last executing test programs: 1.658634346s ago: executing program 2 (id=391): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x585f, &(0x7f00000001c0)={0x0, 0x2c28, 0x80, 0x0, 0x10000000}) io_uring_register$IORING_REGISTER_CLOCK(r1, 0x1d, 0x0, 0x0) io_uring_enter(r1, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x8080, &(0x7f00000001c0)=ANY=[@ANYRES8=0x0], 0x1, 0x176, &(0x7f0000000380)="$eJzs27GKE0EYB/Bvk1VPbVKLxaKNVVCfQJETxAVFSaGVwmlzkQOvWa3yKL6PzyLIgXDdiLcx0ZjFKG5Wsr9fkw/+GTJfYDJM2Hlx9c3hwdHx66PHJ7GXZZHnUcRpFqMYxDBqswAAdslpSvE5pZQuzOLih0gpdT0jAKBt9n8A6B/7PwD0j/0fAPrn6bPnD++W5f6TotiL+DSrJtWkfq3z+w/K/ZvFmdFy1ElVTYaL/FadFz/n5+LSPL+9Nj8fN67X+bfs3qNyJb8cB+23DwAAAL0wLhbWnu/H46a8rn74f2Dl/J7HlXxrbQAAf+D43fvDl9Ppq7cNRTRHu1Xc6U2n/7z48jFiux+asoi/Hh6jiP/lq+uquPbbhT/t+pcJaNty0W86Ig3bnREAAAAAAAAAAAAAALDq7Pn/QWx0eej7df6G9wzm8S9Rh+0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAWl8DAAD//+m7Ryk=") gettid() ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001680)={0x0, 0x7c}}, 0x4040000) 1.614377797s ago: executing program 1 (id=392): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x3, 0x1, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0xa50003d1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={0x0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) ioctl$KDFONTOP_SET(r1, 0x4b6a, &(0x7f0000000000)={0x200d, 0x1, 0x12, 0x20, 0x200f, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x50, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4801}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) 1.452710053s ago: executing program 1 (id=394): r0 = socket$packet(0x11, 0x3, 0x300) sendto$inet6(r0, 0x0, 0x0, 0x40001, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r1) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f00000003c0)={0xf97cff8c, 0x8}, 0x10) 1.393327014s ago: executing program 2 (id=395): perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0xe02a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x800) fstat(r0, &(0x7f00000003c0)) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="97", 0xffe0}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19e4ff0004"], 0x50) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x7b, &(0x7f0000000000)=r4, 0x8) close(r1) 1.383468325s ago: executing program 1 (id=396): socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="38000000200025a726bd7000bbdbdf250a001404ff0000010200010014000200ff0200000000100000000000000000010800060000000000198aca8680ee30207c385329979313ca20db3081a9ca0ab9bea1eb739c2c5619521ffdc15efeac30"], 0x38}, 0x1, 0x0, 0x0, 0x4040090}, 0x40000) syz_emit_ethernet(0x32, &(0x7f0000001b40)=ANY=[], 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e26, @dev={0xac, 0x14, 0x14, 0x10}}, {0x20000010304, @local}, 0x12, {0x2, 0x4e1e, @multicast1}, 'lo\x00'}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(0xffffffffffffffff, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) socket$nl_route(0x10, 0x3, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x400, &(0x7f0000000140)=ANY=[@ANYBLOB='mpol=bind:', @ANYRESDEC]) 1.297587838s ago: executing program 1 (id=397): io_uring_setup(0x7fc0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x4, 0x15, 0x0, 0x1, 0x400}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x20100) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) unshare(0x2c020400) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.297204887s ago: executing program 2 (id=398): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000540)={0x1c, 0x1, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_STATUS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044001}, 0x8044000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = memfd_secret(0x0) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f00000000c0)={0x2, 0xd, 0x8}) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2020, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_rdma(&(0x7f0000000180), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1000800, &(0x7f0000001700)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@timeout}]}}) 1.296196838s ago: executing program 0 (id=400): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x681c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x3, 0x1, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) uname(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x1, 0x6}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}, 0x1, 0x0, 0x0, 0x4008880}, 0x800) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800002}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x144}, 0x1, 0x0, 0x0, 0x1}, 0x4000004) 1.227197349s ago: executing program 2 (id=401): socket(0x848000000015, 0x805, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, 0x0) io_uring_enter(0xffffffffffffffff, 0x6b7c, 0x9d7e, 0x8, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0)=[@ioring_restriction_register_op={0x0, 0x9}], 0x1) io_uring_setup(0x363a, &(0x7f0000000000)={0x0, 0x91a2, 0x40, 0x1, 0x2ea}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000002, 0x4c032, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 1.051555336s ago: executing program 0 (id=402): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x8000, 0x120) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x1f, 0x7, 0x5, 0x40, r2, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0xd}, 0x50) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000002, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x800, 0x0, 0x2, 0x1}, 0x20) close(r4) socket$inet6(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3, 0xffffffffffffffff}, &(0x7f0000001d80), &(0x7f0000001d40)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r5, &(0x7f0000000340), 0x0}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000033c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x1490, 0x1290, 0x5802, 0x294, 0x1290, 0x294, 0x13c0, 0x325, 0x378, 0x13c0, 0x378, 0x3, 0x0, {[{{@ipv6={@loopback, @empty, [], [], 'pimreg0\x00', 'macsec0\x00'}, 0x0, 0x1228, 0x1290, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150}, {'gre0\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x7fffffff}}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0xfd, 0x0, './cgroup.net/syz1\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x108, 0x130, 0x0, {}, [@common=@ah={{0x30}}, @common=@frag={{0x30}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14f0) 1.020062587s ago: executing program 0 (id=403): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 923.10735ms ago: executing program 2 (id=407): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg$inet6(r2, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)='i', 0x1}], 0x1, &(0x7f00000005c0)=ANY=[], 0x200}}], 0x1, 0x4000006) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) recvfrom$unix(r3, &(0x7f0000000300)=""/279, 0x117, 0x0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x3, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x1ff, 0x7fffffff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000400)=[{&(0x7f0000001740)='\x00', 0x1}], 0x1, 0x6) 816.096663ms ago: executing program 1 (id=409): r0 = perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$key(0xf, 0x3, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'virt_wifi0\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xe, [0xa, 0xffffffff, 0x7fff, 0x1, 0x1ed67de4, 0x9, 0x0, 0x2e32, 0x6, 0xb69, 0xc1, 0x6, 0x1, 0x3, 0x5, 0x101, 0x5, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100002, 0x762, 0x3, 0xd, 0xb, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x3f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x0, 0x2, 0x180000, 0x4007, 0x408b, 0x5, 0x2af, 0xf7, 0x5, 0x6, 0x6, 0x10001, 0x6, 0xe0e, 0x8, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x210001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x3, 0x84, 0xfc, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0x8, 0x4, 0x2a2, 0xfffffff9, 0x3, 0x2, 0x5, 0x8, 0x0, 0x7, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0x3, 0x7fff]}}) poll(0x0, 0x0, 0x9) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) sendmsg$key(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020a0708070000002cbd7000fbdbdf25050017"], 0x38}}, 0x40810) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000001c0)={0x2, 0x80, 0x0, 0x9, 0xc, 0x7, 0x0, 0x5, 0x80400, 0xa, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f00000000c0)}, 0xc212, 0x0, 0xffff, 0x7, 0x10001, 0x0, 0x4, 0x0, 0x8e2, 0x0, 0x7}) r2 = syz_io_uring_setup(0x18d6, 0x0, &(0x7f0000ffe000), 0x0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x2, &(0x7f0000000180)=[0x1, 0x3], 0xfe) 815.157893ms ago: executing program 0 (id=419): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) timer_create(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)={0x34, r3, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x800) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000400)={r1, &(0x7f0000000100), 0x0}, 0x20) timer_settime(0x0, 0x1, 0x0, 0x0) timer_create(0x7, &(0x7f00000001c0)={0x0, 0x11, 0x4, @thr={&(0x7f0000000080)="4a2505a8aa21588e54849279e031d8b0f09e4fa1b29d9353414cdba82433f2a8fb1d01ed064a4706f44b3a1a16f6fe2513199a78635c69cca6336d6552e384b29f0a384ee9bf6e22", &(0x7f0000000100)="733326edac36348abf9a7cf8c5294e7a9380a8b03a6e7dfac4273a963b669a30e9d88e58b92bf241ac2289ba937c720d6f1c4eb8c3ee77c6e71720b7bad635bbdbf0e025c406dc7514ef8c4ad37f2f69ccc12dec0a5bf87972baecd66c4f71da5984121a9e742a092ed63870c3446dbec0f828359675eadbde268a590cefd6224b41ae0aeb3d8172d90ecd03cf265014b354c2311fe22d31c8cccdba235330df5637722bb8c640e663beda49806519c6e07a09d9d09105b2f7e29a5ecd9481"}}, &(0x7f0000000200)=0x0) dup3(r0, r0, 0x0) timer_getoverrun(r4) 703.922177ms ago: executing program 3 (id=421): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000030000000000000000000000850000008700000085000000070000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2a, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8983, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 633.792239ms ago: executing program 4 (id=411): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000011c0)=ANY=[@ANYBLOB], 0x68}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f80)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0xc}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x28011, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0x7}, 'port0\x00', 0x44, 0xa04f2, 0x10000000, 0x8000088, 0x6, 0x40003, 0x9}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) 581.075671ms ago: executing program 3 (id=412): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff2, 0xd}, {0xb, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40885}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = semget$private(0x0, 0x6, 0x0) semtimedop(r3, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r3, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) 535.383132ms ago: executing program 4 (id=413): socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="38000000200025a726bd7000bbdbdf250a001404ff0000010200010014000200ff0200000000100000000000000000010800060000000000198aca8680ee30207c385329979313ca20db3081a9ca0ab9bea1eb739c2c5619521ffdc15efeac30"], 0x38}, 0x1, 0x0, 0x0, 0x4040090}, 0x40000) syz_emit_ethernet(0x32, &(0x7f0000001b40)=ANY=[], 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e26, @dev={0xac, 0x14, 0x14, 0x10}}, {0x20000010304, @local}, 0x12, {0x2, 0x4e1e, @multicast1}, 'lo\x00'}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(0xffffffffffffffff, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) socket$nl_route(0x10, 0x3, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x400, &(0x7f0000000140)=ANY=[@ANYBLOB='mpol=bind:', @ANYRESDEC]) 