last executing test programs: 4.364303871s ago: executing program 3 (id=391): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.498255328s ago: executing program 3 (id=396): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0xf}, 0x10040, 0x0, 0x0, 0x9, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000"], 0x24}}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r1, &(0x7f0000000400)=[{&(0x7f00000000c0)="00efc12d5656bfe2c09727c44c4b546a000000f69695fabdf89d6495057efa8296804ce6fe6176648b168db0de4a363955ebe5c95e7ad72ddde23af5fccfd4b227a416b4ab57097091692cee30a0645841fc35aa2119d393332cd2", 0x5b}, {&(0x7f0000000040)}, {&(0x7f0000000180)="5809f64ea032c52fc9509701f92f95e921b3c305df36e99a1020866382b17adb0f67c159b1d5b093afbc75ae46b6576bebe576ae9bea4d93949c8230", 0x3c}, {&(0x7f0000000240)="c089645f074f283f4495625e9028b58bca85221269b4c051111217843363bc266d73b46e4f5b369e42dc7f7e60afbf6e", 0x30}, {0x0}, {&(0x7f0000000300)="593c0ad4126b8e33e21ba16c066be2faccffc20e548b44399e1a1307bc5a4b30499f51c2f3d14c7a8567651ced772647109fcfe02582af348e3b1dc5b6770e8e4d30d6e5b30f5853e8abfc0594e9db73ce601d5102e490a5fe45c3295c277a923899e4e682", 0x65}], 0x6) socket$inet6(0xa, 0x2, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000019c0)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) 3.13332587s ago: executing program 3 (id=400): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x0, 0x5, 0x6364, 0x4005, 0xffffffff, 0x3}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x9, 0x914fb67, 0x7fff}}]}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000005c0)="05", 0x1, 0x4019, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x3, 0x6, @remote}, 0x14) 2.935539596s ago: executing program 3 (id=406): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xb, 0x5, 0x400, 0x9, 0x11}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r0}, 0x0, &(0x7f0000000700)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 2.884559308s ago: executing program 0 (id=408): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYBLOB="0dff"], 0x14}, 0x1, 0x0, 0x0, 0xc051}, 0x4000) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2000400c) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x8000, &(0x7f00000004c0), 0x3, 0x439, &(0x7f0000000940)="$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") perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x400) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000280)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) 2.860591009s ago: executing program 1 (id=409): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x9, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x403}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x60000000, 0x0, 0x0, 0x0, &(0x7f0000001c40), 0x2}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f00000009c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x18}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1a}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xa, 0x9}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.740548242s ago: executing program 3 (id=410): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$TCFLSH(r3, 0x400455c8, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)=0x3) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000280)=0x3) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000540)=0x1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000001c0)) sendmsg$nl_route_sched(r0, 0x0, 0x0) 2.366693864s ago: executing program 4 (id=411): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0xf}, 0x10040, 0x0, 0x0, 0x9, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000"], 0x24}}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r1, &(0x7f0000000400)=[{&(0x7f00000000c0)="00efc12d5656bfe2c09727c44c4b546a000000f69695fabdf89d6495057efa8296804ce6fe6176648b168db0de4a363955ebe5c95e7ad72ddde23af5fccfd4b227a416b4ab57097091692cee30a0645841fc35aa2119d393332cd2", 0x5b}, {&(0x7f0000000040)}, {&(0x7f0000000180)="5809f64ea032c52fc9509701f92f95e921b3c305df36e99a1020866382b17adb0f67c159b1d5b093afbc75ae46b6576bebe576ae9bea4d93949c8230", 0x3c}, {&(0x7f0000000240)="c089645f074f283f4495625e9028b58bca85221269b4c051111217843363bc266d73b46e4f5b369e42dc7f7e60afbf6e", 0x30}, {0x0}, {&(0x7f0000000300)="593c0ad4126b8e33e21ba16c066be2faccffc20e548b44399e1a1307bc5a4b30499f51c2f3d14c7a8567651ced772647109fcfe02582af348e3b1dc5b6770e8e4d30d6e5b30f5853e8abfc0594e9db73ce601d5102e490a5fe45c3295c277a923899e4e682", 0x65}], 0x6) socket$inet6(0xa, 0x2, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000019c0)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) 2.239942829s ago: executing program 0 (id=412): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0x9}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x405c071}, 0x400c840) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x8}}}, 0x24}}, 0x41814) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) unlink(&(0x7f0000000240)='.\x00') request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2, 0x11}, &(0x7f0000001fee)='R\brust\xe3c*sgrVex:D0', 0x0) 2.161921441s ago: executing program 0 (id=413): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='\n\x00\x00\x00@\x00'/15, @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)="c52c35ea4f0134beb954bed8e1d986ae4c318fe66f5102b1bd2e3edab67f066a80f87ee6daaeacfff979df2b5edbdcdc175664cc391106709e65e4c0e5b747901195845facb1ac7f30e1f1767de4", 0x0, 0x1003, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}}, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x40000000000006}, 0x0, 0x10001, 0xda, 0x4, 0xa, 0x7f, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000e40)=ANY=[], 0x8) getsockopt$inet6_opts(r1, 0x29, 0x36, 0x0, &(0x7f00000001c0)) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001d40)={r0, &(0x7f0000001b80), 0x0}, 0x20) 2.161003851s ago: executing program 4 (id=414): syz_emit_ethernet(0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x3fffffffc}, 0x100, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x5, 0x1, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x8, 0x5, 0x5, 0x6, 0x0, 0x0, 0xd2dfd, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_config_ext={0x25c8, 0xe}, 0x180a, 0x0, 0x3, 0x0, 0x7, 0x101, 0x3, 0x0, 0xc, 0x0, 0x400000000005}, 0x0, 0x1, 0xffffffffffffffff, 0x1) mremap(&(0x7f00007f5000/0x4000)=nil, 0x4000, 0xffff00000ad7e000, 0x3, &(0x7f0000ec0000/0x4000)=nil) 2.111932782s ago: executing program 4 (id=415): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0xe652, 0x5, 0x134, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xac, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0x34000, 0x2) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 1.928040098s ago: executing program 1 (id=417): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0}, 0x4000, 0x0, 0x3, 0x1, 0x4, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffff8) fstat(0xffffffffffffffff, &(0x7f00000000c0)) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x0, 0x111, 0x4b4, 0x0, 0x700, 0x288, 0x278, 0x278, 0x288, 0x278, 0x3, 0x0, {[{{@ipv6={@private1, @empty, [], [], 'vlan0\x00', 'geneve1\x00', {}, {}, 0x84, 0x0, 0x0, 0x4}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x4, [0x0, 0xfffd, 0x3, 0x0, 0x0, 0x0, 0x1, 0x4e21, 0x4e22, 0x0, 0x0, 0xffff, 0x2], [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x5, 'snmp_trap\x00', 'syz0\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1b}, @dev={0xfe, 0x80, '\x00', 0x42}, [0xffffffff, 0x0, 0xffffff00, 0xff000000], [], 'geneve1\x00', 'ip6tnl0\x00', {}, {}, 0x73, 0x0, 0x0, 0x19}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$vcsu(0x0, 0x400000000000000, 0x80) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) 1.86882006s ago: executing program 1 (id=418): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@ccm_128={{0x303}, "ef8966fd25129c15", "9da152000004b4991192c0029200", "b673ef60", "cbc5f9dc4dab64ec"}, 0x28) remap_file_pages(&(0x7f0000ca4000/0x4000)=nil, 0x4000, 0x0, 0xfffffffffffffffe, 0x40000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "ecba06893bcdc493"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 1.86828006s ago: executing program 1 (id=419): socket$inet6(0xa, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x4}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1200000006000000040000000200000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000001000000000000000", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB='\x00'/20], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000001c0)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r3, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000400)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r4, &(0x7f0000000000), 0x0}, 0x20) 1.817643012s ago: executing program 1 (id=420): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x18, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'gretap0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="1808000000000000000000002000000018110000", @ANYRES32=r9, @ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @sock_ops=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) sendto$packet(r2, &(0x7f0000000680)="3f031c00eee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdc9435e3ffe4612b470d15be1dec450b4ec826d0474ae650acaa2e5685ce20b047aa872effbe0a4a4ee6f1743473d3f9e546244c3561a366932fe389c405d98fddbfaf94b0a0eb1a0497eac6a83b946f277a28eadf2491cb010de7676f6b2c4c23b844d0c504193ee3d5fc41ac012ddd59b44c05aface028fd56038ea888f7725682795e26c2159572fa25dea0330c95dfb", 0xd3, 0x4040840, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r10, 0x560a, &(0x7f0000001040)={0x0, 0x1, 0x4, 0x20, 0x0, "0000e5ff0100"}) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x4, 0x2133, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f00000001c0), 0x19}, 0x100, 0x8000000, 0x0, 0x2, 0xfff, 0xa001, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000002100)=ANY=[@ANYBLOB="1e00000000000000070000003a"], 0x50) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x8c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 1.672206566s ago: executing program 0 (id=421): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="f0000000110001000000000800000000ac1e00010000000000000000000000002000fffffff6e3000000000000000002", @ANYRES32=0x0, @ANYBLOB], 0xf0}}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000000140)=0x1, 0x4) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x28040841, &(0x7f0000000040)={0x2, 0x24e23, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000004640)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000700)='?', 0x1}], 0x1}}], 0x1, 0x24000000) recvmmsg(r2, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/72, 0x48}, 0x6}], 