frame reassembly failed (-84) [ 53.042600][ T4807] SELinux: Context OPcǙ?s U^tQ`w& m [ 53.042600][ T4807] %Z@L0NrL1X)ْijɒ%ؑfYjwLݍ8 bV:vi is not valid (left unmapped). [ 53.347459][ T4815] loop3: detected capacity change from 0 to 128 [ 53.356898][ T4815] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 53.384970][ T4815] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 53.439769][ T30] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 53.520445][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 53.520462][ T28] audit: type=1400 audit(1785597609.128:473): avc: denied { bind } for pid=4821 comm="syz.4.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 53.724407][ T28] audit: type=1400 audit(1785597609.328:474): avc: denied { mount } for pid=4833 comm="syz.2.380" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 53.727783][ T4834] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 53.806373][ T28] audit: type=1400 audit(1785597609.408:475): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 53.852427][ T28] audit: type=1400 audit(1785597609.458:476): avc: denied { read write } for pid=4842 comm="syz.3.384" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 53.886732][ T28] audit: type=1400 audit(1785597609.458:477): avc: denied { open } for pid=4842 comm="syz.3.384" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 53.912907][ T28] audit: type=1326 audit(1785597609.488:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4844 comm="syz.2.385" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f465844e019 code=0x7ffc0000 [ 53.941388][ T28] audit: type=1326 audit(1785597609.488:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4844 comm="syz.2.385" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f465844e019 code=0x7ffc0000 [ 53.973890][ T28] audit: type=1326 audit(1785597609.488:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4844 comm="syz.2.385" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f465844e019 code=0x7ffc0000 [ 53.999698][ T28] audit: type=1326 audit(1785597609.488:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4844 comm="syz.2.385" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f465844e019 code=0x7ffc0000 [ 54.053026][ T28] audit: type=1326 audit(1785597609.488:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4844 comm="syz.2.385" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f465844e019 code=0x7ffc0000 [ 54.053578][ T4853] loop2: detected capacity change from 0 to 512 [ 54.107186][ T4853] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 54.128902][ T4853] EXT4-fs (loop2): 1 truncate cleaned up [ 54.135523][ T4853] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.347377][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.711576][ T4894] netlink: 12 bytes leftover after parsing attributes in process `syz.3.405'. [ 54.849984][ T3934] Bluetooth: hci0: command 0x1003 tx timeout [ 54.851188][ T3618] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 55.093428][ T4917] loop3: detected capacity change from 0 to 512 [ 55.120469][ T4917] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.415: inode has both inline data and extents flags [ 55.144622][ T4917] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 55.144908][ T4917] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.415: couldn't read orphan inode 15 (err -117) [ 55.154499][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 55.154522][ C0] EXT4-fs (loop3): initial error at time 1785597610: ext4_orphan_get:1399: inode 15 [ 55.154554][ C0] EXT4-fs (loop3): last error at time 1785597610: ext4_orphan_get:1399: inode 15 [ 55.273207][ T4917] loop3: lost filesystem error report for type 5 error -117 [ 55.275041][ T4917] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.301246][ T4931] netlink: 27 bytes leftover after parsing attributes in process `syz.2.421'. [ 56.290503][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.454299][ T4951] netlink: 36 bytes leftover after parsing attributes in process `syz.1.430'. [ 56.924982][ T4948] loop4: detected capacity change from 0 to 512 [ 58.463819][ T4948] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.475607][ T5011] ip6gre1: entered promiscuous mode [ 58.480780][ T4948] ext4 filesystem being mounted at /83/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.514007][ T5011] ip6gre1: entered allmulticast mode [ 58.521017][ T30] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 58.537974][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 58.538066][ T28] audit: type=1400 audit(1785597614.138:500): avc: denied { create } for pid=5010 comm="syz.5.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 58.565283][ T30] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 58.573279][ T3375] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 58.579065][ T28] audit: type=1400 audit(1785597614.138:501): avc: denied { setopt } for pid=5010 comm="syz.5.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 58.609412][ T5011] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 58.629888][ T5011] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 58.654565][ T28] audit: type=1400 audit(1785597614.148:502): avc: denied { read } for pid=5015 comm="syz.1.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 58.699322][ T3396] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 58.726499][ T28] audit: type=1400 audit(1785597614.168:503): avc: denied { write } for pid=4996 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.799210][ T28] audit: type=1400 audit(1785597614.248:504): avc: denied { write } for pid=5020 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.845969][ T28] audit: type=1400 audit(1785597614.328:505): avc: denied { setattr } for pid=4947 comm="syz.4.429" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 58.869146][ T3396] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 58.878880][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.194478][ T5048] netlink: 20 bytes leftover after parsing attributes in process `syz.3.453'. [ 59.214693][ T28] audit: type=1400 audit(1785597614.818:506): avc: denied { read } for pid=5047 comm="syz.3.