474.324184ms ago: executing program 3 (id=414): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x681c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x3, 0x1, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) uname(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x1, 0x6}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}, 0x1, 0x0, 0x0, 0x4008880}, 0x800) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800002}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[], 0x144}, 0x1, 0x0, 0x0, 0x1}, 0x4000004) 473.980984ms ago: executing program 4 (id=415): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$unix(0x1, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000000c0)='./file0\x00', 0x10108c0, &(0x7f0000000140)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt,shortname=win95\x00\x00ni_xlate=0,showexec,shortname=winnt,shortname=win95,nonumtairodir,nonumtail=0,shortname=mixed,nfs=nostale_ro,utf8=0,\x00', @ANYRES32, @ANYRES64, @ANYRESHEX, @ANYRESHEX], 0x1, 0x26c, &(0x7f0000000340)="$eJzs3U9rU1kYB+A3bTpJC0OyGCgzDMwdZjOr0HaYfcrQgWECipKFriw2RWlqoYWCLtruit9Bv4Iu3QouxK1fQASpghvrqgshEm//JDWJjZpG7PNs+nLu++Ock17upYueXPl1eWlhZW1xd3cn8vlMZMtRjr1MFGMkRiO1FQDA92Sv0Yg3jdSw1wIAnA7vfwA4e3q9/zNbh2PnT39lAMCgfNHf/yMDWRIAMGAXL13+f7ZSmbuQJPmI5e316no1/Zlen12M61GPWkxFId5FNA6l9b//VeamkqaXxcgvb46k+c316mh7fjoKUeycn05SUW3mDvJjMbGffzYRtZiJQvzUOT/TMf9D/PlHy/ylKMTTq7ES9ViIZjbN5yJiYzpJ/jlXOZbPfegDAAAAAAAAAAAAAAAAAAAAAIBBKCWHiu3n36Tn95RK3a6n+dbzgcZ7nQ/U2Dx2vk42fskOd+8AAAAAAAAAAAAAAAAAAADwrVi7eWtpvl6vrfYqbjy592gnlwY+2dy7yOzP219qu2fP+Ml2caz48fcXdzpdykWu38/n84qxiGgdSfanfPjbACf9WsXjnWs//7U2+Xe3nsi2jtxubrWtp8uNlB3UB/66ENG1J9/3Ddla3D8oym8/6jm4lWqr48P+xU3eLc8/2Hj+6qSpHg+NxuggHkUAAAAAAAAAAAAAAAAAAHDmHf3T77BXAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADDc/T9//0WuWgbyXdt3hr2HgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4H0AAAD//7qXlSU=") perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) creat(0x0, 0x45) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x24040084) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}, {0x0, 0x2}]}, @int]}}, 0x0, 0x4e}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, r0, 0x1, 0x1}, 0x48) 472.415844ms ago: executing program 0 (id=416): r0 = io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket(0x28, 0x5, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x4) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvfrom$inet_nvme(r2, 0x0, 0x0, 0x40000002, 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r2, 0x4559}], 0x1, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 420.926696ms ago: executing program 4 (id=417): r0 = socket(0x10, 0x803, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r2, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="67358d6609000000000000000000000002200000", @ANYRES32=r2, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x18, r1, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000001400210100000000000000000200b000", @ANYRES32=r6, @ANYBLOB="08000200ac1414"], 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}}, 0x18}}, 0x0) 339.618769ms ago: executing program 3 (id=418): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031c00d1fd140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 285.50098ms ago: executing program 1 (id=420): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) sched_setattr(r0, &(0x7f0000000000)={0x38, 0x3, 0x10000040, 0x8, 0x800, 0x1, 0x8000, 0x1, 0x54600000, 0xffffff01}, 0x0) socket$inet6(0xa, 0x80001, 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2205c04, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 176.168184ms ago: executing program 3 (id=422): r0 = socket$packet(0x11, 0x3, 0x300) sendto$inet6(r0, 0x0, 0x0, 0x40001, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r1) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f00000003c0)={0xf97cff8c, 0x8}, 0x10) 175.773764ms ago: executing program 4 (id=423): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x3, 0x0, &(0x7f0000000100)="e09f54", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0xe51f0700, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xffffffffa065ce44}, 0x100000, 0x8, 0x0, 0x8, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000001000000000000000000000071123a000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x6, 0x26, &(0x7f0000000a80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, {}, {}, [@map_idx={0x18, 0xc7183bf1c261cbd1, 0x5, 0x0, 0xd}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @map_val={0x18, 0x6, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7ff}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x40, '\x00', r2, @fallback=0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 174.759364ms ago: executing program 0 (id=432): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3, &(0x7f0000000140)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@bsdgroups}, {@nobarrier}]}, 0x1, 0x625, &(0x7f0000000800)="$eJzs3c1vFOUfAPDvbLfvv58txKh4kCbGQKK0tIIhxkS4G4IvN71UWgihUEJrYpHEkuhN48WDiScP4l9hJPHqP+DBiydDQozhIIbImpmdbaftbunb7pT280mGzsvuPN8Bvn2effZ5ZgLYt0bSPyoRhyLiWhIxVDhWjfzgSP119/+6eT5dkqjV3v0ziZufJovFcyX5zwP5m/8diiR9+8GJH9eUO7dw4/LkzMz09WyrN9+7cOPYpSuTF6cvTl+deG3i1MkTJ0+NH9/+9RUvJ+L97799mIz/8NvZJE7Ho676zvS6Vr+3d1slp2WPRK3uQXF/GsipbZ57t/h7aPkvtq4/kmpp4bBJF/L/j90R8WwMRVfhX3MoPn+71OCAtqol0aijgH0n2VL+9+18IECHNdoBjc/2zT4Hr1Vpc6sE6IR7Z+odAPXc746IRv5X876zvqxvYOB+sqKfJ4mI7fXM1aVl/PLz2c/SJVr0wwHtsXirN++3X13/J1luDkdftjVwv7Ii/yuFJd3/zhbLH1m1Lf+hcxZvRcRzef3fE5vK/5FC/n+4xfLlPwAAAAAAAOycO2ci4pVm4/8qS+N/epqM/xmMiNM7UP7jv/+r3M1Xkh0oDii4dybijabjf5fG+A535Vv/z8YDdCcXLs1MH4+IpyLiaHT3ptvjq85bHCF87MuD37Qqvzj+L13S8htjAfMz3a2umog7NTk/ud3rBiLu3Yp4Phv/ezjfs3L8T1r/J03q/zS/r22wjIMv3T7X6tjj8x9ol9p3EUea1v/Lze10bWz+yrWxuab35xjL2gNjjVZBw3IL4IVPvhpsVf46+e8uEtBmaf0/sH7+9ybF+/XMbe78PRHx6kK11ur4Vtv/Pcl7XY3zpz6enJ+/Ph7Rk7y1dv/E5mKGvaqRD418SfP/6Ivr9/8ttf8LedgfEYurT96ih+6ZR4O/t4pH+x/Kk+b/1Pr1//DK+n/zKxO3h39qVf65DdX/J7I6/Wi+R/8fFK29H8eaLByIpglaSrgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8ISrRMT/IqmMLq1XKqOjEYMR8XQMVGZm5+ZfvjD70dWp9Fj2/P9K40m/Q/XtpPH8/+HC9sTK7f60rAMR8XVXf3Z89PzszFTZFw8AAAAAAAAAAAAAAAAAAAC7xGA257/Wu3r+f+qPrrKjA9qumv9czvee0mIBOivP/y8+2PQ7a707Hw3QSdWyAwBKs/H8725rHEDntc7/Bw9rmY6GA3SQ9j/sX1vMf18Pwh6g/of9aoN9en3tjgMog/ofAAAAAAD2lAOH7/yaRMTi6/3ZEoXJvwb7w95WKTsAoDTG8ML+VZ0tOwKgLD7jA8nS2j9NJ/u3Hv2ftCcgAAAAAAAAAAAAAGCNI4fM/4f9av35/8b2w162zvz/LPmzRwM8rG3g5cCTpvWjP9T9sNet8xnfA79gn3hcbW/+PwAAAAAAAAAAAADsAn03Lk/OzExfn1t48lbe3B1hbG5lcXJXhLHdlf6IWNrzqD1ldUdE+Ve6cyvViMrGXty4BUeJMZf8ewkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFjyXwAAAP//CHogwg==") open(0x0, 0x80400, 0x100) syz_open_procfs(0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x55, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x4, 0xaea}, 0x10005, 0x3, 0xfffffbff, 0x3, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)='cpu<-0\t\t\t') ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200", @ANYRES32=r4], 0x1c}}, 0x4008054) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 100.918627ms ago: executing program 4 (id=424): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = dup(0xffffffffffffffff) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) io_setup(0xffff, &(0x7f0000000040)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) shutdown(0xffffffffffffffff, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x5, 0x0, &(0x7f0000000000)=0x300) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 16.220149ms ago: executing program 2 (id=425): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000001800)=ANY=[], 0xfb, 0x1236, &(0x7f0000000600)="$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") timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x1a, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x3736, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mknodat$loop(r1, &(0x7f0000000080)='./file0\x00', 0x40, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) 0s ago: executing program 3 (id=426): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) timer_create(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)={0x34, r3, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x800) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000400)={r1, &(0x7f0000000100), 0x0}, 0x20) timer_settime(0x0, 0x1, 0x0, 0x0) timer_create(0x7, &(0x7f00000001c0)={0x0, 0x11, 0x4, @thr={&(0x7f0000000080)="4a2505a8aa21588e54849279e031d8b0f09e4fa1b29d9353414cdba82433f2a8fb1d01ed064a4706f44b3a1a16f6fe2513199a78635c69cca6336d6552e384b29f0a384ee9bf6e22", &(0x7f0000000100)="733326edac36348abf9a7cf8c5294e7a9380a8b03a6e7dfac4273a963b669a30e9d88e58b92bf241ac2289ba937c720d6f1c4eb8c3ee77c6e71720b7bad635bbdbf0e025c406dc7514ef8c4ad37f2f69ccc12dec0a5bf87972baecd66c4f71da5984121a9e742a092ed63870c3446dbec0f828359675eadbde268a590cefd6224b41ae0aeb3d8172d90ecd03cf265014b354c2311fe22d31c8cccdba235330df5637722bb8c640e663beda49806519c6e07a09d9d09105b2f7e29a5ecd9481"}}, &(0x7f0000000200)=0x0) dup3(r0, r0, 0x0) timer_getoverrun(r4) kernel console output (not intermixed with test programs): [ 24.123735][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 24.123753][ T28] audit: type=1400 audit(1780654226.572:124): avc: denied { write } for pid=3264 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 24.158367][ T28] audit: type=1400 audit(1780654226.602:125): avc: denied { write } for pid=3275 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.1' (ED25519) to the list of known hosts. [ 31.642737][ T28] audit: type=1400 audit(1780654234.082:126): avc: denied { mounton } for pid=3287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 31.665912][ T28] audit: type=1400 audit(1780654234.112:127): avc: denied { mount } for pid=3287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.668391][ T3287] cgroup: Unknown subsys name 'net' [ 31.693985][ T28] audit: type=1400 audit(1780654234.142:128): avc: denied { unmount } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.814492][ T3287] cgroup: Unknown subsys name 'cpuset' [ 31.820811][ T3287] cgroup: Unknown subsys name 'rlimit' [ 31.913114][ T28] audit: type=1400 audit(1780654234.352:129): avc: denied { setattr } for pid=3287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.946829][ T28] audit: type=1400 audit(1780654234.362:130): avc: denied { create } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.967625][ T28] audit: type=1400 audit(1780654234.362:131): avc: denied { write } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.987318][ T3291] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 31.988869][ T28] audit: type=1400 audit(1780654234.362:132): avc: denied { read } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.017781][ T28] audit: type=1400 audit(1780654234.372:133): avc: denied { mounton } for pid=3287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 32.042702][ T28] audit: type=1400 audit(1780654234.372:134): avc: denied { mount } for pid=3287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 32.058227][ T3287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 32.066639][ T28] audit: type=1400 audit(1780654234.392:135): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 33.429559][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.436778][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.444004][ T3301] bridge_slave_0: entered allmulticast mode [ 33.450546][ T3301] bridge_slave_0: entered promiscuous mode [ 33.471422][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.478605][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.485797][ T3301] bridge_slave_1: entered allmulticast mode [ 33.492220][ T3301] bridge_slave_1: entered promiscuous mode [ 33.506186][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.513389][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.520602][ T3305] bridge_slave_0: entered allmulticast mode [ 33.527361][ T3305] bridge_slave_0: entered promiscuous mode [ 33.549858][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.557001][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.564189][ T3305] bridge_slave_1: entered allmulticast mode [ 33.570721][ T3305] bridge_slave_1: entered promiscuous mode [ 33.598609][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.605830][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.613198][ T3300] bridge_slave_0: entered allmulticast mode [ 33.619736][ T3300] bridge_slave_0: entered promiscuous mode [ 33.632345][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.642758][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.659347][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.666659][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.673944][ T3300] bridge_slave_1: entered allmulticast mode [ 33.680451][ T3300] bridge_slave_1: entered promiscuous mode [ 33.700084][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.713715][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.720817][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.728062][ T3304] bridge_slave_0: entered allmulticast mode [ 33.734550][ T3304] bridge_slave_0: entered promiscuous mode [ 33.749142][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.762825][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.770118][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.777342][ T3304] bridge_slave_1: entered allmulticast mode [ 33.783826][ T3304] bridge_slave_1: entered promiscuous mode [ 33.790891][ T3301] team0: Port device team_slave_0 added [ 33.807241][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.821981][ T3301] team0: Port device team_slave_1 added [ 33.842092][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.861077][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.868278][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.875496][ T3307] bridge_slave_0: entered allmulticast mode [ 33.882116][ T3307] bridge_slave_0: entered promiscuous mode [ 33.889356][ T3305] team0: Port device team_slave_0 added [ 33.900282][ T3305] team0: Port device team_slave_1 added [ 33.907105][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.916751][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.923940][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.949969][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.960789][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.968009][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.975270][ T3307] bridge_slave_1: entered allmulticast mode [ 33.981793][ T3307] bridge_slave_1: entered promiscuous mode [ 33.997967][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.007821][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.014888][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.040944][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.056937][ T3300] team0: Port device team_slave_0 added [ 34.084296][ T3300] team0: Port device team_slave_1 added [ 34.094840][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.101864][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.127872][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.140087][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.147137][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.173107][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.184802][ T3304] team0: Port device team_slave_0 added [ 34.191605][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.206662][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.213751][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.239722][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.255160][ T3304] team0: Port device team_slave_1 added [ 34.261825][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.276156][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.283445][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.309503][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.367546][ T3301] hsr_slave_0: entered promiscuous mode [ 34.373665][ T3301] hsr_slave_1: entered promiscuous mode [ 34.387755][ T3305] hsr_slave_0: entered promiscuous mode [ 34.393845][ T3305] hsr_slave_1: entered promiscuous mode [ 34.399684][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 34.405505][ T3305] Cannot create hsr debugfs directory [ 34.411425][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.418455][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.444437][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.456076][ T3307] team0: Port device team_slave_0 added [ 34.462811][ T3307] team0: Port device team_slave_1 added [ 34.475372][ T3300] hsr_slave_0: entered promiscuous mode [ 34.481342][ T3300] hsr_slave_1: entered promiscuous mode [ 34.487324][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 34.493049][ T3300] Cannot create hsr debugfs directory [ 34.498852][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.505928][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.531945][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.572962][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.580058][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.606209][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.635172][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.642185][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.668259][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.704216][ T3304] hsr_slave_0: entered promiscuous mode [ 34.710303][ T3304] hsr_slave_1: entered promiscuous mode [ 34.716377][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 34.722120][ T3304] Cannot create hsr debugfs directory [ 34.773991][ T3307] hsr_slave_0: entered promiscuous mode [ 34.780242][ T3307] hsr_slave_1: entered promiscuous mode [ 34.786930][ T3307] debugfs: 'hsr0' already exists in 'hsr' [ 34.792690][ T3307] Cannot create hsr debugfs directory [ 34.936903][ T3301] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 34.945638][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.958651][ T3301] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 34.967367][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.975299][ T3301] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 34.984063][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.994651][ T3301] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 35.003115][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.023090][ T3300] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 35.031668][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.039564][ T3300] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 35.047999][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.055834][ T3300] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 35.064760][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.077494][ T3300] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 35.086205][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.111866][ T3305] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 35.121195][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.129343][ T3305] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 35.137980][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.151272][ T3305] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 35.160382][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.169273][ T3305] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 35.178015][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.221721][ T3304] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 35.230655][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.238645][ T3304] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 35.247445][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.255375][ T3304] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 35.263963][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.271751][ T3304] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 35.280711][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.295865][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.339277][ T3307] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 35.348056][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.356267][ T3307] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 35.365419][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.373186][ T3307] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 35.382045][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.390027][ T3307] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 35.398868][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.409889][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.426556][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.433735][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.444487][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.459417][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.466542][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.476504][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.497643][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.504795][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.518688][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.527439][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.534682][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.581674][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.592158][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.599283][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.623188][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.630308][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.671013][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.694964][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.706255][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.720925][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.728066][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.742189][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.759093][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.766351][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.776591][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.783715][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.795517][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.802628][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.954768][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.997723][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.024683][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.182380][ T3301] veth0_vlan: entered promiscuous mode [ 36.195635][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.206883][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.221612][ T3301] veth1_vlan: entered promiscuous mode [ 36.232506][ T3300] veth0_vlan: entered promiscuous mode [ 36.246578][ T3305] veth0_vlan: entered promiscuous mode [ 36.257302][ T3300] veth1_vlan: entered promiscuous mode [ 36.278014][ T3305] veth1_vlan: entered promiscuous mode [ 36.297152][ T3301] veth0_macvtap: entered promiscuous mode [ 36.313027][ T3301] veth1_macvtap: entered promiscuous mode [ 36.335230][ T3305] veth0_macvtap: entered promiscuous mode [ 36.354773][ T3305] veth1_macvtap: entered promiscuous mode [ 