0x41f, 0x40, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0xfeff) 1.592343529s ago: executing program 2 (id=422): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000200)=0x20, 0x4) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000340)=0x800, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x0, r2}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r3, 0x0}]) 1.385892746s ago: executing program 2 (id=423): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') r1 = perf_event_open(&(0x7f00000000c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x817, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r2, &(0x7f0000000380)={0x2, 0x4e23, @local}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r1, 0x3) unshare(0x400) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000300)={0x13, 0x10, 0xfa00, {&(0x7f0000000080), r4, 0x1}}, 0x18) 1.270396429s ago: executing program 2 (id=424): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) openat$sndseq(0xffffffffffffff9c, 0x0, 0x42002) listen(r1, 0xfffffffc) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, &(0x7f0000000340)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.160399973s ago: executing program 4 (id=425): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x152610}], 0x1, 0x0, 0xe00}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) 1.116006184s ago: executing program 2 (id=426): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@bh}]}, 0x82, 0x4a8, &(0x7f0000000300)="$eJzs3LtvHMUfAPDvrl+/X54GAiQhAkOEsHjYsRMgBQ0IJIogQFAEqIztRFGcGMVGwlGUGIRCg4QiQQ2USPwFdDQIqJCQqKBHQRGkSUAUh/ZuNzmvffEj5zsn9/lIZ8/c7N7M7Ozszs74HEDHGsh+JBFbIuLXiNheiy7cYKD26+rlM+N/Xz4znkSl8tqfETEfceXymfFi02K/zXlkMI1IP0zyTBaamTt9fGxqavJUHh+ePfHO8Mzc6SeOnRg7Onl08uTowYMH9o88/dTok02pZ1avK7vPTu/Z9eIbF14aP3zh7R++zsq7JU+vr8ea9C5+ayCr+F+VqnLaw/H/m8puo9laF06621gQVqUrIrLm6sn6f6VSOVeXtj1e+GCZ3Tevc/GAdZTdm/qWeD+/L85XGkpumArcCpJodwmA9iju99nzb/Fq4fCj7S49W3sAyup9NX/VUrojzbfpKT3fNtNARBye/+fz7BXNmIcAAFjGx+OfHYrHlxr/pXFPLfBH9mNbvobSHxF3RMSdEXFXROyIiLsjqtveGxE7V5Jp3QJBeWlo8fgnvVjapKmrC9n475l8bWvh+K8Y/UV/Vx7bWq1/T3Lk2NTkvvyYDEZPXxYfuUEe3z7/8yeN0urHf9kry78YC+bluNhdmqCbGJsdqw5Km+DS+xG7u+PfSqVSqn9y7UAnEbErInav7qO3FYFjj361p9FGy9d/0cdd14QzofJlxCO19p+PUv0LyeL1yd6t19cnh/8XU5P7houzYrEffzr/SqP8V17/9ZG1/6aF53+e8sVcHuh/q369diYarFxuaZjH+d8+avhMs9bzvzd5vXo9KpZd3xubnT01EtGbHKrGF7w/en3fIl5sn9V/cG9EZHlU61/smVavcZG3/30RsSdfL7s/Ih7Iy/5gRDwUEXsb1j7i++cap22E9p+oa/8kyuf/zrO130X7z6060HX8u28a5b+y9j9QDQ3m71Svf8tYaQHXfuQAAADg1pFWZ26SdOhaOE2Hhmp/2LsjNqVT0zOzjx2ZfvfkRG2Gpz960mKma3vdfOhIMp9/Yi0+ms8VF+n783njT7uiGh8an56aaHPdodNtbtD/M793tbt0wLpbah1tdIkvtAG3n3L/TxdGz73cysIALeX72tC5lun/aavKAbSe+z90rqX6/7lS3FoA3J7c/6Fz6f/QufR/6Fyl/t8Vv7SrJEALreHr/AIbJvDq0Gr26otm5h7pBjkI5UDx70nqklb+/yBuGOi7+RK+eZPFSKNVB7PNFyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAm+S8AAP//i1LmAQ==") chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2022, 0x36, 0x100, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) 739.984976ms ago: executing program 0 (id=427): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)={@cgroup=r4, r0, 0x21, 0x2020, r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000300)=""/112, 0x70}], 0x1}, 0x2020) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x44000) 666.674438ms ago: executing program 3 (id=428): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r0, 0x0, 0x2, 0x0) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x4008054) write$nci(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) openat$cgroup_ro(r2, 0x0, 0x275a, 0x0) 665.406088ms ago: executing program 2 (id=429): socket$nl_route(0x10, 0x3, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, 0x0, 0x0, &(0x7f0000000280)={0x4, 0x746, 0x6, 0x8, 0x1, 0x6, 0x20000000ffe, 0xf64, 0xffeffffc}) socket(0x1, 0x6, 0x8000000) open(&(0x7f0000000180)='./bus\x00', 0x14957e, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000400100004112200a4e2000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000580), 0x2000cc0, r0}, 0x38) socket$unix(0x1, 0x1, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r0}, 0x38) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) bind$llc(r1, &(0x7f0000000140)={0x1a, 0x0, 0xfe, 0x0, 0x2, 0x9}, 0x10) 548.479442ms ago: executing program 0 (id=430): r0 = socket$kcm(0xa, 0x3, 0x11) recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x80108907, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x404c840) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, 0x0, 0x90) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, 0x0, 0x80) 398.563787ms ago: executing program 2 (id=431): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000001800)=ANY=[], 0xfb, 0x1236, &(0x7f0000000600)="$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") timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x1a, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x3736, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mknodat$loop(r1, &(0x7f0000000080)='./file0\x00', 0x40, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) 313.15382ms ago: executing program 4 (id=432): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) pselect6(0x40, &(0x7f0000000080)={0x7, 0xd26, 0xe, 0x1000, 0x9, 0x7fffffffffffffff, 0x8, 0x8}, &(0x7f0000000140)={0x9, 0xe, 0x10, 0x69, 0xffffffffffffffc4, 0x100000001, 0x0, 0x1}, &(0x7f0000000180)={0x1, 0x7, 0x81, 0x5, 0xd485, 0xffffffff, 0x2, 0xed7}, &(0x7f0000000200), &(0x7f00000002c0)={&(0x7f0000000240)={[0xe]}, 0x8}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) 114.451836ms ago: executing program 4 (id=433): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0xfffffff2, 0x1, &(0x7f0000000800)={0x77359400}, 0x0) 0s ago: executing program 1 (id=434): unshare(0x20000400) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff}) fsopen(&(0x7f0000000000)='sysv\x00', 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ppoll(&(0x7f0000000280)=[{r3, 0x6200}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = socket(0xa, 0x801, 0x0) getsockopt(r4, 0x0, 0x40, &(0x7f0000b3ffac)=""/84, 0x0) socket(0x840000000002, 0x801, 0x100) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r2], 0x20}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) sendmsg$nl_route(r5, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[], 0x24}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010000100010000000000850000000000", @ANYRES32=0x0, @ANYBLOB="200400000000000008001b0000000000"], 0x28}}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r9, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000801}, 0x4008840) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000140)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x9, 0x3a, 'usrquota', 0x3a, '', 0x3a, './file1', 0x3a, [0x16]}, 0x30) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.34' (ED25519) to the list of known hosts. [ 31.036056][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 31.036073][ T28] audit: type=1400 audit(1780190838.155:126): avc: denied { mounton } for pid=3286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 31.065125][ T28] audit: type=1400 audit(1780190838.185:127): avc: denied { mount } for pid=3286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.066909][ T3286] cgroup: Unknown subsys name 'net' [ 31.092868][ T28] audit: type=1400 audit(1780190838.215:128): avc: denied { unmount } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.232421][ T3286] cgroup: Unknown subsys name 'cpuset' [ 31.238705][ T3286] cgroup: Unknown subsys name 'rlimit' [ 31.330812][ T28] audit: type=1400 audit(1780190838.445:129): avc: denied { setattr } for pid=3286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.363691][ T28] audit: type=1400 audit(1780190838.455:130): avc: denied { create } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.384465][ T28] audit: type=1400 audit(1780190838.455:131): avc: denied { write } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.401692][ T3289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 31.405530][ T28] audit: type=1400 audit(1780190838.455:132): avc: denied { read } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.433840][ T28] audit: type=1400 audit(1780190838.465:133): avc: denied { mounton } for pid=3286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 31.448458][ T3286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 31.458921][ T28] audit: type=1400 audit(1780190838.465:134): avc: denied { mount } for pid=3286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 31.491036][ T28] audit: type=1400 audit(1780190838.485:135): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 33.625610][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.632926][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.640081][ T3298] bridge_slave_0: entered allmulticast mode [ 33.646868][ T3298] bridge_slave_0: entered promiscuous mode [ 33.664217][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.671339][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.678602][ T3298] bridge_slave_1: entered allmulticast mode [ 33.684974][ T3298] bridge_slave_1: entered promiscuous mode [ 33.729496][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.739727][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.797228][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.804356][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.811474][ T3304] bridge_slave_0: entered allmulticast mode [ 33.817876][ T3304] bridge_slave_0: entered promiscuous mode [ 33.825192][ T3298] team0: Port device team_slave_0 added [ 33.843865][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.850920][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.858060][ T3304] bridge_slave_1: entered allmulticast mode [ 33.864571][ T3304] bridge_slave_1: entered promiscuous mode [ 33.871836][ T3298] team0: Port device team_slave_1 added [ 33.884243][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.891299][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.898505][ T3299] bridge_slave_0: entered allmulticast mode [ 33.905081][ T3299] bridge_slave_0: entered promiscuous mode [ 33.929476][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.936591][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.943795][ T3299] bridge_slave_1: entered allmulticast mode [ 33.950277][ T3299] bridge_slave_1: entered promiscuous mode [ 33.956711][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.963805][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.970901][ T3302] bridge_slave_0: entered allmulticast mode [ 33.977365][ T3302] bridge_slave_0: entered promiscuous mode [ 34.000304][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.007446][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.014562][ T3302] bridge_slave_1: entered allmulticast mode [ 34.020964][ T3302] bridge_slave_1: entered promiscuous mode [ 34.028196][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.037727][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.044771][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.070778][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.081539][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.088675][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.095930][ T3305] bridge_slave_0: entered allmulticast mode [ 34.102369][ T3305] bridge_slave_0: entered promiscuous mode [ 34.118581][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.132471][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.139522][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.165534][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.176270][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.183422][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.190594][ T3305] bridge_slave_1: entered allmulticast mode [ 34.197006][ T3305] bridge_slave_1: entered promiscuous mode [ 34.204869][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.225917][ T3304] team0: Port device team_slave_0 added [ 34.237184][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.247674][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.258275][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.273160][ T3304] team0: Port device team_slave_1 added [ 34.302682][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.312911][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.327463][ T3299] team0: Port device team_slave_0 added [ 34.333948][ T3302] team0: Port device team_slave_0 added [ 34.353817][ T3299] team0: Port device team_slave_1 added [ 34.360296][ T3302] team0: Port device team_slave_1 added [ 34.366113][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.373172][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.399244][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.416963][ T3298] hsr_slave_0: entered promiscuous mode [ 34.423224][ T3298] hsr_slave_1: entered promiscuous mode [ 34.437709][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.444764][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.470787][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.482774][ T3305] team0: Port device team_slave_0 added [ 34.489442][ T3305] team0: Port device team_slave_1 added [ 34.506098][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.513101][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.539222][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.550366][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.557389][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.583320][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.599090][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.606106][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.632209][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.643875][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.650899][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.676823][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.722702][ T3304] hsr_slave_0: entered promiscuous mode [ 34.728750][ T3304] hsr_slave_1: entered promiscuous mode [ 34.734683][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 34.740499][ T3304] Cannot create hsr debugfs directory [ 34.752364][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.759380][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.785334][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.796552][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.803563][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.829550][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.883039][ T3299] hsr_slave_0: entered promiscuous mode [ 34.889240][ T3299] hsr_slave_1: entered promiscuous mode [ 34.895123][ T3299] debugfs: 'hsr0' already exists in 'hsr' [ 34.900843][ T3299] Cannot create hsr debugfs directory [ 34.917680][ T3302] hsr_slave_0: entered promiscuous mode [ 34.923621][ T3302] hsr_slave_1: entered promiscuous mode [ 34.929564][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 34.935309][ T3302] Cannot create hsr debugfs directory [ 34.947596][ T3305] hsr_slave_0: entered promiscuous mode [ 34.953638][ T3305] hsr_slave_1: entered promiscuous mode [ 34.959593][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 34.965365][ T3305] Cannot create hsr debugfs directory [ 35.139459][ T3298] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 35.148001][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.155672][ T3298] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 35.164488][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.180065][ T3298] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 35.188332][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.200864][ T3298] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 35.209664][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.230418][ T3304] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 35.240132][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.247935][ T3304] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 35.256747][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.264733][ T3304] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 35.273437][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.280994][ T3304] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 35.290069][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.342441][ T3299] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 35.351291][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.365305][ T3299] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 35.374016][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.384720][ T3302] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 35.393780][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.401407][ T3299] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 35.410081][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.417882][ T3299] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 35.426473][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.438730][ T3302] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 35.447305][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.455040][ T3302] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 35.464232][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.473023][ T3302] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 35.481855][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.511489][ T3305] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 35.520047][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.528825][ T3305] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 35.537699][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.546469][ T3305] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 35.555208][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.562926][ T3305] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 35.571941][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.587188][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.613308][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.629413][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.638369][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.645465][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.664651][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.671795][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.703507][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.714160][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.721235][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.733548][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.747923][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.755018][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.776469][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.786745][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.802048][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.814201][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.821392][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.841876][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.849047][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.860896][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.872843][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.879904][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.895028][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.902103][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.913388][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.964408][ T361] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.971513][ T361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.979889][ T361] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.986955][ T361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.167534][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.196024][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.236837][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.261033][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.301380][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.377928][ T3298] veth0_vlan: entered promiscuous mode [ 36.410684][ T3304] veth0_vlan: entered promiscuous mode [ 36.419409][ T3298] veth1_vlan: entered promiscuous mode [ 36.436301][ T3304] veth1_vlan: entered promiscuous mode [ 36.463104][ T3305] veth0_vlan: entered promiscuous mode [ 36.482934][ T3298] veth0_macvtap: entered promiscuous mode [ 36.490493][ T3305] veth1_vlan: entered promiscuous mode [ 36.504755][ T3298] veth1_macvtap: entered promiscuous mode [ 36.512527][ T3302] veth0_vlan: entered promiscuous mode [ 36.528355][ T3304] veth0_macvtap: entered promiscuous mode [ 36.536841][ T3304] veth1_macvtap: entered promiscuous mode [ 36.544579][ T3302] veth1_vlan: entered promiscuous mode [ 36.555576][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.569159][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.585673][ T68] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.594538][ T68] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.611155][ T3305] veth0_macvtap: entered promiscuous mode [ 36.617618][ T68] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.626643][ T68] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.639684][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.649309][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.658949][ T3305] veth1_macvtap: entered promiscuous