last executing test programs: 4.242100936s ago: executing program 0 (id=350): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x42795000) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x200000010, &(0x7f0000000000)=0x9, 0x4) sendto$unix(r2, &(0x7f00000004c0)="0434", 0x2, 0xd1, 0x0, 0x0) recvfrom$unix(r3, 0x0, 0x0, 0x10102, 0x0, 0x0) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) 4.105121221s ago: executing program 0 (id=352): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xffffffff, @remote}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0xffff, 0x0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close(r0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) 4.068650532s ago: executing program 0 (id=353): ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) memfd_create(0x0, 0x18) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x3}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000"], 0x110) setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f00000006c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) 3.864311928s ago: executing program 0 (id=354): ioperm(0x0, 0x6, 0x7) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) rmdir(&(0x7f0000000000)='./file0\x00') 3.130302551s ago: executing program 4 (id=364): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "12ad"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001400038010"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.105704112s ago: executing program 4 (id=365): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) setpgid(r0, r0) setpgid(0x0, r0) wait4(r0, 0x0, 0x2, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, r0, 0x0, 0x4, 0x0) setpgid(r1, r1) setpgid(0x0, r1) 3.025114095s ago: executing program 0 (id=366): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x57, 0x2}, 0x10c0e8, 0x2, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) r1 = syz_clone(0x2000100, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0xff0a, 0x0) 2.879424849s ago: executing program 0 (id=367): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_procs(r1, 0x0, 0x2, 0x0) write$cgroup_pid(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x403, 0xfffefffc, 0x3d, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200440d4}, 0x4804) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) 2.747898983s ago: executing program 2 (id=368): openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x8880, 0x81) lseek(r2, 0x1, 0x0) getdents64(r2, 0x0, 0x4f) 2.734556754s ago: executing program 2 (id=369): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, &(0x7f0000001f80)=""/226, 0x26, 0xe2, 0x2}, 0x28) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x10e, &(0x7f0000000780)={[{@bsdgroups}, {@nodelalloc}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x5}}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x458, &(0x7f0000000300)="$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") r1 = creat(&(0x7f00000004c0)='./bus\x00', 0x20) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x2, 0x2, 0x15}, 0x18) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus/file0\x00', r2) 2.588930348s ago: executing program 1 (id=371): r0 = socket$kcm(0xa, 0x1, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) signalfd4(r1, &(0x7f0000000100)={[0x9]}, 0x8, 0x80800) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x0, 0x2, 0x6, {0x3, @usr_ip6_spec={@empty, @mcast2, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@multicast1, @private=0xa010101, 0xfffffffc, 0x5}, {0x0, @empty, 0xfff, 0x5, [0x206, 0xd]}, 0xff, 0x3}}}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1}) r3 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r3}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r3}) 2.555475549s ago: executing program 1 (id=372): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 2.478742232s ago: executing program 1 (id=373): bpf$MAP_CREATE(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) sendfile(r2, r1, 0x0, 0xfffa83) 2.411445344s ago: executing program 2 (id=374): r0 = perf_event_open(&(0x7f0000001200)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0xfffffffffffffff5}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x2}, {0x201, 0x2000, 0x1}, {0xfffffffd, 0x4, 0x10006, 0x3}]}, 0x94) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 2.301886288s ago: executing program 2 (id=376): ioperm(0x0, 0x6, 0x7) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) rmdir(&(0x7f0000000000)='./file0\x00') 2.23464435s ago: executing program 3 (id=377): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x8}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) io_uring_setup(0x7d3, 0x0) pause() 2.21625958s ago: executing program 4 (id=378): ioprio_set$uid(0x3, 0x0, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000000140)='S\r', 0x2) sendfile(r3, r2, 0x0, 0x7fffffff) 1.444809464s ago: executing program 1 (id=379): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000300000000000000000000008500000013000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000340)="196a348fbba6e75ce3e37fd3d3fc", 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9902) 1.431299435s ago: executing program 2 (id=380): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) write(r1, 0x0, 0x0) 1.231387001s ago: executing program 3 (id=381): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mremap(&(0x7f0000a11000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ba6000/0x2000)=nil) munmap(&(0x7f0000e29000/0x1000)=nil, 0x1000) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000678000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000084c000/0x3000)=nil) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) mremap(&(0x7f00005a7000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffa000/0x4000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 1.192650003s ago: executing program 3 (id=382): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000001380)=ANY=[@ANYBLOB="180000000000450000000000000000000071122a000000000095000000400000e85d9b4235a56e17b2bb65a157f0b10bebe2fe"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) close(0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004f00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffd) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x3, 0x8, 0x7, 0x5, 0x0, 0x7, 0x20000, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xb98, 0x4, @perf_bp={0x0, 0x2}, 0x100000, 0x6, 0x4, 0x6, 0x2, 0x9, 0x7, 0x0, 0x3, 0x0, 0x2b}, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0x2) 1.040670007s ago: executing program 3 (id=383): mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) recvmmsg(r0, &(0x7f0000008bc0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x3fffffffffffde9, 0x10002, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000240)=0x10000, 0x4) 967.94085ms ago: executing program 3 (id=384): socket$igmp6(0xa, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$kcm(0xa, 0x1, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000000109"], 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYRES16=r0], 0x48}}, 0x40800) 848.218054ms ago: executing program 4 (id=385): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x60d4, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x725e65a6, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 844.115674ms ago: executing program 3 (id=386): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00000ce000/0x3000)=nil, 0x3000, 0x2000002, 0x13, r0, 0x8000000) r1 = openat$null(0xffffffffffffff9c, 0x0, 0x42242, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x46, 0x1, 0x0, 0x0, 0x0, 0x3, 0x40510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x0, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) get_mempolicy(0x0, 0x0, 0x400, &(0x7f00000ce000/0x1000)=nil, 0x3) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) 341.145349ms ago: executing program 4 (id=387): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700003b0000000000800000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)={{0x14}, [], {0x14}}, 0x28}}, 0x0) 309.11557ms ago: executing program 1 (id=388): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket$tipc(0x1e, 0x2, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002400)=@raw={'raw\x00', 0x3c1, 0x3, 0x488, 0x1b8, 0x12, 0x600, 0x1b8, 0x202, 0x3b8, 0x2e8, 0x2e8, 0x3b8, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x8}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xd8, 0x200, 0x0, {}, [@common=@ah={{0x30}, {[0x4d3, 0x4d3], 0xc9, 0x11, 0x3}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7ff, 'system_u:object_r:crond_initrc_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) dup(r1) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, 