last executing test programs: 19m45.371817676s ago: executing program 32 (id=449): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) unshare(0x62040200) socket$l2tp6(0xa, 0x2, 0x73) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, 0xffffffffffffffff, 0x3000) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1c1) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) getsockopt$inet_tcp_buf(r3, 0x6, 0x1a, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x14010, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x2710, @local}, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f0000001040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001080)=0x14) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x390, 0xffffffff, 0xf0, 0x240, 0xf0, 0xffffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ip={@broadcast, @loopback, 0xff, 0xffffffff, 'vlan1\x00', 'macvlan0\x00', {}, {}, 0x62, 0x2, 0x42}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth0\x00', {0x63, 0x518, 0x7fff, 0x586b, 0x2, 0x200, 0xfffffffc, 0x78, 0x80}, {0x8000000000000001}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4, 0x2, 0x2}}, @common=@ah={{0x30}, {[0x10001, 0x6]}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x0, 0x7, 0x2, 0x2, 0x1, 0x3]}, {0x2, [0x4, 0x1, 0x7, 0x1, 0x0, 0x3], 0x2}}}}, {{@ip={@remote, @empty, 0xff000000, 0x0, 'vlan1\x00', 'vcan0\x00', {}, {}, 0x29, 0x2, 0x8}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'pim6reg1\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="4c00000002060108e80034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e1f}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 1m33.152664521s ago: executing program 33 (id=3734): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001580)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x40000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'aegis256-generic\x00'}, 0x0, 0x180}}, @algo_auth={0x48, 0x1, {{'blake2s-224-x86\x00'}}}]}, 0x184}}, 0x0) 1m1.355190011s ago: executing program 34 (id=4008): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x125}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x89}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 57.858126085s ago: executing program 35 (id=4115): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x100b0}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001140)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) 56.368661472s ago: executing program 36 (id=4166): sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) 55.346625212s ago: executing program 37 (id=4178): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x24040014) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x8, 0x7, 0x1, 0x0, "03e49a54"}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 53.84833605s ago: executing program 38 (id=4195): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2042, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2000001946}, 0x100, 0x0, 0x0, 0x8, 0x1, 0x7fffffff, 0xfffc, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000dc0)) bpf$ITER_CREATE(0x21, &(0x7f0000000e40), 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x45, 0x9, 0x4, 0x25dfdbfd, {0x2}}, 0x14}}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8400) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x71, 0x5, 0x8, 0x8, 0x0, 0x1f, 0x1369a, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x1}, 0xb06, 0x3, 0x8, 0x1, 0x7f, 0x8800, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000005c40)={&(0x7f0000004700)={0xa, 0x4e24, 0xa6d5, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f00000058c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @multicast1}}}}, @hopopts={{0x18, 0x29, 0x32, {0x13}}}], 0x40}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000004a63b50000000000000000000000000000000000a16bfb4a0ce50050035155a59ff803cb09daddfd09f7c7e9c02d2d3db8f7b27ed7e38cfd250722ad8ba26d3118139260561ab3f0119c123dbaf067"], 0x50) r2 = socket$caif_seqpacket(0x25, 0x5, 0x3) sendmsg(r2, &(0x7f0000004700)={&(0x7f0000001e00)=@nfc={0x27, 0x0, 0x0, 0x3}, 0x80, 0x0}, 0x4854) bpf$MAP_LOOKUP_ELEM(0x4, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) 42.536135892s ago: executing program 9 (id=4267): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000810281ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 42.436780258s ago: executing program 9 (id=4272): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x8000000) 42.433655008s ago: executing program 9 (id=4273): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8000) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, 0x0, 0x30004001) socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x3, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xc, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x2, 0x3fff8000}, 0x0, 0x32, 0x43a1ad76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x23c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f0000000000), 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x24, &(0x7f0000000000), 0x4) 41.452631275s ago: executing program 9 (id=4281): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000810281ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 41.452119795s ago: executing program 9 (id=4282): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x255012, 0x0) 40.555461408s ago: executing program 9 (id=4285): r0 = socket$kcm(0x10, 0x2, 0x0) close(0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) close(0x3) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x10, 0x0}, 0x3000c085) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 36.664843965s ago: executing program 5 (id=4323): r0 = socket$kcm(0x10, 0x2, 0x0) close(0x3) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x7, &(0x7f0000000140)=r2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x241) 36.664461305s ago: executing program 5 (id=4324): socket$packet(0x11, 0x2, 0x300) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000200)={@empty, @rand_addr=0x64010101, 0x0, "028a3f6c58b274e6d8451697efe42011ee1df06e9264f7d866b1970548fc3c7b", 0x800b2, 0x309, 0x4, 0x40000006}, 0x3c) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/253, 0xfd, 0x1) 36.556565231s ago: executing program 5 (id=4328): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000b80)=ANY=[@ANYBLOB="1c0000000203010100000000000000000400001a0800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x20, 0x1, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x3, 0x9}}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x50) 36.503481935s ago: executing program 5 (id=4332): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c0000001b0a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x80}}, 0x0) close(r0) 36.294447707s ago: executing program 8 (id=4334): r0 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r0, 0x0, 0x8000) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000800)}], 0x1}, 0xe900) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x3, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xc, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x2, 0x3fff8000}, 0x0, 0x32, 0x43a1ad76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x23c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40101, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7f}, 0x0, 0x0, 0x4000000, 0x9, 0x5, 0x8000, 0xfff7, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0xd, &(0x7f0000000000), 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x24, &(0x7f0000000000), 0x4) 35.635673315s ago: executing program 5 (id=4335): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x255012, 0x0) 35.565217759s ago: executing program 5 (id=4339): write$cgroup_type(0xffffffffffffffff, &(0x7f0000000140), 0x9) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{0x0}], 0x1}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)=@caif=@dbg, 0x80, 0x0}, 0x10000) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040), 0x4) r1 = socket$kcm(0x10, 0x400000002, 0x0) close(r1) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) sendmsg$sock(r2, 0x0, 0x4004081) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)}, 0xb3503436ddae298) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x2062) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230000) 35.453765296s ago: executing program 8 (id=4343): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073115c00000000008510000002000000850000007600000095000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 35.428537997s ago: executing program 8 (id=4344): bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0), 0xc) 35.353486591s ago: executing program 8 (id=4347): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0x0) 35.295975995s ago: executing program 8 (id=4350): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x255012, 0x0) 35.242644378s ago: executing program 8 (id=4352): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 35.072881518s ago: executing program 7 (id=4356): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000c0000000400000001000084fdffffff0a000000020000000200000000000000000000010500080000000000006100302e6161"], 0x0, 0x4c}, 0x28) 35.03259781s ago: executing program 7 (id=4357): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x3, 0x1, 0xffff}}, 0x80, 0x0}, 0x200008d5) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x33fe0) 34.970812524s ago: executing program 7 (id=4358): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000180)=[{&(0x7f0000002800)="3282db78e0ea55", 0x7}], 0x1}, 0x8400) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x80, @local}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000640)="455b1c1ed5900423c15445e625bc121395a1ca64b3dd6f8aeb723872f617d717a26bf00271b580f6822a2c6896c756f9884b052d314f2a0e782a11c793063457ccd878782b6599e2c51e40ed5142e32cf8b07a76201b7644ac62f011223e925d8565cde47b522a9b86be7847318bfeaf58de2c6a1aebf00c39a22ec6de373ec332917b7586bf8298180eb89831e03feae224ca839e8ca7041056cb9ed42abcd994", 0xa1}, {&(0x7f0000000800)="7e24225d7d1bf3f2c2e3350446b32bcc9a579c864b87c0b26e9513f1a964562cd0fb40e07a028a9e4a8509c6183dc2c51a7f307806ce093fad8f167b3f1656081a0f4b15e021952a5e40d65779b924ed3fd175df8673c7544e9e3b11bc621acae054258215e76d7f16569f3436c00fcc7c6c154f87afc22e0ad2a3737a8f6e1cdf815f357d0b10e57e633006dd00e8cc5c66ddb415a93124d45ef1e687b1e29d9fb742d4f8b91f69854f7ba2eaec1b2782a4807fba2fc86bb82f320faa5da21794d4e6b2795f823dd429c33bb5a117ec441e28", 0xd3}, {&(0x7f0000000d40)="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", 0x43a}], 0x3}, 0x0) 34.87137803s ago: executing program 7 (id=4361): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0x0) 34.804531834s ago: executing program 7 (id=4363): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x255012, 0x0) 34.774890065s ago: executing program 7 (id=4365): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x9d) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7c8}, {}, {}, {0x5, 0x0, 0xd, 0x0}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 33.123616502s ago: executing program 2 (id=4374): r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x6005, 0x0, @empty, 0x7}, 0x80, 0x0}, 0x20040040) sendmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002980)=ANY=[], 0x1258}, 0x4000080) recvmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x10042) 33.074073615s ago: executing program 2 (id=4375): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="110000000400000004"], 0x48) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2000000}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0035b69fdb90d984"], 0x0, 0x26}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@o_path={0x0, 0x0, 0x4010, r1}, 0x18) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0x0, 0x7, 0x18}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 32.564811505s ago: executing program 2 (id=4376): r0 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r0, 0x0, 0x0) 32.564545465s ago: executing program 2 (id=4377): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b4001180fe01", 0x38}], 0x1}, 0x0) 32.538394346s ago: executing program 2 (id=4378): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x255012, 0x0) 32.503544838s ago: executing program 2 (id=4379): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000376, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x14, 0x32, 0xb, 0x70bd27, 0xfffffffc, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x2008010) 25.325605298s ago: executing program 39 (id=4285): r0 = socket$kcm(0x10, 0x2, 0x0) close(0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) close(0x3) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x10, 0x0}, 0x3000c085) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 20.296869062s ago: executing program 40 (id=4339): write$cgroup_type(0xffffffffffffffff, &(0x7f0000000140), 0x9) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{0x0}], 0x1}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)=@caif=@dbg, 0x80, 0x0}, 0x10000) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040), 0x4) r1 = socket$kcm(0x10, 0x400000002, 0x0) close(r1) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) sendmsg$sock(r2, 0x0, 0x4004081) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)}, 0xb3503436ddae298) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x2062) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230000) 19.305150611s ago: executing program 41 (id=4352): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 19.259857653s ago: executing program 42 (id=4365): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x9d) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7c8}, {}, {}, {0x5, 0x0, 0xd, 0x0}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.295550058s ago: executing program 43 (id=4379): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000376, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x14, 0x32, 0xb, 0x70bd27, 0xfffffffc, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x2008010) 2.930089938s ago: executing program 1 (id=4514): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @empty=0xe0000002}, 0x10) 2.820596464s ago: executing program 1 (id=4516): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001802", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2.814277345s ago: executing program 1 (id=4518): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000004100)=[{{&(0x7f0000001980)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000002100)=[@ip_ttl={{0x14, 0x0, 0x2, 0x101}}], 0x18}}], 0x1, 0x0) 2.763746058s ago: executing program 1 (id=4522): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001100)={'sit0\x00', &(0x7f0000001080)={'erspan0\x00', 0x0, 0x7, 0x20, 0x101, 0xf, {{0x6, 0x4, 0x1, 0x9, 0x18, 0x64, 0x0, 0x4, 0x4, 0x0, @rand_addr=0x64010101, @remote, {[@end]}}}}}) 2.7352223s ago: executing program 1 (id=4524): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000140)={[{@debug}, {@delalloc}, {@journal_ioprio}, {@test_dummy_encryption}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@nodiscard}, {@abort}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x2c600, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, 0xfffffffffffffffe, 0xff80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0) ftruncate(r2, 0xc17a) ftruncate(r2, 0x3) r3 = socket$inet(0x2, 0x1, 0x0) bind$inet(r3, 0x0, 0x0) r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r4, 0x9204, 0x72567) read(r4, &(0x7f0000000040)=""/123, 0x7b) sendmmsg$inet(r3, &(0x7f0000000140)=[{{&(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x20004840) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) syz_clone(0x280480, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000040)) syz_usb_connect(0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) 2.676688403s ago: executing program 0 (id=4525): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r3 = gettid() r4 = msgget$private(0x0, 0x1) msgsnd(r4, 0x0, 0x0, 0x800) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@alu={0x7, 0x1, 0x6, 0x0, 0x0, 0xffffffffffffffc0}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.668152434s ago: executing program 6 (id=4527): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x48) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc40a, &(0x7f00000002c0)={[{@noblock_validity}, {@dioread_lock}, {@nobh}, {@nouid32}, {@bh}, {@usrjquota, 0x2e}, {@noacl}, {@nodiscard}, {@jqfmt_vfsv0}, {@jqfmt_vfsold}], [], 0x2c}, 0x4, 0x45e, &(0x7f0000000480)="$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") bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38) 2.427157547s ago: executing program 6 (id=4528): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001802", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2.361773162s ago: executing program 4 (id=4529): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x34040040) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$TIOCL_SETVESABLANK(r4, 0x560e, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, 0x0, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00', 0x4}) write$sndseq(r7, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, 0x0) sendto$inet(r5, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r5, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 2.161114273s ago: executing program 3 (id=4533): iopl(0x3) r0 = syz_open_dev$evdev(&(0x7f00000002c0), 0x1, 0xa00) poll(&(0x7f0000000280)=[{r0, 0x100}], 0x1, 0xc4800000) 2.067917429s ago: executing program 3 (id=4534): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0x2}, 0x94) 2.067634168s ago: executing program 6 (id=4535): r0 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4d", 0x7}], 0x1, 0x0, 0x0, 0x900}, 0x0) 2.067456339s ago: executing program 6 (id=4536): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1b) 2.03957007s ago: executing program 3 (id=4537): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x48, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.968768104s ago: executing program 3 (id=4538): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x358, 