last executing test programs: 1.560240645s ago: executing program 4 (id=640): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x81) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x240880c0, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast1}, 0x1c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x25, &(0x7f0000000000)={0x1}) 1.079037645s ago: executing program 1 (id=649): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x25}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x14, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xe8}}, 0x0) 1.056652866s ago: executing program 0 (id=650): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x200000000000003, 0x106) setsockopt$sock_attach_bpf(r2, 0x0, 0x16, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r3, 0x10000}, 0x50) sendmsg(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)="4c0d55f4d2629b105f8339f78cb2089fc68043acf3ff09a2d1a268e4771699f1b3aafae4253e07407721ada6aa9292daa2933b920554f6290281221ff67a83506081c49bdb98af0bd8f72ee4b6cf35e4b969ce5b0c3535301aea259fbffe8175da96129f466ab5739c33010c4191bdc8448579bc6b6e451f2d233dbc1574cf7ab87adca24082a01e2f7ef5dd1bf179e0dd4dca0392fdcad78aca37eb", 0x9c}, {0x0}], 0x2, &(0x7f0000000840)=[{0xe0, 0x119, 0x2, "dabc1a0519c7aa503dc62baa3e4aae80745006c79a79aba2644808c49da4256b98a6f4e3a0885bf524b18347a77da5f3876d03a62926a6ac7ed93a62bbd2a51983b34a6396c959b8a547dbe0a7716421cc24efa2cc96b14d9ff6196ea6fde9abf8222de6348052b08af20eb82d1298651cbc3b0008f74ddc7df68ace305e3c131599b9633e1e064ef245b8919184ad401deda3613cc96765a29c96227e5d5fe1eee995e8185df748c9ed4e62766b87aefed8554ad0d736534544eafd326b077cc9cca263949ad9a73a22"}, {0x80, 0x114, 0x4, "c61828643b243e742748eb937110f47352015a766379e7aed58401ea41d35d12d4071846939e8ab326c0c466f723348dd38c7f7b1f83295b8769daec67c47c3d372237133f2f72e53042d62288aeb213b283be514641a1e8fe9217811fbcdde323faed80a189b5b32a0a2b6e5201b0"}, {0x80, 0x10a, 0xb, "9cb9c10f1e57c6bd1136150c390c31851fc396d0d2836819a64ba6a059dfa65aafbc4ccbc4bded32470b228623e6012479f80e043d7fd4abf60b7c9794a3d4202ede910335ef4f3e719b4ca05c2e4f9ec244dda28de2e99e8aeaff602d4003e7532916829323165c8b48f9e3f9efd67c"}, {0x110, 0x10c, 0x80000000, "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"}, {0xc0, 0x88, 0xd08e, "325fb793e50f427fc22f09071b1c1da11b60ae5af1124441f076f77fbf962c183d39259a73a8864123cf6260027c99c9153c77eac3d658ca46dc6f635fdaf9858ec746f0f891ee91ab6ec8059e83c260900f06feba125b79794ccb9434089bc646e4e1d38b7ea51446ef50775f9b70a6bea612e79b10ab84e8863208d02a3b50c00dc22b24630b81df2f5d9485ea64d3850ea766d03fb0c576093b9f7a7c0c82aecd124a6f5d38a78812701244c2"}], 0x3b0}, 0x40000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x26e1, 0x0) close(r5) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f00000001c0), 0x4) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x4001}, 0x80, &(0x7f0000002800)=[{&(0x7f00000017c0)="fa", 0x1}, {&(0x7f0000001800)="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", 0xf20}], 0x2}, 0x4801) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)="d800000019008111e0020f060d8107040a60000000020000001455a12a00090008000699e3ffffff14000500fe80817806000567b8b7b94002000009080016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237e09000000b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b7b4338c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000640)={r1, 0x0, &(0x7f0000000540)=""/200}, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x4, 0x3}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r0}, 0x8) socket$kcm(0x10, 0x3, 0x10) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[], &(0x7f0000000540)=""/232, 0x32, 0xe8, 0x1}, 0x28) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000500)}], 0x1}, 0x40000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, 0x0, &(0x7f0000000140)}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0xb}, 0x8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x3ff, 0x80, 0x7ff, 0x200, 0x1, 0x5, '\x00', 0x0, r9, 0x5, 0x5, 0x3, 0xf}, 0x50) 1.007277788s ago: executing program 1 (id=652): bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x13}, @loopback}}}], 0x20}, 0x0) 1.006854928s ago: executing program 1 (id=654): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x2c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 992.417168ms ago: executing program 1 (id=656): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 975.517979ms ago: executing program 1 (id=657): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPGRP(r0, 0x5410, 0x0) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f00000000c0)='./sys/bus/pci/rescan\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000005c0), 0x0) write(r0, &(0x7f0000000300)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000b00)=ANY=[@ANYBLOB="02000000010006000000000004000000000000000800", @ANYRES32, @ANYBLOB='\b\x00\a\x00', @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="10000200000000"], 0x3c, 0x3) write(r4, &(0x7f0000000300)='1', 0x1) 869.565284ms ago: executing program 0 (id=658): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d55906000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd8000000000000080231c61ccd106cb937b450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9ccd5788029901e5a79d8b9990ace8f74087f25ad50c4608800"/686], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xb, 0x0, &(0x7f0000000080)="05804ab382844306d758e6", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000002c0)=ANY=[], 0x20) 842.192565ms ago: executing program 0 (id=659): socket$nl_generic(0x10, 0x3, 0x10) r0 = memfd_create(&(0x7f0000000800)='\xff\x00l\x1e\xa00x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0xffffffff}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x7}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c820}, 0x40) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 647.777143ms ago: executing program 4 (id=663): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0xffffffff}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 475.05788ms ago: executing program 0 (id=665): r0 = syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50b, &(0x7f0000000440)="$eJzs3M9vVNUeAPDvnXZoC49HH49HQh/vvQLP2JjYQkFh4QYTExeaGHEhy6YdSGUAQ7sQ0siQGFyTuDcujTtN3OrSuPIPwIULE0NClA1gYjLmztw7nc6PzrTW1rafTzJwzp17z7nfuefMnHtP7w1g1xpP/0ki/hYR9yPiQD27coXx+n9PHi3NPn20NBuVavXCz0ltvcdpPpNvty/LTBQiCh8kLQXWLdy8dWWmXC7diEotP7V49d2phZu3np+/OnO5dLl0bfrcuTOnT519cfqFFWVHxHDPoDrUl8b1eOz960ePvHrx3uuzg62FNcfRVb7VL5Weq0b+2XbxTHN5O8D+pnTSHtftTd0Z+jacNcNi2v+XyscvbvUOAZumWq1Wh7q/Xam2utO2BNi2ktjqPQC2Rv5Dn57/5q/6kuJmDD+23MPz9ROgx4+WqrdjcPZJI/7BKGTrFFvOb1OrjJnWZDwi3q78+nH6itWuQ/ywQRUCALve1+ezYWASLeO/QhxuWu/v2RzKaET8IyIORsQ/I+JQRPwrYsW6KyQR1VXqP9S6oFH/F9ksQuHBemPrRzr+eymb28pfWb35KqMDWW5/RD5gLp3MPpOJKA5dmi+XTnUpf0+P+pvHf+krrT8fC2b78WCwZbA5N7M4s75o2z28EzE22Bp/MpgeuHwaJ4mIIxExtoZyR5vS8899erSRaTmt6B1/TbXDlN6GzJ9VP4l4tn78K9GIf2TFJGLSPD9ZaJufnBqOcunkVNoKTnbcyW+/u/tGt/p7xv/lj62bvHL2qwt/PPBMevz3NrX/yOdvl+MfTSKSxnztQkR1YG113P3+w1q54yfa31tv+9+TvFVL5/3rvZnFxRunIvYkr7Uvn17eNs/n66fxT5zo3P8PZtukn8S/IyJtxP+JiP9GDOT7fiwijkdEh9Aavnn5/+90e6/P9v+nSeOf6/j9l2TtoHb8l+fr+0zk5adLBq4cu/90rPPEfRb/gdWP/5laaiJb0vn7L0mav1v63dMN+RABAADgL64Qtb/9L0w20oXC5GT9GtCh2FsoX19Y/F9EXJur3yMwGsXCpflyKb8gNxrFJL/+OdqUn27Jn86uG380MFLLT85eL89tdfCwy+2r9fmkrf+nflrjdV5gG9pB96EBa9Sr/x++t0k7Amw6v/+wezX1/25Ptqj4SxnYmfz+w+7Vqf/fjs9WvXfBdwZsf1V9GXa11ft/7+dtAtvXYLzZSNdue+54ty2wE3X//XdmADtY75vkh9Z87/9yojrU+a3h6PDEgOF1VdEzMdKhri1JpCOrDSywGBH9rTyyniryIWD3JzwU1lbgULS/NRCrbZV0fo5DRFS6bpV+Kj335/Lhfht/6UbytP6gzB4B5s9E2ehm8/lyPy32ebi7JH7rt/k53wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHaU3wMAAP//hKnQPw==") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x0, 0x0}, 0x10) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x200, 0x22) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r4, 0x421, 0x70bd2f, 0x25dfdbfe}, 0x14}}, 0x400d4) sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r4, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x6a}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x20004880) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x13, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x4}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaa86dd6000000800283afffe800000000000000000000000c2850000aaff0200000000000000000000000000018700907800000000fe8000000080000000000000000000bb0e020000000000000000000000000001"], 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000140)=0xffff) 320.772966ms ago: executing program 2 (id=666): socket$netlink(0x10, 0x3, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe8c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x1, 0x9, 0x0, 'queue1\x00', 0x2}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = io_uring_setup(0xfd2, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0x2, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x80000002, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 320.481966ms ago: executing program 3 (id=667): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x100, 0x1c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 261.586138ms ago: executing program 4 (id=668): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000500), &(0x7f00000001c0)}, 