0x0) dup3(0xffffffffffffffff, r1, 0x80000) 168.204675ms ago: executing program 4 (id=389): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0xc, 0x42}]}, 0x10) listen(r0, 0x2005) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x40, @empty}, 0x1c) sendmmsg$inet(r1, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000540)="6dd5a5adf9b147c7b948e27138dd56263157a9868349731c4a36e444ce4def2eebf33e", 0x23}], 0x1}}, {{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f00000028c0)="f2990e196a679b77", 0x8}, {&(0x7f0000000400)="1f562a5a1f089a76a744fd73d1aed3655cb6105e5d63692569195e", 0x1b}], 0x2}}], 0x2, 0x48045) close_range(r0, 0xffffffffffffffff, 0x0) 835.65µs ago: executing program 2 (id=390): bpf$MAP_CREATE(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) sendfile(r2, r1, 0x0, 0xfffa83) 0s ago: executing program 1 (id=400): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x32752275d7d1e3ca, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'macvlan0\x00', @random="bdbd67c12945"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) kernel console output (not intermixed with test programs): [ 20.468371][ T28] audit: type=1400 audit(1778884170.189:101): avc: denied { write } for pid=3192 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.552128][ T28] audit: type=1400 audit(1778884170.279:102): avc: denied { write } for pid=3195 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.575164][ T28] audit: type=1400 audit(1778884170.299:103): avc: denied { write } for pid=3206 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.632938][ T28] audit: type=1400 audit(1778884170.359:104): avc: denied { write } for pid=3209 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.405537][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 23.405554][ T28] audit: type=1400 audit(1778884173.139:112): avc: denied { transition } for pid=3273 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 23.436168][ T28] audit: type=1400 audit(1778884173.139:113): avc: denied { noatsecure } for pid=3273 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 23.459971][ T28] audit: type=1400 audit(1778884173.139:114): avc: denied { write } for pid=3273 comm="sh" path="pipe:[2589]" dev="pipefs" ino=2589 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 23.482312][ T28] audit: type=1400 audit(1778884173.139:115): avc: denied { rlimitinh } for pid=3273 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 23.501284][ T28] audit: type=1400 audit(1778884173.139:116): avc: denied { siginh } for pid=3273 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.94' (ED25519) to the list of known hosts. [ 31.179798][ T28] audit: type=1400 audit(1778884180.909:117): avc: denied { mounton } for pid=3287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 31.202872][ T28] audit: type=1400 audit(1778884180.929:118): avc: denied { mount } for pid=3287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.203549][ T3287] cgroup: Unknown subsys name 'net' [ 31.231049][ T28] audit: type=1400 audit(1778884180.959:119): avc: denied { unmount } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.326418][ T3287] cgroup: Unknown subsys name 'cpuset' [ 31.332602][ T3287] cgroup: Unknown subsys name 'rlimit' [ 31.442071][ T28] audit: type=1400 audit(1778884181.169:120): avc: denied { setattr } for pid=3287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.472515][ T28] audit: type=1400 audit(1778884181.169:121): avc: denied { create } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.493121][ T28] audit: type=1400 audit(1778884181.169:122): avc: denied { write } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.513952][ T28] audit: type=1400 audit(1778884181.169:123): avc: denied { read } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.521722][ T3292] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 31.534540][ T28] audit: type=1400 audit(1778884181.169:124): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 31.564320][ T28] audit: type=1400 audit(1778884181.169:125): avc: denied { mounton } for pid=3287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 31.589497][ T28] audit: type=1400 audit(1778884181.169:126): avc: denied { mount } for pid=3287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 31.621333][ T3287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 33.636878][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.644067][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.651330][ T3305] bridge_slave_0: entered allmulticast mode [ 33.658449][ T3305] bridge_slave_0: entered promiscuous mode [ 33.679949][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.687201][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.694403][ T3305] bridge_slave_1: entered allmulticast mode [ 33.700991][ T3305] bridge_slave_1: entered promiscuous mode [ 33.714246][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.721360][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.728522][ T3300] bridge_slave_0: entered allmulticast mode [ 33.735596][ T3300] bridge_slave_0: entered promiscuous mode [ 33.755016][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.762151][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.769318][ T3300] bridge_slave_1: entered allmulticast mode [ 33.775973][ T3300] bridge_slave_1: entered promiscuous mode [ 33.804581][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.811764][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.818905][ T3301] bridge_slave_0: entered allmulticast mode [ 33.825394][ T3301] bridge_slave_0: entered promiscuous mode [ 33.833088][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.853041][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.860204][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.867431][ T3301] bridge_slave_1: entered allmulticast mode [ 33.873881][ T3301] bridge_slave_1: entered promiscuous mode [ 33.880950][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.895330][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.915618][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.922728][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.930156][ T3304] bridge_slave_0: entered allmulticast mode [ 33.936639][ T3304] bridge_slave_0: entered promiscuous mode [ 33.944132][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.963961][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.971186][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.978405][ T3304] bridge_slave_1: entered allmulticast mode [ 33.984963][ T3304] bridge_slave_1: entered promiscuous mode [ 34.000735][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.010534][ T3305] team0: Port device team_slave_0 added [ 34.030499][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.040315][ T3305] team0: Port device team_slave_1 added [ 34.051284][ T3300] team0: Port device team_slave_0 added [ 34.057054][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.064137][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.071382][ T3308] bridge_slave_0: entered allmulticast mode [ 34.077726][ T3308] bridge_slave_0: entered promiscuous mode [ 34.093357][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.103145][ T3300] team0: Port device team_slave_1 added [ 34.108907][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.116084][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.123208][ T3308] bridge_slave_1: entered allmulticast mode [ 34.129629][ T3308] bridge_slave_1: entered promiscuous mode [ 34.149517][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.176805][ T3301] team0: Port device team_slave_0 added [ 34.182637][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.189692][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.215635][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.230703][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.237786][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.263687][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.275496][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.285705][ T3301] team0: Port device team_slave_1 added [ 34.291701][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.298690][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.324745][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.336369][ T3304] team0: Port device team_slave_0 added [ 34.342222][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.349250][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.375451][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.387204][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.404628][ T3304] team0: Port device team_slave_1 added [ 