36.368410][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.377247][ T3300] veth0_macvtap: entered promiscuous mode [ 36.393723][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.403739][ T3300] veth1_macvtap: entered promiscuous mode [ 36.411624][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.428272][ T2237] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.438025][ T2237] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.453384][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.462036][ T3307] veth0_vlan: entered promiscuous mode [ 36.468526][ T2237] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.478176][ T2237] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.501797][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.522583][ T3307] veth1_vlan: entered promiscuous mode [ 36.534147][ T2237] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.543461][ T2237] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.557194][ T3301] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 36.559200][ T2237] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.581609][ T68] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.593968][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.608076][ T3304] veth0_vlan: entered promiscuous mode [ 36.632520][ T2237] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.641726][ T2237] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.655377][ T2237] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.664332][ T2237] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.676768][ T3304] veth1_vlan: entered promiscuous mode [ 36.696759][ T3307] veth0_macvtap: entered promiscuous mode [ 36.706235][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 36.706256][ T28] audit: type=1400 audit(1780654239.152:163): avc: denied { create } for pid=3504 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 36.737545][ T3307] veth1_macvtap: entered promiscuous mode [ 36.744611][ T28] audit: type=1400 audit(1780654239.182:164): avc: denied { prog_load } for pid=3504 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 36.771159][ T28] audit: type=1400 audit(1780654239.182:165): avc: denied { bpf } for pid=3504 comm="syz.3.4" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 36.807309][ T3304] veth0_macvtap: entered promiscuous mode [ 36.826500][ T3511] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 36.830991][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.855321][ T3304] veth1_macvtap: entered promiscuous mode [ 36.858828][ T3511] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2'. [ 36.866043][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.898577][ T3511] tunl0: entered promiscuous mode [ 36.908787][ T3511] tunl0: entered allmulticast mode [ 36.938846][ T28] audit: type=1400 audit(1780654239.382:166): avc: denied { create } for pid=3514 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 36.971893][ T28] audit: type=1400 audit(1780654239.412:167): avc: denied { create } for pid=3514 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 37.001876][ T3515] loop3: detected capacity change from 0 to 512 [ 37.008605][ T28] audit: type=1400 audit(1780654239.412:168): avc: denied { write } for pid=3514 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 37.029596][ T3515] EXT4-fs: Ignoring removed oldalloc option [ 37.032126][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.037353][ T28] audit: type=1400 audit(1780654239.412:169): avc: denied { create } for pid=3514 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 37.058899][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.081723][ T3515] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 37.104782][ T28] audit: type=1400 audit(1780654239.442:170): avc: denied { read write } for pid=3514 comm="syz.3.6" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 37.135720][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.145721][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.162840][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.180777][ T28] audit: type=1400 audit(1780654239.442:171): avc: denied { open } for pid=3514 comm="syz.3.6" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 37.207223][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.218489][ T3515] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.226464][ T28] audit: type=1400 audit(1780654239.442:172): avc: denied { ioctl } for pid=3514 comm="syz.3.6" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 37.294540][ T68] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.312786][ T68] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.329393][ T3515] ext4 filesystem being mounted at /1/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.368631][ T68] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.385864][ T68] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.550869][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.669730][ T3550] loop2: detected capacity change from 0 to 512 [ 37.727820][ T3550] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 37.744176][ T3550] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.12: corrupted in-inode xattr: e_value size too large [ 37.844465][ T3550] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 37.844712][ T3550] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.12: couldn't read orphan inode 15 (err -117) [ 37.853938][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 37.853957][ C0] EXT4-fs (loop2): initial error at time 1780654240: ext4_iget_extra_inode:5128: inode 15 [ 37.853992][ C0] EXT4-fs (loop2): last error at time 1780654240: ext4_iget_extra_inode:5128: inode 15 [ 37.904682][ T3550] loop2: lost filesystem error report for type 5 error -117 [ 37.909715][ T3550] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.068356][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.219342][ T3573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18'. [ 38.783616][ T3590] loop2: detected capacity change from 0 to 4096 [ 38.908436][ T3590] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.392111][ T3588] syz.2.22 (3588) used greatest stack depth: 9600 bytes left [ 39.476708][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.640101][ T3619] loop2: detected capacity change from 0 to 1024 [ 39.648427][ T3618] bridge_slave_0: left allmulticast mode [ 39.674485][ T3618] bridge_slave_0: left promiscuous mode [ 39.676097][ T3619] EXT4-fs: Ignoring removed bh option [ 39.706511][ T3618] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.738969][ T3619] EXT4-fs: inline encryption not supported [ 39.773079][ T3619] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 39.773704][ T3618] bridge_slave_1: left allmulticast mode [ 39.869506][ T3618] bridge_slave_1: left promiscuous mode [ 39.897317][ T3618] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.943665][ T3619] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 2: comm syz.2.30: lblock 2 mapped to illegal pblock 2 (length 1) [ 39.994761][ T3619] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 39.994912][ T3619] EXT4-fs (loop2): Remounting filesystem read-only [ 40.004106][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 40.004131][ C0] EXT4-fs (loop2): initial error at time 1780654242: ext4_map_blocks:791: inode 3: block 2 [ 40.004187][ C0] EXT4-fs (loop2): last error at time 1780654242: ext4_map_blocks:791: inode 3: block 2 [ 40.045465][ T3618] bond0: (slave bond_slave_0): Releasing backup interface [ 40.077544][ T3619] EXT4-fs (loop2): 1 orphan inode deleted [ 40.091374][ T3619] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.131651][ T3618] bond0: (slave bond_slave_1): Releasing backup interface [ 40.159860][ T3618] team0: Port device team_slave_0 removed [ 40.176804][ T3618] team0: Port device team_slave_1 removed [ 40.184863][ T3618] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.205879][ T3618] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.251183][ T3618] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.258865][ T3618] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.283408][ T3618] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 40.448328][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.770907][ T3637] loop4: detected capacity change from 0 to 512 [ 40.818474][ T3637] ======================================================= [ 40.818474][ T3637] WARNING: The mand mount option has been deprecated and [ 40.818474][ T3637] and is ignored by this kernel. Remove the mand [ 40.818474][ T3637] option from the mount to silence this warning. [ 40.818474][ T3637] ======================================================= [ 41.517778][ T3648] netlink: 'syz.4.41': attribute type 8 has an invalid length. [ 41.574250][ T3652] loop2: detected capacity change from 0 to 128 [ 41.595020][ T3648] sch_fq: defrate 0 ignored. [ 41.761092][ T28] kauditd_printk_skb: 106 callbacks suppressed [ 41.761111][ T28] audit: type=1400 audit(1780654244.182:277): avc: denied { write } for pid=3653 comm="syz.0.43" name="anycast6" dev="proc" ino=4026532768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 41.863364][ T3662] netlink: 'syz.0.46': attribute type 1 has an invalid length. [ 41.978293][ T28] audit: type=1400 audit(1780654244.422:278): avc: denied { read write } for pid=3665 comm="syz.1.47" name="uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 42.043737][ T28] audit: type=1400 audit(1780654244.422:279): avc: denied { open } for pid=3665 comm="syz.1.47" path="/dev/uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 42.106021][ T28] audit: type=1400 audit(1780654244.452:280): avc: denied { name_bind } for pid=3665 comm="syz.1.47" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 42.177588][ T28] audit: type=1400 audit(1780654244.602:281): avc: denied { create } for pid=3668 comm="syz.0.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 42.229417][ T3676] syz.0.51 (3676): attempted to duplicate a private mapping with mremap. This is not supported. [ 42.262404][ T28] audit: type=1400 audit(1780654244.702:282): avc: denied { connect } for pid=3675 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 42.316723][ T28] audit: type=1400 audit(1780654244.702:283): avc: denied { read } for pid=3675 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 42.377112][ T28] audit: type=1400 audit(1780654244.752:284): avc: denied { write } for pid=3675 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 42.861158][ T3685] syzkaller0: entered promiscuous mode [ 42.871631][ T3685] syzkaller0: entered allmulticast mode [ 42.900229][ T28] audit: type=1400 audit(1780654245.342:285): avc: denied { write } for pid=3684 comm="syz.3.