last executing test programs: 4.143435868s ago: executing program 2 (id=2790): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x1000) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000002780)) 3.499431076s ago: executing program 4 (id=2799): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) r1 = getuid() syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2860a0, &(0x7f0000000040)={[{@test_dummy_encryption}, {@stripe={'stripe', 0x3d, 0x8}}], [{@smackfsroot={'smackfsroot', 0x3d, 'memory.events.local\x00'}}, {@uid_gt={'uid>', r1}}, {@smackfsdef={'smackfsdef', 0x3d, '#'}}]}, 0x2, 0xbbf, &(0x7f0000000440)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000001040)=0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r2, 0x0, 0x3) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000840)=""/240) 3.308959117s ago: executing program 4 (id=2803): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ftruncate(r1, 0x5) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x10) close(0x3) 3.308523947s ago: executing program 2 (id=2804): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x6}, 0x0, 0xd, 0x53a1bd79, 0x9, 0x8000000000009, 0x86, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000280)=0x482, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRES32=r0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) tgkill(0x0, 0x0, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1012, &(0x7f0000001040)=""/4114}, 0x94) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) msgsnd(0x0, &(0x7f0000000e00)={0x1, "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"}, 0xfd1, 0x0) 3.137354057s ago: executing program 1 (id=2817): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x8031, 0xffffffffffffffff, 0xfdffa000) mlock2(&(0x7f0000914000/0x3000)=nil, 0x3000, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x20e}, &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 3.018634494s ago: executing program 4 (id=2809): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000000007f180100002200000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000bf03000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_BTF_INFO(0xa, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x808e}, 0x40000100) write$cgroup_devices(r3, &(0x7f00000005c0)=ANY=[], 0xfffffeff) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) 2.607413218s ago: executing program 3 (id=2812): timer_create(0x0, 0x0, &(0x7f0000bbdffc)) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f00000008c0), 0x0, 0x482) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) mkdirat(r2, &(0x7f0000000000)='./file0\x00', 0x10e) openat(r2, &(0x7f0000000040)='./file0\x00', 0x111000, 0x59) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2.576341989s ago: executing program 3 (id=2815): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) 2.357993462s ago: executing program 2 (id=2816): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @loopback}, 0x10) r2 = syz_io_uring_setup(0x2b07, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x4, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x133d, 0x0, 0x8, 0x0, 0x0) shutdown(r0, 0x1) 2.254685558s ago: executing program 2 (id=2818): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00'}) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) 2.127202576s ago: executing program 4 (id=2819): bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x5) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x27, 0x2, 0x0, 0x0, 0x0, 0x1, 0x10, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x6}, 0x9005, 0x0, 0x7fa, 0x6}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) open(0x0, 0x64042, 0x1e9) r2 = gettid() rt_sigtimedwait(&(0x7f0000000100)={[0x3ff]}, &(0x7f0000005c80), 0x0, 0x8) tkill(r2, 0x7) sendmsg$nl_route(r0, 0x0, 0x2800804c) 2.126837536s ago: executing program 3 (id=2820): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0xffffffffffffff8d, &(0x7f0000000080)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x48040}, 0x114) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x3, 0x0, {0x2, 0x20, 0xa, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x480d0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0xffffffff, 0x0, {0x2, 0x0, 0x0, 0x4, 0xff, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x9}}}, 0x24}}, 0x0) 2.126161506s ago: executing program 1 (id=2822): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) creat(0x0, 0xf4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x0) timer_settime(r1, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.047630371s ago: executing program 1 (id=2824): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0xda7e, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) poll(&(0x7f00000002c0)=[{r1, 0x2}], 0x1, 0xfa) r3 = dup2(r0, r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r3) poll(&(0x7f0000000080)=[{r3, 0x4000}, {r1, 0x3}], 0x2, 0xffff8001) 2.020135262s ago: executing program 0 (id=2825): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'veth1_virt_wifi\x00', 0x0}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r2, r3, 0x25, 0x4, @val=@tcx}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r4, r6, 0x4, r2}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 1.964401295s ago: executing program 0 (id=2826): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x182) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd24, 0x25dfdb00, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {0x3bcb591a0e14089, 0xfff1}, {0xb, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4881}, 0x4041080) r3 = socket$pptp(0x18, 0x1, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x200400, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) 1.935970047s ago: executing program 3 (id=2827): socket$nl_generic(0x10, 0x3, 0x10) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.896516999s ago: executing program 0 (id=2828): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x2000035e, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000630120000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, 0xf}, 0x94) bpf$MAP_CREATE_CONST_STR(0x5000000, &(0x7f00000000c0), 0x48) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000600), 0x2a) 1.869314751s ago: executing program 0 (id=2829): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000940)={0x1, 'syzkaller0\x00', {}, 0x5262}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000001c0)=0x2, 0x4) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @in={0x2, 0x0, @private=0xc0586300}, @in6={0xa, 0x0, 0x0, @private0}, @in={0x2, 0x4e20, @broadcast}], 0x58) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ppoll(&(0x7f0000000000)=[{r1, 0x2210}], 0x1, 0x0, 0x0, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000000980)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f00000009c0)=0x2c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x538, 0xffffffff, 0xe8, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xff000000, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x270, 0x2b0, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0xe, 0x6, 0x5, 0x9, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 0x1010, 0x11}}, @common=@rt={{0x138}, {0x401, [0xfffffffe], 0xfffffffe, 0x2, 0x3, [@remote, @empty, @remote, @remote, @remote, @mcast1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, @rand_addr=' \x01\x00', @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}], 0x9}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x1, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000005c0)=""/77, 0x4d}], 0x1, &(0x7f0000000800)=[@rdma_dest={0x18, 0x114, 0x2, {0x40, 0x6}}, @rdma_dest={0x18, 0x114, 0x2, {0xfffffffd, 0x8}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000680)=""/132, 0x84}, &(0x7f0000000740), 0x10}}, @rdma_dest={0x18, 0x114, 0x2, {0x2, 0x100}}, @mask_cswp={0x58, 0x114, 0x9, {{0x400, 0x7}, &(0x7f0000000780)=0x8, &(0x7f00000007c0)=0xf, 0x8, 0x0, 0x5, 0x80000001, 0x3f, 0x3}}], 0xd0, 0x4}, 0x80) 1.70352181s ago: executing program 4 (id=2830): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x20e}, &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.70289558s ago: executing program 1 (id=2831): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="06000000040000000300000089"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000380), &(0x7f0000000000), 0x80, r3, 0x0, 0x7}, 0x38) 1.007674171s ago: executing program 0 (id=2832): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f00000001c0)=r3) write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c980128846360864666702c1ffe800000000000"], 0xffdd) 973.752283ms ago: executing program 2 (id=2833): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x196, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8001, @loopback, 0x627bcafb}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0x94fa, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 960.955183ms ago: executing program 4 (id=2834): syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000080)=0x3, 0x4) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e24, 0x4, @loopback={0xfec0ffff00000000}}, 0x1c) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x1) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f00000002c0)={0x40000, 0x0, 0x22}, 0x18) open(&(0x7f0000000100)='./file4\x00', 0x143140, 0x80) 867.952679ms ago: executing program 2 (id=2835): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000340)={0xa, 0x4e22, 0x7, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) 686.8104ms ago: executing program 0 (id=2836): r0 = socket(0x840000000002, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) connect$inet(r0, &(0x7f0000000540)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) 686.3113ms ago: executing program 3 (id=2837): r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, 0x0, 0x0) socket(0x200000000000011, 0x3, 0x0) capset(0x0, 0x0) syz_open_procfs(0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x800000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) mq_timedsend(r1, 0x0, 0x0, 0x485, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) r3 = dup(r2) bind$unix(r3, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) 644.917192ms ago: executing program 3 (id=2838): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000080)={0x2, 0x40, 0x4}, 0x10) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x24) 441.499µs ago: executing program 1 (id=2839): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x7fffffff, 0x739, 0x2}, 0x50) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x200000ea, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 0s ago: executing program 1 (id=2840): bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000009c0)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, 0x0}, 0x20) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) kernel console output (not intermixed with test programs): k_rcv+0x167/0x1720 [ 102.432507][ T5221] ? __kfree_skb+0x109/0x150 [ 102.432530][ T5221] ? nlmon_xmit+0x4f/0x60 [ 102.432574][ T5221] ? consume_skb+0x49/0x140 [ 102.432596][ T5221] ? nlmon_xmit+0x4f/0x60 [ 102.432617][ T5221] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 102.432645][ T5221] ? __dev_queue_xmit+0x139a/0x1f20 [ 102.432671][ T5221] ? __dev_queue_xmit+0x148/0x1f20 [ 102.432703][ T5221] ? ref_tracker_free+0x37d/0x3e0 [ 102.432748][ T5221] ? __netlink_deliver_tap+0x4dc/0x500 [ 102.432814][ T5221] netlink_unicast+0x5c0/0x690 [ 102.432840][ T5221] netlink_sendmsg+0x5c8/0x6f0 [ 102.432869][ T5221] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.432896][ T5221] ____sys_sendmsg+0x5af/0x600 [ 102.433008][ T5221] ___sys_sendmsg+0x195/0x1e0 [ 102.433047][ T5221] __x64_sys_sendmsg+0xd4/0x160 [ 102.433108][ T5221] x64_sys_call+0x194c/0x3020 [ 102.433138][ T5221] do_syscall_64+0x12c/0x370 [ 102.433265][ T5221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.433299][ T5221] RIP: 0033:0x7f8101f1bf79 [ 102.433319][ T5221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.433340][ T5221] RSP: 002b:00007f810096f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.433366][ T5221] RAX: ffffffffffffffda RBX: 00007f8102195fa0 RCX: 00007f8101f1bf79 [ 102.433405][ T5221] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 102.433421][ T5221] RBP: 00007f8101fb27e0 R08: 0000000000000000 R09: 0000000000000000 [ 102.433489][ T5221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.433538][ T5221] R13: 00007f8102196038 R14: 00007f8102195fa0 R15: 00007ffd068aa2f8 [ 102.433625][ T5221] [ 102.433744][ T5221] memory: usage 307200kB, limit 307200kB, failcnt 2301 [ 102.760908][ T5221] memory+swap: usage 106032kB, limit 9007199254740988kB, failcnt 0 [ 102.771421][ T5221] kmem: usage 70592kB, limit 9007199254740988kB, failcnt 0 [ 102.778888][ T5221] Memory cgroup stats for /syz2: [ 102.779095][ T5221] cache 0 [ 102.787432][ T5221] rss 0 [ 102.790240][ T5221] shmem 0 [ 102.793187][ T5221] mapped_file 0 [ 102.796927][ T5221] dirty 0 [ 102.799892][ T5221] writeback 0 [ 102.803320][ T5221] workingset_refault_anon 34 [ 102.808036][ T5221] workingset_refault_file 1220 [ 102.812807][ T5221] swap 25366528 [ 102.816543][ T5221] swapcached 4096 [ 102.820227][ T5221] pgpgin 56667 [ 102.823616][ T5221] pgpgout 56666 [ 102.827298][ T5221] pgfault 69074 [ 102.830762][ T5221] pgmajfault 41 [ 102.834358][ T5221] inactive_anon 0 [ 102.838215][ T5221] active_anon 4096 [ 102.841943][ T5221] inactive_file 0 [ 102.845813][ T5221] active_file 0 [ 102.849283][ T5221] unevictable 0 [ 102.852780][ T5221] hierarchical_memory_limit 314572800 [ 102.858412][ T5221] hierarchical_memsw_limit 9223372036854771712 [ 102.864719][ T5221] total_cache 0 [ 102.868442][ T5221] total_rss 0 [ 102.871739][ T5221] total_shmem 0 [ 102.875390][ T5221] total_mapped_file 0 [ 102.879416][ T5221] total_dirty 0 [ 102.882889][ T5221] total_writeback 0 [ 102.886808][ T5221] total_workingset_refault_anon 34 [ 102.892049][ T5221] total_workingset_refault_file 1220 [ 102.897448][ T5221] total_swap 25366528 [ 102.901492][ T5221] total_swapcached 4096 [ 102.905874][ T5221] total_pgpgin 56667 [ 102.909781][ T5221] total_pgpgout 56666 [ 102.913779][ T5221] total_pgfault 69074 [ 102.917937][ T5221] total_pgmajfault 41 [ 102.921927][ T5221] total_inactive_anon 0 [ 102.926277][ T5221] total_active_anon 4096 [ 102.930540][ T5221] total_inactive_file 0 [ 102.934843][ T5221] total_active_file 0 [ 102.938868][ T5221] total_unevictable 0 [ 102.942856][ T5221] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.621,pid=5220,uid=0 [ 102.957601][ T5221] Memory cgroup out of memory: Killed process 5220 (syz.2.621) total-vm:96336kB, anon-rss:1348kB, file-rss:22188kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:0 [ 103.052047][ T5274] netlink: 24 bytes leftover after parsing attributes in process `syz.4.646'. [ 103.148587][ T28] audit: type=1400 audit(1770914883.038:408): avc: denied { read } for pid=5285 comm="syz.4.