0x800000000000) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) syz_clone(0x2020000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect(0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) 1.968185654s ago: executing program 6 (id=4539): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket(0x23, 0x6, 0x5) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019c80)=""/102400, 0x19000) inotify_init1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r3, 0x0, &(0x7f0000000180)=0x64) bpf$TOKEN_CREATE(0x24, 0x0, 0xfffffffffffffcff) socket$unix(0x1, 0x1, 0x0) setresgid(0x0, 0xee01, 0x0) creat(&(0x7f0000000240)='./file1\x00', 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) socket$unix(0x1, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) 1.568575517s ago: executing program 0 (id=4540): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x3, 0x1, 0xffff}}, 0x80, 0x0}, 0x200008d5) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) 1.54450539s ago: executing program 1 (id=4541): iopl(0x3) getgroups(0xffffffffffffff33, 0xfffffffffffffffe) 921.186306ms ago: executing program 3 (id=4542): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x45e, 0xf9, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x20, [{{0x9, 0x4, 0x0, 0x29, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x7, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002205000000a1b685eca9"], 0x0}, 0x0) 841.09164ms ago: executing program 0 (id=4543): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="9c000000190001000000000000000008802090000112fd05"], 0x9c}, 0x1, 0x0, 0x0, 0x20048085}, 0x0) 631.291253ms ago: executing program 4 (id=4544): msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000340)=""/4096) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095000000000000003dbe09b76f029b555342aed023ab6745b1a50e80a0af23c8f96a832e13eecbafdc61929d07d04f9e2f42f6c92f02000000bccf56bee226"], &(0x7f0000001940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4fea0025a729bd7000fddb03250a0000cdff2674c200000100182117004e001999ea0000e800000000"], 0x24}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) r1 = epoll_create(0x7) r2 = epoll_create1(0x0) r3 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100)) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r5, &(0x7f0000000080)={0x1008}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000240)=ANY=[@ANYRESOCT=r5], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BINDER_GET_EXTENDED_ERROR(r6, 0xc00c6211, &(0x7f0000000540)) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r7, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) connect$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, 0x7}, 0x1c) 533.209728ms ago: executing program 0 (id=4545): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x100, 0x1) getdents64(r2, 0x0, 0x0) 521.061179ms ago: executing program 4 (id=4546): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000a40)={0xa, 0x6e24, 0x7fff, @mcast1, 0x9}, 0x1c) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 494.87079ms ago: executing program 0 (id=4547): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x13, 0x10, 0x2}, 0x50) 408.746986ms ago: executing program 4 (id=4548): r0 = socket$kcm(0x10, 0x2, 0x0) close(0x3) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x10, 0x0}, 0x3000c085) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x7, &(0x7f0000000140)=r2, 0x4) sendmsg$kcm(r0, 0x0, 0x241) 361.660379ms ago: executing program 6 (id=4549): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x48, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 359.974609ms ago: executing program 0 (id=4550): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0) mmap(&(0x7f000048a000/0x1000)=nil, 0x1000, 0x2, 0x12, r2, 0x8000) ftruncate(r2, 0xc17a) ftruncate(r2, 0x3) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x4000fff, 0xfffffffffffffffe) r4 = socket$inet(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000140)=[{{&(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x20004840) sendmmsg$inet(r4, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)='J', 0x1}], 0x1}}], 0x1, 0x91) ppoll(&(0x7f0000000240)=[{r4, 0x80}], 0x1, &(0x7f00000002c0), 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) syz_clone(0x2020000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x208}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect(0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) 304.083622ms ago: executing program 4 (id=4551): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000458c35d43ae7040019b06e5454f20a698b65cbec40bf1ac6553202c7b5f9bfd104ca34461bafca4d413462534c61b18de64b3de09bbcc585e72ffe304c4740fac1c352129526701ee9552a176601000000010000001e96d2296e7a8d828e2034924e79631c55765929b07b2ff2c144f9c717b3eac18d692b50", @ANYRES32, @ANYBLOB="00000000000000006200000a00000000180000000000000000000000040000009500000000000000369a00000000000018010000202078250000000000202020631af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50200000000000085000000cb0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='b *:'], 0xb) gettid() socketpair$nbd(0x1, 0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, 0x0, 0x8) r3 = openat$cgroup_devices(r1, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) 669.859µs ago: executing program 3 (id=4552): ioctl$TCGETA(0xffffffffffffffff, 0x5405, 0x0) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) write$hidraw(r1, 0x0, 0x0) 0s ago: executing program 4 (id=4553): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000180)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@orlov}, {@noload}, {@delalloc}, {@mblk_io_submit}, {@commit}, {@noblock_validity}, {@nogrpid}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x477, &(0x7f0000001380)="$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") creat(&(0x7f0000000e00)='./file0\x00', 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) r3 = epoll_create(0x7) r4 = epoll_create1(0x0) r5 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000100)) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000140)={0x60000000}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r7, &(0x7f0000000080)={0x1008}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000000)) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000080)='./file4\x00', 0xa18c14, &(0x7f00000003c0)={[{@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@uni_xlate}, {@uni_xlate}, {@utf8no}, {@utf8}, {@uni_xlate}, {@numtail}, {@utf8no}, {@utf8no}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@uni_xlate}]}, 0x89, 0x2b7, &(0x7f0000000840)="$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") socketpair$unix(0x1, 0x2, 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f00000001c0)='./file0\x00', 0x2800704, &(0x7f0000000500), 0xe7, 0x48f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x26e1, 0x109) kernel console output (not intermixed with test programs): (user) 8 [ 1278.081800][T18987] lo speed is unknown, defaulting to 1000 [ 1280.275808][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 1280.275825][ T28] audit: type=1326 audit(1771260542.575:12214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18989 comm="syz.0.3620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81e5dfbf79 code=0x7ffc0000 [ 1280.333770][ T28] audit: type=1326 audit(1771260542.575:12215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18989 comm="syz.0.3620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81e5dfbf79 code=0x7ffc0000 [ 1280.357734][ T28] audit: type=1326 audit(1771260542.934:12216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19001 comm="syz.3.3624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a0a6bf79 code=0x7ffc0000 [ 1280.389996][ T28] audit: type=1326 audit(1771260542.934:12217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19001 comm="syz.3.3624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a0a6bf79 code=0x7ffc0000 [ 1280.432656][T19017] loop3: detected capacity change from 0 to 512 [ 1280.439649][T19017] EXT4-fs: Ignoring removed orlov option [ 1280.453059][T19020] loop5: detected capacity change from 0 to 1024 [ 1280.463128][ T28] audit: type=1326 audit(1771260542.934:12218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19001 comm="syz.3.3624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f87a0a6bf79 code=0x7ffc0000 [ 1280.487477][T19017] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1280.505060][T19017] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1280.513890][T19017] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3628: bg 0: block 248: padding at end of block bitmap is not set [ 1280.528437][ T28] audit: type=1326 audit(1771260542.934:12219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19001 comm="syz.3.3624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a0a6bf79 code=0x7ffc0000 [ 1280.552355][ T28] audit: type=1326 audit(1771260542.934:12220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19001 comm="syz.3.3624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a0a6bf79 code=0x7ffc0000 [ 1280.553273][T19017] loop3: lost filesystem error report for type 5 error -117 [ 1280.576255][ T28] audit: type=1326 audit(1771260543.554:12221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19016 comm="syz.3.3628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a0a6bf79 code=0x7ffc0000 [ 1280.617649][T19017] Quota error (device loop3): write_blk: dquota write failed [ 1280.625258][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 1280.625276][ C0] EXT4-fs (loop3): last error at time 1771260543: ext4_validate_block_bitmap:441 [ 1280.643385][T19020] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1280.663791][T19030] veth0_vlan: entered allmulticast mode [ 1280.697269][ T28] audit: type=1326 audit(1771260543.554:12222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19016 comm="syz.3.3628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f87a0a6bf79 code=0x7ffc0000 [ 1280.730727][T19017] EXT4-fs error (device loop3): ext4_acquire_dquot:7003: comm syz.3.3628: Failed to acquire dquot type 1 [ 1280.752859][T19017] loop3: lost filesystem error report for type 5 error -117 [ 1280.764063][T19017] EXT4-fs (loop3): 1 truncate cleaned up [ 1280.787823][T19015] veth0_vlan: left promiscuous mode [ 1280.803030][T19015] veth0_vlan: entered promiscuous mode [ 1281.011926][T19034] lo speed is unknown, defaulting to 1000 [ 1281.733156][T19017] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1281.746427][T18360] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1281.818406][T19039] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3632'. [ 1281.836762][T19040] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3633'. [ 1281.853902][T19017] EXT4-fs: Ignoring removed orlov option [ 1281.872143][T19017] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1281.883571][T19040] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3633'. [ 1281.915218][T19017] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 1281.926017][T19040] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3633'. [ 1282.585187][T19017] EXT4-fs error (device loop3): __ext4_remount:6806: comm syz.3.3628: Abort forced by user [ 1282.600609][T19017] EXT4-fs (loop3): Remounting filesystem read-only [ 1282.614700][T19017] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 1282.632575][T19017] ext4 filesystem being remounted at /164/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1282.745570][T19053] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19053 comm=syz.0.3636 [ 1282.759036][T19053] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3636'. [ 1282.769008][T19053] bridge0: port 2(bridge_slave_1) entered blocking state [ 1282.776218][T19053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1282.783644][T19053] bridge0: port 1(bridge_slave_0) entered blocking state [ 1282.790823][T19053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1282.914843][T15376] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1282.990879][T19062] lo speed is unknown, defaulting to 1000 [ 1283.159525][T19069] lo speed is unknown, defaulting to 1000 [ 1283.381850][T19072] loop4: detected capacity change from 0 to 512 [ 1283.507327][T19072] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1283.783672][T19076] loop5: detected capacity change from 0 to 512 [ 1283.801319][T19076] EXT4-fs: Ignoring removed orlov option [ 1283.839991][T19076] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1283.858879][T19076] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1283.875559][T19076] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3643: bg 0: block 248: padding at end of block bitmap is not set [ 1283.938203][T19076] loop5: lost filesystem error report for type 5 error -117 [ 1283.938532][T19076] EXT4-fs error (device loop5): ext4_acquire_dquot:7003: comm syz.5.3643: Failed to acquire dquot type 1 [ 1283.946024][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1283.946048][ C0] EXT4-fs (loop5): last error at time 1771260547: ext4_validate_block_bitmap:441 [ 1284.023998][T19081] loop3: detected capacity change from 0 to 2048 [ 1284.046316][T19076] loop5: lost filesystem error report for type 5 error -117 [ 1284.050753][T19076] EXT4-fs (loop5): 1 truncate cleaned up [ 1284.074942][T19076] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1284.102181][ T3302] loop3: p2 p3 p7 [ 1284.128121][T19081] loop3: p2 p3 p7 [ 1284.161683][T19076] EXT4-fs: Ignoring removed orlov option [ 1284.172223][ T3000] loop3: p2 p3 p7 [ 1284.201837][T19076] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1284.252632][T16228] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1284.272986][T19076] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 1284.362677][T15406] udevd[15406]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 1284.374348][T15405] udevd[15405]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 1284.384458][T19076] EXT4-fs error (device loop5): __ext4_remount:6806: comm syz.5.3643: Abort forced by user [ 1284.396187][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 1284.421573][T19076] EXT4-fs (loop5): Remounting filesystem read-only [ 1284.457242][T19076] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 1284.468632][T19076] ext4 filesystem being remounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1284.501854][T19090] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3648'. [ 1284.520810][T19090] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3648'. [ 1284.591341][T19093] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3649'. [ 1284.653467][T19093] loop1: detected capacity change from 0 to 128 [ 1284.932389][T19102] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19102 comm=syz.0.3652 [ 1284.945383][T19102] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3652'. [ 1285.370713][T18360] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1286.160564][T19121] loop5: detected capacity change from 0 to 512 [ 1286.199765][T19129] loop4: detected capacity change from 0 to 256 [ 1286.478926][T19135] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3659'. [ 1286.688767][T19121] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1286.704646][T19121] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1286.833348][T19138] lo speed is unknown, defaulting to 1000 [ 1287.154105][T19139] lo speed is unknown, defaulting to 1000 [ 1287.160971][T19121] veth0_vlan: entered allmulticast mode [ 1287.179171][T19141] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3661'. [ 1287.215415][T19141] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3661'. [ 1287.258863][ T28] kauditd_printk_skb: 139 callbacks suppressed [ 1287.281055][ T28] audit: type=1400 audit(1771260550.377:12359): avc: denied { create } for pid=19140 comm="syz.3.3661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1287.354371][T19147] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3662'. [ 1287.376509][ T28] audit: type=1400 audit(1771260550.387:12360): avc: denied { write } for pid=19140 comm="syz.3.3661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1287.421659][T19143] veth0_vlan: left promiscuous mode [ 1287.429359][T19143] veth0_vlan: entered promiscuous mode [ 1287.550085][T18360] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1287.692646][T19155] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3664'. [ 1287.798556][T19156] loop4: detected capacity change from 0 to 128 [ 1288.032554][ T28] audit: type=1400 audit(1771260551.136:12361): avc: denied { write } for pid=19159 comm="syz.3.3666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1288.079269][T19160] loop3: detected capacity change from 0 to 4096 [ 1288.135532][T19160] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1288.173357][ T28] audit: type=1400 audit(1771260551.296:12362): avc: denied { map } for pid=19159 comm="syz.3.3666" path="/172/file0/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1288.239210][ T28] audit: type=1400 audit(1771260551.296:12363): avc: denied { execute } for pid=19159 comm="syz.3.3666" path="/172/file0/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1288.287715][ T28] audit: type=1400 audit(1771260551.356:12364): avc: denied { ioctl } for pid=19159 comm="syz.3.3666" path="socket:[77621]" dev="sockfs" ino=77621 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1288.539483][T19167] syz.5.3665 uses obsolete (PF_INET,SOCK_PACKET) [ 1288.681517][T19170] lo speed is unknown, defaulting to 1000 [ 1289.521557][ T28] audit: type=1326 audit(1771260552.116:12365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19168 comm="syz.4.3668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe8d2bf79 code=0x7ffc0000 [ 1289.570654][ T28] audit: type=1326 audit(1771260552.116:12366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19168 comm="syz.4.3668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe8d2bf79 code=0x7ffc0000 [ 1289.597896][ T28] audit: type=1326 audit(1771260552.116:12367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19168 