last executing test programs: 2.922202207s ago: executing program 2 (id=191): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000080)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000005c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x36, 0x41) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0x0, 0xc}, {0xfff1, 0xffff}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x4008050) 2.231962194s ago: executing program 2 (id=194): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff0000000000000000ffffffffffffffff053b000000000000000000000000000002000000000000005600000000000000feffffffff7f400002000000000000080000000000000000010005000000000044000500ac141426000000000000000000000000000004d53c"], 0xfc}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_TOS={0x5, 0x4, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.047387949s ago: executing program 1 (id=203): r0 = socket(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x40000002}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0xe000202b}) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) r3 = dup3(r0, r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000300)={0x200f}) 1.969898461s ago: executing program 0 (id=207): socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x6}, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000080)='4', 0x1) 1.934858092s ago: executing program 2 (id=208): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1a33d6355871a5dd}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) 1.932368672s ago: executing program 1 (id=209): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5452, &(0x7f0000000040)={r0}) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x3000c0c0) 1.816666015s ago: executing program 1 (id=211): syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x1, 0x50f, &(0x7f0000000680)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0xb2) fallocate(r0, 0x10, 0x1, 0x2a9d) r2 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x78) fallocate(r2, 0x0, 0x0, 0x1001ed) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x1000, 0x6}) 1.61251888s ago: executing program 2 (id=213): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0xfffffffffffffe62, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.489226623s ago: executing program 1 (id=214): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x14, 0xa, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x40c0040}, 0x408c4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f0000002180)=""/4089, 0xff9}, {&(0x7f00000003c0)=""/63, 0x3f}, {0x0}], 0x3}, 0x40000020) 1.395282605s ago: executing program 2 (id=215): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) readv(r2, &(0x7f0000000480)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1) signalfd4(r2, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) 1.19933882s ago: executing program 0 (id=217): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0) 1.157052041s ago: executing program 0 (id=218): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x801) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x5) close(r0) 1.129106942s ago: executing program 3 (id=219): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="4df582bca10db644d09cfd66fdffffffffffffff40"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000060000000400000004"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1, 0xffffffffffffffff}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000240), &(0x7f0000000280)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000a40)={r3, &(0x7f0000000a00)}, 0x20) 1.101159923s ago: executing program 3 (id=220): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e22, 0x7, @local, 0x8}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x6, 0x5}, 0x10) 1.048385464s ago: executing program 3 (id=221): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000005c0), 0x12) 984.210096ms ago: executing program 0 (id=222): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f0000000080)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10) bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000040)=0x7ff, 0x4) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x20001) close(r1) 935.204407ms ago: executing program 0 (id=223): r0 = syz_open_procfs(0x0, 0x0) getdents(r0, &(0x7f0000000000)=""/34, 0x22) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x802c550a, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x4, 0xaea}, 0x10005, 0x3, 0xfffffbff, 0x3, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)='cpu<-0\t\t\t') 917.092447ms ago: executing program 3 (id=224): syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x3) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) dup2(r1, r2) fcntl$setown(r1, 0x8, r0) 881.422728ms ago: executing program 1 (id=225): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000e80)={[{@dioread_nolock}, {@dioread_nolock}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@init_itable}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x340}}, {@debug}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@noauto_da_alloc}], [{@context={'context', 0x3d, 'system_u'}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, '\xa3'}}, {@euid_lt={'euid<', 0xee00}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0xfd, 0x580, &(0x7f0000000900)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0x1) 860.640819ms ago: executing program 0 (id=226): timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x2b) acct(&(0x7f0000000100)='./file0\x00') 774.558331ms ago: executing program 4 (id=227): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000bd52007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000010"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff8b, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0xab009500, 0x0, 0x0, 0x0, 0x0, 0x0) 717.232643ms ago: executing program 4 (id=228): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000062c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000600)=""/196, 0xc4}], 0x1}}], 0x1, 0x2001, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 706.838772ms ago: executing program 3 (id=229): sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1a0, 0x1403, 0x100, 0x70bd27, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_bond\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip_vti0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pimreg\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'gre0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wlan0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'gretap0\x00'}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000c004) r0 = socket$kcm(0x2b, 0x1, 0x0) close(r0) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f00000001c0), 0x45) close(r0) 699.823013ms ago: executing program 4 (id=230): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) r1 = openat$cgroup_ro(r0, &(0x7f0000000600)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[]}, 0x78) write$binfmt_script(r1, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [], 0x0, 0x0, 0x0}, 0x1e8) 655.416064ms ago: executing program 3 (id=231): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r1, &(0x7f00000000c0)={0x2, 0xfffa, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @broadcast}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(0xffffffffffffffff, 0x0, 0x0) 628.413505ms ago: executing program 4 (id=232): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x5, 0x4) recvmmsg(r0, &(0x7f0000003ac0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002680)=""/21, 0x15}, 0x2}], 0x1, 0x45833af92e4b39fe, 0x0) 612.006045ms ago: executing program 1 (id=233): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000300), 0x4, 0xbaf, &(0x7f00000017c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000200)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 532.578627ms ago: executing program 2 (id=234): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000040)=0x7, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 416.32563ms ago: executing program 4 (id=235): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000cc0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x8, 0xd}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40800}, 0x44000) 0s ago: executing program 4 (id=236): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000540)={r3}, &(0x7f0000000640)=0x8) kernel console output (not intermixed with test programs): [ 23.192970][ T28] audit: type=1400 audit(1786502098.130:99): avc: denied { noatsecure } for pid=3169 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 23.213040][ T28] audit: type=1400 audit(1786502098.130:100): avc: denied { write } for pid=3169 comm="sh" path="pipe:[1421]" dev="pipefs" ino=1421 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 23.237661][ T28] audit: type=1400 audit(1786502098.130:101): avc: denied { rlimitinh } for pid=3169 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 23.260980][ T28] audit: type=1400 audit(1786502098.130:102): avc: denied { siginh } for pid=3169 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 23.291554][ T28] audit: type=1400 audit(1786502098.250:103): avc: denied { search } for pid=3171 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.314540][ T28] audit: type=1400 audit(1786502098.250:104): avc: denied { search } for pid=3171 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.292201][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 25.292221][ T28] audit: type=1400 audit(1786502100.250:124): avc: denied { write } for pid=3264 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.328140][ T28] audit: type=1400 audit(1786502100.290:125): avc: denied { write } for pid=3275 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.21' (ED25519) to the list of known hosts. [ 31.943824][ T28] audit: type=1400 audit(1786502106.900:126): avc: denied { mounton } for pid=3285 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 31.966941][ T28] audit: type=1400 audit(1786502106.920:127): avc: denied { mount } for pid=3285 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.969484][ T3285] cgroup: Unknown subsys name 'net' [ 31.994835][ T28] audit: type=1400 audit(1786502106.950:128): avc: denied { unmount } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.087822][ T3285] cgroup: Unknown subsys name 'cpuset' [ 32.094045][ T3285] cgroup: Unknown subsys name 'rlimit' [ 32.206648][ T28] audit: type=1400 audit(1786502107.160:129): avc: denied { setattr } for pid=3285 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.230119][ T28] audit: type=1400 audit(1786502107.170:130): avc: denied { create } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.253723][ T28] audit: type=1400 audit(1786502107.170:131): avc: denied { write } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.274262][ T28] audit: type=1400 audit(1786502107.170:132): avc: denied { read } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.294675][ T28] audit: type=1400 audit(1786502107.190:133): avc: denied { mounton } for pid=3285 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 32.319711][ T28] audit: type=1400 audit(1786502107.190:134): avc: denied { mount } for pid=3285 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 