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 103.430302][ T28] audit: type=1400 audit(1770914883.318:409): avc: denied { connect } for pid=5292 comm="syz.3.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 103.509975][ T5278] loop0: detected capacity change from 0 to 1024 [ 103.586724][ T5278] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 103.596893][ T5278] System zones: 0-1, 3-36 [ 103.610322][ T5278] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.643: bad orphan inode 134217728 [ 103.633747][ T5278] loop0: lost filesystem error report for type 5 error -117 [ 103.644900][ T28] audit: type=1400 audit(1770914883.538:410): avc: denied { mount } for pid=5298 comm="syz.1.654" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 103.645000][ T5278] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.713241][ T28] audit: type=1400 audit(1770914883.598:411): avc: denied { ioctl } for pid=5301 comm="syz.1.655" path="socket:[11506]" dev="sockfs" ino=11506 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 103.949308][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.468503][ T5354] netlink: 28 bytes leftover after parsing attributes in process `syz.4.672'. [ 107.551004][ T5360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.675'. [ 107.579025][ T5360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.675'. [ 107.664557][ T28] audit: type=1400 audit(1770914887.548:412): avc: denied { read } for pid=5368 comm="syz.1.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 107.768251][ T28] audit: type=1400 audit(1770914887.658:413): avc: denied { setopt } for pid=5377 comm="syz.1.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 107.832779][ T5353] loop0: detected capacity change from 0 to 1024 [ 107.873202][ T28] audit: type=1400 audit(1770914887.758:414): avc: denied { read write } for pid=5384 comm="syz.4.687" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 107.898129][ T3381] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 107.930314][ T28] audit: type=1400 audit(1770914887.758:415): avc: denied { open } for pid=5384 comm="syz.4.687" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 107.994530][ T3381] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 108.001964][ T3381] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 108.004358][ T5353] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 108.014565][ T3381] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 108.030193][ T5353] System zones: 0-1, 3-36 [ 108.034514][ T3381] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 108.064568][ T3381] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 108.076682][ T5353] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.671: bad orphan inode 134217728 [ 108.094491][ T3381] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 108.102044][ T3381] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 108.110092][ T5353] loop0: lost filesystem error report for type 5 error -117 [ 108.122139][ T3381] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 108.139806][ T5353] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.160889][ T3381] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 108.177813][ T3381] hid-generic 0103:0004:0000.0001: hidraw0: HID v0.02 Device [syz0] on syz1 [ 108.243919][ T5390] fido_id[5390]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 108.272189][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.403188][ T5404] netlink: 'syz.0.690': attribute type 1 has an invalid length. [ 108.430119][ T5404] 8021q: adding VLAN 0 to HW filter on device bond5 [ 108.450213][ T5404] vlan3: entered promiscuous mode [ 108.456201][ T5404] bond5: entered promiscuous mode [ 108.473083][ T5404] bond5: (slave geneve2): making interface the new active one [ 108.480726][ T5404] geneve2: entered promiscuous mode [ 108.487825][ T5404] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 108.500803][ T30] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.518848][ T30] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.541091][ T30] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.615928][ T30] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.647342][ T3425] hid-generic 0103:0004:0000.0002: hidraw0: HID v0.02 Device [syz0] on syz1 [ 108.938045][ T5439] loop0: detected capacity change from 0 to 1024 [ 108.958313][ T5439] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 108.995762][ T5439] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8800e019, mo2=0000] [ 109.040904][ T5439] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 2: comm syz.0.705: lblock 2 mapped to illegal pblock 2 (length 1) [ 109.054936][ T5439] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 109.055112][ T5439] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 109.082254][ T5439] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 48: comm syz.0.705: lblock 0 mapped to illegal pblock 48 (length 1) [ 109.116013][ T5439] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 109.116183][ T5439] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 109.163295][ T5439] EXT4-fs error (device loop0): ext4_acquire_dquot:6998: comm syz.0.705: Failed to acquire dquot type 0 [ 109.193997][ T5439] loop0: lost filesystem error report for type 5 error -117 [ 109.201738][ T5439] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 109.220511][ T5439] loop0: lost filesystem error report for type 5 error -117 [ 109.220707][ T5439] EXT4-fs error (device loop0): ext4_evict_inode:253: inode #11: comm syz.0.705: mark_inode_dirty error [ 109.320381][ T5439] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 109.320591][ T5439] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 109.344498][ T5439] EXT4-fs (loop0): 1 orphan inode deleted [ 109.350883][ T5439] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.370882][ T1396] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 109.385410][ T1396] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 109.393895][ T1396] EXT4-fs error (device loop0): ext4_release_dquot:7034: comm kworker/u8:6: Failed to release dquot type 0 [ 109.502377][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.515173][ T3318] EXT4-fs error (device loop0): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 109.556516][ T3318] loop0: lost filesystem error report for type 5 error -117 [ 109.563905][ T3318] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 109.589697][ T5445] netlink: 32 bytes leftover after parsing attributes in process `syz.2.708'. [ 109.614209][ T3318] loop0: lost filesystem error report for type 5 error -117 [ 109.614412][ T3318] EXT4-fs error (device loop0): ext4_quota_off:7282: inode #3: comm syz-executor: mark_inode_dirty error [ 109.655983][ T3318] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 109.658498][ T5449] netlink: 'syz.2.710': attribute type 1 has an invalid length. [ 109.677738][ T5447] netlink: 131740 bytes leftover after parsing attributes in process `syz.1.709'. [ 109.700939][ T5449] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.723357][ T5449] vlan3: entered promiscuous mode [ 109.728682][ T5449] bond1: entered promiscuous mode [ 109.729994][ T5447] netlink: zone id is out of range [ 109.745051][ T5449] bond1: (slave geneve2): making interface the new active one [ 109.752673][ T5449] geneve2: entered promiscuous mode [ 109.754821][ T5447] netlink: zone id is out of range [ 109.759773][ T5449] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 109.776122][ T5447] netlink: zone id is out of range [ 109.784947][ T5447] netlink: zone id is out of range [ 109.804793][ T5447] netlink: zone id is out of range [ 109.810904][ T5447] netlink: zone id is out of range [ 109.817196][ T5447] netlink: zone id is out of range [ 109.823336][ T5447] netlink: zone id is out of range [ 109.830592][ T5447] netlink: del zone limit has 8 unknown bytes [ 109.957723][ T28] audit: type=1326 audit(1770914889.838:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5466 comm="syz.1.716" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f66d09cbf79 code=0x0 [ 109.969686][ T5465] netlink: 131740 bytes leftover after parsing attributes in process `syz.0.725'. [ 109.994129][ T5465] netlink: zone id is out of range [ 110.050122][ T28] audit: type=1400 audit(1770914889.928:417): avc: denied { name_bind } for pid=5474 comm="syz.2.720" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 110.336337][ T5491] netlink: 12 bytes leftover after parsing attributes in process `syz.3.724'. [ 110.353688][ T28] audit: type=1400 audit(1770914890.238:418): avc: denied { write } for pid=5487 comm="syz.0.723" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 110.378973][ T5491] vlan3: entered promiscuous mode [ 110.384084][ T5491] syz_tun: entered promiscuous mode [ 110.467584][ T5498] netlink: 'syz.3.728': attribute type 11 has an invalid length. [ 110.619226][ T5511] netlink: 131740 bytes leftover after parsing attributes in process `syz.2.732'. [ 111.022259][ T5504] loop3: detected capacity change from 0 to 512 [ 111.425689][ T5534] netlink: 28 bytes leftover after parsing attributes in process `syz.0.742'. [ 111.990448][ T5555] netlink: 14 bytes leftover after parsing attributes in process `syz.3.750'. [ 112.008082][ T5555] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 112.025082][ T5555] team0 (unregistering): Port device team_slave_0 removed [ 112.049849][ T5555] team0 (unregistering): Failed to send options change via netlink (err -105) [ 112.071832][ T5555] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 112.118899][ T5555] team0 (unregistering): Port device team_slave_1 removed [ 112.141182][ T5562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.751'. [ 112.417159][ T5580] loop0: detected capacity change from 0 to 512 [ 112.438733][ T5580] msdos: Unknown parameter 'wZ~3㞝RJ' [ 113.329288][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 113.329373][ T28] audit: type=1400 audit(2000000002.670:421): avc: denied { create } for pid=5596 comm="syz.4.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 113.357162][ T5599] af_packet: tpacket_rcv: packet too big, clamped from 65536 to 3952. macoff=96 [ 113.425556][ T28] audit: type=1400 audit(2000000002.700:422): avc: denied { write } for pid=5596 comm="syz.4.775" path="socket:[13085]" dev="sockfs" ino=13085 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 113.586134][ T28] audit: type=1400 audit(2000000002.930:423): avc: denied { block_suspend } for pid=5605 comm="syz.4.768" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 114.048532][ T5615] loop1: detected capacity change from 0 to 512 [ 114.237344][ T5615] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.771: couldn't read orphan inode 26 (err -116) [ 114.445144][ T5615] loop1: lost filesystem error report for type 5 error -116 [ 114.445738][ T5615] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.476827][ T5615] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.514874][ T5622] loop4: detected capacity change from 0 to 256 [ 114.551466][ T28] audit: type=1400 audit(2000000003.890:424): avc: denied { write } for pid=5614 comm="syz.1.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 114.603755][ T5626] netlink: 14 bytes leftover after parsing attributes in process `syz.0.774'. [ 114.634859][ T5626] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 114.646599][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.665019][ T5626] team0 (unregistering): Port device team_slave_0 removed [ 114.690955][ T5626] team0 (unregistering): Failed to send options change via netlink (err -105) [ 114.724584][ T5626] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 114.751171][ T5626] team0 (unregistering): Port device team_slave_1 removed [ 114.869538][ T5639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.900713][ T5639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.098379][ T28] audit: type=1400 audit(2000000004.440:425): avc: denied { ioctl } for pid=5642 comm="syz.0.784" path="socket:[11961]" dev="sockfs" ino=11961 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 115.185312][ T5645] netlink: 28 bytes leftover after parsing attributes in process `syz.0.785'. [ 115.680434][ T5655] loop1: detected capacity change from 0 to 256 [ 115.892830][ T5664] loop1: detected capacity change from 0 to 512 [ 115.918589][ T5664] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 115.942354][ T5649] loop0: detected capacity change from 0 to 1024 [ 115.961269][ T5664] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #17: comm syz.1.792: inode has both inline data and extents flags [ 115.980525][ T5664] loop1: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 115.996033][ T5664] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.792: couldn't read orphan inode 17 (err -117) [ 116.026861][ T5649] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 116.031872][ T5664] loop1: lost filesystem error report for type 5 error -117 [ 116.038801][ T5664] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.065468][ T5649] System zones: 0-1, 3-36 [ 116.085330][ T5664] Quota error (device loop1): do_check_range: Getting block 144 out of range 0-5 [ 116.108307][ T5649] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.796: bad orphan inode 134217728 [ 116.120097][ T5649] loop0: lost filesystem error report for type 5 error -117 [ 116.143587][ T5649] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.175391][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.329374][ T5687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.402481][ T5687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.561332][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.606710][ T5689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.621476][ T5689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.798439][ T28] audit: type=1400 audit(2000000006.140:426): avc: denied { bind } for pid=5694 comm="syz.0.