comm="syz.4.3668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0fe8d2bf79 code=0x7ffc0000 [ 1289.622222][ T28] audit: type=1326 audit(1771260552.116:12368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19168 comm="syz.4.3668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe8d2bf79 code=0x7ffc0000 [ 1290.587963][T15376] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1291.371821][T19191] lo speed is unknown, defaulting to 1000 [ 1292.067731][T19198] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3673'. [ 1292.123665][T19202] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19202 comm=syz.5.3673 [ 1292.145650][T19201] loop1: detected capacity change from 0 to 2048 [ 1292.167170][T19204] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3677'. [ 1292.179680][T19202] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3673'. [ 1292.198163][T19204] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3677'. [ 1292.212450][T19202] bridge0: port 2(bridge_slave_1) entered blocking state [ 1292.219583][T19202] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1292.227076][T19202] bridge0: port 1(bridge_slave_0) entered blocking state [ 1292.234138][T19202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1292.265315][ T3302] loop1: p2 p3 p7 [ 1292.279390][T19201] loop1: p2 p3 p7 [ 1292.288636][T19202] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3673'. [ 1292.338383][T19202] bridge0: port 2(bridge_slave_1) entered disabled state [ 1292.345941][T19202] bridge0: port 1(bridge_slave_0) entered disabled state [ 1292.515815][T19210] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3678'. [ 1292.627904][T19211] loop1: detected capacity change from 0 to 128 [ 1292.684182][T15406] udevd[15406]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 1292.800475][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 1292.865041][T19217] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3680'. [ 1292.948063][T19215] loop3: detected capacity change from 0 to 512 [ 1292.972354][T19219] loop5: detected capacity change from 0 to 2048 [ 1293.031198][T19215] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1293.061364][T19215] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1293.112332][T19215] veth0_vlan: entered allmulticast mode [ 1293.266182][T15405] udevd[15405]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 1293.273097][T19219] loop5: p2 p3 p7 [ 1293.285468][T19223] veth0_vlan: left promiscuous mode [ 1293.291683][T19223] veth0_vlan: entered promiscuous mode [ 1293.320104][ T3000] loop5: p2 p3 p7 [ 1293.373708][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 1293.373724][ T28] audit: type=1400 audit(1771260556.483:12375): avc: denied { create } for pid=19228 comm="syz.1.3683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1293.387812][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 1293.448179][T15376] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1293.457488][T19231] netlink: 220 bytes leftover after parsing attributes in process `syz.5.3684'. [ 1293.477819][ T28] audit: type=1400 audit(1771260556.523:12376): avc: denied { bind } for pid=19228 comm="syz.1.3683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1293.478665][T15406] udevd[15406]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 1293.508422][T15405] udevd[15405]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 1293.508919][ T3276] udevd[3276]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 1293.518513][T19231] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3684'. [ 1293.542309][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 1293.552174][T19231] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3684'. [ 1293.561724][T19231] tipc: MTU too low for tipc bearer [ 1293.568526][T15406] udevd[15406]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 1293.582140][T15405] udevd[15405]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 1293.606497][T19235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1293.653414][T19235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1293.680274][T19241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1293.710233][T19241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1293.775887][T19244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1293.784574][T19244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1294.168729][T19246] loop4: detected capacity change from 0 to 512 [ 1294.184884][T19246] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #11: comm syz.4.3691: unexpected EA_INODE flag [ 1294.196694][T19246] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1294.200902][T19246] EXT4-fs (loop4): Remounting filesystem read-only [ 1294.210097][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1294.210117][ C1] EXT4-fs (loop4): initial error at time 1771260557: ext4_orphan_get:1391: inode 11 [ 1294.210144][ C1] EXT4-fs (loop4): last error at time 1771260557: ext4_orphan_get:1391: inode 11 [ 1294.212667][ T28] audit: type=1400 audit(1771260557.322:12377): avc: denied { bind } for pid=19248 comm="syz.3.3692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1294.218824][T19246] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1294.223260][ T28] audit: type=1400 audit(1771260557.322:12378): avc: denied { accept } for pid=19248 comm="syz.3.3692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1294.359415][T16228] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1294.372016][T19255] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3695'. [ 1294.381626][T19255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3695'. [ 1294.391811][T19255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3695'. [ 1294.419136][T19255] tipc: MTU too low for tipc bearer [ 1294.505639][ T28] audit: type=1400 audit(1771260557.622:12379): avc: denied { name_bind } for pid=19248 comm="syz.3.3692" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1295.517954][ T28] audit: type=1400 audit(1771260558.322:12380): avc: denied { create } for pid=19259 comm="syz.4.3697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1295.538925][ T28] audit: type=1400 audit(1771260558.512:12381): avc: denied { bind } for pid=19259 comm="syz.4.3697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1296.227352][T19269] loop1: detected capacity change from 0 to 512 [ 1296.234156][T19269] EXT4-fs: Ignoring removed oldalloc option [ 1296.253403][T19271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1296.272414][T19271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1296.285102][T19273] loop5: detected capacity change from 0 to 256 [ 1296.292135][ T28] audit: type=1400 audit(1771260558.512:12382): avc: denied { name_bind } for pid=19259 comm="syz.4.3697" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1296.324096][T19269] EXT4-fs (loop1): 1 truncate cleaned up [ 1296.334185][T19269] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1296.350053][T19273] FAT-fs (loop5): codepage cp855 not found [ 1296.356136][ T28] audit: type=1400 audit(1771260558.512:12383): avc: denied { node_bind } for pid=19259 comm="syz.4.3697" saddr=::ffff:0.0.0.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1296.461482][ T28] audit: type=1400 audit(1771260558.552:12384): avc: denied { read write } for pid=16663 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1297.487496][T19283] loop5: detected capacity change from 0 to 512 [ 1297.494144][T19283] EXT4-fs: Ignoring removed nobh option [ 1297.505253][T17859] Bluetooth: hci0: Frame reassembly failed (-84) [ 1297.775541][T19283] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1297.986166][T19283] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1298.044133][T19294] netlink: 1004 bytes leftover after parsing attributes in process `syz.3.3706'. [ 1298.059951][T18360] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1298.286310][T19301] loop3: detected capacity change from 0 to 512 [ 1298.340423][T19301] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1298.370776][T19301] ext4 filesystem being mounted at /183/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1298.399723][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 1298.399737][ T28] audit: type=1400 audit(1771260561.511:12413): avc: denied { setattr } for pid=19298 comm="syz.3.3708" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1298.428656][T19301] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #2: comm syz.3.3708: corrupted inode contents [ 1298.453244][T19301] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #2: comm syz.3.3708: mark_inode_dirty error [ 1298.481268][T19301] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #2: comm syz.3.3708: corrupted inode contents [ 1298.500100][T19308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1298.511622][T19306] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #2: comm syz.3.3708: corrupted inode contents [ 1298.523837][T19308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1298.536173][T19306] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #2: comm syz.3.3708: mark_inode_dirty error [ 1298.697649][T15376] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1298.698127][T16663] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1298.733777][T19310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1298.754118][T19310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1298.865778][T19317] loop1: detected capacity change from 0 to 128 [ 1298.872549][T19317] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1298.885456][T19317] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1298.897765][ T28] audit: type=1400 audit(1771260562.010:12414): avc: denied { mount } for pid=19311 comm="syz.1.3712" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 1299.210251][ T28] audit: type=1400 audit(1771260562.320:12415): avc: denied { connect } for pid=19318 comm="syz.4.3713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1299.408172][T19323] loop4: detected capacity change from 0 to 128 [ 1299.415401][T19323] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1299.430560][T19323] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1299.525748][ T3513] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1299.586780][ T28] audit: type=1400 audit(1771260562.700:12416): avc: denied { setopt } for pid=19324 comm="syz.5.3715" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1299.710520][T17855] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1299.759631][T19330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1300.193757][T19330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1300.204731][T17845] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1300.230676][ T28] audit: type=1400 audit(1771260562.790:12417): avc: denied { create } for pid=19324 comm="syz.5.3715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1300.941945][ T28] audit: type=1400 audit(1771260562.790:12418): avc: denied { write } for pid=19324 comm="syz.5.3715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1300.978774][ T28] audit: type=1400 audit(1771260562.790:12419): avc: denied { nlmsg_write } for pid=19324 comm="syz.5.3715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1301.002421][ T28] audit: type=1400 audit(1771260562.800:12420): avc: denied { map_create } for pid=19327 comm="syz.0.3716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1301.048582][ T28] audit: type=1400 audit(1771260562.800:12421): avc: denied { unmount } for pid=16663 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 1301.103174][ T28] audit: type=1400 audit(1771260562.810:12422): avc: denied { create } for pid=19327 comm="syz.0.3716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1301.454369][T19361] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1301.464986][T19361] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3725'. [ 1301.914340][T19359] team0 (unregistering): Port device team_slave_0 removed [ 1301.935430][T19359] team0 (unregistering): Port device team_slave_1 removed [ 1302.200317][T19367] loop4: detected capacity change from 0 to 512 [ 1302.209013][T19367] EXT4-fs: Ignoring removed orlov option [ 1302.267253][T19367] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1302.286771][T19367] ext4 filesystem being mounted at /150/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1302.312179][T19367] EXT4-fs warning (device loop4): ext4_empty_dir:3087: inode #12: comm syz.4.3727: directory missing '.' [ 1302.334569][T16228] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1302.465734][T17859] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1302.492150][T19382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1302.501919][T19382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1302.550030][T17859] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1302.595303][T19383] lo speed is unknown, defaulting to 1000 [ 1302.619312][T17859] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1302.656017][T19383] chnl_net:caif_netlink_parms(): no params data found [ 1302.669575][T17859] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1302.705214][T19383] bridge0: port 1(bridge_slave_0) entered blocking state [ 1302.712463][T19383] bridge0: port 1(bridge_slave_0) entered disabled state [ 1302.719845][T19383] bridge_slave_0: entered allmulticast mode [ 1302.726692][T19383] bridge_slave_0: entered promiscuous mode [ 1302.733486][T19383] bridge0: port 2(bridge_slave_1) entered blocking state [ 1302.740699][T19383] bridge0: port 2(bridge_slave_1) entered disabled state [ 1302.748074][T19383] bridge_slave_1: entered allmulticast mode [ 1302.754623][T19383] bridge_slave_1: entered promiscuous mode [ 1302.779841][T19383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1302.791255][T19383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1302.824093][T19383] team0: Port device team_slave_0 added [ 1302.841231][T19383] team0: Port device team_slave_1 added [ 1302.869041][T19383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1302.876066][T19383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1302.902669][T19383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1302.914577][T19383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1302.921756][T19383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1302.948334][T19383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1302.978684][T19383] hsr_slave_0: entered promiscuous mode [ 1302.990286][T19383] hsr_slave_1: entered promiscuous mode [ 1303.002900][T19383] debugfs: 'hsr0' already exists in 'hsr' [ 1303.009011][T19383] Cannot create hsr debugfs directory [ 1303.119865][T17859] bridge_slave_1: left allmulticast mode [ 1303.146842][T17859] bridge_slave_1: left promiscuous mode [ 1303.155222][T17859] bridge0: port 2(bridge_slave_1) entered disabled state [ 1303.166183][T17859] bridge_slave_0: left allmulticast mode [ 1303.176902][T17859] bridge_slave_0: left promiscuous mode [ 1303.182839][T17859] bridge0: port 1(bridge_slave_0) entered disabled state [ 1303.279245][T17859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1303.288934][T17859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1303.298596][T17859] bond0 (unregistering): Released all slaves [ 1303.322032][T19383] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1303.337070][T19383] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1303.349808][T19383] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1303.516512][ T28] kauditd_printk_skb: 81 callbacks suppressed [ 1303.516532][ T28] audit: type=1400 audit(1771260566.629:12504): avc: denied { write } for pid=19416 comm="syz.3.3739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1303.777489][T19383] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1303.795506][T17859] hsr_slave_0: left promiscuous mode [ 1303.802558][T17859] hsr_slave_1: left promiscuous mode [ 1303.811642][ T28] audit: type=1400 audit(1771260566.929:12505): avc: denied { create } for pid=19440 comm="syz.0.3743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1303.834040][T17859] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1303.842868][T17859] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1303.843226][ T28] audit: type=1400 audit(1771260566.929:12506): avc: denied { setopt } for pid=19440 comm="syz.0.3743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1303.871795][ T28] audit: type=1400 audit(1771260566.929:12507): avc: denied { tracepoint } for pid=19440 comm="syz.0.3743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1303.893265][T17859] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1303.905234][T17859] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1303.930445][T17859] veth1_macvtap: left promiscuous mode [ 1303.946094][T17859] veth0_macvtap: left promiscuous mode [ 1303.952936][T17859] veth1_vlan: left promiscuous mode [ 1303.961485][T17859] veth0_vlan: left promiscuous mode [ 1304.022763][T17859] team0 (unregistering): Port device team_slave_1 removed [ 1304.033496][T17859] team0 (unregistering): Port device team_slave_0 removed [ 1304.099269][T19454] bridge0: port 3(bond0) entered blocking state [ 1304.106664][T19454] bridge0: port 3(bond0) entered disabled state [ 1304.113133][T19454] bond0: entered allmulticast mode [ 1304.118427][T19454] bond_slave_0: entered allmulticast mode [ 1304.124173][T19454] bond_slave_1: entered allmulticast mode [ 1304.132331][T19454] bond0: entered promiscuous mode [ 1304.137994][T19454] bond_slave_0: entered promiscuous mode [ 1304.143785][T19454] bond_slave_1: entered promiscuous mode [ 1304.149942][T19454] bridge0: port 3(bond0) entered blocking state [ 1304.156229][T19454] bridge0: port 3(bond0) entered forwarding state [ 1304.173334][T19462] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1304.218130][T19464] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3749'. [ 1304.221164][ T28] audit: type=1400 audit(1771260567.339:12508): avc: denied { create } for pid=19463 comm="syz.1.3749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1304.270009][T19383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1304.287030][T19383] 