32.343201][ T28] audit: type=1400 audit(1786502107.200:135): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 32.362046][ T3289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 32.437375][ T3285] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 33.708174][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.715329][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.722907][ T3299] bridge_slave_0: entered allmulticast mode [ 33.729490][ T3299] bridge_slave_0: entered promiscuous mode [ 33.765971][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.773177][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.780401][ T3299] bridge_slave_1: entered allmulticast mode [ 33.786914][ T3299] bridge_slave_1: entered promiscuous mode [ 33.804622][ T3295] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.811747][ T3295] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.819061][ T3295] bridge_slave_0: entered allmulticast mode [ 33.825589][ T3295] bridge_slave_0: entered promiscuous mode [ 33.844409][ T3295] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.851571][ T3295] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.858752][ T3295] bridge_slave_1: entered allmulticast mode [ 33.865229][ T3295] bridge_slave_1: entered promiscuous mode [ 33.889108][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.912797][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.941578][ T3295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.964109][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.971236][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.978556][ T3300] bridge_slave_0: entered allmulticast mode [ 33.984945][ T3300] bridge_slave_0: entered promiscuous mode [ 33.992503][ T3295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.002645][ T3299] team0: Port device team_slave_0 added [ 34.009622][ T3299] team0: Port device team_slave_1 added [ 34.015279][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.022470][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.029696][ T3296] bridge_slave_0: entered allmulticast mode [ 34.036049][ T3296] bridge_slave_0: entered promiscuous mode [ 34.042624][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.049797][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.056953][ T3304] bridge_slave_0: entered allmulticast mode [ 34.063604][ T3304] bridge_slave_0: entered promiscuous mode [ 34.070266][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.077450][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.084545][ T3300] bridge_slave_1: entered allmulticast mode [ 34.091013][ T3300] bridge_slave_1: entered promiscuous mode [ 34.106231][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.113406][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.120674][ T3296] bridge_slave_1: entered allmulticast mode [ 34.127287][ T3296] bridge_slave_1: entered promiscuous mode [ 34.133603][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.140730][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.147850][ T3304] bridge_slave_1: entered allmulticast mode [ 34.154264][ T3304] bridge_slave_1: entered promiscuous mode [ 34.194037][ T3295] team0: Port device team_slave_0 added [ 34.199883][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.206929][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.232962][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.249098][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.259325][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.269224][ T3295] team0: Port device team_slave_1 added [ 34.275103][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.282150][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.308370][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.320739][ T3296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.330914][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.346091][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.368525][ T3296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.397861][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.404929][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.431392][ T3295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.447719][ T3304] team0: Port device team_slave_0 added [ 34.455102][ T3304] team0: Port device team_slave_1 added [ 34.461669][ T3300] team0: Port device team_slave_0 added [ 34.467590][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.474667][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.500709][ T3295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.512042][ T3296] team0: Port device team_slave_0 added [ 34.528187][ T3300] team0: Port device team_slave_1 added [ 34.541501][ T3296] team0: Port device team_slave_1 added [ 34.568626][ T3299] hsr_slave_0: entered promiscuous mode [ 34.574585][ T3299] hsr_slave_1: entered promiscuous mode [ 34.581074][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.588057][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.614049][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.626145][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.633175][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.659170][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.670272][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.677276][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.703247][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.721995][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.728979][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.754992][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.786173][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.793576][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.819671][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.833391][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.840420][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.866380][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.888685][ T3295] hsr_slave_0: entered promiscuous mode [ 34.894802][ T3295] hsr_slave_1: entered promiscuous mode [ 34.900709][ T3295] debugfs: 'hsr0' already exists in 'hsr' [ 34.906518][ T3295] Cannot create hsr debugfs directory [ 34.936164][ T3304] hsr_slave_0: entered promiscuous mode [ 34.942143][ T3304] hsr_slave_1: entered promiscuous mode [ 34.948122][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 34.953840][ T3304] Cannot create hsr debugfs directory [ 34.967346][ T3296] hsr_slave_0: entered promiscuous mode [ 34.973378][ T3296] hsr_slave_1: entered promiscuous mode [ 34.979203][ T3296] debugfs: 'hsr0' already exists in 'hsr' [ 34.984935][ T3296] Cannot create hsr debugfs directory [ 35.014323][ T3300] hsr_slave_0: entered promiscuous mode [ 35.020418][ T3300] hsr_slave_1: entered promiscuous mode [ 35.026301][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 35.032080][ T3300] Cannot create hsr debugfs directory [ 35.234481][ T3299] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 35.243471][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.251373][ T3299] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 35.259849][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.267699][ T3299] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 35.276486][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.284110][ T3299] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 35.292894][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.323199][ T3295] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 35.332283][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.343197][ T3295] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 35.351909][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.359852][ T3295] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 35.368750][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.376317][ T3295] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 35.385488][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.418519][ T3304] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 35.428180][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.436924][ T3304] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 35.445687][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.465291][ T3304] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 35.474244][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.482322][ T3304] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 35.491028][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.514571][ T3296] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 35.523138][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.531106][ T3296] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 35.540301][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.550111][ T3296] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 35.559113][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.574191][ T3296] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 35.583075][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.597492][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.618583][ T3300] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 35.627573][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.635299][ T3300] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 35.643925][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.651864][ T3300] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 35.660532][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.668223][ T3300] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 35.676719][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.701882][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.724669][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.731832][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.741238][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.748319][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.761568][ T3295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.802626][ T3295] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.813356][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.820481][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.833424][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.845423][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.852582][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.866851][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.888445][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.895551][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.915047][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.922171][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.940745][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.952044][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.990140][ T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.000811][ T3304] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 36.011519][ T3304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.024368][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.044440][ T361] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.051622][ T361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.070243][ T361] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.077348][ T361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.086806][ T361] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.093929][ T361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.103403][ T361] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.110531][ T361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.165342][ T3300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.196469][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.337625][ T3295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.400064][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.424626][ T3299] veth0_vlan: entered promiscuous mode [ 36.434536][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.448741][ T3299] veth1_vlan: entered promiscuous mode [ 36.466497][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.505226][ T3299] veth0_macvtap: entered promiscuous mode [ 36.531737][ T3299] veth1_macvtap: entered promiscuous mode [ 36.548961][ T3295] veth0_vlan: entered promiscuous mode [ 36.575499][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.594907][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.612784][ T3295] veth1_vlan: entered promiscuous mode [ 36.629201][ T3304] veth0_vlan: entered promiscuous mode [ 36.645290][ T3304] veth1_vlan: entered promiscuous mode [ 36.672550][ T3296] veth0_vlan: entered promiscuous mode [ 36.686018][ T3295] veth0_macvtap: entered promiscuous mode [ 36.702973][ T3296] veth1_vlan: entered promiscuous mode [ 36.714475][ T3295] veth1_macvtap: entered promiscuous mode [ 36.721798][ T3304] veth0_macvtap: entered promiscuous mode [ 36.733357][ T3304] veth1_macvtap: entered promiscuous mode [ 36.755285][ T3299] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 36.769939][ T68] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.771413][ T311] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.793409][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.802160][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.813051][ T3296] veth0_macvtap: entered promiscuous mode [ 36.828190][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.844312][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.863383][ T3296] veth1_macvtap: entered promiscuous mode [ 36.936683][ T3300] veth0_vlan: entered promiscuous mode [ 36.952812][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.978043][ T3300] veth1_vlan: entered promiscuous mode [ 36.992132][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.017093][ T30] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.043866][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 37.043882][ T28] audit: type=1400 audit(1786502112.000:165): avc: denied { name_bind } for pid=3503 comm="syz.1.2" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 37.077804][ T3300] veth0_macvtap: entered promiscuous mode [ 37.105636][ T28] audit: type=1400 audit(1786502112.000:166): avc: denied { node_bind } for pid=3503 comm="syz.1.2" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 37.110528][ T3300] veth1_macvtap: entered promiscuous mode [ 37.130889][ T28] audit: type=1400 audit(1786502112.060:167): avc: denied { open } for pid=3506 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 37.158860][ T311] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.162624][ T28] audit: type=1400 audit(1786502112.060:168): avc: denied { kernel } for pid=3506 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 37.182059][ T311] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.226277][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.235455][ T28] audit: type=1400 audit(1786502112.190:169): avc: denied { mount } for pid=3506 comm="syz.1.7" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 37.254025][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.275787][ T28] audit: type=1400 audit(1786502112.220:170): avc: denied { create } for pid=3513 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 37.297138][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.298871][ T28] audit: type=1400 audit(1786502112.220:171): avc: denied { search } for pid=3506 comm="syz.1.7" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 37.376970][ T28] audit: type=1400 audit(1786502112.230:172): avc: denied { write } for pid=3506 comm="syz.1.7" name="trace" dev="tracefs" ino=1174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 37.399252][ T28] audit: type=1400 audit(1786502112.230:173): avc: denied { open } for pid=3506 comm="syz.1.7" path="/1/trace/trace" dev="tracefs" ino=1174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 37.422552][ T28] audit: type=1400 audit(1786502112.230:174): avc: denied { create } for pid=3513 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 37.470435][ T68] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.483103][ T68] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.507602][ T30] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.516494][ T30] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.612775][ T3535] netlink: 'syz.0.14': attribute type 1 has an invalid length. [ 37.627871][ T68] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.639100][ T3535] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.14'. [ 37.648508][ T68] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.671559][ T3535] netlink: 9 bytes leftover after parsing attributes in process `syz.0.14'. [ 37.677285][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.689035][ T3537] netlink: 'syz.2.15': attribute type 1 has an invalid