last executing test programs: 43.006472373s ago: executing program 0 (id=1): r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet6(0xa, 0x3, 0x7) recvmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0xfffffffffffffe71, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000580)=""/97, 0x5a}], 0x100000000000023d}, 0x8dff) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) sendmmsg$inet6(r1, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) 42.948533408s ago: executing program 0 (id=7): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x0, 0x2, 0x0, 0x0, {{0x8e, 0x8, 0x6}, {0xffffffffffffffff, 0x6, 0x4}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x2008c014) 42.725938387s ago: executing program 0 (id=10): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200404, &(0x7f0000000280)={[{@noblock_validity}, {@nodelalloc}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@debug}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f0000000700)="$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") creat(&(0x7f0000000380)='./bus\x00', 0x4a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(0x0, 0x8000, 0x112) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x1, 0x8008, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8, 0x4]}) mknod$loop(&(0x7f0000000680)='./file0\x00', 0x80, 0x0) 42.172748606s ago: executing program 0 (id=21): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000700851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="6105"], 0xe4) 40.518164061s ago: executing program 0 (id=62): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0x2a979d) 40.517967951s ago: executing program 32 (id=62): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0x2a979d) 30.02246461s ago: executing program 5 (id=207): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005cc0)={r3, 0x5, 0x2f, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd03, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 29.843694376s ago: executing program 5 (id=210): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r0, 0x4) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}], 0x1, 0x40000100, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 28.965014653s ago: executing program 5 (id=219): r0 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x0}, 0x64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = syz_io_uring_setup(0x1593, &(0x7f0000000100)={0x0, 0xe5dc, 0x800, 0x1, 0x2f0}, &(0x7f0000001980), &(0x7f0000002c00)) io_uring_register$IORING_UNREGISTER_RING_FDS(r2, 0x15, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) recvfrom(r0, 0x0, 0x0, 0x32, 0x0, 0x0) 28.099091319s ago: executing program 5 (id=236): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2263804, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x2) 28.022228176s ago: executing program 5 (id=237): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000600)={0x1, &(0x7f0000000780)=[{0x6, 0x4, 0xfc, 0x7fffffff}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000340)={r2}) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r1, r1}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e3, &(0x7f0000000180)={r3, r1}) 27.810092374s ago: executing program 5 (id=241): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x4, 0x100510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x0, 0x10000, 0xfffffffe, 0x2, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) io_destroy(0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x40) r1 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r1, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x48004) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x50) 27.801330055s ago: executing program 33 (id=241): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x4, 0x100510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x0, 0x10000, 0xfffffffe, 0x2, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) io_destroy(0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x40) r1 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r1, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x48004) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x50) 5.802162712s ago: executing program 6 (id=582): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) mkdir(&(0x7f00000000c0)='./file0\x00', 0x16) chdir(&(0x7f0000000140)='./file0\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) fcntl$setstatus(r1, 0x4, 0x6400) vmsplice(r1, &(0x7f0000000380)=[{&(0x7f0000000000)="9b", 0x1}], 0x1, 0x7) 5.802005372s ago: executing program 6 (id=583): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 4.854759695s ago: executing program 6 (id=593): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socket$nl_netfilter(0x10, 0x3, 0xc) dup(0xffffffffffffffff) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r2, &(0x7f0000005c80), 0x400030f, 0x0, 0x0) 2.840886461s ago: executing program 3 (id=618): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newtfilter={0x3c, 0x28, 0x575ac7824d421509, 0x70bd29, 0x4, {0x0, 0x0, 0x0, r3, {0x9}, {0xffff}, {0x10, 0x5}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xb, 0x4}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x40) 2.709116523s ago: executing program 3 (id=622): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) 2.292196999s ago: executing program 3 (id=625): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000bc0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000100000004"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000080)={[{@bh}, {@inlinecrypt}, {@nombcache}]}, 0xff, 0x548, &(0x7f0000001300)="$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") mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) io_setup(0x8, &(0x7f0000004200)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0xffc9, 0x0, &(0x7f0000002d40)="b3070d5b19aa16a7489474168245f80bbfa179c79d3bffb79761ab0d8e009e9b42b881f247de05b072442debf7bc0ed4b393a763a2bf3d12b851fd541f7a7169bf1fbd1640409fb8f29f118ac55c111bb188b49c7bdb0b55d9b03ef63529493d44c4617aa69a7fe28b6438a324f15e3eb21a0f5a233ee9e9071b7d746b5ee5ec93c8f26de857054995b60874a9d27726d9c069ab61a1623c8951aeaabe0e5d7538f7dbd8bd0628798f4622ee0f72d66106093500348e147e9dcee5dae63af07a6fb007e4cf9d6d6359a252aa81ec8a9caefdcb28f79094b5cab4e154a22c44bf971c039f2d566c4aec66cebca90bfe16ada4b03ffc7e90b023eec64cce3c0351597828adc485980b2aaddd930e4e424e2d0314f7fe17c3092ec5f5e54b39844e714661ac9edf447a2e3dc89f110e54528a4e22d8a86585b4601028b2bbbb4f70b7ac3b6c7129d4d0c8ce0b02c3c1f5e4128a6d315002443ac28bdb0c9d7abe3e4286ec1055688ec813b9979121e900aea3693b9c8b427bb69576362dfb258f8df59e0dbefd7034c1e887a06731e1cc25113331eab4b0d022a63107f774b4a631fa71e16e290881c25fe6af9775fd65359e2af043ec9caad726b0ce923e3c6ef9d081f967e8ef34ef0329b1c84b7bf024bda4cfda93debe4ba05de3e1728c8e22cb844c74f8d769929e6295a16bea0c50727fa33b3c10d2e53e66b20761d9fc6ef5f24b311ff8a4239f81fba4a808a08785c8cb22ac1c4a06f7b3ce232806dfb41c5aa694cf55b9872aa2c53175a76a3427dbb5c00c15ed62686a048edba6bff31ef1a84d711eddc76a4db44c880f26a79da84b9f9cfaaf909267b67a9c853ea9eb1fe586db67a98dcf37a15d5295857ee0bb4e8a4b551f2629bfc72592c0854266245b837a91f3eefbc2612ee909fa43209d02af7d3b83ec13e5dbbfe1a34a8b45ce49722a5369c3c1b8bccd5386cf57baae0d5c4a355d5a729ddce5c0be3aaafaffa497dd6b7f363b5e53f3849c7a2013e0db1ca5d2d93b0a809d1c27306883edaf11b73199275301a9d28cb3e9b267e3342fad165a13f3e44d0d53afc95f44474d5761416489612b6054c17a383a03782bf380bf347742f2845be2df988310378dad9bbf1980a4a84a5e4f10b3a28db2e7829e25640b833b0cf6675eba6601502a7ae3177860dac93726ad9adabc6d98ce30a4cb01ce01b6309982898b617f20c55510253405d93e70fbc4c9ded36bacff16e49d9f70d852c41cec96d6e4f6c44167ed6990d04e63f15fd934e6120f9189fd04e8ff4554fe23751dea387ab1ef5b0973d9510c4cbb1fe89f80d7875c16b2ff9a746f8e2b4e9dc5594712c511dea6bf63c4d9fd7114092ffdcfc16dde14359b2fda592214ad728b4e19132970be209ed98dda93c1c3abe8cffef35679b61e9ac56802bbce8509a047415a1badd9c4a359b6971d73d994e5825115fffd6f389144fdec3bb012f9f392fee8310a847192dc6ff4247a6ba44ca75ed0bc40b50767407a7d6420018b2bd1dc9ed66e11fe5c7b768ff7aae6d1ae62516a0ad980f366b6f3ea5d9e407b3e88869749b15fe400509d70256d82b2d5428b2912e648ebe7022d6f3bfc8d0c9423cba893efc65394e63a56269b7a17f69294000b0bd27902730356f238b868803b7ff4da31013ad66e22c5c7afa1b370fd2d10e0175a3bfba66d88e29fb371998424be80737bfb38db011efc5d63f0fa17efcd90a5cd2d310ab8e4ff2631dc2fc2be5404d4026fb916c1cd481dd70ea1755813574a0ec1d01b1411c7a7a69f6ac972487f9b470090c419d1c57d8641d6f4cd10b1d55ce621ed8e14f28f11b579a6408bbff9fc13cf6fb07c22770e65ed772e790844ea608e38ae48302efb09c173d8c653aaf0c6be98d9a2d166c9d318dfbb8f06b9a241ac72d68a82dbf7f3255e2cb0af5227d854a71b7d4c89fe943db9c0c19ac1dd5264bf8515b217f1de94b5da0f3a4a73f587a71bad13e447eb5ca4d76d3645d749f2ba4b46da62a7717e544cfb025b364c5d19ec6330bc6fdf161a153c61720031dfa170f0c77de03b36fa898e8f00dcb04c21db7362200fae366363f82a2d7292e0d67b72f64e227fdd91edd3c455e7341a9a9b8832631891b563a8d064955d0074a216062147414c2c8badd2c547a51734a96c215d82c68f3eeba0f9a4954e479a0534a8fd131a4b9b1d069322907c1b49e5c68b86079841b34867ae69d42f9843a9c9d290d0ea9ab4068a58e9c76588391b12420af3d9e3d8bf672f3f0ac88a8c269a9570576f6a1a5a39d63cdf7e459a620af3fe5b6fdc7576732bae1f8ab81d5294562d5e82f1273ba1f2cc1f336f2ed3b4a9901dbb3e86f3859750ef51db3601247fcd157072bc3843aedb474433c4694942f1c13356d4cfbf56d5834f9c0250044a017137ae689db25feec05600827c11955e492fb67dc2239b75d7ecc3b279901670ef2ca4d2010cf7e8f08107781b2da20d716619117191f8df96cfe9a81ef18ec0ebcc99cc3558830265d0346f9767ddb6c2fbb2495a9b8ee91f82a1bea2324ec011f45f1462aa216c209186229c233006600414628beb9738efbdad2601cac6b2b7e4c803719d6b826c44e9ae057711f067de8b0f0d1ae2a2f78936a44e2dd9e9b19244ad4b07e6cb870b594fa6f86012f699455ee86aebab98c69f332876fd820f11e982b6023325ab335a28cdceb7ce3bc4706856b4aa37b67fc1a7dc1ce4d88b277db25ebad94140b6107310a4f6e597e8895277c749687e89f0a69bf3cb1de8b459b400806fa8fc5ba4441dce50d3ff057467285e4c21cb12bac00791c3ad4f27c46c58d15de6e9cd746acd26a4fbb7da8849aa6f423dbf3974c1c4610804b5e3e46d5d6d945415e22c039481224a30cbe2b3e271b9f50297afd5df882e5b96fe31acd3e92b8fc5d0cec29915946fd0c02bc2775ad54edfb2715c9e0e197e28e0e1a6505fafec1f24d848c18afc2acb48992cab420200e06db88bc50b985932b40b16bddfdf29480fbddf106f8a5caf40d0304e45ab7c19cea65e834ef6742c413563657b8d7c27b30f85fab4fc041b50c532ea646b0755437603f1a05f87b8d67976f3ae9e729c3fb8ddb91f26d7b26f003c1a8efae40acb42360ea5144d550203e38c4e0329e6c42353b08ef1278dc529cf272b2f8e32b578f6d874fbae55f12db0081a2a6b543a418e74b121e1698eadb8f1ef214d38c403768f4df4b96b2a97c18c584b8a81f3fedd0b0653c9380bb7b42db34217a4b2e57c07de829381de337f65415f794c02192ce775e6788b4d7bf3d06f5e027b89824853b086839c75932dcf6f43c5cfe72b8d89401c8ae441f15337483e46bb09cdf6394f4be8f66415cf842f4567d114dc50f3a2c15b54e4fe65b24bc9ffabe9ce60115f309b510f5433da6fb2cc0d9ff04282b355567841a4c04ffcb47d39d5da114fc167b4e8e35437cf55e7d84b3ef27c7a0390c76643e58691d55196fbd2e3070a9308d76af61c4b43005981ef641be82f6eb80ae69a60ec4e78f99cef86f84bc9ad1101397648dfd15b51dac18cdd46c58f433772c6598364b351e1ea15e21eaa5889ad09e6400c72cb3162034838141a86338ca2f47d0f88d6c0ca13729999d0d7233c7d91bfb8359c5b3e7248f6034a57b28299f6465cddb2622a8c07c221beaa2236a04fb9d3c52e5548d0f0f4506ff8ab3d5e24be3d9d11ac02ff44a8efef9145d16ec9af4fc0cb9d5428e70c62785c9a7bb3d818f7403d2547ff80e9bcd922fe58598590d14eddda8fd07aac6776a6ce015c7dd2cc8eafbd927f7ffc8f519b327e3759e7f41ffee8d4a2121d9b9b4ceb32fd820fff7ad156c74604cab787135cc27b715aa26671fe99a5b9b2f47694f0b8183a266a90ef7c724f95c39e3725e2e54c1bfec568dbf42150ff0cf200c6b22d52ffa932443d62a61e3890cee62516fb0dec3c4d310225ee20a3f29b3dd12f3b1d09225a9a6caf3c2e467f47b92ed3888ea6d7095d8c00a78f36c64a28c2feb102a661e7e4642b8ef4eb3fce7846060873c6a64f76081eb765cd9537d2e08c8bc44d07abc3e77b8e0dd366849d63b11667f5e64b96e89b2ef5fe21b4f5425a7ddc257ddd0202e241060e641341faf01b5ae6577e399fb7714a19add131bf9a89a5d5796140ade0561952c3ff17fc2a6a76efaaa13bd1758d79aa0c85cf6d2617c028ac1f3d5e45a4dd6f0957ebe735e1971251942ebf3927db2254bd5a496eb0a77ad70ced2f70aa837319c454a73041c76c6e01da43bb891140d845528c7c5a26f0dc4dc21d592ef72a105cb3677b9a11a63678882b16aee511b40bd177ec7d3ef272ce23839920c104aafc2f46a99a313a54655bf3ed9fa1492fafb57239ba23ef9325825728ef2d878290f83ac338284b863342353eec1bd132055ebb7d79cecd490b02c8e909cc47ec408f5b8d9571055a7976f54a7ed746e7800ad1f0540ae4046e2256b3afa18f98f28b197ed80f9cdeb2795e41558afd12ae6af37c8911a14235319bca43790c3b6b7b53f63ad85fa83f8f96f5b0460da232f7c239888f352d47b2e8d475d1229afb17143e95e06f786cebdab36d8ce9d281b48562e8b9b00991d1530639a8c5df2ddf58a2c836384b25eac8bf41252fdb8f6a22a88cbe9939fdb098d53a090ecf29e1840bb3b40ee5fc4cabf1fb4014c6aca89f9a781d21a5b14adef25cb2afc83c1f2e3a68ee9994d93f211d3eda73f921911ffec1d558a5e555d8663d3464e866d4985785d621b5fb01767978ee3a7a8356ab681537d17eca71a5dc5d25ab9f182a75b68b650b1a7b0e27b70aacbfe32912bf97ab9e9360f4e6263178c4568da1aede597ffae2ee62fa22fd42e667dac1b48acb807e7083c216a5ec3541cacb8af570fbf050b8f0b93d4f532f110f430d4b08dfbb88e00a6c260a240384ac924096a9d9a17e7580c3304e16ca73f3d6903d72921bba5e4c7a6fce1cb97cf0fc137ba4a1bdcf112e423188c55152559610ed7ae1479db0998bd3cb1ed893e82ff38c958d1e7c693a74ce26254ee515939f96089ccbdc602e225b914fce6b4a6cb193de80328b6eb5d4708405cd7f076d23858ddee1e2c5a68209b0cca0b2f3384dc9c161c62d43597f291162787d0caa3af350f37e76b26e77185aa570a3ff962debd2467abc6e4a06f58753c26edab7718f17f2f57ed7d93dfea748780f57bb1270bb59c9e5f3f9bce8d3c5d2c2f3054313e7987c6e8d0771b923122bc969f7d3fc78c2f3cb04a4c6f75592070773cf2a4573e9c9bd9ac3f28226581f76fd4fd369d99e50c0e35a81617089fb496b2c9c1186fde48682e4a319e4feb7590ce561a9bc4aa1b89910c6d9b124a7b68e9f6706f82eb35e12465fdefccc3e5d8dc11264e3b5baa746ef2822c97b65e6361b26b6c51d1d54a9b1ed5da29bf7717f11abb3d59d7c3b54cd1afd0effdbb73dcb2037f6c73ae29400862877bdae935e354c7b275615192eeb904ac8f1f2d08e83a370714e205f66400a17fe4b6b864d358cbffe04a78d5baeba230956e68569ac3fcd854b639b612095e4e7e405713616d69fca80e18f13b1185f1be523ec08794d326e7c2e218ad94e954e10fa37aa5adadc6a6d6e9e238909e7329b016543ec4e7e648efac549cf156bd4b2b7b3a78cfa9ffcfe4fd5d715d11a3a3105df5a27619200843de421d840a893e94e52d70ddb7a6b06f8c675e4dec51726e41e34cd9aeb753cc8123b5b276cc6e76671821994d802e87e6b4ecc84af312bdd4d7d310e89989a0fe976fba8a48bb71655197adceb140de613d1652e9d61d54bea56573c75ace8403cc5c05e637e225327323bd9e0ac1f8bf933625f07ccd7769235a005c0c738e84225c07651220711e991534cd58c2b1f5a5cecdbfc5feed7f5feb119a064a8bc93b6e680e742c0ba33f27059ca62c192983bcb075211db531d7c4cf85ca7a4f833c01ec1bddca9e4072dc854a7db6788bac2f03a86951621c75b0b5827d3f92f9ffd20633a7d2cd55441fe9fcd1658b4f4799caf995a4cd7aa829dd2e24f40", &(0x7f0000000040), 