8021q: adding VLAN 0 to HW filter on device team0 [ 1304.293882][ T28] audit: type=1400 audit(1771260567.339:12509): avc: denied { write } for pid=19463 comm="syz.1.3749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1304.319106][T17857] bridge0: port 1(bridge_slave_0) entered blocking state [ 1304.326271][T17857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1304.343845][ T28] audit: type=1400 audit(1771260567.449:12510): avc: denied { create } for pid=19465 comm="syz.0.3748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1304.380964][T17856] bridge0: port 2(bridge_slave_1) entered blocking state [ 1304.388072][T17856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1304.401214][T19471] netlink: 184 bytes leftover after parsing attributes in process `syz.3.3750'. [ 1304.562224][T19383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1305.430921][ T28] audit: type=1400 audit(1771260568.508:12511): avc: denied { bind } for pid=19497 comm="syz.3.3755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1305.844544][ T28] audit: type=1400 audit(1771260568.958:12512): avc: denied { ioctl } for pid=19543 comm="syz.4.3761" path="socket:[80266]" dev="sockfs" ino=80266 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1306.078823][T19383] veth0_vlan: entered promiscuous mode [ 1306.115448][T19383] veth1_vlan: entered promiscuous mode [ 1306.165815][T19383] veth0_macvtap: entered promiscuous mode [ 1306.188845][T19383] veth1_macvtap: entered promiscuous mode [ 1306.214580][T19383] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1306.243607][T19383] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1306.266956][T17856] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.292317][T17856] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.321712][T17856] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.347947][ T28] audit: type=1400 audit(1771260569.428:12513): avc: denied { mounton } for pid=19383 comm="syz-executor" path="/root/syzkaller.kpatmv/syz-tmp" dev="sda1" ino=2059 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1306.386368][T17856] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.444541][T19583] loop6: detected capacity change from 0 to 1024 [ 1306.467104][T19583] EXT4-fs: Ignoring removed oldalloc option [ 1306.511679][T19583] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 1306.528731][T19583] System zones: 0-1, 3-36 [ 1306.539587][T19583] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1306.608335][T19383] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1306.703677][T19592] netlink: 'syz.6.3772': attribute type 1 has an invalid length. [ 1306.711719][T19592] netlink: 'syz.6.3772': attribute type 2 has an invalid length. [ 1307.305074][T19621] FAULT_INJECTION: forcing a failure. [ 1307.305074][T19621] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1307.318390][T19621] CPU: 1 UID: 0 PID: 19621 Comm: syz.0.3783 Tainted: G W syzkaller #0 PREEMPT(full) [ 1307.318479][T19621] Tainted: [W]=WARN [ 1307.318486][T19621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1307.318556][T19621] Call Trace: [ 1307.318565][T19621] [ 1307.318574][T19621] __dump_stack+0x1d/0x30 [ 1307.318601][T19621] dump_stack_lvl+0x95/0xd0 [ 1307.318704][T19621] dump_stack+0x15/0x1b [ 1307.318727][T19621] should_fail_ex+0x263/0x280 [ 1307.318755][T19621] should_fail_alloc_page+0xf2/0x100 [ 1307.318790][T19621] alloc_pages_bulk_noprof+0x101/0x530 [ 1307.318877][T19621] copy_splice_read+0xf3/0x6c0 [ 1307.318915][T19621] ? __pfx_shmem_file_splice_read+0x10/0x10 [ 1307.318947][T19621] splice_direct_to_actor+0x28f/0x670 [ 1307.318992][T19621] ? __pfx_direct_splice_actor+0x10/0x10 [ 1307.319100][T19621] do_splice_direct+0x119/0x1a0 [ 1307.319129][T19621] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1307.319176][T19621] do_sendfile+0x382/0x650 [ 1307.319199][T19621] __x64_sys_sendfile64+0x105/0x150 [ 1307.319220][T19621] x64_sys_call+0x2dc4/0x3020 [ 1307.319331][T19621] do_syscall_64+0x12c/0x370 [ 1307.319363][T19621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1307.319386][T19621] RIP: 0033:0x7f81e5dfbf79 [ 1307.319403][T19621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1307.319418][T19621] RSP: 002b:00007f81e4857028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1307.319524][T19621] RAX: ffffffffffffffda RBX: 00007f81e6075fa0 RCX: 00007f81e5dfbf79 [ 1307.319538][T19621] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1307.319558][T19621] RBP: 00007f81e4857090 R08: 0000000000000000 R09: 0000000000000000 [ 1307.319571][T19621] R10: 0000000800000a1e R11: 0000000000000246 R12: 0000000000000001 [ 1307.319585][T19621] R13: 00007f81e6076038 R14: 00007f81e6075fa0 R15: 00007ffe2a9b0588 [ 1307.319635][T19621] [ 1307.532066][T19628] loop1: detected capacity change from 0 to 512 [ 1307.545906][T19628] EXT4-fs: Ignoring removed orlov option [ 1307.556603][T19628] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1307.566110][T19628] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1307.573266][T19628] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3786: bg 0: block 248: padding at end of block bitmap is not set [ 1307.598369][T19628] loop1: lost filesystem error report for type 5 error -117 [ 1307.602086][T19628] EXT4-fs error (device loop1): ext4_acquire_dquot:7003: comm syz.1.3786: Failed to acquire dquot type 1 [ 1307.609538][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1307.609563][ C0] EXT4-fs (loop1): last error at time 1771260570: ext4_validate_block_bitmap:441 [ 1307.637303][T19628] loop1: lost filesystem error report for type 5 error -117 [ 1307.647638][T19628] EXT4-fs (loop1): 1 truncate cleaned up [ 1307.668438][T19628] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1307.668870][T19635] netlink: 'syz.3.3788': attribute type 1 has an invalid length. [ 1307.691852][T19628] EXT4-fs: Ignoring removed orlov option [ 1307.697628][T19628] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1307.710653][T19635] netlink: 'syz.3.3788': attribute type 2 has an invalid length. [ 1307.718676][T19635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3788'. [ 1307.743418][T19635] lo speed is unknown, defaulting to 1000 [ 1307.789962][T19636] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1307.796545][T19636] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1307.812998][T19628] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 1307.819913][T19640] random: crng reseeded on system resumption [ 1307.838407][T19636] vhci_hcd vhci_hcd.0: Device attached [ 1307.844160][T19628] EXT4-fs error (device loop1): __ext4_remount:6806: comm syz.1.3786: Abort forced by user [ 1307.860115][T19628] EXT4-fs (loop1): Remounting filesystem read-only [ 1307.870712][T19628] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 1307.894328][T19628] ext4 filesystem being remounted at /148/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1308.280332][T19637] vhci_hcd: connection closed [ 1308.301271][T17856] vhci_hcd vhci_hcd.4: stop threads [ 1308.333093][T17856] vhci_hcd vhci_hcd.4: release socket [ 1308.360662][T17856] vhci_hcd vhci_hcd.4: disconnect device [ 1308.544951][T16663] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1308.589602][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 1308.589616][ T28] audit: type=1400 audit(1771260571.708:12532): avc: denied { write } for pid=19662 comm="syz.1.3797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1308.638388][ T28] audit: type=1400 audit(1771260571.738:12533): avc: denied { read } for pid=19666 comm="syz.0.3799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1308.789453][ T28] audit: type=1400 audit(1771260571.898:12534): avc: denied { create } for pid=19682 comm="syz.1.3807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1308.942078][ T28] audit: type=1400 audit(1771260572.058:12535): avc: denied { read } for pid=19689 comm="syz.4.3810" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1308.990360][ T28] audit: type=1400 audit(1771260572.058:12536): avc: denied { open } for pid=19689 comm="syz.4.3810" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1309.038128][ T28] audit: type=1400 audit(1771260572.058:12537): avc: denied { ioctl } for pid=19689 comm="syz.4.3810" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x54d5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1309.088387][ T28] audit: type=1400 audit(1771260572.058:12538): avc: denied { write } for pid=19689 comm="syz.4.3810" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1311.803443][ T28] audit: type=1400 audit(1771260574.917:12539): avc: denied { write } for pid=19692 comm="syz.0.3812" name="anycast6" dev="proc" ino=4026533426 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1311.850322][T19693] netlink: 'syz.0.3812': attribute type 16 has an invalid length. [ 1311.880968][T19693] netlink: 'syz.0.3812': attribute type 17 has an invalid length. [ 1311.903040][ T28] audit: type=1400 audit(1771260575.017:12540): avc: denied { execute } for pid=19692 comm="syz.0.3812" path="/147/cpu.stat" dev="tmpfs" ino=783 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1311.905741][T19707] netlink: 'syz.6.3819': attribute type 13 has an invalid length. [ 1311.983398][ T28] audit: type=1400 audit(1771260575.077:12541): avc: denied { name_bind } for pid=19713 comm="syz.3.3821" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1312.009273][T19693] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1312.987719][T19839] netlink: 'syz.0.3851': attribute type 1 has an invalid length. [ 1314.464291][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 1314.464307][ T28] audit: type=1400 audit(1771260577.577:12552): avc: denied { read } for pid=19985 comm="syz.3.3898" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1314.685503][T20008] netlink: 'syz.4.3909': attribute type 21 has an invalid length. [ 1314.693936][T20008] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3909'. [ 1314.744316][ T28] audit: type=1400 audit(1771260577.857:12553): avc: denied { create } for pid=20013 comm="syz.6.3910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1314.792292][ T28] audit: type=1400 audit(1771260577.887:12554): avc: denied { write } for pid=20013 comm="syz.6.3910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1314.845918][ T28] audit: type=1400 audit(1771260577.887:12555): avc: denied { connect } for pid=20013 comm="syz.6.3910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1314.866537][ T28] audit: type=1400 audit(1771260577.887:12556): avc: denied { name_connect } for pid=20013 comm="syz.6.3910" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1314.889723][ T28] audit: type=1400 audit(1771260577.897:12557): avc: denied { create } for pid=20012 comm="syz.3.3911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1315.069010][ T28] audit: type=1400 audit(1771260578.177:12558): avc: denied { ioctl } for pid=20019 comm="syz.6.3913" path="socket:[80867]" dev="sockfs" ino=80867 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1315.117980][ T28] audit: type=1400 audit(1771260578.227:12559): avc: denied { ioctl } for pid=20021 comm="syz.6.3914" path="socket:[81165]" dev="sockfs" ino=81165 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1315.256187][ T28] audit: type=1400 audit(1771260578.367:12560): avc: denied { map } for pid=20037 comm="syz.4.3922" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=81938 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1315.282147][ T28] audit: type=1400 audit(1771260578.367:12561): avc: denied { read write } for pid=20037 comm="syz.4.3922" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=81938 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1315.384468][T20046] netlink: 'syz.0.3926': attribute type 29 has an invalid length. [ 1315.393156][T20046] netlink: 'syz.0.3926': attribute type 29 has an invalid length. [ 1315.401967][T20046] netlink: 'syz.0.3926': attribute type 29 has an invalid length. [ 1315.415786][T20046] netlink: 'syz.0.3926': attribute type 29 has an invalid length. [ 1317.560471][T20129] random: crng reseeded on system resumption [ 1317.753683][T20127] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1317.760236][T20127] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1318.033528][T20127] vhci_hcd vhci_hcd.0: Device attached [ 1318.103742][T20130] vhci_hcd: connection closed [ 1318.103964][T17840] vhci_hcd vhci_hcd.3: stop threads [ 1318.123462][T17840] vhci_hcd vhci_hcd.3: release socket [ 1318.137428][T17840] vhci_hcd vhci_hcd.3: disconnect device [ 1318.978973][T20259] netlink: 'syz.3.3994': attribute type 7 has an invalid length. [ 1318.990566][T20259] netlink: 'syz.3.3994': attribute type 8 has an invalid length. [ 1319.053909][T20271] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1319.066429][T20271] syzkaller1: linktype set to 786 [ 1319.836076][T20309] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1319.865610][T20309] syzkaller1: linktype set to 786 [ 1320.288543][T20335] loop1: detected capacity change from 0 to 128 [ 1320.745422][T20350] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1320.751498][T20350] syzkaller1: linktype set to 786 [ 1321.119735][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 1321.119748][ T28] audit: type=1400 audit(1771260584.226:12568): avc: denied { unmount } for pid=19383 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1321.771540][T20391] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1321.777472][T20391] syzkaller1: Linktype set failed because interface is up [ 1322.429875][ T28] audit: type=1400 audit(1771260585.536:12569): avc: denied { create } for pid=20479 comm="syz.1.4098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1322.468720][ T28] audit: type=1400 audit(1771260585.566:12570): avc: denied { write } for pid=20479 comm="syz.1.4098" path="socket:[82958]" dev="sockfs" ino=82958 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1323.528867][T20575] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1323.545260][T20575] syzkaller1: linktype set to 786 [ 1325.040213][T20650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4184'. [ 1326.200443][T20660] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4189'. [ 1334.574879][T17843] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1334.675059][T17843] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1334.800862][T20673] lo speed is unknown, defaulting to 1000 [ 1334.808759][T17843] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1335.021681][T17843] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1335.600895][T20673] chnl_net:caif_netlink_parms(): no params data found [ 1335.616860][T17843] bridge_slave_1: left allmulticast mode [ 1335.630765][T17843] bridge_slave_1: left promiscuous mode [ 1335.636484][T17843] bridge0: port 2(bridge_slave_1) entered disabled state [ 1335.671448][T17843] bridge_slave_0: left allmulticast mode [ 1335.677104][T17843] bridge_slave_0: left promiscuous mode [ 1335.720902][T17843] bridge0: port 1(bridge_slave_0) entered disabled state [ 1336.120980][T17843] bond1 (unregistering): (slave geneve2): Releasing backup interface [ 1336.141908][T17843] geneve2 (unregistering): left promiscuous mode [ 1336.423591][T17843] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1336.434310][T17843] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1336.481765][T17843] bond0 (unregistering): Released all slaves [ 1336.651066][T17843] bond1 (unregistering): Released all slaves [ 1336.864061][T17843] tipc: Disabling bearer [ 1336.869480][T17843] tipc: Left network mode [ 1336.942619][T20673] bridge0: port 1(bridge_slave_0) entered blocking state [ 1336.951681][T20673] bridge0: port 1(bridge_slave_0) entered disabled state [ 1336.958995][T20673] bridge_slave_0: entered allmulticast mode [ 1337.011174][T20673] bridge_slave_0: entered promiscuous mode [ 1337.021073][T20673] bridge0: port 2(bridge_slave_1) entered blocking state [ 1337.028119][T20673] bridge0: port 2(bridge_slave_1) entered disabled state [ 1337.091003][T20673] bridge_slave_1: entered allmulticast mode [ 1337.098431][T20673] bridge_slave_1: entered promiscuous mode [ 1337.210773][T17843] hsr_slave_0: left promiscuous mode [ 1337.220905][T17843] hsr_slave_1: left promiscuous mode [ 1337.252020][T17843] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1337.260021][T17843] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1337.341129][T17843] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1337.348527][T17843] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1337.390850][T17843] veth1_macvtap: left promiscuous mode [ 1337.396409][T17843] veth0_macvtap: left promiscuous mode [ 1337.430866][T17843] veth1_vlan: left promiscuous mode [ 1337.436127][T17843] veth0_vlan: left promiscuous mode [ 1338.015839][T17843] team0 (unregistering): Port device team_slave_1 removed [ 1338.072494][T17843] team0 (unregistering): Port device team_slave_0 removed [ 1338.532350][T20673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1338.562272][T20673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1338.631944][T20673] team0: Port device team_slave_0 added [ 1338.658878][T20673] team0: Port device team_slave_1 added [ 1338.743614][T20673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1338.750584][T20673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1338.811320][T20673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1338.851698][T20718] lo speed is unknown, defaulting to 1000 [ 1338.859712][T17843] IPVS: stop unused estimator thread 0... [ 1338.871313][T20673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1338.878272][T20673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1338.931791][T20673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1339.033336][T20673] hsr_slave_0: entered promiscuous mode [ 1339.039632][T20673] hsr_slave_1: entered promiscuous mode [ 1339.061278][T20673] debugfs: 'hsr0' already exists in 'hsr' [ 1339.067026][T20673] Cannot