0x20) gettid() perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xb0000}, 0x805, 0x0, 0x0, 0x0, 0x8, 0x400, 0x2}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x66, 0xc, 0x0, 0x0, 0x0, 0x9, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_config_ext={0x8000, 0xffffffffffff0001}, 0x8000, 0x20000003, 0x43a1bd76, 0x7, 0x9, 0x658, 0xddcb, 0x0, 0x0, 0x0, 0x400000000200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x200040c4) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x240040, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x4, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x4, @perf_bp={0x0, 0x3}, 0x8000, 0x6, 0x43a1bd76, 0x7, 0xd, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{0x0}], 0x1, &(0x7f0000000a00)=ANY=[@ANYBLOB="140000000000000001000000"], 0x18, 0x20000084}, 0x40881) socket$kcm(0x28, 0x1, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f926a3c92b", 0x14}], 0x1}, 0x0) 261.390078ms ago: executing program 3 (id=669): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xb, 0x0, &(0x7f0000000080)="05804ab382844306d758e6", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000002c0)=ANY=[], 0x20) 261.228898ms ago: executing program 2 (id=670): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000400000006000000450000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x200000, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000321, 0xe, 0x0, &(0x7f00000007c0)="63eced8e460100000001acb82304", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 261.085809ms ago: executing program 3 (id=671): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'veth0_virt_wifi\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r1, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f00000000c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x36}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x6bb, &(0x7f0000000040)={0x0, 0x3cb3, 0x1c080, 0xa, 0x20082f5}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 202.304441ms ago: executing program 3 (id=672): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x4c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 175.306553ms ago: executing program 3 (id=673): r0 = io_uring_setup(0x6bb, &(0x7f0000000040)={0x0, 0x3cb3, 0x1c080, 0xa, 0x20082f5}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 125.452704ms ago: executing program 2 (id=674): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 125.158484ms ago: executing program 2 (id=675): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000080)=0x23, 0x4) sendmmsg$inet6(r0, 0x0, 0x0, 0x4004081) 124.828344ms ago: executing program 3 (id=676): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x6, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000c000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000007b000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b703"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x336) close(r2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000280), 0x16}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000140)=""/237, 0x5a, 0xed, 0x1}, 0x28) perf_event_open$cgroup(0x0, r1, 0xd, 0xffffffffffffffff, 0x8) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={&(0x7f00000003c0)="f51f559c934242a941825ff2ab27f7a982883cc9f9f8cb8b459a5134f8a3aae2f140754b348d5087ee64e882d928b6969c41c4ae0c47b0e15d8794e9a6a3e420842dff5f16ba1ee0b47fc25ee8b52ee6d6625f58307a28820c338914764b51be3557a841378d88ae4ee1f150332ad6f8510733639b3d14b2e7fd57c5039cf555beed5c9f3ff9992b4a20a3a9af7164cf7f2b11c44b30720dbc5fc49cf88a77b4c6ba9980d891bfbed094974187840e67", &(0x7f0000000900)=""/170, &(0x7f0000000c40), &(0x7f0000000a40), 0x80000001}, 0x38) mkdirat$cgroup(r3, &(0x7f0000000b80)='syz0\x00', 0x1ff) 103.084155ms ago: executing program 4 (id=677): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x48, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 87.670826ms ago: executing program 2 (id=678): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) socket$kcm(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 86.636226ms ago: executing program 1 (id=679): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xe8}}, 0x0) 71.399917ms ago: executing program 4 (id=680): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x100, 0x1c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 46.281878ms ago: executing program 0 (id=681): socket$netlink(0x10, 0x3, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe8c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x1, 0x9, 0x0, 'queue1\x00', 0x2}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = io_uring_setup(0xfd2, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0x2, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x80000002, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 0s ago: executing program 4 (id=682): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) kernel console output (not intermixed with test programs): t=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.741968][ T29] audit: type=1400 audit(1789683641.012:99): avc: denied { noatsecure } for pid=3163 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.742298][ T29] audit: type=1400 audit(1789683641.012:100): avc: denied { write } for pid=3163 comm="sh" path="pipe:[1648]" dev="pipefs" ino=1648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 14.742326][ T29] audit: type=1400 audit(1789683641.012:101): avc: denied { rlimitinh } for pid=3163 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.742349][ T29] audit: type=1400 audit(1789683641.012:102): avc: denied { siginh } for pid=3163 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.109067][ T29] audit: type=1400 audit(1789683645.382:103): avc: denied { search } for pid=3178 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.109100][ T29] audit: type=1400 audit(1789683645.382:104): avc: denied { search } for pid=3178 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.535991][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 19.536006][ T29] audit: type=1400 audit(1789683645.812:114): avc: denied { write } for pid=3192 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.546579][ T29] audit: type=1400 audit(1789683645.822:115): avc: denied { write } for pid=3203 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.626957][ T29] audit: type=1400 audit(1789683645.902:116): avc: denied { write } for pid=3206 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.647352][ T29] audit: type=1400 audit(1789683645.912:117): avc: denied { write } for pid=3217 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.718310][ T29] audit: type=1400 audit(1789683645.992:118): avc: denied { write } for pid=3221 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.728906][ T29] audit: type=1400 audit(1789683646.002:119): avc: denied { write } for pid=3232 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.023055][ T29] audit: type=1400 audit(1789683646.292:120): avc: denied { write } for pid=3235 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.052275][ T29] audit: type=1400 audit(1789683646.322:121): avc: denied { write } for pid=3246 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.370422][ T29] audit: type=1400 audit(1789683646.642:122): avc: denied { write } for pid=3250 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.402287][ T29] audit: type=1400 audit(1789683646.672:123): avc: denied { write } for pid=3261 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.202' (ED25519) to the list of known hosts. [ 22.620490][ T3281] cgroup: Unknown subsys name 'net' [ 22.735940][ T3281] cgroup: Unknown subsys name 'cpuset' [ 22.736509][ T3281] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 22.945007][ T3287] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.966959][ T3281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.316160][ T3295] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.316201][ T3295] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.316335][ T3295] bridge_slave_0: entered allmulticast mode [ 24.316999][ T3295] bridge_slave_0: entered promiscuous mode [ 24.346075][ T3295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.346103][ T3295] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.346295][ T3295] bridge_slave_1: entered allmulticast mode [ 24.346702][ T3295] bridge_slave_1: entered promiscuous mode [ 24.361119][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.361150][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.361202][ T3305] bridge_slave_0: entered allmulticast mode [ 24.361660][ T3305] bridge_slave_0: entered promiscuous mode [ 24.389712][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.389744][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.389797][ T3305] bridge_slave_1: entered allmulticast mode [ 24.390321][ T3305] bridge_slave_1: entered promiscuous mode [ 24.397645][ T3295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.418220][ T3295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.443057][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.444417][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.450711][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.450743][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.450800][ T3297] bridge_slave_0: entered allmulticast mode [ 24.451187][ T3297] bridge_slave_0: entered promiscuous mode [ 24.452644][ T3295] team0: Port device team_slave_0 added [ 24.453575][ T3295] team0: Port device team_slave_1 added [ 24.477012][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.477044][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.477094][ T3297] bridge_slave_1: entered allmulticast mode [ 24.477576][ T3297] bridge_slave_1: entered promiscuous mode [ 24.478716][ T3305] team0: Port device team_slave_0 added [ 24.479495][ T3305] team0: Port device team_slave_1 added [ 24.508635][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.508649][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.508708][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.511692][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.511767][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.511795][ T3295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.512001][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.512033][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.512085][ T3301] bridge_slave_0: entered allmulticast mode [ 24.512597][ T3301] bridge_slave_0: entered promiscuous mode [ 24.513787][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.513799][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.513903][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.526103][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.526116][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.526144][ T3295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.528867][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.528896][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.528946][ T3301] bridge_slave_1: entered allmulticast mode [ 24.529466][ T3301] bridge_slave_1: entered promiscuous mode [ 24.542329][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.544576][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.575212][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.576592][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.579009][ T3305] hsr_slave_0: entered promiscuous mode [ 24.579361][ T3305] hsr_slave_1: entered promiscuous mode [ 24.601948][ T3295] hsr_slave_0: entered promiscuous mode [ 24.602439][ T3295] hsr_slave_1: entered promiscuous mode [ 24.602667][ T3295] debugfs: 'hsr0' already exists in 'hsr' [ 24.602679][ T3295] Cannot create hsr debugfs directory [ 24.603524][ T3297] team0: Port device team_slave_0 added [ 24.603581][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.603610][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.603674][ T3303] bridge_slave_0: entered allmulticast mode [ 24.604299][ T3303] bridge_slave_0: entered promiscuous mode [ 24.611425][ T3297] team0: Port device team_slave_1 added [ 24.616384][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.616477][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.616527][ T3303] bridge_slave_1: entered allmulticast mode [ 24.617022][ T3303] bridge_slave_1: entered promiscuous mode [ 24.624150][ T3301] team0: Port device team_slave_0 added [ 24.625086][ T3301] team0: Port device team_slave_1 added [ 24.663385][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.663399][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.663457][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.663897][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.663908][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.663969][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.686588][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.686602][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.686631][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.687131][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.687141][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.687230][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.702696][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.703670][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.738658][ T3301] hsr_slave_0: entered promiscuous mode [ 24.738961][ T3301] hsr_slave_1: entered promiscuous mode [ 24.739269][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 24.739282][ T3301] Cannot create hsr debugfs directory [ 24.747579][ T3297] hsr_slave_0: entered promiscuous mode [ 24.747958][ T3297] hsr_slave_1: entered promiscuous mode [ 24.748243][ T3297] debugfs: 'hsr0' already exists in 'hsr' [ 24.748256][ T3297] Cannot create hsr debugfs directory [ 24.762007][ T3303] team0: Port device team_slave_0 added [ 24.787956][ T3303] team0: Port device team_slave_1 added [ 24.819600][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.819615][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.819686][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.820310][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.820321][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.820422][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.886272][ T3303] hsr_slave_0: entered promiscuous mode [ 24.886676][ T3303] hsr_slave_1: entered promiscuous mode [ 24.887004][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 24.887017][ T3303] Cannot create hsr debugfs directory [ 24.927476][ T3295] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 24.949652][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 24.977434][ T3295] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 24.993155][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 24.993719][ T3295] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 25.003450][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 25.020420][ T3295] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 25.036492][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 25.067685][ T3297] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 25.080173][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 25.095220][ T3295] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.095254][ T3295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.095361][ T3295] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.095459][ T3295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.104031][ T3297] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 25.108227][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 25.108713][ T3297] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 25.114170][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 25.116431][ T3305] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 25.125676][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 25.139621][ T3297] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 25.142047][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 25.143796][ T3305] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 25.148011][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 25.159903][ T3305] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 25.164414][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 25.171550][ T3305] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 25.197340][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 25.213332][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.239139][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.425426][ T3301] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 25.432517][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 25.444392][ T3301] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 25.452973][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 25.458576][ T3301] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 25.467697][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 25.477653][ T3301] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 25.480995][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 25.487430][ T3303] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 25.494659][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 25.503617][ T3303] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 25.508453][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 25.517503][ T3303] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 25.522165][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 25.529856][ T3295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.532803][ T3303] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 25.537092][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 25.600012][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.606352][ T3295] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.611685][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.611718][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.618138][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.634936][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.634969][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.646370][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.646406][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.647582][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.647610][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.671987][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.689624][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.704039][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.710833][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.719091][ T325] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.719133][ T325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.741376][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.741573][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.743082][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.743113][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.752809][ T325] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.752845][ T325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.834513][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.856190][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.867207][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.867236][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.889656][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.889692][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.973090][ T3295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.030596][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.073054][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.084797][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.135993][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.163761][ T3295] veth0_vlan: entered promiscuous mode [ 26.169586][ T3295] veth1_vlan: entered promiscuous mode [ 26.187288][ T3295] veth0_macvtap: entered promiscuous mode [ 26.193588][ T3295] veth1_macvtap: entered promiscuous mode [ 26.207239][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.216275][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.238024][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.238199][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.238388][ T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.238426][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.285021][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 26.285037][ T29] audit: type=1400 audit(1789683652.552:146): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/root/syzkaller.UY01oZ/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 26.292975][ T29] audit: type=1400 audit(1789683652.562:147): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 26.293004][ T29] audit: type=1400 audit(1789683652.562:148): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/root/syzkaller.UY01oZ/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 26.299660][ T29] audit: type=1400 audit(1789683652.572:149): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 26.299688][ T29] audit: type=1400 audit(1789683652.572:150): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/root/syzkaller.UY01oZ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 26.299828][ T29] audit: type=1400 audit(1789683652.572:151): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/root/syzkaller.UY01oZ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4398 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 26.307420][ T29] audit: type=1400 audit(1789683652.582:152): avc: denied { unmount } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 26.318716][ T3301] veth0_vlan: entered promiscuous mode [ 26.320872][ T29] audit: type=1400 audit(1789683652.592:153): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 26.320900][ T29] audit: type=1400 audit(1789683652.592:154): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="gadgetfs" ino=4412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 26.333988][ T3301] veth1_vlan: entered promiscuous mode [ 26.361224][ T3303] veth0_vlan: entered promiscuous mode [ 26.370847][ T3301] veth0_macvtap: entered promiscuous mode [ 26.375809][ T3301] veth1_macvtap: entered promiscuous mode [ 26.379503][ T3303] veth1_vlan: entered promiscuous mode [ 26.404847][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.446173][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.478259][ T3303] veth0_macvtap: entered promiscuous mode [ 26.483333][ T3303] veth1_macvtap: entered promiscuous mode [ 26.485369][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.485476][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.485580][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.485619][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.543099][ T3305] veth0_vlan: entered promiscuous mode [ 26.550404][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.556563][ T3295] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.559559][ T3305] veth1_vlan: entered promiscuous mode [ 26.561478][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.566280][ T3297] veth0_vlan: entered promiscuous mode [ 26.581855][ T3297] veth1_vlan: entered promiscuous mode [ 26.597425][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.597704][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.597861][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.623304][ T3305] veth0_macvtap: entered promiscuous mode [ 26.624423][ T3297] veth0_macvtap: entered promiscuous mode [ 26.637340][ T3305] veth1_macvtap: entered promiscuous mode [ 26.639280][ T3297] veth1_macvtap: entered promiscuous mode [ 26.640686][ T29] audit: type=1400 audit(1789683652.912:155): avc: denied { read write } for pid=3295 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 26.655949][ T114] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.669720][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.681610][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.688989][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.690073][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.738236][ T3504] loop0: detected capacity change from 0 to 1024 [ 26.795852][ T42] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.843720][ T42] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.924449][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.934486][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.943627][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.943994][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.944184][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.944428][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.361096][ T3513] Zero length message leads to an empty skb [ 27.496654][ T3519] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 28.044994][ T3525] syz.1.7 (3525) used greatest stack depth: 9888 bytes left [ 30.201873][ T3550] : renamed from bond_slave_0 (while UP) [ 30.747618][ T3552] : renamed from bond_slave_0 (while UP) [ 30.749044][ T3548] : renamed from bond_slave_0 (while UP) [ 31.767526][ T3592] : renamed from bond_slave_0 (while UP) [ 31.803621][ T3590] FAULT_INJECTION: forcing a failure. [ 31.803621][ T3590] name fail_futex, interval 1, probability 0, space 0, times 1 [ 31.803697][ T3590] CPU: 1 UID: 0 PID: 3590 Comm: syz.3.23 Not tainted syzkaller #0 PREEMPT(lazy) [ 31.803722][ T3590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 31.803747][ T3590] Call Trace: [ 31.803755][ T3590] [ 31.803764][ T3590] __dump_stack+0x1d/0x30 [ 31.803793][ T3590] dump_stack_lvl+0x95/0xd0 [ 31.803892][ T3590] dump_stack+0x15/0x1b [ 31.803915][ T3590] should_fail_ex+0x262/0x280 [ 31.803944][ T3590] should_fail+0xb/0x20 [ 31.803968][ T3590] get_futex_key+0x12d/0xb10 [ 31.804103][ T3590] ? kmem_cache_alloc_noprof+0x7c/0x3f0 [ 31.804154][ T3590] futex_wait_setup+0x49/0x3e0 [ 31.804203][ T3590] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 31.804241][ T3590] ? hrtimer_active+0xe4/0x110 [ 31.804262][ T3590] __futex_wait+0xa9/0x260 [ 31.804280][ T3590] ? __pfx_futex_wake_mark+0x10/0x10 [ 31.804383][ T3590] futex_wait+0x98/0x1c0 [ 31.804404][ T3590] do_futex+0x391/0x460 [ 31.804475][ T3590] ? irqentry_exit+0x7d/0x610 [ 31.804501][ T3590] __se_sys_futex+0x2f6/0x370 [ 31.804572][ T3590] __x64_sys_futex+0x78/0x90 [ 31.804605][ T3590] x64_sys_call+0x22e2/0x2550 [ 31.804636][ T3590] do_syscall_64+0x112/0x360 [ 31.804709][ T3590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 31.804736][ T3590] RIP: 0033:0x7f7b3099e159 [ 31.804760][ T3590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.804779][ T3590] RSP: 002b:00007f7b2f3f70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 31.804821][ T3590] RAX: ffffffffffffffda RBX: 00007f7b30c25fa8 RCX: 00007f7b3099e159 [ 31.804839][ T3590] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7b30c25fa8 [ 31.804920][ T3590] RBP: 00007f7b30c25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 31.804935][ T3590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 31.804950][ T3590] R13: 00007f7b30c26038 R14: 00007ffca2c99970 R15: 00007ffca2c99a58 [ 31.804972][ T3590] [ 32.101769][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 32.101792][ T29] audit: type=1400 audit(1789683658.372:192): avc: denied { mount } for pid=3594 comm="syz.1.27" name="/" dev="configfs" ino=1051 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 32.105215][ T29] audit: type=1400 audit(1789683658.372:193): avc: denied { search } for pid=3594 comm="syz.1.27" name="/" dev="configfs" ino=1051 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 32.111789][ T29] audit: type=1400 audit(1789683658.372:194): avc: denied { search } for pid=3594 comm="syz.1.27" name="usb_gadget" dev="configfs" ino=1119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 32.135480][ T29] audit: type=1400 audit(1789683658.382:195): avc: denied { write search } for pid=3594 comm="syz.1.27" name="usb_gadget" dev="configfs" ino=1119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 32.135507][ T29] audit: type=1400 audit(1789683658.402:196): avc: denied { add_name } for pid=3594 comm="syz.1.27" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 32.135854][ T29] audit: type=1400 audit(1789683658.412:197): avc: denied { create } for pid=3594 comm="syz.1.27" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 32.248138][ T29] audit: type=1400 audit(1789683658.522:198): avc: denied { cpu } for pid=3595 comm="syz.0.