34.427028][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.433989][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.459943][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.483949][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.490982][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.516938][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.527929][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.534923][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.561152][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.577199][ T3308] team0: Port device team_slave_0 added [ 34.583887][ T3308] team0: Port device team_slave_1 added [ 34.602789][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.609803][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.636227][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.657814][ T3305] hsr_slave_0: entered promiscuous mode [ 34.663764][ T3305] hsr_slave_1: entered promiscuous mode [ 34.676297][ T3300] hsr_slave_0: entered promiscuous mode [ 34.682280][ T3300] hsr_slave_1: entered promiscuous mode [ 34.688310][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 34.694096][ T3300] Cannot create hsr debugfs directory [ 34.719196][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.726527][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.752535][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.779761][ T3304] hsr_slave_0: entered promiscuous mode [ 34.785714][ T3304] hsr_slave_1: entered promiscuous mode [ 34.791591][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 34.797354][ T3304] Cannot create hsr debugfs directory [ 34.803136][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.810167][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.836059][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.848684][ T3301] hsr_slave_0: entered promiscuous mode [ 34.854727][ T3301] hsr_slave_1: entered promiscuous mode [ 34.860531][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 34.866367][ T3301] Cannot create hsr debugfs directory [ 34.924502][ T3308] hsr_slave_0: entered promiscuous mode [ 34.930721][ T3308] hsr_slave_1: entered promiscuous mode [ 34.936696][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 34.942417][ T3308] Cannot create hsr debugfs directory [ 35.103105][ T3305] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 35.111497][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.119208][ T3305] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 35.127703][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.135323][ T3305] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 35.143712][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.153770][ T3305] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 35.162342][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.185570][ T3304] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 35.193900][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.206902][ T3304] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 35.215899][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.223692][ T3304] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 35.232406][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.245468][ T3304] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 35.253771][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.273182][ T3300] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 35.282470][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.290269][ T3300] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 35.298805][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.306472][ T3300] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 35.314880][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.322714][ T3300] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 35.331083][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.371083][ T3301] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 35.379942][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.396070][ T3301] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 35.404525][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.412613][ T3301] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 35.421152][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.429513][ T3301] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 35.438509][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.459735][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.482070][ T3308] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 35.491270][ T3308] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.507368][ T3308] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 35.516260][ T3308] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.524251][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.534758][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.543465][ T3308] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 35.552132][ T3308] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.560018][ T3308] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 35.568866][ T3308] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.581608][ T1864] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.588883][ T1864] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.603881][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.612837][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.620099][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.634926][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.646366][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.653423][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.669705][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.676796][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.703923][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.729119][ T1864] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.736447][ T1864] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.751890][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.759014][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.772756][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.807268][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.830561][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.837696][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.849741][ T935] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.856884][ T935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.872420][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.911729][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.937251][ T1864] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.944377][ T1864] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.964568][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.971706][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.046829][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.065972][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.190401][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.231363][ T3304] veth0_vlan: entered promiscuous mode [ 36.248198][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.280855][ T3304] veth1_vlan: entered promiscuous mode [ 36.298660][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.314491][ T3304] veth0_macvtap: entered promiscuous mode [ 36.330262][ T3304] veth1_macvtap: entered promiscuous mode [ 36.352177][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.365275][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.390101][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.400257][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.409644][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.425300][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.453537][ T3300] veth0_vlan: entered promiscuous mode [ 36.463542][ T3305] veth0_vlan: entered promiscuous mode [ 36.480456][ T3301] veth0_vlan: entered promiscuous mode [ 36.486429][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 36.486444][ T28] audit: type=1400 audit(1778884186.209:141): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/root/syzkaller.ggr6Ii/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 36.494307][ T3305] veth1_vlan: entered promiscuous mode [ 36.522811][ T28] audit: type=1400 audit(1778884186.209:142): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 36.545980][ T3300] veth1_vlan: entered promiscuous mode [ 36.553290][ T3304] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 36.565574][ T28] audit: type=1400 audit(1778884186.219:143): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/root/syzkaller.ggr6Ii/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 36.581951][ T3305] veth0_macvtap: entered promiscuous mode [ 36.599862][ T28] audit: type=1400 audit(1778884186.219:144): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 36.622255][ T28] audit: type=1400 audit(1778884186.219:145): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/root/syzkaller.ggr6Ii/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 36.624847][ T3300] veth0_macvtap: entered promiscuous mode [ 36.656423][ T28] audit: type=1400 audit(1778884186.219:146): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/root/syzkaller.ggr6Ii/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 36.662713][ T3301] veth1_vlan: entered promiscuous mode [ 36.689581][ T28] audit: type=1400 audit(1778884186.219:147): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 36.703556][ T3308] veth0_vlan: entered promiscuous mode [ 36.714873][ T28] audit: type=1400 audit(1778884186.259:148): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 36.717918][ T3300] veth1_macvtap: entered promiscuous mode [ 36.743988][ T28] audit: type=1400 audit(1778884186.259:149): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="gadgetfs" ino=3733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 36.773736][ T3305] veth1_macvtap: entered promiscuous mode [ 36.779976][ T28] audit: type=1400 audit(1778884186.499:150): avc: denied { read write } for pid=3304 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 36.811430][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.830760][ T3308] veth1_vlan: entered promiscuous mode [ 36.845067][ T3301] veth0_macvtap: entered promiscuous mode [ 36.854384][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.865018][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.885041][ T3301] veth1_macvtap: entered promiscuous mode [ 36.893241][ T1864] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.905286][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.914364][ T3308] veth0_macvtap: entered promiscuous mode [ 36.922067][ T1864] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.930924][ T1864] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.946007][ T3308] veth1_macvtap: entered promiscuous mode [ 36.952592][ T1864] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.961536][ T1864] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.973568][ T1864] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.982468][ T1864] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.993960][ T1864] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.007280][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.016817][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.034190][ T56] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.045102][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.053385][ T2025] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.076527][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.088638][ T2025] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.100262][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.128700][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.158988][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.172631][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.215037][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.374754][ T3532] loop3: detected capacity change from 0 to 512 [ 37.434901][ T3532] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.467439][ T3532] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.484949][ T3548] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12'. [ 37.592138][ T3552] Illegal XDP return value 4292435968 on prog (id 3) dev syz_tun, expect packet loss! [ 37.608031][ T3542] syz.4.11 (3542) used greatest stack depth: 10624 bytes left [ 37.641842][ T3555] netlink: 44 bytes leftover after parsing attributes in process `syz.3.16'. [ 37.677837][ T3558] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17'. [ 38.005373][ T3579] syz.4.26 (3579) used greatest stack depth: 9960 bytes left [ 38.572503][ T3597] netem: change failed [ 38.709065][ T3599] loop4: detected capacity change from 0 to 256 [ 39.239674][ T3394] kernel read not supported for file /input/event2 (pid: 3394 comm: kworker/0:3) [ 39.685833][ T3619] loop3: detected capacity change from 0 to 512 [ 39.694620][ T3621] capability: warning: `syz.4.40' uses deprecated v2 capabilities in a way that may be insecure [ 39.725942][ T3619] EXT4-fs: Ignoring removed bh option [ 39.748802][ T3619] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 39.772879][ T3619] EXT4-fs (loop3): 1 truncate cleaned up [ 39.788935][ T3619] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.917035][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.001118][ T3635] loop0: detected capacity change from 0 to 128 [ 40.068656][ T3634] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 40.095991][ T3635] syz.0.46: attempt to access beyond end of device [ 40.095991][ T3635] loop0: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 40.110121][ T3635] syz.0.46: attempt to access beyond end of device [ 40.110121][ T3635] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 40.140836][ T3635] syz.0.46: attempt to access beyond end of device [ 40.140836][ T3635] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 40.172186][ T3635] syz.0.46: attempt to access beyond end of device [ 40.172186][ T3635] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 40.215945][ T3635] syz.0.46: attempt to access beyond end of device [ 40.215945][ T3635] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 40.230566][ T3643] Zero length message leads to an empty skb [ 40.253458][ T3635] syz.0.46: attempt to access beyond end of device [ 40.253458][ T3635] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 40.279807][ T3649] loop4: detected capacity change from 0 to 128 [ 40.284435][ T3635] syz.0.46: attempt to access beyond end of device [ 40.284435][ T3635] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 40.309286][ T3651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.51'. [ 40.314489][ T3635] syz.0.46: attempt to access beyond end of device [ 40.314489][ T3635] loop0: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 40.333757][ T3649] msdos: Bad value for 'gid' [ 40.345203][ T3649] msdos: Bad value for 'gid' [ 40.354461][ T56] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.360474][ T3652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.51'. [ 40.363459][ T56] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.378507][ T3635] syz.0.46: attempt to access beyond end of device [ 40.378507][ T3635] loop0: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 40.403704][ T3649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.50'. [ 40.414315][ T56] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.423512][ T3635] syz.0.46: attempt to access beyond end of device [ 40.423512][ T3635] loop0: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 40.424068][ T3649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.50'. [ 40.447996][ T3649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.50'. [ 40.459678][ T56] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.459699][ T3652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.51'. [ 40.485330][ T3654] bridge0: port 3(vlan2) entered blocking state [ 40.492218][ T3654] bridge0: port 3(vlan2) entered disabled state [ 40.498882][ T3654] vlan2: entered allmulticast mode [ 40.504185][ T3654] bridge0: entered allmulticast mode [ 40.522137][ T3654] vlan2: left allmulticast mode [ 40.527394][ T3654] bridge0: left allmulticast mode [ 40.536547][ T3649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.50'. [ 40.550358][ T3656] syz.0.53 uses obsolete (PF_INET,SOCK_PACKET) [ 40.664113][ T3660] loop2: detected capacity change from 0 to 2048 [ 40.684238][ T3660] journal_path: Lookup failure for './bus' [ 40.702068][ T3660] EXT4-fs: error: could not find journal device path [ 40.790531][ T3672] tipc: Started in network mode [ 40.803418][ T3672] tipc: Node identity 8aacdab6d642, cluster identity 4711 [ 40.811350][ T3672] tipc: Enabled bearer , priority 0 [ 40.884827][ T3672] syzkaller0: entered promiscuous mode [ 40.904392][ T3672] syzkaller0: entered allmulticast mode [ 40.924795][ T3672] tipc: Resetting bearer [ 40.987656][ T3671] tipc: Resetting bearer [ 41.027973][ T3671] tipc: Disabling bearer [ 42.125032][ T28] kauditd_printk_skb: 109 callbacks suppressed [ 42.125050][ T28] audit: type=1400 audit(1778884192.848:260): avc: denied { mount } for pid=3720 comm="syz.0.81" name="/" dev="ramfs" ino=7782 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 42.192105][ T28] audit: type=1400 audit(1778884192.918:261): avc: denied { perfmon } for pid=3722 comm="syz.4.82" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 42.213988][ T28] audit: type=1400 audit(1778884192.918:262): avc: denied { name_bind } for pid=3722 comm="syz.4.82" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 43.088621][ T28] audit: type=1400 audit(1778884193.818:263): avc: denied { bpf } for pid=3736 comm="syz.2.87" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 43.531344][ T3727] loop1: detected capacity change from 0 to 512 [ 43.657891][ T3727] EXT4-fs: Ignoring removed nobh option [ 43.750118][ T3727] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 43.767619][ T3727] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 44.049352][ T3727] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 44.156024][ T28] audit: type=1400 audit(1778884194.888:264): avc: denied { mount } for pid=3746 comm="syz.3.89" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 44.156793][ T3727] EXT4-fs (loop1): 1 truncate cleaned up [ 44.341818][ T28] audit: type=1400 audit(1778884195.068:265): avc: denied { create } for pid=3749 comm="syz.3.