mode [ 36.671030][ T3299] veth0_vlan: entered promiscuous mode [ 36.679929][ T30] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.689332][ T3302] veth0_macvtap: entered promiscuous mode [ 36.698109][ T3302] veth1_macvtap: entered promiscuous mode [ 36.705410][ T3299] veth1_vlan: entered promiscuous mode [ 36.711826][ T30] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.720990][ T30] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.729840][ T30] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.750028][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 36.750069][ T28] audit: type=1400 audit(1780190843.865:146): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/root/syzkaller.4np7An/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 36.763867][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.787833][ T28] audit: type=1400 audit(1780190843.875:147): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 36.810650][ T28] audit: type=1400 audit(1780190843.875:148): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/root/syzkaller.4np7An/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 36.827742][ T3299] veth0_macvtap: entered promiscuous mode [ 36.844498][ T28] audit: type=1400 audit(1780190843.875:149): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 36.868753][ T28] audit: type=1400 audit(1780190843.915:150): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/root/syzkaller.4np7An/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 36.872753][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.897436][ T28] audit: type=1400 audit(1780190843.915:151): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/root/syzkaller.4np7An/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4996 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 36.905829][ T3298] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 36.935697][ T28] audit: type=1400 audit(1780190843.915:152): avc: denied { unmount } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 36.948221][ T3299] veth1_macvtap: entered promiscuous mode [ 36.970043][ T28] audit: type=1400 audit(1780190843.925:153): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 36.993109][ T28] audit: type=1400 audit(1780190843.925:154): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="gadgetfs" ino=4998 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 37.007528][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.023996][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.038697][ T28] audit: type=1400 audit(1780190844.155:155): avc: denied { read write } for pid=3298 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 37.076704][ T3506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.085310][ T3506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.089984][ T68] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.104633][ T68] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.114568][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.127068][ T68] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.137148][ T68] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.151671][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.161533][ T92] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.170711][ T92] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.194711][ T92] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.208454][ T92] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.226859][ T92] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.235796][ T92] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.252940][ T92] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.273565][ T92] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.306635][ T3510] loop1: detected capacity change from 0 to 1024 [ 37.319019][ T3510] ======================================================= [ 37.319019][ T3510] WARNING: The mand mount option has been deprecated and [ 37.319019][ T3510] and is ignored by this kernel. Remove the mand [ 37.319019][ T3510] option from the mount to silence this warning. [ 37.319019][ T3510] ======================================================= [ 37.395575][ T3510] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 37.413866][ T3510] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.444900][ T3510] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: comm syz.1.2: lblock 0 mapped to illegal pblock 0 (length 6) [ 37.458833][ T3510] EXT4-fs error (device loop1): ext4_ext_remove_space:2969: inode #15: comm syz.1.2: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 38.202558][ T3521] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 38.296290][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 38.308953][ T3518] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.316207][ T3518] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.374402][ T3542] loop3: detected capacity change from 0 to 128 [ 38.391069][ T3542] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 38.418545][ T3542] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 38.434457][ T3518] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.454794][ T3518] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.463450][ T3542] ext2 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.477162][ T3547] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 38.500909][ T3547] SELinux: failed to load policy [ 39.217594][ T3302] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 39.269984][ T68] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.285184][ T68] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.294805][ T3518] syz.2.3 (3518) used greatest stack depth: 10112 bytes left [ 39.306295][ T68] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.349962][ T68] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.454371][ T3564] loop4: detected capacity change from 0 to 4096 [ 39.481929][ T3564] EXT4-fs: test_dummy_encryption option not supported [ 39.700672][ T3582] loop0: detected capacity change from 0 to 8192 [ 39.960213][ T3600] loop0: detected capacity change from 0 to 512 [ 39.987519][ T3600] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.001734][ T3600] ext4 filesystem being mounted at /6/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.384702][ T3609] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.393005][ T3609] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.774910][ T3627] netlink: 'syz.4.35': attribute type 10 has an invalid length. [ 40.904224][ T3609] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.904309][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.916391][ T3609] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.991472][ T3627] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 41.007162][ T3627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 41.028895][ T3627] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 41.040898][ T30] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.054641][ T30] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.108056][ T30] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.118611][ T30] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.164166][ T3636] tipc: Started in network mode [ 41.169468][ T3636] tipc: Node identity 9a7d389e8a6e, cluster identity 4711 [ 41.176981][ T3636] tipc: Enabled bearer , priority 0 [ 41.224767][ T3636] syzkaller0: entered promiscuous mode [ 41.230305][ T3636] syzkaller0: entered allmulticast mode [ 41.237723][ T3636] tipc: Resetting bearer [ 41.270260][ T3635] tipc: Resetting bearer [ 41.283678][ T3635] tipc: Disabling bearer [ 42.181598][ T28] kauditd_printk_skb: 64 callbacks suppressed [ 42.181613][ T28] audit: type=1400 audit(1780190849.215:220): avc: denied { write } for pid=3655 comm="syz.3.44" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 42.215313][ T28] audit: type=1400 audit(1780190849.215:221): avc: denied { open } for pid=3655 comm="syz.3.44" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 42.324930][ T28] audit: type=1400 audit(1780190849.445:222): avc: denied { create } for pid=3657 comm="syz.4.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 42.506090][ T3663] loop2: detected capacity change from 0 to 128 [ 42.533855][ T3663] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 42.563771][ T3663] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 42.583716][ T3663] ext2 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.618656][ T28] audit: type=1400 audit(1780190849.735:223): avc: denied { write } for pid=3661 comm="syz.2.47" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 42.655651][ T28] audit: type=1400 audit(1780190849.735:224): avc: denied { write } for pid=3661 comm="syz.2.47" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 42.677608][ T28] audit: type=1400 audit(1780190849.735:225): avc: denied { write } for pid=3661 comm="syz.2.47" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 42.712319][ T28] audit: type=1400 audit(1780190849.735:226): avc: denied { write } for pid=3661 comm="syz.2.47" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 42.764221][ T3305] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.814325][ T28] audit: type=1400 audit(1780190849.765:227): avc: denied { write } for pid=3661 comm="syz.2.47" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 42.848997][ T3670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.880549][ T3670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.926534][ T28] audit: type=1400 audit(1780190850.045:228): avc: denied { create } for pid=3673 comm="syz.1.