0x3, 0x0, 0x33, 0x6f, &(0x7f0000000100)="46cc00117877b1d08f679b92d46ce23b736d0feb470f4e1d46f158db88cf3de81ac77bccb45147c5d8b3964b10d7310feec810", &(0x7f0000000240)="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", 0x2, 0x0, 0x7ffc}, 0x21) 1.433347265s ago: executing program 2 (id=633): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100)=0x401, 0x4) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x8) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x9, 0x1, 0x4e51e018, 0x67, 0x5, 0xf6d, 0x1, 0x10}, 0x0, 0x0, 0x0, 0x0) 1.378016419s ago: executing program 1 (id=635): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10002, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x2000000b}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) 1.161288289s ago: executing program 3 (id=636): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008044}, 0x4000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x50, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 903.519051ms ago: executing program 6 (id=639): r0 = epoll_create1(0x80000) r1 = epoll_create1(0x80000) r2 = socket(0x1, 0x80802, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x10000001}) shutdown(r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)={0x60000008}) 841.942527ms ago: executing program 6 (id=641): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x5, 0x10, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x101280, 0x26f, 0xd, 0x3, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 829.739148ms ago: executing program 4 (id=642): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230000) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xffff0000, 0xf0, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) 737.238036ms ago: executing program 6 (id=643): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000440)=""/133, 0x85}], 0x1) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/4, 0x4}], 0x1) 580.43779ms ago: executing program 2 (id=644): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x2000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef289a630182700008"], 0xffdd) 573.33877ms ago: executing program 4 (id=645): r0 = epoll_create1(0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x200009, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) socket(0x1d, 0x2, 0x6) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xa0028000}) 528.278064ms ago: executing program 4 (id=646): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x50) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) close(0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000a0000000000000a070000"], 0x0, 0x4a, 0x0, 0x1, 0x800, 0x10000}, 0x28) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58}, 0x10) 500.473976ms ago: executing program 1 (id=647): r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x2, 0x20022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xb}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="bf16000000000000b70700000200f0ff4070000000000000480000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6879fc404004900c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a3449abe802f5ab3e89cf6cfdffffffb8580218ce740068720000074e8b1715807ea0ca469e468eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea70c2ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2204dd418c005479ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b5543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8ff7e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae1d39c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b400005a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a38400242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025f2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da083e8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd9f140e5f00019be25b5910a3193e90be231a05fd82e6003969c3f081ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a58a0aa9a821667c68549e9da89ad4274ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b8840558b3f918d675a79907a72a8252cd3fbaea5d3006a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68196c7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb5ff0f000002ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f80bb1c9cfcde57b79625e2979fe689a5a246cbbdf6ad488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546eb7c32dbecb18a308a0004be94dfab28c2a51dc856df0000000000c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d0e68d7eef5d32d5fcc7923d7544fa492aa38717481455e86dcd7816ad8940bd1995369d89ae6eadeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1abb901f866d9d629b4fb185f45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d6cf0a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9573abb0a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b14952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d780100358aa54b4b49926c4be9ee4659153d9fa95d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d832e1431ed6d646d13e8e7230300920a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c22e46af480c300000000000000000000000000000000000044ff72f96f084f4b6cdcb1b4a9d8e9f99f1b85497d0c3df704c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f25ef52394db3e9d8318bbb9baff3db95bfd68a08ded502cc08a485c804e4fd107a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d25b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b0d87a6ed800000000000000000000000000000000006cc6f64f583a26a78f7f417f66c0af32f5194ddfce51e5aff28f621bb2fd2a5ab719823488d6e869b08d3d4ac7950c60144cf77437e29895a23282e3c65e015d1c334832a90ee77d93596e3f12e9ca8c67c7f3c9b66c9cb03edec184ad1d9544c7a3be250e471dca00000078544d79c0efe4094e561eeb26ee4c81106d03c004bc1589ef6e13648999c8735e2634e89aaa90c571fa3c07238697b1db783c52715055445e96995fe3273b0346b03fc742c06aa3947e0d9cf0c99b5e245ede85893112deea8bd3355a32ec15e1242f170a51f28cea4105541e96a52da4984d26bd29cb0623f00c6b0a4c00ad406d729babc9d1550a683c349017a340444000000000000000000000920ca49f7cc8194aaebdcae5a62bb7587b57f41f1c2034911f23e6bd0291b3319f03a0a15dea685a8ab75b3c60391afa5483231305402b52a8f98638009c142751518f73a847ca583e855d70c6a4a53f61ad753d5e740db44afd32b019d9e8b41361c2c1b9a8a14604fe52837a19dd6952fe2724c0105ab158a54a4a23ff0f4bc43c0e0e426e51258e40bb4b68ff4e3a8fe314a0"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000780)=r3, 0x4) sendmsg$inet(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000400)="0000000000ec", 0x6}], 0x1}, 0x200000c0) 419.379914ms ago: executing program 2 (id=648): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) 418.921204ms ago: executing program 2 (id=649): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0x3d}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900442b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x5}], 0x2) 330.830851ms ago: executing program 1 (id=650): r0 = syz_clone(0x2008400, 0x0, 0x6, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x188, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000100)='map_files\x00') fchdir(r2) r3 = open(&(0x7f00000000c0)='.\x00', 0x48800, 0x50) getdents(r3, 0x0, 0x0) 292.176655ms ago: executing program 4 (id=651): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100000100000c000460000000000000000714000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 246.490809ms ago: executing program 2 (id=652): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x27, 0x2, 0x0, 0x0, 0x0, 0x100000001, 0x8101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x2}, 0x9885, 0x3, 0x7fc, 0x6, 0x0, 0x1, 0x6}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x13, @local, 0x2}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) listen(r0, 0x7f) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0xff6f}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 231.5653ms ago: executing program 4 (id=653): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="b7", 0x1}], 0x1}, 0x20008050) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0xfffffffd}, {0x2, 0x0, 0xffffeffc, 0x8}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000)=r3, 0xc) 231.07968ms ago: executing program 1 (id=654): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x7f, 0x4, 0x2}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 150.175527ms ago: executing program 2 (id=655): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_io_uring_setup(0x1238, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x6, 0xab9}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffff4, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local, 0x3}}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 113.72509ms ago: executing program 4 (id=656): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x80000) open$dir(&(0x7f0000000000)='./file4\x00', 0x2601, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000380)={0x8a001, 0x0, 0x12}, 0x18) 106.915141ms ago: executing program 1 (id=657): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000200), &(0x7f00000002c0)='%pB \x00'}, 0x20) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 76.711493ms ago: executing program 3 (id=658): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) fcntl$dupfd(r0, 0x0, r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00') capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0xd, 0x0, 0x5, 0xffffffff, 0xfffffffd}) open_by_handle_at(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r1], 0x0) 30.509498ms ago: executing program 1 (id=659): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x80000000000f36, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0xffffff98) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x3fd4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 0s ago: executing program 3 (id=660): socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1, 0xfc}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f00000000c0)=0x8, 0x4) kernel console output (not intermixed with test programs): [ 19.525664][ T28] audit: type=1400 audit(1771625609.015:62): avc: denied { search } for pid=3195 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.547749][ T28] audit: type=1400 audit(1771625609.015:63): avc: denied { search } for pid=3195 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=484 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.570534][ T28] audit: type=1400 audit(1771625609.015:64): avc: denied { search } for pid=3195 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.593528][ T28] audit: type=1400 audit(1771625609.015:65): avc: denied { search } for pid=3195 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=489 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.616509][ T28] audit: type=1400 audit(1771625609.015:66): avc: denied { read open } for pid=3196 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=489 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.185' (ED25519) to the list of known hosts. [ 24.444845][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 24.444863][ T28] audit: type=1400 audit(1771625613.935:70): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.445708][ T3300] cgroup: Unknown subsys name 'net' [ 24.450994][ T28] audit: type=1400 audit(1771625613.935:71): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.501025][ T28] audit: type=1400 audit(1771625613.965:72): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.633661][ T3300] cgroup: Unknown subsys name 'cpuset' [ 24.639963][ T3300] cgroup: Unknown subsys name 'rlimit' [ 24.749737][ T28] audit: type=1400 audit(1771625614.235:73): avc: denied { setattr } for pid=3300 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.778325][ T28] audit: type=1400 audit(1771625614.235:74): avc: denied { create } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.798885][ T28] audit: type=1400 audit(1771625614.235:75): avc: denied { write } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.806745][ T3303] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.819324][ T28] audit: type=1400 audit(1771625614.235:76): avc: denied { read } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.848472][ T28] audit: type=1400 audit(1771625614.245:77): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.873347][ T28] audit: type=1400 audit(1771625614.245:78): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.896773][ T28] audit: type=1400 audit(1771625614.265:79): avc: denied { read } for pid=3042 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 24.920249][ T3300] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.975869][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 26.057048][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.064302][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.071440][ T3313] bridge_slave_0: entered allmulticast mode [ 26.077910][ T3313] bridge_slave_0: entered promiscuous mode [ 26.084268][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 26.098365][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.105642][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.112789][ T3313] bridge_slave_1: entered allmulticast mode [ 26.119236][ T3313] bridge_slave_1: entered promiscuous mode [ 26.158951][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.170908][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.193908][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 