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 43.034518][ T28] audit: type=1400 audit(1780654245.472:286): avc: denied { watch watch_reads } for pid=3689 comm="syz.3.56" path="/7" dev="tmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 43.144586][ T3692] loop3: detected capacity change from 0 to 128 [ 43.205125][ T3692] Zero length message leads to an empty skb [ 43.703711][ T3700] xt_CT: No such helper "snmp_trap" [ 43.718467][ T3710] loop2: detected capacity change from 0 to 256 [ 43.748265][ T3710] vfat: Bad value for 'uid' [ 43.765906][ T3710] vfat: Bad value for 'uid' [ 43.855605][ T3715] openvswitch: netlink: Key type 8454 is out of range max 32 [ 43.905049][ T3708] loop4: detected capacity change from 0 to 1024 [ 43.906752][ T3712] netlink: 16 bytes leftover after parsing attributes in process `syz.3.64'. [ 43.933659][ T3712] netlink: 16 bytes leftover after parsing attributes in process `syz.3.64'. [ 44.014748][ T3708] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.178914][ T3708] EXT4-fs error (device loop4): ext4_empty_dir:3114: inode #11: block 623: comm syz.4.62: Attempting to read directory block (623) that is past i_size (638464) [ 44.209455][ T3725] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 44.271653][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.302113][ T3730] loop3: detected capacity change from 0 to 512 [ 44.318903][ T3730] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.68: inode has both inline data and extents flags [ 44.363391][ T3730] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 44.368639][ T3730] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.68: couldn't read orphan inode 15 (err -117) [ 44.377857][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 44.377876][ C0] EXT4-fs (loop3): initial error at time 1780654246: ext4_orphan_get:1397: inode 15 [ 44.377932][ C0] EXT4-fs (loop3): last error at time 1780654246: ext4_orphan_get:1397: inode 15 [ 44.408817][ T3734] netlink: 'syz.4.69': attribute type 1 has an invalid length. [ 44.434708][ T3730] loop3: lost filesystem error report for type 5 error -117 [ 44.437460][ T3730] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.512837][ T3729] netlink: 'syz.3.68': attribute type 12 has an invalid length. [ 44.523052][ T3724] loop1: detected capacity change from 0 to 128 [ 44.531201][ T3729] netlink: 132 bytes leftover after parsing attributes in process `syz.3.68'. [ 44.657837][ T3735] bond1 (unregistering): Released all slaves [ 44.757403][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.961741][ T1063] kworker/u8:6: attempt to access beyond end of device [ 44.961741][ T1063] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 45.127565][ T3758] loop0: detected capacity change from 0 to 512 [ 45.162787][ T3758] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 45.179526][ T3759] loop1: detected capacity change from 0 to 164 [ 45.216877][ T3758] EXT4-fs (loop0): 1 truncate cleaned up [ 45.236061][ T3758] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.288035][ T3758] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 45.296638][ T3758] IPv6: NLM_F_CREATE should be set when creating new route [ 45.365538][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.469375][ T3768] loop2: detected capacity change from 0 to 512 [ 45.486853][ T3768] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.499456][ T3768] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.687891][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.136332][ T3776] loop0: detected capacity change from 0 to 512 [ 46.202655][ T3776] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 46.229222][ T3776] EXT4-fs (loop0): orphan cleanup on readonly fs [ 46.261198][ T3776] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4222: comm syz.0.82: Allocating blocks 41-42 which overlap fs metadata [ 46.283613][ T3776] loop0: lost filesystem error report for type 5 error -117 [ 46.286837][ T3776] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.82: Failed to acquire dquot type 0 [ 46.294658][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 46.294801][ C1] EXT4-fs (loop0): initial error at time 1780654248: ext4_mb_mark_diskspace_used:4222 [ 46.294969][ C1] EXT4-fs (loop0): last error at time 1780654248: ext4_mb_mark_diskspace_used:4222 [ 46.424052][ T3776] loop0: lost filesystem error report for type 5 error -117 [ 46.428257][ T3776] EXT4-fs error (device loop0): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 46.462991][ T3776] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #12: comm syz.0.82: corrupted inode contents [ 46.487807][ T3776] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 46.489340][ T3776] EXT4-fs error (device loop0): ext4_dirty_inode:6587: inode #12: comm syz.0.82: mark_inode_dirty error [ 46.527950][ T3776] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 46.531584][ T3776] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #12: comm syz.0.82: corrupted inode contents [ 46.575580][ T3776] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 46.595897][ T3776] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #12: comm syz.0.82: mark_inode_dirty error [ 46.649664][ T3776] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 46.651453][ T3776] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #12: comm syz.0.82: corrupted inode contents [ 46.728882][ T3776] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 46.733194][ T3776] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 46.777402][ T3776] loop0: lost filesystem error report for type 5 error -117 [ 46.780154][ T3776] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #12: comm syz.0.82: corrupted inode contents [ 46.824654][ T3776] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 46.825467][ T3776] EXT4-fs error (device loop0): ext4_truncate:4690: inode #12: comm syz.0.82: mark_inode_dirty error [ 46.869473][ T3776] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 46.872812][ T3776] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 46.916558][ T3776] loop0: lost filesystem error report for type 5 error -117 [ 46.921607][ T3776] EXT4-fs (loop0): 1 truncate cleaned up [ 46.949220][ T3776] EXT4-fs (loop0): pa ffff888108564f50: logic 1, phys. 41, len 23 [ 46.957838][ T3776] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5459: group 0, free 22, pa_free 23 [ 47.027626][ T3776] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 47.123592][ T3776] syz.0.82 (3776) used greatest stack depth: 8896 bytes left [ 47.146299][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.161039][ T3807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.92'. [ 47.208650][ T3807] netlink: 12 bytes leftover after parsing attributes in process `syz.1.92'. [ 47.261133][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 47.261149][ T28] audit: type=1400 audit(1780654249.672:317): avc: denied { lock } for pid=3808 comm="syz.0.93" path="socket:[5457]" dev="sockfs" ino=5457 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 47.307057][ T3807] vlan2: entered promiscuous mode [ 47.356452][ T3807] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 47.404032][ T3807] vlan2: entered allmulticast mode [ 47.409755][ T3807] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 47.712764][ T28] audit: type=1400 audit(1780654250.092:318): avc: denied { mount } for pid=3811 comm="syz.0.94" name="/" dev="autofs" ino=5469 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 47.771430][ T28] audit: type=1400 audit(1780654250.152:319): avc: denied { create } for pid=3813 comm="syz.1.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 47.831182][ T28] audit: type=1400 audit(1780654250.152:320): avc: denied { connect } for pid=3813 comm="syz.1.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 47.862403][ T28] audit: type=1400 audit(1780654250.212:321): avc: denied { setopt } for pid=3817 comm="syz.4.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 47.862431][ T28] audit: type=1400 audit(1780654250.212:322): avc: denied { write } for pid=3817 comm="syz.4.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 47.862457][ T28] audit: type=1400 audit(1780654250.242:323): avc: denied { read write } for pid=3817 comm="syz.4.96" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 47.862644][ T28] audit: type=1400 audit(1780654250.272:324): avc: denied { open } for pid=3817 comm="syz.4.96" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 47.893096][ T3823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.97'. [ 47.893135][ T3823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.97'. [ 47.988760][ T3827] loop1: detected capacity change from 0 to 1024 [ 48.045590][ T3827] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.047471][ T3830] capability: warning: `syz.0.100' uses deprecated v2 capabilities in a way that may be insecure [ 48.051981][ T28] audit: type=1400 audit(1780654250.492:325): avc: denied { ioctl } for pid=3828 comm="syz.0.100" path="socket:[5507]" dev="sockfs" ino=5507 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 48.052982][ T28] audit: type=1400 audit(1780654250.492:326): avc: denied { module_request } for pid=3828 comm="syz.0.100" kmod="net-pf-10-proto-1-type-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 48.109676][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.970665][ T3848] loop2: detected capacity change from 0 to 512 [ 49.055443][ T3848] msdos: Bad value for 'uid' [ 49.065252][ T3848] msdos: Bad value for 'uid' [ 49.285813][ T3855] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3855 comm=syz.4.107 [ 49.298465][ T3855] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3855 comm=syz.4.107 [ 49.310870][ T3855] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3855 comm=syz.4.107 [ 49.323342][ T3855] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3855 comm=syz.4.107 [ 49.335820][ T3855] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3855 comm=syz.4.107 [ 49.348277][ T3855] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3855 comm=syz.4.107 [ 49.360676][ T3855] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3855 comm=syz.4.107 [ 49.373234][ T3855] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3855 comm=syz.4.107 [ 49.385669][ T3855] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3855 comm=syz.4.107 [ 49.398084][ T3855] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3855 comm=syz.4.107 [ 49.468401][ T3858] loop1: detected capacity change from 0 to 8192 [ 49.488332][ T3862] loop2: detected capacity change from 0 to 256 [ 49.508888][ T3862] vfat: Bad value for 'shortname' [ 49.932403][ T3876] loop2: detected capacity change from 0 to 1024 [ 49.987368][ T3876] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.537600][ T3887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.553641][ T3887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.723367][ T3891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.121'. [ 50.986108][ T3904] netlink: 32 bytes leftover after parsing attributes in process `syz.3.125'. [ 51.163798][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.206221][ T3891] hsr_slave_1 (unregistering): left promiscuous mode [ 51.246502][ T3905] bond0: (slave bond_slave_1): Releasing backup interface [ 51.264780][ T3914] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 51.288120][ T3916] netlink: 28 bytes leftover after parsing attributes in process `syz.0.130'. [ 51.315713][ T3916] netlink: 28 bytes leftover after parsing attributes in process `syz.0.130'. [ 51.397465][ T3923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.133'. [ 51.424398][ T3923] netlink: 12 bytes leftover after parsing attributes in process `syz.3.133'. [ 51.452800][ T3923] netlink: 'syz.3.133': attribute type 1 has an invalid length. [ 51.564928][ T3930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.136'. [ 51.595352][ T3930] netlink: 12 bytes leftover after parsing attributes in process `syz.3.136'. [ 51.624771][ T3930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.136'. [ 52.192568][ T3948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.144'. [ 52.312564][ T3954] mmap: syz.1.146 (3954) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 52.449038][ T3962] loop1: detected capacity change from 0 to 512 [ 52.468413][ T3962] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 52.479870][ T3962] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.150: bad orphan inode 15 [ 52.490160][ T3962] loop1: lost filesystem error report for type 5 error -117 [ 52.490415][ T3962] ext4_test_bit(bit=14, block=18) = 1 [ 52.497862][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 52.497900][ C0] EXT4-fs (loop1): initial error at time 1780654254: ext4_orphan_get:1423 [ 52.497960][ C0] EXT4-fs (loop1): last error at time 1780654254: ext4_orphan_get:1423 [ 52.529609][ T3962] is_bad_inode(inode)=0 [ 52.534055][ T3962] NEXT_ORPHAN(inode)=1023 [ 52.538554][ T3962] max_ino=32 [ 52.541888][ T3962] i_nlink=0 [ 52.545933][ T3962] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.150: bg 0: block 161: padding at end of block bitmap is not set [ 52.560464][ T3962] loop1: lost filesystem error report for type 5 error -117 [ 52.560951][ T3962] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 52.579702][ T3962] loop1: lost filesystem error report for type 5 error -117 [ 52.581737][ T3962] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.601873][ T3962] ext2 filesystem being mounted at /38/qY3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 52.642070][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.673942][ T3969] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 52.848412][ T28] kauditd_printk_skb: 353 callbacks suppressed [ 52.848432][ T28] audit: type=1400 audit(1780654255.282:680): avc: denied { connect } for pid=3978 comm="syz.3.