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 116.822201][ T5695] tipc: Failed to remove unknown binding: 66,0,0/0:1863524626/1863524627 [ 116.831239][ T5695] tipc: Failed to remove unknown binding: 66,0,0/0:1863524626/1863524627 [ 117.315421][ T5702] xt_l2tp: v2 tid > 0xffff: 37482740 [ 117.448079][ T5704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.807'. [ 117.545429][ T5709] loop1: detected capacity change from 0 to 2048 [ 117.654975][ T5709] loop1: p1 < > p4 [ 117.659704][ T5709] loop1: p4 size 8388608 extends beyond EOD, truncated [ 117.730540][ T5706] EXT4-fs (loop1p1): unable to read superblock [ 117.861092][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 117.872688][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 118.779534][ T28] audit: type=1400 audit(2000000008.110:427): avc: denied { create } for pid=5733 comm="syz.4.816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 119.083699][ T5739] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 120.939437][ T5749] loop3: detected capacity change from 0 to 512 [ 120.954850][ T5749] EXT4-fs: Ignoring removed oldalloc option [ 120.972206][ T5749] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 120.992633][ T5749] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #11: comm syz.3.823: corrupted in-inode xattr: invalid ea_ino [ 121.024463][ T5749] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 121.024775][ T5749] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.823: couldn't read orphan inode 11 (err -117) [ 121.075524][ T5749] loop3: lost filesystem error report for type 5 error -117 [ 121.078127][ T5749] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.167535][ T28] audit: type=1400 audit(2000000010.510:428): avc: denied { mounton } for pid=5746 comm="syz.3.823" path="/160/file1" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 122.093568][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.313643][ T5783] process 'syz.3.833' launched './file0' with NULL argv: empty string added [ 122.324911][ T28] audit: type=1400 audit(2000000011.670:429): avc: denied { execute_no_trans } for pid=5780 comm="syz.3.833" path="/161/file0" dev="tmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 122.855390][ T28] audit: type=1400 audit(2000000012.190:430): avc: denied { execute } for pid=5794 comm="syz.3.839" path="/file1" dev="ramfs" ino=13483 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 123.558633][ T5810] netlink: 20 bytes leftover after parsing attributes in process `syz.2.847'. [ 123.603569][ T5810] ip6gre2: entered promiscuous mode [ 123.612938][ T5810] ip6gre2: entered allmulticast mode [ 123.632269][ T5810] netlink: 'syz.2.847': attribute type 6 has an invalid length. [ 123.650186][ T5810] netlink: 72 bytes leftover after parsing attributes in process `syz.2.847'. [ 123.780700][ T28] audit: type=1400 audit(2000000013.120:431): avc: denied { append } for pid=5805 comm="syz.4.844" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 124.124179][ T5830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.133905][ T5830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.205874][ T5830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.854'. [ 124.281632][ T28] audit: type=1326 audit(2000000013.620:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5833 comm="syz.2.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8101f1bf79 code=0x7ffc0000 [ 124.315881][ T28] audit: type=1326 audit(2000000013.620:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5833 comm="syz.2.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8101f1bf79 code=0x7ffc0000 [ 124.341886][ T28] audit: type=1326 audit(2000000013.620:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5833 comm="syz.2.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8101f1bf79 code=0x7ffc0000 [ 124.366717][ T28] audit: type=1326 audit(2000000013.620:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5833 comm="syz.2.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8101edc84e code=0x7ffc0000 [ 124.390740][ T28] audit: type=1326 audit(2000000013.620:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5833 comm="syz.2.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8101f1bf79 code=0x7ffc0000 [ 124.414825][ T28] audit: type=1326 audit(2000000013.620:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5833 comm="syz.2.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8101f1bf79 code=0x7ffc0000 [ 124.432643][ T5840] loop1: detected capacity change from 0 to 2048 [ 124.438552][ T28] audit: type=1326 audit(2000000013.620:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5833 comm="syz.2.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8101f1bf79 code=0x7ffc0000 [ 124.477909][ T28] audit: type=1326 audit(2000000013.620:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5833 comm="syz.2.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8101f1bf79 code=0x7ffc0000 [ 124.501226][ T28] audit: type=1326 audit(2000000013.620:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5833 comm="syz.2.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8101f1bf79 code=0x7ffc0000 [ 124.502946][ T5840] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.524990][ T28] audit: type=1326 audit(2000000013.620:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5833 comm="syz.2.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8101f1bf79 code=0x7ffc0000 [ 124.570540][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.940837][ T5864] netlink: 12 bytes leftover after parsing attributes in process `syz.1.868'. [ 125.147265][ T5871] loop1: detected capacity change from 0 to 1024 [ 125.156712][ T5871] EXT4-fs: Ignoring removed orlov option [ 125.181906][ T5871] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.225450][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.369456][ T5885] loop1: detected capacity change from 0 to 2048 [ 125.386093][ T5885] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.398930][ T5885] ext4 filesystem being mounted at /193/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.472624][ T5892] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.885: bg 0: block 345: padding at end of block bitmap is not set [ 125.492479][ T5892] EXT4-fs (loop1): Remounting filesystem read-only [ 125.568449][ T30] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 125.624192][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.127142][ T5915] netlink: 12 bytes leftover after parsing attributes in process `syz.4.886'. [ 126.322822][ T5918] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 126.338420][ T5918] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 127.380804][ T5941] netlink: 12 bytes leftover after parsing attributes in process `syz.2.893'. [ 127.805656][ T5957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.898'. [ 128.525599][ T5969] loop0: detected capacity change from 0 to 512 [ 128.532327][ T5969] EXT4-fs: Ignoring removed oldalloc option [ 128.552158][ T5969] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 128.570337][ T5969] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #11: comm syz.0.904: corrupted in-inode xattr: invalid ea_ino [ 128.583808][ T5969] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 128.584235][ T5969] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.904: couldn't read orphan inode 11 (err -117) [ 128.605545][ T5969] loop0: lost filesystem error report for type 5 error -117 [ 128.607595][ T5969] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.958180][ T5984] netlink: 'syz.3.910': attribute type 1 has an invalid length. [ 129.065582][ T5984] netlink: 28 bytes leftover after parsing attributes in process `syz.3.910'. [ 129.091577][ T5984] 8021q: adding VLAN 0 to HW filter on device bond2 [ 129.169047][ T5999] netlink: 4 bytes leftover after parsing attributes in process `syz.3.915'. [ 129.624123][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.928521][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 129.928552][ T28] audit: type=1326 audit(2000000019.260:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6021 comm="syz.2.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8101f1bf79 code=0x7ffc0000 [ 129.967111][ T6029] batadv_slave_1: entered promiscuous mode [ 130.061190][ T6029] pimreg: entered allmulticast mode [ 130.068720][ T6029] pimreg: left allmulticast mode [ 130.084651][ T6032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.923'. [ 130.087024][ T28] audit: type=1326 audit(2000000019.260:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6021 comm="syz.2.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8101f1bf79 code=0x7ffc0000 [ 130.144717][ T28] audit: type=1326 audit(2000000019.260:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6021 comm="syz.2.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8101f1bf79 code=0x7ffc0000 [ 130.168227][ T28] audit: type=1326 audit(2000000019.260:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6021 comm="syz.2.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8101f1bf79 code=0x7ffc0000 [ 130.193954][ T28] audit: type=1326 audit(2000000019.260:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6021 comm="syz.2.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8101f1bf79 code=0x7ffc0000 [ 130.217666][ T28] audit: type=1326 audit(2000000019.260:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6021 comm="syz.2.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f8101f1bf79 code=0x7ffc0000 [ 130.241148][ T28] audit: type=1326 audit(2000000019.260:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6021 comm="syz.2.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8101f1bf79 code=0x7ffc0000 [ 130.264714][ T28] audit: type=1326 audit(2000000019.260:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6021 comm="syz.2.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8101f1bf79 code=0x7ffc0000 [ 130.288530][ T28] audit: type=1326 audit(2000000019.260:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6021 comm="syz.2.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f8101f1bf79 code=0x7ffc0000 [ 130.312145][ T6026] batadv_slave_1: left promiscuous mode [ 130.318193][ T28] audit: type=1326 audit(2000000019.260:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6021 comm="syz.2.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8101f1bf79 code=0x7ffc0000 [ 131.804750][ T6078] netlink: 4 bytes leftover after parsing attributes in process `syz.3.944'. [ 132.033758][ T6093] loop0: detected capacity change from 0 to 512 [ 132.101933][ T6093] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.142903][ T6093] ext4 filesystem being mounted at /180/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.207579][ T6093] EXT4-fs (loop0): shut down requested (0) [ 132.237948][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.933016][ T6145] loop3: detected capacity change from 0 to 512 [ 132.968035][ T6145] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.980697][ T6145] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.003405][ T6145] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 133.092981][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.347419][ T6157] loop0: detected capacity change from 0 to 512 [ 133.495068][ T6157] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.974: invalid indirect mapped block 256 (level 2) [ 133.508727][ T6157] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 133.509012][ T6157] EXT4-fs (loop0): 2 truncates cleaned up [ 133.525335][ T6157] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.542378][ T6157] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.974: bg 0: block 5: invalid block bitmap [ 133.555235][ T6157] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 133.567678][ T6157] EXT4-fs (loop0): This should not happen!! Data will be lost [ 133.567678][ T6157] [ 133.577549][ T6157] EXT4-fs (loop0): Total free blocks count 0 [ 133.583973][ T6157] EXT4-fs (loop0): Free/Dirty block details [ 133.614858][ T6157] EXT4-fs (loop0): free_blocks=0 [ 133.621704][ T6157] EXT4-fs (loop0): dirty_blocks=10 [ 133.627219][ T6157] EXT4-fs (loop0): Block reservation details [ 133.633265][ T6157] EXT4-fs (loop0): i_reserved_data_blocks=10 [ 133.754661][ T30] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 7 with error 28 [ 134.140587][ T30] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.149922][ T30] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.163465][ T30] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.183638][ T30] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.366230][ T3382] IPVS: starting estimator thread 0... [ 134.465365][ T6197] IPVS: using max 2160 ests per chain, 108000 per kthread [ 134.629775][ T6212] netlink: 24 bytes leftover after parsing attributes in process `syz.2.995'. [ 134.677861][ T6215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.687675][ T6215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.845249][ T6220] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6220 comm=syz.2.995 [ 135.155858][ T6228] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1000'. [ 135.271745][ T6228] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6228 comm=syz.0.1000 [ 135.361587][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 135.361604][ T28] audit: type=1400 audit(2000000280.706:547): avc: denied { write } for pid=6230 comm="syz.0.1001" path="socket:[15411]" dev="sockfs" ino=15411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 135.532293][ T28] audit: type=1400 audit(2000000280.876:548): avc: denied { read } for pid=6232 comm="syz.0.1002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 135.824621][ T28] audit: type=1400 audit(2000000281.146:549): avc: denied { getopt } for pid=6242 comm="syz.1.