26.203004][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.210267][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.217479][ T3314] bridge_slave_0: entered allmulticast mode [ 26.224167][ T3314] bridge_slave_0: entered promiscuous mode [ 26.240676][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 26.256040][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.263160][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.270281][ T3314] bridge_slave_1: entered allmulticast mode [ 26.276699][ T3314] bridge_slave_1: entered promiscuous mode [ 26.288382][ T3313] team0: Port device team_slave_0 added [ 26.297303][ T3313] team0: Port device team_slave_1 added [ 26.337836][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.351808][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.358824][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.385015][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.398374][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.405378][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.431315][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.442812][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.496214][ T3314] team0: Port device team_slave_0 added [ 26.501936][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.509191][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.516431][ T3322] bridge_slave_0: entered allmulticast mode [ 26.522987][ T3322] bridge_slave_0: entered promiscuous mode [ 26.529498][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.536733][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.543905][ T3312] bridge_slave_0: entered allmulticast mode [ 26.550360][ T3312] bridge_slave_0: entered promiscuous mode [ 26.559106][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.566344][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.573564][ T3312] bridge_slave_1: entered allmulticast mode [ 26.579955][ T3312] bridge_slave_1: entered promiscuous mode [ 26.595891][ T3314] team0: Port device team_slave_1 added [ 26.605425][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.612512][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.619626][ T3322] bridge_slave_1: entered allmulticast mode [ 26.626106][ T3322] bridge_slave_1: entered promiscuous mode [ 26.632496][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 26.643447][ T3313] hsr_slave_0: entered promiscuous mode [ 26.649360][ T3313] hsr_slave_1: entered promiscuous mode [ 26.656484][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.671053][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.722540][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.733344][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.742626][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.749705][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.776272][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.787764][ T3312] team0: Port device team_slave_0 added [ 26.804477][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.811508][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.837506][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.848869][ T3312] team0: Port device team_slave_1 added [ 26.871293][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.878445][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.885732][ T3319] bridge_slave_0: entered allmulticast mode [ 26.892059][ T3319] bridge_slave_0: entered promiscuous mode [ 26.908215][ T3322] team0: Port device team_slave_0 added [ 26.913933][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.920981][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.928168][ T3319] bridge_slave_1: entered allmulticast mode [ 26.934602][ T3319] bridge_slave_1: entered promiscuous mode [ 26.948432][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.955583][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.981548][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.993260][ T3322] team0: Port device team_slave_1 added [ 27.004539][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.023272][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.030311][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.056278][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.083656][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.104713][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.111674][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.137699][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.158598][ T3314] hsr_slave_0: entered promiscuous mode [ 27.164654][ T3314] hsr_slave_1: entered promiscuous mode [ 27.170415][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 27.176172][ T3314] Cannot create hsr debugfs directory [ 27.186838][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.193884][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.219794][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.239745][ T3319] team0: Port device team_slave_0 added [ 27.266391][ T3312] hsr_slave_0: entered promiscuous mode [ 27.272374][ T3312] hsr_slave_1: entered promiscuous mode [ 27.278316][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 27.284065][ T3312] Cannot create hsr debugfs directory [ 27.290301][ T3319] team0: Port device team_slave_1 added [ 27.307506][ T3322] hsr_slave_0: entered promiscuous mode [ 27.313578][ T3322] hsr_slave_1: entered promiscuous mode [ 27.319474][ T3322] debugfs: 'hsr0' already exists in 'hsr' [ 27.325230][ T3322] Cannot create hsr debugfs directory [ 27.364883][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.371850][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.397827][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.426940][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.433981][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.459965][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.509016][ T3313] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.533119][ T3313] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.555673][ T3313] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.570956][ T3319] hsr_slave_0: entered promiscuous mode [ 27.577115][ T3319] hsr_slave_1: entered promiscuous mode [ 27.582971][ T3319] debugfs: 'hsr0' already exists in 'hsr' [ 27.588697][ T3319] Cannot create hsr debugfs directory [ 27.598878][ T3313] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.637777][ T3314] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 27.651266][ T3314] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 27.660660][ T3314] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 27.669753][ T3314] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 27.729225][ T3322] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 27.737993][ T3322] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 27.747033][ T3322] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 27.756071][ T3322] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 27.790817][ T3312] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 27.799712][ T3312] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 27.808521][ T3312] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 27.817278][ T3312] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 27.860620][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.885027][ T3319] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.897335][ T3319] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.912215][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.921649][ T3319] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 27.930478][ T3319] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 27.945293][ T1365] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.952336][ T1365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.964417][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.975333][ T1365] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.982405][ T1365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.017806][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.027781][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.038378][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.051308][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.064088][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.071234][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.084015][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.091122][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.100854][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.107917][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.123826][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.130966][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.142641][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.158515][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.203680][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.210941][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.219788][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.226918][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.253781][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.283323][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.293585][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.300713][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.314169][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.321239][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.392343][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.418299][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.463597][ T3313] veth0_vlan: entered promiscuous mode [ 28.483494][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.511393][ T3313] veth1_vlan: entered promiscuous mode [ 28.527949][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.611961][ T3313] veth0_macvtap: entered promiscuous mode [ 28.621716][ T3314] veth0_vlan: entered promiscuous mode [ 28.638556][ T3313] veth1_macvtap: entered promiscuous mode [ 28.651398][ T3314] veth1_vlan: entered promiscuous mode [ 28.662004][ T3312] veth0_vlan: entered promiscuous mode [ 28.698120][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.706737][ T3319] veth0_vlan: entered promiscuous mode [ 28.714978][ T3312] veth1_vlan: entered promiscuous mode [ 28.723281][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.735626][ T3314] veth0_macvtap: entered promiscuous mode [ 28.746911][ T3319] veth1_vlan: entered promiscuous mode [ 28.756513][ T1365] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.765799][ T1365] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.778270][ T1365] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.788009][ T1365] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.805166][ T3314] veth1_macvtap: entered promiscuous mode [ 28.814236][ T3322] veth0_vlan: entered promiscuous mode [ 28.821906][ T3312] veth0_macvtap: entered promiscuous mode [ 28.833556][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.848733][ T3312] veth1_macvtap: entered promiscuous mode [ 28.856229][ T3322] veth1_vlan: entered promiscuous mode [ 28.862635][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.872990][ T3319] veth0_macvtap: entered promiscuous mode [ 28.888691][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.902105][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.913526][ T3313] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.928537][ T3322] veth0_macvtap: entered promiscuous mode [ 28.936121][ T3319] veth1_macvtap: entered promiscuous mode [ 28.948061][ T3322] veth1_macvtap: entered promiscuous mode [ 28.964888][ T40] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.987728][ T40] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.996799][ T3482] loop1: detected capacity change from 0 to 128 [ 28.997221][ T40] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.017784][ T40] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.031971][ T40] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.041322][ T3482] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 29.053980][ T40] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.062852][ T40] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.072165][ T3482] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 29.074797][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.092320][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.108077][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.126645][ T40] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.126994][ T3313] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 29.163473][ T40] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.180316][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.222562][ T40] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.232123][ T40] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.256493][ T3496] loop1: detected capacity change from 0 to 512 [ 29.273244][ T3496] EXT4-fs: Ignoring removed i_version option [ 29.279284][ T3496] EXT4-fs: Ignoring removed bh option [ 29.280795][ T40] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.295613][ T40] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.309532][ T40] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.318739][ T30] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.329604][ T3496] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.349439][ T3496] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 29.353067][ T30] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.453970][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.466191][ T28] kauditd_printk_skb: 46 callbacks suppressed [ 29.466205][ T28] audit: type=1400 audit(1771625618.955:126): avc: denied { write } for pid=3508 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 29.472501][ T3507] loop0: detected capacity change from 0 to 1024 [ 29.527012][ T3507] EXT4-fs: Ignoring removed orlov option [ 29.546358][ T28] audit: type=1400 audit(1771625619.025:127): avc: denied { allowed } for pid=3511 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 29.557673][ T3507] EXT4-fs: Ignoring removed nomblk_io_submit option [ 29.620758][ T3522] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16'. [ 29.633494][ T28] audit: type=1400 audit(1771625619.025:128): avc: denied { read } for pid=3508 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 29.665423][ T28] audit: type=1400 audit(1771625619.025:129): avc: denied { create } for pid=3511 comm="syz.2.12" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 29.690584][ T3507] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8043c118, mo2=0002] [ 29.711938][ T3507] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.733745][ C0] hrtimer: interrupt took 55323 ns [ 29.759320][ T28] audit: type=1400 audit(1771625619.035:130): avc: denied { create } for pid=3510 comm="syz.4.