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 44.432286][ T3727] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.643945][ T3760] loop2: detected capacity change from 0 to 1024 [ 44.661142][ T3760] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 44.673594][ T28] audit: type=1400 audit(1778884195.388:266): avc: denied { write } for pid=3726 comm="syz.1.83" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 44.716915][ T3760] EXT4-fs (loop2): The Hurd can't support 64-bit file systems [ 44.735673][ T28] audit: type=1400 audit(1778884195.408:267): avc: denied { create } for pid=3726 comm="syz.1.83" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 44.751640][ T3760] netlink: 12 bytes leftover after parsing attributes in process `syz.2.94'. [ 44.773498][ T28] audit: type=1400 audit(1778884195.418:268): avc: denied { watch } for pid=3726 comm="syz.1.83" path="/13/file2" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 44.820710][ T3764] netlink: 24 bytes leftover after parsing attributes in process `syz.0.95'. [ 44.964963][ T3766] netlink: 140 bytes leftover after parsing attributes in process `syz.2.96'. [ 44.979970][ T28] audit: type=1400 audit(1778884195.708:269): avc: denied { write } for pid=3769 comm="syz.3.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 45.078703][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.285638][ T3785] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 45.303554][ T3785] team0 (unregistering): Port device team_slave_0 removed [ 45.325767][ T3785] team0 (unregistering): Failed to send options change via netlink (err -105) [ 45.355090][ T3785] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 45.378296][ T3785] team0 (unregistering): Port device team_slave_1 removed [ 45.627987][ T3789] netlink: 'syz.1.106': attribute type 13 has an invalid length. [ 46.224980][ T3802] syz_tun: entered allmulticast mode [ 46.256027][ T3801] syz_tun: left allmulticast mode [ 46.875734][ T3810] loop2: detected capacity change from 0 to 512 [ 46.955141][ T3810] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.989680][ T3810] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.164102][ T3813] loop3: detected capacity change from 0 to 512 [ 47.243974][ T3813] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.287560][ T3813] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.310677][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.344604][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.454959][ T28] kauditd_printk_skb: 54 callbacks suppressed [ 47.454975][ T28] audit: type=1326 audit(1778884198.178:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3829 comm="syz.1.123" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdfa5b2ce59 code=0x0 [ 47.461068][ T3837] loop3: detected capacity change from 0 to 512 [ 47.497685][ T28] audit: type=1400 audit(1778884198.228:325): avc: denied { connect } for pid=3838 comm="syz.4.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 47.498947][ T3835] loop2: detected capacity change from 0 to 8192 [ 47.519545][ T28] audit: type=1400 audit(1778884198.248:326): avc: denied { write } for pid=3838 comm="syz.4.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 47.554120][ T3837] ======================================================= [ 47.554120][ T3837] WARNING: The mand mount option has been deprecated and [ 47.554120][ T3837] and is ignored by this kernel. Remove the mand [ 47.554120][ T3837] option from the mount to silence this warning. [ 47.554120][ T3837] ======================================================= [ 47.573450][ T3842] loop4: detected capacity change from 0 to 512 [ 47.619083][ T28] audit: type=1400 audit(1778884198.248:327): avc: denied { ioctl } for pid=3838 comm="syz.4.126" path="socket:[5508]" dev="sockfs" ino=5508 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 47.632472][ T3837] EXT4-fs: Ignoring removed bh option [ 47.650817][ T3842] EXT4-fs: Ignoring removed mblk_io_submit option [ 47.696800][ T3842] EXT4-fs: Ignoring removed mblk_io_submit option [ 47.719654][ T3842] EXT4-fs: test_dummy_encryption option not supported [ 47.725972][ T3837] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #11: comm syz.3.125: corrupted in-inode xattr: bad e_name length [ 47.800805][ T3837] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 47.801113][ T3837] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.125: couldn't read orphan inode 11 (err -117) [ 47.810431][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 47.810456][ C0] EXT4-fs (loop3): initial error at time 1778884198: ext4_iget_extra_inode:5128: inode 11 [ 47.810484][ C0] EXT4-fs (loop3): last error at time 1778884198: ext4_iget_extra_inode:5128: inode 11 [ 47.885488][ T3837] loop3: lost filesystem error report for type 5 error -117 [ 47.885735][ T3837] EXT4-fs (loop3): 1 truncate cleaned up [ 47.899960][ T3837] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.989245][ T28] audit: type=1400 audit(1778884198.718:328): avc: denied { setopt } for pid=3848 comm="syz.0.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 48.022915][ T28] audit: type=1400 audit(1778884198.748:329): avc: denied { module_request } for pid=3836 comm="syz.3.125" kmod="bpf_preload" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 48.071962][ T28] audit: type=1400 audit(1778884198.778:330): avc: denied { mount } for pid=3836 comm="syz.3.125" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 48.097068][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.136889][ T28] audit: type=1400 audit(1778884198.798:331): avc: denied { bind } for pid=3848 comm="syz.0.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 48.163892][ T3853] loop0: detected capacity change from 0 to 2048 [ 48.197806][ T28] audit: type=1400 audit(1778884198.798:332): avc: denied { write } for pid=3848 comm="syz.0.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 48.237284][ T3853] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.315455][ T28] audit: type=1400 audit(1778884199.038:333): avc: denied { connect } for pid=3858 comm="syz.1.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.498330][ T2025] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 49.539323][ T2025] EXT4-fs (loop0): Remounting filesystem read-only [ 49.702911][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.856540][ T3862] loop3: detected capacity change from 0 to 512 [ 49.927135][ T3862] EXT4-fs: Ignoring removed nobh option [ 49.989192][ T3862] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 50.107412][ T3862] EXT4-fs (loop3): 1 truncate cleaned up [ 50.174472][ T3862] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.548101][ T3862] syz.3.132 (3862) used greatest stack depth: 9536 bytes left [ 50.561086][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.640938][ T3910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.149'. [ 50.656870][ T56] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.688127][ T56] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.708831][ T3910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.149'. [ 50.718090][ T56] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.731174][ T56] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.745682][ T3910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.149'. [ 50.819300][ T3917] loop4: detected capacity change from 0 to 2048 [ 50.865257][ T3923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.154'. [ 50.876617][ T3923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.154'. [ 50.890519][ T3917] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.172285][ T3933] netlink: 28 bytes leftover after parsing attributes