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 136.745349][ T6261] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 137.643579][ T3425] Process accounting resumed [ 137.993537][ T28] audit: type=1400 audit(2000000283.336:550): avc: denied { sqpoll } for pid=6305 comm="syz.4.1025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 138.064491][ T28] audit: type=1400 audit(2000000283.346:551): avc: denied { connect } for pid=6305 comm="syz.4.1025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 138.104478][ T28] audit: type=1400 audit(2000000283.346:552): avc: denied { write } for pid=6305 comm="syz.4.1025" path="socket:[15548]" dev="sockfs" ino=15548 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 138.166927][ T6310] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1026'. [ 138.178142][ T28] audit: type=1400 audit(2000000283.356:553): avc: denied { read } for pid=6305 comm="syz.4.1025" path="socket:[15547]" dev="sockfs" ino=15547 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 138.206320][ T6310] netlink: 3074 bytes leftover after parsing attributes in process `syz.2.1026'. [ 138.222219][ T28] audit: type=1400 audit(2000000283.406:554): avc: denied { ioctl } for pid=6305 comm="syz.4.1025" path="socket:[15548]" dev="sockfs" ino=15548 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 138.274671][ T28] audit: type=1400 audit(2000000283.596:555): avc: denied { getopt } for pid=6311 comm="syz.3.1027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 138.569073][ T6327] loop4: detected capacity change from 0 to 1024 [ 138.608490][ T6327] EXT4-fs: Ignoring removed orlov option [ 138.668884][ T6327] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.869588][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.662292][ T6355] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -17959, delta: 1 [ 139.671288][ T6355] ref_ctr increment failed for inode: 0x42c offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888104dfb600 [ 139.683668][ T6354] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -17959, delta: -1 [ 139.693619][ T6354] ref_ctr decrement failed for inode: 0x42c offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888104dfb600 [ 139.705193][ T6354] uprobe: syz.0.1040:6354 failed to unregister, leaking uprobe [ 140.023986][ T6370] tipc: Failed to remove unknown binding: 66,0,0/0:840901361/840901363 [ 140.034654][ T28] audit: type=1326 audit(2000000285.366:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6372 comm="syz.4.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6515bf79 code=0x7ffc0000 [ 140.067310][ T6370] tipc: Failed to remove unknown binding: 66,0,0/0:840901361/840901362 [ 140.078999][ T6376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1049'. [ 140.109136][ T6370] tipc: Failed to remove unknown binding: 66,0,0/0:840901361/840901363 [ 140.133698][ T6370] tipc: Failed to remove unknown binding: 66,0,0/0:840901361/840901362 [ 140.144671][ T6378] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1050'. [ 140.334512][ T6387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1054'. [ 140.374586][ T6387] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1054'. [ 140.596117][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 140.596134][ T28] audit: type=1400 audit(2000000285.946:586): avc: denied { bind } for pid=6396 comm="syz.0.1057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 140.624383][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 140.633650][ T28] audit: type=1400 audit(2000000285.966:587): avc: denied { setopt } for pid=6396 comm="syz.0.1057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 141.245012][ T28] audit: type=1400 audit(2000000286.596:588): avc: denied { mounton } for pid=6412 comm="syz.2.1064" path="/216/file0" dev="tmpfs" ino=1141 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 141.418788][ T28] audit: type=1400 audit(2000000286.736:589): avc: denied { mount } for pid=6423 comm="syz.3.1068" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 142.219020][ T6442] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6442 comm=syz.1.1076 [ 142.290025][ T6445] loop3: detected capacity change from 0 to 256 [ 142.402181][ T6450] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1080'. [ 142.451139][ T6450] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6450 comm=syz.3.1080 [ 142.560724][ T28] audit: type=1326 audit(2000000287.906:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6464 comm="syz.2.1086" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8101f1bf79 code=0x0 [ 142.674994][ T3972] Bluetooth: hci0: command 0x1003 tx timeout [ 142.681058][ T3572] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 142.971849][ T28] audit: type=1400 audit(2000000288.296:591): avc: denied { write } for pid=6470 comm="syz.0.1087" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 143.354313][ T6479] loop4: detected capacity change from 0 to 512 [ 143.370094][ T6479] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 143.415349][ T6479] EXT4-fs (loop4): 1 truncate cleaned up [ 143.421538][ T6479] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.611821][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.662981][ T28] audit: type=1326 audit(2000000289.006:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6502 comm="syz.4.1098" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f6515bf79 code=0x0 [ 143.887652][ T6509] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1101'. [ 143.897495][ T6517] netlink: 2020 bytes leftover after parsing attributes in process `syz.0.1103'. [ 143.906863][ T6517] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1103'. [ 144.130539][ T6527] loop1: detected capacity change from 0 to 512 [ 144.197787][ T6532] netlink: 400 bytes leftover after parsing attributes in process `syz.3.1109'. [ 144.233901][ T6527] ------------[ cut here ]------------ [ 144.239684][ T6527] EA inode 11 i_nlink=2 [ 144.239698][ T6527] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.1.1107/6527 [ 144.255101][ T6527] Modules linked in: [ 144.259331][ T6527] CPU: 0 UID: 0 PID: 6527 Comm: syz.1.1107 Not tainted syzkaller #0 PREEMPT(full) [ 144.268950][ T6527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 144.279541][ T6527] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 144.286741][ T6527] Code: e4 3e 9a ff 4c 8d 2d 5d d9 3d 05 49 8d 7e 40 e8 c4 a7 b6 ff 49 8b 6e 40 4c 89 e7 e8 f8 a2 b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 8f fb d2 03 66 66 66 66 66 66 2e [ 144.307034][ T6527] RSP: 0018:ffffc90010a1b778 EFLAGS: 00010246 [ 144.315331][ T6527] RAX: ffff888104bd1aa8 RBX: ffff8881087b0a68 RCX: ffffffff81beb228 [ 144.335571][ T6527] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86fc8b70 [ 144.344221][ T6527] RBP: 000000000000000b R08: 00018881087b0a1b R09: 0000000000000000 [ 144.353570][ T6527] R10: ffffc90010a1b6a8 R11: 0001c90010a1b6a8 R12: ffff8881087b0a18 [ 144.363519][ T6527] R13: ffffffff86fc8b70 R14: ffff8881087b09d0 R15: 0000000000000001 [ 144.374565][ T6527] FS: 00007f66cf4276c0(0000) GS:ffff8882aeb3c000(0000) knlGS:0000000000000000 [ 144.383741][ T6527] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 144.391972][ T6527] CR2: 0000000034747865 CR3: 00000001293f4000 CR4: 00000000003506f0 [ 144.403840][ T6527] DR0: 0000000000007fff DR1: 0000000000000000 DR2: 0000000000000000 [ 144.412751][ T6527] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 144.421362][ T6527] Call Trace: [ 144.425979][ T6527] [ 144.429359][ T6527] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 144.436490][ T6527] ? errseq_check+0x2c/0x50 [ 144.441912][ T6527] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 144.449399][ T6527] ? ext4_truncate+0x92b/0xad0 [ 144.455390][ T6527] ext4_evict_inode+0xa1f/0xd40 [ 144.460892][ T6527] ? __pfx_ext4_evict_inode+0x10/0x10 [ 144.467089][ T6527] evict+0x2af/0x510 [ 144.471220][ T6527] ? iput+0x68/0x580 [ 144.475750][ T6527] iput+0x41a/0x580 [ 144.480052][ T6527] ext4_process_orphan+0x1a9/0x1c0 [ 144.486070][ T6527] ext4_orphan_cleanup+0x6a8/0xa00 [ 144.492031][ T6527] ext4_fill_super+0x3476/0x3800 [ 144.498333][ T6527] ? set_blocksize+0x19e/0x2c0 [ 144.504161][ T6527] ? setup_bdev_super+0x30e/0x370 [ 144.510032][ T6527] ? __pfx_ext4_fill_super+0x10/0x10 [ 144.520740][ T6527] get_tree_bdev_flags+0x291/0x300 [ 144.528013][ T6527] ? __pfx_ext4_fill_super+0x10/0x10 [ 144.534102][ T6527] get_tree_bdev+0x1f/0x30 [ 144.539411][ T6527] ext4_get_tree+0x1c/0x30 [ 144.545078][ T6527] vfs_get_tree+0x57/0x1d0 [ 144.550171][ T6527] do_new_mount+0x288/0x8d0 [ 144.555358][ T6527] path_mount+0x4d0/0xbc0 [ 144.560252][ T6527] __se_sys_mount+0x28c/0x2e0 [ 144.565461][ T6527] __x64_sys_mount+0x67/0x80 [ 144.570793][ T6527] x64_sys_call+0x2d61/0x3020 [ 144.576015][ T6527] do_syscall_64+0x12c/0x370 [ 144.580850][ T6527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.587231][ T6527] RIP: 0033:0x7f66d09cd20a [ 144.580854][ T28] audit: type=1401 audit(2000000289.916:593): op=setxattr invalid_context=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 [ 144.592401][ T6527] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.592452][ T6527] RSP: 002b:00007f66cf426e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 144.592811][ T6527] RAX: ffffffffffffffda RBX: 00007f66cf426ee0 RCX: 00007f66d09cd20a [ 144.592958][ T6527] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f66cf426ea0 [ 144.685176][ T6527] RBP: 00002000000009c0 R08: 00007f66cf426ee0 R09: 0000000000800718 [ 144.740520][ T6527] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 144.749717][ T6527] R13: 00007f66cf426ea0 R14: 000000000000048d R15: 0000200000000200 [ 144.759370][ T6527] [ 144.762831][ T6527] ---[ end trace 0000000000000000 ]--- [ 144.781090][ T6527] EXT4-fs (loop1): 1 orphan inode deleted [ 144.901321][ T6527] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.007329][ T6554] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1118'. [ 145.039622][ T6554] x_tables: duplicate underflow at hook 2 [ 145.047689][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.587195][ T6581] tipc: Failed to remove unknown binding: 66,0,0/0:3807579192/3807579194 [ 145.595752][ T6581] tipc: Failed to remove unknown binding: 66,0,0/0:3807579192/3807579193 [ 145.686593][ T28] audit: type=1404 audit(2000000291.036:594): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 145.738318][ T28] audit: type=1400 audit(2000000291.086:595): avc: denied { map_read map_write } for pid=6566 comm="syz.3.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 145.832854][ T28] audit: type=1400 audit(2000000291.176:596): avc: denied { open } for pid=6585 comm="syz.2.1131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 145.896262][ T28] audit: type=1400 audit(2000000291.206:597): avc: denied { open } for pid=6585 comm="syz.2.1131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 145.929268][ T28] audit: type=1400 audit(2000000291.206:598): avc: denied { prog_load } for pid=6585 comm="syz.2.1131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 145.983107][ T28] audit: type=1400 audit(2000000291.236:599): avc: denied { allowed } for pid=6587 comm="syz.2.1132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 146.038672][ T28] audit: type=1400 audit(2000000291.246:600): avc: denied { prog_load } for pid=6587 comm="syz.2.1132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 146.080177][ T28] audit: type=1400 audit(2000000291.246:601): avc: denied { prog_load } for pid=6587 comm="syz.2.1132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 146.134289][ T28] audit: type=1400 audit(2000000291.246:602): avc: denied { open } for pid=6587 comm="syz.2.1132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 146.187223][ T6601] netlink: 'syz.0.1138': attribute type 1 has an invalid length. [ 146.205261][ T28] audit: type=1400 audit(2000000291.276:603): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 146.285389][ T6601] bond6: entered promiscuous mode [ 146.324568][ T6601] 8021q: adding VLAN 0 to HW filter on device bond6 [ 146.444516][ T6560] syz.4.1122 (6560) used greatest stack depth: 4472 bytes left [ 146.463415][ T6608] bond6: (slave bridge4): making interface the new active one [ 146.491735][ T6608] bridge4: entered promiscuous mode [ 146.519114][ T6608] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 148.417224][ T6746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1199'. [ 148.445819][ T6746] team1: entered promiscuous mode [ 148.454601][ T6746] team1: entered allmulticast mode [ 148.463613][ T6748] netlink: 'syz.4.1200': attribute type 10 has an invalid length. [ 148.504709][ T6748] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 148.599429][ T6752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1203'. [ 148.781154][ T6778] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1214'. [ 149.093417][ T6801] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1225'. [ 149.152023][ T6801] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1225'. [ 149.612548][ T6844] netlink: 'syz.1.1244': attribute type 4 has an invalid length. [ 149.637981][ T6844] netlink: 'syz.1.1244': attribute type 4 has an invalid length. [ 149.703599][ T6849] netlink: 'syz.1.1246': attribute type 1 has an invalid length. [ 149.728519][ T6849] 8021q: adding VLAN 0 to HW filter on device bond3 [ 149.738078][ T6849] bond3: entered allmulticast mode [ 149.751059][ T6849] bond3: (slave ip6gretap2): making interface the new active one [ 149.759047][ T6849] ip6gretap2: entered allmulticast mode [ 149.765977][ T6849] bond3: (slave ip6gretap2): Enslaving as an active interface with an up link [ 149.788125][ T6856] net_ratelimit: 17 callbacks suppressed [ 149.788142][ T6856] IPVS: sh: FWM 3 0x00000003 - no destination available [ 150.136406][ T6885] veth0_to_team: entered promiscuous mode [ 150.721355][ T28] kauditd_printk_skb: 828 callbacks suppressed [ 150.721411][ T28] audit: type=1400 audit(2000000552.062:1384): avc: denied { read write } for pid=3317 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 150.794581][ T6936] netlink: 'syz.1.1285': attribute type 4 has an invalid length. [ 150.818562][ T6936] netlink: 'syz.1.1285': attribute type 4 has an invalid length. [ 150.914819][ T28] audit: type=1400 audit(2000000552.262:1385): avc: denied { prog_load } for pid=6937 comm="syz.2.1286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 150.988894][ T28] audit: type=1400 audit(2000000552.292:1386): avc: denied { read write } for pid=3317 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 151.034328][ T28] audit: type=1400 audit(2000000552.302:1387): avc: denied { open } for pid=6940 comm="syz.1.1287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 151.409260][ T28] audit: type=1400 audit(2000000552.752:1388): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 151.769953][ T28] audit: type=1400 audit(2000000553.112:1389): avc: denied { allowed } for pid=6949 comm="syz.2.1289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 151.850083][ T28] audit: type=1400 audit(2000000553.112:1390): avc: denied { prog_load } for pid=6949 comm="syz.2.1289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 151.930304][ T28] audit: type=1400 audit(2000000553.172:1391): avc: denied { create } for pid=6951 comm="syz.2.1290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 151.986513][ T6954] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 151.993786][ T6954] IPv6: NLM_F_CREATE should be set when creating new route [ 152.014046][ T28] audit: type=1400 audit(2000000553.172:1392): avc: denied { allowed } for pid=6951 comm="syz.2.1290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 152.055430][ T28] audit: type=1400 audit(2000000553.302:1393): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 152.121626][ T6963] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1295'. [ 152.176341][ T6945] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check. [ 152.212680][ T6963] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6963 comm=syz.0.1295 [ 153.446240][ T7030] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1323'. [ 153.475068][ T7030] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7030 comm=syz.3.1323 [ 153.571151][ T7045] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 154.820103][ T7111] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1355'. [ 154.837536][ T7111] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7111 comm=syz.0.1355 [ 155.448781][ T7144] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 155.827220][ T28] kauditd_printk_skb: 387 callbacks suppressed [ 155.827237][ T28] audit: type=1400 audit(2000000557.172:1781): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 155.884534][ T28] audit: type=1400 audit(2000000557.212:1782): avc: denied { read write } for pid=3317 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 155.933354][ T28] audit: type=1400 audit(2000000557.222:1783): avc: denied { open } for pid=7153 comm="syz.0.1373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 155.953560][ T28] audit: type=1400 audit(2000000557.222:1784): avc: denied { open } for pid=7155 comm="syz.1.1374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 156.020606][ T28] audit: type=1400 audit(2000000557.232:1785): avc: denied { prog_load } for pid=7153 comm="syz.0.1373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 156.060233][ T28] audit: type=1400 audit(2000000557.232:1786): avc: denied { read write } for pid=3317 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 156.108507][ T28] audit: type=1400 audit(2000000557.232:1787): avc: denied { open } for pid=7157 comm="syz.1.1375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 156.160804][ T28] audit: type=1400 audit(2000000557.242:1788): avc: denied { prog_load } for pid=7157 comm="syz.1.1375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 156.212470][ T28] audit: type=1400 audit(2000000557.242:1789): avc: denied { create } for pid=7157 comm="syz.1.1375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 156.238084][ T28] audit: type=1400 audit(2000000557.252:1790): avc: denied { read write } for pid=3317 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 156.532990][ T7189] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1387'. [ 156.786381][ T7201] serio: Serial port ttyS3 [ 156.876428][ T7205] syz.0.1392 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 158.209395][ T7257] bond4: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 158.220395][ T7257] bond4 (unregistering): Released all slaves [ 158.538430][ T7281] netlink: 'syz.1.1422': attribute type 10 has an invalid length. [ 158.576053][ T7281] team0: Port device dummy0 added [ 159.343180][ T7323] bridge0: entered allmulticast mode [ 159.349202][ T7323] bridge_slave_1: left allmulticast mode [ 159.354965][ T7323] bridge_slave_1: left promiscuous mode [ 159.364508][ T7323] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.079395][ T7323] bridge_slave_0: left allmulticast mode [ 160.094444][ T7323] bridge_slave_0: left promiscuous mode [ 160.105191][ T7323] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.178073][ T7339] netlink: 'syz.1.1447': attribute type 4 has an invalid length. [ 160.218444][ T7347] netlink: 'syz.3.1449': attribute type 10 has an invalid length. [ 160.438097][ T7360] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 160.438097][ T7360] The task syz.4.1452 (7360) triggered the difference, watch for misbehavior. [ 160.981495][ T28] kauditd_printk_skb: 336 callbacks suppressed [ 160.981514][ T28] audit: type=1400 audit(2000000562.322:2127): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 161.014756][ T28] audit: type=1400 audit(2000000562.362:2128): avc: denied { allowed } for pid=7361 comm="syz.0.1453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 161.052661][ T28] audit: type=1400 audit(2000000562.382:2129): avc: denied { allowed } for pid=7361 comm="syz.0.1453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 161.073268][ T28] audit: type=1400 audit(2000000562.382:2130): avc: denied { prog_load } for pid=7361 comm="syz.0.1453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 161.109282][ T28] audit: type=1400 audit(2000000562.382:2131): avc: denied { map_create } for pid=7361 comm="syz.0.1453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 161.129199][ T28] audit: type=1400 audit(2000000562.392:2132): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 161.153800][ T28] audit: type=1400 audit(2000000562.442:2133): avc: denied { create } for pid=7363 comm="syz.0.1454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=0 [ 161.193244][ T28] audit: type=1400 audit(2000000562.442:2134): avc: denied { prog_load } for pid=7365 comm="syz.2.1466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 161.212789][ T28] audit: type=1400 audit(2000000562.442:2135): avc: denied { prog_load } for pid=7365 comm="syz.2.1466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 161.236652][ T28] audit: type=1400 audit(2000000562.442:2136): avc: denied { create } for pid=7363 comm="syz.0.1454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 161.258722][ T7374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1460'. [ 161.280962][ T7374] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 161.288241][ T7374] IPv6: NLM_F_CREATE should be set when creating new route [ 161.296902][ T7374] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 161.304518][ T7374] IPv6: NLM_F_CREATE should be set when creating new route [ 161.942922][ T7387] netlink: 'syz.4.1464': attribute type 10 has an invalid length. [ 161.955591][ T7387] team0: Device dummy0 is of different type [ 162.227186][ T7408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1484'. [ 162.264123][ T7408] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 162.271403][ T7408] IPv6: NLM_F_CREATE should be set when creating new route [ 162.281085][ T7408] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 162.288635][ T7408] IPv6: NLM_F_CREATE should be set when creating new route [ 162.326899][ T7417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1489'. [ 162.606189][ T7447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1490'. [ 162.620930][ T7447] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 162.628776][ T7447] IPv6: NLM_F_CREATE should be set when creating new route [ 162.636857][ T7447] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 162.644150][ T7447] IPv6: NLM_F_CREATE should be set when creating new route [ 162.674139][ T7451] netlink: 'syz.0.1503': attribute type 1 has an invalid length. [ 162.747547][ T7451] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 162.766614][ T7451] bond7: (slave batadv1): making interface the new active one [ 162.784746][ T7451] bond7: (slave batadv1): Enslaving as an active interface with an up link [ 162.805328][ T7455] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1503'. [ 162.829518][ T7455] 8021q: adding VLAN 0 to HW filter on device bond7 [ 162.963052][ T7458] netlink: 'syz.0.1493': attribute type 10 has an invalid length. [ 165.994579][ T28] kauditd_printk_skb: 408 callbacks suppressed [ 165.994595][ T28] audit: type=1400 audit(2000000567.342:2545): avc: denied { read write } for pid=3311 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 166.041962][ T28] audit: type=1400 audit(2000000567.372:2546): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 166.130730][ T28] audit: type=1400 audit(2000000567.382:2547): avc: denied { allowed } for pid=7627 comm="syz.0.1575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 166.150651][ T28] audit: type=1400 audit(2000000567.382:2548): avc: denied { prog_load } for pid=7629 comm="syz.3.1565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 166.185754][ T28] audit: type=1400 audit(2000000567.382:2549): avc: denied { prog_load } for pid=7629 comm="syz.3.1565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 166.205291][ T28] audit: type=1400 audit(2000000567.382:2550): avc: denied { open } for pid=7629 comm="syz.3.1565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 166.225052][ T28] audit: type=1400 audit(2000000567.382:2551): avc: denied { create } for pid=7629 comm="syz.3.1565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=0 [ 166.246633][ T28] audit: type=1400 audit(2000000567.382:2552): avc: denied { create } for pid=7629 comm="syz.3.1565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 166.267943][ T28] audit: type=1400 audit(2000000567.412:2553): avc: denied { read write } for pid=3311 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 166.296309][ T28] audit: type=1400 audit(2000000567.412:2554): avc: denied { prog_load } for pid=7627 comm="syz.0.1575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 166.581732][ T7668] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1580'. [ 166.613054][ T7668] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7668 comm=syz.0.1580 [ 166.804924][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.813913][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.831575][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.847555][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.090390][ T3382] Process accounting resumed [ 169.035414][ T3425] Process accounting resumed [ 170.748698][ T3425] Process accounting resumed [ 171.005451][ T28] kauditd_printk_skb: 370 callbacks suppressed [ 171.005470][ T28] audit: type=1400 audit(2000000828.354:2925): avc: denied { prog_load } for pid=7873 comm="syz.0.1671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 171.031346][ T28] audit: type=1400 audit(2000000828.354:2926): avc: denied { prog_load } for pid=7873 comm="syz.0.1671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 171.051059][ T28] audit: type=1400 audit(2000000828.354:2927): avc: denied { open } for pid=7875 comm="syz.1.1661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 171.070920][ T28] audit: type=1400 audit(2000000828.354:2928): avc: denied { create } for pid=7875 comm="syz.1.1661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 171.091610][ T28] audit: type=1400 audit(2000000828.354:2929): avc: denied { create } for pid=7875 comm="syz.1.1661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 171.127108][ T28] audit: type=1400 audit(2000000828.354:2930): avc: denied { create } for pid=7875 comm="syz.1.1661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 171.148839][ T28] audit: type=1400 audit(2000000828.354:2931): avc: denied { create } for pid=7875 comm="syz.1.1661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 171.169717][ T28] audit: type=1400 audit(2000000828.354:2932): avc: denied { create } for pid=7875 comm="syz.1.1661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 171.190580][ T28] audit: type=1400 audit(2000000828.364:2933): avc: denied { read write } for pid=3317 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 171.227209][ T28] audit: type=1400 audit(2000000828.374:2934): avc: denied { open } for pid=7877 comm="syz.1.1662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 171.519231][ T7887] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1667'. [ 171.586924][ T7887] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7887 comm=syz.2.1667 [ 171.917300][ T7910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1675'. [ 171.947777][ T7910] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1675'. [ 171.958334][ T3416] Process accounting resumed [ 172.177849][ T7928] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1682'. [ 173.810483][ T8047] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1730'. [ 175.918175][ T8114] netlink: 'syz.1.1756': attribute type 1 has an invalid length. [ 175.980213][ T8114] bond4: entered promiscuous mode [ 175.994647][ T8114] 8021q: adding VLAN 0 to HW filter on device bond4 [ 176.011412][ T8116] bond4: (slave bridge6): making interface the new active one [ 176.019022][ T28] kauditd_printk_skb: 357 callbacks suppressed [ 176.019041][ T28] audit: type=1400 audit(2000000833.354:3292): avc: denied { name_bind } for pid=8118 comm="syz.4.1757" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 176.030238][ T8116] bridge6: entered promiscuous mode [ 176.065768][ T28] audit: type=1400 audit(2000000833.374:3293): avc: denied { mounton } for pid=8117 comm="syz.0.1770" path="/361/file0" dev="tmpfs" ino=1903 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 176.088924][ T28] audit: type=1400 audit(2000000833.374:3294): avc: denied { remount } for pid=8117 comm="syz.0.1770" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=0 [ 176.109221][ T28] audit: type=1400 audit(2000000833.374:3295): avc: denied { create } for pid=8117 comm="syz.0.1770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=0 [ 176.131822][ T8116] bond4: (slave bridge6): Enslaving as an active interface with an up link [ 176.179111][ T28] audit: type=1400 audit(2000000833.524:3296): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 176.225594][ T28] audit: type=1400 audit(2000000833.554:3297): avc: denied { read write } for pid=3317 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 176.271068][ T28] audit: type=1400 audit(2000000833.564:3298): avc: denied { prog_load } for pid=8124 comm="syz.0.1772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 176.290275][ T28] audit: type=1400 audit(2000000833.564:3299): avc: denied { prog_load } for pid=8124 comm="syz.0.1772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 176.309531][ T28] audit: type=1400 audit(2000000833.564:3300): avc: denied { open } for pid=8123 comm="syz.1.1758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 176.344594][ T28] audit: type=1400 audit(2000000833.564:3301): avc: denied { open } for pid=8124 comm="syz.0.1772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 176.593460][ T8154] netlink: 'syz.3.1774': attribute type 1 has an invalid length. [ 176.609799][ T8154] bond3: entered promiscuous mode [ 176.615259][ T8154] 8021q: adding VLAN 0 to HW filter on device bond3 [ 176.641067][ T8154] bond3: (slave bridge6): making interface the new active one [ 176.648739][ T8154] bridge6: entered promiscuous mode [ 176.655403][ T8154] bond3: (slave bridge6): Enslaving as an active interface with an up link [ 178.264326][ T8196] netlink: 'syz.2.1790': attribute type 10 has an invalid length. [ 178.288160][ T8196] team0: Device dummy0 is of different type [ 178.331535][ T8209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1808'. [ 178.356177][ T8209] team0: entered promiscuous mode [ 178.365528][ T8209] team0: entered allmulticast mode [ 178.409489][ T8221] netlink: 'syz.2.1800': attribute type 1 has an invalid length. [ 178.427968][ T8221] bond2: entered promiscuous mode [ 178.433358][ T8221] 8021q: adding VLAN 0 to HW filter on device bond2 [ 178.455306][ T8221] bond2: (slave bridge5): making interface the new active one [ 178.462883][ T8221] bridge5: entered promiscuous mode [ 178.469609][ T8221] bond2: (slave bridge5): Enslaving as an active interface with an up link [ 179.247322][ T8251] netlink: 'syz.3.1813': attribute type 10 has an invalid length. [ 179.499625][ T8261] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1818'. [ 179.518365][ T8261] team0: entered promiscuous mode [ 179.525153][ T8261] team0: entered allmulticast mode [ 179.719258][ T8287] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 180.495618][ T8294] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1836'. [ 180.536234][ T8294] team1: entered promiscuous mode [ 180.557129][ T8294] team1: entered allmulticast mode [ 181.211852][ T28] kauditd_printk_skb: 273 callbacks suppressed [ 181.211871][ T28] audit: type=1400 audit(2000000838.554:3575): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 181.264687][ T28] audit: type=1400 audit(2000000838.584:3576): avc: denied { open } for pid=8316 comm="syz.2.1844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 181.284327][ T28] audit: type=1326 audit(2000000838.594:3577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8316 comm="syz.2.1844" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8101f1bf79 code=0x0 [ 181.307417][ T28] audit: type=1400 audit(2000000838.594:3578): avc: denied { allowed } for pid=8319 comm="syz.3.1845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 181.326828][ T28] audit: type=1400 audit(2000000838.604:3579): avc: denied { prog_load } for pid=8319 comm="syz.3.1845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 181.346083][ T28] audit: type=1400 audit(2000000838.614:3580): avc: denied { read write } for pid=3311 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 181.371184][ T28] audit: type=1400 audit(2000000838.614:3581): avc: denied { prog_load } for pid=8321 comm="syz.0.1843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 181.390904][ T28] audit: type=1400 audit(2000000838.614:3582): avc: denied { prog_load } for pid=8321 comm="syz.0.1843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 181.410232][ T28] audit: type=1400 audit(2000000838.614:3583): avc: denied { open } for pid=8321 comm="syz.0.1843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 181.429919][ T28] audit: type=1400 audit(2000000838.714:3584): avc: denied { allowed } for pid=8316 comm="syz.2.1844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 181.468316][ T8327] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1848'. [ 181.468728][ T8329] netlink: 'syz.4.1849': attribute type 4 has an invalid length. [ 181.506603][ T8327] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1848'. [ 181.521003][ T8332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1853'. [ 181.538050][ T8332] team1: entered promiscuous mode [ 181.543251][ T8332] team1: entered allmulticast mode [ 182.136798][ T8363] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1866'. [ 182.161941][ T8363] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1866'. [ 182.218308][ T8369] netlink: 'syz.0.1868': attribute type 1 has an invalid length. [ 182.244107][ T8369] 8021q: adding VLAN 0 to HW filter on device bond8 [ 182.253808][ T8373] team0 (unregistering): Port device ip6gre1 removed [ 182.271026][ T8369] bond8: entered allmulticast mode [ 182.287415][ T8378] veth0_to_team: entered promiscuous mode [ 182.306497][ T8369] bond8: (slave ip6gretap1): making interface the new active one [ 182.330312][ T8369] ip6gretap1: entered allmulticast mode [ 182.351150][ T8369] bond8: (slave ip6gretap1): Enslaving as an active interface with an up link [ 183.056593][ T8396] bridge0: entered allmulticast mode [ 183.066781][ T8396] bridge_slave_1: left allmulticast mode [ 183.077028][ T8396] bridge_slave_1: left promiscuous mode [ 183.087960][ T8396] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.103453][ T8396] bridge_slave_0: left allmulticast mode [ 183.114483][ T8396] bridge_slave_0: left promiscuous mode [ 183.127680][ T8396] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.304733][ T8401] netlink: 'syz.0.1883': attribute type 4 has an invalid length. [ 183.329560][ T8401] netlink: 'syz.0.1883': attribute type 4 has an invalid length. [ 183.418004][ T8407] veth0_to_team: entered promiscuous mode [ 183.543020][ T8417] team0 (unregistering): Port device team_slave_0 removed [ 183.567852][ T8417] team0 (unregistering): Port device team_slave_1 removed [ 183.591774][ T8417] team0 (unregistering): Port device dummy0 removed [ 183.859433][ T8435] bridge0: entered allmulticast mode [ 183.871394][ T8435] bond0: (slave bridge0): Releasing backup interface [ 185.387306][ T8474] team0 (unregistering): Port device ip6gre1 removed [ 185.428782][ T8474] veth0_to_team: entered promiscuous mode [ 185.739077][ T8493] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1921'. [ 185.844064][ T8493] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8493 comm=syz.2.1921 [ 186.214768][ T28] kauditd_printk_skb: 510 callbacks suppressed [ 186.214786][ T28] audit: type=1400 audit(2000001099.556:4095): avc: denied { prog_load } for pid=8504 comm="syz.3.1926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 186.264492][ T28] audit: type=1400 audit(2000001099.576:4096): avc: denied { create } for pid=8504 comm="syz.3.1926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 186.359599][ T28] audit: type=1400 audit(2000001099.666:4097): avc: denied { create } for pid=8504 comm="syz.3.1926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 186.414444][ T28] audit: type=1400 audit(2000001099.666:4098): avc: denied { create } for pid=8504 comm="syz.3.1926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 186.466693][ T28] audit: type=1400 audit(2000001099.676:4099): avc: denied { read write } for pid=3311 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 186.534447][ T28] audit: type=1400 audit(2000001099.686:4100): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 186.577440][ T28] audit: type=1400 audit(2000001099.726:4101): avc: denied { create } for pid=8508 comm="syz.0.1937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=0 [ 186.624501][ T8519] netlink: 'syz.4.1931': attribute type 4 has an invalid length. [ 186.632742][ T28] audit: type=1400 audit(2000001099.726:4102): avc: denied { allowed } for pid=8508 comm="syz.0.1937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 186.652368][ T8519] netlink: 'syz.4.1931': attribute type 4 has an invalid length. [ 186.687505][ T3312] audit: audit_backlog=65 > audit_backlog_limit=64 [ 186.694155][ T3312] audit: audit_lost=17 audit_rate_limit=0 audit_backlog_limit=64 [ 187.279573][ T8553] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 187.825199][ T8574] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1955'. [ 187.857062][ T8574] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8574 comm=syz.3.1955 [ 187.880869][ T8580] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 188.273899][ T8603] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1976'. [ 188.299724][ T8603] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8603 comm=syz.1.1976 [ 189.807147][ T8637] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1984'. [ 189.827662][ T8637] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8637 comm=syz.2.1984 [ 190.914815][ T8686] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2005'. [ 191.020280][ T8701] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 191.069288][ T8705] bond9: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 191.080273][ T8705] bond9 (unregistering): Released all slaves [ 191.276039][ T28] kauditd_printk_skb: 605 callbacks suppressed [ 191.276075][ T28] audit: type=1400 audit(2000001104.616:4707): avc: denied { block_suspend } for pid=8710 comm="syz.0.2015" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 191.336330][ T28] audit: type=1400 audit(2000001104.616:4708): avc: denied { block_suspend } for pid=8710 comm="syz.0.2015" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 191.384510][ T28] audit: type=1400 audit(2000001104.706:4709): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 191.608228][ T28] audit: type=1400 audit(2000001104.946:4710): avc: denied { create } for pid=8718 comm="syz.0.2028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 191.660041][ T28] audit: type=1400 audit(2000001104.946:4711): avc: denied { create } for pid=8718 comm="syz.0.2028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 191.684457][ T28] audit: type=1400 audit(2000001104.976:4712): avc: denied { map_create } for pid=8722 comm="syz.2.2017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 191.708290][ T28] audit: type=1400 audit(2000001104.976:4713): avc: denied { create } for pid=8722 comm="syz.2.2017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=0 [ 191.728248][ T28] audit: type=1400 audit(2000001104.976:4714): avc: denied { allowed } for pid=8722 comm="syz.2.2017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 191.748744][ T28] audit: type=1400 audit(2000001104.976:4715): avc: denied { create } for pid=8722 comm="syz.2.2017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 191.778686][ T28] audit: type=1400 audit(2000001104.986:4716): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 191.895148][ T8733] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2020'. [ 191.916480][ T8733] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8733 comm=syz.2.2020 [ 192.050995][ T8746] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 193.327047][ T8771] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2036'. [ 193.346996][ T8771] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8771 comm=syz.4.2036 [ 193.530991][ T8784] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2052'. [ 193.553373][ T8784] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8784 comm=syz.3.2052 [ 194.970548][ T8830] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2061'. [ 195.023337][ T8834] netlink: 'syz.0.2063': attribute type 1 has an invalid length. [ 195.041699][ T8834] netlink: 15334 bytes leftover after parsing attributes in process `syz.0.2063'. [ 197.553506][ T28] kauditd_printk_skb: 194 callbacks suppressed [ 197.553538][ T28] audit: type=1400 audit(2000001110.886:4911): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 197.592078][ T28] audit: type=1400 audit(2000001110.926:4912): avc: denied { create } for pid=8840 comm="syz.4.2066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 197.620346][ T28] audit: type=1400 audit(2000001110.926:4913): avc: denied { create } for pid=8840 comm="syz.4.2066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 197.640469][ T28] audit: type=1400 audit(2000001110.926:4914): avc: denied { module_request } for pid=8840 comm="syz.4.2066" kmod="netdev-team0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 197.663219][ T28] audit: type=1400 audit(2000001110.926:4915): avc: denied { sys_module } for pid=8840 comm="syz.4.2066" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 197.684353][ T28] audit: type=1400 audit(2000001110.936:4916): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 197.709484][ T28] audit: type=1400 audit(2000001110.946:4917): avc: denied { create } for pid=8841 comm="syz.2.2068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 197.729879][ T28] audit: type=1400 audit(2000001110.946:4918): avc: denied { create } for pid=8841 comm="syz.2.2068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=0 [ 197.764557][ T28] audit: type=1400 audit(2000001110.946:4919): avc: denied { name_bind } for pid=8848 comm="syz.0.2076" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 197.786637][ T28] audit: type=1400 audit(2000001110.946:4920): avc: denied { name_bind } for pid=8848 comm="syz.0.2076" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 198.460979][ T3425] IPVS: starting estimator thread 0... [ 198.563312][ T8900] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2089'. [ 198.582642][ T8889] IPVS: using max 2448 ests per chain, 122400 per kthread [ 198.614088][ T8906] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8906 comm=syz.4.2089 [ 199.511761][ T8935] xt_TPROXY: Can be used only with -p tcp or -p udp [ 199.937252][ T3425] IPVS: starting estimator thread 0... [ 200.044521][ T8960] IPVS: using max 2352 ests per chain, 117600 per kthread [ 200.687793][ T8980] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8980 comm=syz.3.2122 [ 200.700566][ T8980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2122'. [ 201.607078][ T35] IPVS: starting estimator thread 0... [ 201.635609][ T8999] netlink: 'syz.4.2128': attribute type 29 has an invalid length. [ 201.664695][ T8999] netlink: 'syz.4.2128': attribute type 29 has an invalid length. [ 201.693707][ T9006] xt_TPROXY: Can be used only with -p tcp or -p udp [ 201.724725][ T8997] IPVS: using max 2496 ests per chain, 124800 per kthread [ 201.733546][ T9005] bridge0: entered promiscuous mode [ 201.739143][ T9005] macvtap1: entered promiscuous mode [ 201.755940][ T9005] macvtap1: entered allmulticast mode [ 201.761352][ T9005] bridge0: entered allmulticast mode [ 201.793629][ T9005] bridge0: port 1(macvtap1) entered blocking state [ 201.814500][ T9005] bridge0: port 1(macvtap1) entered