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 29.792401][ T28] audit: type=1400 audit(1771625619.065:131): avc: denied { bind } for pid=3510 comm="syz.4.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 29.812577][ T28] audit: type=1400 audit(1771625619.065:132): avc: denied { listen } for pid=3510 comm="syz.4.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 29.841521][ T3532] Illegal XDP return value 33108024 on prog (id 5) dev N/A, expect packet loss! [ 29.847373][ T3533] loop3: detected capacity change from 0 to 512 [ 29.873443][ T28] audit: type=1400 audit(1771625619.065:133): avc: denied { connect } for pid=3510 comm="syz.4.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 29.893147][ T3507] loop0: detected capacity change from 1024 to 64 [ 29.895903][ T3533] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.923654][ T3533] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 29.933771][ T3312] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 16: comm syz-executor: path /2/file1: bad entry in directory: inode out of bounds - offset=0, inode=201326592, rec_len=256, size=1024 fake=0 [ 29.963557][ T28] audit: type=1400 audit(1771625619.065:134): avc: denied { accept } for pid=3510 comm="syz.4.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 29.995112][ T28] audit: type=1400 audit(1771625619.065:135): avc: denied { read } for pid=3510 comm="syz.4.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 30.065133][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.105731][ T3524] kmmpd-loop0: attempt to access beyond end of device [ 30.105731][ T3524] loop0: rw=8402945, sector=128, nr_sectors = 2 limit=64 [ 30.129609][ T3524] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 30.152329][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.582355][ T3568] netlink: 'syz.1.35': attribute type 1 has an invalid length. [ 30.591130][ T3568] netlink: 'syz.1.35': attribute type 4 has an invalid length. [ 30.599566][ T3568] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.35'. [ 30.990182][ T3594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.47'. [ 31.079182][ T3598] loop3: detected capacity change from 0 to 8192 [ 31.085891][ T3598] ======================================================= [ 31.085891][ T3598] WARNING: The mand mount option has been deprecated and [ 31.085891][ T3598] and is ignored by this kernel. Remove the mand [ 31.085891][ T3598] option from the mount to silence this warning. [ 31.085891][ T3598] ======================================================= [ 31.387916][ T3617] loop2: detected capacity change from 0 to 1024 [ 31.395975][ T3617] EXT4-fs: Ignoring removed bh option [ 31.434476][ T3617] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 31.455416][ T3623] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.475391][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 31.501108][ T3625] loop2: detected capacity change from 0 to 1024 [ 31.518248][ T3625] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 31.530602][ T3625] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.542369][ T3623] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.577989][ T1686] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.607453][ T3623] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.643733][ T3625] EXT4-fs error (device loop2): ext4_free_blocks:6726: comm syz.2.60: Freeing blocks not in datazone - block = 0, count = 16 [ 31.705042][ T3623] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.718705][ T30] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:1: bg 0: block 112: padding at end of block bitmap is not set [ 31.744432][ T30] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 31.758584][ T30] EXT4-fs (loop2): This should not happen!! Data will be lost [ 31.758584][ T30] [ 31.778211][ T30] EXT4-fs (loop2): Total free blocks count 0 [ 31.793409][ T40] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.801860][ T30] EXT4-fs (loop2): Free/Dirty block details [ 31.813034][ T117] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.824517][ T117] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.833165][ T30] EXT4-fs (loop2): free_blocks=16 [ 31.843024][ T40] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.846526][ T30] EXT4-fs (loop2): dirty_blocks=16 [ 31.880159][ T30] EXT4-fs (loop2): Block reservation details [ 31.897840][ T30] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 31.932296][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 32.015034][ T3633] chnl_net:caif_netlink_parms(): no params data found [ 32.057558][ T3637] loop1: detected capacity change from 0 to 1024 [ 32.098328][ T3633] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.130231][ T3633] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.139989][ T3633] bridge_slave_0: entered allmulticast mode [ 32.158885][ T3633] bridge_slave_0: entered promiscuous mode [ 32.172026][ T3633] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.181567][ T3633] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.189047][ T3633] bridge_slave_1: entered allmulticast mode [ 32.219703][ T3633] bridge_slave_1: entered promiscuous mode [ 32.236405][ T3637] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 32.261359][ T3637] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.275706][ T3661] SELinux: failed to load policy [ 32.294997][ T3633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.306155][ T3633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.327700][ T3633] team0: Port device team_slave_0 added [ 32.334627][ T3633] team0: Port device team_slave_1 added [ 32.366465][ T3633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.373763][ T3633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.406862][ T3637] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: block 3: comm syz.1.65: lblock 3 mapped to illegal pblock 3 (length 3) [ 32.417412][ T3633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.439679][ T3633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.441434][ T3677] netlink: 24 bytes leftover after parsing attributes in process `syz.2.76'. [ 32.446777][ T3633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.474160][ T3637] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 32.488197][ T3633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.501373][ T3637] EXT4-fs (loop1): This should not happen!! Data will be lost [ 32.501373][ T3637] [ 32.512904][ T3675] syz.3.75 uses obsolete (PF_INET,SOCK_PACKET) [ 32.526244][ T1686] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.582476][ T1686] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.605337][ T3633] hsr_slave_0: entered promiscuous mode [ 32.611449][ T3633] hsr_slave_1: entered promiscuous mode [ 32.617530][ T3637] syz.1.65 (3637) used greatest stack depth: 10184 bytes left [ 32.625945][ T3633] debugfs: 'hsr0' already exists in 'hsr' [ 32.641134][ T3633] Cannot create hsr debugfs directory [ 32.647112][ T12] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:0: lblock 8 mapped to illegal pblock 8 (length 8) [ 32.666543][ T1686] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.673341][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 32.717447][ T12] EXT4-fs (loop1): This should not happen!! Data will be lost [ 32.717447][ T12] [ 32.740642][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 32.751149][ T3691] Bluetooth: hci0: sending frame failed (-49) [ 32.759303][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 32.840525][ T1686] bridge_slave_1: left allmulticast mode [ 32.862288][ T1686] bridge_slave_1: left promiscuous mode [ 32.874267][ T1686] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.882194][ T1686] bridge_slave_0: left allmulticast mode [ 32.888003][ T1686] bridge_slave_0: left promiscuous mode [ 32.893813][ T1686] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.926432][ T3711] xt_limit: Overflow, try lower: 65536/2147483648 [ 33.020986][ T1686] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 33.032174][ T1686] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 33.035350][ T3718] loop1: detected capacity change from 0 to 512 [ 33.059651][ T3718] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.072380][ T1686] bond0 (unregistering): Released all slaves [ 33.080750][ T3718] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.109484][ T3633] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 33.124141][ T3633] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 33.133325][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.145497][ T1686] hsr_slave_0: left promiscuous mode [ 33.163378][ T1686] hsr_slave_1: left promiscuous mode [ 33.174346][ T1686] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 33.207421][ T1686] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 33.229087][ T1686] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 33.250214][ T1686] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 33.266621][ T1686] veth1_macvtap: left promiscuous mode [ 33.272198][ T1686] veth0_macvtap: left promiscuous mode [ 33.284969][ T1686] veth1_vlan: left promiscuous mode [ 33.298005][ T1686] veth0_vlan: left promiscuous mode [ 33.317221][ T3733] EXT4-fs: Ignoring removed i_version option [ 33.323700][ T3733] EXT4-fs: Ignoring removed bh option [ 33.345613][ T3733] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.358501][ T3733] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 33.405803][ T1686] team0 (unregistering): Port device team_slave_1 removed [ 33.416937][ T1686] team0 (unregistering): Port device team_slave_0 removed [ 33.480291][ T3633] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 33.497258][ T3633] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 33.542581][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.595324][ T3756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.95'. [ 33.618852][ T3633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.642529][ T3633] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.659455][ T3759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.94'. [ 33.679402][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.683066][ T3759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.94'. [ 33.686541][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.711489][ T3763] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 33.724930][ T3763] FAT-fs (loop1): Filesystem has been set read-only [ 33.742167][ T3763] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 33.746438][ T3633] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.763773][ T3633] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.785804][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.792982][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.800724][ T3763] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 33.834318][ T3773] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 33.851420][ T3773] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 33.861962][ T3773] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 33.880006][ T3773] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 33.894786][ T3763] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 33.903954][ T3763] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 33.913106][ T3763] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 33.973363][ T3633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.032917][ T3786] set_capacity_and_notify: 3 callbacks suppressed [ 34.053224][ T3786] loop4: detected capacity change from 0 to 128 [ 34.076396][ T3788] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 34.253517][ T3633] veth0_vlan: entered promiscuous mode [ 34.284455][ T3633] veth1_vlan: entered promiscuous mode [ 34.297349][ T3822] loop3: detected capacity change from 0 to 256 [ 34.320062][ T3822] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 34.326812][ T3633] veth0_macvtap: entered promiscuous mode [ 34.350208][ T3633] veth1_macvtap: entered promiscuous mode [ 34.357165][ T3822] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 34.379877][ T3633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.392667][ T3633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.411883][ T117] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.428656][ T117] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.444008][ T117] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.453466][ T117] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.504172][ T117] Bluetooth: hci0: Frame reassembly failed (-84) [ 34.540707][ T28] kauditd_printk_skb: 113 callbacks suppressed [ 34.540724][ T28] audit: type=1400 audit(1771625880.023:249): avc: denied { mounton } for pid=3633 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 34.601094][ T3773] syz.1.96 (3773) used greatest stack depth: 9488 bytes left [ 34.644061][ T28] audit: type=1400 audit(1771625880.123:250): avc: denied { setopt } for pid=3842 comm="syz.1.