in process `syz.1.156'. [ 51.200131][ T3933] netlink: 28 bytes leftover after parsing attributes in process `syz.1.156'. [ 51.363289][ T3939] netlink: 24 bytes leftover after parsing attributes in process `syz.0.159'. [ 51.516536][ T1864] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 51.538208][ T1864] EXT4-fs (loop4): Remounting filesystem read-only [ 51.664841][ T3954] bridge_slave_0: left allmulticast mode [ 51.676855][ T3954] bridge_slave_0: left promiscuous mode [ 51.689644][ T3954] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.697996][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.710835][ T3954] bridge_slave_1: left allmulticast mode [ 51.722944][ T3144] IPVS: starting estimator thread 0... [ 51.724844][ T3954] bridge_slave_1: left promiscuous mode [ 51.738610][ T3954] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.751445][ T3954] bond0: (slave bond_slave_0): Releasing backup interface [ 51.766249][ T3954] bond0: (slave bond_slave_1): Releasing backup interface [ 51.779678][ T3954] team0: Port device team_slave_0 removed [ 51.789236][ T3954] team0: Port device team_slave_1 removed [ 51.801436][ T3954] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.816901][ T3954] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.835467][ T3963] IPVS: using max 2496 ests per chain, 124800 per kthread [ 51.846090][ T3954] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.867623][ T3954] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.894398][ T3954] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 52.137744][ T3990] netlink: 32 bytes leftover after parsing attributes in process `syz.2.180'. [ 52.474719][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 52.474805][ T28] audit: type=1400 audit(1778884203.198:357): avc: denied { bind } for pid=4003 comm="syz.2.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 52.505603][ T28] audit: type=1400 audit(1778884203.238:358): avc: denied { setopt } for pid=4003 comm="syz.2.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 52.862230][ T4016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.188'. [ 52.968298][ T4018] syz_tun: entered allmulticast mode [ 53.007098][ T4018] syz_tun (unregistering): left allmulticast mode [ 53.099308][ T28] audit: type=1400 audit(1778884203.828:359): avc: denied { create } for pid=4022 comm="syz.0.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 53.187033][ T28] audit: type=1400 audit(1778884203.898:360): avc: denied { read write } for pid=4028 comm="syz.3.193" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.235254][ T4035] bridge0: port 3(gretap0) entered blocking state [ 53.247128][ T4035] bridge0: port 3(gretap0) entered disabled state [ 53.265438][ T28] audit: type=1400 audit(1778884203.898:361): avc: denied { open } for pid=4028 comm="syz.3.193" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.275614][ T4035] gretap0: entered allmulticast mode [ 53.310555][ T28] audit: type=1400 audit(1778884203.948:362): avc: denied { ioctl } for pid=4028 comm="syz.3.193" path="/dev/virtual_nci" dev="devtmpfs" ino=132 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.336067][ T28] audit: type=1400 audit(1778884203.948:363): avc: denied { shutdown } for pid=4024 comm="syz.2.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 53.356292][ T28] audit: type=1400 audit(1778884203.968:364): avc: denied { setopt } for pid=4034 comm="syz.1.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 53.363459][ T4035] gretap0: entered promiscuous mode [ 53.398320][ T28] audit: type=1400 audit(1778884204.048:365): avc: denied { write } for pid=4039 comm="syz.2.196" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 53.408137][ T4035] bridge0: port 3(gretap0) entered blocking state [ 53.418671][ T28] audit: type=1400 audit(1778884204.118:366): avc: denied { mounton } for pid=4041 comm="syz.2.197" path="/proc/83/task" dev="proc" ino=8883 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 53.425682][ T4035] bridge0: port 3(gretap0) entered forwarding state [ 54.318931][ T4064] loop1: detected capacity change from 0 to 512 [ 54.335922][ T4064] EXT4-fs: Ignoring removed bh option [ 54.352261][ T4064] EXT4-fs: Mount option(s) incompatible with ext2 [ 54.419220][ T4064] loop1: detected capacity change from 0 to 512 [ 54.437825][ T4064] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 54.477833][ T4064] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.505005][ T4064] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.778692][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.929162][ T4082] bond1: entered promiscuous mode [ 54.955002][ T4084] vhci_hcd vhci_hcd.3: invalid port number 236 [ 54.971000][ T4082] ip6gre1: entered promiscuous mode [ 54.977243][ T4084] vhci_hcd vhci_hcd.3: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 54.978159][ T4082] ip6gre1: entered allmulticast mode [ 54.992665][ T4082] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 55.003943][ T4082] bond1: (slave ip6gre1): Error -95 calling set_mac_address [ 55.331530][ T4102] loop3: detected capacity change from 0 to 512 [ 55.398450][ T4102] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.416221][ T4102] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.463617][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.716079][ T4126] capability: warning: `syz.1.229' uses 32-bit capabilities (legacy support in use) [ 56.168191][ T4142] loop0: detected capacity change from 0 to 512 [ 56.325524][ T4137] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.332785][ T4137] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.904463][ T4137] bridge_slave_0: left allmulticast mode [ 56.962698][ T4137] bridge_slave_0: left promiscuous mode [ 57.044640][ T4137] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.143797][ T4137] bridge_slave_1: left allmulticast mode [ 57.171090][ T4137] bridge_slave_1: left promiscuous mode [ 57.210968][ T4137] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.245703][ T4137] bond0: (slave bond_slave_0): Releasing backup interface [ 57.292111][ T4187] loop0: detected capacity change from 0 to 1024 [ 57.315070][ T4137] bond0: (slave bond_slave_1): Releasing backup interface [ 57.344195][ T4187] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.413819][ T4137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.441161][ T4137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.495605][ T4137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.546051][ T4137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.593454][ T4137] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 57.678622][ T4184] netlink: 'syz.0.245': attribute type 12 has an invalid length. [ 57.695623][ T4184] __nla_validate_parse: 5 callbacks suppressed [ 57.695675][ T4184] netlink: 132 bytes leftover after parsing attributes in process `syz.0.245'. [ 57.787702][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.851577][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 57.851594][ T28] audit: type=1400 audit(1778884208.578:387): avc: denied { mount } for pid=4209 comm="syz.0.251" name="/" dev="ramfs" ino=9092 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 58.091332][ T28] audit: type=1400 audit(1778884208.818:388): avc: denied { read } for pid=4226 comm="syz.0.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 58.566752][ T4244] loop3: detected capacity change from 0 to 512 [ 58.573510][ T4244] EXT4-fs: Ignoring removed bh option [ 58.587183][ T4244] EXT4-fs: Mount option(s) incompatible with ext2 [ 58.633657][ T4244] loop3: detected capacity change from 0 to 512 [ 58.657795][ T4244] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 58.701989][ T4244] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.717564][ T4253] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 58.738272][ T4244] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.767623][ T28] audit: type=1400 audit(1778884209.498:389): avc: denied { write } for pid=4243 comm="syz.3.262" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 58.814359][ T28] audit: type=1400 audit(1778884209.538:390): avc: denied { connect } for pid=4247 comm="syz.1.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 58.865028][ T28] audit: type=1400 audit(1778884209.588:391): avc: denied { write } for pid=4247 comm="syz.1.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 58.892577][ T28] audit: type=1400 audit(1778884209.618:392): avc: denied { write } for pid=4260 comm="syz.4.268" name="mcfilter6" dev="proc" ino=4026532636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 58.922772][ T4264] loop4: detected capacity change from 0 to 512 [ 58.929581][ T4264] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.937487][ T4264] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 58.957695][ T4264] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.970317][ T4264] ext4 filesystem being mounted at /60/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.983559][ T28] audit: type=1400 audit(1778884209.708:393): avc: denied { accept } for pid=4263 comm="syz.4.