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 32.248858][ T29] audit: type=1400 audit(1789683658.522:199): avc: denied { search } for pid=3594 comm="syz.1.27" name="/" dev="configfs" ino=1051 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 32.248958][ T29] audit: type=1400 audit(1789683658.522:200): avc: denied { search } for pid=3594 comm="syz.1.27" name="usb_gadget" dev="configfs" ino=1119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 32.248983][ T29] audit: type=1400 audit(1789683658.522:201): avc: denied { search } for pid=3594 comm="syz.1.27" name="g1" dev="configfs" ino=5301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 32.559572][ T3617] FAULT_INJECTION: forcing a failure. [ 32.559572][ T3617] name failslab, interval 1, probability 0, space 0, times 1 [ 32.559650][ T3617] CPU: 0 UID: 0 PID: 3617 Comm: syz.0.35 Not tainted syzkaller #0 PREEMPT(lazy) [ 32.559807][ T3617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 32.559820][ T3617] Call Trace: [ 32.559827][ T3617] [ 32.559835][ T3617] __dump_stack+0x1d/0x30 [ 32.559881][ T3617] dump_stack_lvl+0x95/0xd0 [ 32.559906][ T3617] dump_stack+0x15/0x1b [ 32.559929][ T3617] should_fail_ex+0x262/0x280 [ 32.559994][ T3617] should_failslab+0x8c/0xb0 [ 32.560024][ T3617] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 32.560054][ T3617] ? sock_alloc_inode+0x36/0xf0 [ 32.560096][ T3617] ? sock_alloc_inode+0x36/0xf0 [ 32.560123][ T3617] ? selinux_socket_create+0xfd/0x180 [ 32.560173][ T3617] ? __pfx_sock_alloc_inode+0x10/0x10 [ 32.560202][ T3617] sock_alloc_inode+0x36/0xf0 [ 32.560255][ T3617] alloc_inode+0x40/0x170 [ 32.560378][ T3617] __sock_create+0x121/0x580 [ 32.560405][ T3617] ? __se_sys_futex+0x2f6/0x370 [ 32.560463][ T3617] ? xfd_validate_state+0x45/0xf0 [ 32.560495][ T3617] __sys_socket+0xaf/0x180 [ 32.560525][ T3617] __x64_sys_socket+0x3f/0x50 [ 32.560620][ T3617] x64_sys_call+0x246e/0x2550 [ 32.560674][ T3617] do_syscall_64+0x112/0x360 [ 32.560712][ T3617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 32.560738][ T3617] RIP: 0033:0x7fea1670e159 [ 32.560833][ T3617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.560853][ T3617] RSP: 002b:00007fea15167028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 32.560876][ T3617] RAX: ffffffffffffffda RBX: 00007fea16995fa0 RCX: 00007fea1670e159 [ 32.560893][ T3617] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 32.560959][ T3617] RBP: 00007fea167a506b R08: 0000000000000000 R09: 0000000000000000 [ 32.560974][ T3617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 32.560998][ T3617] R13: 00007fea16996038 R14: 00007fea16995fa0 R15: 00007ffd96c2b1e8 [ 32.561018][ T3617] [ 32.563260][ T3617] socket: no more sockets [ 33.042272][ T3629] FAULT_INJECTION: forcing a failure. [ 33.042272][ T3629] name failslab, interval 1, probability 0, space 0, times 0 [ 33.042604][ T3629] CPU: 0 UID: 0 PID: 3629 Comm: syz.2.39 Not tainted syzkaller #0 PREEMPT(lazy) [ 33.042632][ T3629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.042644][ T3629] Call Trace: [ 33.042650][ T3629] [ 33.042657][ T3629] __dump_stack+0x1d/0x30 [ 33.042685][ T3629] dump_stack_lvl+0x95/0xd0 [ 33.042748][ T3629] dump_stack+0x15/0x1b [ 33.042767][ T3629] should_fail_ex+0x262/0x280 [ 33.042792][ T3629] should_failslab+0x8c/0xb0 [ 33.042911][ T3629] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 33.042948][ T3629] ? sock_alloc_inode+0x36/0xf0 [ 33.042979][ T3629] ? sock_alloc_inode+0x36/0xf0 [ 33.043004][ T3629] ? selinux_socket_create+0xfd/0x180 [ 33.043093][ T3629] ? __pfx_sock_alloc_inode+0x10/0x10 [ 33.043119][ T3629] sock_alloc_inode+0x36/0xf0 [ 33.043161][ T3629] alloc_inode+0x40/0x170 [ 33.043225][ T3629] __sock_create+0x121/0x580 [ 33.043296][ T3629] ? __se_sys_futex+0x2f6/0x370 [ 33.043326][ T3629] ? xfd_validate_state+0x45/0xf0 [ 33.043354][ T3629] __sys_socket+0xaf/0x180 [ 33.043438][ T3629] __x64_sys_socket+0x3f/0x50 [ 33.043468][ T3629] x64_sys_call+0x246e/0x2550 [ 33.043551][ T3629] do_syscall_64+0x112/0x360 [ 33.043591][ T3629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.043747][ T3629] RIP: 0033:0x7efe6813e159 [ 33.043765][ T3629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.043786][ T3629] RSP: 002b:00007efe66b97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 33.043809][ T3629] RAX: ffffffffffffffda RBX: 00007efe683c5fa0 RCX: 00007efe6813e159 [ 33.043825][ T3629] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 33.043855][ T3629] RBP: 00007efe681d506b R08: 0000000000000000 R09: 0000000000000000 [ 33.043870][ T3629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 33.043886][ T3629] R13: 00007efe683c6038 R14: 00007efe683c5fa0 R15: 00007ffe19a7dd08 [ 33.043905][ T3629] [ 33.119576][ T3629] socket: no more sockets [ 33.583411][ T3651] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.49'. [ 33.583442][ T3651] netlink: zone id is out of range [ 33.583456][ T3651] netlink: zone id is out of range [ 33.583464][ T3651] netlink: zone id is out of range [ 33.583476][ T3651] netlink: zone id is out of range [ 33.583482][ T3651] netlink: zone id is out of range [ 33.583489][ T3651] netlink: zone id is out of range [ 33.587216][ T3651] netlink: del zone limit has 4 unknown bytes [ 33.692026][ T3664] ./dev/sda1: Can't lookup blockdev [ 35.146788][ T3695] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.66'. [ 35.147520][ T3695] netlink: zone id is out of range [ 35.392972][ T3705] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 35.524426][ T3729] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 35.537699][ T42] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 35.980855][ T3733] netlink: 16222 bytes leftover after parsing attributes in process `syz.0.79'. [ 37.341832][ T3785] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 38.231171][ T29] kauditd_printk_skb: 87 callbacks suppressed [ 38.231273][ T29] audit: type=1400 audit(1789683664.502:289): avc: denied { write } for pid=3793 comm="syz.4.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.262831][ T29] audit: type=1400 audit(1789683664.532:290): avc: denied { setopt } for pid=3793 comm="syz.4.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 38.263065][ T29] audit: type=1400 audit(1789683664.532:291): avc: denied { read } for pid=3793 comm="syz.4.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 39.183400][ T3725] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 39.309084][ T29] audit: type=1400 audit(1789683665.582:292): avc: denied { create } for pid=3827 comm="syz.1.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 40.610348][ T51] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 40.730767][ T3878] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 40.746699][ T29] audit: type=1400 audit(1789683667.002:293): avc: denied { mounton } for pid=3864 comm="syz.0.122" path="/25/sys/bus/pci/rescan" dev="sysfs" ino=446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=file permissive=1 [ 41.778509][ T3894] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.130'. [ 42.575096][ T3913] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 43.515686][ T3865] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 43.951598][ T29] audit: type=1400 audit(1789683670.222:294): avc: denied { create } for pid=3944 comm="syz.4.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 43.953409][ T29] audit: type=1400 audit(1789683670.222:295): avc: denied { write } for pid=3944 comm="syz.4.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 44.108082][ T3949] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 45.264463][ T3980] netlink: 16222 bytes leftover after parsing attributes in process `syz.3.157'. [ 46.020044][ T29] audit: type=1400 audit(1789683672.292:296): avc: denied { setopt } for pid=4002 comm="syz.4.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 46.058057][ T29] audit: type=1400 audit(1789683672.332:297): avc: denied { create } for pid=4004 comm="syz.4.