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 34.691600][ T28] audit: type=1400 audit(1771625880.123:251): avc: denied { create } for pid=3842 comm="syz.1.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 34.753073][ T28] audit: type=1400 audit(1771625880.233:252): avc: denied { bind } for pid=3850 comm="syz.5.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 34.793182][ T28] audit: type=1400 audit(1771625880.243:253): avc: denied { create } for pid=3853 comm="syz.2.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 34.813538][ T28] audit: type=1400 audit(1771625880.243:254): avc: denied { sys_admin } for pid=3853 comm="syz.2.112" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 34.880849][ T3860] netlink: 'syz.2.114': attribute type 5 has an invalid length. [ 34.922648][ T3863] loop2: detected capacity change from 0 to 256 [ 34.932697][ T3364] kernel read not supported for file /vcs (pid: 3364 comm: kworker/1:2) [ 34.951796][ T1032] kernel read not supported for file /vcs (pid: 1032 comm: kworker/0:2) [ 35.102314][ T28] audit: type=1400 audit(1771625880.583:255): avc: denied { shutdown } for pid=3877 comm="syz.5.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 35.144967][ T28] audit: type=1400 audit(1771625880.603:256): avc: denied { getopt } for pid=3877 comm="syz.5.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 35.166249][ T3880] netlink: 'syz.5.120': attribute type 29 has an invalid length. [ 35.175436][ T3880] netlink: 'syz.5.120': attribute type 29 has an invalid length. [ 35.185351][ T3880] netlink: 500 bytes leftover after parsing attributes in process `syz.5.120'. [ 35.958822][ T3895] atomic_op ffff88811be0e528 conn xmit_atomic 0000000000000000 [ 35.959213][ T28] audit: type=1400 audit(1771625881.443:257): avc: denied { bind } for pid=3894 comm="syz.2.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 36.013946][ T28] audit: type=1400 audit(1771625881.443:258): avc: denied { write } for pid=3894 comm="syz.2.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 36.553986][ T3905] loop1: detected capacity change from 0 to 128 [ 36.571635][ T3905] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 36.584396][ T3905] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 36.593981][ T43] Bluetooth: hci0: command 0x1003 tx timeout [ 36.600923][ T3691] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 36.648842][ T3313] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 36.731684][ T3913] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.738985][ T3913] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.779825][ T3913] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.790426][ T3913] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.831840][ T40] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.850944][ T40] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.892722][ T40] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.903789][ T40] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.092685][ T3927] loop1: detected capacity change from 0 to 8192 [ 37.162534][ T3313] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 37.179417][ T3313] FAT-fs (loop1): Filesystem has been set read-only [ 37.266863][ T3920] loop4: detected capacity change from 0 to 32768 [ 37.438834][ T3943] loop4: detected capacity change from 0 to 1024 [ 37.466498][ T3943] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 37.474891][ T3943] System zones: 0-1, 3-36 [ 37.483617][ T3943] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.142: bad orphan inode 134217728 [ 37.503084][ T3943] loop4: lost filesystem error report for type 5 error -117 [ 37.503772][ T3943] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.568219][ T3943] EXT4-fs: Cannot specify journal on remount [ 37.612431][ T3938] loop1: detected capacity change from 0 to 32768 [ 37.671189][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.718439][ T3294] loop1: p1 p2 p3 < p5 p6 p7 > [ 37.756959][ T3294] loop1: p2 size 16775168 extends beyond EOD, truncated [ 37.779559][ T3294] loop1: p5 start 4294970168 is beyond EOD, truncated [ 37.797816][ T3938] loop1: p1 p2 p3 < p5 p6 p7 > [ 37.803735][ T3938] loop1: p2 size 16775168 extends beyond EOD, truncated [ 37.814023][ T3938] loop1: p5 start 4294970168 is beyond EOD, truncated [ 37.974388][ T3964] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.170644][ T3958] udevd[3958]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 38.170929][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 38.182239][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 38.193790][ T3957] udevd[3957]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 38.201469][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 38.262638][ T3958] udevd[3958]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 38.274671][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 38.278201][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 38.295933][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 38.309168][ T3957] udevd[3957]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 38.551064][ T3990] all: renamed from veth1_to_bond (while UP) [ 38.598094][ T3408] Process accounting resumed [ 38.775950][ T3999] loop1: detected capacity change from 0 to 2048 [ 38.811677][ T4001] netlink: 4 bytes leftover after parsing attributes in process `syz.5.160'. [ 38.847399][ T4001] team1: entered promiscuous mode [ 38.857294][ T4001] team1: entered allmulticast mode [ 38.862575][ T4001] Zero length message leads to an empty skb [ 38.914620][ T3999] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.014758][ T3999] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.043138][ T4011] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 39.049708][ T4011] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 39.068341][ T4011] vhci_hcd vhci_hcd.0: Device attached [ 39.074908][ T4014] vhci_hcd: connection closed [ 39.076581][ T1365] vhci_hcd vhci_hcd.4: stop threads [ 39.089089][ T1365] vhci_hcd vhci_hcd.4: release socket [ 39.098058][ T1365] vhci_hcd vhci_hcd.4: disconnect device [ 39.148023][ T4019] -: renamed from syzkaller0 [ 39.402329][ T4039] loop5: detected capacity change from 0 to 512 [ 39.423774][ T4039] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 39.434164][ T4039] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003] [ 39.442152][ T4039] System zones: 1-2, 4-12, 8-8 [ 39.450298][ T4039] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.176: iget: bad i_size value: 38620345925642 [ 39.463486][ T4039] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 39.472965][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 39.483049][ T4039] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.176: couldn't read orphan inode 15 (err -117) [ 39.488612][ C0] EXT4-fs (loop5): initial error at time 1771625884: ext4_orphan_get:1391: inode 15 [ 39.509799][ C0] EXT4-fs (loop5): last error at time 1771625884: ext4_orphan_get:1391: inode 15 [ 39.542120][ T4039] loop5: lost filesystem error report for type 5 error -117 [ 39.553293][ T4045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.178'. [ 39.562678][ T4039] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.574071][ T4045] netlink: 12 bytes leftover after parsing attributes in process `syz.1.178'. [ 39.626519][ T4045] netlink: 12 bytes leftover after parsing attributes in process `syz.1.178'. [ 39.654148][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 39.654233][ T28] audit: type=1400 audit(1771625885.143:273): avc: denied { module_request } for pid=4044 comm="syz.1.178" kmod="net-cls-ba" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 39.713031][ T28] audit: type=1400 audit(1771625885.193:274): avc: denied { create } for pid=4048 comm="syz.3.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 39.747794][ T28] audit: type=1400 audit(1771625885.193:275): avc: denied { ioctl } for pid=4048 comm="syz.3.181" path="socket:[7271]" dev="sockfs" ino=7271 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 39.835609][ T28] audit: type=1400 audit(1771625885.263:276): avc: denied { create } for pid=4038 comm="syz.5.176" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 39.857109][ T4058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.899110][ T4058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.922697][ T28] audit: type=1400 audit(1771625885.263:277): avc: denied { read write open } for pid=4038 comm="syz.5.176" path="/19/file1/bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 40.003822][ T4065] netlink: 'syz.3.184': attribute type 1 has an invalid length. [ 40.035382][ T4065] 8021q: adding VLAN 0 to HW filter on device bond1 [ 40.043000][ T28] audit: type=1400 audit(1771625885.353:278): avc: denied { read write } for pid=4038 comm="syz.5.176" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 40.067061][ T28] audit: type=1400 audit(1771625885.353:279): avc: denied { open } for pid=4038 comm="syz.5.176" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 40.090671][ T28] audit: type=1400 audit(1771625885.353:280): avc: denied { ioctl } for pid=4038 comm="syz.5.176" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 40.115971][ T28] audit: type=1400 audit(1771625885.533:281): avc: denied { write } for pid=4066 comm="syz.4.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 40.140687][ T4069] bond1: (slave veth3): Enslaving as an active interface with a down link [ 40.163864][ T4065] netlink: 12 bytes leftover after parsing attributes in process `syz.3.184'. [ 40.203902][ T4065] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 40.243301][ T4065] bond1: (slave batadv1): making interface the new active one [ 40.266504][ T4065] batadv1: entered promiscuous mode [ 40.280820][ T4065] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 40.420728][ T28] audit: type=1400 audit(1771625885.903:282): avc: denied { cmd } for pid=4076 comm="syz.4.187" path="socket:[6897]" dev="sockfs" ino=6897 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 41.038107][ T1686] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm kworker/u8:8: bg 0: block 5: invalid block bitmap [ 41.062264][ T4081] loop3: detected capacity change from 0 to 1024 [ 41.122652][ T1686] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 41.167822][ T1686] EXT4-fs (loop5): This should not happen!! Data will be lost [ 41.167822][ T1686] [ 41.193115][ T1686] EXT4-fs (loop5): Total free blocks count 0 [ 41.199441][ T4095] loop2: detected capacity change from 0 to 8192 [ 41.213402][ T1686] EXT4-fs (loop5): Free/Dirty block details [ 41.219476][ T1686] EXT4-fs (loop5): free_blocks=0 [ 41.224579][ T1686] EXT4-fs (loop5): dirty_blocks=16000 [ 41.230237][ T1686] EXT4-fs (loop5): Block reservation details [ 41.238409][ T4081] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 41.253689][ T1686] EXT4-fs (loop5): i_reserved_data_blocks=16000 [ 41.344388][ T4081] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.630620][ T4081] EXT4-fs error (device loop3): ext4_map_blocks:818: inode #15: block 3: comm syz.3.190: lblock 3 mapped to illegal pblock 3 (length 3) [ 41.652251][ T4081] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 41.665350][ T4081] EXT4-fs (loop3): This should not happen!! Data will be lost [ 41.665350][ T4081] [ 41.684081][ T30] EXT4-fs error (device loop3): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:1: lblock 8 mapped to illegal pblock 8 (length 8) [ 41.699282][ T30] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 41.712289][ T30] EXT4-fs (loop3): This should not happen!! Data will be lost [ 41.712289][ T30] [ 41.724147][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 41.744279][ T4119] netlink: 12 bytes leftover after parsing attributes in process `syz.3.204'. [ 41.839861][ T40] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 42.489856][ T4135] netlink: 131740 bytes leftover after parsing attributes in process `syz.3.211'. [ 42.501966][ T4135] netlink: zone id is out of range [ 42.538182][ T4135] netlink: zone id is out of range [ 42.549949][ T4135] netlink: zone id is out of range [ 42.560914][ T4135] netlink: del zone limit has 8 unknown bytes [ 43.205525][ T4153] netlink: 16 bytes leftover after parsing attributes in process `syz.2.218'. [ 43.215485][ T4153] netlink: 16 bytes leftover after parsing attributes in process `syz.2.218'. [ 43.294071][ T4157] loop2: detected capacity change from 0 to 512 [ 43.343100][ T4157] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 43.358030][ T4157] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 43.401222][ T4157] EXT4-fs (loop2): 1 truncate cleaned up [ 43.416393][ T4157] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.609329][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.690308][ T4177] netlink: 16 bytes leftover after parsing attributes in process `syz.1.227'. [ 44.335387][ T4196] loop1: detected capacity change from 0 to 32768 [ 44.354829][ T40] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.477661][ T40] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.595715][ T40] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.783846][ T40] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.838863][ T4229] bridge_slave_1: left allmulticast mode [ 44.853013][ T4229] bridge_slave_1: left promiscuous mode [ 44.858750][ T4229] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.975007][ T4234] pim6reg1: entered promiscuous mode [ 44.980427][ T4234] pim6reg1: entered allmulticast mode [ 45.032033][ T40] bridge_slave_1: left allmulticast mode [ 45.057293][ T40] bridge_slave_1: left promiscuous mode [ 45.083185][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.111423][ T4249] netlink: 'syz.4.252': attribute type 1 has an invalid length. [ 45.127602][ T40] bridge_slave_0: left allmulticast mode [ 45.153018][ T40] bridge_slave_0: left promiscuous mode [ 45.158755][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.296701][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 45.308840][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 45.321070][ T40] bond0 (unregistering): Released all slaves [ 45.333317][ T4263] loop3: detected capacity change from 0 to 512 [ 45.347593][ T4249] 8021q: adding VLAN 0 to HW filter on device bond1 [ 45.364753][ T4211] chnl_net:caif_netlink_parms(): no params data found [ 45.381283][ T4263] EXT4-fs: Ignoring removed nobh option [ 45.397784][ T4255] bond1: (slave veth3): Enslaving as an active interface with a down link [ 45.409430][ T4263] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 45.431976][ T4260] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 45.439511][ T4260] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 45.461613][ T4263] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 45.475468][ T4263] EXT4-fs (loop3): 1 truncate cleaned up [ 45.481712][ T4263] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.522358][ T40] hsr_slave_0: left promiscuous mode [ 45.546353][ T40] hsr_slave_1: left promiscuous mode [ 45.552042][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.563048][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.572135][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 45.572150][ T28] audit: type=1400 audit(1771625891.053:301): avc: denied { create } for pid=4266 comm="syz.2.