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 42.967002][ T3674] loop1: detected capacity change from 0 to 512 [ 42.997901][ T3674] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.014094][ T28] audit: type=1400 audit(1780190850.135:229): avc: denied { read write } for pid=3673 comm="syz.1.52" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 43.050683][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.216740][ T3684] loop1: detected capacity change from 0 to 2048 [ 43.242757][ T3684] loop1: p2 p3 < > p4 < p5 > [ 43.247554][ T3684] loop1: partition table partially beyond EOD, truncated [ 43.255894][ T3684] loop1: p3 start 4284289 is beyond EOD, truncated [ 43.273973][ T3688] loop0: detected capacity change from 0 to 2048 [ 43.362607][ T3688] loop0: p2 p3 < > p4 < p5 > [ 43.367342][ T3688] loop0: partition table partially beyond EOD, truncated [ 43.376693][ T3688] loop0: p3 start 4284289 is beyond EOD, truncated [ 43.412601][ T3693] loop2: detected capacity change from 0 to 512 [ 43.832184][ T3693] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.59: bad orphan inode 13 [ 43.907185][ T3693] loop2: lost filesystem error report for type 5 error -117 [ 43.907355][ T3693] ext4_test_bit(bit=12, block=4) = 1 [ 43.914716][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 43.914735][ C0] EXT4-fs (loop2): initial error at time 1780190851: ext4_orphan_get:1423 [ 43.914757][ C0] EXT4-fs (loop2): last error at time 1780190851: ext4_orphan_get:1423 [ 43.953135][ T3693] is_bad_inode(inode)=0 [ 43.957590][ T3693] NEXT_ORPHAN(inode)=0 [ 43.963508][ T3693] max_ino=32 [ 43.967676][ T3693] i_nlink=1 [ 43.972023][ T3693] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.996828][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.173804][ T3716] loop0: detected capacity change from 0 to 256 [ 44.248802][ T3719] loop2: detected capacity change from 0 to 2048 [ 44.282653][ T3719] loop2: p2 p3 < > p4 < p5 > [ 44.287467][ T3719] loop2: partition table partially beyond EOD, truncated [ 44.302050][ T3719] loop2: p3 start 4284289 is beyond EOD, truncated [ 46.180364][ T3746] loop0: detected capacity change from 0 to 2048 [ 46.212302][ T3746] loop0: p2 p3 < > p4 < p5 > [ 46.217029][ T3746] loop0: partition table partially beyond EOD, truncated [ 46.225954][ T3746] loop0: p3 start 4284289 is beyond EOD, truncated [ 46.805918][ T3758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.77'. [ 46.903028][ T3743] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.903138][ T3743] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.998803][ T3743] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.005303][ T3743] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.121964][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.133470][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.150408][ T3758] syz.2.77 (3758) used greatest stack depth: 9792 bytes left [ 47.166509][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.203361][ T3763] loop0: detected capacity change from 0 to 2048 [ 47.209829][ T361] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.219811][ T3766] netlink: 'syz.1.79': attribute type 10 has an invalid length. [ 47.234220][ T3763] loop0: p2 p3 < > p4 < p5 > [ 47.239026][ T3763] loop0: partition table partially beyond EOD, truncated [ 47.242987][ T3766] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 47.254055][ T3763] loop0: p3 start 4284289 is beyond EOD, truncated [ 47.263216][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 47.263228][ T28] audit: type=1400 audit(1780190854.385:279): avc: denied { write } for pid=3762 comm="syz.0.88" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 47.301503][ T3766] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.313685][ T28] audit: type=1400 audit(1780190854.385:280): avc: denied { write } for pid=3762 comm="syz.0.88" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 47.365028][ T3766] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 47.388231][ T28] audit: type=1400 audit(1780190854.385:281): avc: denied { write } for pid=3762 comm="syz.0.88" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 47.442703][ T3769] loop1: detected capacity change from 0 to 512 [ 47.474448][ T3769] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.487220][ T3769] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.620153][ T28] audit: type=1400 audit(1780190854.685:282): avc: denied { write } for pid=3777 comm="syz.0.88" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 47.775167][ T28] audit: type=1400 audit(1780190854.775:283): avc: denied { write } for pid=3768 comm="syz.1.80" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 47.889313][ T3782] loop3: detected capacity change from 0 to 2048 [ 47.921879][ T3782] loop3: p2 p3 < > p4 < p5 > [ 47.926636][ T3782] loop3: partition table partially beyond EOD, truncated [ 47.934322][ T3782] loop3: p3 start 4284289 is beyond EOD, truncated [ 48.047311][ T28] audit: type=1400 audit(1780190854.795:284): avc: denied { setattr } for pid=3768 comm="syz.1.80" name=".log" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 48.096649][ T2982] loop3: p2 p3 < > p4 < p5 > [ 48.119333][ T2982] loop3: partition table partially beyond EOD, truncated [ 48.579416][ T28] audit: type=1400 audit(1780190855.695:285): avc: denied { write } for pid=3768 comm="syz.1.80" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 48.613974][ T2982] loop3: p3 start 4284289 is beyond EOD, truncated [ 49.041577][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.095056][ T3748] udevd[3748]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 49.097081][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 49.099196][ T3797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.89'. [ 49.106974][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 49.148127][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 49.159230][ T3748] udevd[3748]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 49.161470][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 49.278031][ T28] audit: type=1400 audit(1780190856.395:286): avc: denied { create } for pid=3806 comm="syz.1.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 49.320900][ T3807] SELinux: ebitmap start bit (1157628288) is beyond the end of the bitmap (1088) [ 49.321269][ T3807] SELinux: failed to load policy [ 49.518457][ T3818] loop4: detected capacity change from 0 to 512 [ 49.546877][ T3820] syz.1.107 uses obsolete (PF_INET,SOCK_PACKET) [ 49.561969][ T28] audit: type=1400 audit(1780190856.685:287): avc: denied { egress } for pid=3305 comm="syz-executor" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 49.606003][ T3818] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.619499][ T3818] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.629755][ T3822] loop0: detected capacity change from 0 to 8192 [ 49.660578][ T28] audit: type=1400 audit(1780190856.775:288): avc: denied { write } for pid=3817 comm="syz.4.97" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.710897][ T3831] loop1: detected capacity change from 0 to 512 [ 49.748739][ T3831] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 49.767165][ T3831] ext4 filesystem being mounted at /19/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.809136][ T3831] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 49.839212][ T3836] loop2: detected capacity change from 0 to 2048 [ 49.873270][ T3836] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.941591][ T3844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.106'. [ 49.964609][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.035553][ T3835] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 50.035622][ T3835] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 96 with error 28 [ 50.035713][ T3835] EXT4-fs (loop2): This should not happen!! Data will be lost [ 50.035713][ T3835] [ 50.035740][ T3835] EXT4-fs (loop2): Total free blocks count 0 [ 50.035755][ T3835] EXT4-fs (loop2): Free/Dirty block details [ 50.035768][ T3835] EXT4-fs (loop2): free_blocks=4096 [ 50.035781][ T3835] EXT4-fs (loop2): dirty_blocks=112 [ 50.035791][ T3835] EXT4-fs (loop2): Block reservation details [ 50.035810][ T3835] EXT4-fs (loop2): i_reserved_data_blocks=7 [ 50.184536][ T3869] netlink: 'syz.0.110': attribute type 10 has an invalid length. [ 50.202564][ T30] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 2 with error 28 [ 50.223188][ T3869] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 50.236928][ T3869] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.257285][ T3869] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 50.433082][ T3305] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 53.555484][ T3905] loop2: detected capacity change from 0 to 8192 [ 53.679566][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 53.679584][ T28] audit: type=1400 audit(1780190860.795:306): avc: denied { block_suspend } for pid=3906 comm="syz.0.124" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 53.744451][ T28] audit: type=1400 audit(1780190860.795:307): avc: denied { create } for pid=3908 comm="syz.1.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 53.765078][ T3912] loop4: detected capacity change from 0 to 512 [ 53.798037][ T3912] EXT4-fs: Ignoring removed nomblk_io_submit option [ 53.810218][ T28] audit: type=1400 audit(1780190860.815:308): avc: denied { setopt } for pid=3908 comm="syz.1.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 53.836755][ T3912] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843e02c, mo2=0002] [ 53.844864][ T3912] System zones: 1-12 [ 53.849224][ T28] audit: type=1400 audit(1780190860.815:309): avc: denied { listen } for pid=3908 comm="syz.1.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 53.869575][ T3912] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.125: invalid indirect mapped block 8 (level 2) [ 53.882983][ T3912] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 53.883384][ T3912] EXT4-fs (loop4): Remounting filesystem read-only [ 53.892595][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 53.892616][ C1] EXT4-fs (loop4): initial error at time 1780190861: ext4_free_branches:1023: inode 11 [ 53.892650][ C1] EXT4-fs (loop4): last error at time 1780190861: ext4_free_branches:1023: inode 11 [ 53.924959][ T3912] EXT4-fs (loop4): 1 truncate cleaned up [ 53.931061][ T3912] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.949211][ T28] audit: type=1400 audit(1780190861.065:310): avc: denied { mounton } for pid=3911 comm="syz.4.125" path="/23/file0" dev="tmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 53.958808][ T3923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.128'. [ 54.007776][ T28] audit: type=1400 audit(1780190861.125:311): avc: denied { ioctl } for pid=3924 comm="syz.0.129" path="socket:[5823]" dev="sockfs" ino=5823 ioctlcmd=0x8b14 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 54.035813][ T3919] loop3: detected capacity change from 0 to 764 [ 54.057251][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.111177][ T28] audit: type=1400 audit(1780190861.225:312): avc: denied { mount } for pid=3918 comm="syz.3.127" name="/" dev="loop3" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 54.253113][ T28] audit: type=1400 audit(1780190861.375:313): avc: denied { bind } for pid=3932 comm="syz.0.