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 47.107553][ T4028] loop0: detected capacity change from 0 to 512 [ 47.119710][ T4028] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #15: comm syz.0.174: iget: bad i_size value: 38620345925642 [ 47.119743][ T4028] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 47.119876][ T4028] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.174: couldn't read orphan inode 15 (err -117) [ 47.119905][ T4028] loop0: lost filesystem error report for type 5 error -117 [ 47.120535][ T4028] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.120753][ T29] audit: type=1400 audit(1789683673.392:298): avc: denied { mount } for pid=4027 comm="syz.0.174" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 47.129705][ T29] audit: type=1400 audit(1789683673.402:299): avc: denied { write } for pid=4027 comm="syz.0.174" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 47.129733][ T29] audit: type=1400 audit(1789683673.402:300): avc: denied { add_name } for pid=4027 comm="syz.0.174" name="cpuset.effective_mems" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 47.129757][ T29] audit: type=1400 audit(1789683673.402:301): avc: denied { create } for pid=4027 comm="syz.0.174" name="cpuset.effective_mems" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 47.129787][ T29] audit: type=1400 audit(1789683673.402:302): avc: denied { read append open } for pid=4027 comm="syz.0.174" path="/38/file0/cpuset.effective_mems" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 47.270493][ T29] audit: type=1400 audit(1789683673.542:303): avc: denied { firmware_load } for pid=4027 comm="syz.0.174" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 47.312552][ T4039] EXT4-fs warning (device loop0): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 47.626234][ T4032] EXT4-fs error (device loop0): ext4_validate_block_bitmap:436: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 47.669914][ T42] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 47.669942][ T42] EXT4-fs (loop0): This should not happen!! Data will be lost [ 47.669942][ T42] [ 47.669953][ T42] EXT4-fs (loop0): Total free blocks count 0 [ 47.669966][ T42] EXT4-fs (loop0): Free/Dirty block details [ 47.670009][ T42] EXT4-fs (loop0): free_blocks=0 [ 47.670020][ T42] EXT4-fs (loop0): dirty_blocks=11776 [ 47.670031][ T42] EXT4-fs (loop0): Block reservation details [ 47.670044][ T42] EXT4-fs (loop0): i_reserved_data_blocks=11776 [ 47.771616][ T42] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 47.951954][ T4048] : renamed from bond_slave_0 (while UP) [ 47.970329][ T3295] EXT4-fs warning (device loop0): ext4_evict_inode:196: inode #18: comm syz-executor: data will be lost [ 48.185864][ T4051] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.182'. [ 48.185894][ T4051] net_ratelimit: 6 callbacks suppressed [ 48.185904][ T4051] netlink: zone id is out of range [ 48.185915][ T4051] netlink: zone id is out of range [ 48.186148][ T4051] netlink: zone id is out of range [ 48.186459][ T4051] netlink: zone id is out of range [ 48.186465][ T4051] netlink: zone id is out of range [ 48.186472][ T4051] netlink: zone id is out of range [ 48.190576][ T4051] netlink: del zone limit has 4 unknown bytes [ 49.583962][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 49.583976][ T29] audit: type=1400 audit(1789683675.852:305): avc: denied { search } for pid=4079 comm="syz.0.190" name="/" dev="configfs" ino=1051 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 49.583999][ T29] audit: type=1400 audit(1789683675.852:306): avc: denied { search } for pid=4079 comm="syz.0.190" name="usb_gadget" dev="configfs" ino=1119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 49.584151][ T29] audit: type=1400 audit(1789683675.852:307): avc: denied { search } for pid=4079 comm="syz.0.190" name="g1" dev="configfs" ino=5301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 49.584173][ T29] audit: type=1400 audit(1789683675.852:308): avc: denied { search } for pid=4079 comm="syz.0.190" name="functions" dev="configfs" ino=5302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 49.584199][ T29] audit: type=1400 audit(1789683675.852:309): avc: denied { search } for pid=4079 comm="syz.0.190" name="hid.usb0" dev="configfs" ino=4816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 49.898289][ T29] audit: type=1400 audit(1789683676.172:310): avc: denied { create } for pid=4087 comm="syz.0.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 50.172945][ T4110] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 50.862378][ T4059] Set syz1 is full, maxelem 65536 reached [ 52.295657][ T29] audit: type=1400 audit(1789683678.572:311): avc: denied { getopt } for pid=4178 comm="syz.4.233" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 52.297951][ T29] audit: type=1400 audit(1789683678.572:312): avc: denied { name_bind } for pid=4178 comm="syz.4.233" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 52.297979][ T29] audit: type=1400 audit(1789683678.572:313): avc: denied { node_bind } for pid=4178 comm="syz.4.233" saddr=224.0.0.2 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 52.916901][ T4203] netlink: 144 bytes leftover after parsing attributes in process `syz.0.235'. [ 55.784843][ T4262] loop1: detected capacity change from 0 to 128 [ 55.808647][ T4262] syz.1.256: attempt to access beyond end of device [ 55.808647][ T4262] loop1: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 55.810665][ T29] audit: type=1400 audit(1789683682.072:314): avc: denied { mount } for pid=4259 comm="syz.1.256" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 56.245419][ T4225] Set syz1 is full, maxelem 65536 reached [ 56.388274][ T29] audit: type=1400 audit(1789683682.662:315): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 56.390883][ T4274] syzkaller0: entered promiscuous mode [ 56.390903][ T4274] syzkaller0: entered allmulticast mode [ 56.541030][ T4282] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.265'. [ 56.859854][ T4292] netlink: 144 bytes leftover after parsing attributes in process `syz.1.268'. [ 57.121107][ T4297] syzkaller0: entered promiscuous mode [ 57.121126][ T4297] syzkaller0: entered allmulticast mode [ 57.381468][ T4312] loop2: detected capacity change from 0 to 128 [ 57.771377][ T4306] syz.2.273: attempt to access beyond end of device [ 57.771377][ T4306] loop2: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 57.809741][ T4319] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.277'. [ 57.922682][ T29] audit: type=1400 audit(1789683684.192:316): avc: denied { ioctl } for pid=4321 comm="syz.4.279" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 57.957476][ T4318] syzkaller0: entered promiscuous mode [ 57.957496][ T4318] syzkaller0: entered allmulticast mode [ 58.164812][ T29] audit: type=1400 audit(1789683684.432:317): avc: denied { write } for pid=4321 comm="syz.4.279" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 58.873188][ T4356] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.290'. [ 59.074329][ T4373] ¥: port 1(bond0) entered blocking state [ 59.074451][ T4373] ¥: port 1(bond0) entered disabled state [ 59.074759][ T4373] bond0: entered allmulticast mode [ 59.074785][ T4373] : entered allmulticast mode [ 59.074828][ T4373] bond_slave_1: entered allmulticast mode [ 59.114914][ T4373] bond0: entered promiscuous mode [ 59.115008][ T4373] : entered promiscuous mode [ 59.115282][ T4373] bond_slave_1: entered promiscuous mode [ 59.704666][ T4387] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.303'. [ 59.896867][ T4362] Set syz1 is full, maxelem 65536 reached [ 60.049738][ T4410] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.314'. [ 60.086391][ T4406] syzkaller0: entered promiscuous mode [ 60.086472][ T4406] syzkaller0: entered allmulticast mode [ 60.129303][ T4416] netlink: 'syz.3.301': attribute type 3 has an invalid length. [ 60.400286][ T4432] ¥: port 1(bond0) entered blocking state [ 60.400452][ T4432] ¥: port 1(bond0) entered disabled state [ 60.400844][ T4432] bond0: entered allmulticast mode [ 60.400965][ T4432] : entered allmulticast mode [ 60.401009][ T4432] bond_slave_1: entered allmulticast mode [ 60.404484][ T4432] bond0: entered promiscuous mode [ 60.404527][ T4432] : entered promiscuous mode [ 60.404670][ T4432] bond_slave_1: entered promiscuous mode [ 60.947124][ T4438] netlink: 144 bytes leftover after parsing attributes in process `syz.1.324'. [ 61.279760][ T4443] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.326'. [ 61.322160][ T4447] netlink: 'syz.0.328': attribute type 10 has an invalid length. [ 61.399619][ T4447] team0: Device gre0 is of different type [ 61.495377][ T4467] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.338'. [ 61.528244][ T4460] ¥: port 1(bond0) entered blocking state [ 61.528359][ T4460] ¥: port 1(bond0) entered disabled state [ 61.528535][ T4460] bond0: entered allmulticast mode [ 61.528577][ T4460] : entered allmulticast mode [ 61.528620][ T4460] bond_slave_1: entered allmulticast mode [ 61.546013][ T4460] bond0: entered promiscuous mode [ 61.546082][ T4460] : entered promiscuous mode [ 61.546409][ T4460] bond_slave_1: entered promiscuous mode [ 61.822108][ T4499] netlink: 'syz.1.341': attribute type 3 has an invalid length. [ 61.936533][ T4506] netlink: 'syz.2.354': attribute type 10 has an invalid length. [ 62.053082][ T4506] team0: Device gre0 is of different type [ 62.167397][ T4511] syzkaller0: entered promiscuous mode [ 62.167418][ T4511] syzkaller0: entered allmulticast mode [ 62.255617][ T4506] syz.2.354 (4506) used greatest stack depth: 9288 bytes left [ 62.279142][ T29] audit: type=1400 audit(1789683688.552:318): avc: denied { read } for pid=4516 comm="syz.4.358" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 62.279250][ T29] audit: type=1400 audit(1789683688.552:319): avc: denied { open } for pid=4516 comm="syz.4.358" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 62.279491][ T29] audit: type=1400 audit(1789683688.552:320): avc: denied { ioctl } for pid=4516 comm="syz.4.358" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 62.601564][ T29] audit: type=1400 audit(1789683688.872:321): avc: denied { write } for pid=4536 comm="syz.0.