last executing test programs: 48.576196404s ago: executing program 3 (id=663): write$char_usb(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10003, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r1 = syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@setlink={0x3c, 0x13, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x2424, 0x4822}, [@IFLA_NET_NS_PID={0x8, 0x13, r1}, @IFLA_IFNAME={0x14, 0x3, 'erspan0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) 48.35023812s ago: executing program 3 (id=669): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x80000000, 0x0, 0x0, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x0, 0x0, 0xfd, 0xc8e}, {0x16, 0xff, 0x6, 0x6}]}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000c00)=[{{&(0x7f0000010940)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0) 48.313141491s ago: executing program 3 (id=670): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) symlinkat(0x0, 0xffffffffffffff9c, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000002100)='usbip-vudc.0', 0xc) 48.212315694s ago: executing program 3 (id=672): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0xb89046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x20000, 0x0) 48.212002544s ago: executing program 3 (id=673): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x21, 0x2, 0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 47.883186712s ago: executing program 3 (id=674): mknod$loop(0x0, 0xb0b9, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x80, 0x80000000, 0x0, 0x0, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x80002, 0x0) listns(&(0x7f0000000b80)={0x20, 0x0, 0x0, 0x4000000}, &(0x7f0000000000)=[0x0], 0x1, 0x0) sendmsg(r0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40e8662e, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') 47.876365182s ago: executing program 32 (id=674): mknod$loop(0x0, 0xb0b9, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x80, 0x80000000, 0x0, 0x0, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x80002, 0x0) listns(&(0x7f0000000b80)={0x20, 0x0, 0x0, 0x4000000}, &(0x7f0000000000)=[0x0], 0x1, 0x0) sendmsg(r0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40e8662e, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') 28.348103491s ago: executing program 5 (id=1162): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0xb89046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) 28.34774414s ago: executing program 5 (id=1164): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 24.206546594s ago: executing program 5 (id=1167): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x1006, 0x7f, 0x0, 0x1, 0x200000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 21.120236281s ago: executing program 5 (id=1210): socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x2, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x2, 0x9, 0x0, 0x20000, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4002, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x7, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x6, &(0x7f0000000000), 0x84) 20.894329917s ago: executing program 5 (id=1220): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 20.803642579s ago: executing program 5 (id=1223): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, r2) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) 5.657674908s ago: executing program 33 (id=1223): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, r2) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) 3.232250348s ago: executing program 1 (id=1482): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x7fffffff, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x4005, 0x0, 0xd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/platform/devices/usbip-vudc.0/usbip_status\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/256, 0x100) 3.144513941s ago: executing program 2 (id=1484): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000340)='./file0\x00', 0x2200060, 0x0, 0x11, 0x0, &(0x7f0000000200)) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000015c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000140), 0x1e) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x4}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, @local, {[], {{0x2, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0xffff}}}}}}}, 0x0) 3.052237153s ago: executing program 1 (id=1485): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, 0x0, 0x0) recvmsg$unix(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf20000000000000070000000f0000003d030100000000009500ffb1000000006926000000000000bf670000000000001606fdff0fff52007607000010000000d60600000ee60000bf050000000000001f63000000000000650700000200000007070000fbffffff1f75000000000000bf54000000000000070400000410f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060162cc43bcba106"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x9}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x10, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x47, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[r2, r2, r2, r2, r2, r2], 0x0, 0x10, 0x800}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="1c0000001d008103e00f80ecdb4cb9f207", 0x11}], 0x1, 0x0, 0x0, 0x5865}, 0x20048013) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[], 0xfe33) 3.033627064s ago: executing program 2 (id=1489): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x8000f28, 0x0) splice(r2, 0x0, r1, 0x0, 0x8, 0xe) write(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) lseek(r4, 0x2004, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$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") 3.015874534s ago: executing program 1 (id=1490): r0 = open(&(0x7f0000000040)='./file0\x00', 0x101040, 0x4c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x0, 0x1, 0xfffa}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x790f0000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x4000000) setxattr$security_capability(&(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), &(0x7f0000002100)=@v3={0x3000000, [{0x5, 0x1}, {0x101, 0x9}]}, 0x18, 0x1) 2.37603992s ago: executing program 2 (id=1496): r0 = syz_io_uring_complete(0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000100)=0x5) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) syz_clone(0x51801400, 0x0, 0x0, 0x0, 0x0, 0x0) 1.99404569s ago: executing program 1 (id=1502): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x30000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa80, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.993889319s ago: executing program 2 (id=1503): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0xa, 0x0) 1.98487022s ago: executing program 0 (id=1504): mount(0x0, 0x0, 0x0, 0x82800, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, r3}, 0x14) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) 1.940846181s ago: executing program 0 (id=1506): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "399421fe8a4c9563", "00b147fbbfc100", "d6dc09ff", "16de86d67a8426bd"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x6, 0x1) 1.880323493s ago: executing program 0 (id=1507): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000300)={0x0}) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000280)={r1, 0x1, r2, 0x3, 0x80000}) 1.798346675s ago: executing program 4 (id=1508): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x7, 0x1, 0xfffe}) utimensat(r0, 0x0, 0x0, 0x0) 1.557873221s ago: executing program 1 (id=1511): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000000c00)="$eJzs3c1rXFUbAPDnTpKmb9r3TV4QbF0FBA2UTkyNrYKLigsRLBR0bTtMpqFmkimZSWlCoBYR3AhaXAi66dqPunPrx1b/Bd2ISEvVtFhxISN3PjqTZiadtvloze8Htz3n3jM595l77zln5h7mBrBjjab/ZCL2R8R7ScRwY30SEQO1VH/E0Xq5myvL+XRJolp99bekVubGynI+2l6T2tPI7IuIb96OOJBZW295cWkmVywW5hv58crsmfHy4tLB07O56cJ0Ye7wxOTkoSPPHBncuFj/+H5p79X3X3ry86N/vfXo5Xe/TeJo7G1sa49jo4zGaOM9GUjfwlVe3OjKtlmy3TvAPUkvzb76VR77Yzj6aqne9F4SAHiQnI+IKgCwwyT6fwDYYZrfA9xYWc6nS/X89n4fsdWuvRARu+vxN+9v1rf0N+7Z7a7dBx26kay635FExMgG1D8aER9/+fqn6RKbdB8SoJM3L0TEyZHRZvvfan+SNXMW6nqfkPFUD2VGb8tr/2DrfJWOf55tjf9a11/m1vgnOox/Bjtcu/diNGJXe37t9Z+5sgHVdJWO/54faM1tu9kWf8NIXyP339qYbyA5dbpYSNu2/0XEWAwMpvmJdeoYu/739VUr+lrJ9vHf7xff+CStP/2/VSJzpf+2JncqV8ndb9xN1y5EPNbfKf7k1vFPuox/j/dYx8vPvfNRt21p/Gm8zWV1/Js/q6x6KeKJ6Bx/U7Le/MTD47XTYbx5UnTwxU8fDnWrv/34p0taf/OzwFZIj//Q+vGPJO3zNct3X8d3l4a/7rbtzvF3Pv93Ja/V0s3G41yuUpmfiNiVvLJ2/aHWa5v5Zvk0/rHHO1//653/6WfCkz3G33/118/uPf7NlcY/dVfH/+4Tl2/O9HWrv7fjP1lLjTXW9NL+9bqD9/PeAQAAAAAAAAAAAAAAAAAAAAAAAECvMhGxN5JM9lY6k8lm68/wfiSGMsVSuXLgVGlhbipqz8oeiYFM86cuh9t+D3Wi8Xv4zfyh2/JPR8T/I+KDwf/U8tl8qTi13cEDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMOeLs//T/0yuN17BwBsmt13LHG9sCU7AgBsmTv3/wDAv43+HwB2Hv0/AOw8+n8A2Hn0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGyy48eOpUv1z5XlfJqfOru4MFM6e3CqUJ7Jzi7ks/nS/JnsdKk0XSxk86XZtpf+0OnvFUulM5Mxt3BuvFIoV8bLi0snZksLc5UTp2dz04UThYEtiwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeldeXJrJFYuFeYmHJVEdrh+6B2V/Nj/x88Ef961X5qLTeOMT290yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwc/gkAAP//skMoxA==") chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x9) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) pause() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x20000000, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0x0) getdents64(r0, 0x0, 0x22) 1.470991473s ago: executing program 6 (id=1512): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000100)=@deltclass={0x434, 0x29, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5e291e8239e04253, 0xffe0}, {0xffe0, 0xf}, {0xfff3, 0x6}}, [@c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xfffffffc, 0xc14, 0x6, 0xfffffff8, 0x101, 0x7, 0x2, 0xf, 0x27, 0x10001, 0x9, 0xfffffff9, 0x8001, 0x7fff, 0x5, 0xf, 0x6, 0x4, 0xe78, 0x1, 0xfffffff7, 0x4, 0xf9bb, 0x7d, 0x5, 0x8, 0xfa, 0xa, 0x8, 0x0, 0x1ff, 0x1, 0x400, 0x0, 0x9, 0x5, 0x8, 0x2, 0x9, 0x8, 0xb0bd, 0x9f8d, 0x8, 0x7ff, 0x7, 0x4, 0x3, 0x0, 0x5, 0x5, 0xfffffff7, 0x9, 0x4, 0xfffffffe, 0x80, 0xa6f, 0x76a9, 0x9, 0x3, 0x9, 0x7, 0x7, 0xae, 0x9, 0x5, 0xfffff0f3, 0x7, 0x8, 0x5, 0x10, 0x2, 0x4, 0x4, 0x10001, 0x9, 0x4, 0x8, 0x5, 0x7, 0x5, 0x7fffffff, 0x0, 0x6, 0xf, 0x4, 0x2, 0xa, 0x0, 0x0, 0x5, 0x9000000, 0xfffffff7, 0x3, 0x9, 0xcb, 0x1aed, 0x9b62, 0x4, 0x3, 0x9, 0xc2e, 0x0, 0x14000000, 0xc866, 0x4, 0x8, 0x0, 0x5, 0x3, 0x7, 0x7, 0x6, 0xb32c, 0x3, 0xfff, 0xcb, 0x10, 0xffff, 0xfffffffd, 0x100, 0x9, 0x1, 0xf, 0x40, 0x6, 0x6, 0x4, 0x40, 0x0, 0x9, 0x0, 0x4, 0x10, 0x72e3cc1, 0x6, 0x5, 0x1, 0x6, 0x7, 0x81, 0x9, 0x3, 0x80000001, 0x8, 0x6, 0x7, 0x50, 0x1, 0xffffff6a, 0xffff3c8b, 0x5913, 0x7, 0x10001, 0x7, 0x9, 0xe, 0xfffffffd, 0xc, 0x0, 0x400, 0x8, 0x8, 0x8, 0x100, 0x9, 0x8, 0xc043, 0x62da, 0x1, 0x4, 0xee4, 0x5, 0xaaa6, 0x3d66, 0x0, 0x4, 0x2, 0xabe, 0x80, 0x5, 0x8001, 0x1, 0x7fffffff, 0xfffffffe, 0x1000, 0x9, 0x5, 0x8001, 0x7, 0xffff, 0x6, 0xffff, 0x2, 0x777, 0xfffffff1, 0x40, 0xc, 0x3, 0xe, 0x1, 0x0, 0x9, 0x0, 0x3, 0x401, 0x6, 0x6, 0x221, 0x4, 0x2, 0x4, 0x0, 0x8, 0x9, 0xffffffff, 0x401, 0x6, 0xffffffff, 0x7, 0xab, 0x0, 0x4e7, 0x6db2, 0x280, 0x10000, 0x8, 0x0, 0xc5e, 0x89b7, 0x1, 0x2, 0x0, 0x9, 0x9, 0xc, 0x1000, 0x4, 0xd60, 0x9, 0x9, 0x4, 0x2, 0x7, 0x80000001, 0xff, 0x2, 0x6, 0x4, 0x6, 0x3, 0x8, 0xc00, 0x9, 0x80000000, 0x2c]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 1.399260034s ago: executing program 6 (id=1513): socket$netlink(0x10, 0x3, 0x8000000004) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4c22, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x20000005}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000055000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x3df, &(0x7f0000000040)={0x0, 0xc89b, 0xc000, 0x800007, 0x41}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.296191337s ago: executing program 6 (id=1514): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8000f28, 0x5) 1.275838278s ago: executing program 6 (id=1515): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000001140)={0x1, 0x1, 0xfe5, 0x9}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000040)={0x1, 0x1, 0x5, 0x8000000a}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 987.259085ms ago: executing program 2 (id=1516): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) 868.247578ms ago: executing program 4 (id=1517): mount(0x0, 0x0, 0x0, 0x82800, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, r3}, 0x14) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) 797.920489ms ago: executing program 0 (id=1518): socket$netlink(0x10, 0x3, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x100) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000e6000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x40}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 797.659569ms ago: executing program 4 (id=1519): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') recvmsg(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/164, 0xa4}], 0x1}, 0x0) sendmsg$unix(r3, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="f0", 0x1}], 0x1, 0x0, 0x0, 0x880}, 0x0) 716.924662ms ago: executing program 4 (id=1520): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x200, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, r3, 0x331, 0x1ffc, 0x40000000, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400400c}, 0x0) 659.661663ms ago: executing program 1 (id=1521): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x20) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x3) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) fremovexattr(r0, &(0x7f0000000000)=@known='system.posix_acl_default\x00') 659.195153ms ago: executing program 0 (id=1522): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x30000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa80, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 328.248881ms ago: executing program 4 (id=1523): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x80000) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x6, 0x4c032, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200000, &(0x7f0000000100)={[{@resgid}, {@errors_remount}, {@usrjquota}, {@sysvgroups}, {@usrquota}]}, 0x1, 0x50d, &(0x7f0000001bc0)="$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") socket$inet(0x2, 0x800, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) fallocate(0xffffffffffffffff, 0x0, 0xa20, 0x8000c65) 268.683383ms ago: executing program 0 (id=1524): sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) io_uring_enter(0xffffffffffffffff, 0x6516, 0xad2c, 0x8, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r1 = inotify_init1(0x0) read(r1, 0x0, 0x0) 219.216364ms ago: executing program 4 (id=1525): ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4bfb, 0x0) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x2b) acct(&(0x7f0000000100)='./file0\x00') ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) 69.552778ms ago: executing program 6 (id=1526): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000000)={r0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000480)="d8001c00180081064e81f7050044fd56170d12a0b9b54570", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r1}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r3}) 276.91µs ago: executing program 2 (id=1527): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4f23, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x100000b}, 0x1c) listen(r2, 0xb) listen(r1, 0x50) 0s ago: executing program 6 (id=1528): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x289c2, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setfsuid(0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0) mknod(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8001420, 0xffffffff) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f913a3c92b", 0x14}], 0x1}, 0x0) kernel console output (not intermixed with test programs): h0_macvtap: entered promiscuous mode [ 27.307444][ T3302] veth1_macvtap: entered promiscuous mode [ 27.329696][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.348781][ T3294] veth0_vlan: entered promiscuous mode [ 27.358411][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.374566][ T3294] veth1_vlan: entered promiscuous mode [ 27.397570][ T3298] veth0_vlan: entered promiscuous mode [ 27.408058][ T3295] veth0_vlan: entered promiscuous mode [ 27.416421][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 27.416434][ T28] audit: type=1400 audit(1786149395.994:146): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/root/syzkaller.uLUug8/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 27.421831][ T3298] veth1_vlan: entered promiscuous mode [ 27.433280][ T28] audit: type=1400 audit(1786149395.994:147): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 27.452505][ T3294] veth0_macvtap: entered promiscuous mode [ 27.479511][ T28] audit: type=1400 audit(1786149395.994:148): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/root/syzkaller.uLUug8/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 27.490010][ T3295] veth1_vlan: entered promiscuous mode [ 27.507167][ T28] audit: type=1400 audit(1786149395.994:149): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 27.513149][ T40] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.541774][ T28] audit: type=1400 audit(1786149395.994:150): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/root/syzkaller.uLUug8/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 27.552692][ T3301] veth0_vlan: entered promiscuous mode [ 27.570217][ T28] audit: type=1400 audit(1786149395.994:151): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/root/syzkaller.uLUug8/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4676 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 27.602523][ T3294] veth1_macvtap: entered promiscuous mode [ 27.605623][ T3302] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.609178][ T28] audit: type=1400 audit(1786149395.994:152): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 27.623055][ T310] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.644209][ T28] audit: type=1400 audit(1786149396.084:153): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 27.664196][ T3298] veth0_macvtap: entered promiscuous mode [ 27.674194][ T28] audit: type=1400 audit(1786149396.084:154): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="gadgetfs" ino=4677 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 27.684084][ T3301] veth1_vlan: entered promiscuous mode [ 27.721166][ T28] audit: type=1400 audit(1786149396.294:155): avc: denied { read write } for pid=3302 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 27.747766][ T310] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.757492][ T3500] netlink: 'syz.0.1': attribute type 6 has an invalid length. [ 27.760445][ T3298] veth1_macvtap: entered promiscuous mode [ 27.773167][ T40] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.788812][ T3295] veth0_macvtap: entered promiscuous mode [ 27.802548][ T3295] veth1_macvtap: entered promiscuous mode [ 27.810031][ T3294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.818971][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.830584][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.843196][ T3294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.851180][ T3301] veth0_macvtap: entered promiscuous mode [ 27.858817][ T3301] veth1_macvtap: entered promiscuous mode [ 27.871758][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.880779][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.902976][ T310] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.913021][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.932924][ T310] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.942286][ T310] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.952266][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.962264][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.992933][ T30] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.024209][ T40] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.037201][ T40] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.053889][ T40] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.103033][ T40] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.113510][ T40] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.118472][ T3509] loop3: detected capacity change from 0 to 4096 [ 28.129729][ T310] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.162044][ T3509] EXT4-fs: inline encryption not supported [ 28.169018][ T3509] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 28.180780][ T3509] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a802c018, mo2=0002] [ 28.189159][ T3514] loop4: detected capacity change from 0 to 512 [ 28.189550][ T3509] System zones: 0-5 [ 28.223503][ T3514] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 28.234025][ T30] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.234329][ T3509] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.248872][ T30] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.272593][ T3514] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.5: invalid indirect mapped block 8 (level 2) [ 28.286187][ T2439] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.295975][ T3514] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 28.296123][ T3514] EXT4-fs (loop4): Remounting filesystem read-only [ 28.299064][ T2439] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.305286][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 28.305301][ C1] EXT4-fs (loop4): initial error at time 1786149396: ext4_free_branches:1023: inode 13 [ 28.305326][ C1] EXT4-fs (loop4): last error at time 1786149396: ext4_free_branches:1023: inode 13 [ 28.349086][ T3514] EXT4-fs (loop4): 1 truncate cleaned up [ 28.355149][ T3514] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.362921][ T2439] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.392011][ T3514] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.510526][ T3526] capability: warning: `syz.4.10' uses 32-bit capabilities (legacy support in use) [ 28.600296][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.670268][ T3534] Zero length message leads to an empty skb [ 29.075401][ T3555] netlink: 24 bytes leftover after parsing attributes in process `syz.1.21'. [ 29.309239][ T3577] netlink: 'syz.1.30': attribute type 1 has an invalid length. [ 29.328010][ T3577] netlink: 63763 bytes leftover after parsing attributes in process `syz.1.30'. [ 29.406730][ T3573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24'. [ 29.501382][ T3556] syz.0.22 (3556) used greatest stack depth: 11240 bytes left [ 29.953777][ T3567] syz.4.27 (3567) used greatest stack depth: 10432 bytes left [ 30.022908][ T3598] netlink: 24 bytes leftover after parsing attributes in process `syz.4.39'. [ 30.105432][ T3602] bridge_slave_1: default FDB implementation only supports local addresses [ 30.139450][ T3610] netlink: 'syz.4.45': attribute type 1 has an invalid length. [ 30.160840][ T3608] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.168110][ T3608] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.189211][ T3612] netlink: 'syz.3.42': attribute type 10 has an invalid length. [ 30.205369][ T3613] netlink: 12 bytes leftover after parsing attributes in process `syz.4.45'. [ 30.214178][ T3608] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 30.221470][ T3613] netlink: 12 bytes leftover after parsing attributes in process `syz.4.45'. [ 30.224351][ T3608] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 30.303217][ T49] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.383166][ T40] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.411740][ T3621] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 30.418348][ T3621] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 30.425994][ T2439] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.435082][ T2439] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.463122][ T3630] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6) [ 30.469665][ T3630] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 30.495723][ T3621] vhci_hcd vhci_hcd.0: Device attached [ 30.501100][ T3630] vhci_hcd vhci_hcd.0: Device attached [ 30.532191][ T3621] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(5) [ 30.538717][ T3621] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 30.559621][ T3621] vhci_hcd vhci_hcd.0: Device attached [ 30.585969][ T3621] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(9) [ 30.592570][ T3621] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 30.644354][ T3621] vhci_hcd vhci_hcd.0: Device attached [ 30.656093][ T3621] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 30.674264][ T3621] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(13) [ 30.680875][ T3621] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 30.689424][ T3621] vhci_hcd vhci_hcd.0: Device attached [ 30.699656][ T3621] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(15) [ 30.706260][ T3621] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 30.714097][ T3621] vhci_hcd vhci_hcd.0: Device attached [ 30.732879][ T3383] usb 1-1: new high-speed USB device number 2 using vhci_hcd [ 30.741347][ T3621] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(17) [ 30.747955][ T3621] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 30.756701][ T3621] vhci_hcd vhci_hcd.0: Device attached [ 30.764280][ T3622] vhci_hcd: connection reset by peer [ 30.767127][ T3662] vhci_hcd: connection closed [ 30.769649][ T3653] vhci_hcd: connection closed [ 30.774745][ T3639] vhci_hcd: connection closed [ 30.779642][ T3658] vhci_hcd: connection closed [ 30.780832][ T49] vhci_hcd vhci_hcd.0: stop threads [ 30.798035][ T3631] vhci_hcd: connection closed [ 30.798115][ T3646] vhci_hcd: connection closed [ 30.803095][ T49] vhci_hcd vhci_hcd.0: release socket [ 30.818148][ T49] vhci_hcd vhci_hcd.0: disconnect device [ 30.824064][ T49] vhci_hcd vhci_hcd.0: stop threads [ 30.842342][ T49] vhci_hcd vhci_hcd.0: release socket [ 30.850879][ T49] vhci_hcd vhci_hcd.0: disconnect device [ 30.864507][ T49] vhci_hcd vhci_hcd.0: stop threads [ 30.876772][ T49] vhci_hcd vhci_hcd.0: release socket [ 30.882379][ T49] vhci_hcd vhci_hcd.0: disconnect device [ 30.888298][ T49] vhci_hcd vhci_hcd.0: stop threads [ 30.893802][ T49] vhci_hcd vhci_hcd.0: release socket [ 30.899426][ T49] vhci_hcd vhci_hcd.0: disconnect device [ 30.921014][ T49] vhci_hcd vhci_hcd.0: stop threads [ 30.932664][ T49] vhci_hcd vhci_hcd.0: release socket [ 30.941579][ T49] vhci_hcd vhci_hcd.0: disconnect device [ 30.942291][ T3672] sctp: [Deprecated]: syz.3.58 (pid 3672) Use of struct sctp_assoc_value in delayed_ack socket option. [ 30.942291][ T3672] Use struct sctp_sack_info instead [ 30.947613][ T49] vhci_hcd vhci_hcd.0: stop threads [ 30.989795][ T49] vhci_hcd vhci_hcd.0: release socket [ 30.995390][ T49] vhci_hcd vhci_hcd.0: disconnect device [ 31.002489][ T49] vhci_hcd vhci_hcd.0: stop threads [ 31.007917][ T49] vhci_hcd vhci_hcd.0: release socket [ 31.019796][ T49] vhci_hcd vhci_hcd.0: disconnect device [ 31.027707][ T3674] ======================================================= [ 31.027707][ T3674] WARNING: The mand mount option has been deprecated and [ 31.027707][ T3674] and is ignored by this kernel. Remove the mand [ 31.027707][ T3674] option from the mount to silence this warning. [ 31.027707][ T3674] ======================================================= [ 31.135338][ T3678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.62'. [ 31.157387][ T3678] netlink: 12 bytes leftover after parsing attributes in process `syz.1.62'. [ 31.339440][ T3682] loop1: detected capacity change from 0 to 512 [ 31.358680][ T3682] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 31.397157][ T3682] EXT4-fs (loop1): 1 orphan inode deleted [ 31.408069][ T3682] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.422126][ T49] EXT4-fs error (device loop1): ext4_release_dquot:7077: comm kworker/u8:3: Failed to release dquot type 1 [ 31.434041][ T49] loop1: lost filesystem error report for type 5 error -117 [ 31.435005][ T3682] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.471984][ T3682] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 31.711856][ T3692] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 31.722662][ T3692] batman_adv: batadv0: Adding interface: gretap1 [ 31.731669][ T3692] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.775581][ T3692] batman_adv: batadv0: Interface activated: gretap1 [ 31.837638][ T3695] netlink: 128 bytes leftover after parsing attributes in process `syz.3.69'. [ 31.855970][ T3695] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 32.076385][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.231820][ T3709] bridge_slave_0: left allmulticast mode [ 32.240279][ T3709] bridge_slave_0: left promiscuous mode [ 32.255229][ T3709] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.270634][ T3709] bridge_slave_1: left allmulticast mode [ 32.276416][ T3709] bridge_slave_1: left promiscuous mode [ 32.282197][ T3709] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.292341][ T3709] bond0: (slave bond_slave_0): Releasing backup interface [ 32.303164][ T3709] bond0: (slave bond_slave_1): Releasing backup interface [ 32.326439][ T3709] team0: Port device team_slave_0 removed [ 32.349683][ T3709] team0: Port device team_slave_1 removed [ 32.360241][ T3709] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 32.368358][ T3709] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 32.385834][ T3709] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 32.402943][ T3709] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 32.413664][ T3709] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 32.446360][ T3713] netlink: 'syz.1.78': attribute type 3 has an invalid length. [ 32.460519][ T3713] netlink: 'syz.1.78': attribute type 3 has an invalid length. [ 32.528580][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 32.528592][ T28] audit: type=1400 audit(1786149401.104:217): avc: denied { create } for pid=3737 comm="syz.1.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.560269][ T3738] netlink: 'syz.1.83': attribute type 13 has an invalid length. [ 32.609315][ T28] audit: type=1400 audit(1786149401.184:218): avc: denied { name_bind } for pid=3743 comm="syz.3.87" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 32.618829][ T3709] syz.4.75 (3709) used greatest stack depth: 9560 bytes left [ 32.701570][ T3738] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.708769][ T3738] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.771427][ T3738] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 32.781301][ T3738] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 32.872851][ T30] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.881860][ T30] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.952975][ T2439] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.962067][ T2439] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.014934][ T28] audit: type=1400 audit(1786149401.594:219): avc: denied { read write } for pid=3762 comm="syz.0.93" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 33.041884][ T28] audit: type=1400 audit(1786149401.594:220): avc: denied { open } for pid=3762 comm="syz.0.93" path="/dev/input/event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 33.074809][ T28] audit: type=1400 audit(1786149401.654:221): avc: denied { create } for pid=3765 comm="syz.3.