disabled state [ 201.824950][ T9005] bridge0: left allmulticast mode [ 201.830060][ T9005] bridge0: left promiscuous mode [ 202.365328][ T9031] netlink: 'syz.0.2151': attribute type 30 has an invalid length. [ 202.386398][ T3425] IPVS: starting estimator thread 0... [ 202.408800][ T9040] xt_TPROXY: Can be used only with -p tcp or -p udp [ 202.474483][ T9034] IPVS: using max 2448 ests per chain, 122400 per kthread [ 202.509095][ T9054] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2152'. [ 202.561899][ T28] kauditd_printk_skb: 358 callbacks suppressed [ 202.561918][ T28] audit: type=1400 audit(2000001115.896:5279): avc: denied { read write } for pid=3317 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 202.592580][ T28] audit: type=1400 audit(2000001115.916:5280): avc: denied { allowed } for pid=9061 comm="syz.1.2155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 202.614331][ T28] audit: type=1400 audit(2000001115.936:5281): avc: denied { open } for pid=9061 comm="syz.1.2155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 202.647879][ T9068] netlink: 'syz.4.2159': attribute type 30 has an invalid length. [ 202.661592][ T28] audit: type=1400 audit(2000001115.936:5282): avc: denied { read write } for pid=3317 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 202.689359][ T28] audit: type=1400 audit(2000001115.956:5283): avc: denied { open } for pid=9063 comm="syz.1.2157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 202.709108][ T28] audit: type=1400 audit(2000001115.966:5284): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 202.733771][ T28] audit: type=1400 audit(2000001115.986:5285): avc: denied { mounton } for pid=9063 comm="syz.1.2157" path="/proc/1108/task" dev="proc" ino=24379 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=0 [ 202.756937][ T28] audit: type=1400 audit(2000001115.986:5286): avc: denied { create } for pid=9067 comm="syz.4.2159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 202.816224][ T28] audit: type=1400 audit(2000001115.986:5287): avc: denied { prog_load } for pid=9067 comm="syz.4.2159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 202.835721][ T28] audit: type=1400 audit(2000001115.986:5288): avc: denied { create } for pid=9067 comm="syz.4.2159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 202.860449][ T9072] xt_TPROXY: Can be used only with -p tcp or -p udp [ 202.915313][ T9082] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2165'. [ 203.070771][ T9100] netlink: 'syz.3.2172': attribute type 30 has an invalid length. [ 203.352920][ T9111] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2179'. [ 203.449293][ T9119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2185'. [ 203.557859][ T9133] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2191'. [ 203.765013][ T9149] syzkaller0: entered promiscuous mode [ 203.770642][ T9149] syzkaller0: entered allmulticast mode [ 203.910124][ T9155] syzkaller0: entered promiscuous mode [ 203.915923][ T9155] syzkaller0: entered allmulticast mode [ 207.119131][ T9237] syzkaller0: entered promiscuous mode [ 207.125952][ T9237] syzkaller0: entered allmulticast mode [ 207.286611][ T9250] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2237'. [ 207.308227][ T9250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2237'. [ 207.567266][ T28] kauditd_printk_skb: 359 callbacks suppressed [ 207.567284][ T28] audit: type=1400 audit(2000001120.906:5648): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 207.606493][ T28] audit: type=1400 audit(2000001120.946:5649): avc: denied { name_bind } for pid=9269 comm="syz.0.2246" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=0 [ 207.628783][ T28] audit: type=1400 audit(2000001120.946:5650): avc: denied { name_bind } for pid=9269 comm="syz.0.2246" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=0 [ 207.662589][ T28] audit: type=1400 audit(2000001120.996:5651): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 207.712068][ T28] audit: type=1400 audit(2000001121.026:5652): avc: denied { map_create } for pid=9273 comm="syz.0.2247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 207.742045][ T9277] netlink: 'syz.0.2248': attribute type 12 has an invalid length. [ 207.757750][ T28] audit: type=1400 audit(2000001121.026:5653): avc: denied { open } for pid=9273 comm="syz.0.2247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 207.790205][ T28] audit: type=1400 audit(2000001121.026:5654): avc: denied { create } for pid=9273 comm="syz.0.2247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 207.811401][ T28] audit: type=1400 audit(2000001121.046:5655): avc: denied { allowed } for pid=9267 comm="syz.4.2245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 207.831083][ T28] audit: type=1400 audit(2000001121.046:5656): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 207.864238][ T28] audit: type=1400 audit(2000001121.066:5657): avc: denied { read write } for pid=3311 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 208.117107][ T9299] netlink: 'syz.3.2256': attribute type 1 has an invalid length. [ 208.166741][ T9299] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 208.177126][ T9299] bond4: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 208.188116][ T9299] bond4: (slave vxcan3): making interface the new active one [ 208.196387][ T9299] bond4: (slave vxcan3): Enslaving as an active interface with an up link [ 209.552598][ T9349] netlink: 'syz.0.2278': attribute type 1 has an invalid length. [ 209.642954][ T9351] bond9: Unable to set up delay as MII monitoring is disabled [ 209.651203][ T9351] bond9 (unregistering): Released all slaves [ 209.700169][ T9349] 8021q: adding VLAN 0 to HW filter on device bond9 [ 209.960899][ T9358] netlink: 'syz.2.2279': attribute type 16 has an invalid length. [ 209.990931][ T9358] netlink: 'syz.2.2279': attribute type 17 has an invalid length. [ 210.123705][ T9358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.164835][ T9358] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 210.201807][ T9372] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2285'. [ 210.264919][ T9370] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9370 comm=syz.1.2285 [ 212.146384][ T9488] capability: warning: `syz.4.2331' uses deprecated v2 capabilities in a way that may be insecure [ 212.581010][ T28] kauditd_printk_skb: 322 callbacks suppressed [ 212.581029][ T28] audit: type=1400 audit(2000001125.916:5980): avc: denied { watch } for pid=9494 comm="syz.0.2334" path="/477/file0" dev="tmpfs" ino=2512 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=0 [ 212.613482][ T28] audit: type=1400 audit(2000001125.946:5981): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 212.640857][ T9498] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2336'. [ 212.650149][ T28] audit: type=1400 audit(2000001125.956:5982): avc: denied { read write } for pid=3311 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 212.676920][ T28] audit: type=1400 audit(2000001125.976:5983): avc: denied { create } for pid=9497 comm="syz.3.2336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 212.697343][ T28] audit: type=1400 audit(2000001125.976:5984): avc: denied { create } for pid=9497 comm="syz.3.2336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 212.722952][ T28] audit: type=1400 audit(2000001125.996:5985): avc: denied { read write } for pid=3311 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 212.747863][ T28] audit: type=1400 audit(2000001126.016:5986): avc: denied { open } for pid=9499 comm="syz.0.2335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 212.756098][ T9504] syzkaller0: entered promiscuous mode [ 212.774730][ T9504] syzkaller0: entered allmulticast mode [ 212.787794][ T28] audit: type=1400 audit(2000001126.016:5987): avc: denied { prog_load } for pid=9499 comm="syz.0.2335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 212.808074][ T28] audit: type=1400 audit(2000001126.016:5988): avc: denied { create } for pid=9499 comm="syz.0.2335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 212.828918][ T28] audit: type=1400 audit(2000001126.016:5989): avc: denied { create } for pid=9499 comm="syz.0.2335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=0 [ 213.009727][ T9530] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2348'. [ 213.042517][ T9532] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2349'. [ 213.126324][ T9532] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2349'. [ 213.613697][ T9572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2364'. [ 213.649317][ T9574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2365'. [ 213.660569][ T9574] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 213.744816][ T9584] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2369'. [ 213.775265][ T9584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2369'. [ 214.256562][ T9604] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2387'. [ 214.286160][ T9604] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9604 comm=syz.0.2387 [ 214.351644][ T9609] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2376'. [ 214.743268][ T9636] team0: entered promiscuous mode [ 214.748729][ T9636] team0: entered allmulticast mode [ 215.120547][ T9660] netlink: 'syz.2.2402': attribute type 10 has an invalid length. [ 215.150058][ T9660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.189313][ T9660] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 215.326876][ T9664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.347474][ T9664] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 217.371496][ T3972] Bluetooth: hci0: sending frame failed (-49) [ 217.377703][ T3572] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 217.632368][ T28] kauditd_printk_skb: 409 callbacks suppressed [ 217.632387][ T28] audit: type=1400 audit(2000001130.966:6399): avc: denied { create } for pid=9743 comm="syz.1.2435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 217.724390][ T28] audit: type=1400 audit(2000001131.056:6400): avc: denied { create } for pid=9745 comm="syz.4.2436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 217.786823][ T9752] __nla_validate_parse: 5 callbacks suppressed [ 217.786840][ T9752] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2438'. [ 217.787722][ T28] audit: type=1400 audit(2000001131.056:6401): avc: denied { allowed } for pid=9745 comm="syz.4.2436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 217.793908][ T9752] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2438'. [ 217.825149][ T28] audit: type=1400 audit(2000001131.056:6402): avc: denied { create } for pid=9745 comm="syz.4.2436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 217.902168][ T28] audit: type=1400 audit(2000001131.076:6403): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 217.977496][ T28] audit: type=1400 audit(2000001131.096:6404): avc: denied { open } for pid=9749 comm="syz.4.2437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 218.376174][ T28] audit: type=1400 audit(2000001131.096:6405): avc: denied { create } for pid=9749 comm="syz.4.2437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 218.434489][ T28] audit: type=1326 audit(2000001131.116:6406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9751 comm="syz.2.2438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8101f1bf79 code=0x7ffc0000 [ 218.485392][ T28] audit: type=1326 audit(2000001131.116:6407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9751 comm="syz.2.2438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f8101f1bf79 code=0x7ffc0000 [ 218.509202][ T28] audit: type=1400 audit(2000001131.116:6408): avc: denied { open } for pid=9751 comm="syz.2.2438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 218.554434][ T9778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2448'. [ 218.585281][ T9778] team0: entered promiscuous mode [ 218.595797][ T9778] team0: entered allmulticast mode [ 219.258370][ T9802] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2457'. [ 219.345058][ T9803] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2456'. [ 219.664264][ T9846] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2477'. [ 219.700879][ T9842] syzkaller0: entered promiscuous mode [ 219.716718][ T9842] syzkaller0: entered allmulticast mode [ 219.718734][ T9851] netlink: 'syz.4.2479': attribute type 1 has an invalid length. [ 219.748997][ T9851] 8021q: adding VLAN 0 to HW filter on device bond1 [ 219.794422][ T9846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2477'. [ 219.825443][ T9851] bond1: (slave gretap1): making interface the new active one [ 219.833768][ T9851] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 219.926749][ T9859] GPL: port 1(erspan0) entered blocking state [ 219.947892][ T9859] GPL: port 1(erspan0) entered disabled state [ 219.965943][ T9859] erspan0: entered allmulticast mode [ 219.983064][ T9859] erspan0: entered promiscuous mode [ 220.312788][ T9908] netlink: 'syz.3.2500': attribute type 33 has an invalid length. [ 220.320781][ T9908] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2500'. [ 220.330179][ T9908] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2500'. [ 221.027911][ T9937] netlink: 'syz.3.2511': attribute type 13 has an invalid length. [ 222.174297][ T9971] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2524'. [ 222.296573][ T9978] ipip0: entered promiscuous mode [ 222.639882][ T28] kauditd_printk_skb: 450 callbacks suppressed [ 222.639900][ T28] audit: type=1400 audit(2000001135.976:6859): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 222.682332][ T28] audit: type=1400 audit(2000001135.976:6860): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 222.707113][ T28] audit: type=1400 audit(2000001136.016:6861): avc: denied { prog_load } for pid=10007 comm="syz.4.2541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 222.726732][ T28] audit: type=1400 audit(2000001136.016:6862): avc: denied { prog_load } for pid=10007 comm="syz.4.2541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 222.747298][ T28] audit: type=1400 audit(2000001136.016:6863): avc: denied { open } for pid=10007 comm="syz.4.2541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 222.776506][ T28] audit: type=1400 audit(2000001136.016:6864): avc: denied { allowed } for pid=10007 comm="syz.4.2541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 222.796262][ T28] audit: type=1400 audit(2000001136.016:6865): avc: denied { name_bind } for pid=10006 comm="syz.0.2540" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=0 [ 222.827398][T10015] GUP no longer grows the stack in syz.3.2539 (10015): 200000006000-200000008000 (200000004000) [ 222.840028][T10015] CPU: 0 UID: 0 PID: 10015 Comm: syz.3.2539 Tainted: G W syzkaller #0 PREEMPT(full) [ 222.840065][T10015] Tainted: [W]=WARN [ 222.840139][T10015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 222.840154][T10015] Call Trace: [ 222.840162][T10015] [ 222.840170][T10015] __dump_stack+0x1d/0x30 [ 222.840201][T10015] dump_stack_lvl+0x95/0xd0 [ 222.840224][T10015] dump_stack+0x15/0x1b [ 222.840286][T10015] fixup_user_fault+0x4fb/0x550 [ 222.840315][T10015] fault_in_user_writeable+0x5c/0xc0 [ 222.840343][T10015] futex_lock_pi+0x60b/0x7e0 [ 222.840389][T10015] ? __pfx_futex_wake_mark+0x10/0x10 [ 222.840432][T10015] do_futex+0x21f/0x380 [ 222.840510][T10015] __se_sys_futex+0x2f6/0x370 [ 222.840539][T10015] ? xfd_validate_state+0x45/0xf0 [ 222.840573][T10015] __x64_sys_futex+0x78/0x90 [ 222.840609][T10015] x64_sys_call+0x24ab/0x3020 [ 222.840648][T10015] do_syscall_64+0x12c/0x370 [ 222.840680][T10015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.840717][T10015] RIP: 0033:0x7f581688bf79 [ 222.840735][T10015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.840757][T10015] RSP: 002b:00007f58152be028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 222.840782][T10015] RAX: ffffffffffffffda RBX: 00007f5816b06090 RCX: 00007f581688bf79 [ 222.840800][T10015] RDX: 00000000fffff7fc RSI: 000000000000008d RDI: 0000200000004000 [ 222.840816][T10015] RBP: 00007f58169227e0 R08: 0000000000000000 R09: 0000000000000000 [ 222.840900][T10015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.840915][T10015] R13: 00007f5816b06128 R14: 00007f5816b06090 R15: 00007ffe00bc5b38 [ 222.840977][T10015] [ 222.841525][ T28] audit: type=1400 audit(2000001136.016:6866): avc: denied { create } for pid=10006 comm="syz.0.2540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 223.037016][ T28] audit: type=1400 audit(2000001136.016:6867): avc: denied { create } for pid=10007 comm="syz.4.2541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 223.058174][ T28] audit: type=1400 audit(2000001136.016:6868): avc: denied { create } for pid=10007 comm="syz.4.2541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 223.290564][T10045] __nla_validate_parse: 1 callbacks suppressed [ 223.290584][T10045] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2556'. [ 223.444519][T10068] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2567'. [ 223.475409][T10068] 8021q: adding VLAN 0 to HW filter on device bond2 [ 223.511273][T10071] macvlan2: entered promiscuous mode [ 223.564455][T10071] macvlan2: entered allmulticast mode [ 223.638183][T10083] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2572'. [ 223.672959][T10085] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2573'. [ 224.939956][T10146] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2599'. [ 224.951267][T10146] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2599'. [ 225.734740][T10172] bond1: option mode: unable to set because the bond device has slaves [ 225.768207][T10172] bond1: (slave veth9): Enslaving as an active interface with a down link [ 225.801906][T10172] bond1: (slave veth11): Enslaving as an active interface with a down link [ 225.873531][T10177] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2609'. [ 225.909422][T10177] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10177 comm=syz.1.2609 [ 226.116470][T10193] netlink: 'syz.3.2616': attribute type 1 has an invalid length. [ 226.237016][T10202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2618'. [ 226.395634][T10208] netlink: 'syz.3.2622': attribute type 39 has an invalid length. [ 227.091373][T10230] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2630'. [ 227.258048][T10233] syzkaller0: entered promiscuous mode [ 227.269118][T10233] syzkaller0: entered allmulticast mode [ 227.286757][T10239] wireguard0: entered promiscuous mode [ 227.292371][T10239] wireguard0: entered allmulticast mode [ 227.646938][ T28] kauditd_printk_skb: 549 callbacks suppressed [ 227.646957][ T28] audit: type=1400 audit(2000001140.986:7418): avc: denied { read write } for pid=3317 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 227.702773][ T28] audit: type=1400 audit(2000001140.986:7419): avc: denied { create } for pid=10261 comm="syz.2.2643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 227.732428][ T28] audit: type=1400 audit(2000001140.986:7420): avc: denied { open } for pid=10261 comm="syz.2.2643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 227.775215][ T28] audit: type=1400 audit(2000001140.986:7421): avc: denied { prog_load } for pid=10261 comm="syz.2.2643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 227.794734][ T28] audit: type=1400 audit(2000001140.986:7422): avc: denied { create } for pid=10261 comm="syz.2.2643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 227.815095][ T28] audit: type=1400 audit(2000001141.026:7423): avc: denied { create } for pid=10263 comm="syz.1.2644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 227.884517][ T28] audit: type=1400 audit(2000001141.026:7424): avc: denied { create } for pid=10263 comm="syz.1.2644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 227.933345][ T28] audit: type=1400 audit(2000001141.026:7425): avc: denied { execmem } for pid=10263 comm="syz.1.2644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 227.972479][ T28] audit: type=1400 audit(2000001141.036:7426): avc: denied { read write } for pid=3311 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 228.014483][ T28] audit: type=1400 audit(2000001141.066:7427): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 228.454792][T10293] ipip0: entered promiscuous mode [ 229.188525][T10314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2660'. [ 229.848565][T10358] netlink: 'syz.1.2680': attribute type 1 has an invalid length. [ 229.864650][T10358] 8021q: adding VLAN 0 to HW filter on device bond5 [ 229.925849][T10362] bond5: (slave geneve2): making interface the new active one [ 229.934804][T10362] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 229.956033][ T30] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.314477][ T30] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.346228][ T30] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.394481][ T30] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.812158][T10412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2702'. [ 230.864467][T10412] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 231.051275][T10420] netlink: 'syz.3.2704': attribute type 4 has an invalid length. [ 231.202239][T10425] netlink: 'syz.0.2707': attribute type 1 has an invalid length. [ 231.253471][T10425] 8021q: adding VLAN 0 to HW filter on device bond10 [ 231.333039][T10432] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 231.380292][T10432] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 231.445853][T10436] bond10: (slave bridge6): making interface the new active one [ 231.467722][T10436] bond10: (slave bridge6): Enslaving as an active interface with an up link [ 231.649621][T10444] bridge0: entered promiscuous mode [ 231.668706][T10444] macvtap1: entered promiscuous mode [ 231.674111][T10444] macvtap1: entered allmulticast mode [ 231.689818][T10444] bridge0: entered allmulticast mode [ 231.701992][T10444] bridge0: port 1(macvtap1) entered blocking state [ 231.723236][T10444] bridge0: port 1(macvtap1) entered disabled state [ 231.746876][T10444] bridge0: left allmulticast mode [ 231.756474][T10444] bridge0: left promiscuous mode [ 231.774195][T10452] netlink: 'syz.4.2719': attribute type 10 has an invalid length. [ 231.782386][T10452] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2719'. [ 231.812074][T10452] dummy0: entered promiscuous mode [ 231.823041][T10452] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 232.072072][T10460] netlink: 'syz.1.2722': attribute type 39 has an invalid length. [ 232.569027][ T36] Bluetooth: hci0: Frame reassembly failed (-84) [ 232.617440][T10492] 8021q: VLANs not supported on vcan0 [ 232.663506][ T28] kauditd_printk_skb: 559 callbacks suppressed [ 232.663523][ T28] audit: type=1400 audit(2000001145.996:7987): avc: denied { read write } for pid=3317 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 233.094424][ T28] audit: type=1400 audit(2000001146.036:7988): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 233.233935][ T28] audit: type=1400 audit(2000001146.036:7989): avc: denied { map_create } for pid=10495 comm="syz.1.2737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 233.304287][ T28] audit: type=1400 audit(2000001146.036:7990): avc: denied { prog_load } for pid=10495 comm="syz.1.2737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 233.630440][T10529] audit: audit_backlog=65 > audit_backlog_limit=64 [ 233.637492][T10530] audit: audit_backlog=65 > audit_backlog_limit=64 [ 233.644155][T10530] audit: audit_lost=18 audit_rate_limit=0 audit_backlog_limit=64 [ 233.652028][T10529] audit: audit_lost=19 audit_rate_limit=0 audit_backlog_limit=64 [ 233.660121][T10530] audit: backlog limit exceeded [ 233.665359][T10529] audit: backlog limit exceeded [ 233.785518][T10536] syzkaller0: entered promiscuous mode [ 233.804114][T10536] syzkaller0: entered allmulticast mode [ 234.595048][ T3572] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 234.599039][ T3972] Bluetooth: hci0: command 0x1003 tx timeout [ 236.245943][T10594] netlink: 'syz.4.2774': attribute type 4 has an invalid length. [ 236.635127][T10626] netlink: 'syz.1.2791': attribute type 4 has an invalid length. [ 236.685712][T10629] netlink: 'syz.1.2791': attribute type 4 has an invalid length. [ 237.135706][T10639] netlink: 'syz.4.2795': attribute type 13 has an invalid length. [ 237.323502][T10650] netlink: 'syz.1.2797': attribute type 21 has an invalid length. [ 237.384590][T10650] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2797'. [ 237.404289][T10654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2801'. [ 237.430286][T10654] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.481759][T10654] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.666285][ T28] kauditd_printk_skb: 315 callbacks suppressed [ 237.666304][ T28] audit: type=1400 audit(2000001407.009:8267): avc: denied { open } for pid=10669 comm="syz.1.2817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 237.739673][ T28] audit: type=1400 audit(2000001407.059:8268): avc: denied { read write } for pid=3311 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 237.821503][T10678] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2810'. [ 237.822780][ T28] audit: type=1400 audit(2000001407.069:8269): avc: denied { open } for pid=10672 comm="syz.3.2808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 237.850833][ T28] audit: type=1400 audit(2000001407.109:8270): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 237.910366][ T28] audit: type=1400 audit(2000001407.129:8271): avc: denied { prog_load } for pid=10675 comm="syz.4.2809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 237.975087][ T28] audit: type=1400 audit(2000001407.129:8272): avc: denied { prog_load } for pid=10675 comm="syz.4.2809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 238.012655][ T28] audit: type=1400 audit(2000001407.129:8273): avc: denied { prog_load } for pid=10675 comm="syz.4.2809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 238.032207][ T28] audit: type=1400 audit(2000001407.129:8274): avc: denied { open } for pid=10675 comm="syz.4.2809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 238.054960][T10682] macsec0: entered allmulticast mode [ 238.061118][T10682] veth1_macvtap: entered allmulticast mode [ 238.074496][T10682] macsec0: entered promiscuous mode [ 238.093190][ T28] audit: type=1400 audit(2000001407.129:8275): avc: denied { prog_load } for pid=10672 comm="syz.3.2808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 238.152919][ T28] audit: type=1400 audit(2000001407.129:8276): avc: denied { load_policy } for pid=10672 comm="syz.3.2808" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=0 [ 238.683711][T10709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2820'. [ 238.715139][T10709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2820'. [ 239.886267][T10739] syzkaller0: entered promiscuous mode [ 239.904913][T10739] syzkaller0: entered allmulticast mode [ 240.833122][T10747] ================================================================== [ 240.841377][T10747] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 240.848360][T10747] [ 240.850705][T10747] read-write to 0xffff88812e1e796c of 4 bytes by task 10743 on cpu 0: [ 240.858877][T10747] fifo_open+0x86/0x5d0 [ 240.863062][T10747] do_dentry_open+0x4ca/0xa90 [ 240.867762][T10747] vfs_open+0x37/0x1e0 [ 240.871850][T10747] path_openat+0x1b70/0x2050 [ 240.876506][T10747] do_file_open+0x16c/0x290 [ 240.881037][T10747] do_sys_openat2+0x94/0x130 [ 240.885642][T10747] __se_sys_openat2+0x193/0x1f0 [ 240.890517][T10747] __x64_sys_openat2+0x55/0x70 [ 240.895301][T10747] x64_sys_call+0x2170/0x3020 [ 240.900088][T10747] do_syscall_64+0x12c/0x370 [ 240.904707][T10747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.910612][T10747] [ 240.912947][T10747] read to 0xffff88812e1e796c of 4 bytes by task 10747 on cpu 1: [ 240.920591][T10747] wait_for_partner+0xd5/0x1e0 [ 240.925397][T10747] fifo_open+0x462/0x5d0 [ 240.929669][T10747] do_dentry_open+0x4ca/0xa90 [ 240.934371][T10747] vfs_open+0x37/0x1e0 [ 240.938467][T10747] path_openat+0x1b70/0x2050 [ 240.943090][T10747] do_file_open+0x16c/0x290 [ 240.947631][T10747] do_sys_openat2+0x94/0x130 [ 240.952248][T10747] __x64_sys_open+0xe6/0x110 [ 240.956872][T10747] x64_sys_call+0x14b9/0x3020 [ 240.961580][T10747] do_syscall_64+0x12c/0x370 [ 240.966209][T10747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.972314][T10747] [ 240.974657][T10747] value changed: 0x00000001 -> 0x00000002 [ 240.980384][T10747] [ 240.982721][T10747] Reported by Kernel Concurrency Sanitizer on: [ 240.988887][T10747] CPU: 1 UID: 0 PID: 10747 Comm: syz.4.2834 Tainted: G W syzkaller #0 PREEMPT(full) [ 240.999857][T10747] Tainted: [W]=WARN [ 241.003677][T10747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 241.013746][T10747] ==================================================================