last executing test programs: 3.894510768s ago: executing program 2 (id=184): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="70000000ffffffffffffaaaaaaaaaabb080043f800f200654000002f"], 0x104) 3.747014087s ago: executing program 2 (id=187): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000030605000000000020000000000000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40010) 3.53219736s ago: executing program 2 (id=190): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x6) fchdir(r1) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@filename='./file0\x00', 0xee01, 0x0) 3.509502831s ago: executing program 2 (id=191): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbbfdb065f649d188a819008100000008004509002000600000092f90780a0107000080000000006558"], 0x36) 3.341040221s ago: executing program 2 (id=193): faccessat(0xffffffffffffffff, 0x0, 0x5) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) 3.314383162s ago: executing program 2 (id=194): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='!', 0x1}], 0x1}, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4008744b, &(0x7f0000000180)) 1.871117228s ago: executing program 4 (id=222): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)=""/79, 0x4f) 1.787079543s ago: executing program 4 (id=223): perf_event_open(&(0x7f0000001000)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x8000, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x4fec, &(0x7f0000000040)={0x0, 0x9086, 0x1c080, 0x7, 0x157}) 1.312490722s ago: executing program 1 (id=229): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r1, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300), 0x8, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 1.249439255s ago: executing program 1 (id=230): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) dup2(r2, r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240), 0x4000, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) connect$unix(r0, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) 1.158201071s ago: executing program 4 (id=234): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x42}, 0x10) sendmsg$tipc(r1, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0xfffd}}, 0x10, 0x0}, 0x0) bind$tipc(r0, 0x0, 0x0) 1.061935647s ago: executing program 0 (id=235): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, &(0x7f00000002c0)) 1.041990838s ago: executing program 4 (id=236): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x8, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) 1.011286099s ago: executing program 0 (id=237): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x14c1e, &(0x7f0000000400)={[{@nomblk_io_submit}, {@nogrpid}, {@bh}]}, 0x1, 0x526, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x50) sendfile(r1, r1, 0x0, 0x800000009) mknod$loop(&(0x7f0000001b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 983.590841ms ago: executing program 4 (id=239): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) flock(r1, 0x2) flock(r1, 0x2) flock(r1, 0x2) 819.458521ms ago: executing program 0 (id=241): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) 781.359403ms ago: executing program 3 (id=242): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @local}, 0x2, 0x0, 0x2}}, 0x26) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b"], 0x3c}}, 0x20000034) 763.590735ms ago: executing program 0 (id=243): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@remote}, 0x14) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000180)={@remote, 0x2, 0x0, 0x2, 0xc, 0x8, 0x1}, 0x17) close(r0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0xa, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) 728.620097ms ago: executing program 0 (id=244): r0 = io_uring_setup(0x516, &(0x7f0000000540)={0x0, 0x7dc6, 0x1, 0x503fa, 0x8100014a}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x7}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = epoll_create1(0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000340)={0x90000019}) close_range(r0, 0xffffffffffffffff, 0x0) 702.438918ms ago: executing program 3 (id=245): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a440000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001800038014000080040001800800034000000001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 660.67406ms ago: executing program 0 (id=246): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x20240, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1182, 0x9b) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 589.781435ms ago: executing program 3 (id=247): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000240)="01", 0x1}], 0x1}, 0x240448c1) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) recvmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40010000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 503.34171ms ago: executing program 3 (id=248): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x7}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 411.567035ms ago: executing program 3 (id=249): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @empty, 0x14}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000c80)="7cff", 0x2, 0x20000814, 0x0, 0x0) shutdown(r0, 0x1) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0xfdef}], 0x1) 393.044227ms ago: executing program 1 (id=250): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = fsopen(&(0x7f00000004c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, &(0x7f00000000c0)='dE\x00', 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xdf9c) 318.331501ms ago: executing program 1 (id=251): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0xc00000100000001, 0xdd5}, 0x1424, 0x0, 0x90000, 0x0, 0x3, 0x7ffffffe, 