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 52.902067][ T28] audit: type=1400 audit(1780654255.332:681): avc: denied { listen } for pid=3978 comm="syz.3.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 52.968584][ T28] audit: type=1400 audit(1780654255.332:682): avc: denied { accept } for pid=3978 comm="syz.3.158" lport=45022 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 53.037276][ T28] audit: type=1400 audit(1780654255.342:683): avc: denied { name_connect } for pid=3978 comm="syz.3.158" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 53.217357][ T3977] loop2: detected capacity change from 0 to 512 [ 53.317234][ T3977] EXT4-fs: Ignoring removed bh option [ 53.373006][ T3985] loop3: detected capacity change from 0 to 512 [ 53.387873][ T3977] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 53.497941][ T3977] EXT4-fs (loop2): 1 truncate cleaned up [ 53.530509][ T3995] netlink: 'syz.4.163': attribute type 1 has an invalid length. [ 53.534342][ T3985] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.160: inode has both inline data and extents flags [ 53.554169][ T3985] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 53.557368][ T3985] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.160: couldn't read orphan inode 15 (err -117) [ 53.567482][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 53.567582][ C1] EXT4-fs (loop3): initial error at time 1780654256: ext4_orphan_get:1397: inode 15 [ 53.568147][ C1] EXT4-fs (loop3): last error at time 1780654256: ext4_orphan_get:1397: inode 15 [ 53.658866][ T3977] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.680713][ T3985] loop3: lost filesystem error report for type 5 error -117 [ 53.694445][ T3985] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.731171][ T28] audit: type=1400 audit(1780654256.172:684): avc: denied { ioctl } for pid=3999 comm="syz.1.165" path="socket:[6629]" dev="sockfs" ino=6629 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 53.786930][ T28] audit: type=1400 audit(1780654256.172:685): avc: denied { getopt } for pid=3999 comm="syz.1.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 53.818412][ T4000] Process accounting resumed [ 53.844904][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.862122][ T28] audit: type=1400 audit(1780654256.172:686): avc: denied { connect } for pid=4001 comm="syz.4.166" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 53.897546][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.946082][ T28] audit: type=1400 audit(1780654256.172:687): avc: denied { write } for pid=3976 comm="syz.2.157" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 53.996071][ T3380] IPVS: starting estimator thread 0... [ 54.010078][ T28] audit: type=1400 audit(1780654256.172:688): avc: denied { create } for pid=3976 comm="syz.2.157" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 54.081109][ T28] audit: type=1400 audit(1780654256.432:689): avc: denied { setopt } for pid=4013 comm="syz.4.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 54.100539][ T4015] IPVS: using max 2304 ests per chain, 115200 per kthread [ 54.223139][ T4023] Illegal XDP return value 4294967294 on prog (id 62) dev syz_tun, expect packet loss! [ 54.769618][ T4037] syzkaller0: entered promiscuous mode [ 54.787630][ T4037] syzkaller0: entered allmulticast mode [ 54.815339][ T4039] No such timeout policy "syz1" [ 54.979405][ T4044] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.044290][ T4044] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.074142][ T4046] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 55.164860][ T4058] netlink: 'syz.4.187': attribute type 12 has an invalid length. [ 55.231120][ T4062] syzkaller0: entered promiscuous mode [ 55.246976][ T4062] syzkaller0: entered allmulticast mode [ 55.269826][ T4062] tipc: Started in network mode [ 55.285039][ T4062] tipc: Node identity 0eb91a84ca4d, cluster identity 4711 [ 55.306559][ T4062] tipc: Enabled bearer , priority 0 [ 55.330151][ T4061] tipc: Resetting bearer [ 55.347366][ T4061] tipc: Disabling bearer [ 55.823828][ T4065] loop3: detected capacity change from 0 to 512 [ 55.932653][ T4065] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 55.963725][ T4065] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 55.986141][ T4065] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 56.053985][ T4065] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 56.076035][ T4065] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 56.121012][ T4065] System zones: 0-2, 18-18, 34-35 [ 56.176147][ T4057] loop2: detected capacity change from 0 to 764 [ 56.246083][ T4057] iso9660: Unknown parameter '0x000000000000000300000000000000000000000‹™gKΘZًy |}%-uW3X:9Z6W?U2L_+' [ 56.254377][ T4065] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.371598][ T4065] xt_TCPMSS: Only works on TCP SYN packets [ 56.408653][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.315371][ T4094] xt_CT: You must specify a L4 protocol and not use inversions on it [ 57.897589][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 57.897606][ T28] audit: type=1400 audit(1780654260.342:706): avc: denied { mount } for pid=4096 comm="syz.3.202" name="/" dev="ramfs" ino=6784 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 58.090434][ T4106] __nla_validate_parse: 5 callbacks suppressed [ 58.090454][ T4106] netlink: 136 bytes leftover after parsing attributes in process `syz.4.205'. [ 58.277834][ T4108] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 58.910183][ T28] audit: type=1400 audit(1780654261.352:707): avc: denied { cmd } for pid=4117 comm="syz.1.210" path="socket:[6803]" dev="sockfs" ino=6803 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 58.999690][ T28] audit: type=1400 audit(1780654261.442:708): avc: denied { read } for pid=4122 comm="syz.1.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 59.158669][ T28] audit: type=1400 audit(1780654261.602:709): avc: denied { bind } for pid=4127 comm="syz.2.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 59.177910][ T4120] loop0: detected capacity change from 0 to 512 [ 59.253818][ T28] audit: type=1400 audit(1780654261.692:710): avc: denied { read } for pid=4134 comm="syz.1.217" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 59.297643][ T4120] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 59.493917][ T4120] EXT4-fs error (device loop0): xattr_find_entry:337: inode #15: comm syz.0.211: corrupted xattr entries [ 59.508686][ T4120] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 59.523296][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 59.539942][ C1] EXT4-fs (loop0): initial error at time 1780654261: xattr_find_entry:337: inode 15 [ 59.549485][ C1] EXT4-fs (loop0): last error at time 1780654261: xattr_find_entry:337: inode 15 [ 59.750642][ T4120] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 59.897744][ T4120] EXT4-fs (loop0): 1 truncate cleaned up [ 59.967319][ T28] audit: type=1400 audit(1780654261.692:711): avc: denied { open } for pid=4134 comm="syz.1.217" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 59.990863][ T28] audit: type=1400 audit(1780654261.782:712): avc: denied { block_suspend } for pid=4132 comm="syz.4.216" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 60.012171][ T28] audit: type=1400 audit(1780654261.962:713): avc: denied { wake_alarm } for pid=4134 comm="syz.1.217" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 60.041773][ T28] audit: type=1400 audit(1780654262.012:714): avc: denied { connect } for pid=4134 comm="syz.1.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 60.063472][ T4120] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.098600][ T28] audit: type=1400 audit(1780654262.122:715): avc: denied { read } for pid=4134 comm="syz.1.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 60.294837][ T4148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.220'. [ 60.373436][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.097442][ T4167] netlink: 24 bytes leftover after parsing attributes in process `syz.3.225'. [ 61.314263][ T4178] selinux_netlink_send: 74 callbacks suppressed [ 61.314282][ T4178] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4178 comm=syz.3.225 [ 61.355712][ T4177] netlink: 14 bytes leftover after parsing attributes in process `syz.1.226'. [ 61.619461][ T4185] syz.2.228 uses obsolete (PF_INET,SOCK_PACKET) [ 61.659099][ T4177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.694169][ T4177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.719000][ T4177] bond0 (unregistering): Released all slaves [ 61.759333][ T4189] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.809514][ T4194] netlink: 'syz.0.231': attribute type 1 has an invalid length. [ 61.852237][ T4189] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.881904][ T4194] bond1: (slave bridge1): Enslaving as a backup interface with an up link [ 61.898993][ T4194] macvlan2: entered promiscuous mode [ 61.905518][ T4194] macvlan2: entered allmulticast mode [ 61.911395][ T4194] bond1: entered promiscuous mode [ 61.916953][ T4194] bridge1: entered promiscuous mode [ 61.922736][ T4194] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 61.931426][ T4194] bond1: left promiscuous mode [ 61.937088][ T4194] bridge1: left promiscuous mode [ 61.972119][ T4189] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.047662][ T4189] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.061980][ T4200] netlink: 16 bytes leftover after parsing attributes in process `syz.1.233'. [ 62.126097][ T154] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.140547][ T154] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.167468][ T154] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.179002][ T154] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.198544][ T4200] loop1: detected capacity change from 0 to 128 [ 62.440211][ T4214] loop0: detected capacity change from 0 to 128 [ 62.456085][ T4220] loop1: detected capacity change from 0 to 512 [ 62.742535][ T4214] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 62.765567][ T4220] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.923710][ T4226] bridge0: port 1(ip6gretap0) entered blocking state [ 62.936567][ T4214] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.962099][ T4226] bridge0: port 1(ip6gretap0) entered disabled state [ 62.970039][ T4226] ip6gretap0: entered allmulticast mode [ 62.977555][ T4226] ip6gretap0: entered promiscuous mode [ 62.983649][ T4226] bridge0: port 1(ip6gretap0) entered blocking state [ 62.991131][ T4226] bridge0: port 1(ip6gretap0) entered forwarding state [ 63.002612][ T4231] ip6gretap0: left allmulticast mode [ 63.022173][ T4220] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.058007][ T4214] netlink: 100 bytes leftover after parsing attributes in process `syz.0.238'. [ 63.079267][ T4231] ip6gretap0: left promiscuous mode [ 63.397814][ T4231] bridge0: port 1(ip6gretap0) entered disabled state [ 63.487047][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.574266][ T3300] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 63.687032][ T4241] netlink: 9 bytes leftover after parsing attributes in process `syz.4.247'. [ 63.746857][ T4241] gretap0: entered promiscuous mode [ 63.797358][ T4248] netlink: 5 bytes leftover after parsing attributes in process `syz.4.247'. [ 63.822137][ T4248] 0{X: renamed from gretap0 [ 63.832729][ T4248] 0{X: left promiscuous mode [ 63.839268][ T4248] 0{X: entered allmulticast mode [ 63.846932][ T4248] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 64.243821][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 64.243840][ T28] audit: type=1400 audit(1780654266.692:758): avc: denied { execute } for pid=4250 comm="syz.4.249" path="/46/file1" dev="tmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 64.947895][ T28] audit: type=1400 audit(1780654267.392:759): avc: denied { write } for pid=4259 comm="syz.2.253" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 65.268923][ T28] audit: type=1400 audit(1780654267.712:760): avc: denied { shutdown } for pid=4273 comm="syz.0.