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 54.296452][ T3941] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 54.390103][ T3919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.406727][ T3919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.534897][ T28] audit: type=1400 audit(1780190861.655:314): avc: denied { read } for pid=3945 comm="syz.0.136" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 54.584385][ T28] audit: type=1400 audit(1780190861.655:315): avc: denied { open } for pid=3945 comm="syz.0.136" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 55.062708][ T3959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.141'. [ 55.086702][ T3957] loop2: detected capacity change from 0 to 4096 [ 55.103270][ T3957] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.134480][ T3957] EXT4-fs (loop2): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 55.146923][ T3957] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.327667][ T3972] Zero length message leads to an empty skb [ 56.260464][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.640333][ T3996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.153'. [ 56.715578][ T3984] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.716488][ T3984] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.364242][ T3984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.478024][ T3984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.860813][ T3984] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 58.898870][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.910991][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.939031][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.969180][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.173283][ T4032] netlink: 1320 bytes leftover after parsing attributes in process `syz.1.163'. [ 59.373718][ T4034] netlink: 56 bytes leftover after parsing attributes in process `syz.4.164'. [ 59.410475][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 59.410510][ T28] audit: type=1400 audit(1780190866.525:325): avc: denied { getopt } for pid=4035 comm="syz.4.165" lport=51 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 59.528179][ T4040] loop4: detected capacity change from 0 to 512 [ 60.026659][ T28] audit: type=1400 audit(1780190867.145:326): avc: denied { bind } for pid=4045 comm="syz.2.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.090339][ T28] audit: type=1400 audit(1780190867.185:327): avc: denied { setopt } for pid=4045 comm="syz.2.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 62.372516][ T28] audit: type=1400 audit(1780190869.175:328): avc: denied { read } for pid=4051 comm="syz.2.172" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 62.416985][ T28] audit: type=1400 audit(1780190869.175:329): avc: denied { open } for pid=4051 comm="syz.2.172" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 62.850639][ T28] audit: type=1400 audit(1780190869.965:330): avc: denied { create } for pid=4069 comm="syz.4.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 62.936005][ T28] audit: type=1400 audit(1780190870.055:331): avc: denied { read write } for pid=4074 comm="syz.3.179" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 62.968561][ T28] audit: type=1400 audit(1780190870.055:332): avc: denied { open } for pid=4074 comm="syz.3.179" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 62.992708][ T28] audit: type=1400 audit(1780190870.055:333): avc: denied { append } for pid=4074 comm="syz.3.179" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 63.038378][ T28] audit: type=1400 audit(1780190870.055:334): avc: denied { open } for pid=4074 comm="syz.3.179" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 63.894586][ T4087] loop0: detected capacity change from 0 to 2048 [ 64.034527][ T4087] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.211938][ T4086] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 64.278542][ T4086] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 96 with error 28 [ 64.601612][ T4086] EXT4-fs (loop0): This should not happen!! Data will be lost [ 64.601612][ T4086] [ 64.611307][ T4086] EXT4-fs (loop0): Total free blocks count 0 [ 64.617428][ T4086] EXT4-fs (loop0): Free/Dirty block details [ 64.623395][ T4086] EXT4-fs (loop0): free_blocks=4096 [ 64.628613][ T4086] EXT4-fs (loop0): dirty_blocks=368 [ 65.686308][ T4086] EXT4-fs (loop0): Block reservation details [ 65.706563][ T4086] EXT4-fs (loop0): i_reserved_data_blocks=55 [ 67.431989][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 67.432003][ T28] audit: type=1400 audit(1780190873.935:342): avc: denied { create } for pid=4121 comm="syz.4.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 67.586226][ T4124] loop4: detected capacity change from 0 to 1024 [ 67.605419][ T12] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 96 with max blocks 754 with error 28 [ 67.635935][ T4126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.194'. [ 67.640900][ T28] audit: type=1400 audit(1780190874.755:343): avc: denied { ioctl } for pid=4125 comm="syz.1.194" path="socket:[6648]" dev="sockfs" ino=6648 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 67.657079][ T3298] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 67.682027][ T28] audit: type=1400 audit(1780190874.755:344): avc: denied { bind } for pid=4125 comm="syz.1.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 67.694205][ T4124] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.701261][ T28] audit: type=1400 audit(1780190874.755:345): avc: denied { setopt } for pid=4125 comm="syz.1.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 67.721418][ T4131] netlink: 'syz.3.196': attribute type 10 has an invalid length. [ 67.732417][ T28] audit: type=1326 audit(1780190874.795:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4127 comm="syz.2.195" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6fe0ce59 code=0x7ffc0000 [ 67.732452][ T28] audit: type=1326 audit(1780190874.795:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4127 comm="syz.2.195" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6fe0ce59 code=0x7ffc0000 [ 67.732493][ T28] audit: type=1326 audit(1780190874.795:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4127 comm="syz.2.195" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6fe0ce59 code=0x7ffc0000 [ 67.732593][ T28] audit: type=1326 audit(1780190874.795:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4127 comm="syz.2.195" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f3d6fe0ce59 code=0x7ffc0000 [ 67.732624][ T28] audit: type=1326 audit(1780190874.795:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4127 comm="syz.2.195" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6fe0ce59 code=0x7ffc0000 [ 67.732656][ T28] audit: type=1326 audit(1780190874.795:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4127 comm="syz.2.195" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3d6fe0ce59 code=0x7ffc0000 [ 67.785626][ T4122] EXT4-fs error (device loop4): ext4_generic_delete_entry:2673: inode #12: block 7: comm syz.4.192: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 67.841682][ T4131] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 67.850747][ T4131] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.869312][ T4122] EXT4-fs (loop4): Remounting filesystem read-only [ 67.912585][ T4131] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 67.968236][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.016092][ T4140] loop2: detected capacity change from 0 to 512 [ 68.032199][ T4141] netlink: 60 bytes leftover after parsing attributes in process `syz.4.198'. [ 68.042655][ T4140] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 68.056636][ T4140] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 68.069021][ T4140] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 68.084783][ T4140] EXT4-fs (loop2): 1 truncate cleaned up [ 68.091969][ T4140] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.124482][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.964993][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 71.851170][ T4185] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.212'. [ 72.741802][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 72.741820][ T28] audit: type=1400 audit(1780190879.855:370): avc: denied { mount } for pid=4232 comm="syz.1.216" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 72.778094][ T28] audit: type=1400 audit(1780190879.865:371): avc: denied { create } for pid=4232 comm="syz.1.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 72.797763][ T28] audit: type=1400 audit(1780190879.895:372): avc: denied { sys_admin } for pid=4232 comm="syz.1.216" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 73.001753][ T3603] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 73.002555][ T4174] Bluetooth: hci0: command 0x1003 tx timeout [ 73.435372][ T4256] loop4: detected capacity change from 0 to 1024 [ 73.443834][ T4256] EXT4-fs: Ignoring removed orlov option [ 73.467479][ T4256] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.530529][ T28] audit: type=1400 audit(1780190880.645:373): avc: denied { map } for pid=4260 comm="syz.3.225" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7496 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 73.578054][ T28] audit: type=1400 audit(1780190880.645:374): avc: denied { read write } for pid=4260 comm="syz.3.225" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7496 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 73.622285][ T4268] loop0: detected capacity change from 0 to 2048 [ 73.662509][ T4268] loop0: p2 p3 < > p4 < p5 > [ 73.667293][ T4268] loop0: partition table partially beyond EOD, truncated [ 73.674953][ T4268] loop0: p3 start 4284289 is beyond EOD, truncated [ 73.779624][ T28] audit: type=1400 audit(1780190880.805:375): avc: denied { write } for pid=4266 comm="syz.0.228" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 73.807622][ T28] audit: type=1400 audit(1780190880.805:376): avc: denied { write } for pid=4266 comm="syz.0.228" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 73.831230][ T28] audit: type=1400 audit(1780190880.805:377): avc: denied { write } for pid=4266 comm="syz.0.228" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 74.325759][ T28] audit: type=1400 audit(1780190881.065:378): avc: denied { write } for pid=4285 comm="syz.0.228" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 74.360100][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.398489][ T28] audit: type=1400 audit(1780190881.515:379): avc: denied { bind } for pid=4299 comm="syz.4.