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 33.156654][ T3774] netlink: 'syz.3.95': attribute type 1 has an invalid length. [ 33.328323][ T3786] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3786 comm=syz.3.99 [ 33.341737][ T3786] netlink: 12 bytes leftover after parsing attributes in process `syz.3.99'. [ 33.354722][ T3786] vlan2: entered allmulticast mode [ 33.359940][ T3786] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 33.480609][ T28] audit: type=1400 audit(1786149402.054:222): avc: denied { write } for pid=3790 comm="syz.3.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.622038][ T3802] netlink: 'syz.2.104': attribute type 2 has an invalid length. [ 33.657449][ T3802] netlink: 'syz.2.104': attribute type 2 has an invalid length. [ 33.675335][ T3802] netlink: 'syz.2.104': attribute type 2 has an invalid length. [ 33.776794][ T28] audit: type=1400 audit(1786149402.344:223): avc: denied { execute } for pid=3806 comm="syz.3.105" path="/29/file1" dev="tmpfs" ino=170 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 33.881724][ T3813] macvlan2: entered promiscuous mode [ 33.897573][ T3813] macvlan2: entered allmulticast mode [ 33.983228][ T3819] netlink: 'syz.0.110': attribute type 1 has an invalid length. [ 34.044549][ T3826] netlink: 'syz.3.111': attribute type 1 has an invalid length. [ 34.061149][ T3823] loop1: detected capacity change from 0 to 128 [ 34.091231][ T3826] 8021q: adding VLAN 0 to HW filter on device bond1 [ 34.096373][ T3823] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 34.123262][ T3823] ext4 filesystem being mounted at /22/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 34.167154][ T3826] bond1: (slave geneve2): making interface the new active one [ 34.176199][ T3826] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 34.196877][ T3833] loop0: detected capacity change from 0 to 8192 [ 34.207134][ T3833] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 34.238414][ T28] audit: type=1400 audit(1786149402.804:224): avc: denied { mount } for pid=3832 comm="syz.0.114" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 34.394954][ T3294] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 34.406283][ T3836] syz.3.118(3836): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 34.423948][ T3840] __nla_validate_parse: 2 callbacks suppressed [ 34.423986][ T3840] netlink: 4 bytes leftover after parsing attributes in process `syz.4.117'. [ 34.479516][ T28] audit: type=1400 audit(1786149403.054:225): avc: denied { map_read map_write } for pid=3845 comm="syz.3.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 34.517180][ T3840] macvtap1: entered allmulticast mode [ 34.524206][ T3840] bridge0: entered allmulticast mode [ 34.530144][ T3840] bridge0: entered promiscuous mode [ 34.532077][ T28] audit: type=1400 audit(1786149403.104:226): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 34.541285][ T3840] bridge0: port 1(macvtap1) entered blocking state [ 34.562691][ T3840] bridge0: port 1(macvtap1) entered disabled state [ 34.569907][ T3850] netlink: 24 bytes leftover after parsing attributes in process `syz.3.121'. [ 34.625106][ T3840] bridge0: left allmulticast mode [ 34.668826][ T3844] bridge_slave_0: left allmulticast mode [ 34.674742][ T3844] bridge_slave_0: left promiscuous mode [ 34.687774][ T3844] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.719980][ T3844] bridge_slave_1: left allmulticast mode [ 34.726981][ T3844] bridge_slave_1: left promiscuous mode [ 34.735892][ T3844] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.745302][ T3844] bond0: (slave bond_slave_0): Releasing backup interface [ 34.759869][ T3844] bond0: (slave bond_slave_1): Releasing backup interface [ 34.768605][ T3844] team0: Port device team_slave_0 removed [ 34.777206][ T3844] team0: Port device team_slave_1 removed [ 34.783308][ T3844] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 34.790900][ T3844] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 34.798817][ T3844] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 34.816945][ T1040] bridge0: left promiscuous mode [ 34.823586][ T3849] team0: Mode changed to "loadbalance" [ 34.844831][ T3851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.119'. [ 34.856258][ T3860] netlink: 16 bytes leftover after parsing attributes in process `syz.3.121'. [ 34.865342][ T3860] netlink: 12 bytes leftover after parsing attributes in process `syz.3.121'. [ 34.877578][ T3872] -1O2~: renamed from syzkaller0 [ 34.884115][ T3851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.119'. [ 34.913634][ T3885] netlink: 24 bytes leftover after parsing attributes in process `syz.2.131'. [ 35.599652][ T3920] netlink: 'syz.0.144': attribute type 4 has an invalid length. [ 35.892926][ T3383] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 36.146814][ T3946] batman_adv: batadv0: Interface deactivated: gretap1 [ 36.663151][ T3969] netlink: 'syz.0.164': attribute type 13 has an invalid length. [ 36.750928][ T3969] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.758210][ T3969] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.800316][ T3969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.810297][ T3969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.882872][ T310] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.899248][ T310] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.908780][ T310] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.917897][ T310] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.438150][ T3995] -1O2~: renamed from syzkaller0 [ 37.489325][ T3996] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 37.702069][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 37.702083][ T28] audit: type=1400 audit(1786149406.274:250): avc: denied { create } for pid=4004 comm="syz.2.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 38.326222][ T28] audit: type=1400 audit(1786149406.904:251): avc: denied { write } for pid=4019 comm="syz.3.182" name="functions" dev="configfs" ino=7108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 38.371411][ T28] audit: type=1400 audit(1786149406.934:252): avc: denied { bind } for pid=4022 comm="syz.3.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.396384][ T28] audit: type=1400 audit(1786149406.934:253): avc: denied { setopt } for pid=4022 comm="syz.3.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.587078][ T28] audit: type=1400 audit(1786149407.164:254): avc: denied { mount } for pid=4032 comm="syz.1.188" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 38.679706][ T28] audit: type=1400 audit(1786149407.184:255): avc: denied { read write } for pid=4032 comm="syz.1.188" name="control" dev="devtmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 38.785735][ T28] audit: type=1400 audit(1786149407.184:256): avc: denied { open } for pid=4032 comm="syz.1.188" path="/35/dev/mapper/control" dev="devtmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 38.848259][ T28] audit: type=1400 audit(1786149407.194:257): avc: denied { ioctl } for pid=4032 comm="syz.1.188" path="/35/dev/mapper/control" dev="devtmpfs" ino=248 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 38.901926][ T4042] loop2: detected capacity change from 0 to 512 [ 38.913374][ T28] audit: type=1326 audit(1786149407.214:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4027 comm="syz.4.186" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe8d6c0e0d9 code=0x0 [ 38.944382][ T4042] EXT4-fs: Ignoring removed nobh option [ 38.952399][ T28] audit: type=1400 audit(1786149407.234:259): avc: denied { unmount } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 38.982486][ T4042] EXT4-fs (loop2): orphan cleanup on readonly fs [ 38.994161][ T4042] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.192: EA inode hash validation failed [ 39.009380][ T4042] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 39.023748][ T4042] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #15: comm syz.2.192: corrupted inode contents [ 39.036140][ T4042] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 39.036779][ T4042] EXT4-fs error (device loop2): ext4_dirty_inode:6639: inode #15: comm syz.2.192: mark_inode_dirty error [ 39.046259][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 39.046339][ C0] EXT4-fs (loop2): initial error at time 1786149407: ext4_do_update_inode:5742: inode 15 [ 39.046468][ C0] EXT4-fs (loop2): last error at time 1786149407: ext4_do_update_inode:5742: inode 15 [ 39.085072][ T4042] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 39.085843][ T4042] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #15: comm syz.2.192: corrupted inode contents [ 39.107528][ T4042] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 39.108007][ T4042] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3001: inode #15: comm syz.2.192: mark_inode_dirty error [ 39.132912][ T4042] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 39.134168][ T4042] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3004: inode #15: comm syz.2.192: mark inode dirty (error -117) [ 39.159791][ T4042] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 39.160381][ T4042] EXT4-fs warning (device loop2): ext4_evict_inode:287: xattr delete (err -117) [ 39.172236][ T4050] syzkaller0: entered promiscuous mode [ 39.180956][ T4042] EXT4-fs (loop2): 1 orphan inode deleted [ 39.191029][ T4050] syzkaller0: entered allmulticast mode [ 39.196854][ T4042] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 39.275650][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.437842][ T4068] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 39.448624][ T4068] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 39.458473][ T4068] bond0 (unregistering): Released all slaves [ 40.060456][ T4094] syzkaller0: entered promiscuous mode [ 40.066327][ T4094] syzkaller0: entered allmulticast mode [ 40.762237][ T4129] xt_hashlimit: size too large, truncated to 1048576 [ 40.980996][ T4144] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 41.170923][ T4167] netlink: 'syz.3.236': attribute type 1 has an invalid length. [ 41.890321][ T4217] bridge_slave_0: left allmulticast mode [ 41.896891][ T4217] bridge_slave_0: left promiscuous mode [ 41.903027][ T4217] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.910866][ T4217] bridge_slave_1: left allmulticast mode [ 41.916677][ T4217] bridge_slave_1: left promiscuous mode [ 41.922335][ T4217] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.931051][ T4217] bond0: (slave bond_slave_0): Releasing backup interface [ 41.939297][ T4217] bond0: (slave bond_slave_1): Releasing backup interface [ 41.947878][ T4217] team0: Port device team_slave_0 removed [ 41.954616][ T4217] team0: Port device team_slave_1 removed [ 41.960566][ T4217] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.968548][ T4217] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.976462][ T4217] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 41.993537][ T4218] team0: Mode changed to "loadbalance" [ 42.021708][ T4220] loop1: detected capacity change from 0 to 512 [ 42.033977][ T4220] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 42.046958][ T4220] EXT4-fs (loop1): 1 truncate cleaned up [ 42.053625][ T4220] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.090569][ T4224] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 42.103121][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.419227][ T4241] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 42.436733][ T4241] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 42.446879][ T4241] bond0 (unregistering): Released all slaves [ 43.112350][ T4275] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 43.129845][ T4275] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 43.143368][ T4275] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 43.158652][ T4275] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 43.165987][ T28] kauditd_printk_skb: 182 callbacks suppressed [ 43.166001][ T28] audit: type=1400 audit(1786149411.734:442): avc: denied { read } for pid=4278 comm="syz.4.278" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 43.200434][ T4275] bond0 (unregistering): Released all slaves [ 43.247865][ T28] audit: type=1400 audit(1786149411.824:443): avc: denied { mounton } for pid=4278 comm="syz.4.278" path="/60/file0" dev="tmpfs" ino=337 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 43.322669][ T28] audit: type=1400 audit(1786149411.894:444): avc: denied { read } for pid=4289 comm="syz.3.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 43.460048][ T28] audit: type=1326 audit(1786149412.034:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4286 comm="syz.0.281" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4aa508e0d9 code=0x0 [ 43.537588][ T28] audit: type=1326 audit(1786149412.114:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4286 comm="syz.0.281" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aa508e0d9 code=0x7ffc0000 [ 43.563168][ T28] audit: type=1326 audit(1786149412.114:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4286 comm="syz.0.281" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aa508e0d9 code=0x7ffc0000 [ 43.588789][ T28] audit: type=1326 audit(1786149412.114:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4286 comm="syz.0.281" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aa508e0d9 code=0x7ffc0000 [ 43.614427][ T28] audit: type=1326 audit(1786149412.114:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4286 comm="syz.0.281" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aa508e0d9 code=0x7ffc0000 [ 43.639940][ T28] audit: type=1326 audit(1786149412.114:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4286 comm="syz.0.281" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f4aa508e0d9 code=0x7ffc0000 [ 43.665426][ T28] audit: type=1326 audit(1786149412.114:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4286 comm="syz.0.281" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aa508e0d9 code=0x7ffc0000 [ 44.558267][ T4316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.292'. [ 44.581513][ T4316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.292'. [ 44.635745][ T4322] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 44.643846][ T4324] netlink: 'syz.2.297': attribute type 11 has an invalid length. [ 44.803052][ T4334] Illegal XDP return value 4292481024 on prog (id 28) dev syz_tun, expect packet loss! [ 45.031200][ T4349] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 45.063291][ T4349] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 45.079845][ T4349] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 45.102267][ T4349] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 45.123910][ T4349] bond0 (unregistering): Released all slaves [ 45.238909][ T4346] loop2: detected capacity change from 0 to 32768 [ 45.294976][ T4346] loop2: p1 p3 < > [ 45.344567][ T3286] udevd[3286]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 45.356348][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 45.833230][ T4384] xt_hashlimit: max too large, truncated to 1048576 [ 45.840783][ T4384] xt_hashlimit: size too large, truncated to 1048576 [ 45.847850][ T4384] xt_NFQUEUE: number of queues (65529) out of range (got 65536) [ 46.416331][ T4417] netlink: 105084 bytes leftover after parsing attributes in process `syz.3.335'. [ 46.452744][ T4417] netlink: 31 bytes leftover after parsing attributes in process `syz.3.335'. [ 46.544060][ T4431] netlink: 'syz.3.341': attribute type 83 has an invalid length. [ 48.122671][ T4506] xt_hashlimit: max too large, truncated to 1048576 [ 48.146849][ T4506] xt_hashlimit: size too large, truncated to 1048576 [ 48.167306][ T4506] xt_NFQUEUE: number of queues (65529) out of range (got 65536) [ 48.362699][ T4518] loop1: detected capacity change from 0 to 512 [ 48.376987][ T4518] EXT4-fs: Ignoring removed i_version option [ 48.407395][ T4518] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.442040][ T4518] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.489765][ T28] kauditd_printk_skb: 481 callbacks suppressed [ 