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 65.334851][ T28] audit: type=1400 audit(1780654267.712:761): avc: denied { name_connect } for pid=4273 comm="syz.0.258" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 65.346637][ T4274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.258'. [ 66.205083][ T4274] team0 (unregistering): Port device team_slave_0 removed [ 66.305845][ T4274] team0 (unregistering): Port device team_slave_1 removed [ 66.344726][ T28] audit: type=1400 audit(1780654268.792:762): avc: denied { bind } for pid=4277 comm="syz.3.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 66.379396][ T28] audit: type=1400 audit(1780654268.792:763): avc: denied { name_bind } for pid=4277 comm="syz.3.260" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 66.454427][ T28] audit: type=1400 audit(1780654268.792:764): avc: denied { node_bind } for pid=4277 comm="syz.3.260" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 66.507210][ T28] audit: type=1400 audit(1780654268.952:765): avc: denied { connect } for pid=4281 comm="syz.0.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 66.533902][ T4280] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.541134][ T4280] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.545785][ T28] audit: type=1400 audit(1780654268.982:766): avc: denied { read } for pid=4281 comm="syz.0.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 66.688264][ T4280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.708571][ T4280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.780441][ T68] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.791046][ T68] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.811164][ T68] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.845668][ T68] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.912850][ T4294] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 66.913343][ T28] audit: type=1400 audit(1780654269.352:767): avc: denied { ioctl } for pid=4293 comm="syz.0.266" path="socket:[7255]" dev="sockfs" ino=7255 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 67.000888][ T4294] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.011227][ T4294] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.449847][ T4319] Invalid option length (1045252) for dns_resolver key [ 68.875291][ T4328] netlink: 'syz.1.276': attribute type 1 has an invalid length. [ 69.599923][ T4334] xt_hashlimit: size too large, truncated to 1048576 [ 69.926251][ T4339] loop0: detected capacity change from 0 to 8192 [ 70.098389][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 70.098407][ T28] audit: type=1400 audit(1780654272.542:769): avc: denied { remount } for pid=4346 comm="syz.1.283" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 70.175269][ T4347] loop1: detected capacity change from 0 to 512 [ 70.224642][ T4347] EXT4-fs: test_dummy_encryption option not supported [ 70.606618][ T4355] loop1: detected capacity change from 0 to 128 [ 70.679189][ T4355] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 70.688635][ T4356] loop2: detected capacity change from 0 to 1024 [ 70.788023][ T4355] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 70.807800][ T4355] ext2 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.896811][ T4356] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 70.912764][ T4356] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.950028][ T3305] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.019366][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 71.071817][ T4375] netlink: 'syz.4.291': attribute type 12 has an invalid length. [ 71.085276][ T4375] netlink: 'syz.4.291': attribute type 29 has an invalid length. [ 71.094215][ T4375] netlink: 148 bytes leftover after parsing attributes in process `syz.4.291'. [ 71.127728][ T4375] netlink: 'syz.4.291': attribute type 1 has an invalid length. [ 71.137405][ T28] audit: type=1400 audit(1780654273.572:770): avc: denied { write } for pid=4377 comm="syz.1.293" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 71.140568][ T4375] netlink: 'syz.4.291': attribute type 2 has an invalid length. [ 71.167126][ T28] audit: type=1400 audit(1780654273.582:771): avc: denied { ioctl } for pid=4377 comm="syz.1.293" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 71.177422][ T4375] netlink: 11 bytes leftover after parsing attributes in process `syz.4.291'. [ 71.257258][ T4386] netlink: 4 bytes leftover after parsing attributes in process `syz.3.295'. [ 71.308646][ T4390] netlink: 12 bytes leftover after parsing attributes in process `syz.3.295'. [ 71.333196][ T28] audit: type=1400 audit(1780654273.772:772): avc: denied { ioctl } for pid=4383 comm="syz.2.294" path="/dev/ptp0" dev="devtmpfs" ino=246 ioctlcmd=0x3d04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 71.777234][ T4402] xt_hashlimit: size too large, truncated to 1048576 [ 72.236181][ T4404] loop1: detected capacity change from 0 to 512 [ 72.315587][ T4404] EXT4-fs: Ignoring removed bh option [ 72.444316][ T4404] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 72.511183][ T4404] EXT4-fs (loop1): 1 truncate cleaned up [ 72.574256][ T4404] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.700621][ T28] audit: type=1400 audit(1780654275.142:773): avc: denied { write } for pid=4403 comm="syz.1.301" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 72.805764][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.980075][ T4426] loop3: detected capacity change from 0 to 512 [ 73.098482][ T4434] loop0: detected capacity change from 0 to 512 [ 73.151862][ T4438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.311'. [ 73.244099][ T4434] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.271981][ T4445] netlink: 32 bytes leftover after parsing attributes in process `syz.3.314'. [ 73.293044][ T4434] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.315156][ T279] IPVS: starting estimator thread 0... [ 73.410224][ T28] audit: type=1400 audit(1780654275.852:774): avc: denied { getopt } for pid=4452 comm="syz.1.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 73.436018][ T4449] IPVS: using max 1680 ests per chain, 84000 per kthread [ 73.494712][ T28] audit: type=1400 audit(1780654275.942:775): avc: denied { setattr } for pid=4433 comm="syz.0.309" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 73.516188][ T4462] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 73.578695][ T4462] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.589935][ T4462] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.626336][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.838067][ T28] audit: type=1400 audit(1780654276.282:776): avc: denied { setopt } for pid=4446 comm="syz.4.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 73.982273][ T4471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.321'. [ 73.993227][ T28] audit: type=1400 audit(1780654276.422:777): avc: denied { bind } for pid=4469 comm="syz.1.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 73.993712][ T4473] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.019803][ T4473] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.053720][ T4473] bridge0: entered allmulticast mode [ 74.199988][ T4476] loop3: detected capacity change from 0 to 8192 [ 74.367477][ T28] audit: type=1400 audit(1780654276.812:778): avc: denied { create } for pid=4482 comm="syz.1.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 74.429748][ T4483] netlink: 'syz.1.325': attribute type 12 has an invalid length. [ 74.446672][ T4483] netlink: 'syz.1.325': attribute type 29 has an invalid length. [ 74.462991][ T4483] netlink: 148 bytes leftover after parsing attributes in process `syz.1.325'. [ 74.480916][ T4483] netlink: 'syz.1.325': attribute type 1 has an invalid length. [ 74.502105][ T4483] netlink: 'syz.1.325': attribute type 2 has an invalid length. [ 74.522554][ T4483] netlink: 11 bytes leftover after parsing attributes in process `syz.1.325'. [ 74.894297][ T4493] loop2: detected capacity change from 0 to 128 [ 74.953163][ T4493] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 75.061666][ T4493] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 75.132219][ T4499] netlink: 'syz.0.332': attribute type 1 has an invalid length. [ 75.132326][ T4493] ext2 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.168512][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 75.168532][ T28] audit: type=1400 audit(1780654277.612:782): avc: denied { ioctl } for pid=4501 comm="syz.1.333" path="socket:[8519]" dev="sockfs" ino=8519 ioctlcmd=0x48e6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 75.213950][ T4499] 8021q: adding VLAN 0 to HW filter on device bond2 [ 75.227199][ T4502] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 75.314020][ T3307] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.346536][ T4505] bond2: (slave veth3): Enslaving as an active interface with a down link [ 75.393033][ T28] audit: type=1400 audit(1780654277.832:783): avc: denied { create } for pid=4498 comm="syz.0.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 75.420221][ T28] audit: type=1326 audit(1780654277.832:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4508 comm="syz.4.336" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2ca319ce59 code=0x0 [ 75.446072][ T4499] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 75.455674][ T4499] bond2: (slave batadv1): making interface the new active one [ 75.463671][ T28] audit: type=1400 audit(1780654277.902:785): avc: denied { write } for pid=4498 comm="syz.0.