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 62.601591][ T29] audit: type=1400 audit(1789683688.872:322): avc: denied { connect } for pid=4536 comm="syz.0.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 62.601615][ T29] audit: type=1400 audit(1789683688.872:323): avc: denied { name_connect } for pid=4536 comm="syz.0.367" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 62.743133][ T29] audit: type=1400 audit(1789683689.012:324): avc: denied { create } for pid=4557 comm="syz.1.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 62.747996][ T29] audit: type=1400 audit(1789683689.022:325): avc: denied { bpf } for pid=4558 comm="syz.2.378" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 62.750157][ T29] audit: type=1400 audit(1789683689.022:326): avc: denied { perfmon } for pid=4558 comm="syz.2.378" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 62.998129][ T4578] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 63.034403][ T4539] Set syz1 is full, maxelem 65536 reached [ 63.038976][ T29] audit: type=1400 audit(1789683689.312:327): avc: denied { write } for pid=4580 comm="syz.4.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 63.057960][ T4581] netlink: 'syz.4.386': attribute type 10 has an invalid length. [ 63.174890][ T4581] team0: Device gre0 is of different type [ 63.275640][ T4587] loop2: detected capacity change from 0 to 128 [ 63.283110][ T4587] syz.2.387: attempt to access beyond end of device [ 63.283110][ T4587] loop2: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 64.019232][ T4581] syz.4.386 (4581) used greatest stack depth: 8968 bytes left [ 64.062801][ T4598] netlink: 'syz.2.393': attribute type 10 has an invalid length. [ 64.176737][ T4589] Set syz1 is full, maxelem 65536 reached [ 64.214261][ T4598] team0: Device gre0 is of different type [ 64.630797][ T4616] Set syz1 is full, maxelem 65536 reached [ 64.890694][ T4638] netlink: 144 bytes leftover after parsing attributes in process `syz.3.411'. [ 64.924860][ T4625] Set syz1 is full, maxelem 65536 reached [ 65.298970][ T4656] Set syz1 is full, maxelem 65536 reached [ 65.557339][ T4683] netlink: 'syz.0.431': attribute type 10 has an invalid length. [ 65.682951][ T4683] team0: Device gre0 is of different type [ 65.813097][ T4691] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 66.848007][ T4744] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.450'. [ 67.170566][ T4719] Set syz1 is full, maxelem 65536 reached [ 67.297415][ T4766] netlink: 'syz.4.461': attribute type 10 has an invalid length. [ 67.384146][ T4781] netlink: 'syz.3.468': attribute type 10 has an invalid length. [ 67.407254][ T4766] team0: Device gre0 is of different type [ 67.594401][ T4781] team0: Device gre0 is of different type [ 67.620249][ T4784] Set syz1 is full, maxelem 65536 reached [ 67.676134][ T4794] netlink: 16386 bytes leftover after parsing attributes in process `syz.4.472'. [ 67.855401][ T4816] netlink: 'syz.4.482': attribute type 10 has an invalid length. [ 67.925904][ T4816] team0: Device gre0 is of different type [ 67.939969][ T4823] netlink: 16386 bytes leftover after parsing attributes in process `syz.2.485'. [ 67.970458][ T4825] netlink: 144 bytes leftover after parsing attributes in process `syz.2.486'. [ 68.017592][ T4828] syzkaller0: entered promiscuous mode [ 68.017613][ T4828] syzkaller0: entered allmulticast mode [ 68.030297][ T4830] netlink: 'syz.3.488': attribute type 10 has an invalid length. [ 68.076199][ T4830] team0: Device gre0 is of different type [ 68.080993][ T4834] netlink: 'syz.1.490': attribute type 10 has an invalid length. [ 68.168886][ T4834] team0: Device gre0 is of different type [ 68.182617][ T4843] loop2: detected capacity change from 0 to 512 [ 68.198364][ T4843] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #15: comm syz.2.494: iget: bad i_size value: 38620345925642 [ 68.198398][ T4843] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 68.199313][ T4843] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.494: couldn't read orphan inode 15 (err -117) [ 68.199422][ T4843] loop2: lost filesystem error report for type 5 error -117 [ 68.200834][ T4843] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.205239][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 68.205253][ T29] audit: type=1400 audit(1789683694.472:329): avc: denied { write } for pid=4842 comm="syz.2.494" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 68.327712][ T4843] EXT4-fs warning (device loop2): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 68.337304][ T4855] netlink: 16386 bytes leftover after parsing attributes in process `syz.3.497'. [ 68.356089][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.381987][ T3911] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 68.401935][ T4861] syzkaller0: entered promiscuous mode [ 68.402057][ T4861] syzkaller0: entered allmulticast mode [ 68.712736][ T4879] loop2: detected capacity change from 0 to 512 [ 68.715759][ T4879] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #15: comm syz.2.508: iget: bad i_size value: 38620345925642 [ 68.715790][ T4879] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 68.716218][ T4879] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.508: couldn't read orphan inode 15 (err -117) [ 68.716251][ T4879] loop2: lost filesystem error report for type 5 error -117 [ 68.716982][ T4879] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.720033][ T29] audit: type=1400 audit(1789683694.992:330): avc: denied { write } for pid=4878 comm="syz.2.508" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 68.775333][ T29] audit: type=1400 audit(1789683695.042:331): avc: denied { map } for pid=4878 comm="syz.2.508" path="/115/file0/cpuset.effective_mems" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 68.777246][ T29] audit: type=1400 audit(1789683695.052:332): avc: denied { write } for pid=4878 comm="syz.2.508" path="/115/file0/cpuset.effective_mems" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 68.837759][ T4881] EXT4-fs warning (device loop2): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 68.916583][ T4891] netlink: 'syz.4.513': attribute type 10 has an invalid length. [ 68.945714][ T4891] team0: Device gre0 is of different type [ 69.446938][ T4903] netlink: 144 bytes leftover after parsing attributes in process `syz.0.517'. [ 69.679287][ T4908] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 70.036677][ T4912] netlink: 144 bytes leftover after parsing attributes in process `syz.4.520'. [ 70.141384][ T4922] netlink: 'syz.4.525': attribute type 10 has an invalid length. [ 70.171145][ T4922] team0: Device gre0 is of different type [ 70.430358][ T4940] bond0: left allmulticast mode [ 70.430439][ T4940] : left allmulticast mode [ 70.430456][ T4940] bond_slave_1: left allmulticast mode [ 70.430509][ T4940] bond0: left promiscuous mode [ 70.430521][ T4940] : left promiscuous mode [ 70.430573][ T4940] bond_slave_1: left promiscuous mode [ 70.430767][ T4940] ¥: port 1(bond0) entered disabled state [ 70.438736][ T4940] bridge_slave_0: left allmulticast mode [ 70.438756][ T4940] bridge_slave_0: left promiscuous mode [ 70.438903][ T4940] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.447299][ T4940] bridge_slave_1: left allmulticast mode [ 70.447319][ T4940] bridge_slave_1: left promiscuous mode [ 70.447576][ T4940] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.516716][ T4940] bond0: (slave 30): Releasing backup interface [ 70.519368][ T4940] bond0: (slave bond_slave_1): Releasing backup interface [ 70.522982][ T4940] team0: Port device team_slave_0 removed [ 70.525930][ T4940] team0: Port device team_slave_1 removed [ 70.526934][ T4940] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.526949][ T4940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.534139][ T4940] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.534153][ T4940] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.542458][ T4940] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 70.685873][ T4953] bond0: left allmulticast mode [ 70.685894][ T4953] : left allmulticast mode [ 70.685911][ T4953] bond_slave_1: left allmulticast mode [ 70.685958][ T4953] bond0: left promiscuous mode [ 70.686046][ T4953] : left promiscuous mode [ 70.686188][ T4953] bond_slave_1: left promiscuous mode [ 70.686473][ T4953] ¥: port 1(bond0) entered disabled state [ 70.704639][ T4953] bridge_slave_0: left allmulticast mode [ 70.704660][ T4953] bridge_slave_0: left promiscuous mode [ 70.704745][ T4953] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.707119][ T4953] bridge_slave_1: left allmulticast mode [ 70.707157][ T4953] bridge_slave_1: left promiscuous mode [ 70.707296][ T4953] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.726899][ T4953] bond0: (slave 30): Releasing backup interface [ 70.745195][ T4953] bond0: (slave bond_slave_1): Releasing backup interface [ 70.774105][ T4953] team0: Port device team_slave_0 removed [ 70.790063][ T4953] team0: Port device team_slave_1 removed [ 70.791005][ T4953] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.791025][ T4953] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.792206][ T4953] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.792215][ T4953] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.794334][ T4953] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 70.871051][ T4962] syzkaller0: entered promiscuous mode [ 70.871097][ T4962] syzkaller0: entered allmulticast mode [ 70.898070][ T29] audit: type=1400 audit(1789683697.172:333): avc: denied { read write } for pid=4965 comm="syz.4.546" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 70.898155][ T29] audit: type=1400 audit(1789683697.172:334): avc: denied { open } for pid=4965 comm="syz.4.546" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 70.968588][ T4970] ¥: port 1(bond0) entered blocking state [ 70.968664][ T4970] ¥: port 1(bond0) entered disabled state [ 70.968981][ T4970] bond0: entered allmulticast mode [ 70.973935][ T4970] bond0: entered promiscuous mode [ 71.011892][ T4972] syzkaller0: entered promiscuous mode [ 71.011912][ T4972] syzkaller0: entered allmulticast mode [ 71.172377][ T4989] syzkaller0: entered promiscuous mode [ 71.172452][ T4989] syzkaller0: entered allmulticast mode [ 71.222747][ T29] audit: type=1326 audit(1789683697.492:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4992 comm="syz.3.559" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3099e159 code=0x7ffc0000 [ 71.223690][ T29] audit: type=1326 audit(1789683697.492:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4992 comm="syz.3.559" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f7b3099e159 code=0x7ffc0000 [ 71.223786][ T29] audit: type=1326 audit(1789683697.492:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4992 comm="syz.3.559" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3099e159 code=0x7ffc0000 [ 71.226061][ T29] audit: type=1326 audit(1789683697.492:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4992 comm="syz.3.559" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7b3099e159 code=0x7ffc0000 [ 71.281124][ T4996] loop4: detected capacity change from 0 to 128 [ 71.327462][ T4850] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 71.340058][ T4996] syz.4.551: attempt to access beyond end of device [ 71.340058][ T4996] loop4: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 71.362299][ T51] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm kworker/u8:3: bg 0: block 5: invalid block bitmap [ 71.362582][ T51] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1684 with error 28 [ 71.362686][ T51] EXT4-fs (loop2): This should not happen!! Data will be lost [ 71.362686][ T51] [ 71.362700][ T51] EXT4-fs (loop2): Total free blocks count 0 [ 71.362714][ T51] EXT4-fs (loop2): Free/Dirty block details [ 71.362727][ T51] EXT4-fs (loop2): free_blocks=0 [ 71.362745][ T51] EXT4-fs (loop2): dirty_blocks=1688 [ 71.362757][ T51] EXT4-fs (loop2): Block reservation details [ 71.362766][ T51] EXT4-fs (loop2): i_reserved_data_blocks=1688 [ 71.389202][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.682590][ T5009] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 71.979030][ T5012] ¥: port 1(bond0) entered blocking state [ 71.979146][ T5012] ¥: port 1(bond0) entered disabled state [ 71.980286][ T5012] bond0: entered allmulticast mode [ 71.982529][ T5012] bond0: entered promiscuous mode [ 72.139912][ T5024] syzkaller0: entered promiscuous mode [ 72.139933][ T5024] syzkaller0: entered allmulticast mode [ 72.535682][ T5069] netlink: 16222 bytes leftover after parsing attributes in process `syz.2.591'. [ 72.662186][ T5084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.598'. [ 72.736396][ T5078] netlink: 'syz.3.589': attribute type 3 has an invalid length. [ 72.884035][ T5100] syzkaller0: entered promiscuous mode [ 72.884052][ T5100] syzkaller0: entered allmulticast mode [ 72.911617][ T5102] netlink: 88 bytes leftover after parsing attributes in process `syz.0.607'. [ 73.419479][ T5131] syzkaller0: entered promiscuous mode [ 73.419498][ T5131] syzkaller0: entered allmulticast mode [ 73.649920][ T5146] syzkaller0: entered promiscuous mode [ 73.649940][ T5146] syzkaller0: entered allmulticast mode [ 74.128014][ T5172] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 74.596532][ T5195] netlink: 144 bytes leftover after parsing attributes in process `syz.0.650'. [ 74.901494][ T5219] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 75.211459][ T5229] loop0: detected capacity change from 0 to 512 [ 75.227055][ T5229] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #15: comm syz.0.665: iget: bad i_size value: 38620345925642 [ 75.227156][ T5229] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 75.227570][ T5229] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.665: couldn't read orphan inode 15 (err -117) [ 75.227652][ T5229] loop0: lost filesystem error report for type 5 error -117 [ 75.228707][ T5229] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.258515][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 75.258529][ T29] audit: type=1400 audit(1789683701.532:404): avc: denied { write } for pid=5227 comm="syz.0.665" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 75.371882][ T29] audit: type=1400 audit(1789683701.642:405): avc: denied { create } for pid=5243 comm="syz.3.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 75.372511][ T29] audit: type=1400 audit(1789683701.642:406): avc: denied { connect } for pid=5243 comm="syz.3.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 75.372812][ T29] audit: type=1400 audit(1789683701.642:407): avc: denied { ioctl } for pid=5243 comm="syz.3.671" path="socket:[9938]" dev="sockfs" ino=9938 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 75.431946][ T5241] EXT4-fs warning (device loop0): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 75.588672][ T29] audit: type=1400 audit(1789683701.862:408): avc: denied { setopt } for pid=5265 comm="syz.4.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 75.588999][ T2982] ================================================================== [ 75.589032][ T2982] BUG: KCSAN: data-race in dentry_unlink_inode / step_into_slowpath [ 75.589067][ T2982] [ 75.589073][ T2982] write to 0xffff888107222870 of 8 bytes by task 3288 on cpu 0: [ 75.589092][ T2982] dentry_unlink_inode+0x65/0x260 [ 75.589120][ T2982] d_delete+0x164/0x180 [ 75.589146][ T2982] d_delete_notify+0x32/0x100 [ 75.589176][ T2982] vfs_unlink+0x287/0x490 [ 75.589204][ T2982] filename_unlinkat+0x1dc/0x410 [ 75.589238][ T2982] __se_sys_unlink+0x2b/0xe0 [ 75.589270][ T2982] __x64_sys_unlink+0x1f/0x30 [ 75.589299][ T2982] x64_sys_call+0x18ee/0x2550 [ 75.589323][ T2982] do_syscall_64+0x112/0x360 [ 75.589358][ T2982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.589378][ T2982] [ 75.589383][ T2982] read to 0xffff888107222870 of 8 bytes by task 2982 on cpu 1: [ 75.589397][ T2982] step_into_slowpath+0x12c/0x4c0 [ 75.589419][ T2982] path_lookupat+0x2eb/0x4c0 [ 75.589442][ T2982] filename_lookup+0x18f/0x390 [ 75.589461][ T2982] do_readlinkat+0x74/0x2f0 [ 75.589482][ T2982] __x64_sys_readlink+0x47/0x60 [ 75.589504][ T2982] x64_sys_call+0x1d41/0x2550 [ 75.589531][ T2982] do_syscall_64+0x112/0x360 [ 75.589559][ T2982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.589583][ T2982] [ 75.589587][ T2982] value changed: 0xffff8881046e6120 -> 0x0000000000000000 [ 75.589599][ T2982] [ 75.589603][ T2982] Reported by Kernel Concurrency Sanitizer on: [ 75.589615][ T2982] CPU: 1 UID: 0 PID: 2982 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) [ 75.589640][ T2982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 75.589651][ T2982] ================================================================== [ 75.647367][ T29] audit: type=1400 audit(1789683701.922:409): avc: denied { ioctl } for pid=5265 comm="syz.4.682" path="socket:[9970]" dev="sockfs" ino=9970 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 75.647947][ T5267] netlink: 4 bytes leftover after parsing attributes in process `syz.4.682'. [ 75.719704][ T3422] EXT4-fs error (device loop0): ext4_validate_block_bitmap:436: comm kworker/u8:7: bg 0: block 5: invalid block bitmap [ 75.720076][ T3422] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 804 with error 28 [ 75.720098][ T3422] EXT4-fs (loop0): This should not happen!! Data will be lost [ 75.720098][ T3422] [ 75.720188][ T3422] EXT4-fs (loop0): Total free blocks count 0 [ 75.720202][ T3422] EXT4-fs (loop0): Free/Dirty block details [ 75.720213][ T3422] EXT4-fs (loop0): free_blocks=0 [ 75.720226][ T3422] EXT4-fs (loop0): dirty_blocks=808 [ 75.720238][ T3422] EXT4-fs (loop0): Block reservation details [ 75.720249][ T3422] EXT4-fs (loop0): i_reserved_data_blocks=808 [ 75.749064][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.