create hsr debugfs directory [ 1339.213148][T17843] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1339.333133][T17843] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1339.484779][T17843] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1339.577801][T17843] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1339.639669][T20718] chnl_net:caif_netlink_parms(): no params data found [ 1339.654116][T20673] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1339.674980][T20673] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1339.693774][T20673] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1339.732575][T20749] lo speed is unknown, defaulting to 1000 [ 1339.743490][T20673] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1339.875751][T20718] bridge0: port 1(bridge_slave_0) entered blocking state [ 1339.882983][T20718] bridge0: port 1(bridge_slave_0) entered disabled state [ 1339.890294][T20718] bridge_slave_0: entered allmulticast mode [ 1339.921380][T20718] bridge_slave_0: entered promiscuous mode [ 1339.928516][T20718] bridge0: port 2(bridge_slave_1) entered blocking state [ 1339.935755][T20718] bridge0: port 2(bridge_slave_1) entered disabled state [ 1339.951018][T20718] bridge_slave_1: entered allmulticast mode [ 1339.957425][T20718] bridge_slave_1: entered promiscuous mode [ 1339.982099][T17843] bridge_slave_1: left allmulticast mode [ 1339.987928][T17843] bridge_slave_1: left promiscuous mode [ 1340.010955][T17843] bridge0: port 2(bridge_slave_1) entered disabled state [ 1340.021416][T17843] bridge_slave_0: left allmulticast mode [ 1340.027169][T17843] bridge_slave_0: left promiscuous mode [ 1340.032987][T17843] bridge0: port 1(bridge_slave_0) entered disabled state [ 1340.307424][T17843] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1340.342099][T17843] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1340.361994][T17843] bond0 (unregistering): Released all slaves [ 1340.395955][T20718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1340.429755][T20718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1340.501589][T17843] hsr_slave_0: left promiscuous mode [ 1340.508865][T17843] hsr_slave_1: left promiscuous mode [ 1340.516712][T17843] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1340.524603][T17843] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1340.532232][T17843] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1340.539624][T17843] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1340.561154][T17843] veth1_macvtap: left promiscuous mode [ 1340.566752][T17843] veth0_macvtap: left promiscuous mode [ 1340.572740][T17843] veth1_vlan: left promiscuous mode [ 1340.578033][T17843] veth0_vlan: left promiscuous mode [ 1340.653901][T17843] team0 (unregistering): Port device team_slave_1 removed [ 1340.664321][T17843] team0 (unregistering): Port device team_slave_0 removed [ 1340.713470][T20718] team0: Port device team_slave_0 added [ 1340.754140][T20718] team0: Port device team_slave_1 added [ 1340.766854][T20673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1340.800526][T20673] 8021q: adding VLAN 0 to HW filter on device team0 [ 1340.808076][T20749] chnl_net:caif_netlink_parms(): no params data found [ 1340.820630][T20718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1340.828338][T20718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1340.854605][T20718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1340.867278][T17858] bridge0: port 1(bridge_slave_0) entered blocking state [ 1340.874433][T17858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1340.899006][T20718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1340.906038][T20784] lo speed is unknown, defaulting to 1000 [ 1340.911896][T20718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1340.938639][T20718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1340.955130][T17858] bridge0: port 2(bridge_slave_1) entered blocking state [ 1340.962221][T17858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1340.997604][T20673] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1341.010857][T20673] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1341.097162][T20718] hsr_slave_0: entered promiscuous mode [ 1341.109398][T20718] hsr_slave_1: entered promiscuous mode [ 1341.116559][T20718] debugfs: 'hsr0' already exists in 'hsr' [ 1341.132239][T20718] Cannot create hsr debugfs directory [ 1341.219396][T17843] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1341.241244][T20749] bridge0: port 1(bridge_slave_0) entered blocking state [ 1341.248342][T20749] bridge0: port 1(bridge_slave_0) entered disabled state [ 1341.256087][T20749] bridge_slave_0: entered allmulticast mode [ 1341.271453][T20749] bridge_slave_0: entered promiscuous mode [ 1341.317592][T17843] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1341.329125][T20749] bridge0: port 2(bridge_slave_1) entered blocking state [ 1341.336524][T20749] bridge0: port 2(bridge_slave_1) entered disabled state [ 1341.343740][T20749] bridge_slave_1: entered allmulticast mode [ 1341.350380][T20749] bridge_slave_1: entered promiscuous mode [ 1341.403653][T17843] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1341.468446][T20749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1341.488149][T17843] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1341.506117][T20673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1341.516357][T20784] chnl_net:caif_netlink_parms(): no params data found [ 1341.534982][T20749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1341.617792][T20749] team0: Port device team_slave_0 added [ 1341.632213][T20749] team0: Port device team_slave_1 added [ 1341.688811][T20749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1341.696032][T20749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1341.730090][T20749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1341.743549][T20784] bridge0: port 1(bridge_slave_0) entered blocking state [ 1341.750740][T20784] bridge0: port 1(bridge_slave_0) entered disabled state [ 1341.758222][T20784] bridge_slave_0: entered allmulticast mode [ 1341.764930][T20784] bridge_slave_0: entered promiscuous mode [ 1341.771979][T20784] bridge0: port 2(bridge_slave_1) entered blocking state [ 1341.779357][T20784] bridge0: port 2(bridge_slave_1) entered disabled state [ 1341.787645][T20784] bridge_slave_1: entered allmulticast mode [ 1341.801570][T20784] bridge_slave_1: entered promiscuous mode [ 1341.834401][T20749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1341.848490][T20749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1341.879398][T20749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1341.951632][T20784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1341.970830][T20673] veth0_vlan: entered promiscuous mode [ 1341.999157][T20784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1342.015310][T20718] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1342.027126][T20673] veth1_vlan: entered promiscuous mode [ 1342.035890][T20749] hsr_slave_0: entered promiscuous mode [ 1342.043072][T20749] hsr_slave_1: entered promiscuous mode [ 1342.049060][T20749] debugfs: 'hsr0' already exists in 'hsr' [ 1342.055309][T20749] Cannot create hsr debugfs directory [ 1342.065780][T20718] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1342.082197][T20784] team0: Port device team_slave_0 added [ 1342.097945][T20673] veth0_macvtap: entered promiscuous mode [ 1342.105632][T20784] team0: Port device team_slave_1 added [ 1342.132587][T20718] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1342.158774][T20784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1342.166411][T20784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1342.195534][T20784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1342.206433][T20718] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1342.219802][T20673] veth1_macvtap: entered promiscuous mode [ 1342.238004][T20784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1342.245377][T20784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1342.272571][T20784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1342.317798][T20870] lo speed is unknown, defaulting to 1000 [ 1342.339119][T20673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1342.353739][T20784] hsr_slave_0: entered promiscuous mode [ 1342.359858][T20784] hsr_slave_1: entered promiscuous mode [ 1342.365909][T20784] debugfs: 'hsr0' already exists in 'hsr' [ 1342.371901][T20784] Cannot create hsr debugfs directory [ 1342.403614][T20673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1342.449216][T17841] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.458090][T17841] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.489071][T17841] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.500686][T17841] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.543918][T17843] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1342.576488][T20749] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1342.604087][T20870] chnl_net:caif_netlink_parms(): no params data found [ 1342.616180][T20749] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1342.628245][T20749] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1342.651263][T17843] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1342.701523][T20718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1342.708561][T20749] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1342.741512][T17843] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1342.799527][T20718] 8021q: adding VLAN 0 to HW filter on device team0 [ 1342.812486][T20870] bridge0: port 1(bridge_slave_0) entered blocking state [ 1342.819659][T20870] bridge0: port 1(bridge_slave_0) entered disabled state [ 1342.827616][T20870] bridge_slave_0: entered allmulticast mode [ 1342.834152][T20870] bridge_slave_0: entered promiscuous mode [ 1342.841242][T20870] bridge0: port 2(bridge_slave_1) entered blocking state [ 1342.848280][T20870] bridge0: port 2(bridge_slave_1) entered disabled state [ 1342.857394][T20870] bridge_slave_1: entered allmulticast mode [ 1342.866254][T20870] bridge_slave_1: entered promiscuous mode [ 1342.884969][T17843] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1342.899899][T17845] bridge0: port 1(bridge_slave_0) entered blocking state [ 1342.907061][T17845] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1342.917591][T17845] bridge0: port 2(bridge_slave_1) entered blocking state [ 1342.924841][T17845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1342.961403][T20870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1342.977625][T20870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1343.005574][ T28] audit: type=1400 audit(1771260606.115:12571): avc: denied { name_bind } for pid=20948 comm="syz.7.4207" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1343.047710][T20870] team0: Port device team_slave_0 added [ 1343.063531][T20870] team0: Port device team_slave_1 added [ 1343.128349][T20870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1343.135410][T20870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1343.162721][T20870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1343.175751][T20870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1343.182812][T20870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1343.208813][T20870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1343.426175][ T28] audit: type=1400 audit(1771260606.525:12572): avc: denied { accept } for pid=20967 comm="syz.7.4209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1343.483449][T17843] team0: Port device ip6gre1 removed [ 1343.646754][T17843] bond0 (unregistering): Released all slaves [ 1343.707014][T17843] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1343.717024][T17843] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1343.727359][T17843] bond0 (unregistering): Released all slaves [ 1343.799063][T20749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1343.850383][T20749] 8021q: adding VLAN 0 to HW filter on device team0 [ 1343.870384][T17843] tipc: Disabling bearer [ 1343.876648][T17843] tipc: Left network mode [ 1343.895451][T20718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1343.914673][T17836] bridge0: port 1(bridge_slave_0) entered blocking state [ 1343.921762][T17836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1343.956966][T20870] hsr_slave_0: entered promiscuous mode [ 1343.974102][T20870] hsr_slave_1: entered promiscuous mode [ 1343.980162][T20870] debugfs: 'hsr0' already exists in 'hsr' [ 1343.996272][T20870] Cannot create hsr debugfs directory [ 1344.012852][T17843] hsr_slave_0: left promiscuous mode [ 1344.022101][T17843] hsr_slave_1: left promiscuous mode [ 1344.036025][T17843] hsr_slave_0: left promiscuous mode [ 1344.042526][T17843] hsr_slave_1: left promiscuous mode [ 1344.048314][T17843] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1344.056494][T17843] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1344.065328][T17843] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1344.072737][T17843] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1344.084372][T17843] veth1_vlan: left promiscuous mode [ 1344.089728][T17843] veth0_vlan: left promiscuous mode [ 1344.095565][T17843] veth1_macvtap: left promiscuous mode [ 1344.101117][T17843] veth0_macvtap: left promiscuous mode [ 1344.106649][T17843] veth1_vlan: left promiscuous mode [ 1344.111879][T17843] veth0_vlan: left promiscuous mode [ 1344.229327][T17843] team0 (unregistering): Port device team_slave_1 removed [ 1344.238890][T17843] team0 (unregistering): Port device team_slave_0 removed [ 1344.275178][T17836] bridge0: port 2(bridge_slave_1) entered blocking state [ 1344.282325][T17836] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1344.342539][ T9443] lo speed is unknown, defaulting to 1000 [ 1344.348444][ T9443] infiniband syz2: ib_query_port failed (-19) [ 1344.378035][T20749] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1344.403560][T20749] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1344.542219][T20749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1344.609405][T20718] veth0_vlan: entered promiscuous mode [ 1344.642776][T20718] veth1_vlan: entered promiscuous mode [ 1344.670362][T20718] veth0_macvtap: entered promiscuous mode [ 1344.679987][T20718] veth1_macvtap: entered promiscuous mode [ 1344.706404][T20718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1344.733658][T20718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1344.748986][T17858] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.782362][T17858] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.805036][T17858] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.810577][ T28] audit: type=1400 audit(1771260607.915:12573): avc: denied { bind } for pid=21054 comm="syz.7.4210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1344.819233][T20749] veth0_vlan: entered promiscuous mode [ 1344.841674][T17840] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.886046][T20749] veth1_vlan: entered promiscuous mode [ 1345.038800][T21079] loop8: detected capacity change from 0 to 2048 [ 1345.041096][T20749] veth0_macvtap: entered promiscuous mode [ 1345.054385][T20749] veth1_macvtap: entered promiscuous mode [ 1345.065156][T21079] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1345.114504][T17845] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1345.139040][T20718] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1345.163826][T20749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1345.181217][T20784] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1345.202218][T20784] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1345.242211][T20749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1345.250376][ T28] audit: type=1400 audit(1771260608.355:12574): avc: denied { write } for pid=21096 comm="syz.8.4215" name="event2" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1345.278165][T17845] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1345.367531][ T28] audit: type=1400 audit(1771260608.355:12575): avc: denied { ioctl } for pid=21096 comm="syz.8.4215" path="/dev/input/event2" dev="devtmpfs" ino=244 ioctlcmd=0x4503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1345.447395][T17845] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1345.507621][T17845] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1345.548880][T20784] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1345.574985][T20784] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1345.624730][T17836] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.649247][T17836] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.668685][T17836] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.684457][T17836] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.795648][T17845] bond0: left allmulticast mode [ 1345.800599][T17845] bond_slave_0: left allmulticast mode [ 1345.820181][T17845] bond_slave_1: left allmulticast mode [ 1345.836551][T17845] bond0: left promiscuous mode [ 1345.849905][T17845] bond_slave_0: left promiscuous mode [ 1345.859850][T17845] bond_slave_1: left promiscuous mode [ 1345.870799][T17845] bridge0: port 3(bond0) entered disabled state [ 1345.883845][T17845] bridge_slave_1: left allmulticast mode [ 1345.891003][T17845] bridge_slave_1: left promiscuous mode [ 1345.896917][T17845] bridge0: port 2(bridge_slave_1) entered disabled state [ 1345.909071][T17845] bridge_slave_0: left allmulticast mode [ 1345.916040][T17845] bridge_slave_0: left promiscuous mode [ 1345.924354][T17845] bridge0: port 1(bridge_slave_0) entered disabled state [ 1346.054629][T17845] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1346.066805][T17845] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1346.077845][T17845] bond0 (unregistering): Released all slaves [ 1346.165411][T17845] hsr_slave_0: left promiscuous mode [ 1346.191266][T17845] hsr_slave_1: left promiscuous mode [ 