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 45.603565][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.628809][ T28] audit: type=1400 audit(1771625891.093:302): avc: denied { bind } for pid=4266 comm="syz.2.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 45.644631][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.667850][ T4271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.255'. [ 45.680209][ T28] audit: type=1400 audit(1771625891.103:303): avc: denied { setopt } for pid=4266 comm="syz.2.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 45.706929][ T40] veth1_macvtap: left promiscuous mode [ 45.712440][ T40] veth0_macvtap: left promiscuous mode [ 45.858954][ T4285] loop2: detected capacity change from 0 to 512 [ 45.871619][ T4285] EXT4-fs (loop2): 1 truncate cleaned up [ 45.883534][ T4285] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.895870][ T40] team0 (unregistering): Port device team_slave_1 removed [ 45.909044][ T40] team0 (unregistering): Port device team_slave_0 removed [ 45.948831][ T4285] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.261: bg 0: block 465: padding at end of block bitmap is not set [ 45.985387][ T4285] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 46.022938][ T4285] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.261: invalid indirect mapped block 234881024 (level 0) [ 46.096573][ T4211] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.105535][ T4211] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.112822][ T4211] bridge_slave_0: entered allmulticast mode [ 46.125116][ T4211] bridge_slave_0: entered promiscuous mode [ 46.132269][ T4211] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.139444][ T4211] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.151095][ T4211] bridge_slave_1: entered allmulticast mode [ 46.165788][ T4211] bridge_slave_1: entered promiscuous mode [ 46.223665][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.246935][ T4211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.271580][ T4211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.307602][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.321039][ T4211] team0: Port device team_slave_0 added [ 46.359192][ T4211] team0: Port device team_slave_1 added [ 46.405329][ T4211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.442720][ T4211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.453303][ T4323] loop4: detected capacity change from 0 to 512 [ 46.482851][ T4211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.494550][ T4211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.501505][ T4211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.540982][ T4211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.574129][ T10] IPVS: starting estimator thread 0... [ 46.595006][ T4211] hsr_slave_0: entered promiscuous mode [ 46.601649][ T4211] hsr_slave_1: entered promiscuous mode [ 46.607959][ T4211] debugfs: 'hsr0' already exists in 'hsr' [ 46.613943][ T4211] Cannot create hsr debugfs directory [ 46.650523][ T4323] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 46.663022][ T4326] IPVS: using max 2592 ests per chain, 129600 per kthread [ 46.717044][ T4323] EXT4-fs (loop4): 1 truncate cleaned up [ 46.832863][ T4323] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.848070][ T4211] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 46.868396][ T4211] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 46.890533][ T4211] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 46.924958][ T4211] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 46.982360][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.030064][ T4366] mmap: syz.2.276 (4366) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 47.079377][ T4211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.084874][ T4366] capability: warning: `syz.2.276' uses deprecated v2 capabilities in a way that may be insecure [ 47.093179][ T28] audit: type=1326 audit(1771625892.563:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4365 comm="syz.2.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855bbdc629 code=0x7ffc0000 [ 47.112696][ T4211] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.130265][ T28] audit: type=1326 audit(1771625892.563:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4365 comm="syz.2.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855bbdc629 code=0x7ffc0000 [ 47.153808][ T28] audit: type=1326 audit(1771625892.573:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4365 comm="syz.2.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f855bbdc629 code=0x7ffc0000 [ 47.178012][ T28] audit: type=1326 audit(1771625892.573:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4365 comm="syz.2.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855bbdc629 code=0x7ffc0000 [ 47.201410][ T28] audit: type=1326 audit(1771625892.573:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4365 comm="syz.2.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f855bbdc629 code=0x7ffc0000 [ 47.226479][ T28] audit: type=1326 audit(1771625892.593:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4365 comm="syz.2.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855bbdc629 code=0x7ffc0000 [ 47.251177][ T28] audit: type=1326 audit(1771625892.593:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4365 comm="syz.2.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855bbdc629 code=0x7ffc0000 [ 47.971990][ T4387] syz_tun: entered allmulticast mode [ 48.000313][ T117] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.007607][ T117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.028867][ T117] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.036051][ T117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.063622][ T4383] syz_tun: left allmulticast mode [ 48.087680][ T4211] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.111865][ T4405] loop4: detected capacity change from 0 to 128 [ 48.152171][ T4413] netlink: 24 bytes leftover after parsing attributes in process `syz.3.286'. [ 48.292611][ T4211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.568300][ T4211] veth0_vlan: entered promiscuous mode [ 48.576733][ T4211] veth1_vlan: entered promiscuous mode [ 48.605501][ T4211] veth0_macvtap: entered promiscuous mode [ 48.613327][ T4211] veth1_macvtap: entered promiscuous mode [ 48.632578][ T4211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.657125][ T4211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.683768][ T117] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.713764][ T117] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.729212][ T1365] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.738405][ T1365] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.297536][ T4508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.297'. [ 49.325571][ T4508] netlink: 12 bytes leftover after parsing attributes in process `syz.2.297'. [ 49.402202][ T4508] netlink: 3 bytes leftover after parsing attributes in process `syz.2.297'. [ 49.419142][ T4421] kexec: Could not allocate control_code_buffer [ 49.516509][ T4523] loop1: detected capacity change from 0 to 512 [ 49.530260][ T4523] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.302: inode has both inline data and extents flags [ 49.543920][ T4523] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 49.544185][ T4523] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.302: couldn't read orphan inode 15 (err -117) [ 49.553363][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 49.553396][ C1] EXT4-fs (loop1): initial error at time 1771625895: ext4_orphan_get:1391: inode 15 [ 49.553442][ C1] EXT4-fs (loop1): last error at time 1771625895: ext4_orphan_get:1391: inode 15 [ 49.591355][ T4523] loop1: lost filesystem error report for type 5 error -117 [ 49.592737][ T4523] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.592976][ T4527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.642983][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.654450][ T4527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.692067][ T4531] loop1: detected capacity change from 0 to 512 [ 49.701268][ T4531] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 49.714520][ T4531] EXT4-fs (loop1): 1 truncate cleaned up [ 49.720934][ T4531] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.829402][ T4540] loop2: detected capacity change from 0 to 512 [ 49.843325][ T4541] syz_tun: entered allmulticast mode [ 49.881498][ T4538] syz_tun: left allmulticast mode [ 49.904630][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.924883][ T4540] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.952017][ T4552] netlink: 4 bytes leftover after parsing attributes in process `syz.3.311'. [ 49.954123][ T4540] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.986220][ T4552] netlink: 4 bytes leftover after parsing attributes in process `syz.3.311'. [ 50.039758][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.059762][ T4560] netlink: 8 bytes leftover after parsing attributes in process `syz.6.314'. [ 50.198099][ T4574] loop2: detected capacity change from 0 to 128 [ 50.285069][ T4574] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 54) [ 50.296026][ T4574] FAT-fs (loop2): Filesystem has been set read-only [ 50.329249][ T4574] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 54) [ 50.340098][ T4580] loop4: detected capacity change from 0 to 256 [ 50.558332][ T4591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.327'. [ 50.683439][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 50.683457][ T28] audit: type=1400 audit(1771625896.173:335): avc: denied { accept } for pid=4597 comm="syz.4.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 50.738624][ T28] audit: type=1400 audit(1771625896.223:336): avc: denied { write } for pid=4600 comm="syz.4.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.160719][ T28] audit: type=1400 audit(1771625896.643:337): avc: denied { name_bind } for pid=4615 comm="syz.1.337" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 51.364631][ T4625] syzkaller1: entered promiscuous mode [ 51.372998][ T4625] syzkaller1: entered allmulticast mode [ 51.531933][ T4633] af_packet: tpacket_rcv: packet too big, clamped from 18 to 4294967286. macoff=82 [ 51.554009][ T117] batadv1: left promiscuous mode [ 51.586475][ T4635] loop6: detected capacity change from 0 to 2048 [ 51.605182][ T4635] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.627971][ T28] audit: type=1326 audit(1771625897.113:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4603 comm="syz.4.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09d226c629 code=0x7fc00000 [ 51.720921][ T4646] loop3: detected capacity change from 0 to 512 [ 51.727969][ T4646] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 51.744496][ T4646] EXT4-fs (loop3): 1 truncate cleaned up [ 51.754864][ T4646] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.771900][ T28] audit: type=1400 audit(1771625897.253:339): avc: denied { add_name } for pid=4645 comm="syz.3.349" name="memory.events.local" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 52.125049][ T4211] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.144086][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.232314][ T4660] loop3: detected capacity change from 0 to 128 [ 52.274877][ T4660] vfat: Unknown parameter 'ÿÿÿÿ01777777777777777777777' [ 52.598011][ T28] audit: type=1400 audit(1771625898.083:340): avc: denied { ioctl } for pid=4695 comm="syz.3.369" path="socket:[9481]" dev="sockfs" ino=9481 ioctlcmd=0x8917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 52.663254][ T28] audit: type=1400 audit(1771625898.083:341): avc: denied { create } for pid=4695 comm="syz.3.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 52.737995][ T28] audit: type=1400 audit(1771625898.113:342): avc: denied { read } for pid=4695 comm="syz.3.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 52.798300][ T28] audit: type=1400 audit(1771625898.173:343): avc: denied { setopt } for pid=4695 comm="syz.3.