0x0, 0x0, 0x0, 0x0, 0xc3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = dup2(r0, r0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 211.039117ms ago: executing program 1 (id=252): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 78.474935ms ago: executing program 1 (id=253): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x97, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$inet(0x2, 0x2, 0x1) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x6c6d}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440), 0x56}}], 0x2, 0x2004000) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, 0x0) lgetxattr(0x0, 0x0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) 68.365136ms ago: executing program 4 (id=254): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r2, {0x1, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x401e3a9}]}}]}, 0x3c}}, 0x2) 0s ago: executing program 3 (id=255): syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r1, 0x0, 0x0, 0x4004804, &(0x7f0000000180)={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x3}, 0x1c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.49' (ED25519) to the list of known hosts. [ 34.620529][ T29] audit: type=1400 audit(1769544585.329:62): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 34.645977][ T29] audit: type=1400 audit(1769544585.349:63): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.648454][ T3301] cgroup: Unknown subsys name 'net' [ 34.674420][ T29] audit: type=1400 audit(1769544585.379:64): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.836911][ T3301] cgroup: Unknown subsys name 'cpuset' [ 34.843186][ T3301] cgroup: Unknown subsys name 'rlimit' [ 34.954914][ T29] audit: type=1400 audit(1769544585.659:65): avc: denied { setattr } for pid=3301 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.994046][ T29] audit: type=1400 audit(1769544585.669:66): avc: denied { create } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.014650][ T29] audit: type=1400 audit(1769544585.669:67): avc: denied { write } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.019509][ T3303] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 35.035753][ T29] audit: type=1400 audit(1769544585.669:68): avc: denied { read } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.065376][ T29] audit: type=1400 audit(1769544585.679:69): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 35.090349][ T29] audit: type=1400 audit(1769544585.679:70): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 35.113597][ T29] audit: type=1400 audit(1769544585.689:71): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 35.135436][ T3301] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 37.139557][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 37.149084][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 37.193014][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 37.212403][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 37.221679][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 37.292508][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.299767][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.307053][ T3313] bridge_slave_0: entered allmulticast mode [ 37.313491][ T3313] bridge_slave_0: entered promiscuous mode [ 37.330254][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.337373][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.344596][ T3313] bridge_slave_1: entered allmulticast mode [ 37.351261][ T3313] bridge_slave_1: entered promiscuous mode [ 37.384507][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.391732][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.398966][ T3315] bridge_slave_0: entered allmulticast mode [ 37.405439][ T3315] bridge_slave_0: entered promiscuous mode [ 37.425394][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.439132][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.446372][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.453859][ T3315] bridge_slave_1: entered allmulticast mode [ 37.460422][ T3315] bridge_slave_1: entered promiscuous mode [ 37.483343][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.497423][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.504555][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.512302][ T3317] bridge_slave_0: entered allmulticast mode [ 37.518894][ T3317] bridge_slave_0: entered promiscuous mode [ 37.525428][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.532698][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.539987][ T3318] bridge_slave_0: entered allmulticast mode [ 37.546583][ T3318] bridge_slave_0: entered promiscuous mode [ 37.563255][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.572612][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.579759][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.587262][ T3314] bridge_slave_0: entered allmulticast mode [ 37.593889][ T3314] bridge_slave_0: entered promiscuous mode [ 37.600876][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.608164][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.615475][ T3317] bridge_slave_1: entered allmulticast mode [ 37.622065][ T3317] bridge_slave_1: entered promiscuous mode [ 37.628724][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.635820][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.643238][ T3318] bridge_slave_1: entered allmulticast mode [ 37.650432][ T3318] bridge_slave_1: entered promiscuous mode [ 37.657803][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.677030][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.684222][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.691916][ T3314] bridge_slave_1: entered allmulticast mode [ 37.698480][ T3314] bridge_slave_1: entered promiscuous mode [ 37.729235][ T3313] team0: Port device team_slave_0 added [ 37.745334][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.755641][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.766384][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.776674][ T3313] team0: Port device team_slave_1 added [ 37.783302][ T3315] team0: Port device team_slave_0 added [ 37.790043][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.800138][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.814875][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.833836][ T3314] team0: Port device team_slave_0 added [ 37.840331][ T3315] team0: Port device team_slave_1 added [ 37.860343][ T3314] team0: Port device team_slave_1 added [ 37.886014][ T3317] team0: Port device team_slave_0 added [ 37.897583][ T3317] team0: Port device team_slave_1 added [ 37.903505][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.910485][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.936755][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.947862][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.954824][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.981369][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.993259][ T3318] team0: Port device team_slave_0 added [ 38.009115][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.016298][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.042259][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.053449][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.060453][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.086884][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.098604][ T3318] team0: Port device team_slave_1 added [ 38.107328][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.114541][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.140579][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.159543][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.166601][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.192588][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.214181][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.221179][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.247364][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.263459][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.270485][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.296471][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.314009][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.321110][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.347177][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.363764][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.370840][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.397396][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.442435][ T3313] hsr_slave_0: entered promiscuous mode [ 38.448593][ T3313] hsr_slave_1: entered promiscuous mode [ 38.457355][ T3318] hsr_slave_0: entered promiscuous mode [ 38.463464][ T3318] hsr_slave_1: entered promiscuous mode [ 38.469542][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 38.475277][ T3318] Cannot create hsr debugfs directory [ 38.488018][ T3315] hsr_slave_0: entered promiscuous mode [ 38.494109][ T3315] hsr_slave_1: entered promiscuous mode [ 38.500480][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 38.506361][ T3315] Cannot create hsr debugfs directory [ 38.531855][ T3317] hsr_slave_0: entered promiscuous mode [ 38.538381][ T3317] hsr_slave_1: entered promiscuous mode [ 38.544271][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 38.550253][ T3317] Cannot create hsr debugfs directory [ 38.571419][ T3314] hsr_slave_0: entered promiscuous mode [ 38.577410][ T3314] hsr_slave_1: entered promiscuous mode [ 38.583178][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 38.589064][ T3314] Cannot create hsr debugfs directory [ 38.806784][ T3318] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.816300][ T3318] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.825256][ T3318] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.836642][ T3318] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.862931][ T3313] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.871823][ T3313] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.880997][ T3313] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.889843][ T3313] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.940377][ T3315] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.949796][ T3315] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.958719][ T3315] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.970002][ T3315] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.993487][ T3314] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 39.036907][ T3314] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 39.046086][ T3314] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 39.058767][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.065995][ T3314] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 39.077013][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.106248][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.118934][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.128609][ T3317] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.137988][ T3317] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.149442][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.156598][ T3317] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.176811][ T3317] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.188473][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.195621][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.205784][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.213053][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.223501][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.239580][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.246741][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.261513][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.268598][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.277664][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.284729][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.308624][ T2500] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.315987][ T2500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.335993][ T3313] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.346382][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.385384][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.428514][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.462103][ T3325] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.469840][ T3325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.505272][ T3325] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.512408][ T3325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.538068][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.550337][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.574167][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.582280][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.606222][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.613414][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.629219][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.636556][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.646416][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.745151][ T3313] veth0_vlan: entered promiscuous mode [ 39.788310][ T3313] veth1_vlan: entered promiscuous mode [ 39.809733][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.834251][ T3315] veth0_vlan: entered promiscuous mode [ 39.848532][ T3318] veth0_vlan: entered promiscuous mode [ 39.862881][ T3315] veth1_vlan: entered promiscuous mode [ 39.882850][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.890781][ T3318] veth1_vlan: entered promiscuous mode [ 39.905149][ T3313] veth0_macvtap: entered promiscuous mode [ 39.930441][ T3315] veth0_macvtap: entered promiscuous mode [ 39.941961][ T3313] veth1_macvtap: entered promiscuous mode [ 39.953987][ T3315] veth1_macvtap: entered promiscuous mode [ 39.969631][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.986981][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.996062][ T3318] veth0_macvtap: entered promiscuous mode [ 40.005474][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.020064][ T3318] veth1_macvtap: entered promiscuous mode [ 40.028456][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.048479][ T2500] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.067247][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.084657][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.101384][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.130271][ T3317] veth0_vlan: entered promiscuous mode [ 40.137168][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.152628][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 40.152663][ T29] audit: type=1400 audit(1769544590.859:85): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.uMSpjf/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 40.179413][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.193158][ T29] audit: type=1400 audit(1769544590.899:86): avc: denied { mount } for pid=3315 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 40.228334][ T3317] veth1_vlan: entered promiscuous mode [ 40.243093][ T3314] veth0_vlan: entered promiscuous mode [ 40.248860][ T29] audit: type=1400 audit(1769544590.899:87): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.uMSpjf/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 40.274251][ T29] audit: type=1400 audit(1769544590.899:88): avc: denied { mount } for pid=3315 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 40.277881][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.296342][ T29] audit: type=1400 audit(1769544590.909:89): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.uMSpjf/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 40.309677][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.331771][ T29] audit: type=1400 audit(1769544590.909:90): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.uMSpjf/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=5132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 40.341978][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.368085][ T29] audit: type=1400 audit(1769544590.909:91): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 40.396331][ T29] audit: type=1400 audit(1769544590.929:92): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 40.419271][ T29] audit: type=1400 audit(1769544590.929:93): avc: denied { mount } for pid=3315 comm="syz-executor" name="/" dev="gadgetfs" ino=5133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 40.444508][ T3315] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.466059][ T3317] veth0_macvtap: entered promiscuous mode [ 40.481789][ T29] audit: type=1400 audit(1769544591.179:94): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 40.490978][ T3314] veth1_vlan: entered promiscuous mode [ 40.514469][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.527308][ T3317] veth1_macvtap: entered promiscuous mode [ 40.546487][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.556476][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.575085][ T3314] veth0_macvtap: entered promiscuous mode [ 40.582362][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.595492][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.608029][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.618028][ T3314] veth1_macvtap: entered promiscuous mode [ 40.625131][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.645333][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.661672][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.675014][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.697942][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.719119][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.740917][ T3492] process 'syz.2.3' launched './file1' with NULL argv: empty string added [ 40.758939][ T2500] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.806353][ T2500] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.852351][ T2500] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.873117][ T2500] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.891807][ T2500] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.901967][ T3502] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'. [ 40.913931][ T3502] xfrm1: entered promiscuous mode [ 40.919213][ T3502] xfrm1: entered allmulticast mode [ 40.966695][ T3502] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'. [ 40.986661][ T3502] Zero length message leads to an empty skb [ 41.876900][ T3533] loop1: detected capacity change from 0 to 2048 [ 41.914054][ T3533] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.075071][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.344826][ T3574] loop1: detected capacity change from 0 to 512 [ 42.360097][ T3576] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3576 comm=syz.4.36 [ 42.379746][ T3574] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 42.393069][ T3574] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 42.415484][ T3574] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 42.458497][ T3574] EXT4-fs (loop1): 1 truncate cleaned up [ 42.469003][ T3574] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.484638][ T3579] loop2: detected capacity change from 0 to 1024 [ 42.538412][ T3579] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.576927][ C0] hrtimer: interrupt took 24906 ns [ 42.599254][ T3579] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 42.615693][ T3579] EXT4-fs (loop2): Remounting filesystem read-only [ 42.616101][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.622615][ T3579] EXT4-fs (loop2): error restoring inline_data for inode -- potential data loss! (inode 18, error -30) [ 42.690039][ T3590] syz.3.41 uses obsolete (PF_INET,SOCK_PACKET) [ 42.690929][ T3579] syz.2.37 (3579) used greatest stack depth: 10352 bytes left [ 42.742827][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.814467][ T3605] xt_hashlimit: size too large, truncated to 1048576 [ 43.138266][ T3630] netlink: 24 bytes leftover after parsing attributes in process `syz.4.57'. [ 43.151614][ T3630] netlink: 40 bytes leftover after parsing attributes in process `syz.4.57'. [ 43.233536][ T3637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.61'. [ 43.296307][ T37] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.315402][ T37] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.336838][ T37] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.359056][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.409818][ T3654] netlink: 'syz.1.67': attribute type 1 has an invalid length. [ 43.483151][ T3659] Driver unsupported XDP return value 0 on prog (id 17) dev N/A, expect packet loss! [ 43.597966][ T37] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 43.635679][ T3670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.72'. [ 43.644749][ T3670] netlink: 12 bytes leftover after parsing attributes in process `syz.1.72'. [ 43.658154][ T3670] geneve2: entered promiscuous mode [ 43.663514][ T3670] geneve2: entered allmulticast mode [ 44.435287][ T3692] netlink: 20 bytes leftover after parsing attributes in process `syz.3.81'. [ 44.778650][ T3736] netlink: 'syz.0.94': attribute type 7 has an invalid length. [ 44.808163][ T3736] netlink: 'syz.0.94': attribute type 7 has an invalid length. [ 44.875568][ T3752] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 44.921393][ T3752] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 44.987884][ T3768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.104'. [ 45.133121][ T3774] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 45.153430][ T3783] netlink: 12 bytes leftover after parsing attributes in process `syz.2.111'. [ 45.226952][ T3783] loop2: detected capacity change from 0 to 8192 [ 45.239383][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 45.239398][ T29] audit: type=1400 audit(1769544595.949:241): avc: denied { cpu } for pid=3791 comm="syz.3.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 45.275817][ T29] audit: type=1400 audit(1769544595.979:242): avc: denied { mount } for pid=3782 comm="syz.2.111" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 45.312024][ T29] audit: type=1400 audit(1769544596.019:243): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 45.385598][ T3798] loop3: detected capacity change from 0 to 256 [ 45.395440][ T3798] vfat: Unknown parameter 'codepag¢ès‘³¼]¯e' [ 45.421649][ T29] audit: type=1400 audit(1769544596.119:244): avc: denied { read } for pid=3797 comm="syz.3.117" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 45.445285][ T29] audit: type=1400 audit(1769544596.119:245): avc: denied { open } for pid=3797 comm="syz.3.117" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 45.469531][ T29] audit: type=1400 audit(1769544596.119:246): avc: denied { read } for pid=3799 comm="syz.0.118" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 45.492581][ T29] audit: type=1400 audit(1769544596.119:247): avc: denied { open } for pid=3799 comm="syz.0.118" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 45.516520][ T29] audit: type=1400 audit(1769544596.119:248): avc: denied { ioctl } for pid=3799 comm="syz.0.118" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 45.631621][ T3807] capability: warning: `syz.4.121' uses deprecated v2 capabilities in a way that may be insecure [ 45.643144][ T3807] Falling back ldisc for ttyS3. [ 45.719176][ T29] audit: type=1400 audit(1769544596.429:249): avc: denied { mount } for pid=3816 comm="syz.4.125" name="/" dev="configfs" ino=63 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 45.782491][ T3821] loop4: detected capacity change from 0 to 128 [ 45.792253][ T29] audit: type=1400 audit(1769544596.429:250): avc: denied { search } for pid=3816 comm="syz.4.125" name="/" dev="configfs" ino=63 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 45.832963][ T3821] syz.4.127: attempt to access beyond end of device [ 45.832963][ T3821] loop4: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 45.850323][ T3821] syz.4.127: attempt to access beyond end of device [ 45.850323][ T3821] loop4: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 45.863998][ T3821] Buffer I/O error on dev loop4, logical block 80, lost async page write [ 45.883527][ T3821] syz.4.127: attempt to access beyond end of device [ 45.883527][ T3821] loop4: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 45.908480][ T3826] syz.4.127: attempt to access beyond end of device [ 45.908480][ T3826] loop4: rw=8388608, sector=154, nr_sectors = 2 limit=128 [ 46.091494][ T3844] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3844 comm=syz.2.136 [ 46.293183][ T3853] loop4: detected capacity change from 0 to 128 [ 46.324214][ T3853] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 46.667735][ T3888] loop0: detected capacity change from 0 to 512 [ 46.687926][ T3888] EXT4-fs: Ignoring removed nobh option [ 46.745116][ T3888] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.803387][ T3888] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.910138][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.077211][ T3925] __nla_validate_parse: 2 callbacks suppressed [ 47.077231][ T3925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.158'. [ 47.264406][ T3942] loop0: detected capacity change from 0 to 512 [ 47.284295][ T3942] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.167: invalid indirect mapped block 256 (level 2) [ 47.296574][ T3940] loop7: detected capacity change from 0 to 16384 [ 47.306738][ T3942] EXT4-fs (loop0): 2 truncates cleaned up [ 47.312988][ T3942] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.394222][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.443573][ T3949] loop3: detected capacity change from 0 to 1024 [ 47.467329][ T3949] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.596637][ T3948] loop7: detected capacity change from 16384 to 0 [ 47.635681][ C0] I/O error, dev loop7, sector 2856 op 0x0:(READ) flags 0x80700 phys_seg 30 prio class 2 [ 47.700007][ T3964] netlink: 52 bytes leftover after parsing attributes in process `syz.0.174'. [ 47.728193][ T3964] netlink: 12 bytes leftover after parsing attributes in process `syz.0.174'. [ 47.857353][ T52] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 47.882445][ T52] EXT4-fs (loop3): Remounting filesystem read-only [ 47.891171][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.946541][ T3981] loop1: detected capacity change from 0 to 512 [ 47.967896][ T3981] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 47.996302][ T3981] EXT4-fs (loop1): 1 truncate cleaned up [ 48.004362][ T3981] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.023347][ T3990] loop3: detected capacity change from 0 to 512 [ 48.043270][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.043294][ T3990] EXT4-fs: Ignoring removed mblk_io_submit option [ 48.065335][ T3990] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 48.092145][ T3990] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e028, mo2=0002] [ 48.130533][ T3990] EXT4-fs (loop3): orphan cleanup on readonly fs [ 48.159141][ T3990] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.183: bg 0: block 361: padding at end of block bitmap is not set [ 48.181142][ T3990] EXT4-fs (loop3): Remounting filesystem read-only [ 48.188637][ T3990] EXT4-fs (loop3): 1 truncate cleaned up [ 48.195006][ T3990] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 48.224265][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 48.677697][ T4014] tls_set_device_offload: netdev not found [ 48.908710][ T4028] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 48.993106][ T4033] netlink: 12 bytes leftover after parsing attributes in process `syz.0.203'. [ 49.045544][ T4033] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.087825][ T4033] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.117009][ T4033] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 49.128173][ T4040] netlink: 'syz.3.205': attribute type 3 has an invalid length. [ 49.146603][ T4040] netlink: 'syz.3.205': attribute type 3 has an invalid length. [ 49.156896][ T4033] bond1: (slave gre1): Error -95 calling set_mac_address [ 49.248415][ T4044] netlink: 20 bytes leftover after parsing attributes in process `syz.1.207'. [ 49.326086][ T4050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.210'. [ 49.679408][ T3409] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 49.708425][ T3409] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 49.762773][ T4076] loop1: detected