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 75.486558][ T4499] batadv1: entered promiscuous mode [ 75.492198][ T4499] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 75.534171][ T4516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.549484][ T4516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.572714][ T4505] bond2 (unregistering): (slave veth3): Releasing active interface [ 75.576051][ T28] audit: type=1400 audit(1780654278.012:786): avc: denied { view } for pid=4515 comm="syz.1.338" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 75.606941][ T4505] bond2 (unregistering): (slave batadv1): Releasing active interface [ 75.616956][ T28] audit: type=1400 audit(1780654278.042:787): avc: denied { setopt } for pid=4517 comm="syz.2.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 75.639641][ T28] audit: type=1400 audit(1780654278.052:788): avc: denied { write } for pid=4517 comm="syz.2.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 75.663928][ T4505] bond2 (unregistering): Released all slaves [ 75.767563][ T4520] xt_hashlimit: size too large, truncated to 1048576 [ 75.940745][ T4526] loop0: detected capacity change from 0 to 4096 [ 75.956225][ T4526] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.990371][ T28] audit: type=1400 audit(1780654278.432:789): avc: denied { write } for pid=4525 comm="syz.0.343" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 76.047194][ T4534] loop3: detected capacity change from 0 to 1024 [ 76.051184][ T28] audit: type=1400 audit(1780654278.462:790): avc: denied { write open } for pid=4525 comm="syz.0.343" path="/71/file1/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 76.078676][ T28] audit: type=1400 audit(1780654278.522:791): avc: denied { mounton } for pid=4525 comm="syz.0.343" path="/71/file1/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 76.107953][ T4534] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.180341][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.397544][ T4541] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.631039][ T49] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.631098][ T49] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.631144][ T49] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.631255][ T49] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.851237][ T4571] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2582 sclass=netlink_xfrm_socket pid=4571 comm=syz.1.352 [ 77.273159][ T4575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.353'. [ 77.319217][ T4575] hsr_slave_1 (unregistering): left promiscuous mode [ 77.656451][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.977366][ T4549] syz.0.348 (4549) used greatest stack depth: 8192 bytes left [ 78.469255][ T4585] xt_hashlimit: size too large, truncated to 1048576 [ 78.585495][ T4589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.366'. [ 79.281855][ T4599] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz1' [ 79.309337][ T4589] hsr_slave_1 (unregistering): left promiscuous mode [ 79.546695][ T4608] process 'syz.2.362' launched './file1' with NULL argv: empty string added [ 79.666978][ T4611] netlink: 14 bytes leftover after parsing attributes in process `syz.2.363'. [ 79.668236][ T4612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.373'. [ 79.725756][ T4612] hsr_slave_1 (unregistering): left promiscuous mode [ 79.822631][ T4611] bond0 (unregistering): Released all slaves [ 80.080614][ T4620] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 80.134514][ T4624] loop3: detected capacity change from 0 to 256 [ 80.137899][ T4620] vhci_hcd vhci_hcd.2: default hub control req: 4006 v000d i0000 l0 [ 80.194405][ T4624] FAT-fs (loop3): Directory bread(block 64) failed [ 80.201321][ T4624] FAT-fs (loop3): Directory bread(block 65) failed [ 80.208449][ T4624] FAT-fs (loop3): Directory bread(block 66) failed [ 80.215451][ T4624] FAT-fs (loop3): Directory bread(block 67) failed [ 80.239369][ T4622] loop0: detected capacity change from 0 to 512 [ 80.284985][ T4624] FAT-fs (loop3): Directory bread(block 68) failed [ 80.308410][ T4624] FAT-fs (loop3): Directory bread(block 69) failed [ 80.333065][ T4624] FAT-fs (loop3): Directory bread(block 70) failed [ 80.370628][ T4624] FAT-fs (loop3): Directory bread(block 71) failed [ 80.385373][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 80.385390][ T28] audit: type=1400 audit(1780654282.832:810): avc: denied { name_bind } for pid=4628 comm="syz.1.370" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 80.393450][ T4624] FAT-fs (loop3): Directory bread(block 72) failed [ 80.439618][ T4624] FAT-fs (loop3): Directory bread(block 73) failed [ 80.603371][ T4638] tmpfs: Bad value for 'mpol' [ 80.648102][ T4646] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2582 sclass=netlink_xfrm_socket pid=4646 comm=syz.2.377 [ 80.661288][ T4647] loop3: detected capacity change from 0 to 128 [ 80.679080][ T4647] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 80.736944][ T4643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.386'. [ 80.900619][ T4647] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 80.925261][ T4660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.379'. [ 80.932700][ T4647] ext2 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.934344][ T4660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.379'. [ 80.988147][ T4655] netlink: 'syz.2.379': attribute type 4 has an invalid length. [ 80.998093][ T4655] netlink: 152 bytes leftover after parsing attributes in process `syz.2.379'. [ 81.098343][ T4643] team0 (unregistering): Port device team_slave_0 removed [ 81.227445][ T3301] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 81.231230][ T4643] team0 (unregistering): Port device team_slave_1 removed [ 82.306494][ T28] audit: type=1400 audit(1780654284.752:811): avc: denied { connect } for pid=4683 comm="syz.1.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 82.509500][ T28] audit: type=1400 audit(1780654284.902:812): avc: denied { write } for pid=4683 comm="syz.1.388" path="socket:[7952]" dev="sockfs" ino=7952 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 82.571729][ T4560] IPVS: starting estimator thread 0... [ 82.662841][ T4700] loop3: detected capacity change from 0 to 256 [ 82.675143][ T4693] IPVS: using max 2304 ests per chain, 115200 per kthread [ 82.697848][ T4700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.393'. [ 82.706708][ T28] audit: type=1400 audit(1780654285.142:813): avc: denied { write } for pid=4699 comm="syz.3.393" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 82.735189][ T4698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.735295][ T4696] loop2: detected capacity change from 0 to 128 [ 82.759296][ T28] audit: type=1400 audit(1780654285.142:814): avc: denied { bind } for pid=4699 comm="syz.3.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 82.906938][ T4707] tmpfs: Bad value for 'mpol' [ 82.948781][ T4708] loop3: detected capacity change from 0 to 4096 [ 83.044933][ T4708] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.073809][ T28] audit: type=1400 audit(1780654285.512:815): avc: denied { write } for pid=4705 comm="syz.3.405" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 83.096267][ T28] audit: type=1400 audit(1780654285.512:816): avc: denied { add_name } for pid=4705 comm="syz.3.405" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 83.288347][ T4733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.403'. [ 83.299435][ T28] audit: type=1400 audit(1780654285.742:817): avc: denied { write } for pid=3301 comm="syz-executor" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 83.332823][ T4733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.403'. [ 83.345844][ T28] audit: type=1400 audit(1780654285.742:818): avc: denied { remove_name } for pid=3301 comm="syz-executor" name="lost+found" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 83.348380][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.378368][ T28] audit: type=1400 audit(1780654285.742:819): avc: denied { rmdir } for pid=3301 comm="syz-executor" name="lost+found" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 83.498093][ T4740] netlink: 14 bytes leftover after parsing attributes in process `syz.0.419'. [ 83.562466][ T4740] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.590901][ T4740] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.606428][ T4740] bond0 (unregistering): Released all slaves [ 83.638988][ T4753] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2582 sclass=netlink_xfrm_socket pid=4753 comm=syz.4.411 [ 83.846492][ T4767] netlink: 24 bytes leftover after parsing attributes in process `syz.4.417'. [ 83.880428][ T4767] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4767 comm=syz.4.417 [ 83.944580][ T4771] syzkaller0: entered promiscuous mode [ 83.950193][ T4771] syzkaller0: entered allmulticast mode [ 83.959993][ T4756] Process accounting paused [ 84.091785][ T4776] loop0: detected capacity change from 0 to 1024 [ 84.104694][ T4776] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 84.122440][ T4776] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 84.163408][ T4776] EXT4-fs error (device loop0): ext4_get_journal_inode:5896: inode #32: comm syz.0.432: iget: special inode unallocated [ 84.182010][ T4776] loop0: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 84.183332][ T4776] EXT4-fs (loop0): Remounting filesystem read-only [ 84.199049][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 84.199068][ C1] EXT4-fs (loop0): initial error at time 1780654286: ext4_get_journal_inode:5896: inode 32 [ 84.199106][ C1] EXT4-fs (loop0): last error at time 1780654286: ext4_get_journal_inode:5896: inode 32 [ 84.267574][ T4776] EXT4-fs (loop0): no journal found [ 84.274809][ T4776] EXT4-fs (loop0): can't get journal size [ 84.289576][ T4776] EXT4-fs (loop0): filesystem is read-only [ 84.303768][ T4776] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 84.318394][ T4785] netlink: 14 bytes leftover after parsing attributes in process `syz.3.426'. [ 84.382991][ T4785] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.398663][ T4786] loop2: detected capacity change from 0 to 8192 [ 84.417173][ T4785] bond0 (unregistering): Released all slaves [ 84.756031][ T4786] ================================================================== [ 84.764186][ T4786] BUG: KCSAN: data-race in __d_drop / fast_dput [ 84.770472][ T4786] [ 84.772825][ T4786] write to 0xffff88811b8bfb50 of 8 bytes by task 4792 on cpu 1: [ 84.780479][ T4786] __d_drop+0x14d/0x240 [ 84.784669][ T4786] d_invalidate+0x50/0x1d0 [ 84.789126][ T4786] path_openat+0x12e6/0x2050 [ 84.793755][ T4786] do_file_open+0x16c/0x290 [ 84.798298][ T4786] do_sys_openat2+0x94/0x130 [ 84.802926][ T4786] __x64_sys_openat+0xf2/0x120 [ 84.807735][ T4786] x64_sys_call+0x1e39/0x3020 [ 84.812460][ T4786] do_syscall_64+0x12c/0x3b0 [ 84.817097][ T4786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.823020][ T4786] [ 84.825366][ T4786] read to 0xffff88811b8bfb50 of 8 bytes by task 4786 on cpu 0: [ 84.832940][ T4786] fast_dput+0x5f/0x2c0 [ 84.837129][ T4786] dput+0x24/0x60 [ 84.840785][ T4786] filename_mknodat+0x2cb/0x450 [ 84.845675][ T4786] __se_sys_mknodat+0x38/0xf0 [ 84.850422][ T4786] __x64_sys_mknodat+0x55/0x70 [ 84.855250][ T4786] x64_sys_call+0x312/0x3020 [ 84.859887][ T4786] do_syscall_64+0x12c/0x3b0 [ 84.864535][ T4786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.870472][ T4786] [ 84.872898][ T4786] value changed: 0xffff888237762c00 -> 0x0000000000000000 [ 84.880049][ T4786] [ 84.882411][ T4786] Reported by Kernel Concurrency Sanitizer on: [ 84.888607][ T4786] CPU: 0 UID: 0 PID: 4786 Comm: syz.2.425 Not tainted syzkaller #0 PREEMPT(lazy) [ 84.897856][ T4786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 84.907955][ T4786] ================================================================== [ 84.956084][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.