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 52.818230][ T28] audit: type=1400 audit(1771625898.173:344): avc: denied { write } for pid=4695 comm="syz.3.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 52.844575][ T4698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.370'. [ 52.863666][ T4708] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 52.976327][ T4716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.378'. [ 52.976392][ T4714] netlink: 'syz.6.377': attribute type 1 has an invalid length. [ 52.993657][ T4714] netlink: 'syz.6.377': attribute type 4 has an invalid length. [ 53.161960][ T4728] __nla_validate_parse: 2 callbacks suppressed [ 53.161980][ T4728] netlink: 24 bytes leftover after parsing attributes in process `syz.6.383'. [ 53.171150][ T4730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.384'. [ 53.228869][ T4737] loop6: detected capacity change from 0 to 512 [ 53.246958][ T4737] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 53.263241][ T4741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.389'. [ 53.272685][ T4741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.389'. [ 53.281541][ T4737] EXT4-fs (loop6): 1 truncate cleaned up [ 53.281957][ T4737] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.363679][ T4749] syzkaller0: entered allmulticast mode [ 53.384014][ T4749] syzkaller0: entered promiscuous mode [ 53.392133][ T4749] syzkaller0 (unregistering): left promiscuous mode [ 53.399709][ T4749] syzkaller0 (unregistering): left allmulticast mode [ 53.515620][ T4758] loop4: detected capacity change from 0 to 128 [ 53.529677][ T4211] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.602385][ T4764] netlink: 4 bytes leftover after parsing attributes in process `syz.6.396'. [ 53.632714][ T4764] netlink: 12 bytes leftover after parsing attributes in process `syz.6.396'. [ 53.771716][ T4772] capability: warning: `syz.4.400' uses 32-bit capabilities (legacy support in use) [ 53.823296][ T4772] program syz.4.400 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 53.943553][ T4777] netlink: 4 bytes leftover after parsing attributes in process `syz.4.402'. [ 53.961396][ T4777] netlink: 12 bytes leftover after parsing attributes in process `syz.4.402'. [ 54.185496][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 54.192637][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 54.200452][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 54.207527][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 54.215206][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 54.221621][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 54.228382][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 54.242813][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 54.254562][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 54.275716][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 55.067557][ T4823] loop6: detected capacity change from 0 to 512 [ 55.077377][ T4823] EXT4-fs: Ignoring removed nobh option [ 55.091740][ T4823] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 55.105112][ T4823] EXT4-fs (loop6): 1 truncate cleaned up [ 55.114764][ T4823] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.790618][ T4852] netem: incorrect ge model size [ 55.799970][ T4852] netem: change failed [ 56.145378][ T4211] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.338638][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 56.338656][ T28] audit: type=1400 audit(1771625901.823:360): avc: denied { getopt } for pid=4863 comm="syz.4.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 56.456717][ T4875] loop6: detected capacity change from 0 to 512 [ 56.637103][ T4875] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 56.683714][ T4875] EXT4-fs (loop6): 1 truncate cleaned up [ 56.711708][ T4875] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.741977][ T4881] loop1: detected capacity change from 0 to 1024 [ 56.798941][ T4881] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.861350][ T28] audit: type=1400 audit(1771625902.343:361): avc: denied { create } for pid=4887 comm="syz.4.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 56.885092][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.902770][ T28] audit: type=1400 audit(1771625902.373:362): avc: denied { bind } for pid=4887 comm="syz.4.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 56.994589][ T4211] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.046395][ T4892] netlink: 'syz.6.444': attribute type 4 has an invalid length. [ 57.073365][ T4892] netlink: 'syz.6.444': attribute type 4 has an invalid length. [ 57.176892][ T4892] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.184278][ T4892] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.206342][ T4900] xt_l2tp: v2 tid > 0xffff: 37482740 [ 57.264188][ T4892] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.317212][ T4892] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.457677][ T12] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.493199][ T12] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.522813][ T12] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.555025][ T28] audit: type=1400 audit(1771625903.033:363): avc: denied { write } for pid=4919 comm="syz.3.454" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 57.581999][ T12] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.613053][ T28] audit: type=1400 audit(1771625903.033:364): avc: denied { ioctl } for pid=4919 comm="syz.3.454" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 57.653850][ T28] audit: type=1400 audit(1771625903.143:365): avc: denied { setopt } for pid=4926 comm="syz.3.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 57.721477][ T4936] netlink: 24 bytes leftover after parsing attributes in process `syz.4.460'. [ 57.790098][ T4938] -1: renamed from syzkaller0 [ 57.825671][ T4947] loop3: detected capacity change from 0 to 1024 [ 57.851785][ T4947] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.903787][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.926712][ T28] audit: type=1400 audit(1771625903.413:366): avc: denied { create } for pid=4956 comm="syz.1.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 57.986229][ T28] audit: type=1400 audit(1771625903.443:367): avc: denied { bind } for pid=4956 comm="syz.1.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 58.115939][ T4977] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 58.131841][ T4977] syzkaller0: Linktype set failed because interface is up [ 58.304202][ T5002] loop3: detected capacity change from 0 to 1024 [ 58.314689][ T5002] EXT4-fs (loop3): orphan cleanup on readonly fs [ 58.325654][ T5002] EXT4-fs (loop3): 1 truncate cleaned up [ 58.339335][ T5002] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 58.375875][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.473476][ T5027] process 'syz.3.476' launched './file1' with NULL argv: empty string added [ 58.522758][ T28] audit: type=1400 audit(1771625904.003:368): avc: denied { execute_no_trans } for pid=5026 comm="syz.3.476" path="/109/file1" dev="tmpfs" ino=583 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 58.555523][ T5037] netlink: 24 bytes leftover after parsing attributes in process `syz.4.480'. [ 58.845768][ T12] syzkaller0: tun_net_xmit 76 [ 58.850662][ T12] syzkaller0: tun_net_xmit 48 [ 58.873034][ T10] syzkaller0: tun_net_xmit 76 [ 59.171003][ T28] audit: type=1400 audit(1771625904.653:369): avc: denied { getattr } for pid=5107 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=514 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 59.949525][ T5183] netlink: 'syz.1.490': attribute type 4 has an invalid length. [ 59.972735][ T5183] netlink: 'syz.1.490': attribute type 4 has an invalid length. [ 60.097755][ T5200] loop4: detected capacity change from 0 to 128 [ 60.419978][ T5231] hub 3-0:1.0: USB hub found [ 60.435348][ T5231] hub 3-0:1.0: 8 ports detected [ 60.516896][ T5237] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.555494][ T5237] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.567967][ T5243] netlink: 4 bytes leftover after parsing attributes in process `syz.3.505'. [ 60.590258][ T5243] netlink: 12 bytes leftover after parsing attributes in process `syz.3.505'. [ 60.702189][ T5249] -1: renamed from syzkaller0 [ 60.786815][ T5253] netlink: 24 bytes leftover after parsing attributes in process `syz.3.510'. [ 61.116550][ T5255] loop3: detected capacity change from 0 to 32768 [ 61.193578][ T3294] loop3: p1 p3 < p5 p6 > [ 61.197940][ T3294] loop3: partition table partially beyond EOD, truncated [ 61.237496][ T5255] loop3: p1 p3 < p5 p6 > [ 61.241898][ T5255] loop3: partition table partially beyond EOD, truncated [ 61.805280][ T5284] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 61.811958][ T5284] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 61.833687][ T5284] vhci_hcd vhci_hcd.0: Device attached [ 61.857179][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 61.857226][ T28] audit: type=1400 audit(1771625907.343:377): avc: denied { allowed } for pid=5287 comm="syz.4.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 61.890924][ T5284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.935568][ T5284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.964104][ T5285] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 61.972788][ T1686] vhci_hcd vhci_hcd.6: stop threads [ 61.981134][ T1686] vhci_hcd vhci_hcd.6: release socket [ 62.002278][ T1686] vhci_hcd vhci_hcd.6: disconnect device [ 62.094100][ T5288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.137380][ T5288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.172957][ T28] audit: type=1400 audit(1771625907.653:378): avc: denied { connect } for pid=5292 comm="syz.2.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 62.242153][ T5297] netlink: 12 bytes leftover after parsing attributes in process `syz.3.520'. [ 62.320907][ T5303] loop1: detected capacity change from 0 to 512 [ 62.331286][ T5303] EXT4-fs: test_dummy_encryption option not supported [ 62.531154][ T28] audit: type=1400 audit(1771625908.013:379): avc: denied { create } for pid=5318 comm="syz.6.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 62.570819][ T28] audit: type=1400 audit(1771625908.013:380): avc: denied { bind } for pid=5318 comm="syz.6.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 62.590851][ T28] audit: type=1400 audit(1771625908.013:381): avc: denied { connect } for pid=5318 comm="syz.6.531" laddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 62.612170][ T28] audit: type=1400 audit(1771625908.013:382): avc: denied { write } for pid=5318 comm="syz.6.531" laddr=224.0.0.1 faddr=172.20.20.17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 62.639364][ T5317] loop1: detected capacity change from 0 to 128 [ 62.702385][ T28] audit: type=1400 audit(1771625908.183:383): avc: denied { write } for pid=5320 comm="syz.6.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 62.747937][ T5317] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 62.777685][ T5317] ext4 filesystem being mounted at /115/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 62.818260][ T3313] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 62.854196][ T28] audit: type=1400 audit(1771625908.343:384): avc: denied { watch watch_reads } for pid=5336 comm="syz.1.539" path="/116/file0" dev="tmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 63.188416][ T28] audit: type=1400 audit(1771625908.673:385): avc: denied { read } for pid=5340 comm="syz.4.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.234816][ T5349] ref_ctr increment failed for inode: 0x291 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff8881055ede80 [ 63.238168][ T28] audit: type=1326 audit(1771625908.723:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5310 comm="syz.3.