48.489779][ T28] audit: type=1400 audit(1786149417.064:933): avc: denied { setattr } for pid=4517 comm="syz.1.375" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 48.525791][ T28] audit: type=1400 audit(1786149417.064:934): avc: denied { write } for pid=4517 comm="syz.1.375" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 48.548043][ T28] audit: type=1400 audit(1786149417.064:935): avc: denied { add_name } for pid=4517 comm="syz.1.375" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 48.569501][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.579653][ T28] audit: type=1400 audit(1786149417.074:936): avc: denied { setattr } for pid=4517 comm="syz.1.375" name="bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 48.799195][ T4531] netlink: 8 bytes leftover after parsing attributes in process `syz.3.378'. [ 48.820508][ T4531] netlink: 8 bytes leftover after parsing attributes in process `syz.3.378'. [ 48.915748][ T4532] loop0: detected capacity change from 0 to 512 [ 48.958155][ T4532] EXT4-fs: Ignoring removed mblk_io_submit option [ 48.981813][ T4532] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 49.019933][ T4532] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842e02c, mo2=0002] [ 49.029985][ T4532] System zones: 1-12 [ 49.033558][ T28] audit: type=1400 audit(1786149417.614:937): avc: denied { name_bind } for pid=4540 comm="syz.2.383" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 49.035034][ T4532] EXT4-fs (loop0): orphan cleanup on readonly fs [ 49.069256][ T4532] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.379: bg 0: block 361: padding at end of block bitmap is not set [ 49.090590][ T4532] loop0: lost filesystem error report for type 5 error -117 [ 49.092619][ T4532] EXT4-fs (loop0): Remounting filesystem read-only [ 49.100069][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 49.100109][ C1] EXT4-fs (loop0): initial error at time 1786149417: ext4_validate_block_bitmap:441 [ 49.100238][ C1] EXT4-fs (loop0): last error at time 1786149417: ext4_validate_block_bitmap:441 [ 49.132159][ T4543] netlink: 105084 bytes leftover after parsing attributes in process `syz.2.384'. [ 49.144268][ T4532] EXT4-fs (loop0): 1 truncate cleaned up [ 49.154666][ T4532] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 49.170572][ T4543] netlink: 31 bytes leftover after parsing attributes in process `syz.2.384'. [ 49.253113][ T4547] xt_hashlimit: max too large, truncated to 1048576 [ 49.263473][ T4547] xt_hashlimit: size too large, truncated to 1048576 [ 49.266452][ T28] audit: type=1400 audit(1786149417.834:938): avc: denied { create } for pid=4529 comm="syz.0.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 49.270933][ T4547] xt_NFQUEUE: number of queues (65529) out of range (got 65536) [ 49.334637][ T28] audit: type=1400 audit(1786149417.874:939): avc: denied { getopt } for pid=4529 comm="syz.0.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 49.439021][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 49.483215][ T28] audit: type=1400 audit(1786149418.054:940): avc: denied { bind } for pid=4552 comm="syz.0.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.541169][ T28] audit: type=1400 audit(1786149418.054:941): avc: denied { name_bind } for pid=4552 comm="syz.0.387" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 49.589436][ T28] audit: type=1400 audit(1786149418.054:942): avc: denied { node_bind } for pid=4552 comm="syz.0.387" saddr=224.0.0.2 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 49.760427][ T4570] netlink: 'syz.1.393': attribute type 83 has an invalid length. [ 50.087300][ T4585] netlink: 'syz.0.402': attribute type 1 has an invalid length. [ 50.097723][ T4585] netlink: 63763 bytes leftover after parsing attributes in process `syz.0.402'. [ 50.165984][ T4591] netlink: 12 bytes leftover after parsing attributes in process `syz.1.405'. [ 50.250292][ T4595] netlink: 24 bytes leftover after parsing attributes in process `syz.0.407'. [ 50.491225][ T4603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.411'. [ 50.542945][ T4606] netlink: 24 bytes leftover after parsing attributes in process `syz.3.422'. [ 51.190877][ T4645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.427'. [ 51.763103][ T4663] loop1: detected capacity change from 0 to 4096 [ 51.769967][ T4663] EXT4-fs: inline encryption not supported [ 51.776464][ T4663] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 51.786808][ T4663] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a802c018, mo2=0002] [ 51.795395][ T4663] System zones: 0-5 [ 51.802554][ T4663] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.309589][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.425445][ T4690] netlink: 12 bytes leftover after parsing attributes in process `syz.4.445'. [ 52.771337][ T4703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.450'. [ 52.795212][ T4703] netlink: 12 bytes leftover after parsing attributes in process `syz.0.450'. [ 53.271850][ T4718] netlink: 28 bytes leftover after parsing attributes in process `syz.0.454'. [ 53.401293][ T4733] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 53.419454][ T4733] batman_adv: batadv0: Adding interface: gretap1 [ 53.436734][ T4733] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.464628][ T4733] batman_adv: batadv0: Interface activated: gretap1 [ 53.515160][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 53.515173][ T28] audit: type=1400 audit(1786149422.094:946): avc: denied { read } for pid=4744 comm="syz.2.465" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 53.574557][ T28] audit: type=1400 audit(1786149422.094:947): avc: denied { open } for pid=4744 comm="syz.2.465" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 53.618407][ T28] audit: type=1400 audit(1786149422.124:948): avc: denied { ioctl } for pid=4744 comm="syz.2.465" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 53.679298][ T28] audit: type=1400 audit(1786149422.134:949): avc: denied { write } for pid=4744 comm="syz.2.465" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 54.704149][ T4856] 0: reclassify loop, rule prio 0, protocol 03 [ 54.939407][ T4903] bridge_slave_0: left allmulticast mode [ 54.945827][ T4903] bridge_slave_0: left promiscuous mode [ 54.951935][ T4903] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.963877][ T4903] bridge_slave_1: left allmulticast mode [ 54.969692][ T4903] bridge_slave_1: left promiscuous mode [ 54.978986][ T4903] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.008867][ T4903] team0: Port device team_slave_0 removed [ 55.026304][ T4903] team0: Port device team_slave_1 removed [ 55.033343][ T4903] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.047285][ T4903] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.064354][ T4903] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.071819][ T4903] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.092446][ T4903] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 55.274231][ T4918] __nla_validate_parse: 1 callbacks suppressed [ 55.274312][ T4918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.488'. [ 55.289549][ T4918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.488'. [ 55.387184][ T4926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.502'. [ 55.397647][ T4926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.502'. [ 55.513522][ T4942] bridge_slave_0: left allmulticast mode [ 55.519200][ T4942] bridge_slave_0: left promiscuous mode [ 55.525314][ T4942] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.533177][ T4942] bridge_slave_1: left allmulticast mode [ 55.539012][ T4942] bridge_slave_1: left promiscuous mode [ 55.545123][ T4942] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.565473][ T4942] team0: Port device team_slave_0 removed [ 55.571793][ T4942] team0: Port device team_slave_1 removed [ 55.584802][ T4942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.598343][ T4942] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.606848][ T4942] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 55.623024][ T4936] loop2: detected capacity change from 0 to 32768 [ 55.710704][ T4950] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 2, id = 0 [ 56.127717][ T28] audit: type=1400 audit(1786149424.704:950): avc: denied { read } for pid=4970 comm="syz.0.509" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 56.146758][ T4975] syz.0.510 uses obsolete (PF_INET,SOCK_PACKET) [ 56.166787][ T28] audit: type=1400 audit(1786149424.704:951): avc: denied { setopt } for pid=4974 comm="syz.0.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 56.186596][ T28] audit: type=1400 audit(1786149424.704:952): avc: denied { listen } for pid=4974 comm="syz.0.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 56.206298][ T28] audit: type=1400 audit(1786149424.764:953): avc: denied { accept } for pid=4977 comm="syz.3.511" lport=58628 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 56.229290][ T28] audit: type=1400 audit(1786149424.764:954): avc: denied { write } for pid=4977 comm="syz.3.511" lport=58628 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 56.252783][ T28] audit: type=1400 audit(1786149424.764:955): avc: denied { setopt } for pid=4977 comm="syz.3.511" lport=58628 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 56.347672][ T4986] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 56.460639][ T3390] IPVS: starting estimator thread 0... [ 56.461395][ T4990] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 56.555177][ T5004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.522'. [ 56.565353][ T4999] IPVS: using max 2112 ests per chain, 105600 per kthread [ 56.586787][ T68] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.589840][ T5004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.522'. [ 56.596037][ T68] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.626290][ T68] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.648550][ T5002] loop1: detected capacity change from 0 to 128 [ 56.663291][ T4877] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.706604][ T5050] loop0: detected capacity change from 0 to 2048 [ 57.736411][ T5050] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.754519][ T5050] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 57.769820][ T5050] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 57.782475][ T5050] EXT4-fs (loop0): This should not happen!! Data will be lost [ 57.782475][ T5050] [ 57.792251][ T5050] EXT4-fs (loop0): Total free blocks count 0 [ 57.799778][ T5050] EXT4-fs (loop0): Free/Dirty block details [ 57.805841][ T5050] EXT4-fs (loop0): free_blocks=2415919504 [ 57.811605][ T5050] EXT4-fs (loop0): dirty_blocks=16 [ 57.816860][ T5050] EXT4-fs (loop0): Block reservation details [ 57.822916][ T5050] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 57.876147][ T68] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 57.889342][ T3302] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 58.095651][ T5071] loop2: detected capacity change from 0 to 256 [ 58.185235][ T23] IPVS: starting estimator thread 0... [ 58.185702][ T5076] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 58.283060][ T5081] IPVS: using max 2448 ests per chain, 122400 per kthread [ 58.963933][ T5193] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 58.971432][ T3397] IPVS: starting estimator thread 0... [ 59.062928][ T5205] IPVS: using max 2400 ests per chain, 120000 per kthread [ 59.102868][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 59.102882][ T28] audit: type=1400 audit(1786149427.674:965): avc: denied { create } for pid=5234 comm="syz.2.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 59.132060][ T5237] netlink: 12 bytes leftover after parsing attributes in process `syz.0.568'. [ 59.132795][ T5239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.567'. [ 59.150138][ T28] audit: type=1400 audit(1786149427.714:966): avc: denied { ioctl } for pid=5236 comm="syz.0.568" path="socket:[13592]" dev="sockfs" ino=13592 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 59.166268][ T5239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.567'. [ 59.186083][ T28] audit: type=1400 audit(1786149427.764:967): avc: denied { write } for pid=5234 comm="syz.2.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 59.321453][ T5254] loop1: detected capacity change from 0 to 128 [ 59.328356][ T5254] vfat: Unknown parameter '' [ 59.338642][ T5254] cgroup: Unknown subsys name 'cpuset' [ 59.346655][ T28] audit: type=1400 audit(1786149427.924:968): avc: denied { checkpoint_restore } for pid=5253 comm="syz.1.574" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 59.517466][ T28] audit: type=1400 audit(1786149428.094:969): avc: denied { create } for pid=5255 comm="syz.1.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 59.538013][ T28] audit: type=1400 audit(1786149428.094:970): avc: denied { getopt } for pid=5255 comm="syz.1.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 59.551820][ T5259] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.576'. [ 59.585968][ T28] audit: type=1400 audit(1786149428.164:971): avc: denied { create } for pid=5260 comm="syz.1.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 59.590099][ T5261] syzkaller1: entered promiscuous mode [ 59.605630][ T28] audit: type=1400 audit(1786149428.164:972): avc: denied { ioctl } for pid=5260 comm="syz.1.577" path="socket:[13075]" dev="sockfs" ino=13075 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 59.611051][ T5261] syzkaller1: entered allmulticast mode [ 59.815430][ T5267] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 59.867576][ T5271] loop1: detected capacity change from 0 to 128 [ 59.882155][ T5271] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 59.902544][ T5271] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 59.965142][ T4887] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 59.974839][ T5271] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 60.150904][ T5277] loop2: detected capacity change from 0 to 764 [ 60.186356][ T5277] rock: corrupted directory entry. extent=32, offset=0, size=83886085 [ 60.198673][ T28] audit: type=1400 audit(1786149428.774:973): avc: denied { mount } for pid=5276 comm="syz.2.583" name="/" dev="loop2" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 60.263949][ T28] audit: type=1400 audit(1786149428.824:974): avc: denied { unmount } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 60.296850][ T5286] syzkaller0: entered promiscuous mode [ 60.303953][ T5286] syzkaller0: entered allmulticast mode [ 60.323049][ T5286] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487 [ 61.052459][ T5335] __nla_validate_parse: 2 callbacks suppressed [ 61.052493][ T5335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.604'. [ 61.210654][ T5352] netlink: 'syz.1.611': attribute type 10 has an invalid length. [ 61.345802][ T5365] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 61.410894][ T5374] netlink: 3084 bytes leftover after parsing attributes in process `syz.2.620'. [ 61.420050][ T5374] netlink: 'syz.2.620': attribute type 1 has an invalid length. [ 61.427925][ T5374] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.620'. [ 61.559924][ T4887] Bluetooth: hci0: Frame reassembly failed (-84) [ 62.169785][ T5402] gretap1: entered promiscuous mode [ 62.191583][ T5404] netlink: 'syz.1.632': attribute type 1 has an invalid length. [ 62.210959][ T5404] bond1: entered promiscuous mode [ 62.222246][ T5404] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.239503][ T5404] bond1: (slave ip6gre1): refused to change device type [ 62.339517][ T5425] netlink: 84 bytes leftover after parsing attributes in process `syz.3.636'. [ 62.915686][ T5503] loop2: detected capacity change from 0 to 512 [ 62.932557][ T5503] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 62.946917][ T5503] EXT4-fs (loop2): group descriptors corrupted! [ 63.137057][ T5522] mmap: syz.1.668 (5522) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 63.147710][ T5521] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 63.203338][ T5524] Need at least one configuration in g1. [ 63.209059][ T5524] udc usbip-vudc.0: failed to start g1: -22 [ 63.215334][ T5524] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 63.228032][ T5524] UDC core: g1: couldn't find an available UDC or it's busy [ 63.572890][ T3805] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 63.574320][ T5395] Bluetooth: hci0: command 0x1003 tx timeout [ 63.644805][ T5530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.675'. [ 63.875735][ T5543] loop0: detected capacity change from 0 to 764 [ 63.911170][ T5543] rock: corrupted directory entry. extent=32, offset=0, size=83886085 [ 63.929195][ T5532] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.941330][ T5532] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.948845][ T5532] bridge_slave_0: entered allmulticast mode [ 63.951371][ T5543] netlink: 28 bytes leftover after parsing attributes in process `syz.0.677'. [ 63.955613][ T5532] bridge_slave_0: entered promiscuous mode [ 63.971101][ T5532] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.978486][ T5532] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.985886][ T5532] bridge_slave_1: entered allmulticast mode [ 63.992451][ T5532] bridge_slave_1: entered promiscuous mode [ 64.010964][ T5532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.021479][ T5532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.045449][ T5532] team0: Port device team_slave_0 added [ 64.051981][ T5532] team0: Port device team_slave_1 added [ 64.078983][ T5562] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 2, id = 0 [ 64.096746][ T5532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.104761][ T5532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.130899][ T5532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.155363][ T5532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.163173][ T5532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.189263][ T5532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.197149][ T5570] netlink: 'syz.4.686': attribute type 1 has an invalid length. [ 64.224953][ T5570] bond2: entered promiscuous mode [ 64.234260][ T5570] 8021q: adding VLAN 0 to HW filter on device bond2 [ 64.253938][ T5570] bond2: (slave ip6gre1): refused to change device type [ 64.268277][ T5532] hsr_slave_0: entered promiscuous mode [ 64.274512][ T5532] hsr_slave_1: entered promiscuous mode [ 64.280617][ T5532] debugfs: 'hsr0' already exists in 'hsr' [ 64.286874][ T5532] Cannot create hsr debugfs directory [ 64.343640][ T5580] loop2: detected capacity change from 0 to 128 [ 64.358173][ T5580] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 64.377726][ T5580] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 64.447152][ T4877] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 64.463261][ T5580] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 64.504394][ T5532] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 64.519924][ T5532] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 64.527922][ T5532] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 64.541158][ T5532] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 64.554172][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 64.554186][ T28] audit: type=1400 audit(1786149433.134:1004): avc: denied { write } for pid=5584 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.598509][ T5532] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 64.613222][ T5532] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 64.628331][ T5532] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 64.638114][ T28] audit: type=1400 audit(1786149433.144:1005): avc: denied { write } for pid=5606 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.673603][ T5532] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 64.737387][ T5532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.776225][ T5532] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.795882][ T360] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.803049][ T360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.811740][ T5602] netlink: 28 bytes leftover after parsing attributes in process `syz.4.692'. [ 64.853133][ T360] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.860249][ T360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.920052][ T28] audit: type=1400 audit(1786149433.494:1006): avc: denied { write } for pid=5621 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.990084][ T28] audit: type=1400 audit(1786149433.544:1007): avc: denied { write } for pid=5642 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.093328][ T5532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.263408][ T28] audit: type=1400 audit(1786149433.834:1008): avc: denied { write } for pid=5687 comm="syz.0.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 65.310447][ T5532] veth0_vlan: entered promiscuous mode [ 65.320362][ T28] audit: type=1400 audit(1786149433.864:1009): avc: denied { bind } for pid=5687 comm="syz.0.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 65.341105][ T5532] veth1_vlan: entered promiscuous mode [ 65.374440][ T5532] veth0_macvtap: entered promiscuous mode [ 65.381457][ T5532] veth1_macvtap: entered promiscuous mode [ 65.387515][ T28] audit: type=1400 audit(1786149433.864:1010): avc: denied { listen } for pid=5687 comm="syz.0.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 65.413734][ T5532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.423198][ T5532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.430743][ T28] audit: type=1400 audit(1786149433.874:1011): avc: denied { connect } for pid=5687 comm="syz.0.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 65.472871][ T4883] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.477902][ T28] audit: type=1400 audit(1786149434.054:1012): avc: denied { mounton } for pid=5532 comm="syz-executor" path="/root/syzkaller.6VStF5/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=15114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 65.481871][ T4883] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.513026][ T28] audit: type=1400 audit(1786149434.094:1013): avc: denied { mounton } for pid=5532 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 65.543992][ T360] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.552762][ T360] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.200426][ T5761] netlink: 8 bytes leftover after parsing attributes in process `syz.4.745'. [ 66.433907][ T5762] loop0: detected capacity change from 0 to 2048 [ 66.675258][ T5762] loop0: p1 < > p3 [ 66.696335][ T5762] loop0: p3 size 134217728 extends beyond EOD, truncated [ 66.848120][ T5782] netlink: 8 bytes leftover after parsing attributes in process `syz.5.741'. [ 66.886207][ T5789] netlink: 'syz.4.746': attribute type 1 has an invalid length. [ 66.900823][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.927834][ T5789] bond0: (slave geneve2): making interface the new active one [ 66.937183][ T5789] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 66.955970][ T5789] syz.4.746 (5789) used greatest stack depth: 9344 bytes left [ 67.079876][ T5805] syz_tun: entered promiscuous mode [ 67.288028][ T5806] loop5: detected capacity change from 0 to 2048 [ 67.344457][ T5806] loop5: p1 < > p3 [ 67.352784][ T5806] loop5: p3 size 134217728 extends beyond EOD, truncated [ 67.590393][ T5815] netlink: 12 bytes leftover after parsing attributes in process `syz.4.757'. [ 68.026382][ T5831] loop5: detected capacity change from 0 to 2048 [ 68.084126][ T5831] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.108019][ T5831] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 68.123980][ T5831] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 68.137380][ T5831] EXT4-fs (loop5): This should not happen!! Data will be lost [ 68.137380][ T5831] [ 68.147902][ T5831] EXT4-fs (loop5): Total free blocks count 0 [ 68.155850][ T5831] EXT4-fs (loop5): Free/Dirty block details [ 68.162192][ T5831] EXT4-fs (loop5): free_blocks=2415919504 [ 68.168444][ T5831] EXT4-fs (loop5): dirty_blocks=16 [ 68.174083][ T5831] EXT4-fs (loop5): Block reservation details [ 68.180609][ T5831] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 68.196893][ T5831] syz.5.764 (5831) used greatest stack depth: 9152 bytes left [ 68.204938][ T360] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 68.219193][ T5532] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 68.481574][ T5865] netlink: 28 bytes leftover after parsing attributes in process `syz.5.776'. [ 68.507038][ T5865] netlink: 28 bytes leftover after parsing attributes in process `syz.5.776'. [ 68.528430][ T5865] netlink: 28 bytes leftover after parsing attributes in process `syz.5.776'. [ 68.670485][ T5881] netlink: 127592 bytes leftover after parsing attributes in process `syz.5.783'. [ 69.647535][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 69.647550][ T28] audit: type=1400 audit(1786149438.224:1034): avc: denied { create } for pid=5967 comm="syz.2.818" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 69.696668][ T28] audit: type=1400 audit(1786149438.274:1035): avc: denied { unlink } for pid=3298 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=813 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 69.712740][ T5970] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 69.741008][ T28] audit: type=1400 audit(1786149438.284:1036): avc: denied { create } for pid=5969 comm="syz.2.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 69.770372][ T5970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.145450][ T28] audit: type=1400 audit(1786149438.724:1037): avc: denied { read write } for pid=5995 comm="syz.5.830" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 70.168689][ T28] audit: type=1400 audit(1786149438.724:1038): avc: denied { open } for pid=5995 comm="syz.5.830" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 70.196362][ T28] audit: type=1400 audit(1786149438.724:1039): avc: denied { ioctl } for pid=5995 comm="syz.5.830" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 70.684417][ T6021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.838'. [ 70.693914][ T6021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.838'. [ 70.853879][ T28] audit: type=1400 audit(1786149439.434:1040): avc: denied { read write } for pid=6009 comm="syz.0.834" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 70.877385][ T28] audit: type=1400 audit(1786149439.434:1041): avc: denied { open } for pid=6009 comm="syz.0.834" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 70.900891][ T28] audit: type=1400 audit(1786149439.434:1042): avc: denied { ioctl } for pid=6009 comm="syz.0.834" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 71.091573][ T6032] 8021q: adding VLAN 0 to HW filter on device bond1 [ 71.099846][ T6032] team0: Failed to send port change of device bond1 via netlink (err -105) [ 71.108826][ T6032] team0: Failed to send options change via netlink (err -105) [ 71.116871][ T6032] team0: Port device bond1 added [ 71.122413][ T4877] team0: Failed to send port change of device bond1 via netlink (err -105) [ 71.302439][ T28] audit: type=1326 audit(1786149439.874:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6048 comm="syz.4.851" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d6c0e0d9 code=0x7ffc0000 [ 71.612230][ T4877] Bluetooth: hci0: Frame reassembly failed (-84) [ 71.655056][ T6072] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.861'. [ 71.698852][ T6076] netlink: 168 bytes leftover after parsing attributes in process `syz.1.862'. [ 71.748327][ T6086] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=6086 comm=syz.2.863 [ 71.963714][ T6102] netlink: 127592 bytes leftover after parsing attributes in process `syz.1.872'. [ 72.576561][ T6111] loop0: detected capacity change from 0 to 512 [ 72.614609][ T6111] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 72.642405][ T6111] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.876: bad orphan inode 3855 [ 72.675172][ T6111] loop0: lost filesystem error report for type 5 error -117 [ 72.675721][ T6111] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.845186][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.115448][ T6150] VFS: Mount too revealing [ 73.161902][ T6099] Set syz1 is full, maxelem 65536 reached [ 73.230976][ T6175] netlink: 172 bytes leftover after parsing attributes in process `syz.0.897'. [ 73.419885][ T6187] loop0: detected capacity change from 0 to 512 [ 73.445510][ T6187] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.902: bg 0: block 393: padding at end of block bitmap is not set [ 73.460110][ T6187] loop0: lost filesystem error report for type 5 error -117 [ 73.460550][ T6187] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 73.468100][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 73.468178][ C1] EXT4-fs (loop0): initial error at time 1786149442: ext4_validate_block_bitmap:441 [ 73.468260][ C1] EXT4-fs (loop0): last error at time 1786149442: ext4_validate_block_bitmap:441 [ 73.503705][ T6187] loop0: lost filesystem error report for type 5 error -117 [ 73.505073][ T6187] EXT4-fs (loop0): 2 truncates cleaned up [ 73.521120][ T6187] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.556599][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.652863][ T5395] Bluetooth: hci0: command 0x1003 tx timeout [ 73.655759][ T3805] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 73.807926][ T6225] syz_tun: entered allmulticast mode [ 73.814913][ T6225] syz_tun: left allmulticast mode [ 73.834322][ T6228] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.918'. [ 74.093719][ T6238] tipc: Failed to remove unknown binding: 66,0,0/0:1289169779/1289169781 [ 74.104373][ T6238] tipc: Failed to remove unknown binding: 66,0,0/0:1289169779/1289169780 [ 74.251113][ T6249] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.264588][ T6249] team0: Failed to send port change of device bond1 via netlink (err -105) [ 74.273923][ T6249] team0: Failed to send options change via netlink (err -105) [ 74.279176][ T6252] VFS: Mount too revealing [ 74.281481][ T6249] team0: Port device bond1 added [ 74.294652][ T4887] team0: Failed to send port change of device bond1 via netlink (err -105) [ 74.687133][ T28] kauditd_printk_skb: 92 callbacks suppressed [ 74.687232][ T28] audit: type=1400 audit(1786149443.264:1136): avc: denied { mount } for pid=6284 comm="syz.4.953" name="/" dev="rpc_pipefs" ino=16209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 74.791738][ T6292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.799789][ T6292] team0: Failed to send port change of device bond0 via netlink (err -105) [ 74.808823][ T6292] team0: Failed to send options change via netlink (err -105) [ 74.816558][ T6292] team0: Port device bond0 added [ 74.905048][ T6304] macsec1: entered promiscuous mode [ 74.949702][ T6310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.958467][ T6310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.096652][ T6319] netlink: 'syz.5.958': attribute type 1 has an invalid length. [ 75.110781][ T6319] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.130635][ T6319] bond1: (slave geneve2): making interface the new active one [ 75.139901][ T6319] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 75.277409][ T6326] loop5: detected capacity change from 0 to 512 [ 75.290798][ T6326] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 75.311975][ T6326] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #17: comm syz.5.961: corrupted in-inode xattr: invalid ea_ino [ 75.327204][ T6326] loop5: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 75.327455][ T6326] EXT4-fs (loop5): Remounting filesystem read-only [ 75.336664][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 75.336679][ C1] EXT4-fs (loop5): initial error at time 1786149443: ext4_iget_extra_inode:5180: inode 17 [ 75.336703][ C1] EXT4-fs (loop5): last error at time 1786149443: ext4_iget_extra_inode:5180: inode 17 [ 75.370364][ T6326] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.397640][ T5532] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.472106][ T6336] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 75.619125][ T28] audit: type=1400 audit(1786149444.194:1137): avc: denied { write } for pid=6338 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.664899][ T28] audit: type=1400 audit(1786149444.234:1138): avc: denied { write } for pid=6355 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.825429][ T6360] loop5: detected capacity change from 0 to 512 [ 75.867131][ T6360] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.978: bg 0: block 393: padding at end of block bitmap is not set [ 75.903143][ T6360] loop5: lost filesystem error report for type 5 error -117 [ 75.903926][ T6360] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 75.920255][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 75.920336][ C0] EXT4-fs (loop5): initial error at time 1786149444: ext4_validate_block_bitmap:441 [ 75.920405][ C0] EXT4-fs (loop5): last error at time 1786149444: ext4_validate_block_bitmap:441 [ 75.972928][ T6360] loop5: lost filesystem error report for type 5 error -117 [ 75.975346][ T6360] EXT4-fs (loop5): 2 truncates cleaned up [ 75.993301][ T6360] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.017308][ T28] audit: type=1400 audit(1786149444.594:1139): avc: denied { write } for pid=6358 comm="syz.5.978" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 76.054958][ T5532] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.246179][ T6384] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 76.259523][ T6385] syzkaller0: entered promiscuous mode [ 76.266390][ T6385] syzkaller0: entered allmulticast mode [ 76.373688][ T6393] netlink: 24 bytes leftover after parsing attributes in process `syz.5.991'. [ 77.173970][ T6401] : renamed from vlan0 [ 77.434701][ T6443] netlink: 'syz.0.1004': attribute type 13 has an invalid length. [ 77.571157][ T28] audit: type=1400 audit(1786149446.144:1140): avc: denied { unmount } for pid=5532 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 77.942782][ T6485] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1033'. [ 78.048129][ T6494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1028'. [ 78.067671][ T4877] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.076675][ T4877] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.085772][ T6494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1028'. [ 78.094915][ T4877] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.122884][ T360] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.322547][ T28] audit: type=1400 audit(1786149446.894:1141): avc: denied { create } for pid=6527 comm="syz.5.1041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 78.384388][ T28] audit: type=1400 audit(1786149446.924:1142): avc: denied { bind } for pid=6527 comm="syz.5.1041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 78.499208][ T6539] syzkaller0: Caught tx_queue_len zero misconfig [ 78.529194][ T6539] sch_tbf: burst 2048 is lower than device syzkaller0 mtu (65589) ! [ 78.571648][ T6528] loop5: detected capacity change from 0 to 512 [ 78.582925][ T28] audit: type=1326 audit(1786149447.154:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6545 comm="syz.0.1051" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aa508e0d9 code=0x7ffc0000 [ 78.610994][ T6528] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 78.630197][ T28] audit: type=1326 audit(1786149447.154:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6545 comm="syz.0.1051" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aa508e0d9 code=0x7ffc0000 [ 78.649138][ T6528] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 78.656026][ T28] audit: type=1326 audit(1786149447.194:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6542 comm="syz.1.1049" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fb560087e57 code=0x0 [ 78.670337][ T6528] EXT4-fs (loop5): 1 truncate cleaned up [ 78.704525][ T6528] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.771346][ T5532] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.813114][ T1040] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 78.825279][ T1040] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 78.844146][ T1040] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 78.952194][ T6565] fido_id[6565]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 79.353546][ T6587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1063'. [ 79.376118][ T6587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1063'. [ 79.745643][ T6633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1082'. [ 79.761895][ T6633] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1082'. [ 79.868275][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 79.868289][ T28] audit: type=1400 audit(1786149448.444:1174): avc: denied { getopt } for pid=6637 comm="syz.4.1084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 80.189104][ T28] audit: type=1400 audit(1786149448.764:1175): avc: denied { setopt } for pid=6648 comm="syz.5.1099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 80.210888][ T4887] Bluetooth: hci0: Frame reassembly failed (-84) [ 80.227478][ T28] audit: type=1400 audit(1786149448.804:1176): avc: denied { ioctl } for pid=6648 comm="syz.5.1099" path="socket:[17880]" dev="sockfs" ino=17880 ioctlcmd=0x48e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 80.799671][ T6642] Set syz1 is full, maxelem 65536 reached [ 80.951153][ T6666] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1094'. [ 80.971600][ T6666] syzkaller1: entered promiscuous mode [ 80.981562][ T6666] syzkaller1: entered allmulticast mode [ 81.209609][ T6657] Set syz1 is full, maxelem 65536 reached [ 81.261762][ T28] audit: type=1400 audit(1786149449.834:1177): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 81.343805][ T6687] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1104'. [ 81.717960][ T28] audit: type=1400 audit(1786149450.294:1178): avc: denied { create } for pid=6716 comm="syz.0.1116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 81.745523][ T28] audit: type=1400 audit(1786149450.294:1179): avc: denied { setopt } for pid=6716 comm="syz.0.1116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 81.785391][ T28] audit: type=1400 audit(1786149450.294:1180): avc: denied { bind } for pid=6716 comm="syz.0.1116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 81.822610][ T28] audit: type=1400 audit(1786149450.394:1181): avc: denied { tracepoint } for pid=6721 comm="syz.0.1117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 81.845002][ T28] audit: type=1400 audit(1786149450.424:1182): avc: denied { ioctl } for pid=6721 comm="syz.0.1117" path="socket:[18600]" dev="sockfs" ino=18600 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 82.004347][ T6746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1123'. [ 82.160974][ T28] audit: type=1400 audit(1786149450.734:1183): avc: denied { cmd } for pid=6766 comm="syz.4.1140" path="socket:[18075]" dev="sockfs" ino=18075 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 82.213334][ T5395] Bluetooth: hci0: command 0x1003 tx timeout [ 82.213423][ T3805] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 82.331139][ T6787] loop5: detected capacity change from 0 to 8192 [ 82.673327][ T6825] loop5: detected capacity change from 0 to 512 [ 82.698036][ T6825] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 82.731609][ T6825] EXT4-fs (loop5): 1 truncate cleaned up [ 82.740825][ T6825] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.795613][ T5532] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.912648][ T6839] xt_CT: You must specify a L4 protocol and not use inversions on it [ 83.148555][ T4887] Bluetooth: hci0: Frame reassembly failed (-84) [ 83.307737][ T4887] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.367472][ T4887] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.405349][ T4887] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.466099][ T4887] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.530986][ T4887] bridge_slave_1: left allmulticast mode [ 83.536748][ T4887] bridge_slave_1: left promiscuous mode [ 83.542382][ T4887] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.550181][ T4887] bridge_slave_0: left allmulticast mode [ 83.556006][ T4887] bridge_slave_0: left promiscuous mode [ 83.561676][ T4887] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.601877][ T4887] bond1 (unregistering): (slave geneve2): Releasing active interface [ 83.618284][ T4887] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.628633][ T4887] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.638086][ T4887] bond0 (unregistering): Released all slaves [ 83.647376][ T4887] bond1 (unregistering): Released all slaves [ 83.688465][ T4887] hsr_slave_0: left promiscuous mode [ 83.694195][ T4887] hsr_slave_1: left promiscuous mode [ 83.699887][ T4887] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.707509][ T4887] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.715680][ T4887] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.723230][ T4887] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.734243][ T4887] veth1_macvtap: left promiscuous mode [ 83.739749][ T4887] veth0_macvtap: left promiscuous mode [ 83.745570][ T4887] veth1_vlan: left promiscuous mode [ 83.750814][ T4887] veth0_vlan: left promiscuous mode [ 83.806353][ T4887] team0 (unregistering): Port device team_slave_1 removed [ 83.816084][ T4887] team0 (unregistering): Port device team_slave_0 removed [ 83.845368][ T3019] 8021q: adding VLAN 0 to HW filter on device eth1 [ 83.929897][ T3019] 8021q: adding VLAN 0 to HW filter on device eth2 [ 84.016396][ T3019] 8021q: adding VLAN 0 to HW filter on device eth3 [ 84.101067][ T3019] 8021q: adding VLAN 0 to HW filter on device eth4 [ 85.172882][ T3805] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 85.172907][ T5395] Bluetooth: hci0: command 0x1003 tx timeout [ 85.219885][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 85.219898][ T28] audit: type=1400 audit(1786149453.794:1196): avc: denied { connect } for pid=6916 comm="syz.4.1168" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 85.273341][ T28] audit: type=1400 audit(1786149453.824:1197): avc: denied { write } for pid=6916 comm="syz.4.1168" laddr=fe80::34e7:dbff:fef2:e363 lport=58 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 85.493642][ T6924] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.500816][ T6924] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.508363][ T6924] bridge_slave_0: entered allmulticast mode [ 85.515662][ T6924] bridge_slave_0: entered promiscuous mode [ 85.522761][ T6924] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.530035][ T6924] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.538194][ T6924] bridge_slave_1: entered allmulticast mode [ 85.544901][ T6924] bridge_slave_1: entered promiscuous mode [ 85.563063][ T6924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.573700][ T6924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.594831][ T6924] team0: Port device team_slave_0 added [ 85.601363][ T6924] team0: Port device team_slave_1 added [ 85.616497][ T6924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.623452][ T6924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.649685][ T6924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.660810][ T6924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.668103][ T6924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.694136][ T6924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.717970][ T6924] hsr_slave_0: entered promiscuous mode [ 85.723984][ T6924] hsr_slave_1: entered promiscuous mode [ 85.729837][ T6924] debugfs: 'hsr0' already exists in 'hsr' [ 85.735577][ T6924] Cannot create hsr debugfs directory [ 85.824033][ T28] audit: type=1400 audit(1786149454.404:1198): avc: denied { write } for pid=6950 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.847145][ T28] audit: type=1400 audit(1786149454.404:1199): avc: denied { write } for pid=6961 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.899683][ T28] audit: type=1400 audit(1786149454.474:1200): avc: denied { write } for pid=6963 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.922840][ T28] audit: type=1400 audit(1786149454.494:1201): avc: denied { write } for pid=6974 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.979044][ T28] audit: type=1400 audit(1786149454.554:1202): avc: denied { write } for pid=6976 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.015438][ T28] audit: type=1400 audit(1786149454.594:1203): avc: denied { write } for pid=6987 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.049532][ T6924] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 86.067804][ T6924] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.083058][ T6924] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 86.102165][ T6924] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.121038][ T6924] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 86.122946][ T6999] __nla_validate_parse: 3 callbacks suppressed [ 86.122958][ T6999] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1174'. [ 86.149548][ T6924] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.171369][ T6924] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 86.176944][ T6999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1174'. [ 86.189796][ T6999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1174'. [ 86.193294][ T6924] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.289966][ T6924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.295379][ T28] audit: type=1400 audit(1786149454.864:1204): avc: denied { write } for pid=7000 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.313367][ T6924] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.344778][ T7027] loop0: detected capacity change from 0 to 128 [ 86.373146][ T4877] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.380247][ T4877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.396835][ T28] audit: type=1400 audit(1786149454.964:1205): avc: denied { write } for pid=7031 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.429465][ T4877] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.436569][ T4877] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.732604][ T6924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.020819][ T6924] veth0_vlan: entered promiscuous mode [ 87.047175][ T6924] veth1_vlan: entered promiscuous mode [ 87.082556][ T6924] veth0_macvtap: entered promiscuous mode [ 87.132555][ T6924] veth1_macvtap: entered promiscuous mode [ 87.190180][ T6924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.219329][ T6924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.283324][ T2439] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.315039][ T2439] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.343158][ T4883] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.372429][ T4883] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.496261][ T7233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1196'. [ 87.544735][ T7233] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1196'. [ 88.551337][ T11] IPVS: starting estimator thread 0... [ 88.560239][ T7265] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 88.642932][ T7266] IPVS: using max 2352 ests per chain, 117600 per kthread [ 90.367018][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 90.367030][ T28] audit: type=1400 audit(1786149458.944:1218): avc: denied { watch watch_reads } for pid=7281 comm="syz.2.1211" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 90.578045][ T28] audit: type=1400 audit(1786149459.154:1219): avc: denied { setopt } for pid=7301 comm="syz.0.