length. [ 37.698644][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.747133][ T311] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.756062][ T311] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.769346][ T311] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.800453][ T3533] syz.4.5 (3533) used greatest stack depth: 10568 bytes left [ 37.808968][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.818251][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.830978][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.951875][ T3549] syz.2.20 uses obsolete (PF_INET,SOCK_PACKET) [ 37.991588][ T3551] ip_tables: iptables: counters copy to user failed while replacing table [ 38.142882][ T3566] netlink: 4 bytes leftover after parsing attributes in process `syz.3.27'. [ 38.156449][ T3566] netlink: 4 bytes leftover after parsing attributes in process `syz.3.27'. [ 38.166047][ T3566] Zero length message leads to an empty skb [ 38.169109][ T49] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 38.189416][ T49] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 38.227151][ T49] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 38.237330][ T49] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 38.409636][ T3576] syz.2.32 (3576) used greatest stack depth: 9800 bytes left [ 38.574137][ T3595] loop2: detected capacity change from 0 to 512 [ 38.601799][ T3597] loop1: detected capacity change from 0 to 2048 [ 39.134463][ T3602] process 'syz.0.45' launched './file1' with NULL argv: empty string added [ 39.353788][ T3608] netlink: 52 bytes leftover after parsing attributes in process `syz.0.48'. [ 39.423339][ T3609] netlink: 52 bytes leftover after parsing attributes in process `syz.0.48'. [ 39.493829][ T3597] loop1: p1 < > p3 [ 39.519062][ T3597] loop1: p3 size 134217728 extends beyond EOD, truncated [ 39.525713][ T3611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.44'. [ 39.608800][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 39.679572][ T3600] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.687541][ T3600] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.772067][ T3600] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.774708][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88811ab32c00: rx timeout, send abort [ 39.785792][ T3600] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.821011][ T3608] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.828161][ T3608] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.867411][ T68] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.898661][ T68] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.914026][ T68] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.936254][ T68] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.032246][ T3636] syzkaller0: entered promiscuous mode [ 40.038089][ T3636] syzkaller0: entered allmulticast mode [ 40.357158][ T3642] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 40.363753][ T3642] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 40.387713][ T3640] loop1: detected capacity change from 0 to 1024 [ 40.404524][ T3645] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 40.420315][ T3642] vhci_hcd vhci_hcd.0: Device attached [ 40.443035][ T3643] vhci_hcd: connection closed [ 40.443358][ T30] vhci_hcd vhci_hcd.2: stop threads [ 40.453981][ T30] vhci_hcd vhci_hcd.2: release socket [ 40.459745][ T30] vhci_hcd vhci_hcd.2: disconnect device [ 40.796917][ T3660] netlink: 'syz.4.67': attribute type 5 has an invalid length. [ 40.941234][ T3684] netlink: 12 bytes leftover after parsing attributes in process `syz.0.74'. [ 41.030393][ T3690] netlink: 12 bytes leftover after parsing attributes in process `syz.4.77'. [ 41.158683][ T3710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.161387][ T3708] loop0: detected capacity change from 0 to 4096 [ 41.168923][ T3710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.200904][ T3708] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.271598][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.335012][ T3720] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.90'. [ 41.365457][ T3722] sock: sock_set_timeout: `syz.4.92' (pid 3722) tries to set negative timeout [ 41.539687][ T3710] Set syz1 is full, maxelem 65536 reached [ 41.695694][ T3745] netlink: 'syz.1.103': attribute type 1 has an invalid length. [ 41.703649][ T3745] netlink: 'syz.1.103': attribute type 2 has an invalid length. [ 41.745118][ T3747] mmap: syz.3.104 (3747) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 42.089175][ T28] kauditd_printk_skb: 5082 callbacks suppressed [ 42.089193][ T28] audit: type=1400 audit(1786502117.050:5257): avc: denied { read write } for pid=3768 comm="syz.1.111" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 42.133510][ T28] audit: type=1400 audit(1786502117.050:5258): avc: denied { open } for pid=3768 comm="syz.1.111" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 42.366060][ T28] audit: type=1400 audit(1786502117.320:5259): avc: denied { create } for pid=3787 comm="syz.4.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 42.386352][ T28] audit: type=1400 audit(1786502117.330:5260): avc: denied { write } for pid=3787 comm="syz.4.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 43.336170][ T28] audit: type=1400 audit(1786502118.290:5261): avc: denied { create } for pid=3917 comm="syz.1.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 43.377653][ T28] audit: type=1400 audit(1786502118.320:5262): avc: denied { setopt } for pid=3917 comm="syz.1.