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13525c629 code=0x7fc00000 [ 63.285002][ T5348] uprobe: syz.1.545:5348 failed to unregister, leaking uprobe [ 63.326395][ T5353] netlink: 12 bytes leftover after parsing attributes in process `syz.1.547'. [ 63.592774][ T5359] loop1: detected capacity change from 0 to 32768 [ 63.618199][ T5364] loop3: detected capacity change from 0 to 128 [ 63.647841][ T5359] loop1: p1 p3 < p5 p6 > [ 63.652212][ T5359] loop1: partition table partially beyond EOD, truncated [ 63.798019][ T5364] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 63.816458][ T5364] ext4 filesystem being mounted at /130/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 63.893967][ T3319] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 63.996781][ T5384] loop3: detected capacity change from 0 to 256 [ 64.022633][ T5384] FAT-fs (loop3): error, clusters badly computed (0 != 128) [ 64.046360][ T5384] FAT-fs (loop3): Filesystem has been set read-only [ 64.059495][ T5384] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 64.085414][ T5388] netlink: 'syz.6.561': attribute type 83 has an invalid length. [ 64.109642][ T3319] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 64.138143][ T3319] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 64.447946][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.486020][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.545877][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.595765][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.669124][ T12] bridge_slave_1: left allmulticast mode [ 64.682986][ T12] bridge_slave_1: left promiscuous mode [ 64.688749][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.702777][ T12] bridge_slave_0: left allmulticast mode [ 64.708684][ T12] bridge_slave_0: left promiscuous mode [ 64.725338][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.799456][ T5417] netlink: 'syz.2.567': attribute type 4 has an invalid length. [ 64.850311][ T5426] netlink: 'syz.2.567': attribute type 4 has an invalid length. [ 64.929240][ T5435] netlink: 12 bytes leftover after parsing attributes in process `syz.4.571'. [ 65.037524][ T5440] netlink: 28 bytes leftover after parsing attributes in process `syz.4.571'. [ 65.135163][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.145060][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.154494][ T12] bond0 (unregistering): Released all slaves [ 65.162386][ T12] bond1 (unregistering): (slave veth3): Releasing active interface [ 65.170362][ T12] batadv1: entered promiscuous mode [ 65.177207][ T12] bond1 (unregistering): (slave batadv1): Releasing active interface [ 65.186443][ T12] bond1 (unregistering): Released all slaves [ 65.247992][ T5432] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.255325][ T5432] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.316956][ T5432] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.328779][ T5432] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.399345][ T5437] 8021q: adding VLAN 0 to HW filter on device bond3 [ 65.407284][ T5437] bond2: (slave bond3): Enslaving as an active interface with an up link [ 65.428178][ T5440] 8021q: adding VLAN 0 to HW filter on device bond2 [ 65.478529][ T12] hsr_slave_0: left promiscuous mode [ 65.493216][ T12] hsr_slave_1: left promiscuous mode [ 65.511421][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.553893][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.561645][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.573826][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.596948][ T12] veth1_macvtap: left promiscuous mode [ 65.615569][ T12] veth0_macvtap: left promiscuous mode [ 65.638606][ T12] veth1_vlan: left promiscuous mode [ 65.649971][ T12] veth0_vlan: left promiscuous mode [ 65.784112][ T12] team0 (unregistering): Port device team_slave_1 removed [ 65.802389][ T12] team0 (unregistering): Port device team_slave_0 removed [ 65.851011][ T1365] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.863914][ T1365] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.894676][ T1365] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.905975][ T1365] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.218935][ T5412] chnl_net:caif_netlink_parms(): no params data found [ 66.379506][ T5412] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.395856][ T5412] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.409910][ T5412] bridge_slave_0: entered allmulticast mode [ 66.423287][ T5412] bridge_slave_0: entered promiscuous mode [ 66.437497][ T5412] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.444697][ T5412] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.451895][ T5412] bridge_slave_1: entered allmulticast mode [ 66.458802][ T5412] bridge_slave_1: entered promiscuous mode [ 66.478434][ T5412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.489035][ T5412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.523353][ T5412] team0: Port device team_slave_0 added [ 66.540772][ T5412] team0: Port device team_slave_1 added [ 66.553672][ T5525] netlink: 'syz.1.584': attribute type 4 has an invalid length. [ 66.587604][ T5412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.599585][ T5412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.627194][ T5412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.646306][ T5535] netlink: 'syz.1.584': attribute type 4 has an invalid length. [ 66.675331][ T5412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.682373][ T5412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.709405][ T5412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.795268][ T5412] hsr_slave_0: entered promiscuous mode [ 66.833555][ T5412] hsr_slave_1: entered promiscuous mode [ 66.852383][ T5412] debugfs: 'hsr0' already exists in 'hsr' [ 66.875438][ T5412] Cannot create hsr debugfs directory [ 67.031974][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 67.031991][ T28] audit: type=1326 audit(1771625912.513:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5584 comm="syz.1.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4b26dc629 code=0x7ffc0000 [ 67.110667][ T28] audit: type=1326 audit(1771625912.543:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5584 comm="syz.1.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4b26dc629 code=0x7ffc0000 [ 67.135559][ T5593] loop1: detected capacity change from 0 to 512 [ 67.142427][ T5593] EXT4-fs: Ignoring removed nobh option [ 67.158505][ T28] audit: type=1326 audit(1771625912.543:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5584 comm="syz.1.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fb4b26dc629 code=0x7ffc0000 [ 67.194785][ T5593] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 67.292095][ T5593] EXT4-fs (loop1): 1 truncate cleaned up [ 67.312626][ T28] audit: type=1326 audit(1771625912.553:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5584 comm="syz.1.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4b26dc629 code=0x7ffc0000 [ 67.337603][ T28] audit: type=1326 audit(1771625912.553:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5584 comm="syz.1.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4b26dc629 code=0x7ffc0000 [ 67.361359][ T28] audit: type=1326 audit(1771625912.553:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5584 comm="syz.1.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fb4b26dc629 code=0x7ffc0000 [ 67.384759][ T28] audit: type=1326 audit(1771625912.553:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5584 comm="syz.1.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4b26dc629 code=0x7ffc0000 [ 67.408320][ T28] audit: type=1326 audit(1771625912.553:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5587 comm="syz.1.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb4b269cece code=0x7ffc0000 [ 67.435982][ T5593] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.450555][ T28] audit: type=1326 audit(1771625912.553:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5584 comm="syz.1.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4b26dc629 code=0x7ffc0000 [ 67.529505][ T28] audit: type=1326 audit(1771625912.563:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5584 comm="syz.1.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fb4b26dc629 code=0x7ffc0000 [ 67.611070][ T5412] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.641898][ T5412] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.661158][ T5412] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.677766][ T5412] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.808715][ T5412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.845953][ T5412] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.868118][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.875487][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.917818][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.924937][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.974143][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.027690][ T5412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.168990][ T5412] veth0_vlan: entered promiscuous mode [ 68.185916][ T5412] veth1_vlan: entered promiscuous mode [ 68.230720][ T5412] veth0_macvtap: entered promiscuous mode [ 68.245105][ T5412] veth1_macvtap: entered promiscuous mode [ 68.265858][ T5412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.283164][ T5412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.305052][ T30] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.320931][ T30] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.339993][ T30] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.362481][ T30] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.531636][ T5724] netlink: 24 bytes leftover after parsing attributes in process `syz.1.598'. [ 68.680702][ T5717] loop4: detected capacity change from 0 to 128 [ 68.901280][ T5717] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 69.013534][ T5717] ext4 filesystem being mounted at /111/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 69.080598][ T5766] loop3: detected capacity change from 0 to 512 [ 69.139003][ T5771] loop1: detected capacity change from 0 to 2048 [ 69.148888][ T5766] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.193074][ T5766] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.207921][ T5771] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.230833][ T3322] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 69.316166][ T5412] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.363951][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.388818][ T5787] netlink: 12 bytes leftover after parsing attributes in process `syz.3.618'. [ 70.146389][ T5813] loop3: detected capacity change from 0 to 512 [ 70.181463][ T5813] EXT4-fs: Ignoring removed bh option [ 70.243121][ T5813] EXT4-fs: inline encryption not supported [ 70.299639][ T5813] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 70.422385][ T5813] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 70.512149][ T5826] netlink: 24 bytes leftover after parsing attributes in process `syz.2.630'. [ 70.521953][ T5813] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.625: bg 0: block 248: padding at end of block bitmap is not set [ 70.556942][ T5813] loop3: lost filesystem error report for type 5 error -117 [ 70.557335][ T5813] EXT4-fs error (device loop3): ext4_acquire_dquot:7003: comm syz.3.625: Failed to acquire dquot type 1 [ 70.564713][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 70.564736][ C1] EXT4-fs (loop3): last error at time 1771625916: ext4_validate_block_bitmap:441 [ 70.607976][ T5813] loop3: lost filesystem error report for type 5 error -117 [ 70.609442][ T5813] EXT4-fs (loop3): 1 truncate cleaned up [ 70.634502][ T5813] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 70.763401][ T5835] loop4: detected capacity change from 0 to 512 [ 70.816268][ T5835] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 70.824592][ T5835] EXT4-fs (loop4): orphan cleanup on readonly fs [ 70.832503][ T5835] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #16: comm syz.4.634: corrupted inode contents [ 70.845760][ T5835] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 70.845979][ T5835] EXT4-fs (loop4): Remounting filesystem read-only [ 70.855128][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 70.855151][ C0] EXT4-fs (loop4): initial error at time 1771625916: ext4_do_update_inode:5569: inode 16 [ 70.855180][ C0] EXT4-fs (loop4): last error at time 1771625916: ext4_do_update_inode:5569: inode 16 [ 70.888827][ T5835] EXT4-fs (loop4): 1 truncate cleaned up [ 70.893323][ T5813] syz.3.625 (5813) used greatest stack depth: 9160 bytes left [ 70.895000][ T1365] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 70.914638][ T1365] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 70.926002][ T1365] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 70.937360][ T5835] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 70.996223][ T5412] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 71.116626][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.742837][ T5873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.649'. [ 71.965776][ T5844] net_ratelimit: 22 callbacks suppressed [ 71.965800][ T5844] Set syz1 is full, maxelem 65536 reached [ 72.095397][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 72.095415][ T28] audit: type=1400 audit(1771625917.583:427): avc: denied { append } for pid=5894 comm="syz.3.658" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 72.420249][ T5899] ================================================================== [ 72.428376][ T5899] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 72.435330][ T5899] [ 72.437679][ T5899] read-write to 0xffff88810e1c9eac of 4 bytes by task 5893 on cpu 0: [ 72.445773][ T5899] fifo_open+0x86/0x5d0 [ 72.449963][ T5899] do_dentry_open+0x4ca/0xa90 [ 72.454672][ T5899] vfs_open+0x37/0x1e0 [ 72.458781][ T5899] path_openat+0x1b70/0x2050 [ 72.463407][ T5899] do_file_open+0x16c/0x290 [ 72.467943][ T5899] do_sys_openat2+0x94/0x130 [ 72.472563][ T5899] __x64_sys_open+0xe6/0x110 [ 72.477172][ T5899] x64_sys_call+0x14b9/0x3020 [ 72.481875][ T5899] do_syscall_64+0x12c/0x370 [ 72.486533][ T5899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.492532][ T5899] [ 72.494867][ T5899] read to 0xffff88810e1c9eac of 4 bytes by task 5899 on cpu 1: [ 72.502418][ T5899] wait_for_partner+0xd5/0x1e0 [ 72.507195][ T5899] fifo_open+0x4b1/0x5d0 [ 72.511456][ T5899] do_dentry_open+0x4ca/0xa90 [ 72.516330][ T5899] vfs_open+0x37/0x1e0 [ 72.520426][ T5899] path_openat+0x1b70/0x2050 [ 72.525142][ T5899] do_file_open+0x16c/0x290 [ 72.529672][ T5899] do_sys_openat2+0x94/0x130 [ 72.534312][ T5899] __se_sys_openat2+0x193/0x1f0 [ 72.539179][ T5899] __x64_sys_openat2+0x55/0x70 [ 72.543969][ T5899] x64_sys_call+0x2170/0x3020 [ 72.548670][ T5899] do_syscall_64+0x12c/0x370 [ 72.553294][ T5899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.559200][ T5899] [ 72.561545][ T5899] value changed: 0x00000001 -> 0x00000002 [ 72.567286][ T5899] [ 72.569619][ T5899] Reported by Kernel Concurrency Sanitizer on: [ 72.575778][ T5899] CPU: 1 UID: 0 PID: 5899 Comm: syz.4.656 Not tainted syzkaller #0 PREEMPT(full) [ 72.585010][ T5899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 72.595079][ T5899] ================================================================== [ 72.846875][ T5900] pim6reg: entered allmulticast mode [ 72.876258][ T5900] pim6reg: left allmulticast mode [ 72.909109][ T28] audit: type=1400 audit(1771625918.323:428): avc: denied { setopt } for pid=5898 comm="syz.3.660" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1