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 74.525609][ T4304] capability: warning: `syz.2.235' uses deprecated v2 capabilities in a way that may be insecure [ 75.833349][ T4318] netlink: 24 bytes leftover after parsing attributes in process `syz.3.238'. [ 75.909991][ T4318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.238'. [ 76.058442][ T4330] syzkaller0: entered promiscuous mode [ 76.069960][ T4330] syzkaller0: entered allmulticast mode [ 76.237641][ T4336] loop0: detected capacity change from 0 to 2048 [ 76.271771][ T4336] loop0: p2 p3 < > p4 < p5 > [ 76.276595][ T4336] loop0: partition table partially beyond EOD, truncated [ 76.284205][ T4336] loop0: p3 start 4284289 is beyond EOD, truncated [ 76.632883][ T2982] loop0: p2 p3 < > p4 < p5 > [ 76.637652][ T2982] loop0: partition table partially beyond EOD, truncated [ 76.651626][ T2982] loop0: p3 start 4284289 is beyond EOD, truncated [ 76.920458][ T4349] loop3: detected capacity change from 0 to 512 [ 76.951402][ T4349] EXT4-fs: Ignoring removed nobh option [ 77.006178][ T4349] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.023438][ T4349] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 77.371138][ T4372] netlink: 'syz.2.253': attribute type 13 has an invalid length. [ 77.383536][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.443616][ T4372] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 77.459066][ T4372] syzkaller0: entered promiscuous mode [ 77.474021][ T4372] syzkaller0: entered allmulticast mode [ 77.494900][ T4372] tipc: Started in network mode [ 77.513919][ T4372] tipc: Node identity 16262214fbc6, cluster identity 4711 [ 77.526419][ T4372] tipc: Enabled bearer , priority 0 [ 77.537063][ T4371] tipc: Resetting bearer [ 77.546270][ T4371] tipc: Disabling bearer [ 77.571892][ T4387] syzkaller0: entered promiscuous mode [ 77.577534][ T4387] syzkaller0: entered allmulticast mode [ 77.849129][ T4446] loop3: detected capacity change from 0 to 1024 [ 77.875184][ T4440] syzkaller0: entered promiscuous mode [ 77.885321][ T4440] syzkaller0: entered allmulticast mode [ 77.899061][ T4446] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 77.916392][ T4446] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.021502][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 78.364122][ T9] IPVS: starting estimator thread 0... [ 78.451652][ T4465] IPVS: using max 2736 ests per chain, 136800 per kthread [ 79.043091][ T4471] loop4: detected capacity change from 0 to 2048 [ 79.072621][ T4471] loop4: p2 p3 < > p4 < p5 > [ 79.077354][ T4471] loop4: partition table partially beyond EOD, truncated [ 79.084935][ T4471] loop4: p3 start 4284289 is beyond EOD, truncated [ 80.003077][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 80.003091][ T28] audit: type=1400 audit(1780190887.125:393): avc: denied { create } for pid=4500 comm="syz.4.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 80.037466][ T4502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.275'. [ 80.365703][ T4550] netlink: 24 bytes leftover after parsing attributes in process `syz.2.278'. [ 80.411816][ T4550] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4550 comm=syz.2.278 [ 80.537523][ T28] audit: type=1400 audit(1780190887.655:394): avc: denied { execute } for pid=4554 comm="syz.2.280" path="/49/file1" dev="tmpfs" ino=278 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 81.690579][ T4569] netlink: 16 bytes leftover after parsing attributes in process `syz.3.286'. [ 81.845541][ T4578] loop3: detected capacity change from 0 to 2048 [ 81.873149][ T4578] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.886314][ T28] audit: type=1400 audit(1780190889.005:395): avc: denied { write } for pid=4577 comm="syz.3.289" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 81.995551][ T4577] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 82.010273][ T4577] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 274 with error 28 [ 82.023227][ T4577] EXT4-fs (loop3): This should not happen!! Data will be lost [ 82.023227][ T4577] [ 82.033290][ T4577] EXT4-fs (loop3): Total free blocks count 0 [ 82.039313][ T4577] EXT4-fs (loop3): Free/Dirty block details [ 82.047704][ T4577] EXT4-fs (loop3): free_blocks=4096 [ 82.053665][ T4577] EXT4-fs (loop3): dirty_blocks=512 [ 82.058985][ T4577] EXT4-fs (loop3): Block reservation details [ 82.065148][ T4577] EXT4-fs (loop3): i_reserved_data_blocks=32 [ 82.146428][ T36] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 274 with max blocks 208 with error 28 [ 82.160716][ T3302] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 82.250194][ T4598] loop3: detected capacity change from 0 to 512 [ 82.275816][ T4598] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.288728][ T4598] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.301594][ T28] audit: type=1400 audit(1780190889.425:396): avc: denied { write } for pid=4597 comm="syz.3.295" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.331434][ T28] audit: type=1400 audit(1780190889.425:397): avc: denied { write } for pid=4597 comm="syz.3.295" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.353412][ T28] audit: type=1400 audit(1780190889.445:398): avc: denied { ioctl } for pid=4597 comm="syz.3.295" path="/70/file0/file1" dev="loop3" ino=15 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 82.378969][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.411111][ T4611] netlink: 16 bytes leftover after parsing attributes in process `syz.1.299'. [ 82.824164][ T4491] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 83.004738][ T28] audit: type=1400 audit(1780190890.125:399): avc: denied { write } for pid=4628 comm="syz.2.305" name="snmp" dev="proc" ino=4026532884 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 83.053179][ T4635] loop2: detected capacity change from 0 to 2048 [ 83.072554][ T4635] loop2: p2 p3 < > p4 < p5 > [ 83.077282][ T4635] loop2: partition table partially beyond EOD, truncated [ 83.087447][ T4635] loop2: p3 start 4284289 is beyond EOD, truncated [ 83.694837][ T4647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.308'. [ 83.711915][ T4647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.308'. [ 83.757600][ T4650] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22741, delta: 1 [ 83.766915][ T4650] ref_ctr increment failed for inode: 0x11f offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88810630a1c0 [ 83.778440][ T4650] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22741, delta: -1 [ 83.787420][ T4650] ref_ctr decrement failed for inode: 0x11f offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88810630a1c0 [ 83.798890][ T4650] uprobe: syz.4.312:4650 failed to unregister, leaking uprobe [ 83.836566][ T28] audit: type=1400 audit(1780190890.955:400): avc: denied { write } for pid=4653 comm="syz.4.313" lport=33377 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 83.909502][ T28] audit: type=1400 audit(1780190890.975:401): avc: denied { getopt } for pid=4653 comm="syz.4.313" lport=33377 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 83.934105][ T28] audit: type=1400 audit(1780190890.975:402): avc: denied { setopt } for pid=4653 comm="syz.4.313" lport=33377 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 84.104414][ T4664] loop0: detected capacity change from 0 to 512 [ 84.183400][ T4664] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.201025][ T4667] syzkaller0: entered promiscuous mode [ 84.212633][ T4667] syzkaller0: entered allmulticast mode [ 84.220714][ T4664] ext4 filesystem being mounted at /62/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 84.253510][ T4661] loop4: detected capacity change from 0 to 1024 [ 84.272076][ T4661] EXT4-fs: Ignoring removed oldalloc option [ 84.278532][ T4661] EXT4-fs: Ignoring removed i_version option [ 84.315271][ T4661] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.389354][ T4661] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.819906][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.183802][ T4696] netlink: 56 bytes leftover after parsing attributes in process `syz.1.325'. [ 87.203337][ T4696] netlink: 12 bytes leftover after parsing attributes in process `syz.1.325'. [ 87.219407][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 87.219423][ T28] audit: type=1400 audit(1780190894.335:406): avc: denied { create } for pid=4699 comm="syz.4.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 87.229176][ T4696] netlink: 43 bytes leftover after parsing attributes in process `syz.1.325'. [ 87.273424][ T4701] loop2: detected capacity change from 0 to 2048 [ 87.288104][ T28] audit: type=1400 audit(1780190894.335:407): avc: denied { getopt } for pid=4691 comm="syz.3.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 87.316770][ T4701] loop2: p2 p3 < > p4 < p5 > [ 87.321823][ T4701] loop2: partition table partially beyond EOD, truncated [ 87.331761][ T4696] netlink: 43 bytes leftover after parsing attributes in process `syz.1.325'. [ 87.346397][ T4701] loop2: p3 start 4284289 is beyond EOD, truncated [ 87.369822][ T28] audit: type=1400 audit(1780190894.365:408): avc: denied { bind } for pid=4699 comm="syz.4.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 87.416025][ T28] audit: type=1400 audit(1780190894.365:409): avc: denied { setopt } for pid=4699 comm="syz.4.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 87.495440][ T4664] syz.0.317 (4664) used greatest stack depth: 8544 bytes left [ 87.528393][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.220417][ T28] audit: type=1400 audit(1780190895.335:410): avc: denied { kexec_image_load } for pid=4720 comm="syz.3.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 88.483831][ T4725] netlink: 44 bytes leftover after parsing attributes in process `syz.1.335'. [ 88.504060][ T4727] netlink: 24 bytes leftover after parsing attributes in process `syz.2.336'. [ 88.504750][ T28] audit: type=1400 audit(1780190895.625:411): avc: denied { write } for pid=4726 comm="syz.2.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 88.552341][ T28] audit: type=1400 audit(1780190895.675:412): avc: denied { ioctl } for pid=4726 comm="syz.2.336" path="socket:[9834]" dev="sockfs" ino=9834 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 88.588265][ T4725] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 91.738678][ T4748] loop4: detected capacity change from 0 to 512 [ 91.766843][ T4748] EXT4-fs: test_dummy_encryption option not supported [ 91.832064][ T4755] loop0: detected capacity change from 0 to 512 [ 91.844160][ T4755] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 91.869439][ T4755] EXT4-fs (loop0): 1 truncate cleaned up [ 91.876777][ T4762] loop4: detected capacity change from 0 to 512 [ 91.884871][ T4755] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.897030][ T4762] EXT4-fs: Ignoring removed orlov option [ 91.909389][ T4755] EXT4-fs (loop0): shut down requested (0) [ 91.915450][ T28] audit: type=1400 audit(1780190899.025:413): avc: denied { read } for pid=2964 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 91.937798][ T28] audit: type=1400 audit(1780190899.025:414): avc: denied { search } for pid=2964 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.959477][ T28] audit: type=1400 audit(1780190899.025:415): avc: denied { write search } for pid=2964 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.962461][ T4762] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.994324][ T4762] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 92.013996][ T4762] EXT4-fs warning (device loop4): ext4_empty_dir:3094: inode #12: comm syz.4.347: directory missing '.' [ 92.029556][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.079619][ T4776] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.347: corrupted xattr block 33: invalid ea_ino [ 92.093253][ T4776] EXT4-fs (loop4): Remounting filesystem read-only [ 92.100112][ T4776] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 92.614693][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 92.614706][ T28] audit: type=1400 audit(1780190899.735:436): avc: denied { mount } for pid=4781 comm="syz.1.352" name="/" dev="ramfs" ino=9910 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 92.768343][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.867002][ T28] audit: type=1400 audit(1780190899.985:437): avc: denied { create } for pid=4790 comm="syz.3.