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 59.297098][ T5052] smpboot: CPU 1 is now offline [ 59.312268][ T5052] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 59.405330][ T5057] loop4: detected capacity change from 0 to 512 [ 59.426566][ T28] audit: type=1400 audit(1785597615.028:507): avc: denied { watch watch_reads } for pid=5058 comm="syz.3.458" path="/115/file0" dev="tmpfs" ino=621 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 59.429617][ T5057] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 59.474468][ T5057] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 59.484958][ T5057] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.457: Corrupt directory, running e2fsck is recommended [ 59.501136][ T5057] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 59.509626][ T5057] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.457: corrupted in-inode xattr: e_name out of bounds [ 59.523623][ T5057] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 59.524282][ T5057] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.457: couldn't read orphan inode 15 (err -117) [ 59.533507][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 59.533537][ C1] EXT4-fs (loop4): initial error at time 1785597615: ext4_iget_extra_inode:5180: inode 15 [ 59.533570][ C1] EXT4-fs (loop4): last error at time 1785597615: ext4_iget_extra_inode:5180: inode 15 [ 59.541668][ T5062] netlink: 27 bytes leftover after parsing attributes in process `syz.3.460'. [ 59.545495][ T5057] loop4: lost filesystem error report for type 5 error -117 [ 59.582174][ T5057] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.665528][ T5057] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 59.684503][ T5057] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 59.706831][ T5057] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.457: Corrupt directory, running e2fsck is recommended [ 59.756710][ T5075] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 59.800431][ T5075] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 59.816366][ T5075] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.457: Corrupt directory, running e2fsck is recommended [ 59.841088][ T5057] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 59.862829][ T5057] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 59.884119][ T5057] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.457: Corrupt directory, running e2fsck is recommended [ 59.910940][ T5075] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 60.002052][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.054453][ T5092] netlink: 8 bytes leftover after parsing attributes in process `syz.4.470'. [ 60.081106][ T5092] netlink: 12 bytes leftover after parsing attributes in process `syz.4.470'. [ 60.128528][ T5092] netlink: 8 bytes leftover after parsing attributes in process `syz.4.470'. [ 60.156250][ T5092] netlink: 12 bytes leftover after parsing attributes in process `syz.4.470'. [ 60.159034][ T4203] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.182352][ T4203] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.239088][ T4203] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.270104][ T4203] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.341560][ T28] audit: type=1400 audit(1785597615.948:508): avc: denied { ioctl } for pid=5107 comm="syz.3.477" path="socket:[9025]" dev="sockfs" ino=9025 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 60.383499][ T5102] loop4: detected capacity change from 0 to 8192 [ 60.400159][ T28] audit: type=1400 audit(1785597615.988:509): avc: denied { mounton } for pid=5105 comm="syz.5.476" path="/proc/196/task" dev="proc" ino=9401 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 60.605079][ T4201] ================================================================== [ 60.613428][ T4201] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / fat16_ent_put [ 60.622427][ T4201] [ 60.624866][ T4201] write to 0xffff88813defe41e of 2 bytes by task 5113 on cpu 1: [ 60.632677][ T4201] fat16_ent_put+0x28/0x60 [ 60.637563][ T4201] fat_alloc_clusters+0x55e/0xc40 [ 60.642781][ T4201] fat_get_block+0x252/0x5e0 [ 60.647385][ T4201] __block_write_begin_int+0x400/0xf90 [ 60.652994][ T4201] cont_write_begin+0x5bf/0x920 [ 60.657868][ T4201] fat_write_begin+0x52/0xe0 [ 60.662639][ T4201] generic_perform_write+0x186/0x490 [ 60.668208][ T4201] __generic_file_write_iter+0x9e/0x120 [ 60.674122][ T4201] generic_file_write_iter+0x77/0x1f0 [ 60.679604][ T4201] aio_write+0x2fe/0x430 [ 60.684428][ T4201] io_submit_one+0xba3/0x1350 [ 60.689284][ T4201] __se_sys_io_submit+0xfb/0x280 [ 60.694417][ T4201] __x64_sys_io_submit+0x43/0x50 [ 60.699543][ T4201] x64_sys_call+0x19d5/0x3020 [ 60.704594][ T4201] do_syscall_64+0x136/0x3c0 [ 60.709370][ T4201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.715554][ T4201] [ 60.717983][ T4201] read to 0xffff88813defe400 of 512 bytes by task 4201 on cpu 0: [ 60.725704][ T4201] copy_folio_from_iter_atomic+0x728/0x10a0 [ 60.731620][ T4201] generic_perform_write+0x2c4/0x490 [ 60.737119][ T4201] shmem_file_write_iter+0xc5/0xf0 [ 60.742465][ T4201] lo_rw_aio+0x6a9/0x760 [ 60.747252][ T4201] loop_process_work+0x567/0xac0 [ 60.752666][ T4201] loop_workfn+0x31/0x40 [ 60.757092][ T4201] process_scheduled_works+0x4d4/0x9a0 [ 60.763270][ T4201] worker_thread+0x569/0x750 [ 60.767962][ T4201] kthread+0x221/0x270 [ 60.772071][ T4201] ret_from_fork+0x146/0x330 [ 60.776674][ T4201] ret_from_fork_asm+0x1a/0x30 [ 60.781574][ T4201] [ 60.783904][ T4201] Reported by Kernel Concurrency Sanitizer on: [ 60.790069][ T4201] CPU: 0 UID: 0 PID: 4201 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(lazy) [ 60.799873][ T4201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 60.810454][ T4201] Workqueue: loop4 loop_workfn [ 60.815353][ T4201] ================================================================== [ 62.008616][ T4991] syz.5.437 (4991) used greatest stack depth: 8344 bytes left [ 62.074308][ T4987] syz.5.436 (4987) used greatest stack depth: 8296 bytes left [ 62.343724][ T5109] syz.5.476 (5109) used greatest stack depth: 8080 bytes left [ 62.849048][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!