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 90.643942][ T28] audit: type=1400 audit(1786149459.214:1220): avc: denied { ioctl } for pid=7311 comm="syz.0.1221" path="socket:[19836]" dev="sockfs" ino=19836 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 90.671214][ T7312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1221'. [ 91.387211][ T28] audit: type=1400 audit(1786149459.964:1221): avc: denied { create } for pid=7339 comm="syz.1.1232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 91.479591][ T7340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1232'. [ 91.531988][ T28] audit: type=1400 audit(1786149460.104:1222): avc: denied { create } for pid=7339 comm="syz.1.1232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 91.750544][ T7366] batman_adv: batadv0: Adding interface: dummy0 [ 91.756936][ T7366] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.791265][ T7366] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 91.822794][ T7366] netlink: 'syz.1.1242': attribute type 10 has an invalid length. [ 91.834994][ T7373] netlink: 'syz.0.1243': attribute type 29 has an invalid length. [ 91.845316][ T7366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.862616][ T7366] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 92.060145][ T7381] batman_adv: batadv0: Interface deactivated: gretap1 [ 92.074085][ T7376] SELinux: security_context_str_to_sid ('|k΀|L. ) failed with errno=-22 [ 92.083457][ T2439] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 92.095332][ T2439] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 92.106800][ T2439] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 92.125354][ T2439] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 92.256882][ T28] audit: type=1400 audit(1786149460.834:1223): avc: denied { audit_read } for pid=7396 comm="syz.0.1253" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 92.500444][ T28] audit: type=1400 audit(1786149461.074:1224): avc: denied { name_bind } for pid=7409 comm="syz.0.1259" src=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 92.530103][ T7411] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1257'. [ 92.600142][ T7424] netlink: 'syz.2.1264': attribute type 1 has an invalid length. [ 92.623493][ T7424] 8021q: adding VLAN 0 to HW filter on device bond2 [ 92.723907][ T7424] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 92.737225][ T7435] bond2: (slave dummy0): Enslaving as a backup interface with an up link [ 92.749990][ T68] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 92.784040][ T7424] netlink: 'syz.2.1264': attribute type 10 has an invalid length. [ 92.798138][ T7437] netlink: 3084 bytes leftover after parsing attributes in process `syz.1.1269'. [ 92.810625][ T7424] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1264'. [ 92.822942][ T7437] netlink: 'syz.1.1269': attribute type 1 has an invalid length. [ 92.832792][ T7424] dummy0: entered promiscuous mode [ 92.833069][ T7437] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1269'. [ 92.848757][ T7424] bond2: (slave dummy0): Removing an active aggregator [ 92.865206][ T7424] bond2: (slave dummy0): Releasing backup interface [ 92.897517][ T7441] netlink: 'syz.1.1271': attribute type 1 has an invalid length. [ 92.945961][ T7441] 8021q: adding VLAN 0 to HW filter on device bond2 [ 92.964125][ T7441] bond1: (slave bond2): making interface the new active one [ 92.979143][ T7441] bond1: (slave bond2): Enslaving as an active interface with an up link [ 92.988211][ T7450] lo speed is unknown, defaulting to 1000 [ 93.009039][ T7452] bond1: (slave gretap2): Enslaving as a backup interface with an up link [ 93.022999][ T7450] lo speed is unknown, defaulting to 1000 [ 93.041678][ T7450] lo speed is unknown, defaulting to 1000 [ 93.057861][ T7441] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1271'. [ 93.070354][ T7441] 8021q: adding VLAN 0 to HW filter on device bond1 [ 93.160919][ T7450] infiniband syz0: set active [ 93.165657][ T3397] lo speed is unknown, defaulting to 1000 [ 93.182957][ T7450] infiniband syz0: added lo [ 93.207203][ T7450] RDS/IB: syz0: added [ 93.212617][ T7450] smc: adding ib device syz0 with port count 1 [ 93.222472][ T7450] smc: ib device syz0 port 1 has no pnetid [ 93.240304][ T7450] lo speed is unknown, defaulting to 1000 [ 93.254867][ T3390] lo speed is unknown, defaulting to 1000 [ 93.358461][ T7450] lo speed is unknown, defaulting to 1000 [ 93.445750][ T7450] lo speed is unknown, defaulting to 1000 [ 93.518968][ T7450] lo speed is unknown, defaulting to 1000 [ 93.569096][ T7471] netlink: 'syz.2.1282': attribute type 1 has an invalid length. [ 93.611561][ T7471] 8021q: adding VLAN 0 to HW filter on device bond3 [ 93.632540][ T7473] bond3: (slave gretap2): making interface the new active one [ 93.641180][ T7473] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 93.650580][ T7450] lo speed is unknown, defaulting to 1000 [ 93.673321][ T7471] dummy0: left promiscuous mode [ 93.680158][ T7471] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 93.694976][ T7471] netlink: 'syz.2.1282': attribute type 10 has an invalid length. [ 93.704187][ T7471] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1282'. [ 93.714152][ T7471] dummy0: entered promiscuous mode [ 93.720637][ T7471] bond3: (slave dummy0): Releasing active interface [ 93.730157][ T7450] lo speed is unknown, defaulting to 1000 [ 93.819667][ T7450] lo speed is unknown, defaulting to 1000 [ 93.993730][ T7489] netlink: 'syz.4.1288': attribute type 1 has an invalid length. [ 94.017566][ T7489] 8021q: adding VLAN 0 to HW filter on device bond2 [ 94.056914][ T7489] bond2: entered promiscuous mode [ 94.062207][ T7489] bond2: entered allmulticast mode [ 94.082005][ T7489] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1288'. [ 94.093763][ T7489] netlink: 'syz.4.1288': attribute type 1 has an invalid length. [ 94.110232][ T7489] bond2: left promiscuous mode [ 94.119658][ T7489] bond2: left allmulticast mode [ 94.128199][ T7489] 8021q: adding VLAN 0 to HW filter on device bond2 [ 94.281371][ T7508] SELinux: security_context_str_to_sid ('|k΀|L. ) failed with errno=-22 [ 94.413249][ T28] audit: type=1326 audit(1786149462.994:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7521 comm="syz.4.1298" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe8d6c0e0d9 code=0x0 [ 94.736234][ T7531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1311'. [ 94.769386][ T7534] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1301'. [ 94.946840][ T7545] SELinux: security_context_str_to_sid ('|k΀|L. ) failed with errno=-22 [ 95.153499][ T28] audit: type=1326 audit(1786149463.734:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7557 comm="syz.1.1312" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb56008e0d9 code=0x0 [ 95.210360][ T28] audit: type=1400 audit(1786149463.774:1227): avc: denied { write } for pid=7554 comm="syz.0.1310" name="cgroup.subtree_control" dev="cgroup2" ino=215 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 95.536614][ T23] IPVS: starting estimator thread 0... [ 95.553199][ T7580] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 95.624147][ T7581] IPVS: using max 2448 ests per chain, 122400 per kthread [ 95.626966][ T7585] tipc: Failed to remove unknown binding: 66,0,0/0:2274344446/2274344447 [ 95.672723][ T7585] tipc: Failed to remove unknown binding: 66,0,0/0:2274344446/2274344447 [ 95.757950][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 95.757965][ T28] audit: type=1400 audit(1786149464.334:1230): avc: denied { listen } for pid=7590 comm="syz.2.1325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 95.794048][ T28] audit: type=1400 audit(1786149464.334:1231): avc: denied { accept } for pid=7590 comm="syz.2.1325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 96.602347][ T28] audit: type=1400 audit(1786149465.174:1232): avc: denied { read write } for pid=7625 comm="syz.0.1342" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 96.652341][ T28] audit: type=1400 audit(1786149465.174:1233): avc: denied { open } for pid=7625 comm="syz.0.1342" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 96.728809][ T7626] loop0: detected capacity change from 0 to 512 [ 96.761400][ T7626] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1342: bg 0: block 393: padding at end of block bitmap is not set [ 96.776766][ T7626] loop0: lost filesystem error report for type 5 error -117 [ 96.777138][ T7626] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 96.784757][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 96.784786][ C1] EXT4-fs (loop0): initial error at time 1786149465: ext4_validate_block_bitmap:441 [ 96.784858][ C1] EXT4-fs (loop0): last error at time 1786149465: ext4_validate_block_bitmap:441 [ 96.818217][ T7633] __nla_validate_parse: 1 callbacks suppressed [ 96.818240][ T7633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1344'. [ 96.819907][ T7626] loop0: lost filesystem error report for type 5 error -117 [ 96.845913][ T7626] EXT4-fs (loop0): 2 truncates cleaned up [ 96.864200][ T7626] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.960726][ T28] audit: type=1400 audit(1786149465.534:1234): avc: denied { sys_module } for pid=7637 comm="syz.1.1346" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 97.025690][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.225235][ T7650] loop0: detected capacity change from 0 to 512 [ 97.273402][ T7650] usb usb8: usbfs: process 7650 (syz.0.1350) did not claim interface 0 before use [ 97.412672][ T28] audit: type=1400 audit(1786149465.984:1235): avc: denied { getopt } for pid=7660 comm="syz.1.1355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 98.201238][ T28] audit: type=1400 audit(1786149466.774:1236): avc: denied { setopt } for pid=7692 comm="syz.1.1366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 98.241238][ T7695] xt_hashlimit: size too large, truncated to 1048576 [ 98.264940][ T7695] xt_hashlimit: max too large, truncated to 1048576 [ 98.283193][ T7695] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old? [ 99.125776][ T28] audit: type=1400 audit(1786149467.704:1237): avc: denied { getopt } for pid=7707 comm="syz.4.1374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 99.281872][ T7722] tipc: Started in network mode [ 99.291973][ T7722] tipc: Node identity 4, cluster identity 4711 [ 99.307274][ T7722] tipc: Node number set to 4 [ 99.357410][ T28] audit: type=1400 audit(1786149467.934:1238): avc: denied { mounton } for pid=7727 comm="syz.4.1384" path="/file0" dev="ramfs" ino=20460 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 99.602544][ T28] audit: type=1400 audit(1786149468.174:1239): avc: denied { create } for pid=7739 comm="syz.0.1389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 99.842275][ T7759] validate_nla: 1 callbacks suppressed [ 99.842291][ T7759] netlink: 'syz.2.1397': attribute type 1 has an invalid length. [ 99.883487][ T7759] 8021q: adding VLAN 0 to HW filter on device bond4 [ 99.902021][ T7764] bond4: entered promiscuous mode [ 99.912946][ T7764] bond4: entered allmulticast mode [ 99.949650][ T7759] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1397'. [ 99.958812][ T7759] netlink: 'syz.2.1397': attribute type 1 has an invalid length. [ 99.966917][ T7759] bond4: left promiscuous mode [ 99.971858][ T7759] bond4: left allmulticast mode [ 99.977038][ T7759] 8021q: adding VLAN 0 to HW filter on device bond4 [ 100.893994][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 100.894069][ T28] audit: type=1400 audit(1786149469.464:1243): avc: denied { create } for pid=7796 comm="syz.0.1412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 101.013227][ T7809] netlink: 'syz.0.1416': attribute type 1 has an invalid length. [ 101.061591][ T7809] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.140931][ T7809] bond1: (slave ip6gretap1): making interface the new active one [ 101.150065][ T7809] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 101.257981][ T7817] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1418'. [ 101.300642][ T7789] syz.1.1407 (7789) used greatest stack depth: 8832 bytes left [ 102.354488][ T7821] loop0: detected capacity change from 0 to 4096 [ 102.449610][ T7821] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.544850][ T28] audit: type=1400 audit(1786149471.114:1244): avc: denied { write } for pid=7820 comm="syz.0.1419" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 102.625300][ T28] audit: type=1400 audit(1786149471.154:1245): avc: denied { read write } for pid=7820 comm="syz.0.1419" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 102.663466][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.680635][ T28] audit: type=1400 audit(1786149471.164:1246): avc: denied { open } for pid=7820 comm="syz.0.1419" path="/284/file0/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 102.794948][ T7848] loop0: detected capacity change from 0 to 512 [ 102.807393][ T7848] EXT4-fs (loop0): 1 truncate cleaned up [ 102.823823][ T7848] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.875285][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.489355][ T28] audit: type=1400 audit(1786149474.064:1247): avc: denied { create } for pid=7925 comm="syz.1.1454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 105.529027][ T7929] batman_adv: batadv0: Adding interface: veth0 [ 105.542936][ T28] audit: type=1400 audit(1786149474.064:1248): avc: denied { connect } for pid=7925 comm="syz.1.1454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 105.566050][ T7929] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.612950][ T28] audit: type=1400 audit(1786149474.064:1249): avc: denied { write } for pid=7925 comm="syz.1.1454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 105.639846][ T7929] batman_adv: batadv0: Interface activated: veth0 [ 105.647858][ T28] audit: type=1400 audit(1786149474.064:1250): avc: denied { ioctl } for pid=7925 comm="syz.1.1454" path="socket:[21653]" dev="sockfs" ino=21653 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 105.677665][ T7936] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1457'. [ 105.693520][ T7931] bond3: entered allmulticast mode [ 105.707695][ T7934] gre1: entered allmulticast mode [ 105.719020][ T7934] bond3: (slave gre1): The slave device specified does not support setting the MAC address [ 105.743498][ T7934] bond3: (slave gre1): Error -95 calling set_mac_address [ 105.764838][ T7929] batman_adv: batadv0: Interface deactivated: veth0 [ 105.775782][ T7929] batman_adv: batadv0: Removing interface: veth0 [ 105.890806][ T7943] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1462'. [ 106.103813][ T4883] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.144559][ T7948] lo speed is unknown, defaulting to 1000 [ 106.182927][ T4883] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.267807][ T4883] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.326387][ T4883] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.389001][ T7948] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.396219][ T7948] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.403424][ T7948] bridge_slave_0: entered allmulticast mode [ 106.409934][ T7948] bridge_slave_0: entered promiscuous mode [ 106.416686][ T7948] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.423856][ T7948] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.431051][ T7948] bridge_slave_1: entered allmulticast mode [ 106.437781][ T7948] bridge_slave_1: entered promiscuous mode [ 106.489116][ T7948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.511402][ T7948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.565540][ T4883] bridge_slave_1: left allmulticast mode [ 106.571499][ T4883] bridge_slave_1: left promiscuous mode [ 106.577902][ T4883] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.587101][ T4883] bridge_slave_0: left allmulticast mode [ 106.593240][ T4883] bridge_slave_0: left promiscuous mode [ 106.599219][ T4883] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.676925][ T4883] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.687272][ T4883] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.696994][ T4883] bond0 (unregistering): Released all slaves [ 106.711485][ T7948] team0: Port device team_slave_0 added [ 106.746822][ T7948] team0: Port device team_slave_1 added [ 106.869524][ T4883] hsr_slave_0: left promiscuous mode [ 106.880314][ T4883] hsr_slave_1: left promiscuous mode [ 106.886732][ T4883] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.905316][ T4883] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.913383][ T28] audit: type=1400 audit(1786149475.484:1251): avc: denied { write } for pid=7976 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.939556][ T4883] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.952691][ T4883] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.977769][ T4883] veth1_macvtap: left promiscuous mode [ 106.979311][ T28] audit: type=1400 audit(1786149475.554:1252): avc: denied { write } for pid=7992 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.986750][ T4883] veth0_macvtap: left promiscuous mode [ 107.062735][ T4883] veth1_vlan: left promiscuous mode [ 107.068972][ T4883] veth0_vlan: left promiscuous mode [ 107.160890][ T7998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1470'. [ 107.235358][ T4883] team0 (unregistering): Port device team_slave_1 removed [ 107.245198][ T4883] team0 (unregistering): Port device team_slave_0 removed [ 107.281254][ T7948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.289005][ T7948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.317796][ T7948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.330070][ T3019] 8021q: adding VLAN 0 to HW filter on device eth1 [ 107.342210][ T7948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.369273][ T7948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.410328][ T7948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.482055][ T7948] hsr_slave_0: entered promiscuous mode [ 107.489235][ T7948] hsr_slave_1: entered promiscuous mode [ 107.498416][ T7948] debugfs: 'hsr0' already exists in 'hsr' [ 107.506366][ T7948] Cannot create hsr debugfs directory [ 107.662677][ T28] audit: type=1400 audit(1786149476.234:1253): avc: denied { write } for pid=8017 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.702881][ T3019] 8021q: adding VLAN 0 to HW filter on device eth2 [ 107.706403][ T28] audit: type=1400 audit(1786149476.244:1254): avc: denied { write } for pid=8032 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.759189][ T7948] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 107.796158][ T7948] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 107.809214][ T7948] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 107.824124][ T28] audit: type=1400 audit(1786149476.404:1255): avc: denied { write } for pid=8036 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.854976][ T28] audit: type=1400 audit(1786149476.404:1256): avc: denied { write } for pid=8047 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.879604][ T7948] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 107.887898][ T7948] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 107.897837][ T7948] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 107.907117][ T3019] 8021q: adding VLAN 0 to HW filter on device eth3 [ 107.916520][ T7948] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 107.925916][ T7948] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 108.008296][ T7948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.028707][ T7948] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.044958][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.052434][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.071300][ T4883] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.078847][ T4883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.120193][ T28] audit: type=1400 audit(1786149476.694:1257): avc: denied { write } for pid=8056 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.160098][ T8071] netlink: 'syz.2.1480': attribute type 1 has an invalid length. [ 108.190894][ T28] audit: type=1400 audit(1786149476.764:1258): avc: denied { write } for pid=8069 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.199760][ T8071] 8021q: adding VLAN 0 to HW filter on device bond5 [ 108.256291][ T3019] 8021q: adding VLAN 0 to HW filter on device eth4 [ 108.291259][ T8079] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 108.301380][ T8071] bond5: (slave ip6gretap1): making interface the new active one [ 108.309646][ T8071] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 108.340740][ T28] audit: type=1400 audit(1786149476.864:1259): avc: denied { load_policy } for pid=8077 comm="syz.0.1481" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 108.381574][ T8079] SELinux: failed to load policy [ 108.384452][ T8095] cgroup: Unknown subsys name 'cpuset' [ 108.441706][ T7948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.652207][ T7948] veth0_vlan: entered promiscuous mode [ 108.665199][ T7948] veth1_vlan: entered promiscuous mode [ 108.695899][ T7948] veth0_macvtap: entered promiscuous mode [ 108.710119][ T7948] veth1_macvtap: entered promiscuous mode [ 108.727915][ T7948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.742654][ T7948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.773701][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.788712][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.832958][ T4883] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.851351][ T8139] loop6: detected capacity change from 0 to 1764 [ 108.863039][ T68] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.178216][ T8148] lo speed is unknown, defaulting to 1000 [ 109.383669][ T8154] tmpfs: Bad value for 'mpol' [ 109.442980][ T8157] loop6: detected capacity change from 0 to 2048 [ 109.453988][ T8159] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1501'. [ 109.473864][ T8159] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1501'. [ 109.486948][ T8157] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.739654][ T7948] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.851199][ T28] audit: type=1400 audit(1786149479.424:1260): avc: denied { bind } for pid=8207 comm="syz.4.1520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 111.066355][ T35] lo speed is unknown, defaulting to 1000 [ 111.072197][ T35] syz0: Port: 1 Link DOWN [ 111.077737][ T35] lo speed is unknown, defaulting to 1000 [ 111.078294][ T68] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.123798][ T68] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.150130][ T68] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.177967][ T68] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.507790][ T8224] ================================================================== [ 111.515899][ T8224] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 111.522845][ T8224] [ 111.525169][ T8224] read-write to 0xffff88813adf0364 of 4 bytes by task 8223 on cpu 1: [ 111.533235][ T8224] fifo_open+0x89/0x5b0 [ 111.537399][ T8224] do_dentry_open+0x49f/0xa60 [ 111.542080][ T8224] vfs_open+0x37/0x1e0 [ 111.546169][ T8224] path_openat+0x1b39/0x2000 [ 111.550769][ T8224] do_file_open+0x16c/0x290 [ 111.555283][ T8224] do_sys_openat2+0xa0/0x130 [ 111.559882][ T8224] __x64_sys_creat+0x65/0x90 [ 111.564467][ T8224] x64_sys_call+0x2ea0/0x3020 [ 111.569135][ T8224] do_syscall_64+0x136/0x3c0 [ 111.573720][ T8224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.579625][ T8224] [ 111.581933][ T8224] read to 0xffff88813adf0364 of 4 bytes by task 8224 on cpu 0: [ 111.589457][ T8224] wait_for_partner+0xc9/0x1d0 [ 111.594216][ T8224] fifo_open+0x491/0x5b0 [ 111.598445][ T8224] do_dentry_open+0x49f/0xa60 [ 111.603144][ T8224] vfs_open+0x37/0x1e0 [ 111.607207][ T8224] path_openat+0x1b39/0x2000 [ 111.611788][ T8224] do_file_open+0x16c/0x290 [ 111.616284][ T8224] file_open_name+0xfa/0x120 [ 111.620888][ T8224] __se_sys_acct+0x8c/0x500 [ 111.625382][ T8224] __x64_sys_acct+0x1f/0x30 [ 111.629870][ T8224] x64_sys_call+0x2e7f/0x3020 [ 111.634533][ T8224] do_syscall_64+0x136/0x3c0 [ 111.639114][ T8224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.645086][ T8224] [ 111.647392][ T8224] value changed: 0x00000001 -> 0x00000002 [ 111.653115][ T8224] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 111.655423][ T8224] Reported by Kernel Concurrency Sanitizer on: [ 111.661576][ T8224] CPU: 0 UID: 0 PID: 8224 Comm: syz.4.1525 Not tainted syzkaller #0 PREEMPT(lazy) [ 111.670843][ T8224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 111.680884][ T8224] ================================================================== [ 112.319458][ T68] bond5 (unregistering): (slave ip6gretap1): Releasing active interface [ 112.339433][ T68] batman_adv: batadv0: Removing interface: gretap1 [ 112.347668][ T68] bond3 (unregistering): (slave gretap2): Releasing active interface [ 112.364950][ T68] bond0 (unregistering): Released all slaves [ 112.374336][ T68] team0: Port device bond1 removed [ 112.379938][ T68] bond1 (unregistering): Released all slaves [ 112.388879][ T68] bond2 (unregistering): (slave veth5): Releasing backup interface [ 112.397313][ T68] bond2 (unregistering): Released all slaves [ 112.405803][ T68] bond3 (unregistering): Released all slaves [ 112.414618][ T68] bond4 (unregistering): Released all slaves [ 112.425718][ T68] bond5 (unregistering): Released all slaves [ 112.508361][ T68] hsr_slave_0: left promiscuous mode [ 112.514079][ T68] hsr_slave_1: left promiscuous mode [ 112.519831][ T28] audit: type=1400 audit(1786149481.094:1261): avc: denied { write } for pid=8233 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.551401][ T28] audit: type=1400 audit(1786149481.124:1262): avc: denied { write } for pid=8244 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.628385][ T3019] 8021q: adding VLAN 0 to HW filter on device eth5 [ 112.715799][ T28] audit: type=1400 audit(1786149481.294:1263): avc: denied { write } for pid=8247 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.755937][ T28] audit: type=1400 audit(1786149481.334:1264): avc: denied { write } for pid=8258 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.793954][ T3019] 8021q: adding VLAN 0 to HW filter on device eth6 [ 112.875089][ T28] audit: type=1400 audit(1786149481.454:1265): avc: denied { write } for pid=8261 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.905460][ T68] IPVS: stop unused estimator thread 0... [ 112.921380][ T28] audit: type=1400 audit(1786149481.494:1266): avc: denied { write } for pid=8272 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.932545][ T3019] 8021q: adding VLAN 0 to HW filter on device eth7 [ 113.023056][ T28] audit: type=1400 audit(1786149481.594:1267): avc: denied { write } for pid=8275 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.062558][ T28] audit: type=1400 audit(1786149481.634:1268): avc: denied { write } for pid=8286 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.076182][ T3019] 8021q: adding VLAN 0 to HW filter on device eth8 [ 113.276244][ T68] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.315954][ T68] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.356300][ T68] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.371226][ T28] audit: type=1400 audit(1786149481.944:1269): avc: denied { write } for pid=8293 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.395686][ T28] audit: type=1400 audit(1786149481.944:1270): avc: denied { write } for pid=8304 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.400672][ T3019] 8021q: adding VLAN 0 to HW filter on device eth9 [ 113.437947][ T68] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.515120][ T68] bridge_slave_1: left allmulticast mode [ 113.521155][ T68] bridge_slave_1: left promiscuous mode [ 113.527705][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.536790][ T68] bridge_slave_0: left allmulticast mode [ 113.542445][ T68] bridge_slave_0: left promiscuous mode [ 113.548142][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.582210][ T68] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 113.601938][ T68] batman_adv: batadv0: Removing interface: gretap1 [ 113.623205][ T68] team0: Port device bond0 removed [ 113.628965][ T68] bond0 (unregistering): Released all slaves [ 113.639914][ T68] bond1 (unregistering): Released all slaves [ 113.668381][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.678605][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.687978][ T68] bond0 (unregistering): Released all slaves [ 113.695833][ T3019] 8021q: adding VLAN 0 to HW filter on device eth10 [ 113.748226][ T68] IPVS: stopping backup sync thread 4950 ... [ 113.798988][ T68] hsr_slave_0: left promiscuous mode [ 113.804850][ T68] hsr_slave_1: left promiscuous mode [ 113.812110][ T68] hsr_slave_0: left promiscuous mode [ 113.818224][ T68] hsr_slave_1: left promiscuous mode [ 113.823920][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.831380][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.839185][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.846933][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.857465][ T68] veth1_macvtap: left promiscuous mode [ 113.863299][ T68] veth0_macvtap: left promiscuous mode [ 113.869040][ T68] veth1_vlan: left promiscuous mode [ 113.874568][ T68] veth0_vlan: left promiscuous mode [ 113.996147][ T68] team0 (unregistering): Port device team_slave_1 removed [ 114.006332][ T68] team0 (unregistering): Port device team_slave_0 removed [ 114.040332][ T3019] 8021q: adding VLAN 0 to HW filter on device eth11 [ 114.153857][ T3019] 8021q: adding VLAN 0 to HW filter on device eth12 [ 114.281138][ T3019] 8021q: adding VLAN 0 to HW filter on device eth13 [ 114.391270][ T3019] 8021q: adding VLAN 0 to HW filter on device eth14 [ 114.412523][ T68] IPVS: stop unused estimator thread 0... [ 114.513694][ T3019] 8021q: adding VLAN 0 to HW filter on device eth15 [ 114.627924][ T3019] 8021q: adding VLAN 0 to HW filter on device eth16 [ 119.313727][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 119.313823][ T28] audit: type=1400 audit(1786149487.894:1285): avc: denied { write } for pid=8430 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.345405][ T28] audit: type=1400 audit(1786149487.894:1286): avc: denied { write } for pid=8441 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.845741][ T28] audit: type=1400 audit(1786149488.424:1287): avc: denied { write } for pid=8445 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.870178][ T28] audit: type=1400 audit(1786149488.424:1288): avc: denied { write } for pid=8456 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.970102][ T28] audit: type=1400 audit(1786149488.544:1289): avc: denied { write } for pid=8459 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.994448][ T28] audit: type=1400 audit(1786149488.544:1290): avc: denied { write } for pid=8470 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.569271][ T28] audit: type=1400 audit(1786149489.144:1291): avc: denied { write } for pid=8476 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.594160][ T28] audit: type=1400 audit(1786149489.174:1292): avc: denied { write } for pid=8487 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1