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 58.984060][ T4264] EXT4-fs (loop4): shut down requested (0) [ 59.004412][ T28] audit: type=1400 audit(1778884209.738:394): avc: denied { read } for pid=2964 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 59.031306][ T28] audit: type=1400 audit(1778884209.738:395): avc: denied { search } for pid=2964 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.057560][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.066873][ T28] audit: type=1400 audit(1778884209.738:396): avc: denied { write search } for pid=2964 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.118345][ T4264] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 59.127398][ T4264] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 59.141881][ T4268] syzkaller0: entered promiscuous mode [ 59.147674][ T4268] syzkaller0: entered allmulticast mode [ 59.148011][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.194397][ T4270] netlink: 12 bytes leftover after parsing attributes in process `syz.4.271'. [ 59.203936][ T4270] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 59.211193][ T4270] IPv6: NLM_F_CREATE should be set when creating new route [ 59.225030][ T4270] loop4: detected capacity change from 0 to 1764 [ 59.270197][ T4273] wg1 speed is unknown, defaulting to 1000 [ 59.281943][ T4273] wg1 speed is unknown, defaulting to 1000 [ 59.293687][ T4273] wg1 speed is unknown, defaulting to 1000 [ 59.303377][ T4273] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 59.315535][ T4273] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 59.358990][ T4273] wg1 speed is unknown, defaulting to 1000 [ 59.366363][ T4273] wg1 speed is unknown, defaulting to 1000 [ 59.373980][ T4273] wg1 speed is unknown, defaulting to 1000 [ 59.381117][ T4277] netlink: 12 bytes leftover after parsing attributes in process `syz.0.274'. [ 59.381298][ T4273] wg1 speed is unknown, defaulting to 1000 [ 59.420036][ T4279] af_packet: tpacket_rcv: packet too big, clamped from 1500 to 4294967272. macoff=96 [ 59.441674][ T4277] veth1_macvtap: left promiscuous mode [ 59.483231][ T4277] bond1: (slave macsec0): Error -34 calling dev_set_mtu [ 59.509041][ T4273] wg1 speed is unknown, defaulting to 1000 [ 59.550977][ T4285] sctp: [Deprecated]: syz.1.276 (pid 4285) Use of int in max_burst socket option deprecated. [ 59.550977][ T4285] Use struct sctp_assoc_value instead [ 59.662231][ T4299] netlink: 12 bytes leftover after parsing attributes in process `syz.4.284'. [ 59.676246][ T4301] netlink: 'syz.0.283': attribute type 4 has an invalid length. [ 59.691060][ T4299] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.698989][ T4301] netlink: 152 bytes leftover after parsing attributes in process `syz.0.283'. [ 59.736697][ T4301] .`: renamed from bond0 (while UP) [ 59.887679][ T4310] bond1: (slave wireguard0): refused to change device type [ 60.189460][ T4315] IPv6: sit2: Disabled Multicast RS [ 60.208862][ T4315] sit2: entered allmulticast mode [ 60.384524][ T4321] netlink: 'syz.4.291': attribute type 1 has an invalid length. [ 60.404653][ T4321] 8021q: adding VLAN 0 to HW filter on device bond2 [ 60.440577][ T4321] bond2: entered promiscuous mode [ 60.441972][ T4326] loop1: detected capacity change from 0 to 512 [ 60.455371][ T4326] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 60.471324][ T4320] sctp: [Deprecated]: syz.0.290 (pid 4320) Use of int in max_burst socket option deprecated. [ 60.471324][ T4320] Use struct sctp_assoc_value instead [ 60.488229][ T4321] bond2: (slave dummy0): making interface the new active one [ 60.488253][ T4321] dummy0: entered promiscuous mode [ 60.489945][ T4321] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 60.511128][ T4318] bond2: left promiscuous mode [ 60.511148][ T4318] dummy0: left promiscuous mode [ 60.540927][ T4326] EXT4-fs (loop1): 1 truncate cleaned up [ 60.564805][ T4326] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.715732][ T4326] SELinux: failed to load policy [ 60.760575][ T4344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.784270][ T4344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.794059][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.861927][ T4348] netlink: 'syz.1.301': attribute type 29 has an invalid length. [ 61.051616][ T4354] netlink: 'syz.1.304': attribute type 12 has an invalid length. [ 61.071442][ T4354] netlink: 132 bytes leftover after parsing attributes in process `syz.1.304'. [ 61.463175][ T4375] IPv6: sit2: Disabled Multicast RS [ 61.476491][ T4375] sit2: entered allmulticast mode [ 61.490480][ T4354] loop1: detected capacity change from 0 to 1024 [ 61.549957][ T4354] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.645232][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.670702][ T4384] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.677953][ T4384] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.794515][ T4384] bridge_slave_0: left allmulticast mode [ 61.817603][ T4384] bridge_slave_0: left promiscuous mode [ 61.837361][ T4384] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.866327][ T4384] bridge_slave_1: left allmulticast mode [ 61.885588][ T4384] bridge_slave_1: left promiscuous mode [ 61.906490][ T4384] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.940986][ T4384] bond0: (slave bond_slave_0): Releasing backup interface [ 61.985760][ T4384] bond0: (slave bond_slave_1): Releasing backup interface [ 62.016738][ T4384] team0: Port device team_slave_0 removed [ 62.042440][ T4384] team0: Port device team_slave_1 removed [ 62.062491][ T4384] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.084680][ T4384] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.108566][ T4384] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.128606][ T4384] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.153118][ T4384] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 62.180863][ T4165] wg1 speed is unknown, defaulting to 1000 [ 62.192979][ T4165] syz2: Port: 1 Link DOWN [ 62.327064][ T4400] loop1: detected capacity change from 0 to 512 [ 62.346603][ T4370] syz.0.308 (4370) used greatest stack depth: 8888 bytes left [ 62.412234][ T4404] bond0: entered allmulticast mode [ 62.438833][ T4404] macvlan2: entered promiscuous mode [ 62.445508][ T4404] macvlan2: entered allmulticast mode [ 62.454919][ T4402] sctp: [Deprecated]: syz.3.322 (pid 4402) Use of int in max_burst socket option deprecated. [ 62.454919][ T4402] Use struct sctp_assoc_value instead [ 62.503885][ T4404] bond0: (slave macvlan2): Opening slave failed [ 62.897293][ T4415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.324'. [ 63.515130][ T4428] loop3: detected capacity change from 0 to 512 [ 63.543100][ T4428] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.596465][ T4428] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.628731][ T4428] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.912977][ T4444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.340'. [ 63.945538][ T4444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.340'. [ 64.048623][ T4446] 8021q: adding VLAN 0 to HW filter on device bond1 [ 64.084326][ T4439] loop3: detected capacity change from 0 to 512 [ 64.102492][ T4439] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 64.127427][ T4446] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 64.139713][ T4439] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.338: bad orphan inode 131083 [ 64.157925][ T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 64.180623][ T4439] loop3: lost filesystem error report for type 5 error -117 [ 64.187412][ T4439] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.225313][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 64.225331][ T28] audit: type=1400 audit(1778884214.948:411): avc: denied { write } for pid=4438 comm="syz.3.338" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.305489][ T28] audit: type=1400 audit(1778884214.948:412): avc: denied { add_name } for pid=4438 comm="syz.3.338" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.305504][ T2025] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 64.337289][ T28] audit: type=1400 audit(1778884214.948:413): avc: denied { append } for pid=4438 comm="syz.3.338" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 64.360967][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.370153][ T28] audit: type=1400 audit(1778884215.008:414): avc: denied { name_bind } for pid=4450 comm="syz.2.342" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 64.454942][ T28] audit: type=1400 audit(1778884215.178:415): avc: denied { read } for pid=4455 comm="syz.2.