capacity change from 0 to 128 [ 49.807262][ T4076] EXT4-fs: Ignoring removed orlov option [ 49.813029][ T4076] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.819715][ T4076] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.887058][ T4076] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 50.014019][ T4076] ext4 filesystem being mounted at /44/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 50.199091][ T4088] loop0: detected capacity change from 0 to 128 [ 50.220765][ T4088] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 50.252971][ T4088] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.300425][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 50.300443][ T29] audit: type=1400 audit(3917028249.009:342): avc: denied { setattr } for pid=4087 comm="syz.0.224" path="/46/file1/file1" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 50.379316][ T3317] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.432156][ T29] audit: type=1400 audit(3917028249.049:343): avc: denied { ioctl } for pid=4087 comm="syz.0.224" path="/46/file1/file1" dev="loop0" ino=12 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 50.537073][ T3315] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.703242][ T29] audit: type=1400 audit(3917028249.409:344): avc: denied { create } for pid=4112 comm="syz.4.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.722905][ T29] audit: type=1400 audit(3917028249.409:345): avc: denied { bind } for pid=4112 comm="syz.4.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.742432][ T29] audit: type=1400 audit(3917028249.419:346): avc: denied { setopt } for pid=4112 comm="syz.4.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.761835][ T29] audit: type=1400 audit(3917028249.419:347): avc: denied { write } for pid=4112 comm="syz.4.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.817479][ T4118] tls_set_device_offload_rx: netdev not found [ 50.843894][ T4120] loop0: detected capacity change from 0 to 512 [ 50.873125][ T4122] netlink: 'syz.3.238': attribute type 2 has an invalid length. [ 50.876629][ T4120] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.887642][ T4120] EXT4-fs: Ignoring removed bh option [ 50.927186][ T4120] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.940311][ T4120] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.954582][ T29] audit: type=1400 audit(3917028249.659:348): avc: denied { add_name } for pid=4119 comm="syz.0.237" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.995484][ T29] audit: type=1400 audit(3917028249.699:349): avc: denied { watch_reads } for pid=4129 comm="syz.3.240" path="/53" dev="tmpfs" ino=286 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 51.009034][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.096532][ T4136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.242'. [ 51.163510][ T4142] netlink: 4 bytes leftover after parsing attributes in process `syz.3.245'. [ 51.172483][ T4142] netlink: 4 bytes leftover after parsing attributes in process `syz.3.245'. [ 51.199750][ T4144] loop0: detected capacity change from 0 to 1024 [ 51.216731][ T4144] EXT4-fs: Ignoring removed orlov option [ 51.230837][ T4144] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.501574][ T4153] SELinux: failed to load policy [ 51.506933][ T29] audit: type=1400 audit(3917028250.209:350): avc: denied { load_policy } for pid=4152 comm="syz.1.250" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 51.591564][ T29] audit: type=1400 audit(3917028250.239:351): avc: denied { write } for pid=4157 comm="syz.1.251" name="file0" dev="tmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 51.797529][ T2500] ================================================================== [ 51.805847][ T2500] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic [ 51.815340][ T2500] [ 51.817690][ T2500] write to 0xffff88811f4f86b1 of 2 bytes by task 4148 on cpu 0: [ 51.825347][ T2500] copy_folio_from_iter_atomic+0x75f/0x1170 [ 51.831277][ T2500] generic_perform_write+0x2c1/0x490 [ 51.836696][ T2500] ext4_buffered_write_iter+0x1ee/0x3c0 [ 51.842294][ T2500] ext4_file_write_iter+0x380/0xf70 [ 51.847543][ T2500] iter_file_splice_write+0x6bc/0xa80 [ 51.852950][ T2500] direct_splice_actor+0x156/0x2a0 [ 51.858095][ T2500] splice_direct_to_actor+0x311/0x670 [ 51.863500][ T2500] do_splice_direct+0x119/0x1a0 [ 51.868387][ T2500] do_sendfile+0x382/0x650 [ 51.872852][ T2500] __x64_sys_sendfile64+0x105/0x150 [ 51.878091][ T2500] x64_sys_call+0x2db1/0x3000 [ 51.882802][ T2500] do_syscall_64+0xc0/0x2a0 [ 51.887339][ T2500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.893421][ T2500] [ 51.895757][ T2500] read to 0xffff88811f4f8400 of 1024 bytes by task 2500 on cpu 1: [ 51.903923][ T2500] copy_folio_from_iter_atomic+0x75f/0x1170 [ 51.909842][ T2500] generic_perform_write+0x2c1/0x490 [ 51.915172][ T2500] shmem_file_write_iter+0xc5/0xf0 [ 51.920419][ T2500] lo_rw_aio+0x67d/0x730 [ 51.924697][ T2500] loop_process_work+0x56c/0xac0 [ 51.929966][ T2500] loop_workfn+0x31/0x40 [ 51.934244][ T2500] process_scheduled_works+0x4cd/0x9d0 [ 51.939755][ T2500] worker_thread+0x6bc/0x8b0 [ 51.944370][ T2500] kthread+0x488/0x510 [ 51.948476][ T2500] ret_from_fork+0x148/0x280 [ 51.953094][ T2500] ret_from_fork_asm+0x1a/0x30 [ 51.958158][ T2500] [ 51.960497][ T2500] Reported by Kernel Concurrency Sanitizer on: [ 51.966678][ T2500] CPU: 1 UID: 0 PID: 2500 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(voluntary) [ 51.976678][ T2500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 51.986768][ T2500] Workqueue: loop0 loop_workfn [ 51.991671][ T2500] ================================================================== [ 52.212005][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.