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 43.410167][ T3920] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 43.422014][ T28] audit: type=1400 audit(1786502118.380:5263): avc: denied { bind } for pid=3917 comm="syz.1.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 43.481845][ T3922] loop1: detected capacity change from 0 to 256 [ 43.492017][ T3926] __nla_validate_parse: 1 callbacks suppressed [ 43.492031][ T3926] netlink: 20 bytes leftover after parsing attributes in process `syz.4.130'. [ 43.523415][ T3922] ======================================================= [ 43.523415][ T3922] WARNING: The mand mount option has been deprecated and [ 43.523415][ T3922] and is ignored by this kernel. Remove the mand [ 43.523415][ T3922] option from the mount to silence this warning. [ 43.523415][ T3922] ======================================================= [ 43.559666][ T3922] vfat: Unknown parameter 'shª(1q+»Áortname' [ 43.578853][ T3926] loop4: detected capacity change from 0 to 1024 [ 43.587217][ T3926] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.599659][ T3926] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e854c01c, mo2=0103] [ 43.607934][ T3926] System zones: 0-1, 3-36 [ 43.623634][ T3926] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.671670][ T28] audit: type=1400 audit(1786502118.630:5264): avc: denied { write } for pid=3924 comm="syz.4.130" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 43.694846][ T28] audit: type=1400 audit(1786502118.630:5265): avc: denied { add_name } for pid=3924 comm="syz.4.130" name="blkio.bfq.avg_queue_size" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 43.731176][ T28] audit: type=1400 audit(1786502118.630:5266): avc: denied { create } for pid=3924 comm="syz.4.130" name="blkio.bfq.avg_queue_size" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 43.756616][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.291060][ T3960] loop0: detected capacity change from 0 to 1024 [ 44.322723][ T3960] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.412517][ T3964] netlink: 6 bytes leftover after parsing attributes in process `syz.1.143'. [ 44.461350][ T3964] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 44.481949][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.521975][ T3966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.145'. [ 44.811553][ T3980] bond0: (slave syz_tun): Releasing backup interface [ 44.811571][ T3979] netlink: 'syz.0.149': attribute type 1 has an invalid length. [ 44.827801][ T3980] bridge_slave_0: left allmulticast mode [ 44.833766][ T3980] bridge_slave_0: left promiscuous mode [ 44.839655][ T3980] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.848369][ T3980] bridge_slave_1: left allmulticast mode [ 44.854370][ T3980] bridge_slave_1: left promiscuous mode [ 44.860535][ T3980] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.872234][ T3980] bond0: (slave bond_slave_0): Releasing backup interface [ 44.885105][ T3980] bond0: (slave bond_slave_1): Releasing backup interface [ 44.895927][ T3980] team0: Port device team_slave_0 removed [ 44.904650][ T3980] team0: Port device team_slave_1 removed [ 44.910750][ T3980] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.921671][ T3980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.929510][ T3980] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 44.951985][ T3979] 8021q: adding VLAN 0 to HW filter on device bond1 [ 44.964348][ T3981] bond1: (slave syz_tun): Enslaving as a backup interface with an up link [ 45.040647][ T3991] netlink: 24 bytes leftover after parsing attributes in process `syz.3.153'. [ 45.211494][ T4009] netlink: 24 bytes leftover after parsing attributes in process `syz.4.160'. [ 45.278753][ T3991] loop3: detected capacity change from 0 to 512 [ 45.305250][ T3991] EXT4-fs: Ignoring removed bh option [ 45.335496][ T3991] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 45.351477][ T3991] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 45.366329][ T4018] loop4: detected capacity change from 0 to 1024 [ 45.388840][ T3991] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 45.411080][ T4018] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.454561][ T3991] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 45.470544][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.479854][ T3991] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 45.544540][ T3991] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.573470][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.764168][ T4046] netlink: 'syz.2.175': attribute type 4 has an invalid length. [ 45.798588][ T4048] netlink: 12 bytes leftover after parsing attributes in process `syz.2.176'. [ 45.808613][ T4048] netlink: 156 bytes leftover after parsing attributes in process `syz.2.176'. [ 46.264281][ T4084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.191'. [ 46.949844][ T4093] netlink: 'syz.2.194': attribute type 1 has an invalid length. [ 46.979322][ T4093] 8021q: adding VLAN 0 to HW filter on device bond1 [ 47.032673][ T4093] bond1: (slave geneve2): making interface the new active one [ 47.101137][ T4093] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 47.322036][ T4129] netlink: 4 bytes leftover after parsing attributes in process `syz.4.210'. [ 47.336885][ T4129] netlink: 'syz.4.210': attribute type 21 has an invalid length. [ 47.362234][ T4131] loop1: detected capacity change from 0 to 512 [ 47.370773][ T4129] netlink: 4 bytes leftover after parsing attributes in process `syz.4.210'. [ 47.371828][ T3894] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.406966][ T4129] netlink: 'syz.4.210': attribute type 21 has an invalid