1346.207676][T17845] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1346.231000][T17845] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1346.262078][T17845] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1346.269484][T17845] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1346.393849][T17845] veth1_macvtap: left promiscuous mode [ 1346.399419][T17845] veth0_macvtap: left promiscuous mode [ 1346.460406][T17845] veth1_vlan: left promiscuous mode [ 1346.516404][T17845] veth0_vlan: left promiscuous mode [ 1347.713672][ T28] audit: type=1326 audit(1771260610.805:12576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21300 comm="syz.9.4230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0889bf79 code=0x7ffc0000 [ 1347.978913][ T28] audit: type=1326 audit(1771260610.805:12577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21300 comm="syz.9.4230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0889bf79 code=0x7ffc0000 [ 1348.012613][ T28] audit: type=1326 audit(1771260610.805:12578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21300 comm="syz.9.4230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0889bf79 code=0x7ffc0000 [ 1348.058921][ T28] audit: type=1326 audit(1771260610.805:12579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21300 comm="syz.9.4230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0889bf79 code=0x7ffc0000 [ 1348.087362][ T28] audit: type=1326 audit(1771260610.805:12580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21300 comm="syz.9.4230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f4e0889bf79 code=0x7ffc0000 [ 1348.112940][ T28] audit: type=1326 audit(1771260610.805:12581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21300 comm="syz.9.4230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0889bf79 code=0x7ffc0000 [ 1348.238661][ T28] audit: type=1326 audit(1771260610.805:12582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21300 comm="syz.9.4230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0889bf79 code=0x7ffc0000 [ 1348.263595][ T28] audit: type=1326 audit(1771260610.805:12583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21300 comm="syz.9.4230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0889bf79 code=0x7ffc0000 [ 1348.302790][ T28] audit: type=1326 audit(1771260610.805:12584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21300 comm="syz.9.4230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0889bf79 code=0x7ffc0000 [ 1348.326738][ T28] audit: type=1326 audit(1771260610.805:12585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21300 comm="syz.9.4230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f4e0889bf79 code=0x7ffc0000 [ 1348.351230][ T28] audit: type=1326 audit(1771260610.805:12586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21300 comm="syz.9.4230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0889bf79 code=0x7ffc0000 [ 1348.375158][ T28] audit: type=1326 audit(1771260610.805:12587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21300 comm="syz.9.4230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0889bf79 code=0x7ffc0000 [ 1348.407970][T21225] netlink: 830 bytes leftover after parsing attributes in process `syz.7.4223'. [ 1348.432562][T20784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1348.505521][T20784] 8021q: adding VLAN 0 to HW filter on device team0 [ 1348.544221][T17844] bridge0: port 1(bridge_slave_0) entered blocking state [ 1348.551421][T17844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1348.582629][T17844] bridge0: port 2(bridge_slave_1) entered blocking state [ 1348.589876][T17844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1349.419930][T21352] loop7: detected capacity change from 0 to 256 [ 1349.439741][T21352] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1349.633138][T20784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1349.769647][T20784] veth0_vlan: entered promiscuous mode [ 1349.795880][T20784] veth1_vlan: entered promiscuous mode [ 1349.831698][T20784] veth0_macvtap: entered promiscuous mode [ 1349.851823][T20784] veth1_macvtap: entered promiscuous mode [ 1349.877895][T20784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1349.900893][T20784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1350.096471][ T3991] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1350.135700][ T3991] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1350.223731][ T3991] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1350.237298][T21413] netlink: 52 bytes leftover after parsing attributes in process `syz.9.4244'. [ 1350.282857][ T3991] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1350.302476][T21413] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4244'. [ 1350.423977][T20870] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1350.485084][T21427] syz_tun: entered allmulticast mode [ 1350.744007][T20870] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1351.875352][T17845] IPVS: stop unused estimator thread 0... [ 1351.912194][T21466] netlink: 52 bytes leftover after parsing attributes in process `syz.9.4259'. [ 1351.929524][T21466] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4259'. [ 1351.942335][T20870] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1351.977057][T20870] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1352.234034][T20870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1352.254635][T20870] 8021q: adding VLAN 0 to HW filter on device team0 [ 1352.278025][T17837] bridge0: port 1(bridge_slave_0) entered blocking state [ 1352.285166][T17837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1352.297080][T17837] bridge0: port 2(bridge_slave_1) entered blocking state [ 1352.304255][T17837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1352.525881][T20870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1353.162256][T20870] veth0_vlan: entered promiscuous mode [ 1353.169990][T20870] veth1_vlan: entered promiscuous mode [ 1353.185587][T20870] veth0_macvtap: entered promiscuous mode [ 1353.217136][T20870] veth1_macvtap: entered promiscuous mode [ 1353.231144][T20870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1353.241269][T20870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1353.255029][T17824] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1353.269109][T17845] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1353.287824][T21602] netlink: 52 bytes leftover after parsing attributes in process `syz.8.4274'. [ 1353.291231][T17845] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1353.304337][T21602] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4274'. [ 1353.951158][T17845] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1355.544060][T21651] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4287'. [ 1356.398849][T21693] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4291'. [ 1356.467969][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 1356.467986][ T28] audit: type=1400 audit(1771260619.565:12592): avc: denied { name_connect } for pid=21694 comm="syz.8.4290" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1356.575572][T17844] tipc: Subscription rejected, illegal request [ 1356.600951][T21719] netlink: 152 bytes leftover after parsing attributes in process `syz.8.4300'. [ 1356.644518][T21719] tc_dump_action: action bad kind [ 1356.676065][T21732] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4303'. [ 1357.515769][T21745] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4305'. [ 1357.801294][T21767] syzkaller0: entered promiscuous mode [ 1357.882009][T21767] syzkaller0: entered allmulticast mode [ 1358.978783][T21842] syz_tun: entered allmulticast mode [ 1359.281486][T21880] netlink: 176 bytes leftover after parsing attributes in process `syz.8.4333'. [ 1360.153384][ T28] audit: type=1400 audit(1771260623.265:12593): avc: denied { write } for pid=21958 comm="syz.2.4342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1360.366825][T21987] macvlan1: entered promiscuous mode [ 1360.384404][T21987] macvlan1: entered allmulticast mode [ 1360.403939][T21987] veth1_vlan: entered allmulticast mode [ 1370.714055][T17844] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1370.903661][T17844] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.072693][T17844] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.175043][T17844] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.543041][T17844] bridge_slave_1: left allmulticast mode [ 1371.548780][T17844] bridge_slave_1: left promiscuous mode [ 1371.561354][T17844] bridge0: port 2(bridge_slave_1) entered disabled state [ 1371.573178][T17844] bridge_slave_0: left allmulticast mode [ 1371.578919][T17844] bridge_slave_0: left promiscuous mode [ 1371.601426][T17844] bridge0: port 1(bridge_slave_0) entered disabled state [ 1372.071548][T17844] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1372.082582][T17844] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1372.102753][T17844] bond0 (unregistering): Released all slaves [ 1372.291238][T17844] hsr_slave_0: left promiscuous mode [ 1372.296990][T17844] hsr_slave_1: left promiscuous mode [ 1372.311857][T17844] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1372.319320][T17844] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1372.351700][T17844] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1372.359547][T17844] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1372.394247][T17844] veth1_macvtap: left promiscuous mode [ 1372.399815][T17844] veth0_macvtap: left promiscuous mode [ 1372.421231][T17844] veth1_vlan: left promiscuous mode [ 1372.426642][T17844] veth0_vlan: left promiscuous mode [ 1373.706048][T17844] team0 (unregistering): Port device team_slave_1 removed [ 1373.744400][T17844] team0 (unregistering): Port device team_slave_0 removed [ 1374.621360][T22198] chnl_net:caif_netlink_parms(): no params data found [ 1375.032500][T22198] bridge0: port 1(bridge_slave_0) entered blocking state [ 1375.039584][T22198] bridge0: port 1(bridge_slave_0) entered disabled state [ 1375.071335][T22198] bridge_slave_0: entered allmulticast mode [ 1375.096048][T22198] bridge_slave_0: entered promiscuous mode [ 1375.104565][T22198] bridge0: port 2(bridge_slave_1) entered blocking state [ 1375.121325][T22198] bridge0: port 2(bridge_slave_1) entered disabled state [ 1375.145710][T22198] bridge_slave_1: entered allmulticast mode [ 1375.201660][T22198] bridge_slave_1: entered promiscuous mode [ 1375.274319][T22198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1375.318556][T22198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1375.442025][T22198] team0: Port device team_slave_0 added [ 1375.473935][T20870] syz_tun (unregistering): left allmulticast mode [ 1375.532341][T22198] team0: Port device team_slave_1 added [ 1375.581920][T22198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1375.606803][T22198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1375.648489][T22198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1375.723022][T22198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1375.729986][T22198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1375.791310][T22198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1375.894634][T17824] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.068212][T22198] hsr_slave_0: entered promiscuous mode [ 1376.087522][T22198] hsr_slave_1: entered promiscuous mode [ 1376.173082][T17824] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.322185][T17824] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.496575][T20673] syz_tun (unregistering): left allmulticast mode [ 1376.510460][T17824] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.685311][T22251] chnl_net:caif_netlink_parms(): no params data found [ 1376.797231][T17824] bridge_slave_1: left allmulticast mode [ 1376.808817][T17824] bridge_slave_1: left promiscuous mode [ 1376.817394][T17824] bridge0: port 2(bridge_slave_1) entered disabled state [ 1376.831986][T17824] bridge_slave_0: left allmulticast mode [ 1376.837657][T17824] bridge_slave_0: left promiscuous mode [ 1376.861341][T17824] bridge0: port 1(bridge_slave_0) entered disabled state [ 1376.994068][T17824] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1377.004018][T17824] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1377.013808][T17824] bond0 (unregistering): Released all slaves [ 1377.061198][T17824] hsr_slave_0: left promiscuous mode [ 1377.067150][T17824] hsr_slave_1: left promiscuous mode [ 1377.081693][T17824] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1377.089096][T17824] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1377.102832][T17824] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1377.110343][T17824] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1377.137875][T17824] veth1_macvtap: left promiscuous mode [ 1377.143567][T17824] veth0_macvtap: left promiscuous mode [ 1377.149147][T17824] veth1_vlan: left promiscuous mode [ 1377.154741][T17824] veth0_vlan: left promiscuous mode [ 1377.234765][T17824] team0 (unregistering): Port device team_slave_1 removed [ 1377.244781][T17824] team0 (unregistering): Port device team_slave_0 removed [ 1377.290426][T22251] bridge0: port 1(bridge_slave_0) entered blocking state [ 1377.298422][T22251] bridge0: port 1(bridge_slave_0) entered disabled state [ 1377.305936][T22251] bridge_slave_0: entered allmulticast mode [ 1377.313636][T22251] bridge_slave_0: entered promiscuous mode [ 1377.325360][T22251] bridge0: port 2(bridge_slave_1) entered blocking state [ 1377.333340][T22251] bridge0: port 2(bridge_slave_1) entered disabled state [ 1377.340496][T22251] bridge_slave_1: entered allmulticast mode [ 1377.347402][T22251] bridge_slave_1: entered promiscuous mode [ 1377.380885][T22251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1377.418248][T22251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1377.444054][T22313] chnl_net:caif_netlink_parms(): no params data found [ 1377.492264][T22307] chnl_net:caif_netlink_parms(): no params data found [ 1377.512225][T22251] team0: Port device team_slave_0 added [ 1377.564541][T22251] team0: Port device team_slave_1 added [ 1377.613870][T22313] bridge0: port 1(bridge_slave_0) entered blocking state [ 1377.621085][T22313] bridge0: port 1(bridge_slave_0) entered disabled state [ 1377.628495][T22313] bridge_slave_0: entered allmulticast mode [ 1377.635607][T22313] bridge_slave_0: entered promiscuous mode [ 1377.664001][T22251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1377.670990][T22251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1377.698417][T22251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1377.709890][T22251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1377.717177][T22251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1377.745116][T22251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1377.761039][T22313] bridge0: port 2(bridge_slave_1) entered blocking state [ 1377.769104][T22313] bridge0: port 2(bridge_slave_1) entered disabled state [ 1377.776506][T22313] bridge_slave_1: entered allmulticast mode [ 1377.783287][T22313] bridge_slave_1: entered promiscuous mode [ 1377.837553][T22307] bridge0: port 1(bridge_slave_0) entered blocking state [ 1377.844726][T22307] bridge0: port 1(bridge_slave_0) entered disabled state [ 1377.856001][T22307] bridge_slave_0: entered allmulticast mode [ 1377.863929][T22307] bridge_slave_0: entered promiscuous mode [ 1377.870858][T22307] bridge0: port 2(bridge_slave_1) entered blocking state [ 1377.880273][T22307] bridge0: port 2(bridge_slave_1) entered disabled state [ 1377.887601][T22307] bridge_slave_1: entered allmulticast mode [ 1377.894348][T22307] bridge_slave_1: entered promiscuous mode [ 1377.903957][T22251] hsr_slave_0: entered promiscuous mode [ 1377.909943][T22251] hsr_slave_1: entered promiscuous mode [ 1377.916690][T22251] debugfs: 'hsr0' already exists in 'hsr' [ 1377.922797][T22251] Cannot create hsr debugfs directory [ 1377.937684][T22313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1377.972570][T22313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1378.040452][T22313] team0: Port device team_slave_0 added [ 1378.052762][T22307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1378.073192][T22307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1378.096077][T22313] team0: Port device team_slave_1 added [ 1378.173422][T17824] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1378.232095][T17824] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1378.245245][T22307] team0: Port device team_slave_0 added [ 1378.286503][T22313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1378.293905][T22313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1378.320573][T22313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1378.341413][T22313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1378.348579][T22313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1378.384411][T22313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1378.396711][T22307] team0: Port device team_slave_1 added [ 1378.417898][T17824] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1378.457651][T22307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1378.465156][T22307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1378.491589][T22307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1378.515274][T17824] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1378.527435][T22307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1378.534619][T22307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1378.560727][T22307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1378.583808][T22198] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1378.592843][T22198] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1378.603356][T22313] hsr_slave_0: entered promiscuous mode [ 1378.609498][T22313] hsr_slave_1: entered promiscuous mode [ 1378.615652][T22313] debugfs: 'hsr0' already exists in 'hsr' [ 1378.621459][T22313] Cannot create hsr debugfs directory [ 1378.650780][T22307] hsr_slave_0: entered promiscuous mode [ 1378.656949][T22307] hsr_slave_1: entered promiscuous mode [ 1378.663376][T22307] debugfs: 'hsr0' already exists in 'hsr' [ 1378.669176][T22307] Cannot create hsr debugfs directory [ 1378.675115][T22198] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1378.684130][T22198] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1378.782854][T17824] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1378.873979][T17824] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1378.917257][T22198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1378.928369][T22198] 8021q: adding VLAN 0 to HW filter on device team0 [ 1378.942794][T17824] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1378.960592][T22447] chnl_net:caif_netlink_parms(): no params data found [ 1378.973662][T17837] bridge0: port 1(bridge_slave_0) entered blocking state [ 1378.980741][T17837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1378.992294][T17837] bridge0: port 2(bridge_slave_1) entered blocking state [ 1378.999415][T17837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1379.016887][T17824] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1379.095470][T22447] bridge0: port 1(bridge_slave_0) entered blocking state [ 1379.102690][T22447] bridge0: port 1(bridge_slave_0) entered disabled state [ 1379.109931][T22447] bridge_slave_0: entered allmulticast mode [ 1379.116479][T22447] bridge_slave_0: entered promiscuous mode [ 1379.123538][T22447] bridge0: port 2(bridge_slave_1) entered blocking state [ 1379.130798][T22447] bridge0: port 2(bridge_slave_1) entered disabled state [ 1379.138295][T22447] bridge_slave_1: entered allmulticast mode [ 1379.145014][T22447] bridge_slave_1: entered promiscuous mode [ 1379.174338][T22447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1379.184743][T22447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1379.205036][T22447] team0: Port device team_slave_0 added [ 1379.218661][T22447] team0: Port device team_slave_1 added [ 1379.240302][T22198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1379.255860][T22447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1379.262993][T22447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1379.289303][T22447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1379.301089][T22447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1379.308687][T22447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1379.334942][T22447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1379.346920][T17824] bridge_slave_1: left allmulticast mode [ 1379.352862][T17824] bridge_slave_1: left promiscuous mode [ 1379.358526][T17824] bridge0: port 2(bridge_slave_1) entered disabled state [ 1379.367046][T17824] bridge_slave_0: left allmulticast mode [ 1379.373047][T17824] bridge_slave_0: left promiscuous mode [ 1379.378852][T17824] bridge0: port 1(bridge_slave_0) entered disabled state [ 1379.387702][T17824] bridge_slave_1: left allmulticast mode [ 1379.393527][T17824] bridge_slave_1: left promiscuous mode [ 1379.399177][T17824] bridge0: port 2(bridge_slave_1) entered disabled state [ 1379.407596][T17824] bridge_slave_0: left allmulticast mode [ 1379.413748][T17824] bridge_slave_0: left promiscuous mode [ 1379.419526][T17824] bridge0: port 1(bridge_slave_0) entered disabled state [ 1379.502937][T17824] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1379.512941][T17824] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1379.522827][T17824] bond0 (unregistering): Released all slaves [ 1379.584357][T17824] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1379.593822][T17824] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1379.603565][T17824] bond0 (unregistering): Released all slaves [ 1379.630465][T22447] hsr_slave_0: entered promiscuous mode [ 1379.636632][T22447] hsr_slave_1: entered promiscuous mode [ 1379.642732][T22447] debugfs: 'hsr0' already exists in 'hsr' [ 1379.648446][T22447] Cannot create hsr debugfs directory [ 1379.670244][T17824] hsr_slave_0: left promiscuous mode [ 1379.676184][T17824] hsr_slave_1: left promiscuous mode [ 1379.682384][T17824] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1379.689843][T17824] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1379.698094][T17824] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1379.707227][T17824] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1379.717676][T17824] hsr_slave_0: left promiscuous mode [ 1379.723609][T17824] hsr_slave_1: left promiscuous mode [ 1379.729234][T17824] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1379.737009][T17824] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1379.745387][T17824] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1379.753233][T17824] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1379.766856][T17824] veth1_macvtap: left promiscuous mode [ 1379.772708][T17824] veth0_macvtap: left promiscuous mode [ 1379.778344][T17824] veth1_vlan: left promiscuous mode [ 1379.783945][T17824] veth0_vlan: left promiscuous mode [ 1379.789806][T17824] veth1_macvtap: left promiscuous mode [ 1379.795593][T17824] veth0_macvtap: left promiscuous mode [ 1379.801756][T17824] veth1_vlan: left promiscuous mode [ 1379.807064][T17824] veth0_vlan: left promiscuous mode [ 1379.917571][T17824] team0 (unregistering): Port device team_slave_1 removed [ 1379.932235][T17824] team0 (unregistering): Port device team_slave_0 removed [ 1379.995749][T17824] team0 (unregistering): Port device team_slave_1 removed [ 1380.005649][T17824] team0 (unregistering): Port device team_slave_0 removed [ 1380.126060][T22198] veth0_vlan: entered promiscuous mode [ 1380.134185][T22198] veth1_vlan: entered promiscuous mode [ 1380.152045][T22198] veth0_macvtap: entered promiscuous mode [ 1380.159494][T22198] veth1_macvtap: entered promiscuous mode [ 1380.170800][T22198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1380.184767][T22198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1380.196440][T17844] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1380.207377][T17844] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1380.216326][T17844] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1380.226691][T17844] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1380.325615][T22251] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1380.346398][T22251] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1380.375194][T22251] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1380.385344][T22251] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1380.467694][T22251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1380.488718][T22251] 8021q: adding VLAN 0 to HW filter on device team0 [ 1380.522877][T17837] bridge0: port 1(bridge_slave_0) entered blocking state [ 1380.530066][T17837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1380.542172][T22616] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4390'. [ 1380.553578][T17844] bridge0: port 2(bridge_slave_1) entered blocking state [ 1380.560658][T17844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1380.570223][T22616] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4390'. [ 1380.585083][T22616] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4390'. [ 1380.663518][T22251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1380.877029][T22251] veth0_vlan: entered promiscuous mode [ 1380.893897][T22251] veth1_vlan: entered promiscuous mode [ 1380.917900][T22313] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1380.928116][T22251] veth0_macvtap: entered promiscuous mode [ 1380.935236][T22313] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1380.945757][T22313] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1381.390437][T22251] veth1_macvtap: entered promiscuous mode [ 1381.416551][T17824] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1381.439571][T22313] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1381.467975][T22251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1381.479471][T22251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1381.496207][T17843] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1381.505904][T17843] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1381.521747][T17824] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1381.536821][T17843] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1381.546866][T17843] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1381.573171][T17824] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1381.643784][T22313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1381.654578][T22313] 8021q: adding VLAN 0 to HW filter on device team0 [ 1381.682304][T22713] loop3: detected capacity change from 0 to 128 [ 1381.690001][T17843] bridge0: port 1(bridge_slave_0) entered blocking state [ 1381.697219][T17843] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1381.711251][ T28] audit: type=1400 audit(1771260644.815:12594): avc: denied { setopt } for pid=22711 comm="syz.6.4381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1381.746114][T17824] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1381.746818][T22713] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1381.769122][T22713] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1381.770459][T17843] bridge0: port 2(bridge_slave_1) entered blocking state [ 1381.780718][T17843] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1381.796557][ T28] audit: type=1400 audit(1771260644.905:12595): avc: denied { read } for pid=22711 comm="syz.6.4381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1381.838849][T22198] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1381.873421][T22313] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1381.889260][T22313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1381.903323][T22307] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1381.940680][T22307] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1381.972629][T22307] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1381.990867][T17824] bridge_slave_1: left allmulticast mode [ 1381.997578][T17824] bridge_slave_1: left promiscuous mode [ 1382.011978][T17824] bridge0: port 2(bridge_slave_1) entered disabled state [ 1382.027382][T17824] bridge_slave_0: left allmulticast mode [ 1382.042095][T17824] bridge_slave_0: left promiscuous mode [ 1382.054775][T17824] bridge0: port 1(bridge_slave_0) entered disabled state [ 1382.205264][T17824] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1382.217668][T17824] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1382.231432][T17824] bond0 (unregistering): Released all slaves [ 1382.238873][T22307] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1382.297787][T22313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1382.333039][T17824] hsr_slave_0: left promiscuous mode [ 1382.341003][T17824] hsr_slave_1: left promiscuous mode [ 1382.348154][T17824] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1382.355997][T17824] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1382.365630][T17824] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1382.373275][T17824] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1382.384571][T17824] veth1_macvtap: left promiscuous mode [ 1382.392524][T17824] veth0_macvtap: left promiscuous mode [ 1382.398107][T17824] veth1_vlan: left allmulticast mode [ 1382.403633][T17824] veth1_vlan: left promiscuous mode [ 1382.410277][T17824] veth0_vlan: left promiscuous mode [ 1382.416492][ T28] audit: type=1400 audit(1771260645.525:12596): avc: denied { read write } for pid=22763 comm="syz.3.4395" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1382.442788][ T28] audit: type=1400 audit(1771260645.525:12597): avc: denied { open } for pid=22763 comm="syz.3.4395" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1382.468480][ T28] audit: type=1400 audit(1771260645.535:12598): avc: denied { append } for pid=22763 comm="syz.3.4395" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1382.495405][ T28] audit: type=1400 audit(1771260645.535:12599): avc: denied { ioctl } for pid=22763 comm="syz.3.4395" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1382.564227][T17824] team0 (unregistering): Port device team_slave_1 removed [ 1382.588075][T17824] team0 (unregistering): Port device team_slave_0 removed [ 1382.869330][T22307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1382.945661][T22307] 8021q: adding VLAN 0 to HW filter on device team0 [ 1382.973535][ T3991] bridge0: port 1(bridge_slave_0) entered blocking state [ 1382.980715][ T3991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1383.014360][ T3991] bridge0: port 2(bridge_slave_1) entered blocking state [ 1383.016677][T22816] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1383.021536][ T3991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1383.032606][ T28] audit: type=1400 audit(1771260646.125:12600): avc: denied { load_policy } for pid=22815 comm="syz.3.4400" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1383.066324][T22816] SELinux: failed to load policy [ 1383.099039][T22313] veth0_vlan: entered promiscuous mode [ 1383.167397][T22313] veth1_vlan: entered promiscuous mode [ 1383.175509][T22447] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1383.188843][T22307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1383.204130][T22447] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1383.218820][T22447] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1383.444081][T22447] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1383.465549][T22313] veth0_macvtap: entered promiscuous mode [ 1383.480306][T22850] netlink: 'syz.3.4406': attribute type 12 has an invalid length. [ 1383.557887][T22313] veth1_macvtap: entered promiscuous mode [ 1383.594649][T22313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1383.659664][ T28] audit: type=1400 audit(1771260646.765:12601): avc: denied { write } for pid=22884 comm="syz.3.4407" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1383.746844][T22313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1383.929549][T22447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1383.941024][T22891] loop3: detected capacity change from 0 to 128 [ 1383.962550][T22447] 8021q: adding VLAN 0 to HW filter on device team0 [ 1384.016933][T22447] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1384.037677][T22447] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1384.104817][T17837] bridge0: port 1(bridge_slave_0) entered blocking state [ 1384.112005][T17837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1384.123290][T17837] bridge0: port 2(bridge_slave_1) entered blocking state [ 1384.130406][T17837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1384.147814][T17843] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1384.223816][ T28] audit: type=1400 audit(1771260647.325:12602): avc: denied { map } for pid=22913 comm="syz.3.4410" path="socket:[92575]" dev="sockfs" ino=92575 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1384.251228][T17843] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1384.301095][T17843] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1384.330455][T22447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1384.359466][T17837] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1384.441362][T22307] veth0_vlan: entered promiscuous mode [ 1384.475730][T22307] veth1_vlan: entered promiscuous mode [ 1384.510239][T22307] veth0_macvtap: entered promiscuous mode [ 1384.606242][T22307] veth1_macvtap: entered promiscuous mode [ 1384.617266][T22307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1385.389857][T22307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1385.432481][T22447] veth0_vlan: entered promiscuous mode [ 1385.470966][T17837] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1385.493005][T17837] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1385.515918][T22447] veth1_vlan: entered promiscuous mode [ 1385.551651][T17837] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1385.566302][T17837] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1385.628086][T22447] veth0_macvtap: entered promiscuous mode [ 1385.649253][T22447] veth1_macvtap: entered promiscuous mode [ 1385.679029][T22447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1385.701163][T22447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1385.715923][T17843] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1385.733220][T17843] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1385.773630][T17843] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1385.790971][T17843] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1386.093108][T23021] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4426'. [ 1386.142271][T23021] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4426'. [ 1386.162875][T23021] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4426'. [ 1386.809799][ T28] audit: type=1326 audit(1771260649.915:12603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23075 comm="syz.6.4437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce351bf79 code=0x7ffc0000 [ 1386.891396][ T28] audit: type=1326 audit(1771260649.915:12604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23075 comm="syz.6.4437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce351bf79 code=0x7ffc0000 [ 1386.991012][ T28] audit: type=1326 audit(1771260649.915:12605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23075 comm="syz.6.4437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce351bf79 code=0x7ffc0000 [ 1387.024304][T23098] cgroup: Unknown subsys name 'cpuset' [ 1387.062979][ T28] audit: type=1326 audit(1771260649.915:12606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23075 comm="syz.6.4437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce351bf79 code=0x7ffc0000 [ 1387.127178][T23116] loop1: detected capacity change from 0 to 1024 [ 1387.149970][ T28] audit: type=1326 audit(1771260649.955:12607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23075 