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 64.582944][ T4461] netlink: 28 bytes leftover after parsing attributes in process `syz.0.347'. [ 64.614271][ T4461] netlink: 28 bytes leftover after parsing attributes in process `syz.0.347'. [ 64.638851][ T4461] netlink: 'syz.0.347': attribute type 6 has an invalid length. [ 64.714980][ T28] audit: type=1326 audit(1778884215.438:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4466 comm="syz.1.349" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdfa5b2ce59 code=0x0 [ 64.862153][ T4474] xt_hashlimit: size too large, truncated to 1048576 [ 65.244533][ T4486] netlink: 'syz.4.356': attribute type 1 has an invalid length. [ 65.263064][ T4486] 8021q: adding VLAN 0 to HW filter on device bond3 [ 65.288736][ T4486] 8021q: adding VLAN 0 to HW filter on device bond3 [ 65.296317][ T4486] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 65.308673][ T4486] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 65.400145][ T4489] loop3: detected capacity change from 0 to 512 [ 65.414136][ T4489] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.432698][ T4489] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.517009][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.607864][ T4499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.361'. [ 65.620933][ T4497] loop1: detected capacity change from 0 to 2048 [ 65.647517][ T4497] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.664699][ T4493] loop4: detected capacity change from 0 to 512 [ 65.666056][ T4499] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 65.667529][ T4499] netlink: 28 bytes leftover after parsing attributes in process `syz.2.361'. [ 65.703975][ T4499] 8021q: adding VLAN 0 to HW filter on device bond2 [ 65.720230][ T4493] EXT4-fs (loop4): blocks per group (34) and clusters per group (32768) inconsistent [ 65.732971][ T28] audit: type=1400 audit(1778884216.468:417): avc: denied { write } for pid=4496 comm="syz.1.360" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 65.867013][ T4496] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 65.904154][ T4496] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 288 with error 28 [ 65.929764][ T4496] EXT4-fs (loop1): This should not happen!! Data will be lost [ 65.929764][ T4496] [ 65.940348][ T4496] EXT4-fs (loop1): Total free blocks count 0 [ 65.947674][ T4496] EXT4-fs (loop1): Free/Dirty block details [ 65.954220][ T4496] EXT4-fs (loop1): free_blocks=4096 [ 65.959977][ T4496] EXT4-fs (loop1): dirty_blocks=592 [ 65.967457][ T4496] EXT4-fs (loop1): Block reservation details [ 65.983897][ T4496] EXT4-fs (loop1): i_reserved_data_blocks=37 [ 66.107929][ T4521] geneve2: entered promiscuous mode [ 66.123727][ T935] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 66.133467][ T935] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 66.157596][ T4521] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.177141][ T935] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 66.212210][ T935] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 288 with max blocks 274 with error 28 [ 66.227636][ T3304] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 66.230981][ T28] audit: type=1400 audit(1778884216.958:418): avc: denied { map } for pid=4526 comm="syz.2.369" path="socket:[9729]" dev="sockfs" ino=9729 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 66.261894][ T28] audit: type=1400 audit(1778884216.958:419): avc: denied { read } for pid=4526 comm="syz.2.369" path="socket:[9729]" dev="sockfs" ino=9729 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 66.404512][ T4527] loop2: detected capacity change from 0 to 512 [ 66.419990][ T4527] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 66.433857][ T4527] EXT4-fs (loop2): 1 orphan inode deleted [ 66.440071][ T4527] EXT4-fs (loop2): 1 truncate cleaned up [ 66.448643][ T4527] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.472047][ T28] audit: type=1400 audit(1778884217.198:420): avc: denied { write } for pid=4526 comm="syz.2.369" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 66.532217][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.580323][ T4538] netlink: 'syz.2.374': attribute type 2 has an invalid length. [ 66.592772][ T4538] netlink: 199676 bytes leftover after parsing attributes in process `syz.2.374'. [ 67.529145][ T4521] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.556758][ T4521] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 68.183737][ T4521] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.214397][ T4521] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 68.379861][ T4521] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.395489][ T4521] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 68.618052][ T935] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 68.638986][ T935] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 68.681412][ T935] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 68.684857][ T4572] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 68.698968][ T935] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 68.723140][ T935] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 68.750623][ T935] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 68.778980][ T935] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 68.804909][ T935] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 69.215517][ T4567] ================================================================== [ 69.223762][ T4567] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 69.233618][ T4567] [ 69.235959][ T4567] read-write to 0xffffffff86c07a00 of 8 bytes by interrupt on cpu 1: [ 69.244346][ T4567] tick_do_update_jiffies64+0x113/0x1c0 [ 69.249944][ T4567] tick_nohz_handler+0x8d/0x3d0 [ 69.254826][ T4567] __hrtimer_run_queues+0x276/0x4f0 [ 69.260043][ T4567] hrtimer_interrupt+0x261/0x850 [ 69.265002][ T4567] __sysvec_apic_timer_interrupt+0x5f/0x1c0 [ 69.270926][ T4567] sysvec_apic_timer_interrupt+0x6f/0x80 [ 69.276589][ T4567] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 69.282704][ T4567] kcsan_setup_watchpoint+0x404/0x410 [ 69.288108][ T4567] chacha_block_generic+0x2b7/0x310 [ 69.293349][ T4567] get_random_bytes_user+0xf3/0x2b0 [ 69.298570][ T4567] urandom_read_iter+0x26/0x170 [ 69.303459][ T4567] copy_splice_read+0x471/0x6c0 [ 69.308430][ T4567] splice_direct_to_actor+0x26e/0x670 [ 69.313833][ T4567] do_splice_direct+0x119/0x1a0 [ 69.318724][ T4567] do_sendfile+0x382/0x650 [ 69.323248][ T4567] __x64_sys_sendfile64+0x105/0x150 [ 69.328480][ T4567] x64_sys_call+0x2dc4/0x3020 [ 69.333182][ T4567] do_syscall_64+0x12c/0x3b0 [ 69.337810][ T4567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.343717][ T4567] [ 69.346059][ T4567] read to 0xffffffff86c07a00 of 8 bytes by task 4567 on cpu 0: [ 69.354661][ T4567] mem_cgroup_flush_stats_ratelimited+0x29/0x50 [ 69.360940][ T4567] count_shadow_nodes+0x6a/0x250 [ 69.365932][ T4567] do_shrink_slab+0x63/0x660 [ 69.370557][ T4567] shrink_slab+0x545/0x8f0 [ 69.375022][ T4567] shrink_node+0x6d4/0x20a0 [ 69.379558][ T4567] do_try_to_free_pages+0x408/0xc90 [ 69.384789][ T4567] try_to_free_mem_cgroup_pages+0x201/0x420 [ 69.390711][ T4567] try_charge_memcg+0x373/0xa10 [ 69.395596][ T4567] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 69.401180][ T4567] __alloc_frozen_pages_noprof+0x18a/0x350 [ 69.407093][ T4567] alloc_pages_mpol+0xb3/0x260 [ 69.411882][ T4567] alloc_pages_noprof+0x8f/0x140 [ 69.416849][ T4567] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 69.422761][ T4567] __kvmalloc_node_noprof+0x3d4/0x640 [ 69.428155][ T4567] futex_hash_allocate+0x190/0x9a0 [ 69.433308][ T4567] futex_hash_prctl+0xd8/0xf0 [ 69.438017][ T4567] __se_sys_prctl+0x4f4/0x1400 [ 69.442809][ T4567] __x64_sys_prctl+0x67/0x80 [ 69.447423][ T4567] x64_sys_call+0x2533/0x3020 [ 69.452114][ T4567] do_syscall_64+0x12c/0x3b0 [ 69.456732][ T4567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.462649][ T4567] [ 69.464986][ T4567] value changed: 0x00000000ffffa5a1 -> 0x00000000ffffa5a2 [ 69.472110][ T4567] [ 69.474446][ T4567] Reported by Kernel Concurrency Sanitizer on: [ 69.480612][ T4567] CPU: 0 UID: 0 PID: 4567 Comm: syz.3.386 Not tainted syzkaller #0 PREEMPT(full) [ 69.489832][ T4567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 69.499904][ T4567] ================================================================== [ 69.610316][ T4567] syz.3.386 (4567) used greatest stack depth: 8504 bytes left