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 92.904955][ T28] audit: type=1400 audit(1780190900.015:438): avc: denied { setopt } for pid=4790 comm="syz.3.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 92.906385][ T4793] syzkaller0: entered promiscuous mode [ 92.930851][ T4793] syzkaller0: entered allmulticast mode [ 93.667619][ T28] audit: type=1400 audit(1780190900.785:439): avc: denied { create } for pid=4806 comm="syz.4.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.088470][ T4807] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.097259][ T4807] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.654607][ T4820] loop2: detected capacity change from 0 to 736 [ 95.155994][ T4814] loop0: detected capacity change from 0 to 2048 [ 95.185246][ T4807] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.302681][ T4814] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.330294][ T4807] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.381029][ T4814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.365'. [ 95.502456][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.875696][ T4831] netlink: 16 bytes leftover after parsing attributes in process `syz.0.368'. [ 95.994829][ T4807] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 96.142932][ T36] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.180459][ T36] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.208416][ T36] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.237165][ T4797] bond0: (slave netdevsim0): Releasing backup interface [ 96.249831][ T36] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.350382][ T28] audit: type=1400 audit(1780190903.465:440): avc: denied { write } for pid=4838 comm="syz.4.372" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 96.460831][ T28] audit: type=1400 audit(1780190903.575:441): avc: denied { allowed } for pid=4844 comm="syz.4.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 96.509484][ T4847] syzkaller0: entered promiscuous mode [ 96.539696][ T4847] syzkaller0: entered allmulticast mode [ 96.555376][ T28] audit: type=1400 audit(1780190903.645:442): avc: denied { create } for pid=4844 comm="syz.4.374" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 96.724343][ T28] audit: type=1400 audit(1780190903.845:443): avc: denied { read } for pid=4851 comm="syz.3.377" path="socket:[8183]" dev="sockfs" ino=8183 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 96.811193][ T28] audit: type=1400 audit(1780190903.925:444): avc: denied { ioctl } for pid=4851 comm="syz.3.377" path="socket:[8183]" dev="sockfs" ino=8183 ioctlcmd=0x5405 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 96.954785][ T28] audit: type=1400 audit(1780190904.075:445): avc: denied { watch } for pid=4858 comm="syz.0.378" path="/74/control" dev="tmpfs" ino=402 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 97.058249][ T4868] tipc: Started in network mode [ 97.074083][ T4868] tipc: Node identity , cluster identity 4711 [ 97.086186][ T4868] tipc: Failed to obtain node identity [ 97.096836][ T4868] tipc: Enabling of bearer rejected, failed to enable media [ 97.306096][ T4874] netlink: 12 bytes leftover after parsing attributes in process `syz.4.384'. [ 97.725638][ T4873] loop0: detected capacity change from 0 to 1024 [ 97.732972][ T4876] loop3: detected capacity change from 0 to 2048 [ 97.740635][ T4873] EXT4-fs: Ignoring removed oldalloc option [ 97.763270][ T4876] loop3: p2 p3 < > p4 < p5 > [ 97.768076][ T4876] loop3: partition table partially beyond EOD, truncated [ 97.778661][ T4876] loop3: p3 start 4284289 is beyond EOD, truncated [ 97.780159][ T4873] EXT4-fs: Ignoring removed i_version option [ 97.802497][ T4873] EXT4-fs: Ignoring removed nomblk_io_submit option [ 97.810594][ T28] audit: type=1400 audit(1780190904.915:446): avc: denied { write } for pid=4875 comm="syz.3.386" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 97.887467][ T28] audit: type=1400 audit(1780190904.915:447): avc: denied { write } for pid=4875 comm="syz.3.386" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 97.950690][ T28] audit: type=1400 audit(1780190904.915:448): avc: denied { write } for pid=4875 comm="syz.3.386" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 98.217197][ T4873] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.437940][ T28] audit: type=1400 audit(1780190905.155:449): avc: denied { write } for pid=4883 comm="syz.3.386" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 98.459702][ T28] audit: type=1400 audit(1780190905.535:450): avc: denied { write } for pid=4872 comm="syz.0.385" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 98.557394][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.541449][ T28] audit: type=1400 audit(1780190906.655:451): avc: denied { create } for pid=4918 comm="syz.0.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 99.564077][ T4919] netlink: 12 bytes leftover after parsing attributes in process `syz.0.397'. [ 99.583889][ T4917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.396'. [ 99.612097][ T28] audit: type=1400 audit(1780190906.685:452): avc: denied { write } for pid=4918 comm="syz.0.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 99.632885][ T4921] SELinux: Context X N2/P/!6 czgYհuFWkvM0 is not valid (left unmapped). [ 99.662075][ T4921] SELinux: Context d_O(?Db^(ʅ"iQ3c&msnO[6B~`n is not valid (left unmapped). [ 99.673858][ T4919] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4919 comm=syz.0.397 [ 99.690262][ T28] audit: type=1400 audit(1780190906.755:453): avc: denied { mac_admin } for pid=4916 comm="syz.3.396" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 99.718274][ T4921] SELinux: Context Y< [ 99.718274][ T4921] k3lkTD9ZK0IQLzgew&G%4;ŶwM0XSs`Q䐥E)\'z8 is not valid (left unmapped). [ 99.763691][ T4919] veth3: entered allmulticast mode [ 99.776002][ T28] audit: type=1400 audit(1780190906.895:454): avc: denied { ioctl } for pid=4916 comm="syz.3.396" path="net:[4026532621]" dev="nsfs" ino=4026532621 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 99.801247][ T4919] bond1: (slave veth3): Enslaving as an active interface with an up link [ 99.911832][ T4930] syzkaller0: entered promiscuous mode [ 99.928328][ T4930] syzkaller0: entered allmulticast mode [ 99.938272][ T4933] capability: warning: `syz.0.401' uses 32-bit capabilities (legacy support in use) [ 99.955873][ T28] audit: type=1400 audit(1780190907.075:455): avc: denied { write } for pid=4924 comm="syz.1.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 100.113745][ T4959] netlink: 1319 bytes leftover after parsing attributes in process `syz.1.407'. [ 100.246139][ T36] Bluetooth: hci0: Frame reassembly failed (-84) [ 100.253335][ T4967] loop0: detected capacity change from 0 to 512 [ 100.260804][ T4967] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 100.306328][ T4967] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (35405!=33349) [ 100.399164][ T4967] EXT4-fs (loop0): group descriptors corrupted! [ 100.711349][ T4971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.411'. [ 101.122139][ T4990] mmap: syz.1.418 (4990) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 101.947803][ T5012] loop2: detected capacity change from 0 to 512 [ 101.977863][ T5012] EXT4-fs: Ignoring removed bh option [ 102.121972][ T5012] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 102.132013][ T5012] EXT4-fs (loop2): 1 truncate cleaned up [ 102.138059][ T5012] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.282009][ T3603] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 102.352305][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.663114][ T5033] loop2: detected capacity change from 0 to 8192 [ 103.055775][ T5036] ================================================================== [ 103.063917][ T5036] BUG: KCSAN: data-race in __dentry_kill / lookup_fast [ 103.070815][ T5036] [ 103.073163][ T5036] write to 0xffff88811ad65cc0 of 4 bytes by task 5033 on cpu 0: [ 103.080817][ T5036] __dentry_kill+0xab/0x4d0 [ 103.085361][ T5036] finish_dput+0x2b/0x200 [ 103.089728][ T5036] dput+0x52/0x60 [ 103.093396][ T5036] lookup_one_qstr_excl+0x22f/0x240 [ 103.098626][ T5036] filename_create+0x155/0x220 [ 103.103429][ T5036] filename_mknodat+0x13e/0x450 [ 103.108309][ T5036] __se_sys_mknodat+0x38/0xf0 [ 103.113035][ T5036] __x64_sys_mknodat+0x55/0x70 [ 103.117866][ T5036] x64_sys_call+0x312/0x3020 [ 103.122515][ T5036] do_syscall_64+0x12c/0x3b0 [ 103.127152][ T5036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.133080][ T5036] [ 103.135415][ T5036] read to 0xffff88811ad65cc0 of 4 bytes by task 5036 on cpu 1: [ 103.143053][ T5036] lookup_fast+0xf0/0x320 [ 103.147417][ T5036] path_openat+0x436/0x2050 [ 103.151944][ T5036] do_file_open+0x16c/0x290 [ 103.156474][ T5036] do_sys_openat2+0x94/0x130 [ 103.161082][ T5036] __x64_sys_openat+0xf2/0x120 [ 103.165871][ T5036] x64_sys_call+0x1e39/0x3020 [ 103.170573][ T5036] do_syscall_64+0x12c/0x3b0 [ 103.175198][ T5036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.181112][ T5036] [ 103.183471][ T5036] value changed: 0x00040007 -> 0x00004007 [ 103.189285][ T5036] [ 103.191616][ T5036] Reported by Kernel Concurrency Sanitizer on: [ 103.197790][ T5036] CPU: 1 UID: 0 PID: 5036 Comm: syz.2.431 Not tainted syzkaller #0 PREEMPT(lazy) [ 103.207008][ T5036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 103.217085][ T5036] ================================================================== [ 105.329251][ T5020] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512