length. [ 47.443775][ T4131] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.467108][ T3896] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.476017][ T4131] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.486978][ T3896] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.550035][ T3896] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.562434][ T4141] loop4: detected capacity change from 0 to 512 [ 47.584846][ T28] kauditd_printk_skb: 476 callbacks suppressed [ 47.584864][ T28] audit: type=1400 audit(1786502122.540:5743): avc: denied { write } for pid=4130 comm="syz.1.211" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 47.670707][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.672053][ T28] audit: type=1400 audit(1786502122.580:5744): avc: denied { write } for pid=4130 comm="syz.1.211" path="/46/file1/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 47.719346][ T28] audit: type=1400 audit(1786502122.580:5745): avc: denied { write } for pid=4130 comm="syz.1.211" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 47.781507][ T28] audit: type=1400 audit(1786502122.590:5746): avc: denied { ioctl } for pid=4130 comm="syz.1.211" path="/46/file1/file1" dev="loop1" ino=15 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 47.841178][ T28] audit: type=1400 audit(1786502122.710:5747): avc: denied { write } for pid=4133 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.887800][ T28] audit: type=1400 audit(1786502122.770:5748): avc: denied { write } for pid=4154 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.910207][ T28] audit: type=1400 audit(1786502122.800:5749): avc: denied { read } for pid=4150 comm="syz.1.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 48.051968][ T28] audit: type=1400 audit(1786502123.010:5750): avc: denied { write } for pid=4160 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.113240][ T28] audit: type=1400 audit(1786502123.070:5751): avc: denied { write } for pid=4184 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.181448][ T28] audit: type=1400 audit(1786502123.140:5752): avc: denied { create } for pid=4188 comm="syz.0.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 48.281680][ T4197] loop1: detected capacity change from 0 to 1024 [ 48.309310][ T4197] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c028, mo2=0002] [ 48.318456][ T4197] System zones: 0-1, 3-12 [ 48.323517][ T4197] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.812664][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.874930][ T4225] loop1: detected capacity change from 0 to 4096 [ 48.916065][ T4225] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.172095][ T4225] ================================================================== [ 49.180244][ T4225] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 49.188217][ T4225] [ 49.190567][ T4225] write to 0xffff888104f40aac of 4 bytes by task 4227 on cpu 1: [ 49.198227][ T4225] xas_set_mark+0x12b/0x140 [ 49.202818][ T4225] __folio_start_writeback+0x16a/0x350 [ 49.208326][ T4225] ext4_bio_write_folio+0x5a2/0xa10 [ 49.213581][ T4225] mpage_process_page_bufs+0x487/0x600 [ 49.219089][ T4225] mpage_prepare_extent_to_map+0x79e/0xc00 [ 49.224951][ T4225] ext4_do_writepages+0x6ec/0x2720 [ 49.230101][ T4225] ext4_writepages+0x18f/0x300 [ 49.234903][ T4225] do_writepages+0x1b9/0x300 [ 49.239539][ T4225] file_write_and_wait_range+0x178/0x2f0 [ 49.245218][ T4225] mmb_fsync_noflush+0x48/0x140 [ 49.250118][ T4225] ext4_sync_file+0x1f2/0x6d0 [ 49.254856][ T4225] vfs_fsync_range+0xc5/0xe0 [ 49.259500][ T4225] ext4_buffered_write_iter+0x426/0x480 [ 49.265104][ T4225] ext4_file_write_iter+0x38e/0xef0 [ 49.270344][ T4225] iter_file_splice_write+0x6a0/0xa60 [ 49.275746][ T4225] direct_splice_actor+0x156/0x280 [ 49.280865][ T4225] splice_direct_to_actor+0x2f9/0x680 [ 49.286258][ T4225] do_splice_direct+0x119/0x1a0 [ 49.291117][ T4225] do_sendfile+0x37d/0x640 [ 49.295555][ T4225] __x64_sys_sendfile64+0x105/0x150 [ 49.300765][ T4225] x64_sys_call+0x2dc4/0x3020 [ 49.305468][ T4225] do_syscall_64+0x136/0x3c0 [ 49.310070][ T4225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.315982][ T4225] [ 49.318309][ T4225] read to 0xffff888104f40aac of 4 bytes by task 4225 on cpu 0: [ 49.325859][ T4225] __writeback_single_inode+0x1fb/0x660 [ 49.331413][ T4225] writeback_single_inode+0x16d/0x400 [ 49.336818][ T4225] sync_inode_metadata+0x6e/0xa0 [ 49.341787][ T4225] mmb_fsync_noflush+0xfa/0x140 [ 49.346659][ T4225] ext4_sync_file+0x1f2/0x6d0 [ 49.351345][ T4225] vfs_fsync_range+0xc5/0xe0 [ 49.355982][ T4225] ext4_buffered_write_iter+0x426/0x480 [ 49.361549][ T4225] ext4_file_write_iter+0x38e/0xef0 [ 49.366771][ T4225] iter_file_splice_write+0x6a0/0xa60 [ 49.372152][ T4225] direct_splice_actor+0x156/0x280 [ 49.377288][ T4225] splice_direct_to_actor+0x2f9/0x680 [ 49.382687][ T4225] do_splice_direct+0x119/0x1a0 [ 49.387559][ T4225] do_sendfile+0x37d/0x640 [ 49.392001][ T4225] __x64_sys_sendfile64+0x105/0x150 [ 49.397229][ T4225] x64_sys_call+0x2dc4/0x3020 [ 49.401928][ T4225] do_syscall_64+0x136/0x3c0 [ 49.406542][ T4225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.412447][ T4225] [ 49.414788][ T4225] value changed: 0x0a000021 -> 0x04000021 [ 49.420509][ T4225] [ 49.422873][ T4225] Reported by Kernel Concurrency Sanitizer on: [ 49.429054][ T4225] CPU: 0 UID: 0 PID: 4225 Comm: syz.1.233 Not tainted syzkaller #0 PREEMPT(lazy) [ 49.438276][ T4225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 49.448347][ T4225] ================================================================== [ 49.753485][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.