comm="syz.6.4437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f4ce351bf79 code=0x7ffc0000 [ 1387.218343][T23116] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1387.292044][T23116] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1387.342140][ T28] audit: type=1326 audit(1771260649.955:12608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23075 comm="syz.6.4437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce351bf79 code=0x7ffc0000 [ 1387.366000][ T28] audit: type=1326 audit(1771260649.955:12609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23075 comm="syz.6.4437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce351bf79 code=0x7ffc0000 [ 1387.430421][ T28] audit: type=1326 audit(1771260649.955:12610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23075 comm="syz.6.4437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce351bf79 code=0x7ffc0000 [ 1387.472519][T23116] EXT4-fs error (device loop1): ext4_lookup:1785: inode #15: comm syz.1.4447: inode has both inline data and extents flags [ 1387.516212][T23116] EXT4-fs (loop1): Remounting filesystem read-only [ 1387.532747][ T28] audit: type=1326 audit(1771260649.955:12611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23075 comm="syz.6.4437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4ce351bf79 code=0x7ffc0000 [ 1387.582342][ T28] audit: type=1326 audit(1771260649.955:12612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23075 comm="syz.6.4437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4ce351bf79 code=0x7ffc0000 [ 1387.731894][T22307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1387.764155][T23141] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4456'. [ 1388.630003][T23186] loop6: detected capacity change from 0 to 764 [ 1388.685489][T23186] rock: directory entry would overflow storage [ 1388.710893][T23186] rock: sig=0x4f50, size=4, remaining=3 [ 1388.731503][T23186] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1389.439973][T23275] netlink: 292 bytes leftover after parsing attributes in process `syz.4.4475'. [ 1389.672499][T23309] loop6: detected capacity change from 0 to 512 [ 1389.679506][T23309] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1389.689754][T23309] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 1389.830210][T23321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4489'. [ 1390.771161][T23388] loop1: detected capacity change from 0 to 512 [ 1390.802826][T23388] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1390.862536][T23388] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1390.917050][T23388] EXT4-fs (loop1): 1 truncate cleaned up [ 1390.947731][T23388] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1391.034672][T22307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1392.335142][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 1392.335159][ T28] audit: type=1400 audit(1771260655.445:12664): avc: denied { associate } for pid=23441 comm="syz.1.4506" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1392.970473][T23506] loop6: detected capacity change from 0 to 512 [ 1392.980815][T23506] EXT4-fs: Ignoring removed nobh option [ 1393.000529][T23506] EXT4-fs: Ignoring removed bh option [ 1393.007435][T23506] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 1393.017486][T23506] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.4527: invalid indirect mapped block 256 (level 1) [ 1393.054665][T23506] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1393.054934][T23506] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.4527: invalid indirect mapped block 2683928664 (level 1) [ 1393.064248][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1393.064267][ C0] EXT4-fs (loop6): initial error at time 1771260656: ext4_free_branches:1023: inode 13 [ 1393.064324][ C0] EXT4-fs (loop6): last error at time 1771260656: ext4_free_branches:1023: inode 13 [ 1393.104607][T23506] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1393.104904][T23506] EXT4-fs (loop6): 1 truncate cleaned up [ 1393.120787][T23506] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1393.161967][T22251] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1394.164161][T23564] netlink: 188 bytes leftover after parsing attributes in process `syz.0.4540'. [ 1394.693286][T23569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1394.721597][T23569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1394.846306][T23576] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4543'. [ 1395.067346][ T28] audit: type=1400 audit(1771260658.175:12665): avc: denied { mount } for pid=23582 comm="syz.0.4545" name="/" dev="configfs" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1395.188300][ T28] audit: type=1400 audit(1771260658.175:12666): avc: denied { search } for pid=23582 comm="syz.0.4545" name="/" dev="configfs" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1395.382912][ T28] audit: type=1400 audit(1771260658.205:12667): avc: denied { search } for pid=23582 comm="syz.0.4545" name="/" dev="configfs" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1395.406021][ T28] audit: type=1400 audit(1771260658.205:12668): avc: denied { read open } for pid=23582 comm="syz.0.4545" path="/" dev="configfs" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1395.670495][T19213] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1395.681355][ T28] audit: type=1400 audit(1771260658.775:12669): avc: denied { read write } for pid=23615 comm="syz.3.4552" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1395.683852][T23617] loop4: detected capacity change from 0 to 512 [ 1395.731509][T19213] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1395.754673][ T28] audit: type=1400 audit(1771260658.775:12670): avc: denied { open } for pid=23615 comm="syz.3.4552" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1395.805705][T23617] EXT4-fs: Ignoring removed orlov option [ 1395.805780][T23621] ================================================================== [ 1395.819451][T23621] BUG: KCSAN: data-race in _prb_read_valid / prb_reserve [ 1395.826482][T23621] [ 1395.828792][T23621] write to 0xffffffff86cb5420 of 88 bytes by task 23617 on cpu 0: [ 1395.836580][T23621] prb_reserve+0x6e6/0xae0 [ 1395.840996][T23621] vprintk_store+0x54a/0x910 [ 1395.845571][T23621] vprintk_emit+0x1a4/0x600 [ 1395.850059][T23621] vprintk_default+0x26/0x30 [ 1395.854635][T23621] vprintk+0x1d/0x30 [ 1395.858530][T23621] _printk+0x79/0xa0 [ 1395.862431][T23621] __ext4_msg+0x143/0x1c0 [ 1395.866777][T23621] ext4_parse_param+0x81d/0xfb0 [ 1395.872065][T23621] vfs_parse_fs_param+0x142/0x2a0 [ 1395.877174][T23621] vfs_parse_monolithic_sep+0x1e6/0x270 [ 1395.882703][T23621] generic_parse_monolithic+0x24/0x30 [ 1395.888062][T23621] parse_monolithic_mount_data+0x46/0x60 [ 1395.893681][T23621] do_new_mount+0x24e/0x8d0 [ 1395.898189][T23621] path_mount+0x4d0/0xbc0 [ 1395.902512][T23621] __se_sys_mount+0x28c/0x2e0 [ 1395.907181][T23621] __x64_sys_mount+0x67/0x80 [ 1395.911767][T23621] x64_sys_call+0x2d61/0x3020 [ 1395.916440][T23621] do_syscall_64+0x12c/0x370 [ 1395.921025][T23621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1395.926917][T23621] [ 1395.929236][T23621] read to 0xffffffff86cb5420 of 8 bytes by task 23621 on cpu 1: [ 1395.936938][T23621] _prb_read_valid+0x383/0x950 [ 1395.941717][T23621] prb_first_valid_seq+0x35/0x70 [ 1395.946651][T23621] devkmsg_open+0x174/0x1b0 [ 1395.951148][T23621] memory_open+0xca/0xf0 [ 1395.955479][T23621] chrdev_open+0x2eb/0x3a0 [ 1395.959911][T23621] do_dentry_open+0x4ca/0xa90 [ 1395.964590][T23621] vfs_open+0x37/0x1e0 [ 1395.968660][T23621] path_openat+0x1b70/0x2050 [ 1395.973246][T23621] do_file_open+0x16c/0x290 [ 1395.977741][T23621] do_sys_openat2+0x94/0x130 [ 1395.982327][T23621] __x64_sys_openat+0xf2/0x120 [ 1395.987087][T23621] x64_sys_call+0x1e39/0x3020 [ 1395.991755][T23621] do_syscall_64+0x12c/0x370 [ 1395.996346][T23621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1396.002224][T23621] [ 1396.004539][T23621] value changed: 0x00000000000024ec -> 0x00000000000044ec [ 1396.011717][T23621] [ 1396.014032][T23621] Reported by Kernel Concurrency Sanitizer on: [ 1396.020167][T23621] CPU: 1 UID: 0 PID: 23621 Comm: fido_id Tainted: G W syzkaller #0 PREEMPT(full) [ 1396.030837][T23621] Tainted: [W]=WARN [ 1396.034624][T23621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1396.044675][T23621] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1396.059399][ T28] audit: type=1400 audit(1771260659.165:12671): avc: denied { write } for pid=3294 comm="syz-executor" path="pipe:[2544]" dev="pipefs" ino=2544 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1396.101266][T23617] EXT4-fs: Ignoring removed mblk_io_submit option [ 1396.141595][T23617] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #15: comm syz.4.4553: corrupted in-inode xattr: e_value size too large [ 1396.221365][T23617] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1396.231226][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1396.246826][ C0] EXT4-fs (loop4): initial error at time 1771260659: ext4_iget_extra_inode:5025: inode 15 [ 1396.256790][ C0] EXT4-fs (loop4): last error at time 1771260659: ext4_iget_extra_inode:5025: inode 15 [ 1396.256830][T23617] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.4553: couldn't read orphan inode 15 (err -117) [ 1396.343850][T23617] loop4: lost filesystem error report for type 5 error -117 [ 1396.344816][T23617] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1396.401586][T23617] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1396.526486][T17845] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1396.614232][T17845] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1396.694813][T17845] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1396.744231][T17845] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1396.818741][T17845] bridge_slave_1: left allmulticast mode [ 1396.824483][T17845] bridge_slave_1: left promiscuous mode [ 1396.830120][T17845] bridge0: port 2(bridge_slave_1) entered disabled state [ 1396.838246][T17845] bridge_slave_0: left allmulticast mode [ 1396.844041][T17845] bridge_slave_0: left promiscuous mode [ 1396.849796][T17845] bridge0: port 1(bridge_slave_0) entered disabled state [ 1396.904951][T17845] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1396.914695][T17845] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1396.924247][T17845] bond0 (unregistering): Released all slaves [ 1396.965816][T17845] hsr_slave_0: left promiscuous mode [ 1396.971763][T17845] hsr_slave_1: left promiscuous mode [ 1396.978737][T17845] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1396.986331][T17845] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1396.994058][T17845] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1397.001697][T17845] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1397.012234][T17845] veth1_macvtap: left promiscuous mode [ 1397.017835][T17845] veth0_macvtap: left promiscuous mode [ 1397.023523][T17845] veth1_vlan: left promiscuous mode [ 1397.028801][T17845] veth0_vlan: left promiscuous mode [ 1397.086660][T17845] team0 (unregistering): Port device team_slave_1 removed [ 1397.097841][T17845] team0 (unregistering): Port device team_slave_0 removed [ 1397.376724][T17845] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1397.425768][T17845] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1397.484133][T17845] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1397.534856][T17845] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1397.627203][T17845] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1397.654540][T17845] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1397.704202][T17845] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1397.751722][T17845] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1397.824363][T17845] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1397.873900][T17845] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1397.934489][T17845] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1397.984209][T17845] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1398.064168][T17845] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1398.123966][T17845] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1398.194862][T17845] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1398.244071][T17845] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1398.318611][T17845] bridge_slave_1: left allmulticast mode [ 1398.324434][T17845] bridge_slave_1: left promiscuous mode [ 1398.330094][T17845] bridge0: port 2(bridge_slave_1) entered disabled state [ 1398.338115][T17845] bridge_slave_0: left allmulticast mode [ 1398.343854][T17845] bridge_slave_0: left promiscuous mode [ 1398.349462][T17845] bridge0: port 1(bridge_slave_0) entered disabled state [ 1398.357690][T17845] bridge_slave_1: left allmulticast mode [ 1398.363482][T17845] bridge_slave_1: left promiscuous mode [ 1398.369056][T17845] bridge0: port 2(bridge_slave_1) entered disabled state [ 1398.376817][T17845] bridge_slave_0: left allmulticast mode [ 1398.382542][T17845] bridge_slave_0: left promiscuous mode [ 1398.388133][T17845] bridge0: port 1(bridge_slave_0) entered disabled state [ 1398.396518][T17845] bridge_slave_1: left allmulticast mode [ 1398.402200][T17845] bridge_slave_1: left promiscuous mode [ 1398.407898][T17845] bridge0: port 2(bridge_slave_1) entered disabled state [ 1398.415625][T17845] bridge_slave_0: left allmulticast mode [ 1398.421372][T17845] bridge_slave_0: left promiscuous mode [ 1398.426994][T17845] bridge0: port 1(bridge_slave_0) entered disabled state [ 1398.435265][T17845] bridge_slave_1: left allmulticast mode [ 1398.440884][T17845] bridge_slave_1: left promiscuous mode [ 1398.446650][T17845] bridge0: port 2(bridge_slave_1) entered disabled state [ 1398.454259][T17845] bridge_slave_0: left allmulticast mode [ 1398.459886][T17845] bridge_slave_0: left promiscuous mode [ 1398.465639][T17845] bridge0: port 1(bridge_slave_0) entered disabled state [ 1398.613775][T17845] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1398.623929][T17845] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1398.633429][T17845] bond0 (unregistering): Released all slaves [ 1398.664502][T17845] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1398.674273][T17845] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1398.683770][T17845] bond0 (unregistering): Released all slaves [ 1398.753810][T17845] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1398.763421][T17845] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1398.772840][T17845] bond0 (unregistering): Released all slaves [ 1398.804583][T17845] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1398.814478][T17845] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1398.824049][T17845] bond0 (unregistering): Released all slaves [ 1398.861498][T17845] hsr_slave_0: left promiscuous mode [ 1398.867292][T17845] hsr_slave_1: left promiscuous mode [ 1398.872998][T17845] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1398.880363][T17845] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1398.887829][T17845] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1398.895348][T17845] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1398.904424][T17845] hsr_slave_0: left promiscuous mode [ 1398.910234][T17845] hsr_slave_1: left promiscuous mode [ 1398.916062][T17845] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1398.923622][T17845] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1398.931343][T17845] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1398.938804][T17845] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1398.947905][T17845] hsr_slave_0: left promiscuous mode [ 1398.953640][T17845] hsr_slave_1: left promiscuous mode [ 1398.959148][T17845] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1398.966592][T17845] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1398.974078][T17845] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1398.981477][T17845] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1398.990340][T17845] hsr_slave_0: left promiscuous mode [ 1398.996078][T17845] hsr_slave_1: left promiscuous mode [ 1399.001913][T17845] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1399.009292][T17845] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1399.016922][T17845] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1399.024396][T17845] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1399.040569][T17845] veth1_macvtap: left promiscuous mode [ 1399.046091][T17845] veth0_macvtap: left promiscuous mode [ 1399.052377][T17845] veth1_vlan: left promiscuous mode [ 1399.057609][T17845] veth0_vlan: left promiscuous mode [ 1399.063915][T17845] veth1_macvtap: left promiscuous mode [ 1399.069511][T17845] veth0_macvtap: left promiscuous mode [ 1399.075229][T17845] veth1_vlan: left promiscuous mode [ 1399.080533][T17845] veth0_vlan: left promiscuous mode [ 1399.086787][T17845] veth1_macvtap: left promiscuous mode [ 1399.092275][T17845] veth0_macvtap: left promiscuous mode [ 1399.097804][T17845] veth1_vlan: left promiscuous mode [ 1399.103024][T17845] veth0_vlan: left promiscuous mode [ 1399.108826][T17845] veth1_macvtap: left promiscuous mode [ 1399.114366][T17845] veth0_macvtap: left promiscuous mode [ 1399.119892][T17845] veth1_vlan: left promiscuous mode [ 1399.125373][T17845] veth0_vlan: left promiscuous mode [ 1399.267488][T17845] team0 (unregistering): Port device team_slave_1 removed [ 1399.278660][T17845] team0 (unregistering): Port device team_slave_0 removed [ 1399.327895][T17845] team0 (unregistering): Port device team_slave_1 removed [ 1399.337082][T17845] team0 (unregistering): Port device team_slave_0 removed [ 1399.387459][T17845] team0 (unregistering): Port device team_slave_1 removed [ 1399.397206][T17845] team0 (unregistering): Port device team_slave_0 removed [ 1399.448601][T17845] team0 (unregistering): Port device team_slave_1 removed [ 1399.458528][T17845] team0 (unregistering): Port device team_slave_0 removed